1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "quiche/quic/core/crypto/quic_decrypter.h"
6
7 #include <string>
8 #include <utility>
9
10 #include "absl/strings/string_view.h"
11 #include "openssl/tls1.h"
12 #include "quiche/quic/core/crypto/aes_128_gcm_12_decrypter.h"
13 #include "quiche/quic/core/crypto/aes_128_gcm_decrypter.h"
14 #include "quiche/quic/core/crypto/aes_256_gcm_decrypter.h"
15 #include "quiche/quic/core/crypto/chacha20_poly1305_decrypter.h"
16 #include "quiche/quic/core/crypto/chacha20_poly1305_tls_decrypter.h"
17 #include "quiche/quic/core/crypto/crypto_protocol.h"
18 #include "quiche/quic/core/crypto/null_decrypter.h"
19 #include "quiche/quic/core/crypto/quic_hkdf.h"
20 #include "quiche/quic/platform/api/quic_bug_tracker.h"
21 #include "quiche/quic/platform/api/quic_logging.h"
22
23 namespace quic {
24
25 // static
Create(const ParsedQuicVersion & version,QuicTag algorithm)26 std::unique_ptr<QuicDecrypter> QuicDecrypter::Create(
27 const ParsedQuicVersion& version, QuicTag algorithm) {
28 switch (algorithm) {
29 case kAESG:
30 if (version.UsesInitialObfuscators()) {
31 return std::make_unique<Aes128GcmDecrypter>();
32 } else {
33 return std::make_unique<Aes128Gcm12Decrypter>();
34 }
35 case kCC20:
36 if (version.UsesInitialObfuscators()) {
37 return std::make_unique<ChaCha20Poly1305TlsDecrypter>();
38 } else {
39 return std::make_unique<ChaCha20Poly1305Decrypter>();
40 }
41 default:
42 QUIC_LOG(FATAL) << "Unsupported algorithm: " << algorithm;
43 return nullptr;
44 }
45 }
46
47 // static
CreateFromCipherSuite(uint32_t cipher_suite)48 std::unique_ptr<QuicDecrypter> QuicDecrypter::CreateFromCipherSuite(
49 uint32_t cipher_suite) {
50 switch (cipher_suite) {
51 case TLS1_CK_AES_128_GCM_SHA256:
52 return std::make_unique<Aes128GcmDecrypter>();
53 case TLS1_CK_AES_256_GCM_SHA384:
54 return std::make_unique<Aes256GcmDecrypter>();
55 case TLS1_CK_CHACHA20_POLY1305_SHA256:
56 return std::make_unique<ChaCha20Poly1305TlsDecrypter>();
57 default:
58 QUIC_BUG(quic_bug_10660_1) << "TLS cipher suite is unknown to QUIC";
59 return nullptr;
60 }
61 }
62
63 // static
DiversifyPreliminaryKey(absl::string_view preliminary_key,absl::string_view nonce_prefix,const DiversificationNonce & nonce,size_t key_size,size_t nonce_prefix_size,std::string * out_key,std::string * out_nonce_prefix)64 void QuicDecrypter::DiversifyPreliminaryKey(absl::string_view preliminary_key,
65 absl::string_view nonce_prefix,
66 const DiversificationNonce& nonce,
67 size_t key_size,
68 size_t nonce_prefix_size,
69 std::string* out_key,
70 std::string* out_nonce_prefix) {
71 QuicHKDF hkdf((std::string(preliminary_key)) + (std::string(nonce_prefix)),
72 absl::string_view(nonce.data(), nonce.size()),
73 "QUIC key diversification", 0, key_size, 0, nonce_prefix_size,
74 0);
75 *out_key = std::string(hkdf.server_write_key());
76 *out_nonce_prefix = std::string(hkdf.server_write_iv());
77 }
78
79 } // namespace quic
80