1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/reporting/encryption/encryption_module_interface.h"
#include <string_view>
#include <utility>
#include "base/feature_list.h"
#include "base/functional/bind.h"
#include "base/functional/callback.h"
#include "base/functional/callback_helpers.h"
#include "base/time/time.h"
#include "base/types/expected.h"
#include "components/reporting/proto/synced/record.pb.h"
#include "components/reporting/util/status.h"
#include "components/reporting/util/statusor.h"
namespace reporting {
// Temporary: enable/disable encryption.
BASE_FEATURE(kEncryptedReportingFeature,
"EncryptedReporting",
base::FEATURE_ENABLED_BY_DEFAULT);
// static
bool EncryptionModuleInterface::is_enabled() {
return base::FeatureList::IsEnabled(kEncryptedReportingFeature);
}
EncryptionModuleInterface::EncryptionModuleInterface(
base::TimeDelta renew_encryption_key_period)
: renew_encryption_key_period_(renew_encryption_key_period) {}
EncryptionModuleInterface::~EncryptionModuleInterface() = default;
void EncryptionModuleInterface::EncryptRecord(
std::string_view record,
base::OnceCallback<void(StatusOr<EncryptedRecord>)> cb) const {
if (!is_enabled()) {
// Encryptor disabled.
EncryptedRecord encrypted_record;
encrypted_record.mutable_encrypted_wrapped_record()->assign(record.begin(),
record.end());
// encryption_info is not set.
std::move(cb).Run(std::move(encrypted_record));
return;
}
// Encryptor enabled: start encryption of the record as a whole.
if (!has_encryption_key()) {
// Encryption key is not available.
std::move(cb).Run(base::unexpected(
Status(error::NOT_FOUND, "Cannot encrypt record - no key")));
return;
}
// Encryption key is available, encrypt.
EncryptRecordImpl(record, std::move(cb));
}
void EncryptionModuleInterface::UpdateAsymmetricKey(
std::string_view new_public_key,
PublicKeyId new_public_key_id,
base::OnceCallback<void(Status)> response_cb) {
UpdateAsymmetricKeyImpl(
new_public_key, new_public_key_id,
base::BindOnce(
[](EncryptionModuleInterface* encryption_module_interface,
base::OnceCallback<void(Status)> response_cb, Status status) {
if (status.ok()) {
encryption_module_interface->last_encryption_key_update_.store(
base::TimeTicks::Now());
}
std::move(response_cb).Run(status);
},
base::Unretained(this), std::move(response_cb)));
}
bool EncryptionModuleInterface::has_encryption_key() const {
return !last_encryption_key_update_.load().is_null();
}
bool EncryptionModuleInterface::need_encryption_key() const {
return !has_encryption_key() ||
last_encryption_key_update_.load() + renew_encryption_key_period_ <
base::TimeTicks::Now();
}
} // namespace reporting
|
