1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "crypto/process_bound_string.h"
#include "base/containers/span.h"
#include "build/build_config.h"
#if BUILDFLAG(IS_WIN)
#include <windows.h>
#include <dpapi.h>
#include "base/process/memory.h"
#include "base/trace_event/trace_event.h"
#else
#include "third_party/boringssl/src/include/openssl/mem.h"
#endif // BUILDFLAG(IS_WIN)
namespace crypto::internal {
#if BUILDFLAG(IS_WIN)
constexpr char const* kTraceCategory =
TRACE_DISABLED_BY_DEFAULT("crypto.dpapi");
static_assert(CRYPTPROTECTMEMORY_BLOCK_SIZE > 0 &&
(CRYPTPROTECTMEMORY_BLOCK_SIZE &
(CRYPTPROTECTMEMORY_BLOCK_SIZE - 1)) == 0,
"CRYPTPROTECTMEMORY_BLOCK_SIZE must be a power of two");
#endif // BUILDFLAG(IS_WIN)
size_t MaybeRoundUp(size_t size) {
#if BUILDFLAG(IS_WIN)
return (size + CRYPTPROTECTMEMORY_BLOCK_SIZE - 1u) &
~(CRYPTPROTECTMEMORY_BLOCK_SIZE - 1u);
#else
return size;
#endif // BUILDFLAG(IS_WIN)
}
bool MaybeEncryptBuffer(base::span<uint8_t> buffer) {
#if BUILDFLAG(IS_WIN)
TRACE_EVENT0(kTraceCategory, "ProcessBoundString::EncryptBuffer");
if (::CryptProtectMemory(buffer.data(), buffer.size(),
CRYPTPROTECTMEMORY_SAME_PROCESS)) {
return true;
}
#endif // BUILDFLAG(IS_WIN)
return false;
}
bool MaybeDecryptBuffer(base::span<uint8_t> buffer) {
#if BUILDFLAG(IS_WIN)
TRACE_EVENT0(kTraceCategory, "ProcessBoundString::DecryptBuffer");
if (::CryptUnprotectMemory(buffer.data(), buffer.size(),
CRYPTPROTECTMEMORY_SAME_PROCESS)) {
return true;
}
if (::GetLastError() == ERROR_WORKING_SET_QUOTA) {
base::TerminateBecauseOutOfMemory(0);
}
#endif // BUILDFLAG(IS_WIN)
return false;
}
void SecureZeroBuffer(base::span<uint8_t> buffer) {
#if BUILDFLAG(IS_WIN)
::SecureZeroMemory(buffer.data(), buffer.size());
#else
OPENSSL_cleanse(buffer.data(), buffer.size());
#endif // BUILDFLAG(IS_WIN)
}
} // namespace crypto::internal
|
