1  /*
2   * DPP module internal definitions
3   * Copyright (c) 2017, Qualcomm Atheros, Inc.
4   * Copyright (c) 2018-2020, The Linux Foundation
5   * Copyright (c) 2021-2022, Qualcomm Innovation Center, Inc.
6   *
7   * This software may be distributed under the terms of the BSD license.
8   * See README for more details.
9   */
10  
11  #ifndef DPP_I_H
12  #define DPP_I_H
13  
14  #ifdef CONFIG_DPP
15  
16  struct dpp_global {
17  	void *msg_ctx;
18  	struct dl_list bootstrap; /* struct dpp_bootstrap_info */
19  	struct dl_list configurator; /* struct dpp_configurator */
20  #ifdef CONFIG_DPP2
21  	struct dl_list controllers; /* struct dpp_relay_controller */
22  	struct dpp_relay_controller *tmp_controller;
23  	struct dpp_controller *controller;
24  	struct dl_list tcp_init; /* struct dpp_connection */
25  	int relay_sock;
26  	void *relay_msg_ctx;
27  	void *relay_cb_ctx;
28  	void (*relay_tx)(void *ctx, const u8 *addr, unsigned int freq,
29  			 const u8 *msg, size_t len);
30  	void (*relay_gas_resp_tx)(void *ctx, const u8 *addr, u8 dialog_token,
31  				  int prot, struct wpabuf *buf);
32  	void *cb_ctx;
33  	int (*process_conf_obj)(void *ctx, struct dpp_authentication *auth);
34  	bool (*tcp_msg_sent)(void *ctx, struct dpp_authentication *auth);
35  	void (*remove_bi)(void *ctx, struct dpp_bootstrap_info *bi);
36  #endif /* CONFIG_DPP2 */
37  };
38  
39  /* dpp.c */
40  
41  void dpp_build_attr_status(struct wpabuf *msg, enum dpp_status_error status);
42  void dpp_build_attr_r_bootstrap_key_hash(struct wpabuf *msg, const u8 *hash);
43  unsigned int dpp_next_id(struct dpp_global *dpp);
44  struct wpabuf * dpp_build_conn_status(enum dpp_status_error result,
45  				      const u8 *ssid, size_t ssid_len,
46  				      const char *channel_list);
47  struct json_token * dpp_parse_own_connector(const char *own_connector);
48  int dpp_connector_match_groups(struct json_token *own_root,
49  			       struct json_token *peer_root, bool reconfig);
50  int dpp_build_jwk(struct wpabuf *buf, const char *name,
51  		  struct crypto_ec_key *key, const char *kid,
52  		  const struct dpp_curve_params *curve);
53  struct crypto_ec_key * dpp_parse_jwk(struct json_token *jwk,
54  				     const struct dpp_curve_params **key_curve);
55  int dpp_prepare_channel_list(struct dpp_authentication *auth,
56  			     unsigned int neg_freq,
57  			     struct hostapd_hw_modes *own_modes, u16 num_modes);
58  void dpp_auth_fail(struct dpp_authentication *auth, const char *txt);
59  int dpp_gen_uri(struct dpp_bootstrap_info *bi);
60  void dpp_write_adv_proto(struct wpabuf *buf);
61  void dpp_write_gas_query(struct wpabuf *buf, struct wpabuf *query);
62  
63  /* dpp_backup.c */
64  
65  void dpp_free_asymmetric_key(struct dpp_asymmetric_key *key);
66  struct wpabuf * dpp_build_enveloped_data(struct dpp_authentication *auth);
67  int dpp_conf_resp_env_data(struct dpp_authentication *auth,
68  			   const u8 *env_data, size_t env_data_len);
69  
70  /* dpp_crypto.c */
71  
72  struct dpp_signed_connector_info {
73  	unsigned char *payload;
74  	size_t payload_len;
75  };
76  
77  enum dpp_status_error
78  dpp_process_signed_connector(struct dpp_signed_connector_info *info,
79  			     struct crypto_ec_key *csign_pub,
80  			     const char *connector);
81  enum dpp_status_error
82  dpp_check_signed_connector(struct dpp_signed_connector_info *info,
83  			   const u8 *csign_key, size_t csign_key_len,
84  			   const u8 *peer_connector, size_t peer_connector_len);
85  const struct dpp_curve_params * dpp_get_curve_name(const char *name);
86  const struct dpp_curve_params * dpp_get_curve_jwk_crv(const char *name);
87  const struct dpp_curve_params * dpp_get_curve_ike_group(u16 group);
88  int dpp_bi_pubkey_hash(struct dpp_bootstrap_info *bi,
89  		       const u8 *data, size_t data_len);
90  struct crypto_ec_key * dpp_set_pubkey_point(struct crypto_ec_key *group_key,
91  					    const u8 *buf, size_t len);
92  int dpp_hkdf_expand(size_t hash_len, const u8 *secret, size_t secret_len,
93  		    const char *label, u8 *out, size_t outlen);
94  int dpp_hmac_vector(size_t hash_len, const u8 *key, size_t key_len,
95  		    size_t num_elem, const u8 *addr[], const size_t *len,
96  		    u8 *mac);
97  int dpp_ecdh(struct crypto_ec_key *own, struct crypto_ec_key *peer,
98  	     u8 *secret, size_t *secret_len);
99  void dpp_debug_print_key(const char *title, struct crypto_ec_key *key);
100  int dpp_pbkdf2(size_t hash_len, const u8 *password, size_t password_len,
101  	       const u8 *salt, size_t salt_len, unsigned int iterations,
102  	       u8 *buf, size_t buflen);
103  int dpp_get_subject_public_key(struct dpp_bootstrap_info *bi,
104  			       const u8 *data, size_t data_len);
105  int dpp_bootstrap_key_hash(struct dpp_bootstrap_info *bi);
106  int dpp_keygen(struct dpp_bootstrap_info *bi, const char *curve,
107  	       const u8 *privkey, size_t privkey_len);
108  struct crypto_ec_key * dpp_gen_keypair(const struct dpp_curve_params *curve);
109  int dpp_derive_k1(const u8 *Mx, size_t Mx_len, u8 *k1, unsigned int hash_len);
110  int dpp_derive_k2(const u8 *Nx, size_t Nx_len, u8 *k2, unsigned int hash_len);
111  int dpp_derive_bk_ke(struct dpp_authentication *auth);
112  int dpp_gen_r_auth(struct dpp_authentication *auth, u8 *r_auth);
113  int dpp_gen_i_auth(struct dpp_authentication *auth, u8 *i_auth);
114  int dpp_auth_derive_l_responder(struct dpp_authentication *auth);
115  int dpp_auth_derive_l_initiator(struct dpp_authentication *auth);
116  int dpp_derive_pmk(const u8 *Nx, size_t Nx_len, u8 *pmk, unsigned int hash_len);
117  int dpp_derive_pmkid(const struct dpp_curve_params *curve,
118  		     struct crypto_ec_key *own_key,
119  		     struct crypto_ec_key *peer_key, u8 *pmkid);
120  struct crypto_ec_point *
121  dpp_pkex_derive_Qi(const struct dpp_curve_params *curve, const u8 *mac_init,
122  		   const char *code, size_t code_len, const char *identifier,
123  		   struct crypto_ec **ret_ec);
124  struct crypto_ec_point *
125  dpp_pkex_derive_Qr(const struct dpp_curve_params *curve, const u8 *mac_resp,
126  		   const char *code, size_t code_len, const char *identifier,
127  		   struct crypto_ec **ret_ec);
128  int dpp_pkex_derive_z(const u8 *mac_init, const u8 *mac_resp,
129  		      u8 ver_init, u8 ver_resp,
130  		      const u8 *Mx, size_t Mx_len,
131  		      const u8 *Nx, size_t Nx_len,
132  		      const char *code, size_t code_len,
133  		      const u8 *Kx, size_t Kx_len,
134  		      u8 *z, unsigned int hash_len);
135  int dpp_reconfig_derive_ke_responder(struct dpp_authentication *auth,
136  				     const u8 *net_access_key,
137  				     size_t net_access_key_len,
138  				     struct json_token *peer_net_access_key);
139  int dpp_reconfig_derive_ke_initiator(struct dpp_authentication *auth,
140  				     const u8 *r_proto, u16 r_proto_len,
141  				     struct json_token *net_access_key);
142  struct crypto_ec_point * dpp_decrypt_e_id(struct crypto_ec_key *ppkey,
143  					  struct crypto_ec_key *a_nonce,
144  					  struct crypto_ec_key *e_prime_id);
145  int dpp_derive_auth_i(struct dpp_authentication *auth, u8 *auth_i);
146  char * dpp_sign_connector(struct dpp_configurator *conf,
147  			  const struct wpabuf *dppcon);
148  int dpp_test_gen_invalid_key(struct wpabuf *msg,
149  			     const struct dpp_curve_params *curve);
150  
151  struct dpp_reconfig_id {
152  	struct crypto_ec *ec;
153  	struct crypto_ec_point *e_id; /* E-id */
154  	struct crypto_ec_key *csign;
155  	struct crypto_ec_key *a_nonce; /* A-NONCE */
156  	struct crypto_ec_key *e_prime_id; /* E'-id */
157  	struct crypto_ec_key *pp_key;
158  };
159  
160  /* dpp_tcp.c */
161  
162  void dpp_controller_conn_status_result_wait_timeout(void *eloop_ctx,
163  						    void *timeout_ctx);
164  void dpp_tcp_init_flush(struct dpp_global *dpp);
165  void dpp_relay_flush_controllers(struct dpp_global *dpp);
166  
167  #endif /* CONFIG_DPP */
168  #endif /* DPP_I_H */
169