Home | History | Annotate | Download | only in crypto
      1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
      2 // Use of this source code is governed by a BSD-style license that can be
      3 // found in the LICENSE file.
      4 
      5 #ifndef NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_
      6 #define NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_
      7 
      8 #include <string>
      9 
     10 #include "base/strings/string_piece.h"
     11 #include "net/base/net_export.h"
     12 #include "net/quic/quic_time.h"
     13 
     14 namespace net {
     15 
     16 class KeyExchange;
     17 class QuicRandom;
     18 
     19 // EphemeralKeySource manages and rotates ephemeral keys as they can be reused
     20 // for several connections in a short space of time. Since the implementation
     21 // of this may involve locking or thread-local data, this interface abstracts
     22 // that away.
     23 class NET_EXPORT_PRIVATE EphemeralKeySource {
     24  public:
     25   virtual ~EphemeralKeySource() {}
     26 
     27   // CalculateForwardSecureKey generates an ephemeral public/private key pair
     28   // using the algorithm |key_exchange|, sets |*public_value| to the public key
     29   // and returns the shared key between |peer_public_value| and the private
     30   // key. |*public_value| will be sent to the peer to be used with the peer's
     31   // private key.
     32   virtual std::string CalculateForwardSecureKey(
     33       const KeyExchange* key_exchange,
     34       QuicRandom* rand,
     35       QuicTime now,
     36       base::StringPiece peer_public_value,
     37       std::string* public_value) = 0;
     38 };
     39 
     40 }  // namespace net
     41 
     42 #endif  // NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_
     43