1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef COMPONENTS_TRUSTED_VAULT_ICLOUD_RECOVERY_KEY_MAC_H_
#define COMPONENTS_TRUSTED_VAULT_ICLOUD_RECOVERY_KEY_MAC_H_
#include <stdint.h>
#include <memory>
#include <string_view>
#include <vector>
#include "base/functional/callback_forward.h"
namespace trusted_vault {
class SecureBoxKeyPair;
enum class SecurityDomainId;
// A key pair backed and synced by iCloud keychain that can be used as a
// (Google) keychain recovery factor. These keys are used as an additional
// recovery mechanism for the cloud enclave authenticator, and they may also be
// created and retrieved by other Google products.
class ICloudRecoveryKey {
public:
using CreateCallback =
base::OnceCallback<void(std::unique_ptr<ICloudRecoveryKey>)>;
using RetrieveCallback =
base::OnceCallback<void(std::vector<std::unique_ptr<ICloudRecoveryKey>>)>;
ICloudRecoveryKey(ICloudRecoveryKey&) = delete;
ICloudRecoveryKey operator=(ICloudRecoveryKey&) = delete;
~ICloudRecoveryKey();
// Creates, stores in iCloud Keychain, and returns an ICloudRecoveryKey.
static void Create(CreateCallback callback,
trusted_vault::SecurityDomainId security_domain_id,
std::string_view keychain_access_group);
// Retrieves from iCloud Keychain all ICloudRecoveryKeys.
static void Retrieve(RetrieveCallback callback,
trusted_vault::SecurityDomainId security_domain_id,
std::string_view keychain_access_group);
// Randomly generates an ICloudRecoveryKey that is not persisted to the
// keychain for unit tests.
static std::unique_ptr<ICloudRecoveryKey> CreateForTest();
const trusted_vault::SecureBoxKeyPair* key() const { return key_.get(); }
const std::vector<uint8_t>& id() const { return id_; }
private:
// Like |Create| but synchronous.
static std::unique_ptr<ICloudRecoveryKey> CreateAndStoreKeySlowly(
trusted_vault::SecurityDomainId security_domain_id,
std::string_view keychain_access_group);
// Like |Retrieve| but synchronous.
static std::vector<std::unique_ptr<ICloudRecoveryKey>> RetrieveKeysSlowly(
trusted_vault::SecurityDomainId security_domain_id,
std::string_view keychain_access_group);
explicit ICloudRecoveryKey(
std::unique_ptr<trusted_vault::SecureBoxKeyPair> key);
const std::unique_ptr<trusted_vault::SecureBoxKeyPair> key_;
// The ID of the key is the result of exporting the public key.
const std::vector<uint8_t> id_;
};
} // namespace trusted_vault
#endif // COMPONENTS_TRUSTED_VAULT_ICLOUD_RECOVERY_KEY_MAC_H_
|
