blob: f69a668a7543b7d5f8d7a7288e61d90b082f2ee8 [file] [log] [blame]
// Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <string>
#include <brillo/secure_blob.h>
#include "key.pb.h" // NOLINT(build/include)
#include "vault_keyset.pb.h" // NOLINT(build/include)
namespace cryptohome {
// This class wraps a username/passkey pair that can be used to authenticate the
// user.
class Credentials final {
Credentials(const char* username, const brillo::SecureBlob& passkey);
Credentials(const Credentials& rhs);
Credentials& operator=(const Credentials& rhs);
// Returns the full user name as a std::string
std::string username() const { return username_; }
// Returns the obfuscated username, used as the name of the directory
// containing the user's stateful data (and maybe used for other reasons
// at some point.)
std::string GetObfuscatedUsername(
const brillo::SecureBlob& system_salt) const;
// Returns the user's passkey
// Parameters
// passkey - A SecureBlob where the passkey should be written to.
void GetPasskey(brillo::SecureBlob* passkey) const;
// Getter and setter for the associated KeyData.
void set_key_data(const KeyData& data) { key_data_ = data; }
const KeyData& key_data() const { return key_data_; }
// Getter and setter for the associated
// SerializedVaultKeyset::SignatureChallengeInfo.
// Used only for freshly generated challenge-protected credentials (see
// ChallengeCredentialsHelper::GenerateNew()).
void set_challenge_credentials_keyset_info(
const SerializedVaultKeyset_SignatureChallengeInfo&
challenge_credentials_keyset_info) {
challenge_credentials_keyset_info_ = challenge_credentials_keyset_info;
const SerializedVaultKeyset_SignatureChallengeInfo&
challenge_credentials_keyset_info() const {
return challenge_credentials_keyset_info_;
std::string username_;
KeyData key_data_;
brillo::SecureBlob passkey_;
} // namespace cryptohome