| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "components/proximity_auth/device_to_device_secure_context.h" | 5 #include "components/proximity_auth/device_to_device_secure_context.h" |
| 6 | 6 |
| 7 #include <utility> | 7 #include <utility> |
| 8 | 8 |
| 9 #include "base/bind.h" | 9 #include "base/bind.h" |
| 10 #include "base/callback.h" | 10 #include "base/callback.h" |
| 11 #include "components/proximity_auth/cryptauth/proto/cryptauth_api.pb.h" | 11 #include "components/cryptauth/proto/cryptauth_api.pb.h" |
| 12 #include "components/proximity_auth/cryptauth/proto/securemessage.pb.h" | 12 #include "components/cryptauth/proto/securemessage.pb.h" |
| 13 #include "components/proximity_auth/cryptauth/secure_message_delegate.h" | 13 #include "components/cryptauth/secure_message_delegate.h" |
| 14 #include "components/proximity_auth/logging/logging.h" | 14 #include "components/proximity_auth/logging/logging.h" |
| 15 | 15 |
| 16 namespace proximity_auth { | 16 namespace proximity_auth { |
| 17 | 17 |
| 18 namespace { | 18 namespace { |
| 19 | 19 |
| 20 // The version to put in the GcmMetadata field. | 20 // The version to put in the GcmMetadata field. |
| 21 const int kGcmMetadataVersion = 1; | 21 const int kGcmMetadataVersion = 1; |
| 22 | 22 |
| 23 // The sequence number of the last message used during authentication. These | 23 // The sequence number of the last message used during authentication. These |
| 24 // messages are sent and received before the SecureContext is created. | 24 // messages are sent and received before the SecureContext is created. |
| 25 const int kAuthenticationSequenceNumber = 2; | 25 const int kAuthenticationSequenceNumber = 2; |
| 26 | 26 |
| 27 } // namespace | 27 } // namespace |
| 28 | 28 |
| 29 DeviceToDeviceSecureContext::DeviceToDeviceSecureContext( | 29 DeviceToDeviceSecureContext::DeviceToDeviceSecureContext( |
| 30 std::unique_ptr<SecureMessageDelegate> secure_message_delegate, | 30 std::unique_ptr<cryptauth::SecureMessageDelegate> secure_message_delegate, |
| 31 const std::string& symmetric_key, | 31 const std::string& symmetric_key, |
| 32 const std::string& responder_auth_message, | 32 const std::string& responder_auth_message, |
| 33 ProtocolVersion protocol_version) | 33 ProtocolVersion protocol_version) |
| 34 : secure_message_delegate_(std::move(secure_message_delegate)), | 34 : secure_message_delegate_(std::move(secure_message_delegate)), |
| 35 symmetric_key_(symmetric_key), | 35 symmetric_key_(symmetric_key), |
| 36 responder_auth_message_(responder_auth_message), | 36 responder_auth_message_(responder_auth_message), |
| 37 protocol_version_(protocol_version), | 37 protocol_version_(protocol_version), |
| 38 last_sequence_number_(kAuthenticationSequenceNumber), | 38 last_sequence_number_(kAuthenticationSequenceNumber), |
| 39 weak_ptr_factory_(this) {} | 39 weak_ptr_factory_(this) {} |
| 40 | 40 |
| 41 DeviceToDeviceSecureContext::~DeviceToDeviceSecureContext() {} | 41 DeviceToDeviceSecureContext::~DeviceToDeviceSecureContext() {} |
| 42 | 42 |
| 43 void DeviceToDeviceSecureContext::Decode(const std::string& encoded_message, | 43 void DeviceToDeviceSecureContext::Decode(const std::string& encoded_message, |
| 44 const MessageCallback& callback) { | 44 const MessageCallback& callback) { |
| 45 SecureMessageDelegate::UnwrapOptions unwrap_options; | 45 cryptauth::SecureMessageDelegate::UnwrapOptions unwrap_options; |
| 46 unwrap_options.encryption_scheme = securemessage::AES_256_CBC; | 46 unwrap_options.encryption_scheme = securemessage::AES_256_CBC; |
| 47 unwrap_options.signature_scheme = securemessage::HMAC_SHA256; | 47 unwrap_options.signature_scheme = securemessage::HMAC_SHA256; |
| 48 | 48 |
| 49 secure_message_delegate_->UnwrapSecureMessage( | 49 secure_message_delegate_->UnwrapSecureMessage( |
| 50 encoded_message, symmetric_key_, unwrap_options, | 50 encoded_message, symmetric_key_, unwrap_options, |
| 51 base::Bind(&DeviceToDeviceSecureContext::HandleUnwrapResult, | 51 base::Bind(&DeviceToDeviceSecureContext::HandleUnwrapResult, |
| 52 weak_ptr_factory_.GetWeakPtr(), callback)); | 52 weak_ptr_factory_.GetWeakPtr(), callback)); |
| 53 } | 53 } |
| 54 | 54 |
| 55 void DeviceToDeviceSecureContext::Encode(const std::string& message, | 55 void DeviceToDeviceSecureContext::Encode(const std::string& message, |
| 56 const MessageCallback& callback) { | 56 const MessageCallback& callback) { |
| 57 // Create a GcmMetadata field to put in the header. | 57 // Create a GcmMetadata field to put in the header. |
| 58 cryptauth::GcmMetadata gcm_metadata; | 58 cryptauth::GcmMetadata gcm_metadata; |
| 59 gcm_metadata.set_type(cryptauth::DEVICE_TO_DEVICE_MESSAGE); | 59 gcm_metadata.set_type(cryptauth::DEVICE_TO_DEVICE_MESSAGE); |
| 60 gcm_metadata.set_version(kGcmMetadataVersion); | 60 gcm_metadata.set_version(kGcmMetadataVersion); |
| 61 | 61 |
| 62 // Wrap |message| inside a DeviceToDeviceMessage proto. | 62 // Wrap |message| inside a DeviceToDeviceMessage proto. |
| 63 securemessage::DeviceToDeviceMessage device_to_device_message; | 63 securemessage::DeviceToDeviceMessage device_to_device_message; |
| 64 device_to_device_message.set_sequence_number(++last_sequence_number_); | 64 device_to_device_message.set_sequence_number(++last_sequence_number_); |
| 65 device_to_device_message.set_message(message); | 65 device_to_device_message.set_message(message); |
| 66 | 66 |
| 67 SecureMessageDelegate::CreateOptions create_options; | 67 cryptauth::SecureMessageDelegate::CreateOptions create_options; |
| 68 create_options.encryption_scheme = securemessage::AES_256_CBC; | 68 create_options.encryption_scheme = securemessage::AES_256_CBC; |
| 69 create_options.signature_scheme = securemessage::HMAC_SHA256; | 69 create_options.signature_scheme = securemessage::HMAC_SHA256; |
| 70 gcm_metadata.SerializeToString(&create_options.public_metadata); | 70 gcm_metadata.SerializeToString(&create_options.public_metadata); |
| 71 | 71 |
| 72 secure_message_delegate_->CreateSecureMessage( | 72 secure_message_delegate_->CreateSecureMessage( |
| 73 device_to_device_message.SerializeAsString(), symmetric_key_, | 73 device_to_device_message.SerializeAsString(), symmetric_key_, |
| 74 create_options, callback); | 74 create_options, callback); |
| 75 } | 75 } |
| 76 | 76 |
| 77 std::string DeviceToDeviceSecureContext::GetChannelBindingData() const { | 77 std::string DeviceToDeviceSecureContext::GetChannelBindingData() const { |
| (...skipping 34 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 112 PA_LOG(ERROR) << "Failed to validate GcmMetadata."; | 112 PA_LOG(ERROR) << "Failed to validate GcmMetadata."; |
| 113 callback.Run(std::string()); | 113 callback.Run(std::string()); |
| 114 return; | 114 return; |
| 115 } | 115 } |
| 116 | 116 |
| 117 last_sequence_number_++; | 117 last_sequence_number_++; |
| 118 callback.Run(device_to_device_message.message()); | 118 callback.Run(device_to_device_message.message()); |
| 119 } | 119 } |
| 120 | 120 |
| 121 } // proximity_auth | 121 } // proximity_auth |
| OLD | NEW |