Index: content/child/webcrypto/nss/rsa_oaep_nss.cc |
diff --git a/content/child/webcrypto/nss/rsa_oaep_nss.cc b/content/child/webcrypto/nss/rsa_oaep_nss.cc |
deleted file mode 100644 |
index c9fd77f66cd98b59c3ff7d6dae24569ca4afc14b..0000000000000000000000000000000000000000 |
--- a/content/child/webcrypto/nss/rsa_oaep_nss.cc |
+++ /dev/null |
@@ -1,246 +0,0 @@ |
-// Copyright 2014 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#include <cryptohi.h> |
-#include <keyhi.h> |
-#include <pk11pub.h> |
-#include <secerr.h> |
-#include <sechash.h> |
- |
-#include "content/child/webcrypto/crypto_data.h" |
-#include "content/child/webcrypto/nss/key_nss.h" |
-#include "content/child/webcrypto/nss/rsa_key_nss.h" |
-#include "content/child/webcrypto/nss/util_nss.h" |
-#include "content/child/webcrypto/status.h" |
-#include "content/child/webcrypto/webcrypto_util.h" |
-#include "third_party/WebKit/public/platform/WebCryptoAlgorithmParams.h" |
-#include "third_party/WebKit/public/platform/WebCryptoKeyAlgorithm.h" |
- |
-namespace content { |
- |
-namespace webcrypto { |
- |
-namespace { |
- |
-Status NssSupportsRsaOaep() { |
- if (NssRuntimeSupport::Get()->IsRsaOaepSupported()) |
- return Status::Success(); |
- return Status::ErrorUnsupported( |
- "NSS version doesn't support RSA-OAEP. Try using version 3.16.2 or " |
- "later"); |
-} |
- |
-CK_MECHANISM_TYPE WebCryptoHashToMGFMechanism( |
- const blink::WebCryptoAlgorithm& algorithm) { |
- switch (algorithm.id()) { |
- case blink::WebCryptoAlgorithmIdSha1: |
- return CKG_MGF1_SHA1; |
- case blink::WebCryptoAlgorithmIdSha256: |
- return CKG_MGF1_SHA256; |
- case blink::WebCryptoAlgorithmIdSha384: |
- return CKG_MGF1_SHA384; |
- case blink::WebCryptoAlgorithmIdSha512: |
- return CKG_MGF1_SHA512; |
- default: |
- return CKM_INVALID_MECHANISM; |
- } |
-} |
- |
-CK_MECHANISM_TYPE WebCryptoHashToDigestMechanism( |
- const blink::WebCryptoAlgorithm& algorithm) { |
- switch (algorithm.id()) { |
- case blink::WebCryptoAlgorithmIdSha1: |
- return CKM_SHA_1; |
- case blink::WebCryptoAlgorithmIdSha256: |
- return CKM_SHA256; |
- case blink::WebCryptoAlgorithmIdSha384: |
- return CKM_SHA384; |
- case blink::WebCryptoAlgorithmIdSha512: |
- return CKM_SHA512; |
- default: |
- // Not a supported algorithm. |
- return CKM_INVALID_MECHANISM; |
- } |
-} |
- |
-bool InitializeRsaOaepParams(const blink::WebCryptoAlgorithm& hash, |
- const CryptoData& label, |
- CK_RSA_PKCS_OAEP_PARAMS* oaep_params) { |
- oaep_params->source = CKZ_DATA_SPECIFIED; |
- oaep_params->pSourceData = const_cast<unsigned char*>(label.bytes()); |
- oaep_params->ulSourceDataLen = label.byte_length(); |
- oaep_params->mgf = WebCryptoHashToMGFMechanism(hash); |
- oaep_params->hashAlg = WebCryptoHashToDigestMechanism(hash); |
- |
- if (oaep_params->mgf == CKM_INVALID_MECHANISM || |
- oaep_params->hashAlg == CKM_INVALID_MECHANISM) { |
- return false; |
- } |
- |
- return true; |
-} |
- |
-Status EncryptRsaOaep(SECKEYPublicKey* key, |
- const blink::WebCryptoAlgorithm& hash, |
- const CryptoData& label, |
- const CryptoData& data, |
- std::vector<uint8>* buffer) { |
- CK_RSA_PKCS_OAEP_PARAMS oaep_params = {0}; |
- if (!InitializeRsaOaepParams(hash, label, &oaep_params)) |
- return Status::ErrorUnsupported(); |
- |
- SECItem param; |
- param.type = siBuffer; |
- param.data = reinterpret_cast<unsigned char*>(&oaep_params); |
- param.len = sizeof(oaep_params); |
- |
- buffer->resize(SECKEY_PublicKeyStrength(key)); |
- unsigned char* buffer_data = Uint8VectorStart(buffer); |
- unsigned int output_len; |
- if (NssRuntimeSupport::Get()->pk11_pub_encrypt_func()(key, |
- CKM_RSA_PKCS_OAEP, |
- ¶m, |
- buffer_data, |
- &output_len, |
- buffer->size(), |
- data.bytes(), |
- data.byte_length(), |
- NULL) != SECSuccess) { |
- return Status::OperationError(); |
- } |
- |
- CHECK_LE(output_len, buffer->size()); |
- buffer->resize(output_len); |
- return Status::Success(); |
-} |
- |
-Status DecryptRsaOaep(SECKEYPrivateKey* key, |
- const blink::WebCryptoAlgorithm& hash, |
- const CryptoData& label, |
- const CryptoData& data, |
- std::vector<uint8>* buffer) { |
- Status status = NssSupportsRsaOaep(); |
- if (status.IsError()) |
- return status; |
- |
- CK_RSA_PKCS_OAEP_PARAMS oaep_params = {0}; |
- if (!InitializeRsaOaepParams(hash, label, &oaep_params)) |
- return Status::ErrorUnsupported(); |
- |
- SECItem param; |
- param.type = siBuffer; |
- param.data = reinterpret_cast<unsigned char*>(&oaep_params); |
- param.len = sizeof(oaep_params); |
- |
- const int modulus_length_bytes = PK11_GetPrivateModulusLen(key); |
- if (modulus_length_bytes <= 0) |
- return Status::ErrorUnexpected(); |
- |
- buffer->resize(modulus_length_bytes); |
- |
- unsigned char* buffer_data = Uint8VectorStart(buffer); |
- unsigned int output_len; |
- if (NssRuntimeSupport::Get()->pk11_priv_decrypt_func()(key, |
- CKM_RSA_PKCS_OAEP, |
- ¶m, |
- buffer_data, |
- &output_len, |
- buffer->size(), |
- data.bytes(), |
- data.byte_length()) != |
- SECSuccess) { |
- return Status::OperationError(); |
- } |
- |
- CHECK_LE(output_len, buffer->size()); |
- buffer->resize(output_len); |
- return Status::Success(); |
-} |
- |
-class RsaOaepImplementation : public RsaHashedAlgorithm { |
- public: |
- RsaOaepImplementation() |
- : RsaHashedAlgorithm( |
- CKF_ENCRYPT | CKF_DECRYPT | CKF_WRAP | CKF_UNWRAP, |
- blink::WebCryptoKeyUsageEncrypt | blink::WebCryptoKeyUsageWrapKey, |
- blink::WebCryptoKeyUsageDecrypt | |
- blink::WebCryptoKeyUsageUnwrapKey) {} |
- |
- virtual Status VerifyKeyUsagesBeforeGenerateKeyPair( |
- blink::WebCryptoKeyUsageMask combined_usage_mask, |
- blink::WebCryptoKeyUsageMask* public_usage_mask, |
- blink::WebCryptoKeyUsageMask* private_usage_mask) const OVERRIDE { |
- Status status = NssSupportsRsaOaep(); |
- if (status.IsError()) |
- return status; |
- return RsaHashedAlgorithm::VerifyKeyUsagesBeforeGenerateKeyPair( |
- combined_usage_mask, public_usage_mask, private_usage_mask); |
- } |
- |
- virtual Status VerifyKeyUsagesBeforeImportKey( |
- blink::WebCryptoKeyFormat format, |
- blink::WebCryptoKeyUsageMask usage_mask) const OVERRIDE { |
- Status status = NssSupportsRsaOaep(); |
- if (status.IsError()) |
- return status; |
- return RsaHashedAlgorithm::VerifyKeyUsagesBeforeImportKey(format, |
- usage_mask); |
- } |
- |
- virtual const char* GetJwkAlgorithm( |
- const blink::WebCryptoAlgorithmId hash) const OVERRIDE { |
- switch (hash) { |
- case blink::WebCryptoAlgorithmIdSha1: |
- return "RSA-OAEP"; |
- case blink::WebCryptoAlgorithmIdSha256: |
- return "RSA-OAEP-256"; |
- case blink::WebCryptoAlgorithmIdSha384: |
- return "RSA-OAEP-384"; |
- case blink::WebCryptoAlgorithmIdSha512: |
- return "RSA-OAEP-512"; |
- default: |
- return NULL; |
- } |
- } |
- |
- virtual Status Encrypt(const blink::WebCryptoAlgorithm& algorithm, |
- const blink::WebCryptoKey& key, |
- const CryptoData& data, |
- std::vector<uint8>* buffer) const OVERRIDE { |
- if (key.type() != blink::WebCryptoKeyTypePublic) |
- return Status::ErrorUnexpectedKeyType(); |
- |
- return EncryptRsaOaep( |
- PublicKeyNss::Cast(key)->key(), |
- key.algorithm().rsaHashedParams()->hash(), |
- CryptoData(algorithm.rsaOaepParams()->optionalLabel()), |
- data, |
- buffer); |
- } |
- |
- virtual Status Decrypt(const blink::WebCryptoAlgorithm& algorithm, |
- const blink::WebCryptoKey& key, |
- const CryptoData& data, |
- std::vector<uint8>* buffer) const OVERRIDE { |
- if (key.type() != blink::WebCryptoKeyTypePrivate) |
- return Status::ErrorUnexpectedKeyType(); |
- |
- return DecryptRsaOaep( |
- PrivateKeyNss::Cast(key)->key(), |
- key.algorithm().rsaHashedParams()->hash(), |
- CryptoData(algorithm.rsaOaepParams()->optionalLabel()), |
- data, |
- buffer); |
- } |
-}; |
- |
-} // namespace |
- |
-AlgorithmImplementation* CreatePlatformRsaOaepImplementation() { |
- return new RsaOaepImplementation; |
-} |
- |
-} // namespace webcrypto |
- |
-} // namespace content |