| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef NET_BASE_HASH_VALUE_H_ | |
| 6 #define NET_BASE_HASH_VALUE_H_ | |
| 7 | |
| 8 #include <string.h> | |
| 9 | |
| 10 #include <string> | |
| 11 #include <vector> | |
| 12 | |
| 13 #include "base/basictypes.h" | |
| 14 #include "base/strings/string_piece.h" | |
| 15 #include "build/build_config.h" | |
| 16 #include "net/base/net_export.h" | |
| 17 | |
| 18 namespace net { | |
| 19 | |
| 20 struct NET_EXPORT SHA1HashValue { | |
| 21 bool Equals(const SHA1HashValue& other) const; | |
| 22 | |
| 23 unsigned char data[20]; | |
| 24 }; | |
| 25 | |
| 26 struct NET_EXPORT SHA256HashValue { | |
| 27 bool Equals(const SHA256HashValue& other) const; | |
| 28 | |
| 29 unsigned char data[32]; | |
| 30 }; | |
| 31 | |
| 32 enum HashValueTag { | |
| 33 HASH_VALUE_SHA1, | |
| 34 HASH_VALUE_SHA256, | |
| 35 | |
| 36 // This must always be last. | |
| 37 HASH_VALUE_TAGS_COUNT | |
| 38 }; | |
| 39 | |
| 40 class NET_EXPORT HashValue { | |
| 41 public: | |
| 42 explicit HashValue(HashValueTag tag) : tag(tag) {} | |
| 43 HashValue() : tag(HASH_VALUE_SHA1) {} | |
| 44 | |
| 45 // Check for equality of hash values | |
| 46 // This function may have VARIABLE timing which leaks information | |
| 47 // about its inputs. For example it may exit early once a | |
| 48 // nonequal character is discovered. Thus, for security reasons | |
| 49 // this function MUST NOT be used with secret values (such as | |
| 50 // password hashes, MAC tags, etc.) | |
| 51 bool Equals(const HashValue& other) const; | |
| 52 | |
| 53 // Serializes/Deserializes hashes in the form of | |
| 54 // <hash-name>"/"<base64-hash-value> | |
| 55 // (eg: "sha1/...") | |
| 56 // This format may be persisted to permanent storage, so | |
| 57 // care should be taken before changing the serialization. | |
| 58 // | |
| 59 // This format is used for: | |
| 60 // - net_internals display/setting public-key pins | |
| 61 // - logging public-key pins | |
| 62 // - serializing public-key pins | |
| 63 | |
| 64 // Deserializes a HashValue from a string. On error, returns | |
| 65 // false and MAY change the contents of HashValue to contain invalid data. | |
| 66 bool FromString(const base::StringPiece input); | |
| 67 | |
| 68 // Serializes the HashValue to a string. If an invalid HashValue | |
| 69 // is supplied (eg: an unknown hash tag), returns "unknown"/<base64> | |
| 70 std::string ToString() const; | |
| 71 | |
| 72 size_t size() const; | |
| 73 unsigned char* data(); | |
| 74 const unsigned char* data() const; | |
| 75 | |
| 76 HashValueTag tag; | |
| 77 | |
| 78 private: | |
| 79 union { | |
| 80 SHA1HashValue sha1; | |
| 81 SHA256HashValue sha256; | |
| 82 } fingerprint; | |
| 83 }; | |
| 84 | |
| 85 typedef std::vector<HashValue> HashValueVector; | |
| 86 | |
| 87 | |
| 88 class SHA1HashValueLessThan { | |
| 89 public: | |
| 90 bool operator()(const SHA1HashValue& lhs, | |
| 91 const SHA1HashValue& rhs) const { | |
| 92 return memcmp(lhs.data, rhs.data, sizeof(lhs.data)) < 0; | |
| 93 } | |
| 94 }; | |
| 95 | |
| 96 class SHA256HashValueLessThan { | |
| 97 public: | |
| 98 bool operator()(const SHA256HashValue& lhs, | |
| 99 const SHA256HashValue& rhs) const { | |
| 100 return memcmp(lhs.data, rhs.data, sizeof(lhs.data)) < 0; | |
| 101 } | |
| 102 }; | |
| 103 | |
| 104 class HashValuesEqual { | |
| 105 public: | |
| 106 explicit HashValuesEqual(const HashValue& fingerprint) : | |
| 107 fingerprint_(fingerprint) {} | |
| 108 | |
| 109 bool operator()(const HashValue& other) const { | |
| 110 return fingerprint_.Equals(other); | |
| 111 } | |
| 112 | |
| 113 const HashValue& fingerprint_; | |
| 114 }; | |
| 115 | |
| 116 | |
| 117 // IsSHA1HashInSortedArray returns true iff |hash| is in |array|, a sorted | |
| 118 // array of SHA1 hashes. | |
| 119 bool IsSHA1HashInSortedArray(const SHA1HashValue& hash, | |
| 120 const uint8* array, | |
| 121 size_t array_byte_len); | |
| 122 | |
| 123 } // namespace net | |
| 124 | |
| 125 #endif // NET_BASE_HASH_VALUE_H_ | |
| OLD | NEW |