chromium/components/os_crypt/async/common/encryptor.cc

// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "components/os_crypt/async/common/encryptor.h"

#include <optional>
#include <string>
#include <vector>

#include "base/containers/span.h"
#include "base/logging.h"
#include "base/notreached.h"
#include "base/ranges/algorithm.h"
#include "base/strings/utf_string_conversions.h"
#include "components/os_crypt/async/common/algorithm.mojom.h"
#include "components/os_crypt/sync/os_crypt.h"
#include "crypto/aead.h"
#include "crypto/random.h"
#include "mojo/public/cpp/bindings/default_construct_tag.h"
#include "third_party/abseil-cpp/absl/cleanup/cleanup.h"

#if BUILDFLAG(IS_WIN)
#include <windows.h>

#include <dpapi.h>

#include "components/os_crypt/async/common/encryptor_features.h"
#endif

namespace os_crypt_async {

namespace {

constexpr size_t kNonceLength = …;  // AES_GCM_NONCE_LENGTH

}  // namespace

Encryptor::Key::Key(base::span<const uint8_t> key,
                    const mojom::Algorithm& algorithm,
                    bool encrypted)
    : … { … }

Encryptor::Key::Key(base::span<const uint8_t> key,
                    const mojom::Algorithm& algorithm)
    : … { … }

Encryptor::Key::Key(mojo::DefaultConstruct::Tag) { … }

Encryptor::Key::Key(Key&& other) = default;
Encryptor::Key& Encryptor::Key::operator=(Key&& other) = default;

Encryptor::Key::~Key() = default;

Encryptor::Key Encryptor::Key::Clone() const { … }

Encryptor::Encryptor() = default;
Encryptor::Encryptor(mojo::DefaultConstruct::Tag) : … { … }

Encryptor::Encryptor(Encryptor&& other) = default;
Encryptor& Encryptor::operator=(Encryptor&& other) = default;

Encryptor::Encryptor(KeyRing keys, const std::string& provider_for_encryption)
    : … { … }
Encryptor::~Encryptor() = default;

std::vector<uint8_t> Encryptor::Key::Encrypt(
    base::span<const uint8_t> plaintext) const { … }

std::optional<std::vector<uint8_t>> Encryptor::Key::Decrypt(
    base::span<const uint8_t> ciphertext) const { … }

bool Encryptor::EncryptString(const std::string& plaintext,
                              std::string* ciphertext) const { … }

bool Encryptor::DecryptString(const std::string& ciphertext,
                              std::string* plaintext) const { … }

std::optional<std::vector<uint8_t>> Encryptor::EncryptString(
    const std::string& data) const { … }

std::optional<std::string> Encryptor::DecryptData(
    base::span<const uint8_t> data) const { … }

bool Encryptor::EncryptString16(const std::u16string& plaintext,
                                std::string* ciphertext) const { … }

bool Encryptor::DecryptString16(const std::string& ciphertext,
                                std::u16string* plaintext) const { … }

Encryptor Encryptor::Clone(Option option) const { … }

bool Encryptor::IsEncryptionAvailable() const { … }

bool Encryptor::IsDecryptionAvailable() const { … }

}  // namespace os_crypt_async