| OLD | NEW |
| 1 // Copyright 2012 The Chromium Authors. All rights reserved. | 1 // Copyright 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef COMPONENTS_SYNC_BASE_CRYPTOGRAPHER_H_ | 5 #ifndef COMPONENTS_SYNC_BASE_CRYPTOGRAPHER_H_ |
| 6 #define COMPONENTS_SYNC_BASE_CRYPTOGRAPHER_H_ | 6 #define COMPONENTS_SYNC_BASE_CRYPTOGRAPHER_H_ |
| 7 | 7 |
| 8 #include <map> | 8 #include <map> |
| 9 #include <memory> | 9 #include <memory> |
| 10 #include <string> | 10 #include <string> |
| 11 | 11 |
| 12 #include "base/macros.h" | 12 #include "base/macros.h" |
| 13 #include "base/memory/linked_ptr.h" | 13 #include "base/memory/linked_ptr.h" |
| 14 #include "components/sync/base/nigori.h" | 14 #include "components/sync/base/nigori.h" |
| 15 #include "components/sync/base/sync_export.h" | |
| 16 #include "components/sync/protocol/encryption.pb.h" | 15 #include "components/sync/protocol/encryption.pb.h" |
| 17 | 16 |
| 18 namespace sync_pb { | 17 namespace sync_pb { |
| 19 class NigoriKeyBag; | 18 class NigoriKeyBag; |
| 20 class NigoriSpecifics; | 19 class NigoriSpecifics; |
| 21 } | 20 } |
| 22 | 21 |
| 23 namespace syncer { | 22 namespace syncer { |
| 24 | 23 |
| 25 class Encryptor; | 24 class Encryptor; |
| 26 | 25 |
| 27 SYNC_EXPORT extern const char kNigoriTag[]; | 26 extern const char kNigoriTag[]; |
| 28 | 27 |
| 29 // The parameters used to initialize a Nigori instance. | 28 // The parameters used to initialize a Nigori instance. |
| 30 struct KeyParams { | 29 struct KeyParams { |
| 31 std::string hostname; | 30 std::string hostname; |
| 32 std::string username; | 31 std::string username; |
| 33 std::string password; | 32 std::string password; |
| 34 }; | 33 }; |
| 35 | 34 |
| 36 // This class manages the Nigori objects used to encrypt and decrypt sensitive | 35 // This class manages the Nigori objects used to encrypt and decrypt sensitive |
| 37 // sync data (eg. passwords). Each Nigori object knows how to handle data | 36 // sync data (eg. passwords). Each Nigori object knows how to handle data |
| 38 // protected with a particular passphrase. | 37 // protected with a particular passphrase. |
| 39 // | 38 // |
| 40 // Whenever an update to the Nigori sync node is received from the server, | 39 // Whenever an update to the Nigori sync node is received from the server, |
| 41 // SetPendingKeys should be called with the encrypted contents of that node. | 40 // SetPendingKeys should be called with the encrypted contents of that node. |
| 42 // Most likely, an updated Nigori node means that a new passphrase has been set | 41 // Most likely, an updated Nigori node means that a new passphrase has been set |
| 43 // and that future node updates won't be decryptable. To remedy this, the user | 42 // and that future node updates won't be decryptable. To remedy this, the user |
| 44 // should be prompted for the new passphrase and DecryptPendingKeys be called. | 43 // should be prompted for the new passphrase and DecryptPendingKeys be called. |
| 45 // | 44 // |
| 46 // Whenever a update to an encrypted node is received from the server, | 45 // Whenever a update to an encrypted node is received from the server, |
| 47 // CanDecrypt should be used to verify whether the Cryptographer can decrypt | 46 // CanDecrypt should be used to verify whether the Cryptographer can decrypt |
| 48 // that node. If it cannot, then the application of that update should be | 47 // that node. If it cannot, then the application of that update should be |
| 49 // delayed until after it can be decrypted. | 48 // delayed until after it can be decrypted. |
| 50 class SYNC_EXPORT Cryptographer { | 49 class Cryptographer { |
| 51 public: | 50 public: |
| 52 // Does not take ownership of |encryptor|. | 51 // Does not take ownership of |encryptor|. |
| 53 explicit Cryptographer(Encryptor* encryptor); | 52 explicit Cryptographer(Encryptor* encryptor); |
| 54 explicit Cryptographer(const Cryptographer& other); | 53 explicit Cryptographer(const Cryptographer& other); |
| 55 ~Cryptographer(); | 54 ~Cryptographer(); |
| 56 | 55 |
| 57 // |restored_bootstrap_token| can be provided via this method to bootstrap | 56 // |restored_bootstrap_token| can be provided via this method to bootstrap |
| 58 // Cryptographer instance into the ready state (is_ready will be true). | 57 // Cryptographer instance into the ready state (is_ready will be true). |
| 59 // It must be a string that was previously built by the | 58 // It must be a string that was previously built by the |
| 60 // GetSerializedBootstrapToken function. It is possible that the token is no | 59 // GetSerializedBootstrapToken function. It is possible that the token is no |
| (...skipping 150 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 211 std::string default_nigori_name_; | 210 std::string default_nigori_name_; |
| 212 | 211 |
| 213 std::unique_ptr<sync_pb::EncryptedData> pending_keys_; | 212 std::unique_ptr<sync_pb::EncryptedData> pending_keys_; |
| 214 | 213 |
| 215 DISALLOW_ASSIGN(Cryptographer); | 214 DISALLOW_ASSIGN(Cryptographer); |
| 216 }; | 215 }; |
| 217 | 216 |
| 218 } // namespace syncer | 217 } // namespace syncer |
| 219 | 218 |
| 220 #endif // COMPONENTS_SYNC_BASE_CRYPTOGRAPHER_H_ | 219 #endif // COMPONENTS_SYNC_BASE_CRYPTOGRAPHER_H_ |
| OLD | NEW |