OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "net/quic/crypto/quic_decrypter.h" | 5 #include "net/quic/crypto/quic_decrypter.h" |
6 | 6 |
7 #include "crypto/hkdf.h" | 7 #include "crypto/hkdf.h" |
8 #include "net/quic/crypto/aes_128_gcm_12_decrypter.h" | 8 #include "net/quic/crypto/aes_128_gcm_12_decrypter.h" |
9 #include "net/quic/crypto/chacha20_poly1305_rfc7539_decrypter.h" | 9 #include "net/quic/crypto/chacha20_poly1305_decrypter.h" |
10 #include "net/quic/crypto/crypto_protocol.h" | 10 #include "net/quic/crypto/crypto_protocol.h" |
11 #include "net/quic/crypto/null_decrypter.h" | 11 #include "net/quic/crypto/null_decrypter.h" |
12 | 12 |
13 using base::StringPiece; | 13 using base::StringPiece; |
14 using std::string; | 14 using std::string; |
15 | 15 |
16 namespace net { | 16 namespace net { |
17 | 17 |
18 // static | 18 // static |
19 QuicDecrypter* QuicDecrypter::Create(QuicTag algorithm) { | 19 QuicDecrypter* QuicDecrypter::Create(QuicTag algorithm) { |
20 switch (algorithm) { | 20 switch (algorithm) { |
21 case kAESG: | 21 case kAESG: |
22 return new Aes128Gcm12Decrypter(); | 22 return new Aes128Gcm12Decrypter(); |
23 case kCC20: | 23 case kCC20: |
24 return new ChaCha20Poly1305Rfc7539Decrypter(); | 24 return new ChaCha20Poly1305Decrypter(); |
25 case kNULL: | 25 case kNULL: |
26 return new NullDecrypter(); | 26 return new NullDecrypter(); |
27 default: | 27 default: |
28 LOG(FATAL) << "Unsupported algorithm: " << algorithm; | 28 LOG(FATAL) << "Unsupported algorithm: " << algorithm; |
29 return nullptr; | 29 return nullptr; |
30 } | 30 } |
31 } | 31 } |
32 | 32 |
33 // static | 33 // static |
34 void QuicDecrypter::DiversifyPreliminaryKey(StringPiece preliminary_key, | 34 void QuicDecrypter::DiversifyPreliminaryKey(StringPiece preliminary_key, |
35 StringPiece nonce_prefix, | 35 StringPiece nonce_prefix, |
36 DiversificationNonce nonce, | 36 DiversificationNonce nonce, |
37 size_t key_size, | 37 size_t key_size, |
38 size_t nonce_prefix_size, | 38 size_t nonce_prefix_size, |
39 string* out_key, | 39 string* out_key, |
40 string* out_nonce_prefix) { | 40 string* out_nonce_prefix) { |
41 crypto::HKDF hkdf(preliminary_key.as_string() + nonce_prefix.as_string(), | 41 crypto::HKDF hkdf(preliminary_key.as_string() + nonce_prefix.as_string(), |
42 StringPiece(nonce, kDiversificationNonceSize), | 42 StringPiece(nonce, kDiversificationNonceSize), |
43 "QUIC key diversification", 0, key_size, 0, | 43 "QUIC key diversification", 0, key_size, 0, |
44 nonce_prefix_size, 0); | 44 nonce_prefix_size, 0); |
45 *out_key = hkdf.server_write_key().as_string(); | 45 *out_key = hkdf.server_write_key().as_string(); |
46 *out_nonce_prefix = hkdf.server_write_iv().as_string(); | 46 *out_nonce_prefix = hkdf.server_write_iv().as_string(); |
47 } | 47 } |
48 | 48 |
49 } // namespace net | 49 } // namespace net |
OLD | NEW |