| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_QUIC_CORE_CRYPTO_CRYPTO_SECRET_BOXER_H_ | 5 #ifndef NET_QUIC_CORE_CRYPTO_CRYPTO_SECRET_BOXER_H_ |
| 6 #define NET_QUIC_CORE_CRYPTO_CRYPTO_SECRET_BOXER_H_ | 6 #define NET_QUIC_CORE_CRYPTO_CRYPTO_SECRET_BOXER_H_ |
| 7 | 7 |
| 8 #include <stddef.h> | 8 #include <stddef.h> |
| 9 | 9 |
| 10 #include <string> | 10 #include <string> |
| 11 #include <vector> | 11 #include <vector> |
| 12 | 12 |
| 13 #include "base/macros.h" | 13 #include "base/macros.h" |
| 14 #include "base/strings/string_piece.h" | 14 #include "base/strings/string_piece.h" |
| 15 #include "base/synchronization/lock.h" | |
| 16 #include "net/quic/platform/api/quic_export.h" | 15 #include "net/quic/platform/api/quic_export.h" |
| 16 #include "net/quic/platform/api/quic_mutex.h" |
| 17 | 17 |
| 18 namespace net { | 18 namespace net { |
| 19 | 19 |
| 20 class QuicRandom; | 20 class QuicRandom; |
| 21 | 21 |
| 22 // CryptoSecretBoxer encrypts small chunks of plaintext (called 'boxing') and | 22 // CryptoSecretBoxer encrypts small chunks of plaintext (called 'boxing') and |
| 23 // then, later, can authenticate+decrypt the resulting boxes. This object is | 23 // then, later, can authenticate+decrypt the resulting boxes. This object is |
| 24 // thread-safe. | 24 // thread-safe. |
| 25 class QUIC_EXPORT_PRIVATE CryptoSecretBoxer { | 25 class QUIC_EXPORT_PRIVATE CryptoSecretBoxer { |
| 26 public: | 26 public: |
| (...skipping 17 matching lines...) Expand all Loading... |
| 44 // Unbox takes the result of a previous call to |Box| in |ciphertext| and | 44 // Unbox takes the result of a previous call to |Box| in |ciphertext| and |
| 45 // authenticates+decrypts it. If |ciphertext| cannot be decrypted with any of | 45 // authenticates+decrypts it. If |ciphertext| cannot be decrypted with any of |
| 46 // the supplied keys, the function returns false. Otherwise, |out_storage| is | 46 // the supplied keys, the function returns false. Otherwise, |out_storage| is |
| 47 // used to store the result and |out| is set to point into |out_storage| and | 47 // used to store the result and |out| is set to point into |out_storage| and |
| 48 // contains the original plaintext. | 48 // contains the original plaintext. |
| 49 bool Unbox(base::StringPiece ciphertext, | 49 bool Unbox(base::StringPiece ciphertext, |
| 50 std::string* out_storage, | 50 std::string* out_storage, |
| 51 base::StringPiece* out) const; | 51 base::StringPiece* out) const; |
| 52 | 52 |
| 53 private: | 53 private: |
| 54 mutable base::Lock lock_; | 54 mutable QuicMutex lock_; |
| 55 // GUARDED_BY(lock_).mutable Mutex lock_; | 55 std::vector<std::string> keys_ GUARDED_BY(lock_); |
| 56 std::vector<std::string> keys_; | |
| 57 | 56 |
| 58 DISALLOW_COPY_AND_ASSIGN(CryptoSecretBoxer); | 57 DISALLOW_COPY_AND_ASSIGN(CryptoSecretBoxer); |
| 59 }; | 58 }; |
| 60 | 59 |
| 61 } // namespace net | 60 } // namespace net |
| 62 | 61 |
| 63 #endif // NET_QUIC_CORE_CRYPTO_CRYPTO_SECRET_BOXER_H_ | 62 #endif // NET_QUIC_CORE_CRYPTO_CRYPTO_SECRET_BOXER_H_ |
| OLD | NEW |