Add direct accessor method for a restricted big integer's secret data.

This should avoid creating new secret data objects from string views for APIs that require secret data objects. PiperOrigin-RevId: 715482913 Change-Id: I841034230f711fcdfa5d833296759ec84641117a
tink-crypto · Jan 14, 2025 · 235b8d9 · 235b8d9
1 parent 8f1b1d4
commit 235b8d9
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/tink/core/restricted_big_integer_test.cc b/tink/core/restricted_big_integer_test.cc
@@ -63,6 +63,9 @@ TEST(RestrictedBigIntegerTest, CreateAndGetSecret) {
   EXPECT_THAT(restricted_big_integer.SizeInBytes(), Eq(256));
   EXPECT_THAT(restricted_big_integer.GetSecret(InsecureSecretKeyAccess::Get()),
               Eq(secret_bytes));
+  EXPECT_THAT(util::SecretDataAsStringView(restricted_big_integer.GetSecretData(
+                  InsecureSecretKeyAccess::Get())),
+              Eq(secret_bytes));
 }
 
 TEST(RestrictedBigIntegerTest, CreateAndGetSecretPadded) {

diff --git a/tink/restricted_big_integer.h b/tink/restricted_big_integer.h
@@ -57,6 +57,11 @@ class RestrictedBigInteger {
     return util::SecretDataAsStringView(secret_);
   }
 
+  // Returns the secret data of this RestrictedBigInteger object.
+  const util::SecretData& GetSecretData(SecretKeyAccessToken token) const {
+    return secret_;
+  }
+
   int64_t SizeInBytes() const { return secret_.size(); }
 
   bool operator==(const RestrictedBigInteger& other) const;