| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/quic/crypto/quic_decrypter.h" | 5 #include "net/quic/crypto/quic_decrypter.h" |
| 6 | 6 |
| 7 #include "crypto/hkdf.h" | 7 #include "crypto/hkdf.h" |
| 8 #include "net/quic/crypto/aes_128_gcm_12_decrypter.h" | 8 #include "net/quic/crypto/aes_128_gcm_12_decrypter.h" |
| 9 #include "net/quic/crypto/chacha20_poly1305_rfc7539_decrypter.h" | 9 #include "net/quic/crypto/chacha20_poly1305_decrypter.h" |
| 10 #include "net/quic/crypto/crypto_protocol.h" | 10 #include "net/quic/crypto/crypto_protocol.h" |
| 11 #include "net/quic/crypto/null_decrypter.h" | 11 #include "net/quic/crypto/null_decrypter.h" |
| 12 | 12 |
| 13 using base::StringPiece; | 13 using base::StringPiece; |
| 14 using std::string; | 14 using std::string; |
| 15 | 15 |
| 16 namespace net { | 16 namespace net { |
| 17 | 17 |
| 18 // static | 18 // static |
| 19 QuicDecrypter* QuicDecrypter::Create(QuicTag algorithm) { | 19 QuicDecrypter* QuicDecrypter::Create(QuicTag algorithm) { |
| 20 switch (algorithm) { | 20 switch (algorithm) { |
| 21 case kAESG: | 21 case kAESG: |
| 22 return new Aes128Gcm12Decrypter(); | 22 return new Aes128Gcm12Decrypter(); |
| 23 case kCC20: | 23 case kCC20: |
| 24 return new ChaCha20Poly1305Rfc7539Decrypter(); | 24 return new ChaCha20Poly1305Decrypter(); |
| 25 case kNULL: | 25 case kNULL: |
| 26 return new NullDecrypter(); | 26 return new NullDecrypter(); |
| 27 default: | 27 default: |
| 28 LOG(FATAL) << "Unsupported algorithm: " << algorithm; | 28 LOG(FATAL) << "Unsupported algorithm: " << algorithm; |
| 29 return nullptr; | 29 return nullptr; |
| 30 } | 30 } |
| 31 } | 31 } |
| 32 | 32 |
| 33 // static | 33 // static |
| 34 void QuicDecrypter::DiversifyPreliminaryKey(StringPiece preliminary_key, | 34 void QuicDecrypter::DiversifyPreliminaryKey(StringPiece preliminary_key, |
| 35 StringPiece nonce_prefix, | 35 StringPiece nonce_prefix, |
| 36 DiversificationNonce nonce, | 36 DiversificationNonce nonce, |
| 37 size_t key_size, | 37 size_t key_size, |
| 38 size_t nonce_prefix_size, | 38 size_t nonce_prefix_size, |
| 39 string* out_key, | 39 string* out_key, |
| 40 string* out_nonce_prefix) { | 40 string* out_nonce_prefix) { |
| 41 crypto::HKDF hkdf(preliminary_key.as_string() + nonce_prefix.as_string(), | 41 crypto::HKDF hkdf(preliminary_key.as_string() + nonce_prefix.as_string(), |
| 42 StringPiece(nonce, kDiversificationNonceSize), | 42 StringPiece(nonce, kDiversificationNonceSize), |
| 43 "QUIC key diversification", 0, key_size, 0, | 43 "QUIC key diversification", 0, key_size, 0, |
| 44 nonce_prefix_size, 0); | 44 nonce_prefix_size, 0); |
| 45 *out_key = hkdf.server_write_key().as_string(); | 45 *out_key = hkdf.server_write_key().as_string(); |
| 46 *out_nonce_prefix = hkdf.server_write_iv().as_string(); | 46 *out_nonce_prefix = hkdf.server_write_iv().as_string(); |
| 47 } | 47 } |
| 48 | 48 |
| 49 } // namespace net | 49 } // namespace net |
| OLD | NEW |