Commits · 59a30aaf47d9e69bbf1bdbaefd8fe031720dd9d5 · fuchsia-mirror / fuchsia.googlesource.com-third_party-tink

Aug 17, 2017

Add APIs for registering and loading KmsClient impls. · 59a30aaf

Thai Duong authored 7 years ago

Also provide an API that automatically load KmsClient impls annotated
with @AutoService using java.util.ServiceLoader. Tinkey will use this
API to talk to custom, in-house KMS.

Change-Id: Id1cabb6a17df96597afb10f3b4bd1f9331bc0c67
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: a6a18a88fef36b17c58b4bc4e18df91d73e94ffa

59a30aaf

Adding helpers for Tink configuration. · c87880f1

Bartosz Przydatek authored 7 years ago

Change-Id: I7076732524ac5e6da6455456f01c281717dbe435
ORIGINAL_AUTHOR=Bartosz Przydatek <przydatek@google.com>
GitOrigin-RevId: c4fbef5be03f00715d87aab3030f259e2fa0eec4

c87880f1

Change all methods in Registry to static. · 73ca35b5

Thai Duong authored 7 years ago

This changes our APIs from Registry.INSTANCE.getPrimitive(...)
to Registry.getPrimitive() which is nicer.

Change-Id: I1708150d9dd83df8ec36491e5c6d4c991f86f7f6
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 9f92a005a91d943f2a0ea9592e9e02249e6fd064

73ca35b5

Temporarily remove the EnvelopeMe example. · ab0ab53d

Thai Duong authored 7 years ago

Reason: this example is deprecated because it's using a set of APIs
that are going through heavy refactoring. I've written a new example,
but it needs to wait until the refactoring is done.

Change-Id: I78187c6e713f521f7695130ba846469ac69bcf9e
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 4153a2bf758e9afd2fc081b5d28dfc81d7f5bc31

ab0ab53d

Obj-C implementation of mac and initial support for objc protos. · 1696b8ca

Haris Andrianakis authored 7 years ago

Change-Id: I7d5c19b8ba195516f305ecc7a9c96366f98e4c89
ORIGINAL_AUTHOR=Haris Andrianakis <candrian@google.com>
GitOrigin-RevId: a9cd65c470ac24270bd4e865ba83637a15209887

1696b8ca

Aug 14, 2017

Only CleartextKeysetHandle is allowed to read/write cleartext keysets. · b24b6575

Thai Duong authored 7 years ago

Also renaming fromKeysetReader to read.

Change-Id: I3266583ed1fa8a155ed882508dd93423304c07b1
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: a2187fc5d1d0a6d0e0c6b9f2aed354edbae2c287

b24b6575

Make KeysetHandle.getKeyset() package-private. · 63aa979e

Thai Duong authored 7 years ago

This is part of an effort to ensure that users cannot freely read/write
cleartext keysets.

Change-Id: Ib694a33279808938a0b8923f920a2ed99ad7be9c
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 8682d887f14a7286650bdbd3f26c83a4a4087990

63aa979e

Moves Poly1305 algorithm to Poly1305.java. · 4c626dd5

Erhan Nergiz authored 7 years ago

Change-Id: Ic18dddb3d24d4b39c87950a3900e0df3c9f0df19
ORIGINAL_AUTHOR=Erhan Nergiz <anergiz@google.com>
GitOrigin-RevId: dfc34a2fe9b8a3b6fc4ee86582910aa912eabd11

4c626dd5

Aug 11, 2017

Refactor keyset handles and add KeysetReader and KeysetWriter. · fd2c97a7

Thai Duong authored 7 years ago

KeysetHandle can read encrypted keysets from KeysetReader, and write
cleartext or encrypted keysets to KeysetWriter. This allows removing
EncryptedKeysetHandle and CleartextKeysetHandle.generateNew.

Also:
- Remove KeysetManager.Builder.
- Add a bunch of useful keyset readers and writers.

Change-Id: I5eb0681232c19fc435d08e9373a7a9edbdab958c
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 9bfaa1539963ed21ff223939798b20dd13bd64d9

fd2c97a7

Emphasizes Mac.java interface is for multi-time MACs · 9021dd8e

Erhan Nergiz authored 7 years ago

Change-Id: Ie13878c2bc60227c70a3d785029c6b76c73874b5
ORIGINAL_AUTHOR=Erhan Nergiz <anergiz@google.com>
GitOrigin-RevId: 6ca24e5da13f9ee64878e60a5648c2a15fc1bc2c

9021dd8e

Set OutputPrefixType as a field of the KeyTemplate proto. · 8d3bf858

Thai Duong authored 7 years ago

This ensures that all APIs that generate new keys from KeyTemplate can
generate keys with non-TINK prefix types.

If a key template proto does not contain an output prefix type, uses
the TINK prefix type.

Change-Id: I041c335eabaa87c41c88bbe5e51ee02c867b6970
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 87d37eb7bba823db0b5f00f70ca247ffcc1d1ade

8d3bf858

Make com.google.crypto.tink independent of com.google.crypto.tink.subtle. · 35e795ba

Thai Duong authored 7 years ago

This allows users that just want to use the former not to have to include
the later.

Change-Id: I13d282104d9b5dc0c963a756e67bed54f6c6b238
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 78c186af2d9bbf25dd20712e78950f8454eda1dd

35e795ba

Modifies XChaCha20Poly1305 to use IETF version of the Poly1305. · 89f3b725

Erhan Nergiz authored 7 years ago

Change-Id: If31a9090b415dc0ea877417b9ecc33ad082bb583
ORIGINAL_AUTHOR=Erhan Nergiz <anergiz@google.com>
GitOrigin-RevId: e904dd01bc42e6112493f3046c2a2d2e17818dc1

89f3b725

Aug 03, 2017

Fix Lint errors. · 9b9b2e8c

Thai Duong authored 7 years ago

Change-Id: I2c89d57f0aae9495efa01fdaf6f6910674ad505f
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 3b30e3738a38d2f59776183747d7ff3e286f05c4

9b9b2e8c

Readd android targets. · 4468394c

Thai Duong authored 7 years ago

Change-Id: I5f4542ee79236cada3cf8232c835cf0493238b73
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: a881f8f3c71a35dfef3bfa6bc69f5392671ced9e

4468394c

Make all of subtle independent of protos. · 2bb522f7

Thai Duong authored 7 years ago

Without proto dependency, subtle:hybrid_android, subtle:signature_android and
therefore //java:subtle_android are no longer needed.

Change-Id: I0f69831678d9bf1ac571aa4082b52c7f87d47fa8
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: eca1910698d414a7f3bf069640c128a0e73e1e47

2bb522f7

Replace deprecated junit.framework.Assert with org.junit.Assert. · 2b96c83a

Thai Duong authored 7 years ago

Also fix various Lint errors.

Change-Id: I32eb5ae4957c1dca30047476dab3c579ad5e1244
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 8b38d181f8121e817126ecfd92774ef4cdabb7de

2b96c83a

Move shared plugins to parent pom.xml and use lite protos everywhere. · 42b32533

Thai Duong authored 7 years ago

Change-Id: Idaf4323b589a8db97aa252efa1ee0f7d2afffe1d
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 6ac6a07fd70c486ac5263cfd6d4eef8338955da8

42b32533

Clean up Bazel's Java targets. · 0b64c871

Thai Duong authored 7 years ago

//java:java exports everything, except CleartextKeysetHandle, protobuf
classes or Android Keystore integration.

//java:android exports everytihng, except CleartextKeysetHandle, protobuf
classes or GCP AWS integration (whose library doesn't support Android yet).

//java:subtle is compatible with Android and exports everything in subtle
and the primitive interfaces (e.g., Aead.java, Mac.java).

//java:protos exports all Java protos.

//java:cleartext_keyset_handle exports the CleartextKeysetHandle.

Change-Id: I95658902e6871531a382c401132b4a40c6784ac7
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: c85ae2c869ff9d2958c65474e93af56cd1c15053

0b64c871

Add a Bazel config_setting that allows to enable Java full protos. · 0d11c2de

Thai Duong authored 7 years ago

Because Tinkey depends on full protos, Tink for Java had provided two
flavors for every target that depends on protos. Since this new setting
allows users to dynamically select which protos they want to build Tink
with, Tink will default to lite protos and users that need full protos
(e.g., to build Tinkey) can build Tink with:

bazel build ... --define use_java_proto_full=true

Change-Id: I42c9589d96269e969f671ecc20e6578c73bda7ce
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 1404cfdeb3fe9c4e1c120eb5c9e57532c1c0cfa1

0d11c2de

Adds HybridEncrypt and HybridDecrypt for DjbCipherPoly1305. · 129c333d

Erhan Nergiz authored 7 years ago

Also adds methods taking ByteBuffer output arg to several DjbCipher related
classes to avoid unnecessary copying of ciphertext under the hood.

Change-Id: I625e808e53a6de44f3b348d6d8da7453fd47a58c
ORIGINAL_AUTHOR=Erhan Nergiz <anergiz@google.com>
GitOrigin-RevId: 7ada3a00a9180fbd1d50a63dbbd68e6e964ba124

129c333d

Jul 28, 2017

Remove AES-GCM and ECDSA test vector files. · 1a8d7249

Thanh Bui authored 7 years ago

AES-GCM and ECDSA tests now obtain the test vectors directly from Wycheproof's repository.

Change-Id: I614ba141c342a34286b7f2f11af87e25b0f1dc81
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 176deedb86d4d4ebd10aed07aa9ad1042e467fba

1a8d7249

Add key validation to EcdsaVerifyKeyManager. · 8c9ebba0

Thanh Bui authored 7 years ago

Change-Id: I3b4af82617ba95661fdc5bf3b08b170124a29629
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 3acbf15746b4c6443534991f8c22351409a0a326

8c9ebba0

Refactor package subtle/util. · 7bbd748b

Thanh Bui authored 7 years ago

It includes:
- move function ValidateVersion() from subtleutil to keyutil.
- rename the package to subtleutil.
Also:
- remove underscore from files in package util.

Change-Id: Ica79faa4fd1a1172565561105bf91bf95eab1d7d
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 0ef950a0198829723a93dfd5a1d949aff2076acf

7bbd748b

Add tests for Registry, PrimitiveSet, and CleartextKeysetHandle. · e3b4b68f

Thanh Bui authored 7 years ago

Change-Id: Ieeef7fdc95b7a6aa44f56ce15652546af3468377
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 0639613850e991efc23406deabed9efd006efff5

e3b4b68f

Add supporting functions for PrivateKeyManager to KeysetHandle and · 4b78739b

Thanh Bui authored 7 years ago

Registry.

Change-Id: I8c79a75bd6d4ccfaad19d81711900f2b45ecadf5
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 1327232bf27eabad43e67aeb60f58dd7b41e3647

4b78739b

Add EncryptedKeysetHandle. · d89fddc3

Thanh Bui authored 7 years ago

Also add two functions to KeysetManager for encryption and decryption of
Keyset.

Change-Id: If057da1249f86435f8d8922d26b65b89a76788ff
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: c3a9ec9529bca2489184ef9a8a12751ebb75befa

d89fddc3

Add PublicKeySignFactory and PublicKeyVerifyFactory. · 70045d5f

Thanh Bui authored 7 years ago

Also:
- fix a bug in tests of PublicKeySignConfig and
PublicKeyVerifyConfig.
- rename some imports.

Change-Id: I2e39b5fef1bb0d72ef8ed1d8428c4b9c74bd5d60
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: bbd2ef534a548d6e836c201ccfcdfb51c85a246a

70045d5f

Add OutputPrefixType to Entry in PrimitiveSet. · 8f0025d5

Thanh Bui authored 7 years ago

Change-Id: I918a424cbf5f2c3ac89d8d1246b8ed586580aec1
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 79f227bb42dae5f3d15c4c8690a738edb2f3a673

8f0025d5

Add PublicKeySignConfig and PublicKeyVerifyConfig. · 43b12f5b

Thanh Bui authored 7 years ago

Change-Id: Ib3655a32829bb4b28cf23a588a7e495f334885e4
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 696e62c6bf72570876abde83151903498ff29c2a

43b12f5b

Add key templates for ECDSA. · f1cb9cbc

Thanh Bui authored 7 years ago

Change-Id: Iea30a0408951bcb4afba6cab91cb27f8d7738436
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 28e475a8d0cdf7ba0e68e4e48b999062f538c92d

f1cb9cbc

Refactor constructors of EcdsaSign and EcdsaVerify. · 130f709e

Thanh Bui authored 7 years ago

Change-Id: If275525be109606ef73bcc293b3438d9b903c2f7
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 688e146de6ac1946f6fdbb22f8d538e8ec31f8ca

130f709e

Add PrivateKeyManager interface and EcdsaSignKeyManager and EcdsaVerifyKeyManager. · 16592b17

Thanh Bui authored 7 years ago

Change-Id: I44ce0dca0c837fe72020ca3074b6f46da39509b8
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 2b3ef7709ad5559460cc283d08a03955d8cb5412

16592b17

Use a single proto and key manager for all KMS AEAD key types. · fa9dde0a

Thai Duong authored 7 years ago

Also:
* Move all integration code to com.google.crypto.tink.integration.
* Simplify KmsEnvelopeAead and KmsAead protos.

Change-Id: I6841dec8524ea2b085ec414ecddc4624ca41db75
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 7ad14d0ab313950b79f4b1f6ac1852cbc1215140

fa9dde0a

Refactor cleartext_keyset_handle. · 0cca3687

Thanh Bui authored 7 years ago

Instead of independent functions, functions in cleartext_keyset_handle are
now members of a struct. This way, we can call them via a shared instance of the struct as in Java.

Change-Id: I8a180f4c230ef7eb1f17fc08c494a602ab0a6d42
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 4c416e677c655db141ea7e3cd63fd8eb4ea87351

0cca3687

Update subtles so that they don't depend on protos · 84629bfe

Thanh Bui authored 7 years ago

A new rule is added, which contains only primitive
interfaces. Subtles now depend on this rule instead of the whole tink so that they don't depend on proto objects.
Also, package subtle/aead is renamed to subtle/aes.

Change-Id: Ib2821a9964bed70f82882f298bafca22b29f089b
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: ad76182b7e0c570668fcae7212cc9b76000ca7c2

84629bfe

Use go_proto_library from Bazel instead of rules_protobuf. · a872a466

Thai Duong authored 7 years ago

Change-Id: I66399bf38a338f30cddb027e286c1d87185d49d5
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: b859ceedfa0ace5dd7d9661997e24e0a22817224

a872a466

Use java_lite_proto_library rule in Bazel, not the one in rules_protobuf. · 17fc05f6

Thai Duong authored 7 years ago

Remove third_party/rules_protobuf, as it's no longer needed.

Change-Id: I1b32535c99c0ff0810ff32768c036a6e52b2592e
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: ebb77d08db1e52339a858c0b462f6fda85ed3f67

17fc05f6

Add mac's config and mac's factory. · 17ae766c

Thanh Bui authored 7 years ago

Change-Id: I66454556ace65804bcecb2639627ca2fc8c36dee
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: abcb8f5f1b0b5122351089c904bfda4f4c266cee

17ae766c

Add aead's config, aead's factory, and AES-GCM key templates. · 483c01de

Thanh Bui authored 7 years ago

Change-Id: Id234198ebe5066d40c47fa9ac52e1142cf28d366
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 56fbf50edb03da2355b01e4555c6e78bb4690830

483c01de