Index: webrtc/pc/srtpsession.h |
diff --git a/webrtc/pc/srtpsession.h b/webrtc/pc/srtpsession.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..c490c48f9d9164dfd974acbdc55cca60e2d6987b |
--- /dev/null |
+++ b/webrtc/pc/srtpsession.h |
@@ -0,0 +1,109 @@ |
+/* |
+ * Copyright 2017 The WebRTC project authors. All Rights Reserved. |
+ * |
+ * Use of this source code is governed by a BSD-style license |
+ * that can be found in the LICENSE file in the root of the source |
+ * tree. An additional intellectual property rights grant can be found |
+ * in the file PATENTS. All contributing project authors may |
+ * be found in the AUTHORS file in the root of the source tree. |
+ */ |
+ |
+#ifndef WEBRTC_PC_SRTPSESSION_H_ |
+#define WEBRTC_PC_SRTPSESSION_H_ |
+ |
+#include <vector> |
+ |
+#include "webrtc/rtc_base/basictypes.h" |
+#include "webrtc/rtc_base/thread_checker.h" |
+ |
+// Forward declaration to avoid pulling in libsrtp headers here |
+struct srtp_event_data_t; |
+struct srtp_ctx_t_; |
+ |
+namespace cricket { |
+ |
+// Class that wraps a libSRTP session. |
+class SrtpSession { |
+ public: |
+ SrtpSession(); |
+ ~SrtpSession(); |
+ |
+ // Configures the session for sending data using the specified |
+ // cipher-suite and key. Receiving must be done by a separate session. |
+ bool SetSend(int cs, const uint8_t* key, size_t len); |
+ bool UpdateSend(int cs, const uint8_t* key, size_t len); |
+ |
+ // Configures the session for receiving data using the specified |
+ // cipher-suite and key. Sending must be done by a separate session. |
+ bool SetRecv(int cs, const uint8_t* key, size_t len); |
+ bool UpdateRecv(int cs, const uint8_t* key, size_t len); |
+ |
+ void SetEncryptedHeaderExtensionIds( |
+ const std::vector<int>& encrypted_header_extension_ids); |
+ |
+ // Encrypts/signs an individual RTP/RTCP packet, in-place. |
+ // If an HMAC is used, this will increase the packet size. |
+ bool ProtectRtp(void* data, int in_len, int max_len, int* out_len); |
+ // Overloaded version, outputs packet index. |
+ bool ProtectRtp(void* data, |
+ int in_len, |
+ int max_len, |
+ int* out_len, |
+ int64_t* index); |
+ bool ProtectRtcp(void* data, int in_len, int max_len, int* out_len); |
+ // Decrypts/verifies an invidiual RTP/RTCP packet. |
+ // If an HMAC is used, this will decrease the packet size. |
+ bool UnprotectRtp(void* data, int in_len, int* out_len); |
+ bool UnprotectRtcp(void* data, int in_len, int* out_len); |
+ |
+ // Helper method to get authentication params. |
+ bool GetRtpAuthParams(uint8_t** key, int* key_len, int* tag_len); |
+ |
+ int GetSrtpOverhead() const; |
+ |
+ // If external auth is enabled, SRTP will write a dummy auth tag that then |
+ // later must get replaced before the packet is sent out. Only supported for |
+ // non-GCM cipher suites and can be checked through "IsExternalAuthActive" |
+ // if it is actually used. This method is only valid before the RTP params |
+ // have been set. |
+ void EnableExternalAuth(); |
+ bool IsExternalAuthEnabled() const; |
+ |
+ // A SRTP session supports external creation of the auth tag if a non-GCM |
+ // cipher is used. This method is only valid after the RTP params have |
+ // been set. |
+ bool IsExternalAuthActive() const; |
+ |
+ // Calls srtp_shutdown if it's initialized. |
+ static void Terminate(); |
+ |
+ private: |
+ bool DoSetKey(int type, int cs, const uint8_t* key, size_t len); |
+ bool SetKey(int type, int cs, const uint8_t* key, size_t len); |
+ bool UpdateKey(int type, int cs, const uint8_t* key, size_t len); |
+ bool SetEncryptedHeaderExtensionIds( |
+ int type, |
+ const std::vector<int>& encrypted_header_extension_ids); |
+ // Returns send stream current packet index from srtp db. |
+ bool GetSendStreamPacketIndex(void* data, int in_len, int64_t* index); |
+ |
+ static bool Init(); |
+ void HandleEvent(const srtp_event_data_t* ev); |
+ static void HandleEventThunk(srtp_event_data_t* ev); |
+ |
+ rtc::ThreadChecker thread_checker_; |
+ srtp_ctx_t_* session_ = nullptr; |
+ int rtp_auth_tag_len_ = 0; |
+ int rtcp_auth_tag_len_ = 0; |
+ static bool inited_; |
+ static rtc::GlobalLockPod lock_; |
+ int last_send_seq_num_ = -1; |
+ bool external_auth_active_ = false; |
+ bool external_auth_enabled_ = false; |
+ std::vector<int> encrypted_header_extension_ids_; |
+ RTC_DISALLOW_COPY_AND_ASSIGN(SrtpSession); |
+}; |
+ |
+} // namespace cricket |
+ |
+#endif // WEBRTC_PC_SRTPSESSION_H_ |