1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CONTENT_CHILD_WEBCRYPTO_NSS_AES_NSS_H_
#define CONTENT_CHILD_WEBCRYPTO_NSS_AES_NSS_H_
#include <pkcs11t.h>
#include "content/child/webcrypto/algorithm_implementation.h"
namespace content {
namespace webcrypto {
// Base class for AES algorithms that provides the implementation for key
// creation and export.
class AesAlgorithm : public AlgorithmImplementation {
public:
// Constructs an AES algorithm whose keys will be imported using the NSS
// mechanism |import_mechanism| and NSS flags |import_flags|.
// |all_key_usages| is the set of all WebCrypto key usages that are
// allowed for imported or generated keys. |jwk_suffix| is the suffix
// used when constructing JWK names for the algorithm. For instance A128CBC
// is the JWK name for 128-bit AES-CBC. The |jwk_suffix| in this case would
// be "CBC".
AesAlgorithm(CK_MECHANISM_TYPE import_mechanism,
CK_FLAGS import_flags,
blink::WebCryptoKeyUsageMask all_key_usages,
const std::string& jwk_suffix);
// This is the same as the other AesAlgorithm constructor, however
// |import_flags| and |all_key_usages| are pre-filled to values for
// encryption/decryption algorithms (supports usages for: encrypt, decrypt,
// wrap, unwrap).
AesAlgorithm(CK_MECHANISM_TYPE import_mechanism,
const std::string& jwk_suffix);
virtual Status VerifyKeyUsagesBeforeGenerateKey(
blink::WebCryptoKeyUsageMask usage_mask) const override;
virtual Status GenerateSecretKey(const blink::WebCryptoAlgorithm& algorithm,
bool extractable,
blink::WebCryptoKeyUsageMask usage_mask,
blink::WebCryptoKey* key) const override;
virtual Status VerifyKeyUsagesBeforeImportKey(
blink::WebCryptoKeyFormat format,
blink::WebCryptoKeyUsageMask usage_mask) const override;
virtual Status ImportKeyRaw(const CryptoData& key_data,
const blink::WebCryptoAlgorithm& algorithm,
bool extractable,
blink::WebCryptoKeyUsageMask usage_mask,
blink::WebCryptoKey* key) const override;
virtual Status ImportKeyJwk(const CryptoData& key_data,
const blink::WebCryptoAlgorithm& algorithm,
bool extractable,
blink::WebCryptoKeyUsageMask usage_mask,
blink::WebCryptoKey* key) const override;
virtual Status ExportKeyRaw(const blink::WebCryptoKey& key,
std::vector<uint8_t>* buffer) const override;
virtual Status ExportKeyJwk(const blink::WebCryptoKey& key,
std::vector<uint8_t>* buffer) const override;
private:
const CK_MECHANISM_TYPE import_mechanism_;
const CK_FLAGS import_flags_;
const blink::WebCryptoKeyUsageMask all_key_usages_;
const std::string jwk_suffix_;
};
} // namespace webcrypto
} // namespace content
#endif // CONTENT_CHILD_WEBCRYPTO_NSS_AES_NSS_H_
|
