Added multi-profile support for attestation on chromeos.

chromeos/cryptohome/async_method_caller.h

Index: chromeos/cryptohome/async_method_caller.h
diff --git a/chromeos/cryptohome/async_method_caller.h b/chromeos/cryptohome/async_method_caller.h
index e5ca604ce7988a181a649790ad117bbdf80dda87..aa74d197c7431fe10d58099bba755d207111897d 100644
--- a/chromeos/cryptohome/async_method_caller.h
+++ b/chromeos/cryptohome/async_method_caller.h
@@ -130,17 +130,22 @@ class CHROMEOS_EXPORT AsyncMethodCaller {
   // in PEM format.  |pca_response| is the response to the certificate request
   // emitted by the Privacy CA.  |key_type| determines whether the certified key
   // is to be associated with the current user.  |key_name| is a name for the
-  // key.
+  // key.  If |key_type| is KEY_USER, the user's canonical email address must be
+  // provided in |user_email|.  Otherwise |user_email| is ignored.
   virtual void AsyncTpmAttestationFinishCertRequest(
       const std::string& pca_response,
       chromeos::attestation::AttestationKeyType key_type,
+      const std::string& user_email,

[bartfab (slow), 2013/10/13 16:31:35]

As in the other files, please use user_id.

[Darren Krahn, 2013/10/15 16:49:06]

Done.

       const std::string& key_name,
       const DataCallback& callback) = 0;
 
   // Asks cryptohomed to asynchronously register the attestation key specified
-  // by |key_type| and |key_name|.
+  // by |key_type| and |key_name|.  If |key_type| is KEY_USER, the user's
+  // canonical email address must be provided in |user_email|.  Otherwise
+  // |user_email| is ignored.
   virtual void TpmAttestationRegisterKey(
       chromeos::attestation::AttestationKeyType key_type,
+      const std::string& user_email,
       const std::string& key_name,
       const Callback& callback) = 0;
 
@@ -148,9 +153,12 @@ class CHROMEOS_EXPORT AsyncMethodCaller {
   // key specified by |key_type| and |key_name|.  The |domain| and |device_id|
   // parameters will be included in the challenge response.  |challenge| must be
   // a valid enterprise challenge.  On success, the data sent to |callback| is
-  // the challenge response.
+  // the challenge response.  If |key_type| is KEY_USER, the user's canonical
+  // email address must be provided in |user_email|.  Otherwise |user_email| is
+  // ignored.
   virtual void TpmAttestationSignEnterpriseChallenge(
       chromeos::attestation::AttestationKeyType key_type,
+      const std::string& user_email,
       const std::string& key_name,
       const std::string& domain,
       const std::string& device_id,
@@ -161,9 +169,11 @@ class CHROMEOS_EXPORT AsyncMethodCaller {
   // Asks cryptohomed to asynchronously sign a simple challenge with the key
   // specified by |key_type| and |key_name|.  |challenge| can be any arbitrary
   // set of bytes.  On success, the data sent to |callback| is the challenge
-  // response.
+  // response.  If |key_type| is KEY_USER, the user's canonical email address
+  // must be provided in |user_email|.  Otherwise |user_email| is ignored.
   virtual void TpmAttestationSignSimpleChallenge(
       chromeos::attestation::AttestationKeyType key_type,
+      const std::string& user_email,
       const std::string& key_name,
       const std::string& challenge,
       const DataCallback& callback) = 0;