Check TBSCertificate.algorithm and Certificate.signatureAlgorithm for

net/cert/internal/signature_algorithm.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_SIGNATURE_ALGORITHM_H_
 #define NET_CERT_INTERNAL_SIGNATURE_ALGORITHM_H_
 
 #include <stdint.h>
 
 #include <memory>
@@ skipping 34 matching lines @@
 //     HashAlgorithm  ::=  AlgorithmIdentifier{DIGEST-ALGORITHM,
 //                             {HashAlgorithms}}
 //
 //     HashAlgorithms DIGEST-ALGORITHM ::=  {
 //         { IDENTIFIER id-sha1 PARAMS TYPE NULL ARE preferredPresent } |
 //         { IDENTIFIER id-sha224 PARAMS TYPE NULL ARE preferredPresent } |
 //         { IDENTIFIER id-sha256 PARAMS TYPE NULL ARE preferredPresent } |
 //         { IDENTIFIER id-sha384 PARAMS TYPE NULL ARE preferredPresent } |
 //         { IDENTIFIER id-sha512 PARAMS TYPE NULL ARE preferredPresent }
 //     }
-WARN_UNUSED_RESULT bool ParseHashAlgorithm(const der::Input input,
+WARN_UNUSED_RESULT bool ParseHashAlgorithm(const der::Input& input,
                                            DigestAlgorithm* out);
 
 // Base class for describing algorithm parameters.
 class NET_EXPORT SignatureAlgorithmParameters {
  public:
   SignatureAlgorithmParameters() {}
   virtual ~SignatureAlgorithmParameters(){};
 
  private:
   DISALLOW_COPY_AND_ASSIGN(SignatureAlgorithmParameters);
@@ skipping 45 matching lines @@
 
   // The following methods retrieve the parameters for the signature algorithm.
   //
   // The correct parameters should be chosen based on the algorithm ID. For
   // instance a SignatureAlgorithm with |algorithm() == RsaPss| should retrieve
   // parameters via ParametersForRsaPss().
   //
   // The returned pointer is non-owned, and has the same lifetime as |this|.
   const RsaPssParameters* ParamsForRsaPss() const;
 
+  bool has_params() const { return !!params_; }
+
+  // Returns true if |alg1_tlv| and |alg2_tlv| represent an equivalent
+  // AlgorithmIdentifier once parsed.
+  static bool IsEquivalent(const der::Input& alg1_tlv,
+                           const der::Input& alg2_tlv);
+
  private:
   SignatureAlgorithm(SignatureAlgorithmId algorithm,
                      DigestAlgorithm digest,
                      std::unique_ptr<SignatureAlgorithmParameters> params);
 
   const SignatureAlgorithmId algorithm_;
   const DigestAlgorithm digest_;
   const std::unique_ptr<SignatureAlgorithmParameters> params_;
 
   DISALLOW_COPY_AND_ASSIGN(SignatureAlgorithm);
 };
 
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_SIGNATURE_ALGORITHM_H_