xref: /aosp_15_r20/external/tink/cc/insecure_secret_key_access.h (revision e7b1675dde1b92d52ec075b0a92829627f2c52a5)
1*e7b1675dSTing-Kang Chang // Copyright 2022 Google LLC
2*e7b1675dSTing-Kang Chang //
3*e7b1675dSTing-Kang Chang // Licensed under the Apache License, Version 2.0 (the "License");
4*e7b1675dSTing-Kang Chang // you may not use this file except in compliance with the License.
5*e7b1675dSTing-Kang Chang // You may obtain a copy of the License at
6*e7b1675dSTing-Kang Chang //
7*e7b1675dSTing-Kang Chang //      http://www.apache.org/licenses/LICENSE-2.0
8*e7b1675dSTing-Kang Chang //
9*e7b1675dSTing-Kang Chang // Unless required by applicable law or agreed to in writing, software
10*e7b1675dSTing-Kang Chang // distributed under the License is distributed on an "AS IS" BASIS,
11*e7b1675dSTing-Kang Chang // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*e7b1675dSTing-Kang Chang // See the License for the specific language governing permissions and
13*e7b1675dSTing-Kang Chang // limitations under the License.
14*e7b1675dSTing-Kang Chang //
15*e7b1675dSTing-Kang Chang ////////////////////////////////////////////////////////////////////////////////
16*e7b1675dSTing-Kang Chang 
17*e7b1675dSTing-Kang Chang #ifndef TINK_INSECURE_SECRET_KEY_ACCESS_H_
18*e7b1675dSTing-Kang Chang #define TINK_INSECURE_SECRET_KEY_ACCESS_H_
19*e7b1675dSTing-Kang Chang 
20*e7b1675dSTing-Kang Chang #include "tink/secret_key_access_token.h"
21*e7b1675dSTing-Kang Chang 
22*e7b1675dSTing-Kang Chang namespace crypto {
23*e7b1675dSTing-Kang Chang namespace tink {
24*e7b1675dSTing-Kang Chang 
25*e7b1675dSTing-Kang Chang class InsecureSecretKeyAccess {
26*e7b1675dSTing-Kang Chang  public:
27*e7b1675dSTing-Kang Chang   // Returns a `SecretKeyAccessToken`.
28*e7b1675dSTing-Kang Chang   //
29*e7b1675dSTing-Kang Chang   // The token can be used to access secret key material. Within Google, access
30*e7b1675dSTing-Kang Chang   // to this function is restricted by the build system. Outside of Google,
31*e7b1675dSTing-Kang Chang   // users can search their codebase for "InsecureSecretKeyAccess" to find
32*e7b1675dSTing-Kang Chang   // instances where it is used.
Get()33*e7b1675dSTing-Kang Chang   static SecretKeyAccessToken Get() { return SecretKeyAccessToken(); }
34*e7b1675dSTing-Kang Chang 
35*e7b1675dSTing-Kang Chang  private:
36*e7b1675dSTing-Kang Chang   InsecureSecretKeyAccess() = default;
37*e7b1675dSTing-Kang Chang };
38*e7b1675dSTing-Kang Chang 
39*e7b1675dSTing-Kang Chang }  // namespace tink
40*e7b1675dSTing-Kang Chang }  // namespace crypto
41*e7b1675dSTing-Kang Chang 
42*e7b1675dSTing-Kang Chang #endif  // TINK_INSECURE_SECRET_KEY_ACCESS_H_
43