Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1373)

Unified Diff: components/cryptauth/device_to_device_secure_context.cc

Issue 2899863002: Updating D2D protocol to v1 to support separate sequence numbers. (Closed)
Patch Set: Addressing comments Created 3 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: components/cryptauth/device_to_device_secure_context.cc
diff --git a/components/cryptauth/device_to_device_secure_context.cc b/components/cryptauth/device_to_device_secure_context.cc
index 69f415c7ee73d3b4fed9ef7c8c3284a21d0647a0..3a11a63b8e7a53cbc4ef075ee2f0eae71b9c53f8 100644
--- a/components/cryptauth/device_to_device_secure_context.cc
+++ b/components/cryptauth/device_to_device_secure_context.cc
@@ -20,22 +20,28 @@ namespace {
// The version to put in the GcmMetadata field.
const int kGcmMetadataVersion = 1;
-// The sequence number of the last message used during authentication. These
+// The sequence number of the last message sent during authentication. These
// messages are sent and received before the SecureContext is created.
-const int kAuthenticationSequenceNumber = 2;
+const int kAuthenticationEncodeSequenceNumber = 1;
+
+// The sequence number of the last message received during authentication. These
+// messages are sent and received before the SecureContext is created.
+const int kAuthenticationDecodeSequenceNumber = 1;
} // namespace
DeviceToDeviceSecureContext::DeviceToDeviceSecureContext(
std::unique_ptr<SecureMessageDelegate> secure_message_delegate,
- const std::string& symmetric_key,
+ const SessionKeys& session_keys,
const std::string& responder_auth_message,
ProtocolVersion protocol_version)
: secure_message_delegate_(std::move(secure_message_delegate)),
- symmetric_key_(symmetric_key),
+ encryption_key_(session_keys.initiator_encode_key()),
+ decryption_key_(session_keys.responder_encode_key()),
responder_auth_message_(responder_auth_message),
protocol_version_(protocol_version),
- last_sequence_number_(kAuthenticationSequenceNumber),
+ last_encode_sequence_number_(kAuthenticationEncodeSequenceNumber),
+ last_decode_sequence_number_(kAuthenticationDecodeSequenceNumber),
weak_ptr_factory_(this) {}
DeviceToDeviceSecureContext::~DeviceToDeviceSecureContext() {}
@@ -47,7 +53,7 @@ void DeviceToDeviceSecureContext::Decode(const std::string& encoded_message,
unwrap_options.signature_scheme = securemessage::HMAC_SHA256;
secure_message_delegate_->UnwrapSecureMessage(
- encoded_message, symmetric_key_, unwrap_options,
+ encoded_message, decryption_key_, unwrap_options,
base::Bind(&DeviceToDeviceSecureContext::HandleUnwrapResult,
weak_ptr_factory_.GetWeakPtr(), callback));
}
@@ -61,7 +67,7 @@ void DeviceToDeviceSecureContext::Encode(const std::string& message,
// Wrap |message| inside a DeviceToDeviceMessage proto.
securemessage::DeviceToDeviceMessage device_to_device_message;
- device_to_device_message.set_sequence_number(++last_sequence_number_);
+ device_to_device_message.set_sequence_number(++last_encode_sequence_number_);
device_to_device_message.set_message(message);
SecureMessageDelegate::CreateOptions create_options;
@@ -70,7 +76,7 @@ void DeviceToDeviceSecureContext::Encode(const std::string& message,
gcm_metadata.SerializeToString(&create_options.public_metadata);
secure_message_delegate_->CreateSecureMessage(
- device_to_device_message.SerializeAsString(), symmetric_key_,
+ device_to_device_message.SerializeAsString(), encryption_key_,
create_options, callback);
}
@@ -97,9 +103,11 @@ void DeviceToDeviceSecureContext::HandleUnwrapResult(
}
// Check that the sequence number matches the expected sequence number.
- if (device_to_device_message.sequence_number() != last_sequence_number_ + 1) {
- PA_LOG(ERROR) << "Expected sequence_number=" << last_sequence_number_ + 1
- << ", but got " << device_to_device_message.sequence_number();
+ if (device_to_device_message.sequence_number() !=
+ last_decode_sequence_number_ + 1) {
+ PA_LOG(ERROR) << "Expected sequence_number="
+ << last_decode_sequence_number_ + 1 << ", but got "
+ << device_to_device_message.sequence_number();
callback.Run(std::string());
return;
}
@@ -114,7 +122,7 @@ void DeviceToDeviceSecureContext::HandleUnwrapResult(
return;
}
- last_sequence_number_++;
+ last_decode_sequence_number_++;
callback.Run(device_to_device_message.message());
}

Powered by Google App Engine
This is Rietveld 408576698