Add QUIC 31 in which the server's proof covers both the static server config as well as a hash of t…

net/quic/crypto/crypto_utils.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/crypto/crypto_utils.h"
 
 #include "crypto/hkdf.h"
+#include "crypto/secure_hash.h"
 #include "net/base/url_util.h"
 #include "net/quic/crypto/crypto_handshake.h"
 #include "net/quic/crypto/crypto_protocol.h"
 #include "net/quic/crypto/quic_decrypter.h"
 #include "net/quic/crypto/quic_encrypter.h"
 #include "net/quic/crypto/quic_random.h"
 #include "net/quic/quic_time.h"
 #include "net/quic/quic_utils.h"
 #include "url/url_canon.h"
 
@@ skipping 249 matching lines @@
 
     RETURN_STRING_LITERAL(INVALID_EXPECTED_LEAF_CERTIFICATE);
     RETURN_STRING_LITERAL(MAX_FAILURE_REASON);
   }
   // Return a default value so that we return this when |reason| doesn't match
   // any HandshakeFailureReason.. This can happen when the message by the peer
   // (attacker) has invalid reason.
   return "INVALID_HANDSHAKE_FAILURE_REASON";
 }
 
+// static
+void CryptoUtils::HashHandshakeMessage(const CryptoHandshakeMessage& message,
+                                       string* output) {
+  const QuicData& serialized = message.GetSerialized();
+  scoped_ptr<crypto::SecureHash> hash(
+      crypto::SecureHash::Create(crypto::SecureHash::SHA256));
+  hash->Update(serialized.data(), serialized.length());
+  uint8_t digest[32];
+  hash->Finish(digest, sizeof(digest));
+  output->assign(reinterpret_cast<const char*>(&digest), sizeof(digest));
+}
+
 }  // namespace net