1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
// Copyright 2016 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef NET_QUIC_CRYPTO_QUIC_COMPRESSED_CERTS_CACHE_H_
#define NET_QUIC_CRYPTO_QUIC_COMPRESSED_CERTS_CACHE_H_
#include <string>
#include <vector>
#include "base/containers/mru_cache.h"
#include "base/memory/ref_counted.h"
#include "net/quic/crypto/proof_source.h"
using std::string;
namespace net {
// QuicCompressedCertsCache is a cache to track most recently compressed certs.
class NET_EXPORT_PRIVATE QuicCompressedCertsCache {
public:
explicit QuicCompressedCertsCache(int64_t max_num_certs);
~QuicCompressedCertsCache();
// Returns the pointer to the cached compressed cert if
// |chain, client_common_set_hashes, client_cached_cert_hashes| hits cache.
// Otherwise, return nullptr.
// Returned pointer might become invalid on the next call to Insert().
const string* GetCompressedCert(
const scoped_refptr<ProofSource::Chain>& chain,
const string& client_common_set_hashes,
const string& client_cached_cert_hashes);
// Inserts the specified
// |chain, client_common_set_hashes,
// client_cached_cert_hashes, compressed_cert| tuple to the cache.
// If the insertion causes the cache to become overfull, entries will
// be deleted in an LRU order to make room.
void Insert(const scoped_refptr<ProofSource::Chain>& chain,
const string& client_common_set_hashes,
const string& client_cached_cert_hashes,
const string& compressed_cert);
// Returns max number of cache entries the cache can carry.
size_t MaxSize();
// Returns current number of cache entries in the cache.
size_t Size();
// Default size of the QuicCompressedCertsCache per server side investigation.
static const size_t kQuicCompressedCertsCacheSize = 225;
private:
// A wrapper of the tuple:
// |chain, client_common_set_hashes, client_cached_cert_hashes|
// to identify uncompressed representation of certs.
struct UncompressedCerts {
UncompressedCerts();
UncompressedCerts(const scoped_refptr<ProofSource::Chain>& chain,
const string* client_common_set_hashes,
const string* client_cached_cert_hashes);
~UncompressedCerts();
const scoped_refptr<ProofSource::Chain> chain;
const string* client_common_set_hashes;
const string* client_cached_cert_hashes;
};
// Certs stored by QuicCompressedCertsCache where uncompressed certs data is
// used to identify the uncompressed representation of certs and
// |compressed_cert| is the cached compressed representation.
class CachedCerts {
public:
CachedCerts();
CachedCerts(const UncompressedCerts& uncompressed_certs,
const string& compressed_cert);
~CachedCerts();
// Returns true if the |uncompressed_certs| matches uncompressed
// representation of this cert.
bool MatchesUncompressedCerts(
const UncompressedCerts& uncompressed_certs) const;
const string* compressed_cert() const;
private:
// Uncompressed certs data.
scoped_refptr<ProofSource::Chain> chain_;
const string client_common_set_hashes_;
const string client_cached_cert_hashes_;
// Cached compressed representation derived from uncompressed certs.
const string compressed_cert_;
};
// Computes a uint64_t hash for |uncompressed_certs|.
uint64_t ComputeUncompressedCertsHash(
const UncompressedCerts& uncompressed_certs);
// Key is a unit64_t hash for UncompressedCerts. Stored associated value is
// CachedCerts which has both original uncompressed certs data and the
// compressed representation of the certs.
base::MRUCache<uint64_t, CachedCerts> certs_cache_;
};
} // namespace net
#endif // NET_QUIC_CRYPTO_QUIC_COMPRESSED_CERTS_CACHE_H_
|
