blob: c00b1ee41240184668478121e783ad5c4921a606 [file] [log] [blame]
lh9ed821d2023-04-07 01:36:19 -07001/*
2 * DPP module internal definitions
3 * Copyright (c) 2017, Qualcomm Atheros, Inc.
4 * Copyright (c) 2018-2020, The Linux Foundation
5 *
6 * This software may be distributed under the terms of the BSD license.
7 * See README for more details.
8 */
9
10#ifndef DPP_I_H
11#define DPP_I_H
12
13#ifdef CONFIG_DPP
14
15struct dpp_global {
16 void *msg_ctx;
17 struct dl_list bootstrap; /* struct dpp_bootstrap_info */
18 struct dl_list configurator; /* struct dpp_configurator */
19#ifdef CONFIG_DPP2
20 struct dl_list controllers; /* struct dpp_relay_controller */
21 struct dpp_controller *controller;
22 struct dl_list tcp_init; /* struct dpp_connection */
23 void *cb_ctx;
24 int (*process_conf_obj)(void *ctx, struct dpp_authentication *auth);
25 void (*remove_bi)(void *ctx, struct dpp_bootstrap_info *bi);
26#endif /* CONFIG_DPP2 */
27};
28
29/* dpp.c */
30
31void dpp_build_attr_status(struct wpabuf *msg, enum dpp_status_error status);
32void dpp_build_attr_r_bootstrap_key_hash(struct wpabuf *msg, const u8 *hash);
33unsigned int dpp_next_id(struct dpp_global *dpp);
34struct wpabuf * dpp_build_conn_status(enum dpp_status_error result,
35 const u8 *ssid, size_t ssid_len,
36 const char *channel_list);
37struct json_token * dpp_parse_own_connector(const char *own_connector);
38int dpp_connector_match_groups(struct json_token *own_root,
39 struct json_token *peer_root, bool reconfig);
40int dpp_build_jwk(struct wpabuf *buf, const char *name,
41 struct crypto_ec_key *key, const char *kid,
42 const struct dpp_curve_params *curve);
43struct crypto_ec_key * dpp_parse_jwk(struct json_token *jwk,
44 const struct dpp_curve_params **key_curve);
45int dpp_prepare_channel_list(struct dpp_authentication *auth,
46 unsigned int neg_freq,
47 struct hostapd_hw_modes *own_modes, u16 num_modes);
48void dpp_auth_fail(struct dpp_authentication *auth, const char *txt);
49int dpp_gen_uri(struct dpp_bootstrap_info *bi);
50void dpp_write_adv_proto(struct wpabuf *buf);
51void dpp_write_gas_query(struct wpabuf *buf, struct wpabuf *query);
52
53/* dpp_backup.c */
54
55void dpp_free_asymmetric_key(struct dpp_asymmetric_key *key);
56struct wpabuf * dpp_build_enveloped_data(struct dpp_authentication *auth);
57int dpp_conf_resp_env_data(struct dpp_authentication *auth,
58 const u8 *env_data, size_t env_data_len);
59
60/* dpp_crypto.c */
61
62struct dpp_signed_connector_info {
63 unsigned char *payload;
64 size_t payload_len;
65};
66
67enum dpp_status_error
68dpp_process_signed_connector(struct dpp_signed_connector_info *info,
69 struct crypto_ec_key *csign_pub,
70 const char *connector);
71enum dpp_status_error
72dpp_check_signed_connector(struct dpp_signed_connector_info *info,
73 const u8 *csign_key, size_t csign_key_len,
74 const u8 *peer_connector, size_t peer_connector_len);
75const struct dpp_curve_params * dpp_get_curve_name(const char *name);
76const struct dpp_curve_params * dpp_get_curve_jwk_crv(const char *name);
77const struct dpp_curve_params * dpp_get_curve_ike_group(u16 group);
78int dpp_bi_pubkey_hash(struct dpp_bootstrap_info *bi,
79 const u8 *data, size_t data_len);
80struct crypto_ec_key * dpp_set_pubkey_point(struct crypto_ec_key *group_key,
81 const u8 *buf, size_t len);
82int dpp_hkdf_expand(size_t hash_len, const u8 *secret, size_t secret_len,
83 const char *label, u8 *out, size_t outlen);
84int dpp_hmac_vector(size_t hash_len, const u8 *key, size_t key_len,
85 size_t num_elem, const u8 *addr[], const size_t *len,
86 u8 *mac);
87int dpp_ecdh(struct crypto_ec_key *own, struct crypto_ec_key *peer,
88 u8 *secret, size_t *secret_len);
89void dpp_debug_print_key(const char *title, struct crypto_ec_key *key);
90int dpp_pbkdf2(size_t hash_len, const u8 *password, size_t password_len,
91 const u8 *salt, size_t salt_len, unsigned int iterations,
92 u8 *buf, size_t buflen);
93int dpp_get_subject_public_key(struct dpp_bootstrap_info *bi,
94 const u8 *data, size_t data_len);
95int dpp_bootstrap_key_hash(struct dpp_bootstrap_info *bi);
96int dpp_keygen(struct dpp_bootstrap_info *bi, const char *curve,
97 const u8 *privkey, size_t privkey_len);
98struct crypto_ec_key * dpp_set_keypair(const struct dpp_curve_params **curve,
99 const u8 *privkey, size_t privkey_len);
100struct crypto_ec_key * dpp_gen_keypair(const struct dpp_curve_params *curve);
101int dpp_derive_k1(const u8 *Mx, size_t Mx_len, u8 *k1, unsigned int hash_len);
102int dpp_derive_k2(const u8 *Nx, size_t Nx_len, u8 *k2, unsigned int hash_len);
103int dpp_derive_bk_ke(struct dpp_authentication *auth);
104int dpp_gen_r_auth(struct dpp_authentication *auth, u8 *r_auth);
105int dpp_gen_i_auth(struct dpp_authentication *auth, u8 *i_auth);
106int dpp_auth_derive_l_responder(struct dpp_authentication *auth);
107int dpp_auth_derive_l_initiator(struct dpp_authentication *auth);
108int dpp_derive_pmk(const u8 *Nx, size_t Nx_len, u8 *pmk, unsigned int hash_len);
109int dpp_derive_pmkid(const struct dpp_curve_params *curve,
110 struct crypto_ec_key *own_key,
111 struct crypto_ec_key *peer_key, u8 *pmkid);
112struct crypto_ec_point *
113dpp_pkex_derive_Qi(const struct dpp_curve_params *curve, const u8 *mac_init,
114 const char *code, const char *identifier,
115 struct crypto_ec **ret_ec);
116struct crypto_ec_point *
117dpp_pkex_derive_Qr(const struct dpp_curve_params *curve, const u8 *mac_resp,
118 const char *code, const char *identifier,
119 struct crypto_ec **ret_ec);
120int dpp_pkex_derive_z(const u8 *mac_init, const u8 *mac_resp,
121 u8 ver_init, u8 ver_resp,
122 const u8 *Mx, size_t Mx_len,
123 const u8 *Nx, size_t Nx_len,
124 const char *code,
125 const u8 *Kx, size_t Kx_len,
126 u8 *z, unsigned int hash_len);
127int dpp_reconfig_derive_ke_responder(struct dpp_authentication *auth,
128 const u8 *net_access_key,
129 size_t net_access_key_len,
130 struct json_token *peer_net_access_key);
131int dpp_reconfig_derive_ke_initiator(struct dpp_authentication *auth,
132 const u8 *r_proto, u16 r_proto_len,
133 struct json_token *net_access_key);
134struct crypto_ec_point * dpp_decrypt_e_id(struct crypto_ec_key *ppkey,
135 struct crypto_ec_key *a_nonce,
136 struct crypto_ec_key *e_prime_id);
137char * dpp_sign_connector(struct dpp_configurator *conf,
138 const struct wpabuf *dppcon);
139int dpp_test_gen_invalid_key(struct wpabuf *msg,
140 const struct dpp_curve_params *curve);
141
142struct dpp_reconfig_id {
143 struct crypto_ec *ec;
144 struct crypto_ec_point *e_id; /* E-id */
145 struct crypto_ec_key *csign;
146 struct crypto_ec_key *a_nonce; /* A-NONCE */
147 struct crypto_ec_key *e_prime_id; /* E'-id */
148 struct crypto_ec_key *pp_key;
149};
150
151/* dpp_tcp.c */
152
153void dpp_controller_conn_status_result_wait_timeout(void *eloop_ctx,
154 void *timeout_ctx);
155void dpp_tcp_init_flush(struct dpp_global *dpp);
156void dpp_relay_flush_controllers(struct dpp_global *dpp);
157
158#endif /* CONFIG_DPP */
159#endif /* DPP_I_H */