Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(526)

Side by Side Diff: net/quic/crypto/crypto_secret_boxer.h

Issue 2193073003: Move shared files in net/quic/ into net/quic/core/ (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: io_thread_unittest.cc Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/quic/crypto/crypto_protocol.h ('k') | net/quic/crypto/crypto_secret_boxer.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #ifndef NET_QUIC_CRYPTO_CRYPTO_SECRET_BOXER_H_
6 #define NET_QUIC_CRYPTO_CRYPTO_SECRET_BOXER_H_
7
8 #include <stddef.h>
9
10 #include <string>
11 #include <vector>
12
13 #include "base/macros.h"
14 #include "base/strings/string_piece.h"
15 #include "base/synchronization/lock.h"
16 #include "net/base/net_export.h"
17
18 namespace net {
19
20 class QuicRandom;
21
22 // CryptoSecretBoxer encrypts small chunks of plaintext (called 'boxing') and
23 // then, later, can authenticate+decrypt the resulting boxes. This object is
24 // thread-safe.
25 class NET_EXPORT_PRIVATE CryptoSecretBoxer {
26 public:
27 CryptoSecretBoxer();
28 ~CryptoSecretBoxer();
29
30 // GetKeySize returns the number of bytes in a key.
31 static size_t GetKeySize();
32
33 // SetKeys sets a std::list of encryption keys. The first key in the std::list
34 // will be used by |Box|, but all supplied keys will be tried by |Unbox|, to
35 // handle key skew across the fleet. This must be called before |Box| or
36 // |Unbox|. Keys must be |GetKeySize()| bytes long.
37 void SetKeys(const std::vector<std::string>& keys);
38
39 // Box encrypts |plaintext| using a random nonce generated from |rand| and
40 // returns the resulting ciphertext. Since an authenticator and nonce are
41 // included, the result will be slightly larger than |plaintext|. The first
42 // key in the std::vector supplied to |SetKeys| will be used.
43 std::string Box(QuicRandom* rand, base::StringPiece plaintext) const;
44
45 // Unbox takes the result of a previous call to |Box| in |ciphertext| and
46 // authenticates+decrypts it. If |ciphertext| cannot be decrypted with any of
47 // the supplied keys, the function returns false. Otherwise, |out_storage| is
48 // used to store the result and |out| is set to point into |out_storage| and
49 // contains the original plaintext.
50 bool Unbox(base::StringPiece ciphertext,
51 std::string* out_storage,
52 base::StringPiece* out) const;
53
54 private:
55 mutable base::Lock lock_;
56 // GUARDED_BY(lock_).
57 std::vector<std::string> keys_;
58
59 DISALLOW_COPY_AND_ASSIGN(CryptoSecretBoxer);
60 };
61
62 } // namespace net
63
64 #endif // NET_QUIC_CRYPTO_CRYPTO_SECRET_BOXER_H_
OLDNEW
« no previous file with comments | « net/quic/crypto/crypto_protocol.h ('k') | net/quic/crypto/crypto_secret_boxer.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698