Remove crypto/curve25519.h in favor of BoringSSL's.

components/certificate_reporting/error_reporter.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/certificate_reporting/error_reporter.h"
 
 #include <stddef.h>
 
 #include <set>
 #include <utility>
 
 #include "base/logging.h"
 #include "base/memory/ptr_util.h"
 #include "components/certificate_reporting/encrypted_cert_logger.pb.h"
 #include "crypto/aead.h"
-#include "crypto/curve25519.h"
 #include "crypto/hkdf.h"
 #include "crypto/random.h"
 #include "net/url_request/report_sender.h"
+#include "third_party/boringssl/src/include/openssl/curve25519.h"
 
 namespace certificate_reporting {
 
 namespace {
 
 // Constants used for crypto. The corresponding private key is used by
 // the SafeBrowsing client-side detection server to decrypt reports.
 static const uint8_t kServerPublicKey[] = {
     0x51, 0xcc, 0x52, 0x67, 0x42, 0x47, 0x3b, 0x10, 0xe8, 0x63, 0x18,
     0x3c, 0x61, 0xa7, 0x96, 0x76, 0x86, 0x91, 0x40, 0x71, 0x39, 0x5f,
     0x31, 0x1a, 0x39, 0x5b, 0x76, 0xb1, 0x6b, 0x3d, 0x6a, 0x2b};
 static const uint32_t kServerPublicKeyVersion = 1;
 
 static const char kHkdfLabel[] = "certificate report";
 
 bool GetHkdfSubkeySecret(size_t subkey_length,
                          const uint8_t* private_key,
                          const uint8_t* public_key,
                          std::string* secret) {
-  uint8_t shared_secret[crypto::curve25519::kBytes];
-  if (!crypto::curve25519::ScalarMult(private_key, public_key, shared_secret))
+  uint8_t shared_secret[X25519_SHARED_KEY_LEN];
+  if (!X25519(shared_secret, private_key, public_key))
     return false;
 
   // By mistake, the HKDF label here ends up with an extra null byte on
   // the end, due to using sizeof(kHkdfLabel) in the StringPiece
   // constructor instead of strlen(kHkdfLabel). Ideally this code should
   // be just passing kHkdfLabel directly into the HKDF constructor.
   //
   // TODO(estark): fix this in coordination with the server-side code --
   // perhaps by rolling the public key version forward and using the
   // version to decide whether to use the extra-null-byte version of the
   // label. https://crbug.com/517746
   crypto::HKDF hkdf(base::StringPiece(reinterpret_cast<char*>(shared_secret),
                                       sizeof(shared_secret)),
                     "" /* salt */,
                     base::StringPiece(kHkdfLabel, sizeof(kHkdfLabel)),
                     0 /* key bytes */, 0 /* iv bytes */, subkey_length);
 
   *secret = hkdf.subkey_secret().as_string();
   return true;
 }
 
 bool EncryptSerializedReport(const uint8_t* server_public_key,
                              uint32_t server_public_key_version,
                              const std::string& report,
                              EncryptedCertLoggerRequest* encrypted_report) {
   // Generate an ephemeral key pair to generate a shared secret.
-  uint8_t public_key[crypto::curve25519::kBytes];
-  uint8_t private_key[crypto::curve25519::kScalarBytes];
+  uint8_t public_key[X25519_PUBLIC_VALUE_LEN];
+  uint8_t private_key[X25519_PRIVATE_KEY_LEN];
 
   crypto::RandBytes(private_key, sizeof(private_key));
-  crypto::curve25519::ScalarBaseMult(private_key, public_key);
+  X25519_public_from_private(public_key, private_key);
 
   crypto::Aead aead(crypto::Aead::AES_128_CTR_HMAC_SHA256);
   std::string key;
   if (!GetHkdfSubkeySecret(aead.KeyLength(), private_key,
                            reinterpret_cast<const uint8_t*>(server_public_key),
                            &key)) {
     LOG(ERROR) << "Error getting subkey secret.";
     return false;
   }
   aead.Init(&key);
@@ skipping 83 matching lines @@
   aead.Init(&key);
 
   // Use an all-zero nonce because the key is random per-message.
   std::string nonce(aead.NonceLength(), 0);
 
   return aead.Open(encrypted_report.encrypted_report(), nonce, std::string(),
                    decrypted_serialized_report);
 }
 
 }  // namespace certificate_reporting