• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // Copyright 2015 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4 
5 #ifndef CRYPTO_NSS_KEY_UTIL_H_
6 #define CRYPTO_NSS_KEY_UTIL_H_
7 
8 #include <stdint.h>
9 
10 #include <vector>
11 
12 #include "build/build_config.h"
13 #include "crypto/crypto_export.h"
14 #include "crypto/scoped_nss_types.h"
15 
16 typedef struct PK11SlotInfoStr PK11SlotInfo;
17 
18 namespace crypto {
19 
20 // Generates a new RSA keypair of size |num_bits| in |slot|. Returns true on
21 // success and false on failure. If |permanent| is true, the resulting key is
22 // permanent and is not exportable in plaintext form.
23 CRYPTO_EXPORT bool GenerateRSAKeyPairNSS(
24     PK11SlotInfo* slot,
25     uint16_t num_bits,
26     bool permanent,
27     ScopedSECKEYPublicKey* out_public_key,
28     ScopedSECKEYPrivateKey* out_private_key);
29 
30 // Imports a private key from |input| into |slot|. |input| is interpreted as a
31 // DER-encoded PrivateKeyInfo block from PKCS #8. Returns nullptr on error. If
32 // |permanent| is true, the resulting key is permanent and is not exportable in
33 // plaintext form.
34 CRYPTO_EXPORT ScopedSECKEYPrivateKey
35 ImportNSSKeyFromPrivateKeyInfo(PK11SlotInfo* slot,
36                                const std::vector<uint8_t>& input,
37                                bool permanent);
38 
39 // Decodes |input| as a DER-encoded X.509 SubjectPublicKeyInfo and searches for
40 // the private key half in the key database. Returns the private key on success
41 // or nullptr on error.
42 CRYPTO_EXPORT ScopedSECKEYPrivateKey
43 FindNSSKeyFromPublicKeyInfo(const std::vector<uint8_t>& input);
44 
45 // Decodes |input| as a DER-encoded X.509 SubjectPublicKeyInfo and searches for
46 // the private key half in the slot specified by |slot|. Returns the private key
47 // on success or nullptr on error.
48 CRYPTO_EXPORT ScopedSECKEYPrivateKey
49 FindNSSKeyFromPublicKeyInfoInSlot(const std::vector<uint8_t>& input,
50                                   PK11SlotInfo* slot);
51 
52 }  // namespace crypto
53 
54 #endif  // CRYPTO_NSS_KEY_UTIL_H_
55