content/child/webcrypto/nss/rsa_key_nss.h

   1 // Copyright 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef CONTENT_CHILD_WEBCRYPTO_NSS_RSA_KEY_NSS_H_
   6 #define CONTENT_CHILD_WEBCRYPTO_NSS_RSA_KEY_NSS_H_
   7
   8 #include <pkcs11t.h>
   9
  10 #include "content/child/webcrypto/algorithm_implementation.h"
  11
  12 namespace content {
  13
  14 namespace webcrypto {
  15
  16 class PublicKeyNss;
  17 class PrivateKeyNss;
  18
  19 // Base class for an RSA algorithm whose keys additionaly have a hash parameter
  20 // bound to them. Provides functionality for generating, importing, and
  21 // exporting keys.
  22 class RsaHashedAlgorithm : public AlgorithmImplementation {
  23  public:
  24   // Constructs an RSA algorithm which will use the NSS flags |generate_flags|
  25   // when generating keys. |all_public_key_usages| and |all_private_key_usages|
  26   // are the set of WebCrypto key usages that are valid for created keys
  27   // (public and private respectively).
  28   //
  29   // For instance if public keys support encryption and wrapping, and private
  30   // keys support decryption and unwrapping callers should set:
  31   //    all_public_key_usages = UsageEncrypt | UsageWrap
  32   //    all_private_key_usages = UsageDecrypt | UsageUnwrap
  33   // This information is used when importing or generating keys, to enforce
  34   // that valid key usages are allowed.
  35   RsaHashedAlgorithm(CK_FLAGS generate_flags,
  36                      blink::WebCryptoKeyUsageMask all_public_key_usages,
  37                      blink::WebCryptoKeyUsageMask all_private_key_usages)
  38       : generate_flags_(generate_flags),
  39         all_public_key_usages_(all_public_key_usages),
  40         all_private_key_usages_(all_private_key_usages) {}
  41
  42   // For instance "RSA-OAEP-256".
  43   virtual const char* GetJwkAlgorithm(
  44       const blink::WebCryptoAlgorithmId hash) const = 0;
  45
  46   virtual Status VerifyKeyUsagesBeforeGenerateKeyPair(
  47       blink::WebCryptoKeyUsageMask combined_usage_mask,
  48       blink::WebCryptoKeyUsageMask* public_usage_mask,
  49       blink::WebCryptoKeyUsageMask* private_usage_mask) const OVERRIDE;
  50
  51   virtual Status GenerateKeyPair(
  52       const blink::WebCryptoAlgorithm& algorithm,
  53       bool extractable,
  54       blink::WebCryptoKeyUsageMask public_usage_mask,
  55       blink::WebCryptoKeyUsageMask private_usage_mask,
  56       blink::WebCryptoKey* public_key,
  57       blink::WebCryptoKey* private_key) const OVERRIDE;
  58
  59   virtual Status VerifyKeyUsagesBeforeImportKey(
  60       blink::WebCryptoKeyFormat format,
  61       blink::WebCryptoKeyUsageMask usage_mask) const OVERRIDE;
  62
  63   virtual Status ImportKeyPkcs8(const CryptoData& key_data,
  64                                 const blink::WebCryptoAlgorithm& algorithm,
  65                                 bool extractable,
  66                                 blink::WebCryptoKeyUsageMask usage_mask,
  67                                 blink::WebCryptoKey* key) const OVERRIDE;
  68
  69   virtual Status ImportKeySpki(const CryptoData& key_data,
  70                                const blink::WebCryptoAlgorithm& algorithm,
  71                                bool extractable,
  72                                blink::WebCryptoKeyUsageMask usage_mask,
  73                                blink::WebCryptoKey* key) const OVERRIDE;
  74
  75   virtual Status ExportKeyPkcs8(const blink::WebCryptoKey& key,
  76                                 std::vector<uint8_t>* buffer) const OVERRIDE;
  77
  78   virtual Status ExportKeySpki(const blink::WebCryptoKey& key,
  79                                std::vector<uint8_t>* buffer) const OVERRIDE;
  80
  81   virtual Status ImportKeyJwk(const CryptoData& key_data,
  82                               const blink::WebCryptoAlgorithm& algorithm,
  83                               bool extractable,
  84                               blink::WebCryptoKeyUsageMask usage_mask,
  85                               blink::WebCryptoKey* key) const OVERRIDE;
  86
  87   virtual Status ExportKeyJwk(const blink::WebCryptoKey& key,
  88                               std::vector<uint8_t>* buffer) const OVERRIDE;
  89
  90  private:
  91   CK_FLAGS generate_flags_;
  92   blink::WebCryptoKeyUsageMask all_public_key_usages_;
  93   blink::WebCryptoKeyUsageMask all_private_key_usages_;
  94 };
  95
  96 }  // namespace webcrypto
  97
  98 }  // namespace content
  99
 100 #endif  // CONTENT_CHILD_WEBCRYPTO_NSS_RSA_KEY_NSS_H_