This change introduces a way to tie source address token keys to specific QUIC server configs

net/quic/crypto/crypto_secret_boxer.h

Index: net/quic/crypto/crypto_secret_boxer.h
diff --git a/net/quic/crypto/crypto_secret_boxer.h b/net/quic/crypto/crypto_secret_boxer.h
index ba9baf2bb2aad70d0eb413c68a286d345ca48ba1..3b9c9b0667e1ac65039c7681fe33294265f6e1fe 100644
--- a/net/quic/crypto/crypto_secret_boxer.h
+++ b/net/quic/crypto/crypto_secret_boxer.h
@@ -7,8 +7,12 @@
 
 #include <string>
 
+#include "base/memory/scoped_ptr.h"
 #include "base/strings/string_piece.h"
 #include "net/base/net_export.h"
+#include "net/quic/crypto/crypto_protocol.h"

[wtc, 2014/04/22 19:12:10]

We should not need to include this header.

[ramant (doing other things), 2014/04/25 23:40:58]

Done.

+#include "net/quic/crypto/quic_decrypter.h"
+#include "net/quic/crypto/quic_encrypter.h"

[wtc, 2014/04/22 19:12:10]

Nit: using a forward declaration of QuicDecrypter and QuicEncrypter may be
sufficient.

[ramant (doing other things), 2014/04/25 23:40:58]

Was running into compilation errors 
../../net/quic/crypto/crypto_secret_boxer.h:51:17: error: field has incomplete
type 'net::QuicEncrypter'
  QuicEncrypter encrypter_;

[wtc, 2014/04/28 18:44:58]

Now the |encrypter_| member is a scoped_ptr:

  scoped_ptr<QuicEncrypter> encrypter_;

a forward declaration of QuicEncrypter may be enough. In any case, you don't
need to change this.

[ramant (doing other things), 2014/04/29 00:31:18]

Deleted the include files.

Done.

 
 namespace net {
 
@@ -22,6 +26,10 @@ class NET_EXPORT_PRIVATE CryptoSecretBoxer {
   // GetKeySize returns the number of bytes in a key.
   static size_t GetKeySize();

[wtc, 2014/04/22 19:12:10]

The Style Guide recommends that static methods should be declared after the
constructor and destructor:
http://google-styleguide.googlecode.com/svn/trunk/cppguide.xml#Declaration_Order

[ramant (doing other things), 2014/04/25 23:40:58]

Done.

 
+  // Initializes |encrypter_| and |decrypter_| data members.
+  CryptoSecretBoxer();
+  virtual ~CryptoSecretBoxer();

[wtc, 2014/04/22 19:12:10]

Since this class has no virtual methods, I think the destructor doesn't need to
be virtual.

[ramant (doing other things), 2014/04/25 23:40:58]

Done.

+
   // SetKey sets the key for this object. This must be done before |Box| or
   // |Unbox| are called. |key| must be |GetKeySize()| bytes long.
   void SetKey(base::StringPiece key);
@@ -42,6 +50,10 @@ class NET_EXPORT_PRIVATE CryptoSecretBoxer {
 
  private:
   std::string key_;

[wtc, 2014/04/22 19:12:10]

Remove the key_ member. I explain this in the .cc file.

[ramant (doing other things), 2014/04/25 23:40:58]

nit/small concern: this file is diverging from internal source tree.

Done.

[wtc, 2014/04/28 18:44:58]

That's true. I think we can keep the .h files in sync, but the .cc files will be
different, and we will need to change encrypter_ and decrypter_ back to local
variables in the Box and Unbox methods.

[ramant (doing other things), 2014/04/29 00:31:18]

Done.

+  scoped_ptr<QuicEncrypter> encrypter_;
+  scoped_ptr<QuicDecrypter> decrypter_;
+
+  DISALLOW_COPY_AND_ASSIGN(CryptoSecretBoxer);
 };
 
 }  // namespace net