Upstream version 5.34.104.0

[platform/framework/web/crosswalk.git] / src / chrome / browser / metrics / variations / variations_seed_store.cc

diff --git a/src/chrome/browser/metrics/variations/variations_seed_store.cc b/src/chrome/browser/metrics/variations/variations_seed_store.cc
index 45ce323..61bc0ed 100644 (file)
--- a/src/chrome/browser/metrics/variations/variations_seed_store.cc
+++ b/src/chrome/browser/metrics/variations/variations_seed_store.cc
@@ -4,8 +4,6 @@
 
 #include "chrome/browser/metrics/variations/variations_seed_store.h"
 
-#include <set>
-
 #include "base/base64.h"
 #include "base/metrics/histogram.h"
 #include "base/prefs/pref_registry_simple.h"
@@ -14,17 +12,99 @@
 #include "base/strings/string_number_conversions.h"
 #include "chrome/common/pref_names.h"
 #include "components/variations/proto/variations_seed.pb.h"
+#include "crypto/signature_verifier.h"
 
 namespace chrome_variations {
 
 namespace {
 
 // Computes a hash of the serialized variations seed data.
+// TODO(asvitkine): Remove this once the seed signature is ubiquitous.
 std::string HashSeed(const std::string& seed_data) {
   const std::string sha1 = base::SHA1HashString(seed_data);
   return base::HexEncode(sha1.data(), sha1.size());
 }
 
+// Signature verification is disabled on mobile platforms for now, since it
+// adds about ~15ms to the startup time on mobile (vs. a couple ms on desktop).
+bool SignatureVerificationEnabled() {
+#if defined(OS_IOS) || defined(OS_ANDROID)
+  return false;
+#else
+  return true;
+#endif
+}
+
+// This is the algorithm ID for ECDSA with SHA-256. Parameters are ABSENT.
+// RFC 5758:
+//   ecdsa-with-SHA256 OBJECT IDENTIFIER ::= { iso(1) member-body(2)
+//        us(840) ansi-X9-62(10045) signatures(4) ecdsa-with-SHA2(3) 2 }
+//   ...
+//   When the ecdsa-with-SHA224, ecdsa-with-SHA256, ecdsa-with-SHA384, or
+//   ecdsa-with-SHA512 algorithm identifier appears in the algorithm field
+//   as an AlgorithmIdentifier, the encoding MUST omit the parameters
+//   field.  That is, the AlgorithmIdentifier SHALL be a SEQUENCE of one
+//   component, the OID ecdsa-with-SHA224, ecdsa-with-SHA256, ecdsa-with-
+//   SHA384, or ecdsa-with-SHA512.
+// See also RFC 5480, Appendix A.
+const uint8 kECDSAWithSHA256AlgorithmID[] = {
+  0x30, 0x0a,
+    0x06, 0x08,
+      0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02,
+};
+
+// The ECDSA public key of the variations server for verifying variations seed
+// signatures.
+const uint8_t kPublicKey[] = {
+  0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01,
+  0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 0x42, 0x00,
+  0x04, 0x51, 0x7c, 0x31, 0x4b, 0x50, 0x42, 0xdd, 0x59, 0xda, 0x0b, 0xfa, 0x43,
+  0x44, 0x33, 0x7c, 0x5f, 0xa1, 0x0b, 0xd5, 0x82, 0xf6, 0xac, 0x04, 0x19, 0x72,
+  0x6c, 0x40, 0xd4, 0x3e, 0x56, 0xe2, 0xa0, 0x80, 0xa0, 0x41, 0xb3, 0x23, 0x7b,
+  0x71, 0xc9, 0x80, 0x87, 0xde, 0x35, 0x0d, 0x25, 0x71, 0x09, 0x7f, 0xb4, 0x15,
+  0x2b, 0xff, 0x82, 0x4d, 0xd3, 0xfe, 0xc5, 0xef, 0x20, 0xc6, 0xa3, 0x10, 0xbf,
+};
+
+// Note: UMA histogram enum - don't re-order or remove entries.
+enum VariationSeedSignatureState {
+  VARIATIONS_SEED_SIGNATURE_MISSING,
+  VARIATIONS_SEED_SIGNATURE_DECODE_FAILED,
+  VARIATIONS_SEED_SIGNATURE_INVALID_SIGNATURE,
+  VARIATIONS_SEED_SIGNATURE_INVALID_SEED,
+  VARIATIONS_SEED_SIGNATURE_VALID,
+  VARIATIONS_SEED_SIGNATURE_ENUM_SIZE,
+};
+
+// Verifies a variations seed (the serialized proto bytes) with the specified
+// base-64 encoded signate that was received from the server and returns the
+// result. The signature is assumed to be an "ECDSA with SHA-256" signature
+// (see kECDSAWithSHA256AlgorithmID above).
+VariationSeedSignatureState VerifySeedSignature(
+    const std::string& seed_bytes,
+    const std::string& base64_seed_signature) {
+  if (base64_seed_signature.empty())
+    return VARIATIONS_SEED_SIGNATURE_MISSING;
+
+  std::string signature;
+  if (!base::Base64Decode(base64_seed_signature, &signature))
+    return VARIATIONS_SEED_SIGNATURE_DECODE_FAILED;
+
+  crypto::SignatureVerifier verifier;
+  if (!verifier.VerifyInit(
+          kECDSAWithSHA256AlgorithmID, sizeof(kECDSAWithSHA256AlgorithmID),
+          reinterpret_cast<const uint8*>(signature.data()), signature.size(),
+          kPublicKey, arraysize(kPublicKey))) {
+    return VARIATIONS_SEED_SIGNATURE_INVALID_SIGNATURE;
+  }
+
+  verifier.VerifyUpdate(reinterpret_cast<const uint8*>(seed_bytes.data()),
+                        seed_bytes.size());
+  if (verifier.VerifyFinal())
+    return VARIATIONS_SEED_SIGNATURE_VALID;
+  return VARIATIONS_SEED_SIGNATURE_INVALID_SEED;
+}
+
+// Note: UMA histogram enum - don't re-order or remove entries.
 enum VariationSeedEmptyState {
   VARIATIONS_SEED_NOT_EMPTY,
   VARIATIONS_SEED_EMPTY,
@@ -67,6 +147,16 @@ bool VariationsSeedStore::LoadSeed(VariationsSeed* seed) {
     RecordVariationSeedEmptyHistogram(VARIATIONS_SEED_CORRUPT);
     return false;
   }
+
+  if (SignatureVerificationEnabled()) {
+    const std::string base64_seed_signature =
+        local_state_->GetString(prefs::kVariationsSeedSignature);
+    const VariationSeedSignatureState signature_state =
+        VerifySeedSignature(seed_data, base64_seed_signature);
+    UMA_HISTOGRAM_ENUMERATION("Variations.LoadSeedSignature", signature_state,
+                              VARIATIONS_SEED_SIGNATURE_ENUM_SIZE);
+  }
+
   variations_serial_number_ = seed->serial_number();
   RecordVariationSeedEmptyHistogram(VARIATIONS_SEED_NOT_EMPTY);
   return true;
@@ -89,6 +179,13 @@ bool VariationsSeedStore::StoreSeedData(
     return false;
   }
 
+  if (SignatureVerificationEnabled()) {
+    const VariationSeedSignatureState signature_state =
+        VerifySeedSignature(seed_data, base64_seed_signature);
+    UMA_HISTOGRAM_ENUMERATION("Variations.StoreSeedSignature", signature_state,
+                              VARIATIONS_SEED_SIGNATURE_ENUM_SIZE);
+  }
+
   std::string base64_seed_data;
   base::Base64Encode(seed_data, &base64_seed_data);