| Index: content/renderer/webcrypto/platform_crypto_openssl.cc
|
| diff --git a/content/renderer/webcrypto/platform_crypto_openssl.cc b/content/renderer/webcrypto/platform_crypto_openssl.cc
|
| deleted file mode 100644
|
| index e0c1e1776f49329d1e0be53228c279960125422c..0000000000000000000000000000000000000000
|
| --- a/content/renderer/webcrypto/platform_crypto_openssl.cc
|
| +++ /dev/null
|
| @@ -1,395 +0,0 @@
|
| -// Copyright 2014 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#include "content/renderer/webcrypto/platform_crypto.h"
|
| -
|
| -#include <vector>
|
| -#include <openssl/aes.h>
|
| -#include <openssl/evp.h>
|
| -#include <openssl/hmac.h>
|
| -#include <openssl/rand.h>
|
| -#include <openssl/sha.h>
|
| -
|
| -#include "base/logging.h"
|
| -#include "content/renderer/webcrypto/crypto_data.h"
|
| -#include "content/renderer/webcrypto/webcrypto_util.h"
|
| -#include "crypto/openssl_util.h"
|
| -#include "third_party/WebKit/public/platform/WebArrayBuffer.h"
|
| -#include "third_party/WebKit/public/platform/WebCryptoAlgorithm.h"
|
| -#include "third_party/WebKit/public/platform/WebCryptoAlgorithmParams.h"
|
| -#include "third_party/WebKit/public/platform/WebCryptoKeyAlgorithm.h"
|
| -
|
| -namespace content {
|
| -
|
| -namespace webcrypto {
|
| -
|
| -namespace platform {
|
| -
|
| -class SymKey : public Key {
|
| - public:
|
| - explicit SymKey(const CryptoData& key_data)
|
| - : key_(key_data.bytes(), key_data.bytes() + key_data.byte_length()) {}
|
| -
|
| - virtual SymKey* AsSymKey() OVERRIDE { return this; }
|
| - virtual PublicKey* AsPublicKey() OVERRIDE { return NULL; }
|
| - virtual PrivateKey* AsPrivateKey() OVERRIDE { return NULL; }
|
| -
|
| - const std::vector<unsigned char>& key() const { return key_; }
|
| -
|
| - private:
|
| - const std::vector<unsigned char> key_;
|
| -
|
| - DISALLOW_COPY_AND_ASSIGN(SymKey);
|
| -};
|
| -
|
| -namespace {
|
| -
|
| -const EVP_CIPHER* GetAESCipherByKeyLength(unsigned int key_length_bytes) {
|
| - // OpenSSL supports AES CBC ciphers for only 3 key lengths: 128, 192, 256 bits
|
| - switch (key_length_bytes) {
|
| - case 16:
|
| - return EVP_aes_128_cbc();
|
| - case 24:
|
| - return EVP_aes_192_cbc();
|
| - case 32:
|
| - return EVP_aes_256_cbc();
|
| - default:
|
| - return NULL;
|
| - }
|
| -}
|
| -
|
| -const EVP_MD* GetDigest(blink::WebCryptoAlgorithmId id) {
|
| - switch (id) {
|
| - case blink::WebCryptoAlgorithmIdSha1:
|
| - return EVP_sha1();
|
| - case blink::WebCryptoAlgorithmIdSha224:
|
| - return EVP_sha224();
|
| - case blink::WebCryptoAlgorithmIdSha256:
|
| - return EVP_sha256();
|
| - case blink::WebCryptoAlgorithmIdSha384:
|
| - return EVP_sha384();
|
| - case blink::WebCryptoAlgorithmIdSha512:
|
| - return EVP_sha512();
|
| - default:
|
| - return NULL;
|
| - }
|
| -}
|
| -
|
| -// OpenSSL constants for EVP_CipherInit_ex(), do not change
|
| -enum CipherOperation { kDoDecrypt = 0, kDoEncrypt = 1 };
|
| -
|
| -Status AesCbcEncryptDecrypt(EncryptOrDecrypt mode,
|
| - SymKey* key,
|
| - const CryptoData& iv,
|
| - const CryptoData& data,
|
| - blink::WebArrayBuffer* buffer) {
|
| - CipherOperation cipher_operation =
|
| - (mode == ENCRYPT) ? kDoEncrypt : kDoDecrypt;
|
| -
|
| - if (data.byte_length() >= INT_MAX - AES_BLOCK_SIZE) {
|
| - // TODO(padolph): Handle this by chunking the input fed into OpenSSL. Right
|
| - // now it doesn't make much difference since the one-shot API would end up
|
| - // blowing out the memory and crashing anyway.
|
| - return Status::ErrorDataTooLarge();
|
| - }
|
| -
|
| - // Note: PKCS padding is enabled by default
|
| - crypto::ScopedOpenSSL<EVP_CIPHER_CTX, EVP_CIPHER_CTX_free> context(
|
| - EVP_CIPHER_CTX_new());
|
| -
|
| - if (!context.get())
|
| - return Status::Error();
|
| -
|
| - const EVP_CIPHER* const cipher = GetAESCipherByKeyLength(key->key().size());
|
| - DCHECK(cipher);
|
| -
|
| - if (!EVP_CipherInit_ex(context.get(),
|
| - cipher,
|
| - NULL,
|
| - &key->key()[0],
|
| - iv.bytes(),
|
| - cipher_operation)) {
|
| - return Status::Error();
|
| - }
|
| -
|
| - // According to the openssl docs, the amount of data written may be as large
|
| - // as (data_size + cipher_block_size - 1), constrained to a multiple of
|
| - // cipher_block_size.
|
| - unsigned int output_max_len = data.byte_length() + AES_BLOCK_SIZE - 1;
|
| - const unsigned remainder = output_max_len % AES_BLOCK_SIZE;
|
| - if (remainder != 0)
|
| - output_max_len += AES_BLOCK_SIZE - remainder;
|
| - DCHECK_GT(output_max_len, data.byte_length());
|
| -
|
| - *buffer = blink::WebArrayBuffer::create(output_max_len, 1);
|
| -
|
| - unsigned char* const buffer_data =
|
| - reinterpret_cast<unsigned char*>(buffer->data());
|
| -
|
| - int output_len = 0;
|
| - if (!EVP_CipherUpdate(context.get(),
|
| - buffer_data,
|
| - &output_len,
|
| - data.bytes(),
|
| - data.byte_length()))
|
| - return Status::Error();
|
| - int final_output_chunk_len = 0;
|
| - if (!EVP_CipherFinal_ex(
|
| - context.get(), buffer_data + output_len, &final_output_chunk_len)) {
|
| - return Status::Error();
|
| - }
|
| -
|
| - const unsigned int final_output_len =
|
| - static_cast<unsigned int>(output_len) +
|
| - static_cast<unsigned int>(final_output_chunk_len);
|
| - DCHECK_LE(final_output_len, output_max_len);
|
| -
|
| - ShrinkBuffer(buffer, final_output_len);
|
| -
|
| - return Status::Success();
|
| -}
|
| -
|
| -} // namespace
|
| -
|
| -Status ExportKeyRaw(SymKey* key, blink::WebArrayBuffer* buffer) {
|
| - *buffer = CreateArrayBuffer(Uint8VectorStart(key->key()), key->key().size());
|
| - return Status::Success();
|
| -}
|
| -
|
| -void Init() { crypto::EnsureOpenSSLInit(); }
|
| -
|
| -Status EncryptDecryptAesCbc(EncryptOrDecrypt mode,
|
| - SymKey* key,
|
| - const CryptoData& data,
|
| - const CryptoData& iv,
|
| - blink::WebArrayBuffer* buffer) {
|
| - // TODO(eroman): inline the function here.
|
| - return AesCbcEncryptDecrypt(mode, key, iv, data, buffer);
|
| -}
|
| -
|
| -Status DigestSha(blink::WebCryptoAlgorithmId algorithm,
|
| - const CryptoData& data,
|
| - blink::WebArrayBuffer* buffer) {
|
| - crypto::OpenSSLErrStackTracer(FROM_HERE);
|
| -
|
| - const EVP_MD* digest_algorithm = GetDigest(algorithm);
|
| - if (!digest_algorithm)
|
| - return Status::ErrorUnexpected();
|
| -
|
| - crypto::ScopedOpenSSL<EVP_MD_CTX, EVP_MD_CTX_destroy> digest_context(
|
| - EVP_MD_CTX_create());
|
| - if (!digest_context.get())
|
| - return Status::Error();
|
| -
|
| - if (!EVP_DigestInit_ex(digest_context.get(), digest_algorithm, NULL) ||
|
| - !EVP_DigestUpdate(
|
| - digest_context.get(), data.bytes(), data.byte_length())) {
|
| - return Status::Error();
|
| - }
|
| -
|
| - const int hash_expected_size = EVP_MD_CTX_size(digest_context.get());
|
| - if (hash_expected_size <= 0)
|
| - return Status::ErrorUnexpected();
|
| - DCHECK_LE(hash_expected_size, EVP_MAX_MD_SIZE);
|
| -
|
| - *buffer = blink::WebArrayBuffer::create(hash_expected_size, 1);
|
| - unsigned char* const hash_buffer =
|
| - reinterpret_cast<unsigned char* const>(buffer->data());
|
| -
|
| - unsigned int hash_size = 0;
|
| - if (!EVP_DigestFinal_ex(digest_context.get(), hash_buffer, &hash_size) ||
|
| - static_cast<int>(hash_size) != hash_expected_size) {
|
| - buffer->reset();
|
| - return Status::Error();
|
| - }
|
| -
|
| - return Status::Success();
|
| -}
|
| -
|
| -Status GenerateSecretKey(const blink::WebCryptoAlgorithm& algorithm,
|
| - bool extractable,
|
| - blink::WebCryptoKeyUsageMask usage_mask,
|
| - unsigned keylen_bytes,
|
| - blink::WebCryptoKey* key) {
|
| - // TODO(eroman): Is this right?
|
| - if (keylen_bytes == 0)
|
| - return Status::ErrorGenerateKeyLength();
|
| -
|
| - crypto::OpenSSLErrStackTracer(FROM_HERE);
|
| -
|
| - std::vector<unsigned char> random_bytes(keylen_bytes, 0);
|
| - if (!(RAND_bytes(&random_bytes[0], keylen_bytes)))
|
| - return Status::Error();
|
| -
|
| - blink::WebCryptoKeyAlgorithm key_algorithm;
|
| - if (!CreateSecretKeyAlgorithm(algorithm, keylen_bytes, &key_algorithm))
|
| - return Status::ErrorUnexpected();
|
| -
|
| - *key = blink::WebCryptoKey::create(new SymKey(CryptoData(random_bytes)),
|
| - blink::WebCryptoKeyTypeSecret,
|
| - extractable,
|
| - key_algorithm,
|
| - usage_mask);
|
| -
|
| - return Status::Success();
|
| -}
|
| -
|
| -Status GenerateRsaKeyPair(const blink::WebCryptoAlgorithm& algorithm,
|
| - bool extractable,
|
| - blink::WebCryptoKeyUsageMask usage_mask,
|
| - unsigned int modulus_length_bits,
|
| - const CryptoData& public_exponent,
|
| - const blink::WebCryptoAlgorithm& hash,
|
| - blink::WebCryptoKey* public_key,
|
| - blink::WebCryptoKey* private_key) {
|
| - // TODO(padolph): Placeholder for OpenSSL implementation.
|
| - // Issue http://crbug.com/267888.
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status ImportKeyRaw(const blink::WebCryptoAlgorithm& algorithm,
|
| - const CryptoData& key_data,
|
| - bool extractable,
|
| - blink::WebCryptoKeyUsageMask usage_mask,
|
| - blink::WebCryptoKey* key) {
|
| -
|
| - blink::WebCryptoKeyAlgorithm key_algorithm;
|
| - if (!CreateSecretKeyAlgorithm(
|
| - algorithm, key_data.byte_length(), &key_algorithm))
|
| - return Status::ErrorUnexpected();
|
| -
|
| - *key = blink::WebCryptoKey::create(new SymKey(key_data),
|
| - blink::WebCryptoKeyTypeSecret,
|
| - extractable,
|
| - key_algorithm,
|
| - usage_mask);
|
| -
|
| - return Status::Success();
|
| -}
|
| -
|
| -Status SignHmac(SymKey* key,
|
| - const blink::WebCryptoAlgorithm& hash,
|
| - const CryptoData& data,
|
| - blink::WebArrayBuffer* buffer) {
|
| - blink::WebArrayBuffer result;
|
| -
|
| - const EVP_MD* digest_algorithm = GetDigest(hash.id());
|
| - if (!digest_algorithm)
|
| - return Status::ErrorUnsupported();
|
| - unsigned int hmac_expected_length = EVP_MD_size(digest_algorithm);
|
| -
|
| - const std::vector<unsigned char>& raw_key = key->key();
|
| -
|
| - // OpenSSL wierdness here.
|
| - // First, HMAC() needs a void* for the key data, so make one up front as a
|
| - // cosmetic to avoid a cast. Second, OpenSSL does not like a NULL key,
|
| - // which will result if the raw_key vector is empty; an entirely valid
|
| - // case. Handle this specific case by pointing to an empty array.
|
| - const unsigned char null_key[] = {};
|
| - const void* const raw_key_voidp = raw_key.size() ? &raw_key[0] : null_key;
|
| -
|
| - result = blink::WebArrayBuffer::create(hmac_expected_length, 1);
|
| - crypto::ScopedOpenSSLSafeSizeBuffer<EVP_MAX_MD_SIZE> hmac_result(
|
| - reinterpret_cast<unsigned char*>(result.data()), hmac_expected_length);
|
| -
|
| - crypto::OpenSSLErrStackTracer(FROM_HERE);
|
| -
|
| - unsigned int hmac_actual_length;
|
| - unsigned char* const success = HMAC(digest_algorithm,
|
| - raw_key_voidp,
|
| - raw_key.size(),
|
| - data.bytes(),
|
| - data.byte_length(),
|
| - hmac_result.safe_buffer(),
|
| - &hmac_actual_length);
|
| - if (!success || hmac_actual_length != hmac_expected_length)
|
| - return Status::Error();
|
| -
|
| - *buffer = result;
|
| - return Status::Success();
|
| -}
|
| -
|
| -Status ImportRsaPublicKey(const blink::WebCryptoAlgorithm& algorithm,
|
| - bool extractable,
|
| - blink::WebCryptoKeyUsageMask usage_mask,
|
| - const CryptoData& modulus_data,
|
| - const CryptoData& exponent_data,
|
| - blink::WebCryptoKey* key) {
|
| - // TODO(padolph): Placeholder for OpenSSL implementation.
|
| - // Issue
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status EncryptDecryptAesGcm(EncryptOrDecrypt mode,
|
| - SymKey* key,
|
| - const CryptoData& data,
|
| - const CryptoData& iv,
|
| - const CryptoData& additional_data,
|
| - unsigned int tag_length_bits,
|
| - blink::WebArrayBuffer* buffer) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -// Guaranteed that key is valid.
|
| -Status EncryptRsaEsPkcs1v1_5(PublicKey* key,
|
| - const CryptoData& data,
|
| - blink::WebArrayBuffer* buffer) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status DecryptRsaEsPkcs1v1_5(PrivateKey* key,
|
| - const CryptoData& data,
|
| - blink::WebArrayBuffer* buffer) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status SignRsaSsaPkcs1v1_5(PrivateKey* key,
|
| - const blink::WebCryptoAlgorithm& hash,
|
| - const CryptoData& data,
|
| - blink::WebArrayBuffer* buffer) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -// Key is guaranteed to be an RSA SSA key.
|
| -Status VerifyRsaSsaPkcs1v1_5(PublicKey* key,
|
| - const blink::WebCryptoAlgorithm& hash,
|
| - const CryptoData& signature,
|
| - const CryptoData& data,
|
| - bool* signature_match) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status ImportKeySpki(const blink::WebCryptoAlgorithm& algorithm_or_null,
|
| - const CryptoData& key_data,
|
| - bool extractable,
|
| - blink::WebCryptoKeyUsageMask usage_mask,
|
| - blink::WebCryptoKey* key) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status ImportKeyPkcs8(const blink::WebCryptoAlgorithm& algorithm_or_null,
|
| - const CryptoData& key_data,
|
| - bool extractable,
|
| - blink::WebCryptoKeyUsageMask usage_mask,
|
| - blink::WebCryptoKey* key) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -Status ExportKeySpki(PublicKey* key, blink::WebArrayBuffer* buffer) {
|
| - // TODO(eroman): http://crbug.com/267888
|
| - return Status::ErrorUnsupported();
|
| -}
|
| -
|
| -} // namespace platform
|
| -
|
| -} // namespace webcrypto
|
| -
|
| -} // namespace content
|
|
|