| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/quic/crypto/aes_128_gcm_12_decrypter.h" | 5 #include "net/quic/crypto/aes_128_gcm_12_decrypter.h" |
| 6 | 6 |
| 7 #include <openssl/err.h> | |
| 8 #include <openssl/evp.h> | 7 #include <openssl/evp.h> |
| 9 | 8 |
| 10 #include "base/memory/scoped_ptr.h" | |
| 11 | |
| 12 using base::StringPiece; | |
| 13 | |
| 14 namespace net { | 9 namespace net { |
| 15 | 10 |
| 16 namespace { | 11 namespace { |
| 17 | 12 |
| 13 const size_t kKeySize = 16; |
| 18 const size_t kNoncePrefixSize = 4; | 14 const size_t kNoncePrefixSize = 4; |
| 19 const size_t kAESNonceSize = 12; | |
| 20 | 15 |
| 21 } // namespace | 16 } // namespace |
| 22 | 17 |
| 23 Aes128Gcm12Decrypter::Aes128Gcm12Decrypter() {} | 18 Aes128Gcm12Decrypter::Aes128Gcm12Decrypter() |
| 19 : AeadBaseDecrypter(EVP_aead_aes_128_gcm(), kKeySize, kAuthTagSize, |
| 20 kNoncePrefixSize) { |
| 21 COMPILE_ASSERT(kKeySize <= kMaxKeySize, key_size_too_big); |
| 22 COMPILE_ASSERT(kNoncePrefixSize <= kMaxNoncePrefixSize, |
| 23 nonce_prefix_size_too_big); |
| 24 } |
| 24 | 25 |
| 25 Aes128Gcm12Decrypter::~Aes128Gcm12Decrypter() {} | 26 Aes128Gcm12Decrypter::~Aes128Gcm12Decrypter() {} |
| 26 | 27 |
| 27 // static | |
| 28 bool Aes128Gcm12Decrypter::IsSupported() { return true; } | |
| 29 | |
| 30 bool Aes128Gcm12Decrypter::SetKey(StringPiece key) { | |
| 31 DCHECK_EQ(key.size(), sizeof(key_)); | |
| 32 if (key.size() != sizeof(key_)) { | |
| 33 return false; | |
| 34 } | |
| 35 memcpy(key_, key.data(), key.size()); | |
| 36 | |
| 37 EVP_AEAD_CTX_cleanup(ctx_.get()); | |
| 38 if (!EVP_AEAD_CTX_init(ctx_.get(), EVP_aead_aes_128_gcm(), key_, | |
| 39 sizeof(key_), kAuthTagSize, NULL)) { | |
| 40 // Clear OpenSSL error stack. | |
| 41 while (ERR_get_error()) {} | |
| 42 return false; | |
| 43 } | |
| 44 | |
| 45 return true; | |
| 46 } | |
| 47 | |
| 48 bool Aes128Gcm12Decrypter::SetNoncePrefix(StringPiece nonce_prefix) { | |
| 49 DCHECK_EQ(nonce_prefix.size(), kNoncePrefixSize); | |
| 50 if (nonce_prefix.size() != kNoncePrefixSize) { | |
| 51 return false; | |
| 52 } | |
| 53 COMPILE_ASSERT(sizeof(nonce_prefix_) == kNoncePrefixSize, bad_nonce_length); | |
| 54 memcpy(nonce_prefix_, nonce_prefix.data(), nonce_prefix.size()); | |
| 55 return true; | |
| 56 } | |
| 57 | |
| 58 bool Aes128Gcm12Decrypter::Decrypt(StringPiece nonce, | |
| 59 StringPiece associated_data, | |
| 60 StringPiece ciphertext, | |
| 61 uint8* output, | |
| 62 size_t* output_length) { | |
| 63 if (ciphertext.length() < kAuthTagSize || | |
| 64 nonce.size() != kNoncePrefixSize + sizeof(QuicPacketSequenceNumber)) { | |
| 65 return false; | |
| 66 } | |
| 67 | |
| 68 ssize_t len = EVP_AEAD_CTX_open( | |
| 69 ctx_.get(), output, ciphertext.size(), | |
| 70 reinterpret_cast<const uint8_t*>(nonce.data()), nonce.size(), | |
| 71 reinterpret_cast<const uint8_t*>(ciphertext.data()), ciphertext.size(), | |
| 72 reinterpret_cast<const uint8_t*>(associated_data.data()), | |
| 73 associated_data.size()); | |
| 74 | |
| 75 if (len < 0) { | |
| 76 // Clear OpenSSL error stack. | |
| 77 while (ERR_get_error()) {} | |
| 78 return false; | |
| 79 } | |
| 80 | |
| 81 *output_length = len; | |
| 82 return true; | |
| 83 } | |
| 84 | |
| 85 QuicData* Aes128Gcm12Decrypter::DecryptPacket( | |
| 86 QuicPacketSequenceNumber sequence_number, | |
| 87 StringPiece associated_data, | |
| 88 StringPiece ciphertext) { | |
| 89 if (ciphertext.length() < kAuthTagSize) { | |
| 90 return NULL; | |
| 91 } | |
| 92 size_t plaintext_size = ciphertext.length(); | |
| 93 scoped_ptr<char[]> plaintext(new char[plaintext_size]); | |
| 94 | |
| 95 uint8 nonce[kNoncePrefixSize + sizeof(sequence_number)]; | |
| 96 COMPILE_ASSERT(sizeof(nonce) == kAESNonceSize, bad_sequence_number_size); | |
| 97 memcpy(nonce, nonce_prefix_, kNoncePrefixSize); | |
| 98 memcpy(nonce + kNoncePrefixSize, &sequence_number, sizeof(sequence_number)); | |
| 99 if (!Decrypt(StringPiece(reinterpret_cast<char*>(nonce), sizeof(nonce)), | |
| 100 associated_data, ciphertext, | |
| 101 reinterpret_cast<uint8*>(plaintext.get()), | |
| 102 &plaintext_size)) { | |
| 103 return NULL; | |
| 104 } | |
| 105 return new QuicData(plaintext.release(), plaintext_size, true); | |
| 106 } | |
| 107 | |
| 108 StringPiece Aes128Gcm12Decrypter::GetKey() const { | |
| 109 return StringPiece(reinterpret_cast<const char*>(key_), sizeof(key_)); | |
| 110 } | |
| 111 | |
| 112 StringPiece Aes128Gcm12Decrypter::GetNoncePrefix() const { | |
| 113 return StringPiece(reinterpret_cast<const char*>(nonce_prefix_), | |
| 114 kNoncePrefixSize); | |
| 115 } | |
| 116 | |
| 117 } // namespace net | 28 } // namespace net |
| OLD | NEW |