OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef NET_QUIC_QUIC_CRYPTO_STREAM_H_ | |
6 #define NET_QUIC_QUIC_CRYPTO_STREAM_H_ | |
7 | |
8 #include <stddef.h> | |
9 | |
10 #include "base/macros.h" | |
11 #include "net/quic/crypto/crypto_framer.h" | |
12 #include "net/quic/crypto/crypto_utils.h" | |
13 #include "net/quic/quic_config.h" | |
14 #include "net/quic/quic_protocol.h" | |
15 #include "net/quic/reliable_quic_stream.h" | |
16 | |
17 namespace net { | |
18 | |
19 class CryptoHandshakeMessage; | |
20 class QuicSession; | |
21 | |
22 // Crypto handshake messages in QUIC take place over a reserved | |
23 // reliable stream with the id 1. Each endpoint (client and server) | |
24 // will allocate an instance of a subclass of QuicCryptoStream | |
25 // to send and receive handshake messages. (In the normal 1-RTT | |
26 // handshake, the client will send a client hello, CHLO, message. | |
27 // The server will receive this message and respond with a server | |
28 // hello message, SHLO. At this point both sides will have established | |
29 // a crypto context they can use to send encrypted messages. | |
30 // | |
31 // For more details: http://goto.google.com/quic-crypto | |
32 class NET_EXPORT_PRIVATE QuicCryptoStream | |
33 : public ReliableQuicStream, | |
34 public CryptoFramerVisitorInterface { | |
35 public: | |
36 explicit QuicCryptoStream(QuicSession* session); | |
37 | |
38 // CryptoFramerVisitorInterface implementation | |
39 void OnError(CryptoFramer* framer) override; | |
40 void OnHandshakeMessage(const CryptoHandshakeMessage& message) override; | |
41 | |
42 // ReliableQuicStream implementation | |
43 void OnDataAvailable() override; | |
44 | |
45 // Sends |message| to the peer. | |
46 // TODO(wtc): return a success/failure status. | |
47 void SendHandshakeMessage(const CryptoHandshakeMessage& message); | |
48 // As above, but registers |delegate| for notification when |message| has been | |
49 // ACKed by the peer. | |
50 void SendHandshakeMessage(const CryptoHandshakeMessage& message, | |
51 QuicAckListenerInterface* listener); | |
52 | |
53 // Performs key extraction to derive a new secret of |result_len| bytes | |
54 // dependent on |label|, |context|, and the stream's negotiated subkey secret. | |
55 // Returns false if the handshake has not been confirmed or the parameters are | |
56 // invalid (e.g. |label| contains null bytes); returns true on success. | |
57 bool ExportKeyingMaterial(base::StringPiece label, | |
58 base::StringPiece context, | |
59 size_t result_len, | |
60 std::string* result) const; | |
61 | |
62 // Performs key extraction for Token Binding. Unlike ExportKeyingMaterial, | |
63 // this function can be called before forward-secure encryption is | |
64 // established. Returns false if initial encryption has not been established, | |
65 // and true on success. | |
66 // | |
67 // Since this depends only on the initial keys, a signature over it can be | |
68 // repurposed by an attacker who obtains the client's or server's DH private | |
69 // value. | |
70 bool ExportTokenBindingKeyingMaterial(std::string* result) const; | |
71 | |
72 bool encryption_established() const { return encryption_established_; } | |
73 bool handshake_confirmed() const { return handshake_confirmed_; } | |
74 | |
75 const QuicCryptoNegotiatedParameters& crypto_negotiated_params() const; | |
76 | |
77 protected: | |
78 bool encryption_established_; | |
79 bool handshake_confirmed_; | |
80 | |
81 QuicCryptoNegotiatedParameters crypto_negotiated_params_; | |
82 | |
83 private: | |
84 CryptoFramer crypto_framer_; | |
85 | |
86 DISALLOW_COPY_AND_ASSIGN(QuicCryptoStream); | |
87 }; | |
88 | |
89 } // namespace net | |
90 | |
91 #endif // NET_QUIC_QUIC_CRYPTO_STREAM_H_ | |
OLD | NEW |