1// Copyright 2014 The Chromium Authors. All rights reserved. 2// Use of this source code is governed by a BSD-style license that can be 3// found in the LICENSE file. 4 5#ifndef CHROME_COMMON_EXTENSIONS_API_NETWORKING_PRIVATE_NETWORKING_PRIVATE_CRYPTO_H_ 6#define CHROME_COMMON_EXTENSIONS_API_NETWORKING_PRIVATE_NETWORKING_PRIVATE_CRYPTO_H_ 7 8#include <stdint.h> 9 10#include <string> 11#include <vector> 12 13#include "base/basictypes.h" 14 15namespace networking_private_crypto { 16 17// Verify that the credentials described by |certificate| and |signed_data| 18// are valid as follows: 19// 1) The MAC address listed in the certificate matches |connected_mac|. 20// 2) The certificate is a valid PEM encoded certificate signed by trusted CA. 21// 3) |signature| is a valid signature for |data|, using the public key in 22// |certificate| 23bool VerifyCredentials(const std::string& certificate, 24 const std::string& signature, 25 const std::string& data, 26 const std::string& connected_mac); 27 28// Encrypt |data| with |public_key|. |public_key| is a DER-encoded 29// RSAPublicKey. |data| is some string of bytes that is smaller than the 30// maximum length permissible for PKCS#1 v1.5 with a key of |public_key| size. 31// 32// Returns true on success, storing the encrypted result in 33// |encrypted_output|. 34bool EncryptByteString(const std::vector<uint8_t>& public_key, 35 const std::string& data, 36 std::vector<uint8_t>* encrypted_output); 37 38// Decrypt |encrypted_data| with |private_key_pem|. |private_key_pem| is the 39// PKCS8 PEM-encoded private key. |encrypted_data| is data encrypted with 40// EncryptByteString. Used in NetworkingPrivateCryptoTest::EncryptString test. 41// Returns true on success, storing the decrypted result in 42// |decrypted_output|. 43bool DecryptByteString(const std::string& private_key_pem, 44 const std::vector<uint8_t>& encrypted_data, 45 std::string* decrypted_output); 46 47// The trusted public key as a DER-encoded PKCS#1 RSAPublicKey structure. 48extern const uint8_t kTrustedCAPublicKeyDER[]; 49 50// The length of |kTrustedCAPublicKeyDER| in bytes. 51extern const size_t kTrustedCAPublicKeyDERLength; 52 53} // namespace networking_private_crypto 54 55#endif // CHROME_COMMON_EXTENSIONS_API_NETWORKING_PRIVATE_NETWORKING_PRIVATE_CRYPTO_H_ 56