1 /* 2 * DPP module internal definitions 3 * Copyright (c) 2017, Qualcomm Atheros, Inc. 4 * Copyright (c) 2018-2020, The Linux Foundation 5 * Copyright (c) 2021-2022, Qualcomm Innovation Center, Inc. 6 * 7 * This software may be distributed under the terms of the BSD license. 8 * See README for more details. 9 */ 10 11 #ifndef DPP_I_H 12 #define DPP_I_H 13 14 #ifdef CONFIG_DPP 15 16 struct dpp_global { 17 void *msg_ctx; 18 struct dl_list bootstrap; /* struct dpp_bootstrap_info */ 19 struct dl_list configurator; /* struct dpp_configurator */ 20 #ifdef CONFIG_DPP2 21 struct dl_list controllers; /* struct dpp_relay_controller */ 22 struct dpp_relay_controller *tmp_controller; 23 struct dpp_controller *controller; 24 struct dl_list tcp_init; /* struct dpp_connection */ 25 int relay_sock; 26 void *relay_msg_ctx; 27 void *relay_cb_ctx; 28 void (*relay_tx)(void *ctx, const u8 *addr, unsigned int freq, 29 const u8 *msg, size_t len); 30 void (*relay_gas_resp_tx)(void *ctx, const u8 *addr, u8 dialog_token, 31 int prot, struct wpabuf *buf); 32 void *cb_ctx; 33 int (*process_conf_obj)(void *ctx, struct dpp_authentication *auth); 34 bool (*tcp_msg_sent)(void *ctx, struct dpp_authentication *auth); 35 void (*remove_bi)(void *ctx, struct dpp_bootstrap_info *bi); 36 #endif /* CONFIG_DPP2 */ 37 }; 38 39 /* dpp.c */ 40 41 void dpp_build_attr_status(struct wpabuf *msg, enum dpp_status_error status); 42 void dpp_build_attr_r_bootstrap_key_hash(struct wpabuf *msg, const u8 *hash); 43 unsigned int dpp_next_id(struct dpp_global *dpp); 44 struct wpabuf * dpp_build_conn_status(enum dpp_status_error result, 45 const u8 *ssid, size_t ssid_len, 46 const char *channel_list); 47 struct json_token * dpp_parse_own_connector(const char *own_connector); 48 int dpp_connector_match_groups(struct json_token *own_root, 49 struct json_token *peer_root, bool reconfig); 50 int dpp_build_jwk(struct wpabuf *buf, const char *name, 51 struct crypto_ec_key *key, const char *kid, 52 const struct dpp_curve_params *curve); 53 struct crypto_ec_key * dpp_parse_jwk(struct json_token *jwk, 54 const struct dpp_curve_params **key_curve); 55 int dpp_prepare_channel_list(struct dpp_authentication *auth, 56 unsigned int neg_freq, 57 struct hostapd_hw_modes *own_modes, u16 num_modes); 58 void dpp_auth_fail(struct dpp_authentication *auth, const char *txt); 59 int dpp_gen_uri(struct dpp_bootstrap_info *bi); 60 void dpp_write_adv_proto(struct wpabuf *buf); 61 void dpp_write_gas_query(struct wpabuf *buf, struct wpabuf *query); 62 63 /* dpp_backup.c */ 64 65 void dpp_free_asymmetric_key(struct dpp_asymmetric_key *key); 66 struct wpabuf * dpp_build_enveloped_data(struct dpp_authentication *auth); 67 int dpp_conf_resp_env_data(struct dpp_authentication *auth, 68 const u8 *env_data, size_t env_data_len); 69 70 /* dpp_crypto.c */ 71 72 struct dpp_signed_connector_info { 73 unsigned char *payload; 74 size_t payload_len; 75 }; 76 77 enum dpp_status_error 78 dpp_process_signed_connector(struct dpp_signed_connector_info *info, 79 struct crypto_ec_key *csign_pub, 80 const char *connector); 81 enum dpp_status_error 82 dpp_check_signed_connector(struct dpp_signed_connector_info *info, 83 const u8 *csign_key, size_t csign_key_len, 84 const u8 *peer_connector, size_t peer_connector_len); 85 const struct dpp_curve_params * dpp_get_curve_name(const char *name); 86 const struct dpp_curve_params * dpp_get_curve_jwk_crv(const char *name); 87 const struct dpp_curve_params * dpp_get_curve_ike_group(u16 group); 88 int dpp_bi_pubkey_hash(struct dpp_bootstrap_info *bi, 89 const u8 *data, size_t data_len); 90 struct crypto_ec_key * dpp_set_pubkey_point(struct crypto_ec_key *group_key, 91 const u8 *buf, size_t len); 92 int dpp_hkdf_expand(size_t hash_len, const u8 *secret, size_t secret_len, 93 const char *label, u8 *out, size_t outlen); 94 int dpp_hmac_vector(size_t hash_len, const u8 *key, size_t key_len, 95 size_t num_elem, const u8 *addr[], const size_t *len, 96 u8 *mac); 97 int dpp_ecdh(struct crypto_ec_key *own, struct crypto_ec_key *peer, 98 u8 *secret, size_t *secret_len); 99 void dpp_debug_print_key(const char *title, struct crypto_ec_key *key); 100 int dpp_pbkdf2(size_t hash_len, const u8 *password, size_t password_len, 101 const u8 *salt, size_t salt_len, unsigned int iterations, 102 u8 *buf, size_t buflen); 103 int dpp_get_subject_public_key(struct dpp_bootstrap_info *bi, 104 const u8 *data, size_t data_len); 105 int dpp_bootstrap_key_hash(struct dpp_bootstrap_info *bi); 106 int dpp_keygen(struct dpp_bootstrap_info *bi, const char *curve, 107 const u8 *privkey, size_t privkey_len); 108 struct crypto_ec_key * dpp_gen_keypair(const struct dpp_curve_params *curve); 109 int dpp_derive_k1(const u8 *Mx, size_t Mx_len, u8 *k1, unsigned int hash_len); 110 int dpp_derive_k2(const u8 *Nx, size_t Nx_len, u8 *k2, unsigned int hash_len); 111 int dpp_derive_bk_ke(struct dpp_authentication *auth); 112 int dpp_gen_r_auth(struct dpp_authentication *auth, u8 *r_auth); 113 int dpp_gen_i_auth(struct dpp_authentication *auth, u8 *i_auth); 114 int dpp_auth_derive_l_responder(struct dpp_authentication *auth); 115 int dpp_auth_derive_l_initiator(struct dpp_authentication *auth); 116 int dpp_derive_pmk(const u8 *Nx, size_t Nx_len, u8 *pmk, unsigned int hash_len); 117 int dpp_derive_pmkid(const struct dpp_curve_params *curve, 118 struct crypto_ec_key *own_key, 119 struct crypto_ec_key *peer_key, u8 *pmkid); 120 struct crypto_ec_point * 121 dpp_pkex_derive_Qi(const struct dpp_curve_params *curve, const u8 *mac_init, 122 const char *code, size_t code_len, const char *identifier, 123 struct crypto_ec **ret_ec); 124 struct crypto_ec_point * 125 dpp_pkex_derive_Qr(const struct dpp_curve_params *curve, const u8 *mac_resp, 126 const char *code, size_t code_len, const char *identifier, 127 struct crypto_ec **ret_ec); 128 int dpp_pkex_derive_z(const u8 *mac_init, const u8 *mac_resp, 129 u8 ver_init, u8 ver_resp, 130 const u8 *Mx, size_t Mx_len, 131 const u8 *Nx, size_t Nx_len, 132 const char *code, size_t code_len, 133 const u8 *Kx, size_t Kx_len, 134 u8 *z, unsigned int hash_len); 135 int dpp_reconfig_derive_ke_responder(struct dpp_authentication *auth, 136 const u8 *net_access_key, 137 size_t net_access_key_len, 138 struct json_token *peer_net_access_key); 139 int dpp_reconfig_derive_ke_initiator(struct dpp_authentication *auth, 140 const u8 *r_proto, u16 r_proto_len, 141 struct json_token *net_access_key); 142 struct crypto_ec_point * dpp_decrypt_e_id(struct crypto_ec_key *ppkey, 143 struct crypto_ec_key *a_nonce, 144 struct crypto_ec_key *e_prime_id); 145 int dpp_derive_auth_i(struct dpp_authentication *auth, u8 *auth_i); 146 char * dpp_sign_connector(struct dpp_configurator *conf, 147 const struct wpabuf *dppcon); 148 int dpp_test_gen_invalid_key(struct wpabuf *msg, 149 const struct dpp_curve_params *curve); 150 151 struct dpp_reconfig_id { 152 struct crypto_ec *ec; 153 struct crypto_ec_point *e_id; /* E-id */ 154 struct crypto_ec_key *csign; 155 struct crypto_ec_key *a_nonce; /* A-NONCE */ 156 struct crypto_ec_key *e_prime_id; /* E'-id */ 157 struct crypto_ec_key *pp_key; 158 }; 159 160 /* dpp_tcp.c */ 161 162 void dpp_controller_conn_status_result_wait_timeout(void *eloop_ctx, 163 void *timeout_ctx); 164 void dpp_tcp_init_flush(struct dpp_global *dpp); 165 void dpp_relay_flush_controllers(struct dpp_global *dpp); 166 167 #endif /* CONFIG_DPP */ 168 #endif /* DPP_I_H */ 169