Index: components/cryptauth/session_keys.cc |
diff --git a/components/cryptauth/session_keys.cc b/components/cryptauth/session_keys.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..74783a2d30bd8ae8bc9cbedbd0d264844add8659 |
--- /dev/null |
+++ b/components/cryptauth/session_keys.cc |
@@ -0,0 +1,56 @@ |
+// Copyright 2017 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include "components/cryptauth/session_keys.h" |
+ |
+#include "base/strings/string_piece.h" |
+#include "crypto/hkdf.h" |
+ |
+namespace cryptauth { |
+namespace { |
+ |
+// The salt used to compute the devired keys. SHA256 of "D2D". |
+const uint8_t kSalt[] = {0x82, 0xAA, 0x55, 0xA0, 0xD3, 0x97, 0xF8, 0x83, |
+ 0x46, 0xCA, 0x1C, 0xEE, 0x8D, 0x39, 0x09, 0xB9, |
+ 0x5F, 0x13, 0xFA, 0x7D, 0xEB, 0x1D, 0x4A, 0xB3, |
+ 0x83, 0x76, 0xB8, 0x25, 0x6D, 0xA8, 0x55, 0x10}; |
+ |
+// The number of bytes in the derived keys. |
+const int kKeySize = 32; |
+ |
+// String used in the derivation of the inititor encoding key. |
+const char kInitiatorPurpose[] = "initiator"; |
+ |
+// String used in the derivation of the responder encoding key. |
+const char kResponderPurpose[] = "responder"; |
+ |
+} // namespace |
+ |
+SessionKeys::SessionKeys(const std::string& master_symmetric_key) { |
+ std::string salt(reinterpret_cast<const char*>(&kSalt[0]), sizeof(kSalt)); |
+ |
+ // We set the key_length to the length of the expected output and then take |
+ // the result from the first key, which is the client write key. |
+ crypto::HKDF initiator_encode(master_symmetric_key, salt, kInitiatorPurpose, |
+ kKeySize, 0, 0); |
+ initiator_encode_key_ = initiator_encode.client_write_key().as_string(); |
+ |
+ crypto::HKDF responder_encode(master_symmetric_key, salt, kResponderPurpose, |
+ kKeySize, 0, 0); |
+ responder_encode_key_ = responder_encode.client_write_key().as_string(); |
+} |
+ |
+SessionKeys::SessionKeys() {} |
+ |
+SessionKeys::~SessionKeys() {} |
+ |
+std::string SessionKeys::initiator_encode_key() const { |
+ return initiator_encode_key_; |
+} |
+ |
+std::string SessionKeys::responder_encode_key() const { |
+ return responder_encode_key_; |
+} |
+ |
+} // namespace cryptauth |