crypto_handshake.cc revision 868fa2fe829687343ffae624259930155e16dbd8
12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2013 The Chromium Authors. All rights reserved. 22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file. 42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 52a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/crypto_handshake.h" 62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 7c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include <ctype.h> 8c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/memory/scoped_ptr.h" 102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/stl_util.h" 1190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)#include "base/stringprintf.h" 12c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "base/strings/string_number_conversions.h" 13c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "base/strings/string_split.h" 142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "crypto/secure_hash.h" 152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/base/net_util.h" 16b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)#include "net/quic/crypto/cert_compressor.h" 17868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "net/quic/crypto/channel_id.h" 18b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)#include "net/quic/crypto/common_cert_set.h" 192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/crypto_framer.h" 202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/crypto_utils.h" 212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/curve25519_key_exchange.h" 222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/key_exchange.h" 23c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "net/quic/crypto/p256_key_exchange.h" 24c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "net/quic/crypto/proof_verifier.h" 252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/quic_decrypter.h" 262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/quic_encrypter.h" 272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/crypto/quic_random.h" 282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/quic/quic_protocol.h" 29b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)#include "net/quic/quic_utils.h" 302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using base::StringPiece; 3290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)using base::StringPrintf; 33c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)using std::map; 342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using std::string; 352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using std::vector; 362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace net { 382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)CryptoHandshakeMessage::CryptoHandshakeMessage() 4090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) : tag_(0), 4190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) minimum_size_(0) {} 422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)CryptoHandshakeMessage::CryptoHandshakeMessage( 442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const CryptoHandshakeMessage& other) 45c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) : tag_(other.tag_), 4690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) tag_value_map_(other.tag_value_map_), 4790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) minimum_size_(other.minimum_size_) { 482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Don't copy serialized_. scoped_ptr doesn't have a copy constructor. 49868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // The new object can lazily reconstruct serialized_. 502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)CryptoHandshakeMessage::~CryptoHandshakeMessage() {} 532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)CryptoHandshakeMessage& CryptoHandshakeMessage::operator=( 552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const CryptoHandshakeMessage& other) { 56c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tag_ = other.tag_; 57c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tag_value_map_ = other.tag_value_map_; 582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Don't copy serialized_. scoped_ptr doesn't have an assignment operator. 592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // However, invalidate serialized_. 602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) serialized_.reset(); 6190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) minimum_size_ = other.minimum_size_; 622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return *this; 632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 65c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void CryptoHandshakeMessage::Clear() { 66c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tag_ = 0; 67c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tag_value_map_.clear(); 6890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) minimum_size_ = 0; 69c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) serialized_.reset(); 70c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 71c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)const QuicData& CryptoHandshakeMessage::GetSerialized() const { 732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (!serialized_.get()) { 742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) serialized_.reset(CryptoFramer::ConstructHandshakeMessage(*this)); 752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return *serialized_.get(); 772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 79868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)void CryptoHandshakeMessage::MarkDirty() { 80868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) serialized_.reset(); 81868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)} 82868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 83b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)void CryptoHandshakeMessage::Insert(QuicTagValueMap::const_iterator begin, 84b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTagValueMap::const_iterator end) { 85c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tag_value_map_.insert(begin, end); 86c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 87c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 88b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)void CryptoHandshakeMessage::SetTaglist(QuicTag tag, ...) { 89b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) // Warning, if sizeof(QuicTag) > sizeof(int) then this function will break 902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // because the terminating 0 will only be promoted to int. 91b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) COMPILE_ASSERT(sizeof(QuicTag) <= sizeof(int), 92868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) crypto_tag_may_not_be_larger_than_int_or_varargs_will_break); 932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 94b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) vector<QuicTag> tags; 952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) va_list ap; 962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) va_start(ap, tag); 982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) for (;;) { 99b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTag list_item = va_arg(ap, QuicTag); 100c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (list_item == 0) { 1012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) break; 1022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 103c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tags.push_back(list_item); 1042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Because of the way that we keep tags in memory, we can copy the contents 1072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // of the vector and get the correct bytes in wire format. See 1082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // crypto_protocol.h. This assumes that the system is little-endian. 1092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SetVector(tag, tags); 1102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) va_end(ap); 1122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 114b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)void CryptoHandshakeMessage::SetStringPiece(QuicTag tag, StringPiece value) { 115c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) tag_value_map_[tag] = value.as_string(); 116c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 117c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 118868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)void CryptoHandshakeMessage::Erase(QuicTag tag) { 119868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) tag_value_map_.erase(tag); 120868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)} 121868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 122b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)QuicErrorCode CryptoHandshakeMessage::GetTaglist(QuicTag tag, 123b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) const QuicTag** out_tags, 1242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) size_t* out_len) const { 125b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTagValueMap::const_iterator it = tag_value_map_.find(tag); 1262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) QuicErrorCode ret = QUIC_NO_ERROR; 1272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 128c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (it == tag_value_map_.end()) { 1292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ret = QUIC_CRYPTO_MESSAGE_PARAMETER_NOT_FOUND; 130b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } else if (it->second.size() % sizeof(QuicTag) != 0) { 1312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ret = QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 1322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (ret != QUIC_NO_ERROR) { 1352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) *out_tags = NULL; 1362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) *out_len = 0; 1372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return ret; 1382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 140b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) *out_tags = reinterpret_cast<const QuicTag*>(it->second.data()); 141b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) *out_len = it->second.size() / sizeof(QuicTag); 1422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return ret; 1432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 145b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)bool CryptoHandshakeMessage::GetStringPiece(QuicTag tag, 1462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) StringPiece* out) const { 147b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTagValueMap::const_iterator it = tag_value_map_.find(tag); 148c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (it == tag_value_map_.end()) { 1492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return false; 1502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) *out = it->second; 1522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return true; 1532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 155b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)QuicErrorCode CryptoHandshakeMessage::GetNthValue24(QuicTag tag, 156c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) unsigned index, 157c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece* out) const { 1582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) StringPiece value; 1592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (!GetStringPiece(tag, &value)) { 1602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_CRYPTO_MESSAGE_PARAMETER_NOT_FOUND; 1612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) for (unsigned i = 0;; i++) { 1642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (value.empty()) { 1652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_CRYPTO_MESSAGE_INDEX_NOT_FOUND; 1662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 167b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (value.size() < 3) { 1682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 1692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const unsigned char* data = 1722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) reinterpret_cast<const unsigned char*>(value.data()); 1732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) size_t size = static_cast<size_t>(data[0]) | 174b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) (static_cast<size_t>(data[1]) << 8) | 175b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) (static_cast<size_t>(data[2]) << 16); 176b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) value.remove_prefix(3); 1772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (value.size() < size) { 1792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 1802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (i == index) { 1832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) *out = StringPiece(value.data(), size); 1842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_NO_ERROR; 1852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) value.remove_prefix(size); 1882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 191b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)QuicErrorCode CryptoHandshakeMessage::GetUint16(QuicTag tag, 1922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) uint16* out) const { 1932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return GetPOD(tag, out, sizeof(uint16)); 1942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 196b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)QuicErrorCode CryptoHandshakeMessage::GetUint32(QuicTag tag, 1972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) uint32* out) const { 1982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return GetPOD(tag, out, sizeof(uint32)); 1992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 2002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 201b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)QuicErrorCode CryptoHandshakeMessage::GetUint64(QuicTag tag, 202b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) uint64* out) const { 203b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) return GetPOD(tag, out, sizeof(uint64)); 204b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)} 205b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 20690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)size_t CryptoHandshakeMessage::size() const { 20790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) size_t ret = sizeof(QuicTag) + 20890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) sizeof(uint16) /* number of entries */ + 20990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) sizeof(uint16) /* padding */; 21090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) ret += (sizeof(QuicTag) + sizeof(uint32) /* end offset */) * 21190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) tag_value_map_.size(); 21290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) for (QuicTagValueMap::const_iterator i = tag_value_map_.begin(); 21390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) i != tag_value_map_.end(); ++i) { 21490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) ret += i->second.size(); 21590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) } 21690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 21790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) return ret; 21890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)} 21990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 22090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)void CryptoHandshakeMessage::set_minimum_size(size_t min_bytes) { 221868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (min_bytes == minimum_size_) { 222868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return; 223868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 22490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) serialized_.reset(); 22590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) minimum_size_ = min_bytes; 22690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)} 22790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 22890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)size_t CryptoHandshakeMessage::minimum_size() const { 22990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) return minimum_size_; 23090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles)} 23190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 232c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)string CryptoHandshakeMessage::DebugString() const { 233c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return DebugStringInternal(0); 234c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 235c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 2362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)QuicErrorCode CryptoHandshakeMessage::GetPOD( 237b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTag tag, void* out, size_t len) const { 238b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTagValueMap::const_iterator it = tag_value_map_.find(tag); 2392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) QuicErrorCode ret = QUIC_NO_ERROR; 2402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 241c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (it == tag_value_map_.end()) { 2422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ret = QUIC_CRYPTO_MESSAGE_PARAMETER_NOT_FOUND; 2432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } else if (it->second.size() != len) { 2442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ret = QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 2452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) if (ret != QUIC_NO_ERROR) { 2482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) memset(out, 0, len); 2492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return ret; 2502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) memcpy(out, it->second.data(), len); 2532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return ret; 2542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 2552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 256c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)string CryptoHandshakeMessage::DebugStringInternal(size_t indent) const { 25790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) string ret = string(2 * indent, ' ') + QuicUtils::TagToString(tag_) + "<\n"; 258c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ++indent; 259b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) for (QuicTagValueMap::const_iterator it = tag_value_map_.begin(); 260c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) it != tag_value_map_.end(); ++it) { 26190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) ret += string(2 * indent, ' ') + QuicUtils::TagToString(it->first) + ": "; 262c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 263c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) bool done = false; 264c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) switch (it->first) { 265b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kKATO: 266b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kVERS: 267b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) // uint32 value 268b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (it->second.size() == 4) { 269b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) uint32 value; 270b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) memcpy(&value, it->second.data(), sizeof(value)); 271b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) ret += base::UintToString(value); 272b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) done = true; 273c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 274b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) break; 275b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kKEXS: 276b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kAEAD: 277b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kCGST: 278b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kPDMD: 279b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) // tag lists 280b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (it->second.size() % sizeof(QuicTag) == 0) { 281b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) for (size_t j = 0; j < it->second.size(); j += sizeof(QuicTag)) { 282b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicTag tag; 283b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) memcpy(&tag, it->second.data() + j, sizeof(tag)); 284b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (j > 0) { 285b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) ret += ","; 286b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 28790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) ret += QuicUtils::TagToString(tag); 288b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 289c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) done = true; 290c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 291b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) break; 292b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kSCFG: 293b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) // nested messages. 294b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!it->second.empty()) { 295b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) scoped_ptr<CryptoHandshakeMessage> msg( 296b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) CryptoFramer::ParseMessage(it->second)); 297b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (msg.get()) { 298b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) ret += "\n"; 299b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) ret += msg->DebugStringInternal(indent + 1); 300b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 301b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) done = true; 302b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 303b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 304b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) break; 30590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) case kPAD: 30690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) ret += StringPrintf("(%d bytes of padding)", 30790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) static_cast<int>(it->second.size())); 30890dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) done = true; 30990dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) break; 310c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 311c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 312c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!done) { 313c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // If there's no specific format for this tag, or the value is invalid, 314c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // then just use hex. 315c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ret += base::HexEncode(it->second.data(), it->second.size()); 316c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 317c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ret += "\n"; 318c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 319c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) --indent; 320c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ret += string(2 * indent, ' ') + ">"; 321c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return ret; 322c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 323c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 324c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoNegotiatedParameters::QuicCryptoNegotiatedParameters() 3252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) : version(0), 3262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key_exchange(0), 3272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) aead(0) { 3282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 330b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)QuicCryptoNegotiatedParameters::~QuicCryptoNegotiatedParameters() {} 3312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 332b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)CrypterPair::CrypterPair() {} 333868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 334b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)CrypterPair::~CrypterPair() {} 335c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 336c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)// static 337b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)const char QuicCryptoConfig::kInitialLabel[] = "QUIC key expansion"; 338b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 339868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)// static 340868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)const char QuicCryptoConfig::kCETVLabel[] = "QUIC CETV block"; 341868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 342868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)// static 343b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)const char QuicCryptoConfig::kForwardSecureLabel[] = 344b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) "QUIC forward secure key expansion"; 345c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 3462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)QuicCryptoConfig::QuicCryptoConfig() 347b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) : version(0), 348868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) common_cert_sets(CommonCertSets::GetInstanceQUIC()) { 3492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 351c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoConfig::~QuicCryptoConfig() {} 352c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 353c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::QuicCryptoClientConfig() {} 354c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 355c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::~QuicCryptoClientConfig() { 356c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) STLDeleteValues(&cached_states_); 3572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 359c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::CachedState::CachedState() 360c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) : server_config_valid_(false) {} 361c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 362c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::CachedState::~CachedState() {} 363c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 364868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)bool QuicCryptoClientConfig::CachedState::IsComplete(QuicWallTime now) const { 365868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (server_config_.empty() || !server_config_valid_) { 366868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return false; 367868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 368868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 369868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const CryptoHandshakeMessage* scfg = GetServerConfig(); 370868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (!scfg) { 371868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // Should be impossible short of cache corruption. 372868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) DCHECK(false); 373868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return false; 374868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 375868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 376868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) uint64 expiry_seconds; 377868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (scfg->GetUint64(kEXPY, &expiry_seconds) != QUIC_NO_ERROR || 378868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) now.ToUNIXSeconds() >= expiry_seconds) { 379868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return false; 380868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 381868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 382868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return true; 383c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 384c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 385c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const CryptoHandshakeMessage* 386c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::CachedState::GetServerConfig() const { 387c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (server_config_.empty()) { 388c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return NULL; 3892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 391c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!scfg_.get()) { 392c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) scfg_.reset(CryptoFramer::ParseMessage(server_config_)); 393c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) DCHECK(scfg_.get()); 3942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 395c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return scfg_.get(); 396c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 3972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 398868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)QuicErrorCode QuicCryptoClientConfig::CachedState::SetServerConfig( 399868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) StringPiece server_config, QuicWallTime now, string* error_details) { 400868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const bool matches_existing = server_config == server_config_; 401868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 402868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // Even if the new server config matches the existing one, we still wish to 403868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // reject it if it has expired. 404868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) scoped_ptr<CryptoHandshakeMessage> new_scfg_storage; 405868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const CryptoHandshakeMessage* new_scfg; 406868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 407868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (!matches_existing) { 408868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) new_scfg_storage.reset(CryptoFramer::ParseMessage(server_config)); 409868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) new_scfg = new_scfg_storage.get(); 410868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } else { 411868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) new_scfg = GetServerConfig(); 41290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) } 41390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) 414868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (!new_scfg) { 415868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) *error_details = "SCFG invalid"; 416868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 417868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 418868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 419868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) uint64 expiry_seconds; 420868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (new_scfg->GetUint64(kEXPY, &expiry_seconds) != QUIC_NO_ERROR) { 421868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) *error_details = "SCFG missing EXPY"; 422868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 4232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 424868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 425868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (now.ToUNIXSeconds() >= expiry_seconds) { 426868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) *error_details = "SCFG has expired"; 427868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return QUIC_CRYPTO_SERVER_CONFIG_EXPIRED; 428868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 429868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 430868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (!matches_existing) { 431868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) server_config_ = server_config.as_string(); 432868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) server_config_valid_ = false; 433868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) scfg_.reset(new_scfg_storage.release()); 434868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 435868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return QUIC_NO_ERROR; 436868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)} 437868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 438868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)void QuicCryptoClientConfig::CachedState::InvalidateServerConfig() { 439868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) server_config_.clear(); 440868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) scfg_.reset(); 44190dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) server_config_valid_ = false; 442c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 4432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 444b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)void QuicCryptoClientConfig::CachedState::SetProof(const vector<string>& certs, 445b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) StringPiece signature) { 446868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) bool has_changed = 447868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) signature != server_config_sig_ || certs_.size() != certs.size(); 448c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 449c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!has_changed) { 450c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) for (size_t i = 0; i < certs_.size(); i++) { 451b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (certs_[i] != certs[i]) { 452c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) has_changed = true; 453c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) break; 454c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 4552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 458c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!has_changed) { 459c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return; 4602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 4612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 462c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // If the proof has changed then it needs to be revalidated. 463c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) server_config_valid_ = false; 464b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) certs_ = certs; 465c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) server_config_sig_ = signature.as_string(); 466c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 4672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 468c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void QuicCryptoClientConfig::CachedState::SetProofValid() { 469c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) server_config_valid_ = true; 470c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 471c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 472b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles)const string& QuicCryptoClientConfig::CachedState::server_config() const { 473c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return server_config_; 474c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 475c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 476c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const string& 477c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::CachedState::source_address_token() const { 478c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return source_address_token_; 4792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 481c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const vector<string>& QuicCryptoClientConfig::CachedState::certs() const { 482c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return certs_; 4832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 4842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 485c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const string& QuicCryptoClientConfig::CachedState::signature() const { 486c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return server_config_sig_; 487c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 488c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 489c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)bool QuicCryptoClientConfig::CachedState::proof_valid() const { 490c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return server_config_valid_; 491c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 492c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 493c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void QuicCryptoClientConfig::CachedState::set_source_address_token( 494c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece token) { 495c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) source_address_token_ = token.as_string(); 496c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 497c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 498c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void QuicCryptoClientConfig::SetDefaults() { 4992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Version must be 0. 500868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // TODO(agl): this version stuff is obsolete now. 501c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) version = QuicCryptoConfig::CONFIG_VERSION; 5022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 5032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Key exchange methods. 504c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) kexs.resize(2); 5052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) kexs[0] = kC255; 506c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) kexs[1] = kP256; 5072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 5082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Authenticated encryption algorithms. 5092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) aead.resize(1); 5102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) aead[0] = kAESG; 5112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 5122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 513c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicCryptoClientConfig::CachedState* QuicCryptoClientConfig::LookupOrCreate( 514c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const string& server_hostname) { 515c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) map<string, CachedState*>::const_iterator it = 516c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cached_states_.find(server_hostname); 517c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (it != cached_states_.end()) { 518c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return it->second; 519c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 5202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 521c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CachedState* cached = new CachedState; 522c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cached_states_.insert(make_pair(server_hostname, cached)); 523c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return cached; 524c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 525c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 526c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void QuicCryptoClientConfig::FillInchoateClientHello( 527c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const string& server_hostname, 528c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const CachedState* cached, 529b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicCryptoNegotiatedParameters* out_params, 530c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CryptoHandshakeMessage* out) const { 531c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out->set_tag(kCHLO); 53290dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) out->set_minimum_size(kClientHelloMinimumSize); 5332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 53490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) // Server name indication. We only send SNI if it's a valid domain name, as 53590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) // per the spec. 53690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) if (CryptoUtils::IsValidSNI(server_hostname)) { 537c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out->SetStringPiece(kSNI, server_hostname); 538c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 539c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out->SetValue(kVERS, version); 540c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 541c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!cached->source_address_token().empty()) { 542b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out->SetStringPiece(kSourceAddressTokenTag, cached->source_address_token()); 5432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 544c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 54590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) if (proof_verifier_.get()) { 54690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) out->SetTaglist(kPDMD, kX509, 0); 54790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) } 548b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 549868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (common_cert_sets) { 55090dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) out->SetStringPiece(kCCS, common_cert_sets->GetCommonHashes()); 551b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 552b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 553b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) const vector<string>& certs = cached->certs(); 55490dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) // We save |certs| in the QuicCryptoNegotiatedParameters so that, if the 55590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) // client config is being used for multiple connections, another connection 55690dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) // doesn't update the cached certificates and cause us to be unable to 55790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) // process the server's compressed certificate chain. 558b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->cached_certs = certs; 559b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!certs.empty()) { 560b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) vector<uint64> hashes; 561b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hashes.reserve(certs.size()); 562b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) for (vector<string>::const_iterator i = certs.begin(); 563b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) i != certs.end(); ++i) { 564b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hashes.push_back(QuicUtils::FNV1a_64_Hash(i->data(), i->size())); 565b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 566b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out->SetVector(kCCRT, hashes); 567b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 5682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 5692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 570c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicErrorCode QuicCryptoClientConfig::FillClientHello( 571c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const string& server_hostname, 572c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) QuicGuid guid, 573c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const CachedState* cached, 574b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicWallTime now, 575c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) QuicRandom* rand, 576c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) QuicCryptoNegotiatedParameters* out_params, 577c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CryptoHandshakeMessage* out, 578c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) string* error_details) const { 579c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) DCHECK(error_details != NULL); 580c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 581b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) FillInchoateClientHello(server_hostname, cached, out_params, out); 582c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 583c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const CryptoHandshakeMessage* scfg = cached->GetServerConfig(); 584c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!scfg) { 585c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // This should never happen as our caller should have checked 586868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // cached->IsComplete() before calling this function. 587c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Handshake not ready"; 588c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_CRYPTO_INTERNAL_ERROR; 5892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 5902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 591c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece scid; 592c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!scfg->GetStringPiece(kSCID, &scid)) { 593c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "SCFG missing SCID"; 594c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 5952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 596c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out->SetStringPiece(kSCID, scid); 5972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 598b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) const QuicTag* their_aeads; 599b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) const QuicTag* their_key_exchanges; 600c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) size_t num_their_aeads, num_their_key_exchanges; 601c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (scfg->GetTaglist(kAEAD, &their_aeads, 602c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) &num_their_aeads) != QUIC_NO_ERROR || 603c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) scfg->GetTaglist(kKEXS, &their_key_exchanges, 604c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) &num_their_key_exchanges) != QUIC_NO_ERROR) { 605c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Missing AEAD or KEXS"; 6062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 6072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 6082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 609c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) size_t key_exchange_index; 610868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (!QuicUtils::FindMutualTag( 611868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) aead, their_aeads, num_their_aeads, QuicUtils::PEER_PRIORITY, 612868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) &out_params->aead, NULL) || 61390dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) !QuicUtils::FindMutualTag( 614b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) kexs, their_key_exchanges, num_their_key_exchanges, 61590dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) QuicUtils::PEER_PRIORITY, &out_params->key_exchange, 616b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) &key_exchange_index)) { 617c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Unsupported AEAD or KEXS"; 618c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_CRYPTO_NO_SUPPORT; 619c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 620c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out->SetTaglist(kAEAD, out_params->aead, 0); 621c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out->SetTaglist(kKEXS, out_params->key_exchange, 0); 622c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 623c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece public_value; 624b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (scfg->GetNthValue24(kPUBS, key_exchange_index, &public_value) != 625c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) QUIC_NO_ERROR) { 626c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Missing public value"; 6272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 6282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 6292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 630c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece orbit; 631c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!scfg->GetStringPiece(kORBT, &orbit) || orbit.size() != kOrbitSize) { 632c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "SCFG missing OBIT"; 633c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_CRYPTO_MESSAGE_PARAMETER_NOT_FOUND; 634c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 6352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 636b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) CryptoUtils::GenerateNonce(now, rand, orbit, &out_params->client_nonce); 637b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out->SetStringPiece(kNONC, out_params->client_nonce); 638b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!out_params->server_nonce.empty()) { 639b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out->SetStringPiece(kServerNonceTag, out_params->server_nonce); 640b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 6412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 642c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) switch (out_params->key_exchange) { 643b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kC255: 644b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->client_key_exchange.reset(Curve25519KeyExchange::New( 645c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) Curve25519KeyExchange::NewPrivateKey(rand))); 646b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) break; 647b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) case kP256: 648868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out_params->client_key_exchange.reset(P256KeyExchange::New( 649868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) P256KeyExchange::NewPrivateKey())); 650b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) break; 651b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) default: 652b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) DCHECK(false); 653b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) *error_details = "Configured to support an unknown key exchange"; 654b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) return QUIC_CRYPTO_INTERNAL_ERROR; 655c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 6562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 657b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!out_params->client_key_exchange->CalculateSharedKey( 658b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) public_value, &out_params->initial_premaster_secret)) { 659c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Key exchange failure"; 660c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 661c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 662b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out->SetStringPiece(kPUBS, out_params->client_key_exchange->public_value()); 6632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 664868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) bool do_channel_id = false; 665868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (channel_id_signer_.get()) { 666868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const QuicTag* their_proof_demands; 667868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) size_t num_their_proof_demands; 668868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (scfg->GetTaglist(kPDMD, &their_proof_demands, 669868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) &num_their_proof_demands) == QUIC_NO_ERROR) { 670868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) for (size_t i = 0; i < num_their_proof_demands; i++) { 671868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (their_proof_demands[i] == kCHID) { 672868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) do_channel_id = true; 673868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) break; 674868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 675868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 676868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 677868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 678868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 679868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (do_channel_id) { 680868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // In order to calculate the encryption key for the CETV block we need to 681868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // serialise the client hello as it currently is (i.e. without the CETV 682868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) // block). For this, the client hello is serialized without padding. 683868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const size_t orig_min_size = out->minimum_size(); 684868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out->set_minimum_size(0); 685868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 686868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) CryptoHandshakeMessage cetv; 687868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) cetv.set_tag(kCETV); 688868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 689868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) string hkdf_input; 690868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const QuicData& client_hello_serialized = out->GetSerialized(); 691868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) hkdf_input.append(QuicCryptoConfig::kCETVLabel, 692868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) strlen(QuicCryptoConfig::kCETVLabel) + 1); 693868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) hkdf_input.append(reinterpret_cast<char*>(&guid), sizeof(guid)); 694868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) hkdf_input.append(client_hello_serialized.data(), 695868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) client_hello_serialized.length()); 696868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) hkdf_input.append(cached->server_config()); 697868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 698868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) string key, signature; 699868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (!channel_id_signer_->Sign(server_hostname, hkdf_input, 700868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) &key, &signature)) { 701868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) *error_details = "Channel ID signature failed"; 702868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return QUIC_INTERNAL_ERROR; 703868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 704868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 705868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) cetv.SetStringPiece(kCIDK, key); 706868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) cetv.SetStringPiece(kCIDS, signature); 707868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 708868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) CrypterPair crypters; 709868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) CryptoUtils::DeriveKeys(out_params->initial_premaster_secret, 710868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out_params->aead, out_params->client_nonce, 711868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out_params->server_nonce, hkdf_input, 712868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) CryptoUtils::CLIENT, &crypters); 713868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 714868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) const QuicData& cetv_plaintext = cetv.GetSerialized(); 715868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) scoped_ptr<QuicData> cetv_ciphertext(crypters.encrypter->EncryptPacket( 716868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 0 /* sequence number */, 717868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) StringPiece() /* associated data */, 718868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) cetv_plaintext.AsStringPiece())); 719868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 720868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out->SetStringPiece(kCETV, cetv_ciphertext->AsStringPiece()); 721868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out->MarkDirty(); 722868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 723868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) out->set_minimum_size(orig_min_size); 724868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 725868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 726b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->hkdf_input_suffix.clear(); 727b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->hkdf_input_suffix.append(reinterpret_cast<char*>(&guid), 728b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) sizeof(guid)); 729c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const QuicData& client_hello_serialized = out->GetSerialized(); 730b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->hkdf_input_suffix.append(client_hello_serialized.data(), 731b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) client_hello_serialized.length()); 732b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->hkdf_input_suffix.append(cached->server_config()); 7332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 734b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) string hkdf_input; 735b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) const size_t label_len = strlen(QuicCryptoConfig::kInitialLabel) + 1; 736b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hkdf_input.reserve(label_len + out_params->hkdf_input_suffix.size()); 737b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hkdf_input.append(QuicCryptoConfig::kInitialLabel, label_len); 738b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hkdf_input.append(out_params->hkdf_input_suffix); 739b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 740b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) CryptoUtils::DeriveKeys(out_params->initial_premaster_secret, 741b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->aead, out_params->client_nonce, 742b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->server_nonce, hkdf_input, 743b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) CryptoUtils::CLIENT, &out_params->initial_crypters); 7442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 745c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_NO_ERROR; 746c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)} 7472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 748c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicErrorCode QuicCryptoClientConfig::ProcessRejection( 749c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) CachedState* cached, 750c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const CryptoHandshakeMessage& rej, 751868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) QuicWallTime now, 752c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) QuicCryptoNegotiatedParameters* out_params, 753c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) string* error_details) { 754c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) DCHECK(error_details != NULL); 7552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 756868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (rej.tag() != kREJ) { 757868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) *error_details = "Message is not REJ"; 758868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return QUIC_CRYPTO_INTERNAL_ERROR; 759868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) } 760868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 761c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece scfg; 762c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (!rej.GetStringPiece(kSCFG, &scfg)) { 763c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Missing SCFG"; 764c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_CRYPTO_MESSAGE_PARAMETER_NOT_FOUND; 7652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 7662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 767868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) QuicErrorCode error = cached->SetServerConfig(scfg, now, error_details); 768868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (error != QUIC_NO_ERROR) { 769868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) return error; 7702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 7712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 772c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece token; 773b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (rej.GetStringPiece(kSourceAddressTokenTag, &token)) { 774c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cached->set_source_address_token(token); 7752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 7762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 777c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece nonce; 778868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) if (rej.GetStringPiece(kServerNonceTag, &nonce)) { 779c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) out_params->server_nonce = nonce.as_string(); 780c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 7812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 782c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) StringPiece proof, cert_bytes; 783c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (rej.GetStringPiece(kPROF, &proof) && 784b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) rej.GetStringPiece(kCertificateTag, &cert_bytes)) { 785b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) vector<string> certs; 786b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!CertCompressor::DecompressChain(cert_bytes, out_params->cached_certs, 787868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) common_cert_sets, &certs)) { 788b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) *error_details = "Certificate data invalid"; 789b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 7902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 7912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 792c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cached->SetProof(certs, proof); 7932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 7942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 795c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_NO_ERROR; 7962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 7972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 798c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)QuicErrorCode QuicCryptoClientConfig::ProcessServerHello( 799c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) const CryptoHandshakeMessage& server_hello, 800b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) QuicGuid guid, 801c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) QuicCryptoNegotiatedParameters* out_params, 8022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) string* error_details) { 803c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) DCHECK(error_details != NULL); 8042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 805c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) if (server_hello.tag() != kSHLO) { 806c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) *error_details = "Bad tag"; 807c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_TYPE; 8082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 8092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 810c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // TODO(agl): 811c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) // learn about updated SCFGs. 812b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 813b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) StringPiece public_value; 814b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!server_hello.GetStringPiece(kPUBS, &public_value)) { 815b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) *error_details = "server hello missing forward secure public value"; 816b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 817b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 818b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 819b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) if (!out_params->client_key_exchange->CalculateSharedKey( 820b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) public_value, &out_params->forward_secure_premaster_secret)) { 821b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) *error_details = "Key exchange failure"; 822b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) return QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER; 823b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) } 824b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 825b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) string hkdf_input; 826b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) const size_t label_len = strlen(QuicCryptoConfig::kForwardSecureLabel) + 1; 827b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hkdf_input.reserve(label_len + out_params->hkdf_input_suffix.size()); 828b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hkdf_input.append(QuicCryptoConfig::kForwardSecureLabel, label_len); 829b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) hkdf_input.append(out_params->hkdf_input_suffix); 830b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) 831b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) CryptoUtils::DeriveKeys( 832b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->forward_secure_premaster_secret, out_params->aead, 833b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) out_params->client_nonce, out_params->server_nonce, hkdf_input, 834b2df76ea8fec9e32f6f3718986dba0d95315b29cTorne (Richard Coles) CryptoUtils::CLIENT, &out_params->forward_secure_crypters); 8352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 836c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return QUIC_NO_ERROR; 8372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 8382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 839c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)const ProofVerifier* QuicCryptoClientConfig::proof_verifier() const { 840c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return proof_verifier_.get(); 8412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 8422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 843c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)void QuicCryptoClientConfig::SetProofVerifier(ProofVerifier* verifier) { 844c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) proof_verifier_.reset(verifier); 8452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 8462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 847868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)void QuicCryptoClientConfig::SetChannelIDSigner(ChannelIDSigner* signer) { 848868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) channel_id_signer_.reset(signer); 849868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)} 850868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles) 8512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace net 852