Index: net/quic/crypto/ephemeral_key_source.h |
diff --git a/net/quic/crypto/ephemeral_key_source.h b/net/quic/crypto/ephemeral_key_source.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..2700be0fe1b289f18b2843f9ba2d41348615431c |
--- /dev/null |
+++ b/net/quic/crypto/ephemeral_key_source.h |
@@ -0,0 +1,42 @@ |
+// Copyright (c) 2013 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#ifndef NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_ |
+#define NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_ |
+ |
+#include <string> |
+ |
+#include "base/strings/string_piece.h" |
+#include "net/base/net_export.h" |
+#include "net/quic/quic_time.h" |
+ |
+namespace net { |
+ |
+class KeyExchange; |
+class QuicRandom; |
+ |
+// EphemeralKeySource manages and rotates ephemeral keys as they can be reused |
+// for several connections in a short space of time. Since the implementation |
+// of this may involve locking or thread-local data, this interface abstracts |
+// that away. |
+class NET_EXPORT_PRIVATE EphemeralKeySource { |
+ public: |
+ virtual ~EphemeralKeySource() {} |
+ |
+ // CalculateForwardSecureKey generates an ephemeral public/private key pair |
+ // using the algorithm |key_exchange|, sets |*public_value| to the public key |
+ // and returns the shared key between |peer_public_value| and the private |
+ // key. |*public_value| will be sent to the peer to be used with the peer's |
+ // private key. |
+ virtual std::string CalculateForwardSecureKey( |
+ const KeyExchange* key_exchange, |
+ QuicRandom* rand, |
+ QuicTime now, |
+ base::StringPiece peer_public_value, |
+ std::string* public_value) = 0; |
+}; |
+ |
+} // namespace net |
+ |
+#endif // NET_QUIC_CRYPTO_EPHEMERAL_KEY_SOURCE_H_ |