1*e7b1675dSTing-Kang Chang // Copyright 2022 Google LLC
2*e7b1675dSTing-Kang Chang //
3*e7b1675dSTing-Kang Chang // Licensed under the Apache License, Version 2.0 (the "License");
4*e7b1675dSTing-Kang Chang // you may not use this file except in compliance with the License.
5*e7b1675dSTing-Kang Chang // You may obtain a copy of the License at
6*e7b1675dSTing-Kang Chang //
7*e7b1675dSTing-Kang Chang // http://www.apache.org/licenses/LICENSE-2.0
8*e7b1675dSTing-Kang Chang //
9*e7b1675dSTing-Kang Chang // Unless required by applicable law or agreed to in writing, software
10*e7b1675dSTing-Kang Chang // distributed under the License is distributed on an "AS IS" BASIS,
11*e7b1675dSTing-Kang Chang // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*e7b1675dSTing-Kang Chang // See the License for the specific language governing permissions and
13*e7b1675dSTing-Kang Chang // limitations under the License.
14*e7b1675dSTing-Kang Chang //
15*e7b1675dSTing-Kang Chang ///////////////////////////////////////////////////////////////////////////////
16*e7b1675dSTing-Kang Chang #ifndef TINK_INTERNAL_MONITORING_UTIL_H_
17*e7b1675dSTing-Kang Chang #define TINK_INTERNAL_MONITORING_UTIL_H_
18*e7b1675dSTing-Kang Chang
19*e7b1675dSTing-Kang Chang #include <string>
20*e7b1675dSTing-Kang Chang #include <vector>
21*e7b1675dSTing-Kang Chang
22*e7b1675dSTing-Kang Chang #include "absl/container/flat_hash_map.h"
23*e7b1675dSTing-Kang Chang #include "absl/status/status.h"
24*e7b1675dSTing-Kang Chang #include "absl/strings/strip.h"
25*e7b1675dSTing-Kang Chang #include "tink/internal/key_status_util.h"
26*e7b1675dSTing-Kang Chang #include "tink/key_status.h"
27*e7b1675dSTing-Kang Chang #include "tink/monitoring/monitoring.h"
28*e7b1675dSTing-Kang Chang #include "tink/primitive_set.h"
29*e7b1675dSTing-Kang Chang #include "tink/util/status.h"
30*e7b1675dSTing-Kang Chang #include "tink/util/statusor.h"
31*e7b1675dSTing-Kang Chang #include "proto/tink.pb.h"
32*e7b1675dSTing-Kang Chang
33*e7b1675dSTing-Kang Chang namespace crypto {
34*e7b1675dSTing-Kang Chang namespace tink {
35*e7b1675dSTing-Kang Chang namespace internal {
36*e7b1675dSTing-Kang Chang
37*e7b1675dSTing-Kang Chang constexpr char kKeyTypePrefix[] = "type.googleapis.com/google.crypto.";
38*e7b1675dSTing-Kang Chang
39*e7b1675dSTing-Kang Chang // Constructs a MonitoringKeySetInfo object from a PrimitiveSet `primitive_set`
40*e7b1675dSTing-Kang Chang // for a given primitive P.
41*e7b1675dSTing-Kang Chang template <class P>
42*e7b1675dSTing-Kang Chang crypto::tink::util::StatusOr<MonitoringKeySetInfo>
MonitoringKeySetInfoFromPrimitiveSet(const PrimitiveSet<P> & primitive_set)43*e7b1675dSTing-Kang Chang MonitoringKeySetInfoFromPrimitiveSet(const PrimitiveSet<P>& primitive_set) {
44*e7b1675dSTing-Kang Chang const std::vector<typename PrimitiveSet<P>::template Entry<P>*>
45*e7b1675dSTing-Kang Chang primitive_set_entries = primitive_set.get_all();
46*e7b1675dSTing-Kang Chang if (primitive_set_entries.empty()) {
47*e7b1675dSTing-Kang Chang return util::Status(absl::StatusCode::kInvalidArgument,
48*e7b1675dSTing-Kang Chang "The primitive set is empty");
49*e7b1675dSTing-Kang Chang }
50*e7b1675dSTing-Kang Chang if (primitive_set.get_primary() == nullptr) {
51*e7b1675dSTing-Kang Chang return util::Status(absl::StatusCode::kInvalidArgument,
52*e7b1675dSTing-Kang Chang "The primary keys must not be null");
53*e7b1675dSTing-Kang Chang }
54*e7b1675dSTing-Kang Chang std::vector<MonitoringKeySetInfo::Entry> keyset_info_entries = {};
55*e7b1675dSTing-Kang Chang for (const auto& entry : primitive_set_entries) {
56*e7b1675dSTing-Kang Chang util::StatusOr<KeyStatus> key_status =
57*e7b1675dSTing-Kang Chang FromKeyStatusType(entry->get_status());
58*e7b1675dSTing-Kang Chang if (!key_status.ok()) return key_status.status();
59*e7b1675dSTing-Kang Chang
60*e7b1675dSTing-Kang Chang auto keyset_info_entry = MonitoringKeySetInfo::Entry(
61*e7b1675dSTing-Kang Chang *key_status, entry->get_key_id(),
62*e7b1675dSTing-Kang Chang absl::StripPrefix(entry->get_key_type_url(), kKeyTypePrefix),
63*e7b1675dSTing-Kang Chang OutputPrefixType_Name(entry->get_output_prefix_type()));
64*e7b1675dSTing-Kang Chang keyset_info_entries.push_back(keyset_info_entry);
65*e7b1675dSTing-Kang Chang }
66*e7b1675dSTing-Kang Chang MonitoringKeySetInfo keyset_info(primitive_set.get_annotations(),
67*e7b1675dSTing-Kang Chang keyset_info_entries,
68*e7b1675dSTing-Kang Chang primitive_set.get_primary()->get_key_id());
69*e7b1675dSTing-Kang Chang return keyset_info;
70*e7b1675dSTing-Kang Chang }
71*e7b1675dSTing-Kang Chang
72*e7b1675dSTing-Kang Chang } // namespace internal
73*e7b1675dSTing-Kang Chang } // namespace tink
74*e7b1675dSTing-Kang Chang } // namespace crypto
75*e7b1675dSTing-Kang Chang
76*e7b1675dSTing-Kang Chang #endif // TINK_INTERNAL_MONITORING_UTIL_H_
77