xref: /aosp_15_r20/external/tink/cc/mac/mac_key.h (revision e7b1675dde1b92d52ec075b0a92829627f2c52a5)
1*e7b1675dSTing-Kang Chang // Copyright 2022 Google LLC
2*e7b1675dSTing-Kang Chang //
3*e7b1675dSTing-Kang Chang // Licensed under the Apache License, Version 2.0 (the "License");
4*e7b1675dSTing-Kang Chang // you may not use this file except in compliance with the License.
5*e7b1675dSTing-Kang Chang // You may obtain a copy of the License at
6*e7b1675dSTing-Kang Chang //
7*e7b1675dSTing-Kang Chang //      http://www.apache.org/licenses/LICENSE-2.0
8*e7b1675dSTing-Kang Chang //
9*e7b1675dSTing-Kang Chang // Unless required by applicable law or agreed to in writing, software
10*e7b1675dSTing-Kang Chang // distributed under the License is distributed on an "AS IS" BASIS,
11*e7b1675dSTing-Kang Chang // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*e7b1675dSTing-Kang Chang // See the License for the specific language governing permissions and
13*e7b1675dSTing-Kang Chang // limitations under the License.
14*e7b1675dSTing-Kang Chang //
15*e7b1675dSTing-Kang Chang ////////////////////////////////////////////////////////////////////////////////
16*e7b1675dSTing-Kang Chang 
17*e7b1675dSTing-Kang Chang #ifndef TINK_MAC_MAC_KEY_H_
18*e7b1675dSTing-Kang Chang #define TINK_MAC_MAC_KEY_H_
19*e7b1675dSTing-Kang Chang 
20*e7b1675dSTing-Kang Chang #include <string>
21*e7b1675dSTing-Kang Chang 
22*e7b1675dSTing-Kang Chang #include "tink/key.h"
23*e7b1675dSTing-Kang Chang #include "tink/mac/mac_parameters.h"
24*e7b1675dSTing-Kang Chang #include "tink/util/statusor.h"
25*e7b1675dSTing-Kang Chang 
26*e7b1675dSTing-Kang Chang namespace crypto {
27*e7b1675dSTing-Kang Chang namespace tink {
28*e7b1675dSTing-Kang Chang 
29*e7b1675dSTing-Kang Chang // Represents a function to compute/verify a message authentication code (MAC).
30*e7b1675dSTing-Kang Chang class MacKey : public Key {
31*e7b1675dSTing-Kang Chang  public:
32*e7b1675dSTing-Kang Chang   // Returns the bytes prefixed to every MAC tag generated by this key.
33*e7b1675dSTing-Kang Chang   //
34*e7b1675dSTing-Kang Chang   // In order to make key rotation more efficient, Tink allows every MAC key to
35*e7b1675dSTing-Kang Chang   // have an associated tag output prefix.  When verifying a tag, only keys with
36*e7b1675dSTing-Kang Chang   // a matching prefix have to be tried.
37*e7b1675dSTing-Kang Chang   //
38*e7b1675dSTing-Kang Chang   // See https://developers.google.com/tink/wire-format#tink_output_prefix for
39*e7b1675dSTing-Kang Chang   // more background information on Tink output prefixes.
40*e7b1675dSTing-Kang Chang   virtual absl::string_view GetOutputPrefix() const = 0;
41*e7b1675dSTing-Kang Chang 
42*e7b1675dSTing-Kang Chang   const MacParameters& GetParameters() const override = 0;
43*e7b1675dSTing-Kang Chang 
44*e7b1675dSTing-Kang Chang   bool operator==(const Key& other) const override = 0;
45*e7b1675dSTing-Kang Chang };
46*e7b1675dSTing-Kang Chang 
47*e7b1675dSTing-Kang Chang }  // namespace tink
48*e7b1675dSTing-Kang Chang }  // namespace crypto
49*e7b1675dSTing-Kang Chang 
50*e7b1675dSTing-Kang Chang 
51*e7b1675dSTing-Kang Chang #endif  // TINK_MAC_MAC_KEY_H_
52