Home | History | Annotate | Line # | Download | only in common
      1 /*
      2  * DPP module internal definitions
      3  * Copyright (c) 2017, Qualcomm Atheros, Inc.
      4  * Copyright (c) 2018-2020, The Linux Foundation
      5  * Copyright (c) 2021-2022, Qualcomm Innovation Center, Inc.
      6  *
      7  * This software may be distributed under the terms of the BSD license.
      8  * See README for more details.
      9  */
     10 
     11 #ifndef DPP_I_H
     12 #define DPP_I_H
     13 
     14 #ifdef CONFIG_DPP
     15 
     16 struct dpp_global {
     17 	void *msg_ctx;
     18 	struct dl_list bootstrap; /* struct dpp_bootstrap_info */
     19 	struct dl_list configurator; /* struct dpp_configurator */
     20 #ifdef CONFIG_DPP2
     21 	struct dl_list controllers; /* struct dpp_relay_controller */
     22 	struct dpp_relay_controller *tmp_controller;
     23 	struct dpp_controller *controller;
     24 	struct dl_list tcp_init; /* struct dpp_connection */
     25 	int relay_sock;
     26 	void *relay_msg_ctx;
     27 	void *relay_cb_ctx;
     28 	void (*relay_tx)(void *ctx, const u8 *addr, unsigned int freq,
     29 			 const u8 *msg, size_t len);
     30 	void (*relay_gas_resp_tx)(void *ctx, const u8 *addr, u8 dialog_token,
     31 				  int prot, struct wpabuf *buf);
     32 	void *cb_ctx;
     33 	int (*process_conf_obj)(void *ctx, struct dpp_authentication *auth);
     34 	bool (*tcp_msg_sent)(void *ctx, struct dpp_authentication *auth);
     35 	void (*remove_bi)(void *ctx, struct dpp_bootstrap_info *bi);
     36 #endif /* CONFIG_DPP2 */
     37 };
     38 
     39 /* dpp.c */
     40 
     41 void dpp_build_attr_status(struct wpabuf *msg, enum dpp_status_error status);
     42 void dpp_build_attr_r_bootstrap_key_hash(struct wpabuf *msg, const u8 *hash);
     43 unsigned int dpp_next_id(struct dpp_global *dpp);
     44 struct wpabuf * dpp_build_conn_status(enum dpp_status_error result,
     45 				      const u8 *ssid, size_t ssid_len,
     46 				      const char *channel_list);
     47 struct json_token * dpp_parse_own_connector(const char *own_connector);
     48 int dpp_connector_match_groups(struct json_token *own_root,
     49 			       struct json_token *peer_root, bool reconfig);
     50 int dpp_build_jwk(struct wpabuf *buf, const char *name,
     51 		  struct crypto_ec_key *key, const char *kid,
     52 		  const struct dpp_curve_params *curve);
     53 struct crypto_ec_key * dpp_parse_jwk(struct json_token *jwk,
     54 				     const struct dpp_curve_params **key_curve);
     55 int dpp_prepare_channel_list(struct dpp_authentication *auth,
     56 			     unsigned int neg_freq,
     57 			     struct hostapd_hw_modes *own_modes, u16 num_modes);
     58 void dpp_auth_fail(struct dpp_authentication *auth, const char *txt);
     59 int dpp_gen_uri(struct dpp_bootstrap_info *bi);
     60 void dpp_write_adv_proto(struct wpabuf *buf);
     61 void dpp_write_gas_query(struct wpabuf *buf, struct wpabuf *query);
     62 
     63 /* dpp_backup.c */
     64 
     65 void dpp_free_asymmetric_key(struct dpp_asymmetric_key *key);
     66 struct wpabuf * dpp_build_enveloped_data(struct dpp_authentication *auth);
     67 int dpp_conf_resp_env_data(struct dpp_authentication *auth,
     68 			   const u8 *env_data, size_t env_data_len);
     69 
     70 /* dpp_crypto.c */
     71 
     72 struct dpp_signed_connector_info {
     73 	unsigned char *payload;
     74 	size_t payload_len;
     75 };
     76 
     77 enum dpp_status_error
     78 dpp_process_signed_connector(struct dpp_signed_connector_info *info,
     79 			     struct crypto_ec_key *csign_pub,
     80 			     const char *connector);
     81 enum dpp_status_error
     82 dpp_check_signed_connector(struct dpp_signed_connector_info *info,
     83 			   const u8 *csign_key, size_t csign_key_len,
     84 			   const u8 *peer_connector, size_t peer_connector_len);
     85 const struct dpp_curve_params * dpp_get_curve_name(const char *name);
     86 const struct dpp_curve_params * dpp_get_curve_jwk_crv(const char *name);
     87 const struct dpp_curve_params * dpp_get_curve_ike_group(u16 group);
     88 int dpp_bi_pubkey_hash(struct dpp_bootstrap_info *bi,
     89 		       const u8 *data, size_t data_len);
     90 struct crypto_ec_key * dpp_set_pubkey_point(struct crypto_ec_key *group_key,
     91 					    const u8 *buf, size_t len);
     92 int dpp_hkdf_expand(size_t hash_len, const u8 *secret, size_t secret_len,
     93 		    const char *label, u8 *out, size_t outlen);
     94 int dpp_hmac_vector(size_t hash_len, const u8 *key, size_t key_len,
     95 		    size_t num_elem, const u8 *addr[], const size_t *len,
     96 		    u8 *mac);
     97 int dpp_ecdh(struct crypto_ec_key *own, struct crypto_ec_key *peer,
     98 	     u8 *secret, size_t *secret_len);
     99 void dpp_debug_print_key(const char *title, struct crypto_ec_key *key);
    100 int dpp_pbkdf2(size_t hash_len, const u8 *password, size_t password_len,
    101 	       const u8 *salt, size_t salt_len, unsigned int iterations,
    102 	       u8 *buf, size_t buflen);
    103 int dpp_get_subject_public_key(struct dpp_bootstrap_info *bi,
    104 			       const u8 *data, size_t data_len);
    105 int dpp_bootstrap_key_hash(struct dpp_bootstrap_info *bi);
    106 int dpp_keygen(struct dpp_bootstrap_info *bi, const char *curve,
    107 	       const u8 *privkey, size_t privkey_len);
    108 struct crypto_ec_key * dpp_gen_keypair(const struct dpp_curve_params *curve);
    109 int dpp_derive_k1(const u8 *Mx, size_t Mx_len, u8 *k1, unsigned int hash_len);
    110 int dpp_derive_k2(const u8 *Nx, size_t Nx_len, u8 *k2, unsigned int hash_len);
    111 int dpp_derive_bk_ke(struct dpp_authentication *auth);
    112 int dpp_gen_r_auth(struct dpp_authentication *auth, u8 *r_auth);
    113 int dpp_gen_i_auth(struct dpp_authentication *auth, u8 *i_auth);
    114 int dpp_auth_derive_l_responder(struct dpp_authentication *auth);
    115 int dpp_auth_derive_l_initiator(struct dpp_authentication *auth);
    116 int dpp_derive_pmk(const u8 *Nx, size_t Nx_len, u8 *pmk, unsigned int hash_len);
    117 int dpp_derive_pmkid(const struct dpp_curve_params *curve,
    118 		     struct crypto_ec_key *own_key,
    119 		     struct crypto_ec_key *peer_key, u8 *pmkid);
    120 struct crypto_ec_point *
    121 dpp_pkex_derive_Qi(const struct dpp_curve_params *curve, const u8 *mac_init,
    122 		   const char *code, size_t code_len, const char *identifier,
    123 		   struct crypto_ec **ret_ec);
    124 struct crypto_ec_point *
    125 dpp_pkex_derive_Qr(const struct dpp_curve_params *curve, const u8 *mac_resp,
    126 		   const char *code, size_t code_len, const char *identifier,
    127 		   struct crypto_ec **ret_ec);
    128 int dpp_pkex_derive_z(const u8 *mac_init, const u8 *mac_resp,
    129 		      u8 ver_init, u8 ver_resp,
    130 		      const u8 *Mx, size_t Mx_len,
    131 		      const u8 *Nx, size_t Nx_len,
    132 		      const char *code, size_t code_len,
    133 		      const u8 *Kx, size_t Kx_len,
    134 		      u8 *z, unsigned int hash_len);
    135 int dpp_reconfig_derive_ke_responder(struct dpp_authentication *auth,
    136 				     const u8 *net_access_key,
    137 				     size_t net_access_key_len,
    138 				     struct json_token *peer_net_access_key);
    139 int dpp_reconfig_derive_ke_initiator(struct dpp_authentication *auth,
    140 				     const u8 *r_proto, u16 r_proto_len,
    141 				     struct json_token *net_access_key);
    142 struct crypto_ec_point * dpp_decrypt_e_id(struct crypto_ec_key *ppkey,
    143 					  struct crypto_ec_key *a_nonce,
    144 					  struct crypto_ec_key *e_prime_id);
    145 int dpp_derive_auth_i(struct dpp_authentication *auth, u8 *auth_i);
    146 char * dpp_sign_connector(struct dpp_configurator *conf,
    147 			  const struct wpabuf *dppcon);
    148 int dpp_test_gen_invalid_key(struct wpabuf *msg,
    149 			     const struct dpp_curve_params *curve);
    150 
    151 struct dpp_reconfig_id {
    152 	struct crypto_ec *ec;
    153 	struct crypto_ec_point *e_id; /* E-id */
    154 	struct crypto_ec_key *csign;
    155 	struct crypto_ec_key *a_nonce; /* A-NONCE */
    156 	struct crypto_ec_key *e_prime_id; /* E'-id */
    157 	struct crypto_ec_key *pp_key;
    158 };
    159 
    160 /* dpp_tcp.c */
    161 
    162 void dpp_controller_conn_status_result_wait_timeout(void *eloop_ctx,
    163 						    void *timeout_ctx);
    164 void dpp_tcp_init_flush(struct dpp_global *dpp);
    165 void dpp_relay_flush_controllers(struct dpp_global *dpp);
    166 
    167 #endif /* CONFIG_DPP */
    168 #endif /* DPP_I_H */
    169