OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CONTENT_CHILD_WEBCRYPTO_NSS_RSA_KEY_NSS_H_ | 5 #ifndef CONTENT_CHILD_WEBCRYPTO_OPENSSL_RSA_KEY_OPENSSL_H_ |
6 #define CONTENT_CHILD_WEBCRYPTO_NSS_RSA_KEY_NSS_H_ | 6 #define CONTENT_CHILD_WEBCRYPTO_OPENSSL_RSA_KEY_OPENSSL_H_ |
7 | |
8 #include <pkcs11t.h> | |
9 | 7 |
10 #include "content/child/webcrypto/algorithm_implementation.h" | 8 #include "content/child/webcrypto/algorithm_implementation.h" |
11 | 9 |
12 namespace content { | 10 namespace content { |
13 | 11 |
14 namespace webcrypto { | 12 namespace webcrypto { |
15 | 13 |
16 class PublicKeyNss; | 14 class PublicKeyNss; |
17 class PrivateKeyNss; | 15 class PrivateKeyNss; |
18 | 16 |
19 // Base class for an RSA algorithm whose keys additionaly have a hash parameter | 17 // Base class for an RSA algorithm whose keys additionaly have a hash parameter |
20 // bound to them. Provides functionality for generating, importing, and | 18 // bound to them. Provides functionality for generating, importing, and |
21 // exporting keys. | 19 // exporting keys. |
22 class RsaHashedAlgorithm : public AlgorithmImplementation { | 20 class RsaHashedAlgorithm : public AlgorithmImplementation { |
23 public: | 21 public: |
24 // Constructs an RSA algorithm which will use the NSS flags |generate_flags| | 22 // |all_public_key_usages| and |all_private_key_usages| are the set of |
25 // when generating keys. |all_public_key_usages| and |all_private_key_usages| | 23 // WebCrypto key usages that are valid for created keys (public and private |
26 // are the set of WebCrypto key usages that are valid for created keys | 24 // respectively). |
27 // (public and private respectively). | |
28 // | 25 // |
29 // For instance if public keys support encryption and wrapping, and private | 26 // For instance if public keys support encryption and wrapping, and private |
30 // keys support decryption and unwrapping callers should set: | 27 // keys support decryption and unwrapping callers should set: |
31 // all_public_key_usages = UsageEncrypt | UsageWrap | 28 // all_public_key_usages = UsageEncrypt | UsageWrap |
32 // all_private_key_usages = UsageDecrypt | UsageUnwrap | 29 // all_private_key_usages = UsageDecrypt | UsageUnwrap |
33 // This information is used when importing or generating keys, to enforce | 30 // This information is used when importing or generating keys, to enforce |
34 // that valid key usages are allowed. | 31 // that valid key usages are allowed. |
35 RsaHashedAlgorithm(CK_FLAGS generate_flags, | 32 RsaHashedAlgorithm(blink::WebCryptoKeyUsageMask all_public_key_usages, |
36 blink::WebCryptoKeyUsageMask all_public_key_usages, | |
37 blink::WebCryptoKeyUsageMask all_private_key_usages) | 33 blink::WebCryptoKeyUsageMask all_private_key_usages) |
38 : generate_flags_(generate_flags), | 34 : all_public_key_usages_(all_public_key_usages), |
39 all_public_key_usages_(all_public_key_usages), | |
40 all_private_key_usages_(all_private_key_usages) {} | 35 all_private_key_usages_(all_private_key_usages) {} |
41 | 36 |
42 // For instance "RSA-OAEP-256". | |
43 virtual const char* GetJwkAlgorithm( | |
44 const blink::WebCryptoAlgorithmId hash) const = 0; | |
45 | |
46 virtual Status VerifyKeyUsagesBeforeGenerateKeyPair( | |
47 blink::WebCryptoKeyUsageMask combined_usage_mask, | |
48 blink::WebCryptoKeyUsageMask* public_usage_mask, | |
49 blink::WebCryptoKeyUsageMask* private_usage_mask) const OVERRIDE; | |
50 | |
51 virtual Status GenerateKeyPair( | |
52 const blink::WebCryptoAlgorithm& algorithm, | |
53 bool extractable, | |
54 blink::WebCryptoKeyUsageMask public_usage_mask, | |
55 blink::WebCryptoKeyUsageMask private_usage_mask, | |
56 blink::WebCryptoKey* public_key, | |
57 blink::WebCryptoKey* private_key) const OVERRIDE; | |
58 | |
59 virtual Status VerifyKeyUsagesBeforeImportKey( | 37 virtual Status VerifyKeyUsagesBeforeImportKey( |
60 blink::WebCryptoKeyFormat format, | 38 blink::WebCryptoKeyFormat format, |
61 blink::WebCryptoKeyUsageMask usage_mask) const OVERRIDE; | 39 blink::WebCryptoKeyUsageMask usage_mask) const OVERRIDE; |
62 | 40 |
63 virtual Status ImportKeyPkcs8(const CryptoData& key_data, | 41 virtual Status ImportKeyPkcs8(const CryptoData& key_data, |
64 const blink::WebCryptoAlgorithm& algorithm, | 42 const blink::WebCryptoAlgorithm& algorithm, |
65 bool extractable, | 43 bool extractable, |
66 blink::WebCryptoKeyUsageMask usage_mask, | 44 blink::WebCryptoKeyUsageMask usage_mask, |
67 blink::WebCryptoKey* key) const OVERRIDE; | 45 blink::WebCryptoKey* key) const OVERRIDE; |
68 | 46 |
69 virtual Status ImportKeySpki(const CryptoData& key_data, | 47 virtual Status ImportKeySpki(const CryptoData& key_data, |
70 const blink::WebCryptoAlgorithm& algorithm, | 48 const blink::WebCryptoAlgorithm& algorithm, |
71 bool extractable, | 49 bool extractable, |
72 blink::WebCryptoKeyUsageMask usage_mask, | 50 blink::WebCryptoKeyUsageMask usage_mask, |
73 blink::WebCryptoKey* key) const OVERRIDE; | 51 blink::WebCryptoKey* key) const OVERRIDE; |
74 | 52 |
75 virtual Status ExportKeyPkcs8(const blink::WebCryptoKey& key, | 53 virtual Status ExportKeyPkcs8(const blink::WebCryptoKey& key, |
76 std::vector<uint8>* buffer) const OVERRIDE; | 54 std::vector<uint8>* buffer) const OVERRIDE; |
77 | 55 |
78 virtual Status ExportKeySpki(const blink::WebCryptoKey& key, | 56 virtual Status ExportKeySpki(const blink::WebCryptoKey& key, |
79 std::vector<uint8>* buffer) const OVERRIDE; | 57 std::vector<uint8>* buffer) const OVERRIDE; |
80 | 58 |
81 virtual Status ImportKeyJwk(const CryptoData& key_data, | |
82 const blink::WebCryptoAlgorithm& algorithm, | |
83 bool extractable, | |
84 blink::WebCryptoKeyUsageMask usage_mask, | |
85 blink::WebCryptoKey* key) const OVERRIDE; | |
86 | |
87 virtual Status ExportKeyJwk(const blink::WebCryptoKey& key, | |
88 std::vector<uint8>* buffer) const OVERRIDE; | |
89 | |
90 private: | 59 private: |
91 CK_FLAGS generate_flags_; | |
92 blink::WebCryptoKeyUsageMask all_public_key_usages_; | 60 blink::WebCryptoKeyUsageMask all_public_key_usages_; |
93 blink::WebCryptoKeyUsageMask all_private_key_usages_; | 61 blink::WebCryptoKeyUsageMask all_private_key_usages_; |
94 }; | 62 }; |
95 | 63 |
96 } // namespace webcrypto | 64 } // namespace webcrypto |
97 | 65 |
98 } // namespace content | 66 } // namespace content |
99 | 67 |
100 #endif // CONTENT_CHILD_WEBCRYPTO_NSS_RSA_KEY_NSS_H_ | 68 #endif // CONTENT_CHILD_WEBCRYPTO_OPENSSL_RSA_KEY_OPENSSL_H_ |
OLD | NEW |