This is the initial code drop of the reference implementation and test cases for the Widevine Whitebox API. In this drop, the full reference implementation for the AEAD white-box is provided and all test cases verifying the top-level behave have are enabled. Since the implementations can vary so much the testing is mostly left to verifying the return codes for specific parameter conditions. A full reference implementation for the license white-box is provided, however not all tests are implemented or enabled. A number of tests have been disabled as they required a loaded license and test licenses are still being worked on. The two license white-box API functions that are the further from competition are ProcessLicenseResponse() and MaskedDecryt(). ProcessLicenseResponse() is still being worked on and MaskedDecrypt() is waiting on Decrypt() to be fully functional. Most tests focus on verifying return code for specific parameter conditions, but as test licenses are created, tests looking to test the internal behaviour of license management will be added to ProcessLicenseResponse(), Decrypt(), and MaskedDecrypt().
82 lines
3.5 KiB
C++
82 lines
3.5 KiB
C++
////////////////////////////////////////////////////////////////////////////////
|
|
// Copyright 2016 Google LLC.
|
|
//
|
|
// This software is licensed under the terms defined in the Widevine Master
|
|
// License Agreement. For a copy of this agreement, please contact
|
|
// widevine-licensing@google.com.
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
//
|
|
// RAII wrapper classes for cleaning up various OpenSSL dynamically allocated
|
|
// structures.
|
|
|
|
#ifndef WHITEBOX_CRYPTO_UTILS_OPENSSL_UTIL_H_
|
|
#define WHITEBOX_CRYPTO_UTILS_OPENSSL_UTIL_H_
|
|
|
|
#include "third_party/boringssl/src/include/openssl/bio.h"
|
|
#include "third_party/boringssl/src/include/openssl/evp.h"
|
|
#include "third_party/boringssl/src/include/openssl/pkcs7.h"
|
|
#include "third_party/boringssl/src/include/openssl/rsa.h"
|
|
#include "third_party/boringssl/src/include/openssl/x509v3.h"
|
|
|
|
template <typename T, void (*func)(T*)>
|
|
struct OpenSSLDeleter {
|
|
void operator()(T* obj) { func(obj); }
|
|
};
|
|
|
|
template <typename StackType, typename T, void (*func)(T*)>
|
|
struct OpenSSLStackDeleter {
|
|
void operator()(StackType* obj) {
|
|
sk_pop_free(reinterpret_cast<_STACK*>(obj),
|
|
reinterpret_cast<void (*)(void*)>(func));
|
|
}
|
|
};
|
|
|
|
template <typename StackType>
|
|
struct OpenSSLStackOnlyDeleter {
|
|
void operator()(StackType* obj) { sk_free(reinterpret_cast<_STACK*>(obj)); }
|
|
};
|
|
|
|
template <typename T, void (*func)(T*)>
|
|
using ScopedOpenSSLType = std::unique_ptr<T, OpenSSLDeleter<T, func>>;
|
|
template <typename StackType, typename T, void (*func)(T*)>
|
|
using ScopedOpenSSLStack =
|
|
std::unique_ptr<StackType, OpenSSLStackDeleter<StackType, T, func>>;
|
|
template <typename StackType>
|
|
using ScopedOpenSSLStackOnly =
|
|
std::unique_ptr<StackType, OpenSSLStackOnlyDeleter<StackType>>;
|
|
|
|
using ScopedBIGNUM = ScopedOpenSSLType<BIGNUM, BN_free>;
|
|
using ScopedBIO = ScopedOpenSSLType<BIO, BIO_vfree>;
|
|
typedef ScopedOpenSSLType<EC_KEY, EC_KEY_free> ScopedECKEY;
|
|
using ScopedPKCS7 = ScopedOpenSSLType<PKCS7, PKCS7_free>;
|
|
using ScopedPKEY = ScopedOpenSSLType<EVP_PKEY, EVP_PKEY_free>;
|
|
using ScopedRSA = ScopedOpenSSLType<RSA, RSA_free>;
|
|
using ScopedX509 = ScopedOpenSSLType<X509, X509_free>;
|
|
using ScopedX509Extension =
|
|
ScopedOpenSSLType<X509_EXTENSION, X509_EXTENSION_free>;
|
|
using ScopedX509Name = ScopedOpenSSLType<X509_NAME, X509_NAME_free>;
|
|
using ScopedX509NameEntry =
|
|
ScopedOpenSSLType<X509_NAME_ENTRY, X509_NAME_ENTRY_free>;
|
|
using ScopedX509Store = ScopedOpenSSLType<X509_STORE, X509_STORE_free>;
|
|
using ScopedX509StoreCtx =
|
|
ScopedOpenSSLType<X509_STORE_CTX, X509_STORE_CTX_free>;
|
|
using ScopedX509Req = ScopedOpenSSLType<X509_REQ, X509_REQ_free>;
|
|
using ScopedAsn1UtcTime = ScopedOpenSSLType<ASN1_UTCTIME, ASN1_UTCTIME_free>;
|
|
using ScopedAsn1Time = ScopedOpenSSLType<ASN1_TIME, ASN1_TIME_free>;
|
|
using ScopedAsn1Utc8String =
|
|
ScopedOpenSSLType<ASN1_UTF8STRING, ASN1_UTF8STRING_free>;
|
|
using ScopedAsn1Integer = ScopedOpenSSLType<ASN1_INTEGER, ASN1_INTEGER_free>;
|
|
using ScopedAsn1Object = ScopedOpenSSLType<ASN1_OBJECT, ASN1_OBJECT_free>;
|
|
using ScopedAsn1OctetString =
|
|
ScopedOpenSSLType<ASN1_OCTET_STRING, ASN1_OCTET_STRING_free>;
|
|
|
|
// XxxStack deallocates the stack and its members while XxxStackOnly deallocates
|
|
// the stack only.
|
|
using ScopedX509Stack = ScopedOpenSSLStack<STACK_OF(X509), X509, X509_free>;
|
|
using ScopedX509StackOnly = ScopedOpenSSLStackOnly<STACK_OF(X509)>;
|
|
using ScopedX509InfoStack =
|
|
ScopedOpenSSLStack<STACK_OF(X509_INFO), X509_INFO, X509_INFO_free>;
|
|
using ScopedX509InfoStackOnly = ScopedOpenSSLStackOnly<STACK_OF(X509_INFO)>;
|
|
|
|
#endif // WHITEBOX_CRYPTO_UTILS_OPENSSL_UTIL_H_
|