1// Copyright (c) 2013 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#ifndef NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_
6#define NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_
7
8#include <string>
9
10#include "base/strings/string_piece.h"
11#include "net/base/net_export.h"
12#include "net/quic/quic_time.h"
13
14namespace net {
15
16class KeyExchange;
17class QuicRandom;
18
19// EphemeralKeySource manages and rotates ephemeral keys as they can be reused
20// for several connections in a short space of time. Since the implementation
21// of this may involve locking or thread-local data, this interface abstracts
22// that away.
23class NET_EXPORT_PRIVATE EphemeralKeySource {
24 public:
25  virtual ~EphemeralKeySource() {}
26
27  // CalculateForwardSecureKey generates an ephemeral public/private key pair
28  // using the algorithm |key_exchange|, sets |*public_value| to the public key
29  // and returns the shared key between |peer_public_value| and the private
30  // key. |*public_value| will be sent to the peer to be used with the peer's
31  // private key.
32  virtual std::string CalculateForwardSecureKey(
33      const KeyExchange* key_exchange,
34      QuicRandom* rand,
35      QuicTime now,
36      base::StringPiece peer_public_value,
37      std::string* public_value) = 0;
38};
39
40}  // namespace net
41
42#endif  // NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_
43