crypto/nss_key_util.h

   1 // Copyright 2015 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef CRYPTO_NSS_KEY_UTIL_H_
   6 #define CRYPTO_NSS_KEY_UTIL_H_
   7
   8 #include <stdint.h>
   9
  10 #include <vector>
  11
  12 #include "build/build_config.h"
  13 #include "crypto/crypto_export.h"
  14 #include "crypto/scoped_nss_types.h"
  15
  16 typedef struct PK11SlotInfoStr PK11SlotInfo;
  17
  18 namespace crypto {
  19
  20 // Generates a new RSA keypair of size |num_bits| in |slot|. Returns true on
  21 // success and false on failure. If |permanent| is true, the resulting key is
  22 // permanent and is not exportable in plaintext form.
  23 CRYPTO_EXPORT bool GenerateRSAKeyPairNSS(
  24     PK11SlotInfo* slot,
  25     uint16_t num_bits,
  26     bool permanent,
  27     ScopedSECKEYPublicKey* out_public_key,
  28     ScopedSECKEYPrivateKey* out_private_key);
  29
  30 // Imports a private key from |input| into |slot|. |input| is interpreted as a
  31 // DER-encoded PrivateKeyInfo block from PKCS #8. Returns nullptr on error. If
  32 // |permanent| is true, the resulting key is permanent and is not exportable in
  33 // plaintext form.
  34 CRYPTO_EXPORT ScopedSECKEYPrivateKey
  35 ImportNSSKeyFromPrivateKeyInfo(PK11SlotInfo* slot,
  36                                const std::vector<uint8_t>& input,
  37                                bool permanent);
  38
  39 #if defined(USE_NSS_CERTS)
  40
  41 // Decodes |input| as a DER-encoded X.509 SubjectPublicKeyInfo and searches for
  42 // the private key half in the key database. Returns the private key on success
  43 // or nullptr on error.
  44 CRYPTO_EXPORT ScopedSECKEYPrivateKey
  45 FindNSSKeyFromPublicKeyInfo(const std::vector<uint8_t>& input);
  46
  47 // Decodes |input| as a DER-encoded X.509 SubjectPublicKeyInfo and searches for
  48 // the private key half in the slot specified by |slot|. Returns the private key
  49 // on success or nullptr on error.
  50 CRYPTO_EXPORT ScopedSECKEYPrivateKey
  51 FindNSSKeyFromPublicKeyInfoInSlot(const std::vector<uint8_t>& input,
  52                                   PK11SlotInfo* slot);
  53
  54 #endif  // defined(USE_NSS_CERTS)
  55
  56 }  // namespace crypto
  57
  58 #endif  // CRYPTO_NSS_KEY_UTIL_H_