OLD | NEW |
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_QUIC_CORE_CRYPTO_P256_KEY_EXCHANGE_H_ | 5 #ifndef NET_QUIC_CORE_CRYPTO_P256_KEY_EXCHANGE_H_ |
6 #define NET_QUIC_CORE_CRYPTO_P256_KEY_EXCHANGE_H_ | 6 #define NET_QUIC_CORE_CRYPTO_P256_KEY_EXCHANGE_H_ |
7 | 7 |
8 #include <cstdint> | 8 #include <cstdint> |
9 #include <string> | 9 #include <string> |
10 | 10 |
11 #include "base/macros.h" | 11 #include "base/macros.h" |
12 #include "base/strings/string_piece.h" | |
13 #include "net/quic/core/crypto/key_exchange.h" | 12 #include "net/quic/core/crypto/key_exchange.h" |
14 #include "net/quic/platform/api/quic_export.h" | 13 #include "net/quic/platform/api/quic_export.h" |
| 14 #include "net/quic/platform/api/quic_string_piece.h" |
15 #include "third_party/boringssl/src/include/openssl/base.h" | 15 #include "third_party/boringssl/src/include/openssl/base.h" |
16 | 16 |
17 namespace net { | 17 namespace net { |
18 | 18 |
19 // P256KeyExchange implements a KeyExchange using elliptic-curve | 19 // P256KeyExchange implements a KeyExchange using elliptic-curve |
20 // Diffie-Hellman on NIST P-256. | 20 // Diffie-Hellman on NIST P-256. |
21 class QUIC_EXPORT_PRIVATE P256KeyExchange : public KeyExchange { | 21 class QUIC_EXPORT_PRIVATE P256KeyExchange : public KeyExchange { |
22 public: | 22 public: |
23 ~P256KeyExchange() override; | 23 ~P256KeyExchange() override; |
24 | 24 |
25 // New creates a new key exchange object from a private key. If | 25 // New creates a new key exchange object from a private key. If |
26 // |private_key| is invalid, nullptr is returned. | 26 // |private_key| is invalid, nullptr is returned. |
27 static P256KeyExchange* New(base::StringPiece private_key); | 27 static P256KeyExchange* New(QuicStringPiece private_key); |
28 | 28 |
29 // |NewPrivateKey| returns a private key, suitable for passing to |New|. | 29 // |NewPrivateKey| returns a private key, suitable for passing to |New|. |
30 // If |NewPrivateKey| can't generate a private key, it returns an empty | 30 // If |NewPrivateKey| can't generate a private key, it returns an empty |
31 // string. | 31 // string. |
32 static std::string NewPrivateKey(); | 32 static std::string NewPrivateKey(); |
33 | 33 |
34 // KeyExchange interface. | 34 // KeyExchange interface. |
35 KeyExchange* NewKeyPair(QuicRandom* rand) const override; | 35 KeyExchange* NewKeyPair(QuicRandom* rand) const override; |
36 bool CalculateSharedKey(base::StringPiece peer_public_value, | 36 bool CalculateSharedKey(QuicStringPiece peer_public_value, |
37 std::string* shared_key) const override; | 37 std::string* shared_key) const override; |
38 base::StringPiece public_value() const override; | 38 QuicStringPiece public_value() const override; |
39 QuicTag tag() const override; | 39 QuicTag tag() const override; |
40 | 40 |
41 private: | 41 private: |
42 enum { | 42 enum { |
43 // A P-256 field element consists of 32 bytes. | 43 // A P-256 field element consists of 32 bytes. |
44 kP256FieldBytes = 32, | 44 kP256FieldBytes = 32, |
45 // A P-256 point in uncompressed form consists of 0x04 (to denote | 45 // A P-256 point in uncompressed form consists of 0x04 (to denote |
46 // that the point is uncompressed) followed by two, 32-byte field | 46 // that the point is uncompressed) followed by two, 32-byte field |
47 // elements. | 47 // elements. |
48 kUncompressedP256PointBytes = 1 + 2 * kP256FieldBytes, | 48 kUncompressedP256PointBytes = 1 + 2 * kP256FieldBytes, |
49 // The first byte in an uncompressed P-256 point. | 49 // The first byte in an uncompressed P-256 point. |
50 kUncompressedECPointForm = 0x04, | 50 kUncompressedECPointForm = 0x04, |
51 }; | 51 }; |
52 | 52 |
53 // P256KeyExchange wraps |private_key|, and expects |public_key| consists of | 53 // P256KeyExchange wraps |private_key|, and expects |public_key| consists of |
54 // |kUncompressedP256PointBytes| bytes. | 54 // |kUncompressedP256PointBytes| bytes. |
55 P256KeyExchange(bssl::UniquePtr<EC_KEY> private_key, | 55 P256KeyExchange(bssl::UniquePtr<EC_KEY> private_key, |
56 const uint8_t* public_key); | 56 const uint8_t* public_key); |
57 | 57 |
58 bssl::UniquePtr<EC_KEY> private_key_; | 58 bssl::UniquePtr<EC_KEY> private_key_; |
59 // The public key stored as an uncompressed P-256 point. | 59 // The public key stored as an uncompressed P-256 point. |
60 uint8_t public_key_[kUncompressedP256PointBytes]; | 60 uint8_t public_key_[kUncompressedP256PointBytes]; |
61 | 61 |
62 DISALLOW_COPY_AND_ASSIGN(P256KeyExchange); | 62 DISALLOW_COPY_AND_ASSIGN(P256KeyExchange); |
63 }; | 63 }; |
64 | 64 |
65 } // namespace net | 65 } // namespace net |
66 | 66 |
67 #endif // NET_QUIC_CORE_CRYPTO_P256_KEY_EXCHANGE_H_ | 67 #endif // NET_QUIC_CORE_CRYPTO_P256_KEY_EXCHANGE_H_ |
OLD | NEW |