tests/hwsim/test_dpp.py

   1 # Test cases for Device Provisioning Protocol (DPP)
   2 # Copyright (c) 2017, Qualcomm Atheros, Inc.
   3 # Copyright (c) 2018, The Linux Foundation
   4 #
   5 # This software may be distributed under the terms of the BSD license.
   6 # See README for more details.
   7
   8 import base64
   9 import binascii
  10 import hashlib
  11 import logging
  12 logger = logging.getLogger()
  13 import struct
  14 import subprocess
  15 import time
  16
  17 import hostapd
  18 import hwsim_utils
  19 from utils import HwsimSkip, alloc_fail, fail_test, wait_fail_trigger
  20 from wpasupplicant import WpaSupplicant
  21
  22 try:
  23     import OpenSSL
  24     openssl_imported = True
  25 except ImportError:
  26     openssl_imported = False
  27
  28 def check_dpp_capab(dev, brainpool=False):
  29     if "UNKNOWN COMMAND" in dev.request("DPP_BOOTSTRAP_GET_URI 0"):
  30         raise HwsimSkip("DPP not supported")
  31     if brainpool:
  32         tls = dev.request("GET tls_library")
  33         if not tls.startswith("OpenSSL") or "run=BoringSSL" in tls:
  34             raise HwsimSkip("Crypto library does not support Brainpool curves: " + tls)
  35
  36 def test_dpp_qr_code_parsing(dev, apdev):
  37     """DPP QR Code parsing"""
  38     check_dpp_capab(dev[0])
  39     id = []
  40
  41     tests = [ "DPP:C:81/1,115/36;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkq/24e0rsrfMP9K1Tm8gx+ovP0I=;;",
  42               "DPP:C:81/1,81/2,81/3,81/4,81/5,81/6,81/7,81/8,81/9,81/10,81/11,81/12,81/13,82/14,83/1,83/2,83/3,83/4,83/5,83/6,83/7,83/8,83/9,84/5,84/6,84/7,84/8,84/9,84/10,84/11,84/12,84/13,115/36;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkq/24e0rsrfMP9K1Tm8gx+ovP0I=;;",
  43               "DPP:I:SN=4774LH2b4044;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
  44               "DPP:I:;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;" ]
  45     for uri in tests:
  46         res = dev[0].request("DPP_QR_CODE " + uri)
  47         if "FAIL" in res:
  48             raise Exception("Failed to parse QR Code")
  49         id.append(int(res))
  50
  51         uri2 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id[-1])
  52         if uri != uri2:
  53             raise Exception("Returned URI does not match")
  54
  55     tests = [ "foo",
  56               "DPP:",
  57               "DPP:;;",
  58               "DPP:C:1/2;M:;K;;",
  59               "DPP:I:;M:01020304050;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
  60               "DPP:K:" + base64.b64encode("hello") + ";;",
  61               "DPP:K:MEkwEwYHKoZIzj0CAQYIKoZIzj0DAQEDMgAEXiJuIWt1Q/CPCkuULechh37UsXPmbUANOeN5U9sOQROE4o/NEFeFEejROHYwwehF;;",
  62               "DPP:K:MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANNZaZA4T/kRDjnmpI1ACOJhAuTIIEk2KFOpS6XPpGF+EVr/ao3XemkE0/nzXmGaLzLqTUCJknSdxTnVPeWfCVsCAwEAAQ==;;",
  63               "DPP:K:MIIBCjCB0wYHKoZIzj0CATCBxwIBATAkBgcqhkjOPQEBAhkA/////////////////////v//////////MEsEGP////////////////////7//////////AQYZCEFGeWcgOcPp+mrciQwSf643uzBRrmxAxUAMEWub8hCL2TtV5Uo04Eg6uEhltUEMQQYjagOsDCQ9ny/IOtDoYgA9P8K/YL/EBIHGSuV/8jaeGMQEe1rJM3Vc/l3oR55SBECGQD///////////////+Z3vg2FGvJsbTSKDECAQEDMgAEXiJuIWt1Q/CPCkuULechh37UsXPmbUANOeN5U9sOQROE4o/NEFeFEejROHYwwehF;;",
  64               "DPP:I:foo\tbar;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
  65               "DPP:C:1;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkqa24e0rsrfMP9K1Tm8gx+ovP0I=;;",
  66               "DPP:C:81/1a;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkqa24e0rsrfMP9K1Tm8gx+ovP0I=;;",
  67               "DPP:C:1/2000,81/-1;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkqa24e0rsrfMP9K1Tm8gx+ovP0I=;;",
  68               "DPP:C:-1/1;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkqa24e0rsrfMP9K1Tm8gx+ovP0I=;;" ]
  69     for t in tests:
  70         res = dev[0].request("DPP_QR_CODE " + t)
  71         if "FAIL" not in res:
  72             raise Exception("Accepted invalid QR Code: " + t)
  73
  74     logger.info("ID: " + str(id))
  75     if id[0] == id[1] or id[0] == id[2] or id[1] == id[2]:
  76         raise Exception("Duplicate ID returned")
  77
  78     if "FAIL" not in dev[0].request("DPP_BOOTSTRAP_REMOVE 12345678"):
  79         raise Exception("DPP_BOOTSTRAP_REMOVE accepted unexpectedly")
  80     if "OK" not in dev[0].request("DPP_BOOTSTRAP_REMOVE %d" % id[1]):
  81         raise Exception("DPP_BOOTSTRAP_REMOVE failed")
  82
  83     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode")
  84     if "FAIL" in res:
  85         raise Exception("Failed to generate bootstrapping info")
  86     uri = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % int(res))
  87     logger.info("Generated URI: " + uri)
  88
  89     res = dev[0].request("DPP_QR_CODE " + uri)
  90     if "FAIL" in res:
  91         raise Exception("Failed to parse self-generated QR Code URI")
  92
  93     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1,115/36 mac=010203040506 info=foo")
  94     if "FAIL" in res:
  95         raise Exception("Failed to generate bootstrapping info")
  96     uri = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % int(res))
  97     logger.info("Generated URI: " + uri)
  98
  99     res = dev[0].request("DPP_QR_CODE " + uri)
 100     if "FAIL" in res:
 101         raise Exception("Failed to parse self-generated QR Code URI")
 102
 103 def test_dpp_qr_code_parsing_fail(dev, apdev):
 104     """DPP QR Code parsing local failure"""
 105     check_dpp_capab(dev[0])
 106     with alloc_fail(dev[0], 1, "dpp_parse_uri_info"):
 107         if "FAIL" not in dev[0].request("DPP_QR_CODE DPP:I:SN=4774LH2b4044;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;"):
 108             raise Exception("DPP_QR_CODE failure not reported")
 109
 110     with alloc_fail(dev[0], 1, "dpp_parse_uri_pk"):
 111         if "FAIL" not in dev[0].request("DPP_QR_CODE DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;"):
 112             raise Exception("DPP_QR_CODE failure not reported")
 113
 114     with fail_test(dev[0], 1, "dpp_parse_uri_pk"):
 115         if "FAIL" not in dev[0].request("DPP_QR_CODE DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;"):
 116             raise Exception("DPP_QR_CODE failure not reported")
 117
 118     with alloc_fail(dev[0], 1, "dpp_parse_uri"):
 119         if "FAIL" not in dev[0].request("DPP_QR_CODE DPP:I:SN=4774LH2b4044;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;"):
 120             raise Exception("DPP_QR_CODE failure not reported")
 121
 122 dpp_key_p256 ="30570201010420777fc55dc51e967c10ec051b91d860b5f1e6c934e48d5daffef98d032c64b170a00a06082a8648ce3d030107a124032200020c804188c7f85beb6e91070d2b3e5e39b90ca77b4d3c5251bc1844d6ca29dcad"
 123 dpp_key_p384 = "307402010104302f56fdd83b5345cacb630eb7c22fa5ad5daba37307c95191e2a75756d137003bd8b32dbcb00eb5650c1eb499ecfcaec0a00706052b81040022a13403320003615ec2141b5b77aebb6523f8a012755f9a34405a8398d2ceeeebca7f5ce868bf55056cba4c4ec62fad3ed26dd29e0f23"
 124 dpp_key_p521 = "308198020101044200c8010d5357204c252551aaf4e210343111e503fd1dc615b257058997c49b6b643c975226e93be8181cca3d83a7072defd161dfbdf433c19abe1f2ad51867a05761a00706052b81040023a1460344000301cdf3608b1305fe34a1f976095dcf001182b9973354efe156291a66830292f9babd8f412ad462958663e7a75d1d0610abdfc3dd95d40669f7ab3bc001668cfb3b7c"
 125 dpp_key_bp256 = "3058020101042057133a676fb60bf2a3e6797e19833c7b0f89dc192ab99ab5fa377ae23a157765a00b06092b2403030208010107a12403220002945d9bf7ce30c9c1ac0ff21ca62b984d5bb80ff69d2be8c9716ab39a10d2caf0"
 126 dpp_key_bp384 = "307802010104304902df9f3033a9b7128554c0851dc7127c3573eed150671dae74c0013e9896a9b1c22b6f7d43d8a2ebb7cd474dc55039a00b06092b240303020801010ba13403320003623cb5e68787f351faababf3425161571560add2e6f9a306fcbffb507735bf955bb46dd20ba246b0d5cadce73e5bd6a6"
 127 dpp_key_bp512 = "30819802010104405803494226eb7e50bf0e90633f37e7e35d33f5fa502165eeba721d927f9f846caf12e925701d18e123abaaaf4a7edb4fc4de21ce18bc10c4d12e8b3439f74e40a00b06092b240303020801010da144034200033b086ccd47486522d35dc16fbb2229642c2e9e87897d45abbf21f9fb52acb5a6272b31d1b227c3e53720769cc16b4cb181b26cd0d35fe463218aaedf3b6ec00a"
 128
 129 def test_dpp_qr_code_curves(dev, apdev):
 130     """DPP QR Code and supported curves"""
 131     check_dpp_capab(dev[0])
 132     tests = [ ("prime256v1", dpp_key_p256),
 133               ("secp384r1", dpp_key_p384),
 134               ("secp521r1", dpp_key_p521) ]
 135     for curve, hex in tests:
 136         id = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode key=" + hex)
 137         if "FAIL" in id:
 138             raise Exception("Failed to set key for " + curve)
 139         info = dev[0].request("DPP_BOOTSTRAP_INFO " + id)
 140         if "FAIL" in info:
 141             raise Exception("Failed to get info for " + curve)
 142         if "curve=" + curve not in info:
 143             raise Exception("Curve mismatch for " + curve)
 144
 145 def test_dpp_qr_code_curves_brainpool(dev, apdev):
 146     """DPP QR Code and supported Brainpool curves"""
 147     check_dpp_capab(dev[0], brainpool=True)
 148     tests = [ ("brainpoolP256r1", dpp_key_bp256),
 149               ("brainpoolP384r1", dpp_key_bp384),
 150               ("brainpoolP512r1", dpp_key_bp512) ]
 151     for curve, hex in tests:
 152         id = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode key=" + hex)
 153         if "FAIL" in id:
 154             raise Exception("Failed to set key for " + curve)
 155         info = dev[0].request("DPP_BOOTSTRAP_INFO " + id)
 156         if "FAIL" in info:
 157             raise Exception("Failed to get info for " + curve)
 158         if "curve=" + curve not in info:
 159             raise Exception("Curve mismatch for " + curve)
 160
 161 def test_dpp_qr_code_unsupported_curve(dev, apdev):
 162     """DPP QR Code and unsupported curve"""
 163     check_dpp_capab(dev[0])
 164
 165     id = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode curve=unsupported")
 166     if "FAIL" not in id:
 167         raise Exception("Unsupported curve accepted")
 168
 169     tests = [ "30",
 170               "305f02010104187f723ed9e1b41979ec5cd02eb82696efc76b40e277661049a00a06082a8648ce3d030101a134033200043f292614dea97c43f500f069e79ae9fb48f8b07369180de5eec8fa2bc9eea5af7a46dc335f52f10cb1c0e9464201d41b" ]
 171     for hex in tests:
 172         id = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode key=" + hex)
 173         if "FAIL" not in id:
 174             raise Exception("Unsupported/invalid curve accepted")
 175
 176 def test_dpp_qr_code_keygen_fail(dev, apdev):
 177     """DPP QR Code and keygen failure"""
 178     check_dpp_capab(dev[0])
 179
 180     with alloc_fail(dev[0], 1, "dpp_bootstrap_key_der;dpp_keygen"):
 181         if "FAIL" not in dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode"):
 182             raise Exception("Failure not reported")
 183
 184     with alloc_fail(dev[0], 1, "base64_gen_encode;dpp_keygen"):
 185         if "FAIL" not in dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode"):
 186             raise Exception("Failure not reported")
 187
 188 def test_dpp_qr_code_curve_select(dev, apdev):
 189     """DPP QR Code and curve selection"""
 190     check_dpp_capab(dev[0], brainpool=True)
 191     check_dpp_capab(dev[1], brainpool=True)
 192
 193     addr = dev[0].own_addr().replace(':', '')
 194     bi = []
 195     for key in [ dpp_key_p256, dpp_key_p384, dpp_key_p521,
 196                  dpp_key_bp256, dpp_key_bp384, dpp_key_bp512 ]:
 197         id = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr + " key=" + key)
 198         if "FAIL" in id:
 199             raise Exception("Failed to set key for " + curve)
 200         info = dev[0].request("DPP_BOOTSTRAP_INFO " + id)
 201         for i in info.splitlines():
 202             if '=' in i:
 203                 name, val = i.split('=')
 204                 if name == "curve":
 205                     curve = val
 206                     break
 207         uri = dev[0].request("DPP_BOOTSTRAP_GET_URI " + id)
 208         bi.append((curve, uri))
 209
 210     for curve, uri in bi:
 211         logger.info("Curve: " + curve)
 212         logger.info("URI: " + uri)
 213
 214         if "OK" not in dev[0].request("DPP_LISTEN 2412"):
 215             raise Exception("Failed to start listen operation")
 216
 217         res = dev[1].request("DPP_QR_CODE " + uri)
 218         if "FAIL" in res:
 219             raise Exception("Failed to parse QR Code URI")
 220         if "OK" not in dev[1].request("DPP_AUTH_INIT peer=" + res):
 221             raise Exception("Failed to initiate DPP Authentication")
 222         ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 223         if ev is None:
 224             raise Exception("DPP authentication did not succeed (Responder)")
 225         ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 226         if ev is None:
 227             raise Exception("DPP authentication did not succeed (Initiator)")
 228         ev = dev[0].wait_event(["DPP-CONF-FAILED"], timeout=2)
 229         if ev is None:
 230             raise Exception("DPP configuration result not seen (Enrollee)")
 231         ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=2)
 232         if ev is None:
 233             raise Exception("DPP configuration result not seen (Responder)")
 234         dev[0].request("DPP_STOP_LISTEN")
 235         dev[1].request("DPP_STOP_LISTEN")
 236         dev[0].dump_monitor()
 237         dev[1].dump_monitor()
 238
 239 def test_dpp_qr_code_auth_broadcast(dev, apdev):
 240     """DPP QR Code and authentication exchange (broadcast)"""
 241     check_dpp_capab(dev[0])
 242     check_dpp_capab(dev[1])
 243     logger.info("dev0 displays QR Code")
 244     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1")
 245     if "FAIL" in res:
 246         raise Exception("Failed to generate bootstrapping info")
 247     id0 = int(res)
 248     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 249
 250     logger.info("dev1 scans QR Code")
 251     res = dev[1].request("DPP_QR_CODE " + uri0)
 252     if "FAIL" in res:
 253         raise Exception("Failed to parse QR Code URI")
 254     id1 = int(res)
 255
 256     logger.info("dev1 initiates DPP Authentication")
 257     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
 258         raise Exception("Failed to start listen operation")
 259     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d" % id1):
 260         raise Exception("Failed to initiate DPP Authentication")
 261     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 262     if ev is None:
 263         raise Exception("DPP authentication did not succeed (Responder)")
 264     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 265     if ev is None:
 266         raise Exception("DPP authentication did not succeed (Initiator)")
 267     dev[0].request("DPP_STOP_LISTEN")
 268
 269 def test_dpp_qr_code_auth_unicast(dev, apdev):
 270     """DPP QR Code and authentication exchange (unicast)"""
 271     run_dpp_qr_code_auth_unicast(dev, apdev, None)
 272
 273 def test_dpp_qr_code_auth_unicast_ap_enrollee(dev, apdev):
 274     """DPP QR Code and authentication exchange (AP enrollee)"""
 275     run_dpp_qr_code_auth_unicast(dev, apdev, None, netrole="ap")
 276
 277 def test_dpp_qr_code_curve_prime256v1(dev, apdev):
 278     """DPP QR Code and curve prime256v1"""
 279     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1")
 280
 281 def test_dpp_qr_code_curve_secp384r1(dev, apdev):
 282     """DPP QR Code and curve secp384r1"""
 283     run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1")
 284
 285 def test_dpp_qr_code_curve_secp521r1(dev, apdev):
 286     """DPP QR Code and curve secp521r1"""
 287     run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1")
 288
 289 def test_dpp_qr_code_curve_brainpoolP256r1(dev, apdev):
 290     """DPP QR Code and curve brainpoolP256r1"""
 291     run_dpp_qr_code_auth_unicast(dev, apdev, "brainpoolP256r1")
 292
 293 def test_dpp_qr_code_curve_brainpoolP384r1(dev, apdev):
 294     """DPP QR Code and curve brainpoolP384r1"""
 295     run_dpp_qr_code_auth_unicast(dev, apdev, "brainpoolP384r1")
 296
 297 def test_dpp_qr_code_curve_brainpoolP512r1(dev, apdev):
 298     """DPP QR Code and curve brainpoolP512r1"""
 299     run_dpp_qr_code_auth_unicast(dev, apdev, "brainpoolP512r1")
 300
 301 def test_dpp_qr_code_set_key(dev, apdev):
 302     """DPP QR Code and fixed bootstrapping key"""
 303     run_dpp_qr_code_auth_unicast(dev, apdev, None, key="30770201010420e5143ac74682cc6869a830e8f5301a5fa569130ac329b1d7dd6f2a7495dbcbe1a00a06082a8648ce3d030107a144034200045e13e167c33dbc7d85541e5509600aa8139bbb3e39e25898992c5d01be92039ee2850f17e71506ded0d6b25677441eae249f8e225c68dd15a6354dca54006383")
 304
 305 def run_dpp_qr_code_auth_unicast(dev, apdev, curve, netrole=None, key=None,
 306                                  require_conf_success=False, init_extra=None,
 307                                  require_conf_failure=False,
 308                                  configurator=False, conf_curve=None):
 309     check_dpp_capab(dev[0], curve and "brainpool" in curve)
 310     check_dpp_capab(dev[1], curve and "brainpool" in curve)
 311     if configurator:
 312         logger.info("Create configurator on dev1")
 313         cmd = "DPP_CONFIGURATOR_ADD"
 314         if conf_curve:
 315             cmd += " curve=" + conf_curve
 316         res = dev[1].request(cmd);
 317         if "FAIL" in res:
 318             raise Exception("Failed to add configurator")
 319         conf_id = int(res)
 320
 321     logger.info("dev0 displays QR Code")
 322     addr = dev[0].own_addr().replace(':', '')
 323     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
 324     if curve:
 325         cmd += " curve=" + curve
 326     if key:
 327         cmd += " key=" + key
 328     res = dev[0].request(cmd)
 329     if "FAIL" in res:
 330         raise Exception("Failed to generate bootstrapping info")
 331     id0 = int(res)
 332     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 333
 334     logger.info("dev1 scans QR Code")
 335     res = dev[1].request("DPP_QR_CODE " + uri0)
 336     if "FAIL" in res:
 337         raise Exception("Failed to parse QR Code URI")
 338     id1 = int(res)
 339
 340     logger.info("dev1 initiates DPP Authentication")
 341     cmd = "DPP_LISTEN 2412"
 342     if netrole:
 343         cmd += " netrole=" + netrole
 344     if "OK" not in dev[0].request(cmd):
 345         raise Exception("Failed to start listen operation")
 346     cmd = "DPP_AUTH_INIT peer=%d" % id1
 347     if init_extra:
 348         cmd += " " + init_extra
 349     if configurator:
 350         cmd += " configurator=%d" % conf_id
 351     if "OK" not in dev[1].request(cmd):
 352         raise Exception("Failed to initiate DPP Authentication")
 353     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 354     if ev is None:
 355         raise Exception("DPP authentication did not succeed (Responder)")
 356     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 357     if ev is None:
 358         raise Exception("DPP authentication did not succeed (Initiator)")
 359     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5)
 360     if ev is None:
 361         raise Exception("DPP configuration not completed (Configurator)")
 362     ev = dev[0].wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5)
 363     if ev is None:
 364         raise Exception("DPP configuration not completed (Enrollee)")
 365     if require_conf_success:
 366         if "DPP-CONF-FAILED" in ev:
 367             raise Exception("DPP configuration failed")
 368     if require_conf_failure:
 369         if "DPP-CONF-SUCCESS" in ev:
 370             raise Exception("DPP configuration succeeded unexpectedly")
 371     dev[0].request("DPP_STOP_LISTEN")
 372     dev[0].dump_monitor()
 373     dev[1].dump_monitor()
 374
 375 def test_dpp_qr_code_auth_mutual(dev, apdev):
 376     """DPP QR Code and authentication exchange (mutual)"""
 377     check_dpp_capab(dev[0])
 378     check_dpp_capab(dev[1])
 379     logger.info("dev0 displays QR Code")
 380     addr = dev[0].own_addr().replace(':', '')
 381     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 382     if "FAIL" in res:
 383         raise Exception("Failed to generate bootstrapping info")
 384     id0 = int(res)
 385     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 386
 387     logger.info("dev1 scans QR Code")
 388     res = dev[1].request("DPP_QR_CODE " + uri0)
 389     if "FAIL" in res:
 390         raise Exception("Failed to parse QR Code URI")
 391     id1 = int(res)
 392
 393     logger.info("dev1 displays QR Code")
 394     addr = dev[1].own_addr().replace(':', '')
 395     res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 396     if "FAIL" in res:
 397         raise Exception("Failed to generate bootstrapping info")
 398     id1b = int(res)
 399     uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b)
 400
 401     logger.info("dev0 scans QR Code")
 402     res = dev[0].request("DPP_QR_CODE " + uri1b)
 403     if "FAIL" in res:
 404         raise Exception("Failed to parse QR Code URI")
 405     id0b = int(res)
 406
 407     logger.info("dev1 initiates DPP Authentication")
 408     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
 409         raise Exception("Failed to start listen operation")
 410     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)):
 411         raise Exception("Failed to initiate DPP Authentication")
 412
 413     ev = dev[1].wait_event(["DPP-AUTH-DIRECTION"], timeout=5)
 414     if ev is None:
 415         raise Exception("DPP authentication direction not indicated (Initiator)")
 416     if "mutual=1" not in ev:
 417         raise Exception("Mutual authentication not used")
 418
 419     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 420     if ev is None:
 421         raise Exception("DPP authentication did not succeed (Responder)")
 422     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 423     if ev is None:
 424         raise Exception("DPP authentication did not succeed (Initiator)")
 425     dev[0].request("DPP_STOP_LISTEN")
 426
 427 def test_dpp_qr_code_auth_mutual2(dev, apdev):
 428     """DPP QR Code and authentication exchange (mutual2)"""
 429     check_dpp_capab(dev[0])
 430     check_dpp_capab(dev[1])
 431     logger.info("dev0 displays QR Code")
 432     addr = dev[0].own_addr().replace(':', '')
 433     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 434     if "FAIL" in res:
 435         raise Exception("Failed to generate bootstrapping info")
 436     id0 = int(res)
 437     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 438
 439     logger.info("dev1 scans QR Code")
 440     res = dev[1].request("DPP_QR_CODE " + uri0)
 441     if "FAIL" in res:
 442         raise Exception("Failed to parse QR Code URI")
 443     id1 = int(res)
 444
 445     logger.info("dev1 displays QR Code")
 446     addr = dev[1].own_addr().replace(':', '')
 447     res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 448     if "FAIL" in res:
 449         raise Exception("Failed to generate bootstrapping info")
 450     id1b = int(res)
 451     uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b)
 452
 453     logger.info("dev1 initiates DPP Authentication")
 454     if "OK" not in dev[0].request("DPP_LISTEN 2412 qr=mutual"):
 455         raise Exception("Failed to start listen operation")
 456     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)):
 457         raise Exception("Failed to initiate DPP Authentication")
 458
 459     ev = dev[1].wait_event(["DPP-RESPONSE-PENDING"], timeout=5)
 460     if ev is None:
 461         raise Exception("Pending response not reported")
 462     ev = dev[0].wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=5)
 463     if ev is None:
 464         raise Exception("QR Code scan for mutual authentication not requested")
 465
 466     logger.info("dev0 scans QR Code")
 467     res = dev[0].request("DPP_QR_CODE " + uri1b)
 468     if "FAIL" in res:
 469         raise Exception("Failed to parse QR Code URI")
 470     id0b = int(res)
 471
 472     ev = dev[1].wait_event(["DPP-AUTH-DIRECTION"], timeout=5)
 473     if ev is None:
 474         raise Exception("DPP authentication direction not indicated (Initiator)")
 475     if "mutual=1" not in ev:
 476         raise Exception("Mutual authentication not used")
 477
 478     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 479     if ev is None:
 480         raise Exception("DPP authentication did not succeed (Responder)")
 481     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 482     if ev is None:
 483         raise Exception("DPP authentication did not succeed (Initiator)")
 484     dev[0].request("DPP_STOP_LISTEN")
 485
 486 def test_dpp_qr_code_auth_mutual_p_256(dev, apdev):
 487     """DPP QR Code and authentication exchange (mutual, autogen P-256)"""
 488     run_dpp_qr_code_auth_mutual(dev, apdev, "P-256")
 489
 490 def test_dpp_qr_code_auth_mutual_p_384(dev, apdev):
 491     """DPP QR Code and authentication exchange (mutual, autogen P-384)"""
 492     run_dpp_qr_code_auth_mutual(dev, apdev, "P-384")
 493
 494 def test_dpp_qr_code_auth_mutual_p_521(dev, apdev):
 495     """DPP QR Code and authentication exchange (mutual, autogen P-521)"""
 496     run_dpp_qr_code_auth_mutual(dev, apdev, "P-521")
 497
 498 def test_dpp_qr_code_auth_mutual_bp_256(dev, apdev):
 499     """DPP QR Code and authentication exchange (mutual, autogen BP-256)"""
 500     run_dpp_qr_code_auth_mutual(dev, apdev, "BP-256")
 501
 502 def test_dpp_qr_code_auth_mutual_bp_384(dev, apdev):
 503     """DPP QR Code and authentication exchange (mutual, autogen BP-384)"""
 504     run_dpp_qr_code_auth_mutual(dev, apdev, "BP-384")
 505
 506 def test_dpp_qr_code_auth_mutual_bp_512(dev, apdev):
 507     """DPP QR Code and authentication exchange (mutual, autogen BP-512)"""
 508     run_dpp_qr_code_auth_mutual(dev, apdev, "BP-512")
 509
 510 def run_dpp_qr_code_auth_mutual(dev, apdev, curve):
 511     check_dpp_capab(dev[0], curve and "BP-" in curve)
 512     check_dpp_capab(dev[1], curve and "BP-" in curve)
 513     logger.info("dev0 displays QR Code")
 514     addr = dev[0].own_addr().replace(':', '')
 515     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
 516     cmd += " curve=" + curve
 517     res = dev[0].request(cmd)
 518     if "FAIL" in res:
 519         raise Exception("Failed to generate bootstrapping info")
 520     id0 = int(res)
 521     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 522
 523     logger.info("dev1 scans QR Code")
 524     res = dev[1].request("DPP_QR_CODE " + uri0)
 525     if "FAIL" in res:
 526         raise Exception("Failed to parse QR Code URI")
 527     id1 = int(res)
 528
 529     logger.info("dev1 initiates DPP Authentication")
 530     if "OK" not in dev[0].request("DPP_LISTEN 2412 qr=mutual"):
 531         raise Exception("Failed to start listen operation")
 532     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d" % (id1)):
 533         raise Exception("Failed to initiate DPP Authentication")
 534
 535     ev = dev[1].wait_event(["DPP-RESPONSE-PENDING"], timeout=5)
 536     if ev is None:
 537         raise Exception("Pending response not reported")
 538     uri = ev.split(' ')[1]
 539
 540     ev = dev[0].wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=5)
 541     if ev is None:
 542         raise Exception("QR Code scan for mutual authentication not requested")
 543
 544     logger.info("dev0 scans QR Code")
 545     res = dev[0].request("DPP_QR_CODE " + uri)
 546     if "FAIL" in res:
 547         raise Exception("Failed to parse QR Code URI")
 548
 549     ev = dev[1].wait_event(["DPP-AUTH-DIRECTION"], timeout=5)
 550     if ev is None:
 551         raise Exception("DPP authentication direction not indicated (Initiator)")
 552     if "mutual=1" not in ev:
 553         raise Exception("Mutual authentication not used")
 554
 555     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 556     if ev is None:
 557         raise Exception("DPP authentication did not succeed (Responder)")
 558     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 559     if ev is None:
 560         raise Exception("DPP authentication did not succeed (Initiator)")
 561     dev[0].request("DPP_STOP_LISTEN")
 562
 563 def test_dpp_auth_resp_retries(dev, apdev):
 564     """DPP Authentication Response retries"""
 565     check_dpp_capab(dev[0])
 566     check_dpp_capab(dev[1])
 567     dev[0].set("dpp_resp_max_tries", "3")
 568     dev[0].set("dpp_resp_retry_time", "100")
 569
 570     logger.info("dev0 displays QR Code")
 571     addr = dev[0].own_addr().replace(':', '')
 572     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 573     if "FAIL" in res:
 574         raise Exception("Failed to generate bootstrapping info")
 575     id0 = int(res)
 576     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 577
 578     logger.info("dev1 scans QR Code")
 579     res = dev[1].request("DPP_QR_CODE " + uri0)
 580     if "FAIL" in res:
 581         raise Exception("Failed to parse QR Code URI")
 582     id1 = int(res)
 583
 584     logger.info("dev1 displays QR Code")
 585     addr = dev[1].own_addr().replace(':', '')
 586     res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 587     if "FAIL" in res:
 588         raise Exception("Failed to generate bootstrapping info")
 589     id1b = int(res)
 590     uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b)
 591
 592     logger.info("dev1 initiates DPP Authentication")
 593     if "OK" not in dev[0].request("DPP_LISTEN 2412 qr=mutual"):
 594         raise Exception("Failed to start listen operation")
 595     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)):
 596         raise Exception("Failed to initiate DPP Authentication")
 597
 598     ev = dev[1].wait_event(["DPP-RESPONSE-PENDING"], timeout=5)
 599     if ev is None:
 600         raise Exception("Pending response not reported")
 601     ev = dev[0].wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=5)
 602     if ev is None:
 603         raise Exception("QR Code scan for mutual authentication not requested")
 604
 605     # Stop Initiator from listening to frames to force retransmission of the
 606     # DPP Authentication Response frame with Status=0
 607     dev[1].request("DPP_STOP_LISTEN")
 608
 609     dev[1].dump_monitor()
 610     dev[0].dump_monitor()
 611
 612     logger.info("dev0 scans QR Code")
 613     res = dev[0].request("DPP_QR_CODE " + uri1b)
 614     if "FAIL" in res:
 615         raise Exception("Failed to parse QR Code URI")
 616     id0b = int(res)
 617
 618     ev = dev[0].wait_event(["DPP-TX"], timeout=5)
 619     if ev is None or "type=1" not in ev:
 620         raise Exception("DPP Authentication Response not sent")
 621     ev = dev[0].wait_event(["DPP-TX-STATUS"], timeout=5)
 622     if ev is None:
 623         raise Exception("TX status for DPP Authentication Response not reported")
 624     if "result=no-ACK" not in ev:
 625         raise Exception("Unexpected TX status for Authentication Response: " + ev)
 626
 627     ev = dev[0].wait_event(["DPP-TX"], timeout=15)
 628     if ev is None or "type=1" not in ev:
 629         raise Exception("DPP Authentication Response retransmission not sent")
 630
 631 def test_dpp_qr_code_auth_mutual_not_used(dev, apdev):
 632     """DPP QR Code and authentication exchange (mutual not used)"""
 633     check_dpp_capab(dev[0])
 634     check_dpp_capab(dev[1])
 635     logger.info("dev0 displays QR Code")
 636     addr = dev[0].own_addr().replace(':', '')
 637     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 638     if "FAIL" in res:
 639         raise Exception("Failed to generate bootstrapping info")
 640     id0 = int(res)
 641     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 642
 643     logger.info("dev1 scans QR Code")
 644     res = dev[1].request("DPP_QR_CODE " + uri0)
 645     if "FAIL" in res:
 646         raise Exception("Failed to parse QR Code URI")
 647     id1 = int(res)
 648
 649     logger.info("dev1 displays QR Code")
 650     addr = dev[1].own_addr().replace(':', '')
 651     res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 652     if "FAIL" in res:
 653         raise Exception("Failed to generate bootstrapping info")
 654     id1b = int(res)
 655     uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b)
 656
 657     logger.info("dev0 does not scan QR Code")
 658
 659     logger.info("dev1 initiates DPP Authentication")
 660     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
 661         raise Exception("Failed to start listen operation")
 662     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)):
 663         raise Exception("Failed to initiate DPP Authentication")
 664
 665     ev = dev[1].wait_event(["DPP-AUTH-DIRECTION"], timeout=5)
 666     if ev is None:
 667         raise Exception("DPP authentication direction not indicated (Initiator)")
 668     if "mutual=0" not in ev:
 669         raise Exception("Mutual authentication not used")
 670
 671     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 672     if ev is None:
 673         raise Exception("DPP authentication did not succeed (Responder)")
 674     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 675     if ev is None:
 676         raise Exception("DPP authentication did not succeed (Initiator)")
 677     dev[0].request("DPP_STOP_LISTEN")
 678
 679 def test_dpp_qr_code_auth_mutual_curve_mismatch(dev, apdev):
 680     """DPP QR Code and authentication exchange (mutual/mismatch)"""
 681     check_dpp_capab(dev[0])
 682     check_dpp_capab(dev[1])
 683     logger.info("dev0 displays QR Code")
 684     addr = dev[0].own_addr().replace(':', '')
 685     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 686     if "FAIL" in res:
 687         raise Exception("Failed to generate bootstrapping info")
 688     id0 = int(res)
 689     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 690
 691     logger.info("dev1 scans QR Code")
 692     res = dev[1].request("DPP_QR_CODE " + uri0)
 693     if "FAIL" in res:
 694         raise Exception("Failed to parse QR Code URI")
 695     id1 = int(res)
 696
 697     logger.info("dev1 displays QR Code")
 698     addr = dev[1].own_addr().replace(':', '')
 699     res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr + " curve=secp384r1")
 700     if "FAIL" in res:
 701         raise Exception("Failed to generate bootstrapping info")
 702     id1b = int(res)
 703     uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b)
 704
 705     logger.info("dev0 scans QR Code")
 706     res = dev[0].request("DPP_QR_CODE " + uri1b)
 707     if "FAIL" in res:
 708         raise Exception("Failed to parse QR Code URI")
 709     id0b = int(res)
 710
 711     res = dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b))
 712     if "FAIL" not in res:
 713         raise Exception("DPP_AUTH_INIT accepted unexpectedly")
 714
 715 def test_dpp_qr_code_auth_hostapd_mutual2(dev, apdev):
 716     """DPP QR Code and authentication exchange (hostapd mutual2)"""
 717     check_dpp_capab(dev[0])
 718     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
 719     check_dpp_capab(hapd)
 720
 721     logger.info("AP displays QR Code")
 722     addr = hapd.own_addr().replace(':', '')
 723     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
 724     res = hapd.request(cmd)
 725     if "FAIL" in res:
 726         raise Exception("Failed to generate bootstrapping info")
 727     id_h = int(res)
 728     uri_h = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id_h)
 729
 730     logger.info("dev0 scans QR Code")
 731     res = dev[0].request("DPP_QR_CODE " + uri_h)
 732     if "FAIL" in res:
 733         raise Exception("Failed to parse QR Code URI")
 734     id0 = int(res)
 735
 736     logger.info("dev0 displays QR Code")
 737     addr = dev[0].own_addr().replace(':', '')
 738     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 739     if "FAIL" in res:
 740         raise Exception("Failed to generate bootstrapping info")
 741     id0b = int(res)
 742     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0b)
 743
 744     logger.info("dev0 initiates DPP Authentication")
 745     if "OK" not in hapd.request("DPP_LISTEN 2412 qr=mutual"):
 746         raise Exception("Failed to start listen operation")
 747     if "OK" not in dev[0].request("DPP_AUTH_INIT peer=%d own=%d" % (id0, id0b)):
 748         raise Exception("Failed to initiate DPP Authentication")
 749
 750     ev = dev[0].wait_event(["DPP-RESPONSE-PENDING"], timeout=5)
 751     if ev is None:
 752         raise Exception("Pending response not reported")
 753     ev = hapd.wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=5)
 754     if ev is None:
 755         raise Exception("QR Code scan for mutual authentication not requested")
 756
 757     logger.info("AP scans QR Code")
 758     res = hapd.request("DPP_QR_CODE " + uri0)
 759     if "FAIL" in res:
 760         raise Exception("Failed to parse QR Code URI")
 761
 762     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 763     if ev is None:
 764         raise Exception("DPP authentication did not succeed (Responder)")
 765     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 766     if ev is None:
 767         raise Exception("DPP authentication did not succeed (Initiator)")
 768     hapd.request("DPP_STOP_LISTEN")
 769
 770 def test_dpp_qr_code_listen_continue(dev, apdev):
 771     """DPP QR Code and listen operation needing continuation"""
 772     check_dpp_capab(dev[0])
 773     check_dpp_capab(dev[1])
 774     logger.info("dev0 displays QR Code")
 775     addr = dev[0].own_addr().replace(':', '')
 776     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 777     if "FAIL" in res:
 778         raise Exception("Failed to generate bootstrapping info")
 779     id0 = int(res)
 780     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 781
 782     logger.info("dev1 scans QR Code")
 783     res = dev[1].request("DPP_QR_CODE " + uri0)
 784     if "FAIL" in res:
 785         raise Exception("Failed to parse QR Code URI")
 786     id1 = int(res)
 787
 788     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
 789         raise Exception("Failed to start listen operation")
 790     logger.info("Wait for listen to expire and get restarted")
 791     time.sleep(5.5)
 792     logger.info("dev1 initiates DPP Authentication")
 793     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d" % id1):
 794         raise Exception("Failed to initiate DPP Authentication")
 795     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 796     if ev is None:
 797         raise Exception("DPP authentication did not succeed (Responder)")
 798     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 799     if ev is None:
 800         raise Exception("DPP authentication did not succeed (Initiator)")
 801     dev[0].request("DPP_STOP_LISTEN")
 802
 803 def test_dpp_qr_code_auth_initiator_enrollee(dev, apdev):
 804     """DPP QR Code and authentication exchange (Initiator in Enrollee role)"""
 805     check_dpp_capab(dev[0])
 806     check_dpp_capab(dev[1])
 807     dev[0].request("SET gas_address3 1")
 808     dev[1].request("SET gas_address3 1")
 809     logger.info("dev0 displays QR Code")
 810     addr = dev[0].own_addr().replace(':', '')
 811     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 812     if "FAIL" in res:
 813         raise Exception("Failed to generate bootstrapping info")
 814     id0 = int(res)
 815     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 816
 817     logger.info("dev1 scans QR Code")
 818     res = dev[1].request("DPP_QR_CODE " + uri0)
 819     if "FAIL" in res:
 820         raise Exception("Failed to parse QR Code URI")
 821     id1 = int(res)
 822
 823     logger.info("dev1 initiates DPP Authentication")
 824     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
 825         raise Exception("Failed to start listen operation")
 826     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=enrollee" % id1):
 827         raise Exception("Failed to initiate DPP Authentication")
 828     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 829     if ev is None:
 830         raise Exception("DPP authentication did not succeed (Responder)")
 831     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 832     if ev is None:
 833         raise Exception("DPP authentication did not succeed (Initiator)")
 834
 835     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
 836     if ev is None:
 837         raise Exception("DPP configuration did not succeed (Configurator)")
 838     ev = dev[1].wait_event(["DPP-CONF-FAILED"], timeout=5)
 839     if ev is None:
 840         raise Exception("DPP configuration did not succeed (Enrollee)")
 841
 842     dev[0].request("DPP_STOP_LISTEN")
 843
 844 def test_dpp_qr_code_auth_initiator_either_1(dev, apdev):
 845     """DPP QR Code and authentication exchange (Initiator in either role)"""
 846     run_dpp_qr_code_auth_initiator_either(dev, apdev, None, dev[1], dev[0])
 847
 848 def test_dpp_qr_code_auth_initiator_either_2(dev, apdev):
 849     """DPP QR Code and authentication exchange (Initiator in either role)"""
 850     run_dpp_qr_code_auth_initiator_either(dev, apdev, "enrollee",
 851                                           dev[1], dev[0])
 852
 853 def test_dpp_qr_code_auth_initiator_either_3(dev, apdev):
 854     """DPP QR Code and authentication exchange (Initiator in either role)"""
 855     run_dpp_qr_code_auth_initiator_either(dev, apdev, "configurator",
 856                                           dev[0], dev[1])
 857
 858 def run_dpp_qr_code_auth_initiator_either(dev, apdev, resp_role,
 859                                           conf_dev, enrollee_dev):
 860     check_dpp_capab(dev[0])
 861     check_dpp_capab(dev[1])
 862     logger.info("dev0 displays QR Code")
 863     addr = dev[0].own_addr().replace(':', '')
 864     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 865     if "FAIL" in res:
 866         raise Exception("Failed to generate bootstrapping info")
 867     id0 = int(res)
 868     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 869
 870     logger.info("dev1 scans QR Code")
 871     res = dev[1].request("DPP_QR_CODE " + uri0)
 872     if "FAIL" in res:
 873         raise Exception("Failed to parse QR Code URI")
 874     id1 = int(res)
 875
 876     logger.info("dev1 initiates DPP Authentication")
 877     cmd = "DPP_LISTEN 2412"
 878     if resp_role:
 879         cmd += " role=" + resp_role
 880     if "OK" not in dev[0].request(cmd):
 881         raise Exception("Failed to start listen operation")
 882     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=either" % id1):
 883         raise Exception("Failed to initiate DPP Authentication")
 884     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 885     if ev is None:
 886         raise Exception("DPP authentication did not succeed (Responder)")
 887     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 888     if ev is None:
 889         raise Exception("DPP authentication did not succeed (Initiator)")
 890
 891     ev = conf_dev.wait_event(["DPP-CONF-SENT"], timeout=5)
 892     if ev is None:
 893         raise Exception("DPP configuration did not succeed (Configurator)")
 894     ev = enrollee_dev.wait_event(["DPP-CONF-FAILED"], timeout=5)
 895     if ev is None:
 896         raise Exception("DPP configuration did not succeed (Enrollee)")
 897
 898     dev[0].request("DPP_STOP_LISTEN")
 899
 900 def run_init_incompatible_roles(dev, role="enrollee"):
 901     check_dpp_capab(dev[0])
 902     check_dpp_capab(dev[1])
 903     logger.info("dev0 displays QR Code")
 904     addr = dev[0].own_addr().replace(':', '')
 905     res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
 906     if "FAIL" in res:
 907         raise Exception("Failed to generate bootstrapping info")
 908     id0 = int(res)
 909     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
 910
 911     logger.info("dev1 scans QR Code")
 912     res = dev[1].request("DPP_QR_CODE " + uri0)
 913     if "FAIL" in res:
 914         raise Exception("Failed to parse QR Code URI")
 915     id1 = int(res)
 916
 917     logger.info("dev1 initiates DPP Authentication")
 918     if "OK" not in dev[0].request("DPP_LISTEN 2412 role=%s" % role):
 919         raise Exception("Failed to start listen operation")
 920     return id1
 921
 922 def test_dpp_qr_code_auth_incompatible_roles(dev, apdev):
 923     """DPP QR Code and authentication exchange (incompatible roles)"""
 924     id1 = run_init_incompatible_roles(dev)
 925     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=enrollee" % id1):
 926         raise Exception("Failed to initiate DPP Authentication")
 927     ev = dev[1].wait_event(["DPP-NOT-COMPATIBLE"], timeout=5)
 928     if ev is None:
 929         raise Exception("DPP-NOT-COMPATIBLE event on initiator timed out")
 930     ev = dev[0].wait_event(["DPP-NOT-COMPATIBLE"], timeout=1)
 931     if ev is None:
 932         raise Exception("DPP-NOT-COMPATIBLE event on responder timed out")
 933
 934     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=configurator" % id1):
 935         raise Exception("Failed to initiate DPP Authentication")
 936     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 937     if ev is None:
 938         raise Exception("DPP authentication did not succeed (Responder)")
 939     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
 940     if ev is None:
 941         raise Exception("DPP authentication did not succeed (Initiator)")
 942     dev[0].request("DPP_STOP_LISTEN")
 943
 944 def test_dpp_qr_code_auth_incompatible_roles2(dev, apdev):
 945     """DPP QR Code and authentication exchange (incompatible roles 2)"""
 946     id1 = run_init_incompatible_roles(dev, role="configurator")
 947     if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=configurator" % id1):
 948         raise Exception("Failed to initiate DPP Authentication")
 949     ev = dev[1].wait_event(["DPP-NOT-COMPATIBLE"], timeout=5)
 950     if ev is None:
 951         raise Exception("DPP-NOT-COMPATIBLE event on initiator timed out")
 952     ev = dev[0].wait_event(["DPP-NOT-COMPATIBLE"], timeout=1)
 953     if ev is None:
 954         raise Exception("DPP-NOT-COMPATIBLE event on responder timed out")
 955
 956 def test_dpp_qr_code_auth_incompatible_roles_failure(dev, apdev):
 957     """DPP QR Code and authentication exchange (incompatible roles failure)"""
 958     id1 = run_init_incompatible_roles(dev, role="configurator")
 959     with alloc_fail(dev[0], 1, "dpp_auth_build_resp_status"):
 960         if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=configurator" % id1):
 961             raise Exception("Failed to initiate DPP Authentication")
 962         ev = dev[0].wait_event(["DPP-NOT-COMPATIBLE"], timeout=1)
 963         if ev is None:
 964             raise Exception("DPP-NOT-COMPATIBLE event on responder timed out")
 965
 966 def test_dpp_qr_code_auth_incompatible_roles_failure2(dev, apdev):
 967     """DPP QR Code and authentication exchange (incompatible roles failure 2)"""
 968     id1 = run_init_incompatible_roles(dev, role="configurator")
 969     with alloc_fail(dev[1], 1, "dpp_auth_resp_rx_status"):
 970         if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=configurator" % id1):
 971             raise Exception("Failed to initiate DPP Authentication")
 972         wait_fail_trigger(dev[1], "GET_ALLOC_FAIL")
 973
 974 def test_dpp_qr_code_auth_incompatible_roles_failure3(dev, apdev):
 975     """DPP QR Code and authentication exchange (incompatible roles failure 3)"""
 976     id1 = run_init_incompatible_roles(dev, role="configurator")
 977     with fail_test(dev[1], 1, "dpp_auth_resp_rx_status"):
 978         if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=configurator" % id1):
 979             raise Exception("Failed to initiate DPP Authentication")
 980         ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
 981         if ev is None or "AES-SIV decryption failed" not in ev:
 982             raise Exception("AES-SIV decryption failure not reported")
 983
 984 def test_dpp_qr_code_auth_neg_chan(dev, apdev):
 985     """DPP QR Code and authentication exchange with requested different channel"""
 986     check_dpp_capab(dev[0])
 987     check_dpp_capab(dev[1])
 988
 989     logger.info("Create configurator on dev1")
 990     cmd = "DPP_CONFIGURATOR_ADD"
 991     res = dev[1].request(cmd);
 992     if "FAIL" in res:
 993         raise Exception("Failed to add configurator")
 994     conf_id = int(res)
 995
 996     logger.info("dev0 displays QR Code")
 997     addr = dev[0].own_addr().replace(':', '')
 998     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
 999     res = dev[0].request(cmd)
1000     if "FAIL" in res:
1001         raise Exception("Failed to generate bootstrapping info")
1002     id0 = int(res)
1003     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
1004
1005     logger.info("dev1 scans QR Code")
1006     res = dev[1].request("DPP_QR_CODE " + uri0)
1007     if "FAIL" in res:
1008         raise Exception("Failed to parse QR Code URI")
1009     id1 = int(res)
1010
1011     logger.info("dev1 initiates DPP Authentication")
1012     cmd = "DPP_LISTEN 2412"
1013     if "OK" not in dev[0].request(cmd):
1014         raise Exception("Failed to start listen operation")
1015     cmd = "DPP_AUTH_INIT peer=%d configurator=%d conf=sta-dpp neg_freq=2462" % (id1, conf_id)
1016     if "OK" not in dev[1].request(cmd):
1017         raise Exception("Failed to initiate DPP Authentication")
1018
1019     ev = dev[1].wait_event(["DPP-TX"], timeout=5)
1020     if ev is None:
1021         raise Exception("DPP Authentication Request not sent")
1022     if "freq=2412 type=0" not in ev:
1023         raise Exception("Unexpected TX data for Authentication Request: " + ev)
1024
1025     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
1026     if ev is None:
1027         raise Exception("DPP Authentication Request not received")
1028     if "freq=2412 type=0" not in ev:
1029         raise Exception("Unexpected RX data for Authentication Request: " + ev)
1030
1031     ev = dev[1].wait_event(["DPP-TX-STATUS"], timeout=5)
1032     if ev is None:
1033         raise Exception("TX status for DPP Authentication Request not reported")
1034     if "freq=2412 result=SUCCESS" not in ev:
1035         raise Exception("Unexpected TX status for Authentication Request: " + ev)
1036
1037     ev = dev[0].wait_event(["DPP-TX"], timeout=5)
1038     if ev is None:
1039         raise Exception("DPP Authentication Response not sent")
1040     if "freq=2462 type=1" not in ev:
1041         raise Exception("Unexpected TX data for Authentication Response: " + ev)
1042
1043     ev = dev[1].wait_event(["DPP-RX"], timeout=5)
1044     if ev is None:
1045         raise Exception("DPP Authentication Response not received")
1046     if "freq=2462 type=1" not in ev:
1047         raise Exception("Unexpected RX data for Authentication Response: " + ev)
1048
1049     ev = dev[0].wait_event(["DPP-TX-STATUS"], timeout=5)
1050     if ev is None:
1051         raise Exception("TX status for DPP Authentication Response not reported")
1052     if "freq=2462 result=SUCCESS" not in ev:
1053         raise Exception("Unexpected TX status for Authentication Response: " + ev)
1054
1055     ev = dev[1].wait_event(["DPP-TX"], timeout=5)
1056     if ev is None:
1057         raise Exception("DPP Authentication Confirm not sent")
1058     if "freq=2462 type=2" not in ev:
1059         raise Exception("Unexpected TX data for Authentication Confirm: " + ev)
1060
1061     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
1062     if ev is None:
1063         raise Exception("DPP Authentication Confirm not received")
1064     if "freq=2462 type=2" not in ev:
1065         raise Exception("Unexpected RX data for Authentication Confirm: " + ev)
1066
1067     ev = dev[1].wait_event(["DPP-TX-STATUS"], timeout=5)
1068     if ev is None:
1069         raise Exception("TX status for DPP Authentication Confirm not reported")
1070     if "freq=2462 result=SUCCESS" not in ev:
1071         raise Exception("Unexpected TX status for Authentication Confirm: " + ev)
1072
1073     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
1074     if ev is None:
1075         raise Exception("DPP authentication did not succeed (Responder)")
1076     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
1077     if ev is None:
1078         raise Exception("DPP authentication did not succeed (Initiator)")
1079     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5)
1080     if ev is None:
1081         raise Exception("DPP configuration not completed (Configurator)")
1082     ev = dev[0].wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5)
1083     if ev is None:
1084         raise Exception("DPP configuration not completed (Enrollee)")
1085     if "DPP-CONF-FAILED" in ev:
1086         raise Exception("DPP configuration failed")
1087     dev[0].request("DPP_STOP_LISTEN")
1088     dev[0].dump_monitor()
1089     dev[1].dump_monitor()
1090
1091 def test_dpp_config_legacy(dev, apdev):
1092     """DPP Config Object for legacy network using passphrase"""
1093     check_dpp_capab(dev[1])
1094     conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}'
1095     dev[1].set("dpp_config_obj_override", conf)
1096     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1097                                  require_conf_success=True)
1098
1099 def test_dpp_config_legacy_psk_hex(dev, apdev):
1100     """DPP Config Object for legacy network using PSK"""
1101     check_dpp_capab(dev[1])
1102     conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","psk_hex":"' + 32*"12" + '"}}'
1103     dev[1].set("dpp_config_obj_override", conf)
1104     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1105                                  require_conf_success=True)
1106
1107 def test_dpp_config_fragmentation(dev, apdev):
1108     """DPP Config Object for legacy network requiring fragmentation"""
1109     check_dpp_capab(dev[1])
1110     conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}' + 3000*' '
1111     dev[1].set("dpp_config_obj_override", conf)
1112     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1113                                  require_conf_success=True)
1114
1115 def test_dpp_config_legacy_gen(dev, apdev):
1116     """Generate DPP Config Object for legacy network"""
1117     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1118                                  init_extra="conf=sta-psk pass=%s" % "passphrase".encode("hex"),
1119                                  require_conf_success=True)
1120
1121 def test_dpp_config_legacy_gen_psk(dev, apdev):
1122     """Generate DPP Config Object for legacy network (PSK)"""
1123     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1124                                  init_extra="conf=sta-psk psk=0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
1125                                  require_conf_success=True)
1126
1127 def test_dpp_config_dpp_gen_prime256v1(dev, apdev):
1128     """Generate DPP Config Object for DPP network (P-256)"""
1129     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1130                                  init_extra="conf=sta-dpp",
1131                                  require_conf_success=True,
1132                                  configurator=True)
1133
1134 def test_dpp_config_dpp_gen_secp384r1(dev, apdev):
1135     """Generate DPP Config Object for DPP network (P-384)"""
1136     run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1",
1137                                  init_extra="conf=sta-dpp",
1138                                  require_conf_success=True,
1139                                  configurator=True)
1140
1141 def test_dpp_config_dpp_gen_secp521r1(dev, apdev):
1142     """Generate DPP Config Object for DPP network (P-521)"""
1143     run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1",
1144                                  init_extra="conf=sta-dpp",
1145                                  require_conf_success=True,
1146                                  configurator=True)
1147
1148 def test_dpp_config_dpp_gen_prime256v1_prime256v1(dev, apdev):
1149     """Generate DPP Config Object for DPP network (P-256 + P-256)"""
1150     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1151                                  init_extra="conf=sta-dpp",
1152                                  require_conf_success=True,
1153                                  configurator=True,
1154                                  conf_curve="prime256v1")
1155
1156 def test_dpp_config_dpp_gen_prime256v1_secp384r1(dev, apdev):
1157     """Generate DPP Config Object for DPP network (P-256 + P-384)"""
1158     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1159                                  init_extra="conf=sta-dpp",
1160                                  require_conf_success=True,
1161                                  configurator=True,
1162                                  conf_curve="secp384r1")
1163
1164 def test_dpp_config_dpp_gen_prime256v1_secp521r1(dev, apdev):
1165     """Generate DPP Config Object for DPP network (P-256 + P-521)"""
1166     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1167                                  init_extra="conf=sta-dpp",
1168                                  require_conf_success=True,
1169                                  configurator=True,
1170                                  conf_curve="secp521r1")
1171
1172 def test_dpp_config_dpp_gen_secp384r1_prime256v1(dev, apdev):
1173     """Generate DPP Config Object for DPP network (P-384 + P-256)"""
1174     run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1",
1175                                  init_extra="conf=sta-dpp",
1176                                  require_conf_success=True,
1177                                  configurator=True,
1178                                  conf_curve="prime256v1")
1179
1180 def test_dpp_config_dpp_gen_secp384r1_secp384r1(dev, apdev):
1181     """Generate DPP Config Object for DPP network (P-384 + P-384)"""
1182     run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1",
1183                                  init_extra="conf=sta-dpp",
1184                                  require_conf_success=True,
1185                                  configurator=True,
1186                                  conf_curve="secp384r1")
1187
1188 def test_dpp_config_dpp_gen_secp384r1_secp521r1(dev, apdev):
1189     """Generate DPP Config Object for DPP network (P-384 + P-521)"""
1190     run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1",
1191                                  init_extra="conf=sta-dpp",
1192                                  require_conf_success=True,
1193                                  configurator=True,
1194                                  conf_curve="secp521r1")
1195
1196 def test_dpp_config_dpp_gen_secp521r1_prime256v1(dev, apdev):
1197     """Generate DPP Config Object for DPP network (P-521 + P-256)"""
1198     run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1",
1199                                  init_extra="conf=sta-dpp",
1200                                  require_conf_success=True,
1201                                  configurator=True,
1202                                  conf_curve="prime256v1")
1203
1204 def test_dpp_config_dpp_gen_secp521r1_secp384r1(dev, apdev):
1205     """Generate DPP Config Object for DPP network (P-521 + P-384)"""
1206     run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1",
1207                                  init_extra="conf=sta-dpp",
1208                                  require_conf_success=True,
1209                                  configurator=True,
1210                                  conf_curve="secp384r1")
1211
1212 def test_dpp_config_dpp_gen_secp521r1_secp521r1(dev, apdev):
1213     """Generate DPP Config Object for DPP network (P-521 + P-521)"""
1214     run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1",
1215                                  init_extra="conf=sta-dpp",
1216                                  require_conf_success=True,
1217                                  configurator=True,
1218                                  conf_curve="secp521r1")
1219
1220 def test_dpp_config_dpp_gen_expiry(dev, apdev):
1221     """Generate DPP Config Object for DPP network with expiry value"""
1222     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1223                                  init_extra="conf=sta-dpp expiry=%d" % (time.time() + 1000),
1224                                  require_conf_success=True,
1225                                  configurator=True)
1226
1227 def test_dpp_config_dpp_gen_expired_key(dev, apdev):
1228     """Generate DPP Config Object for DPP network with expiry value"""
1229     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1230                                  init_extra="conf=sta-dpp expiry=%d" % (time.time() - 10),
1231                                  require_conf_failure=True,
1232                                  configurator=True)
1233
1234 def test_dpp_config_dpp_override_prime256v1(dev, apdev):
1235     """DPP Config Object override (P-256)"""
1236     check_dpp_capab(dev[0])
1237     check_dpp_capab(dev[1])
1238     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"dpp","signedConnector":"eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJUbkdLaklsTlphYXRyRUFZcmJiamlCNjdyamtMX0FHVldYTzZxOWhESktVIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoiYVRGNEpFR0lQS1NaMFh2OXpkQ01qbS10bjVYcE1zWUlWWjl3eVNBejFnSSIsInkiOiJRR2NIV0FfNnJiVTlYRFhBenRvWC1NNVEzc3VUbk1hcUVoVUx0bjdTU1h3In19._sm6YswxMf6hJLVTyYoU1uYUeY2VVkUNjrzjSiEhY42StD_RWowStEE-9CRsdCvLmsTptZ72_g40vTFwdId20A","csign":{"kty":"EC","crv":"P-256","x":"W4-Y5N1Pkos3UWb9A5qme0KUYRtY3CVUpekx_MapZ9s","y":"Et-M4NSF4NGjvh2VCh4B1sJ9eSCZ4RNzP2DBdP137VE","kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU"}}}'
1239     dev[0].set("dpp_ignore_netaccesskey_mismatch", "1")
1240     dev[1].set("dpp_config_obj_override", conf)
1241     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1242                                  require_conf_success=True)
1243
1244 def test_dpp_config_dpp_override_secp384r1(dev, apdev):
1245     """DPP Config Object override (P-384)"""
1246     check_dpp_capab(dev[0])
1247     check_dpp_capab(dev[1])
1248     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"dpp","signedConnector":"eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJabi1iMndjbjRLM2pGQklkYmhGZkpVTHJTXzdESS0yMWxFQi02R3gxNjl3IiwiYWxnIjoiRVMzODQifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0zODQiLCJ4IjoickdrSGg1UUZsOUtfWjdqYUZkVVhmbThoY1RTRjM1b25Xb1NIRXVsbVNzWW9oX1RXZGpoRjhiVGdiS0ZRN2tBViIsInkiOiJBbU1QVDA5VmFENWpGdzMwTUFKQlp2VkZXeGNlVVlKLXR5blQ0bVJ5N0xOZWxhZ0dEWHpfOExaRlpOU2FaNUdLIn19.Yn_F7m-bbOQ5PlaYQJ9-1qsuqYQ6V-rAv8nWw1COKiCYwwbt3WFBJ8DljY0dPrlg5CHJC4saXwkytpI-CpELW1yUdzYb4Lrun07d20Eo_g10ICyOl5sqQCAUElKMe_Xr","csign":{"kty":"EC","crv":"P-384","x":"dmTyXXiPV2Y8a01fujL-jo08gvzyby23XmzOtzjAiujKQZZgPJsbhfEKrZDlc6ey","y":"H5Z0av5c7bqInxYb2_OOJdNiMhVf3zlcULR0516ZZitOY4U31KhL4wl4KGV7g2XW","kid":"Zn-b2wcn4K3jFBIdbhFfJULrS_7DI-21lEB-6Gx169w"}}}'
1249     dev[0].set("dpp_ignore_netaccesskey_mismatch", "1")
1250     dev[1].set("dpp_config_obj_override", conf)
1251     run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1",
1252                                  require_conf_success=True)
1253
1254 def test_dpp_config_dpp_override_secp521r1(dev, apdev):
1255     """DPP Config Object override (P-521)"""
1256     check_dpp_capab(dev[0])
1257     check_dpp_capab(dev[1])
1258     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"dpp","signedConnector":"eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJMZkhKY3hnV2ZKcG1uS2IwenZRT0F2VDB2b0ZKc0JjZnBmYzgxY3Y5ZXFnIiwiYWxnIjoiRVM1MTIifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC01MjEiLCJ4IjoiQVJlUFBrMFNISkRRR2NWbnlmM3lfbTlaQllHNjFJeElIbDN1NkdwRHVhMkU1WVd4TE1BSUtMMnZuUGtlSGFVRXljRmZaZlpYZ2JlNkViUUxMVkRVUm1VUSIsInkiOiJBWUtaYlNwUkFFNjJVYm9YZ2c1ZWRBVENzbEpzTlpwcm9RR1dUcW9Md04weXkzQkVoT3ZRZmZrOWhaR2lKZ295TzFobXFRRVRrS0pXb2tIYTBCQUpLSGZtIn19.ACEZLyPk13cM_OFScpLoCElQ2t1sxq5z2d_W_3_QslTQQe5SFiH_o8ycL4632YLAH4RV0gZcMKKRMtZdHgBYHjkzASDqgY-_aYN2SBmpfl8hw0YdDlUJWX3DJf-ofqNAlTbnGmhpSg69cEAhFn41Xgvx2MdwYcPVncxxESVOtWl5zNLK","csign":{"kty":"EC","crv":"P-521","x":"ADiOI_YJOAipEXHB-SpGl4KqokX8m8h3BVYCc8dgiwssZ061-nIIY3O1SIO6Re4Jjfy53RPgzDG6jitOgOGLtzZs","y":"AZKggKaQi0ExutSpJAU3-lqDV03sBQLA9C7KabfWoAn8qD6Vk4jU0WAJdt-wBBTF9o1nVuiqS2OxMVYrxN4lOz79","kid":"LfHJcxgWfJpmnKb0zvQOAvT0voFJsBcfpfc81cv9eqg"}}}'
1259     dev[0].set("dpp_ignore_netaccesskey_mismatch", "1")
1260     dev[1].set("dpp_config_obj_override", conf)
1261     run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1",
1262                                  require_conf_success=True)
1263
1264 def test_dpp_config_override_objects(dev, apdev):
1265     """Generate DPP Config Object and override objects)"""
1266     check_dpp_capab(dev[1])
1267     discovery = '{\n"ssid":"mywifi"\n}'
1268     groups = '[\n  {"groupId":"home","netRole":"sta"},\n  {"groupId":"cottage","netRole":"sta"}\n]'
1269     dev[1].set("dpp_discovery_override", discovery)
1270     dev[1].set("dpp_groups_override", groups)
1271     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1272                                  init_extra="conf=sta-dpp",
1273                                  require_conf_success=True,
1274                                  configurator=True)
1275
1276 def build_conf_obj(kty="EC", crv="P-256",
1277                    x="W4-Y5N1Pkos3UWb9A5qme0KUYRtY3CVUpekx_MapZ9s",
1278                    y="Et-M4NSF4NGjvh2VCh4B1sJ9eSCZ4RNzP2DBdP137VE",
1279                    kid="TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU",
1280                    prot_hdr='{"typ":"dppCon","kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU","alg":"ES256"}',
1281                    signed_connector=None,
1282                    no_signed_connector=False,
1283                    csign=True):
1284     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{'
1285     conf += '"akm":"dpp",'
1286
1287     if signed_connector:
1288         conn = signed_connector
1289         conf += '"signedConnector":"%s",' % conn
1290     elif not no_signed_connector:
1291         payload = '{"groups":[{"groupId":"*","netRole":"sta"}],"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}}'
1292         sign = "_sm6YswxMf6hJLVTyYoU1uYUeY2VVkUNjrzjSiEhY42StD_RWowStEE-9CRsdCvLmsTptZ72_g40vTFwdId20A"
1293         conn = base64.urlsafe_b64encode(prot_hdr).rstrip('=') + '.'
1294         conn += base64.urlsafe_b64encode(payload).rstrip('=') + '.'
1295         conn += sign
1296         conf += '"signedConnector":"%s",' % conn
1297
1298     if csign:
1299         conf += '"csign":{'
1300         if kty:
1301             conf += '"kty":"%s",' % kty
1302         if crv:
1303             conf += '"crv":"%s",' % crv
1304         if x:
1305             conf += '"x":"%s",' % x
1306         if y:
1307             conf += '"y":"%s",' % y
1308         if kid:
1309             conf += '"kid":"%s"' % kid
1310         conf = conf.rstrip(',')
1311         conf += '}'
1312     else:
1313         conf = conf.rstrip(',')
1314
1315     conf += '}}'
1316
1317     return conf
1318
1319 def run_dpp_config_error(dev, apdev, conf,
1320                          skip_net_access_key_mismatch=True):
1321     check_dpp_capab(dev[0])
1322     check_dpp_capab(dev[1])
1323     if skip_net_access_key_mismatch:
1324         dev[0].set("dpp_ignore_netaccesskey_mismatch", "1")
1325     dev[1].set("dpp_config_obj_override", conf)
1326     run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1",
1327                                  require_conf_failure=True)
1328
1329 def test_dpp_config_jwk_error_no_kty(dev, apdev):
1330     """DPP Config Object JWK error - no kty"""
1331     run_dpp_config_error(dev, apdev, build_conf_obj(kty=None))
1332
1333 def test_dpp_config_jwk_error_unexpected_kty(dev, apdev):
1334     """DPP Config Object JWK error - unexpected kty"""
1335     run_dpp_config_error(dev, apdev, build_conf_obj(kty="unknown"))
1336
1337 def test_dpp_config_jwk_error_no_crv(dev, apdev):
1338     """DPP Config Object JWK error - no crv"""
1339     run_dpp_config_error(dev, apdev, build_conf_obj(crv=None))
1340
1341 def test_dpp_config_jwk_error_unsupported_crv(dev, apdev):
1342     """DPP Config Object JWK error - unsupported curve"""
1343     run_dpp_config_error(dev, apdev, build_conf_obj(crv="unsupported"))
1344
1345 def test_dpp_config_jwk_error_no_x(dev, apdev):
1346     """DPP Config Object JWK error - no x"""
1347     run_dpp_config_error(dev, apdev, build_conf_obj(x=None))
1348
1349 def test_dpp_config_jwk_error_invalid_x(dev, apdev):
1350     """DPP Config Object JWK error - invalid x"""
1351     run_dpp_config_error(dev, apdev, build_conf_obj(x="MTIz"))
1352
1353 def test_dpp_config_jwk_error_no_y(dev, apdev):
1354     """DPP Config Object JWK error - no y"""
1355     run_dpp_config_error(dev, apdev, build_conf_obj(y=None))
1356
1357 def test_dpp_config_jwk_error_invalid_y(dev, apdev):
1358     """DPP Config Object JWK error - invalid y"""
1359     run_dpp_config_error(dev, apdev, build_conf_obj(y="MTIz"))
1360
1361 def test_dpp_config_jwk_error_invalid_xy(dev, apdev):
1362     """DPP Config Object JWK error - invalid x,y"""
1363     conf = build_conf_obj(x="MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY",
1364                           y="MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY")
1365     run_dpp_config_error(dev, apdev, conf)
1366
1367 def test_dpp_config_jwk_error_no_kid(dev, apdev):
1368     """DPP Config Object JWK error - no kid"""
1369     run_dpp_config_error(dev, apdev, build_conf_obj(kid=None))
1370
1371 def test_dpp_config_jws_error_prot_hdr_not_an_object(dev, apdev):
1372     """DPP Config Object JWS error - protected header not an object"""
1373     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr="1"))
1374
1375 def test_dpp_config_jws_error_prot_hdr_no_typ(dev, apdev):
1376     """DPP Config Object JWS error - protected header - no typ"""
1377     prot_hdr='{"kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU","alg":"ES256"}'
1378     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr=prot_hdr))
1379
1380 def test_dpp_config_jws_error_prot_hdr_unsupported_typ(dev, apdev):
1381     """DPP Config Object JWS error - protected header - unsupported typ"""
1382     prot_hdr='{"typ":"unsupported","kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU","alg":"ES256"}'
1383     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr=prot_hdr))
1384
1385 def test_dpp_config_jws_error_prot_hdr_no_alg(dev, apdev):
1386     """DPP Config Object JWS error - protected header - no alg"""
1387     prot_hdr='{"typ":"dppCon","kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU"}'
1388     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr=prot_hdr))
1389
1390 def test_dpp_config_jws_error_prot_hdr_unexpected_alg(dev, apdev):
1391     """DPP Config Object JWS error - protected header - unexpected alg"""
1392     prot_hdr='{"typ":"dppCon","kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU","alg":"unexpected"}'
1393     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr=prot_hdr))
1394
1395 def test_dpp_config_jws_error_prot_hdr_no_kid(dev, apdev):
1396     """DPP Config Object JWS error - protected header - no kid"""
1397     prot_hdr='{"typ":"dppCon","alg":"ES256"}'
1398     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr=prot_hdr))
1399
1400 def test_dpp_config_jws_error_prot_hdr_unexpected_kid(dev, apdev):
1401     """DPP Config Object JWS error - protected header - unexpected kid"""
1402     prot_hdr='{"typ":"dppCon","kid":"MTIz","alg":"ES256"}'
1403     run_dpp_config_error(dev, apdev, build_conf_obj(prot_hdr=prot_hdr))
1404
1405 def test_dpp_config_signed_connector_error_no_dot_1(dev, apdev):
1406     """DPP Config Object signedConnector error - no dot(1)"""
1407     conn = "MTIz"
1408     run_dpp_config_error(dev, apdev, build_conf_obj(signed_connector=conn))
1409
1410 def test_dpp_config_signed_connector_error_no_dot_2(dev, apdev):
1411     """DPP Config Object signedConnector error - no dot(2)"""
1412     conn = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJUbkdLaklsTlphYXRyRUFZcmJiamlCNjdyamtMX0FHVldYTzZxOWhESktVIiwiYWxnIjoiRVMyNTYifQ.MTIz"
1413     run_dpp_config_error(dev, apdev, build_conf_obj(signed_connector=conn))
1414
1415 def test_dpp_config_signed_connector_error_unexpected_signature_len(dev, apdev):
1416     """DPP Config Object signedConnector error - unexpected signature length"""
1417     conn = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJUbkdLaklsTlphYXRyRUFZcmJiamlCNjdyamtMX0FHVldYTzZxOWhESktVIiwiYWxnIjoiRVMyNTYifQ.MTIz.MTIz"
1418     run_dpp_config_error(dev, apdev, build_conf_obj(signed_connector=conn))
1419
1420 def test_dpp_config_signed_connector_error_invalid_signature_der(dev, apdev):
1421     """DPP Config Object signedConnector error - invalid signature DER"""
1422     conn = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJUbkdLaklsTlphYXRyRUFZcmJiamlCNjdyamtMX0FHVldYTzZxOWhESktVIiwiYWxnIjoiRVMyNTYifQ.MTIz.MTI"
1423     run_dpp_config_error(dev, apdev, build_conf_obj(signed_connector=conn))
1424
1425 def test_dpp_config_no_csign(dev, apdev):
1426     """DPP Config Object error - no csign"""
1427     run_dpp_config_error(dev, apdev, build_conf_obj(csign=False))
1428
1429 def test_dpp_config_no_signed_connector(dev, apdev):
1430     """DPP Config Object error - no signedConnector"""
1431     run_dpp_config_error(dev, apdev, build_conf_obj(no_signed_connector=True))
1432
1433 def test_dpp_config_unexpected_signed_connector_char(dev, apdev):
1434     """DPP Config Object error - unexpected signedConnector character"""
1435     run_dpp_config_error(dev, apdev, build_conf_obj(signed_connector='a\nb'))
1436
1437 def test_dpp_config_root_not_an_object(dev, apdev):
1438     """DPP Config Object error - root not an object"""
1439     conf = "1"
1440     run_dpp_config_error(dev, apdev, conf)
1441
1442 def test_dpp_config_no_wi_fi_tech(dev, apdev):
1443     """DPP Config Object error - no wi-fi_tech"""
1444     conf = "{}"
1445     run_dpp_config_error(dev, apdev, conf)
1446
1447 def test_dpp_config_unsupported_wi_fi_tech(dev, apdev):
1448     """DPP Config Object error - unsupported wi-fi_tech"""
1449     conf = '{"wi-fi_tech":"unsupported"}'
1450     run_dpp_config_error(dev, apdev, conf)
1451
1452 def test_dpp_config_no_discovery(dev, apdev):
1453     """DPP Config Object error - no discovery"""
1454     conf = '{"wi-fi_tech":"infra"}'
1455     run_dpp_config_error(dev, apdev, conf)
1456
1457 def test_dpp_config_no_discovery_ssid(dev, apdev):
1458     """DPP Config Object error - no discovery::ssid"""
1459     conf = '{"wi-fi_tech":"infra","discovery":{}}'
1460     run_dpp_config_error(dev, apdev, conf)
1461
1462 def test_dpp_config_too_long_discovery_ssid(dev, apdev):
1463     """DPP Config Object error - too long discovery::ssid"""
1464     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"%s"}}' % (33*'A')
1465     run_dpp_config_error(dev, apdev, conf)
1466
1467 def test_dpp_config_no_cred(dev, apdev):
1468     """DPP Config Object error - no cred"""
1469     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"}}'
1470     run_dpp_config_error(dev, apdev, conf)
1471
1472 def test_dpp_config_no_cred_akm(dev, apdev):
1473     """DPP Config Object error - no cred::akm"""
1474     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{}}'
1475     run_dpp_config_error(dev, apdev, conf)
1476
1477 def test_dpp_config_unsupported_cred_akm(dev, apdev):
1478     """DPP Config Object error - unsupported cred::akm"""
1479     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"unsupported"}}'
1480     run_dpp_config_error(dev, apdev, conf)
1481
1482 def test_dpp_config_error_legacy_no_pass(dev, apdev):
1483     """DPP Config Object legacy error - no pass/psk"""
1484     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"psk"}}'
1485     run_dpp_config_error(dev, apdev, conf)
1486
1487 def test_dpp_config_error_legacy_too_short_pass(dev, apdev):
1488     """DPP Config Object legacy error - too short pass/psk"""
1489     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"1"}}'
1490     run_dpp_config_error(dev, apdev, conf)
1491
1492 def test_dpp_config_error_legacy_too_long_pass(dev, apdev):
1493     """DPP Config Object legacy error - too long pass/psk"""
1494     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"%s"}}' % (64*'A')
1495     run_dpp_config_error(dev, apdev, conf)
1496
1497 def test_dpp_config_error_legacy_psk_with_sae(dev, apdev):
1498     """DPP Config Object legacy error - psk_hex with SAE"""
1499     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"sae","psk_hex":"%s"}}' % (32*"12")
1500     run_dpp_config_error(dev, apdev, conf)
1501
1502 def test_dpp_config_error_legacy_no_pass_for_sae(dev, apdev):
1503     """DPP Config Object legacy error - no pass for SAE"""
1504     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"psk+sae","psk_hex":"%s"}}' % (32*"12")
1505     run_dpp_config_error(dev, apdev, conf)
1506
1507 def test_dpp_config_error_legacy_invalid_psk(dev, apdev):
1508     """DPP Config Object legacy error - invalid psk_hex"""
1509     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"psk","psk_hex":"%s"}}' % (32*"qa")
1510     run_dpp_config_error(dev, apdev, conf)
1511
1512 def test_dpp_config_error_legacy_too_short_psk(dev, apdev):
1513     """DPP Config Object legacy error - too short psk_hex"""
1514     conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"psk","psk_hex":"%s"}}' % (31*"12")
1515     run_dpp_config_error(dev, apdev, conf)
1516
1517 def ecdsa_sign(pkey, message, alg="sha256"):
1518     sign = OpenSSL.crypto.sign(pkey, message, alg)
1519     a,b = struct.unpack('BB', sign[0:2])
1520     if a != 0x30:
1521         raise Exception("Invalid DER encoding of ECDSA signature")
1522     if b != len(sign) - 2:
1523         raise Exception("Invalid length of ECDSA signature")
1524     sign = sign[2:]
1525
1526     a,b = struct.unpack('BB', sign[0:2])
1527     if a != 0x02:
1528         raise Exception("Invalid DER encoding of ECDSA signature r")
1529     if b > len(sign) - 2:
1530         raise Exception("Invalid length of ECDSA signature r")
1531     sign = sign[2:]
1532     if b == 32:
1533         r = sign[0:32]
1534         sign = sign[32:]
1535     elif b == 33:
1536         r = sign[1:33]
1537         sign = sign[33:]
1538     else:
1539         raise Exception("Invalid length of ECDSA signature r")
1540
1541     a,b = struct.unpack('BB', sign[0:2])
1542     if a != 0x02:
1543         raise Exception("Invalid DER encoding of ECDSA signature s")
1544     if b > len(sign) - 2:
1545         raise Exception("Invalid length of ECDSA signature s")
1546     sign = sign[2:]
1547     if b == 32:
1548         s = sign[0:32]
1549         sign = sign[32:]
1550     elif b == 33:
1551         s = sign[1:33]
1552         sign = sign[33:]
1553     else:
1554         raise Exception("Invalid length of ECDSA signature s")
1555     if len(sign) != 0:
1556         raise Exception("Extra data at the end of ECDSA signature")
1557
1558     raw_sign = r + s
1559     return base64.urlsafe_b64encode(raw_sign).rstrip('=')
1560
1561 p256_priv_key = """-----BEGIN EC PRIVATE KEY-----
1562 MHcCAQEEIBVQij9ah629f1pu3tarDQGQvrzHgAkgYd1jHGiLxNajoAoGCCqGSM49
1563 AwEHoUQDQgAEAC9d2/JirKu72F2qLuv5jEFMD1Cqu9EiyGk7cOzn/2DJ51p2mEoW
1564 n03N6XRvTC+G7WPol9Ng97NAM2sK57+F/Q==
1565 -----END EC PRIVATE KEY-----"""
1566 p256_pub_key_x = binascii.unhexlify("002f5ddbf262acabbbd85daa2eebf98c414c0f50aabbd122c8693b70ece7ff60")
1567 p256_pub_key_y = binascii.unhexlify("c9e75a76984a169f4dcde9746f4c2f86ed63e897d360f7b340336b0ae7bf85fd")
1568
1569 def run_dpp_config_connector(dev, apdev, expiry=None, payload=None,
1570                              skip_net_access_key_mismatch=True):
1571     if not openssl_imported:
1572         raise HwsimSkip("OpenSSL python method not available")
1573     pkey = OpenSSL.crypto.load_privatekey(OpenSSL.crypto.FILETYPE_PEM,
1574                                           p256_priv_key)
1575     x = base64.urlsafe_b64encode(p256_pub_key_x).rstrip('=')
1576     y = base64.urlsafe_b64encode(p256_pub_key_y).rstrip('=')
1577
1578     pubkey = '\04' + p256_pub_key_x + p256_pub_key_y
1579     kid = base64.urlsafe_b64encode(hashlib.sha256(pubkey).digest()).rstrip('=')
1580
1581     prot_hdr = '{"typ":"dppCon","kid":"%s","alg":"ES256"}' % kid
1582
1583     if not payload:
1584         payload = '{"groups":[{"groupId":"*","netRole":"sta"}],"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}'
1585         if expiry:
1586             payload += ',"expiry":"%s"' % expiry
1587         payload += '}'
1588     conn = base64.urlsafe_b64encode(prot_hdr).rstrip('=') + '.'
1589     conn += base64.urlsafe_b64encode(payload).rstrip('=')
1590     sign = ecdsa_sign(pkey, conn)
1591     conn += '.' + sign
1592     run_dpp_config_error(dev, apdev,
1593                          build_conf_obj(x=x, y=y, signed_connector=conn),
1594                          skip_net_access_key_mismatch=skip_net_access_key_mismatch)
1595
1596 def test_dpp_config_connector_error_ext_sign(dev, apdev):
1597     """DPP Config Object connector error - external signature calculation"""
1598     run_dpp_config_connector(dev, apdev)
1599
1600 def test_dpp_config_connector_error_too_short_timestamp(dev, apdev):
1601     """DPP Config Object connector error - too short timestamp"""
1602     run_dpp_config_connector(dev, apdev, expiry="1")
1603
1604 def test_dpp_config_connector_error_invalid_timestamp(dev, apdev):
1605     """DPP Config Object connector error - invalid timestamp"""
1606     run_dpp_config_connector(dev, apdev, expiry=19*"1")
1607
1608 def test_dpp_config_connector_error_invalid_timestamp_date(dev, apdev):
1609     """DPP Config Object connector error - invalid timestamp date"""
1610     run_dpp_config_connector(dev, apdev, expiry="9999-99-99T99:99:99Z")
1611
1612 def test_dpp_config_connector_error_invalid_time_zone(dev, apdev):
1613     """DPP Config Object connector error - invalid time zone"""
1614     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00*")
1615
1616 def test_dpp_config_connector_error_invalid_time_zone_2(dev, apdev):
1617     """DPP Config Object connector error - invalid time zone 2"""
1618     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00+")
1619
1620 def test_dpp_config_connector_error_expired_1(dev, apdev):
1621     """DPP Config Object connector error - expired 1"""
1622     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00")
1623
1624 def test_dpp_config_connector_error_expired_2(dev, apdev):
1625     """DPP Config Object connector error - expired 2"""
1626     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00Z")
1627
1628 def test_dpp_config_connector_error_expired_3(dev, apdev):
1629     """DPP Config Object connector error - expired 3"""
1630     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00+01")
1631
1632 def test_dpp_config_connector_error_expired_4(dev, apdev):
1633     """DPP Config Object connector error - expired 4"""
1634     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00+01:02")
1635
1636 def test_dpp_config_connector_error_expired_5(dev, apdev):
1637     """DPP Config Object connector error - expired 5"""
1638     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00-01")
1639
1640 def test_dpp_config_connector_error_expired_6(dev, apdev):
1641     """DPP Config Object connector error - expired 6"""
1642     run_dpp_config_connector(dev, apdev, expiry="2018-01-01T00:00:00-01:02")
1643
1644 def test_dpp_config_connector_error_no_groups(dev, apdev):
1645     """DPP Config Object connector error - no groups"""
1646     payload = '{"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}}'
1647     run_dpp_config_connector(dev, apdev, payload=payload)
1648
1649 def test_dpp_config_connector_error_empty_groups(dev, apdev):
1650     """DPP Config Object connector error - empty groups"""
1651     payload = '{"groups":[],"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}}'
1652     run_dpp_config_connector(dev, apdev, payload=payload)
1653
1654 def test_dpp_config_connector_error_missing_group_id(dev, apdev):
1655     """DPP Config Object connector error - missing groupId"""
1656     payload = '{"groups":[{"netRole":"sta"}],"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}}'
1657     run_dpp_config_connector(dev, apdev, payload=payload)
1658
1659 def test_dpp_config_connector_error_missing_net_role(dev, apdev):
1660     """DPP Config Object connector error - missing netRole"""
1661     payload = '{"groups":[{"groupId":"*"}],"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}}'
1662     run_dpp_config_connector(dev, apdev, payload=payload)
1663
1664 def test_dpp_config_connector_error_missing_net_access_key(dev, apdev):
1665     """DPP Config Object connector error - missing netAccessKey"""
1666     payload = '{"groups":[{"groupId":"*","netRole":"sta"}]}'
1667     run_dpp_config_connector(dev, apdev, payload=payload)
1668
1669 def test_dpp_config_connector_error_net_access_key_mismatch(dev, apdev):
1670     """DPP Config Object connector error - netAccessKey mismatch"""
1671     payload = '{"groups":[{"groupId":"*","netRole":"sta"}],"netAccessKey":{"kty":"EC","crv":"P-256","x":"aTF4JEGIPKSZ0Xv9zdCMjm-tn5XpMsYIVZ9wySAz1gI","y":"QGcHWA_6rbU9XDXAztoX-M5Q3suTnMaqEhULtn7SSXw"}}'
1672     run_dpp_config_connector(dev, apdev, payload=payload,
1673                              skip_net_access_key_mismatch=False)
1674
1675 def test_dpp_gas_timeout(dev, apdev):
1676     """DPP and GAS server timeout for a query"""
1677     check_dpp_capab(dev[0])
1678     check_dpp_capab(dev[1])
1679     logger.info("dev0 displays QR Code")
1680     addr = dev[0].own_addr().replace(':', '')
1681     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
1682     res = dev[0].request(cmd)
1683     if "FAIL" in res:
1684         raise Exception("Failed to generate bootstrapping info")
1685     id0 = int(res)
1686     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
1687
1688     logger.info("dev1 scans QR Code")
1689     res = dev[1].request("DPP_QR_CODE " + uri0)
1690     if "FAIL" in res:
1691         raise Exception("Failed to parse QR Code URI")
1692     id1 = int(res)
1693
1694     logger.info("dev1 initiates DPP Authentication")
1695     dev[0].set("ext_mgmt_frame_handling", "1")
1696     cmd = "DPP_LISTEN 2412"
1697     if "OK" not in dev[0].request(cmd):
1698         raise Exception("Failed to start listen operation")
1699
1700     # Force GAS fragmentation
1701     conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}' + 3000*' '
1702     dev[1].set("dpp_config_obj_override", conf)
1703
1704     cmd = "DPP_AUTH_INIT peer=%d" % id1
1705     if "OK" not in dev[1].request(cmd):
1706         raise Exception("Failed to initiate DPP Authentication")
1707
1708     # DPP Authentication Request
1709     msg = dev[0].mgmt_rx()
1710     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))):
1711         raise Exception("MGMT_RX_PROCESS failed")
1712
1713     # DPP Authentication Confirmation
1714     msg = dev[0].mgmt_rx()
1715     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))):
1716         raise Exception("MGMT_RX_PROCESS failed")
1717
1718     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
1719     if ev is None:
1720         raise Exception("DPP authentication did not succeed (Responder)")
1721     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
1722     if ev is None:
1723         raise Exception("DPP authentication did not succeed (Initiator)")
1724
1725     # DPP Configuration Response (GAS Initial Response frame)
1726     msg = dev[0].mgmt_rx()
1727     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))):
1728         raise Exception("MGMT_RX_PROCESS failed")
1729
1730     # GAS Comeback Response frame
1731     msg = dev[0].mgmt_rx()
1732     # Do not continue to force timeout on GAS server
1733
1734     ev = dev[0].wait_event(["GAS-QUERY-DONE"], timeout=10)
1735     if ev is None:
1736         raise Exception("GAS result not reported (Enrollee)")
1737     if "result=TIMEOUT" not in ev:
1738         raise Exception("Unexpected GAS result (Enrollee): " + ev)
1739     dev[0].set("ext_mgmt_frame_handling", "0")
1740
1741     ev = dev[1].wait_event(["DPP-CONF-FAILED"], timeout=15)
1742     if ev is None:
1743         raise Exception("DPP configuration failure not reported (Configurator)")
1744
1745     ev = dev[0].wait_event(["DPP-CONF-FAILED"], timeout=1)
1746     if ev is None:
1747         raise Exception("DPP configuration failure not reported (Enrollee)")
1748
1749 def test_dpp_akm_sha256(dev, apdev):
1750     """DPP AKM (SHA256)"""
1751     run_dpp_akm(dev, apdev, 32)
1752
1753 def test_dpp_akm_sha384(dev, apdev):
1754     """DPP AKM (SHA384)"""
1755     run_dpp_akm(dev, apdev, 48)
1756
1757 def test_dpp_akm_sha512(dev, apdev):
1758     """DPP AKM (SHA512)"""
1759     run_dpp_akm(dev, apdev, 64)
1760
1761 def run_dpp_akm(dev, apdev, pmk_len):
1762     check_dpp_capab(dev[0])
1763     check_dpp_capab(dev[1])
1764     params = { "ssid": "dpp",
1765                "wpa": "2",
1766                "wpa_key_mgmt": "DPP",
1767                "rsn_pairwise": "CCMP",
1768                "ieee80211w": "2" }
1769     try:
1770         hapd = hostapd.add_ap(apdev[0], params)
1771     except:
1772         raise HwsimSkip("DPP not supported")
1773
1774     id = dev[0].connect("dpp", key_mgmt="DPP", ieee80211w="2", scan_freq="2412",
1775                         wait_connect=False)
1776     ev = dev[0].wait_event(["CTRL-EVENT-NETWORK-NOT-FOUND"], timeout=2)
1777     if not ev:
1778         raise Exception("Network mismatch not reported")
1779     dev[0].request("DISCONNECT")
1780     dev[0].dump_monitor()
1781
1782     bssid = hapd.own_addr()
1783     pmkid = 16*'11'
1784     akmp = 2**23
1785     pmk = pmk_len*'22'
1786     cmd = "PMKSA_ADD %d %s %s %s 30240 43200 %d 0" % (id, bssid, pmkid, pmk, akmp)
1787     if "OK" not in dev[0].request(cmd):
1788         raise Exception("PMKSA_ADD failed (wpa_supplicant)")
1789     dev[0].select_network(id, freq="2412")
1790     ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout=2)
1791     dev[0].request("DISCONNECT")
1792     dev[0].dump_monitor()
1793     if not ev:
1794         raise Exception("Association attempt was not rejected")
1795     if "status_code=53" not in ev:
1796         raise Exception("Unexpected status code: " + ev)
1797
1798     addr = dev[0].own_addr()
1799     cmd = "PMKSA_ADD %s %s %s 0 %d" % (addr, pmkid, pmk, akmp)
1800     if "OK" not in hapd.request(cmd):
1801         raise Exception("PMKSA_ADD failed (hostapd)")
1802
1803     dev[0].select_network(id, freq="2412")
1804     dev[0].wait_connected()
1805     val = dev[0].get_status_field("key_mgmt")
1806     if val != "DPP":
1807         raise Exception("Unexpected key_mgmt: " + val)
1808
1809 def test_dpp_network_introduction(dev, apdev):
1810     """DPP network introduction"""
1811     check_dpp_capab(dev[0])
1812     check_dpp_capab(dev[1])
1813
1814     csign = "3059301306072a8648ce3d020106082a8648ce3d03010703420004d02e5bd81a120762b5f0f2994777f5d40297238a6c294fd575cdf35fabec44c050a6421c401d98d659fd2ed13c961cc8287944dd3202f516977800d3ab2f39ee"
1815     ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIwOHF4TlNYRzRWemdCV3BjVUdNSmc1czNvbElOVFJsRVQ1aERpNkRKY3ZjIiwieSI6IlVhaGFYQXpKRVpRQk1YaHRUQnlZZVlrOWtJYjk5UDA3UV9NcW9TVVZTVEkifX0.a5_nfMVr7Qe1SW0ZL3u6oQRm5NUCYUSfixDAJOUFN3XUfECBZ6E8fm8xjeSfdOytgRidTz0CTlIRjzPQo82dmQ"
1816     ap_netaccesskey = "30770201010420f6531d17f29dfab655b7c9e923478d5a345164c489aadd44a3519c3e9dcc792da00a06082a8648ce3d030107a14403420004d3cab13525c6e15ce0056a5c506309839b37a2520d4d19444f98438ba0c972f751a85a5c0cc911940131786d4c1c9879893d9086fdf4fd3b43f32aa125154932"
1817     sta_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoiZWMzR3NqQ3lQMzVBUUZOQUJJdEltQnN4WXVyMGJZX1dES1lfSE9zUGdjNCIsInkiOiJTRS1HVllkdWVnTFhLMU1TQXZNMEx2QWdLREpTNWoyQVhCbE9PMTdUSTRBIn19.PDK9zsGlK-e1pEOmNxVeJfCS8pNeay6ckIS1TXCQsR64AR-9wFPCNVjqOxWvVKltehyMFqVAtOcv0IrjtMJFqQ"
1818     sta_netaccesskey = "30770201010420bc33380c26fd2168b69cd8242ed1df07ba89aa4813f8d4e8523de6ca3f8dd28ba00a06082a8648ce3d030107a1440342000479cdc6b230b23f7e40405340048b48981b3162eaf46d8fd60ca63f1ceb0f81ce484f8655876e7a02d72b531202f3342ef020283252e63d805c194e3b5ed32380"
1819
1820     params = { "ssid": "dpp",
1821                "wpa": "2",
1822                "wpa_key_mgmt": "DPP",
1823                "ieee80211w": "2",
1824                "rsn_pairwise": "CCMP",
1825                "dpp_connector": ap_connector,
1826                "dpp_csign": csign,
1827                "dpp_netaccesskey": ap_netaccesskey }
1828     try:
1829         hapd = hostapd.add_ap(apdev[0], params)
1830     except:
1831         raise HwsimSkip("DPP not supported")
1832
1833     id = dev[0].connect("dpp", key_mgmt="DPP", scan_freq="2412",
1834                         ieee80211w="2",
1835                         dpp_csign=csign,
1836                         dpp_connector=sta_connector,
1837                         dpp_netaccesskey=sta_netaccesskey)
1838     val = dev[0].get_status_field("key_mgmt")
1839     if val != "DPP":
1840         raise Exception("Unexpected key_mgmt: " + val)
1841
1842 def test_dpp_and_sae_akm(dev, apdev):
1843     """DPP and SAE AKMs"""
1844     check_dpp_capab(dev[0])
1845     check_dpp_capab(dev[1])
1846     if "SAE" not in dev[1].get_capability("auth_alg"):
1847         raise HwsimSkip("SAE not supported")
1848
1849     csign = "3059301306072a8648ce3d020106082a8648ce3d03010703420004d02e5bd81a120762b5f0f2994777f5d40297238a6c294fd575cdf35fabec44c050a6421c401d98d659fd2ed13c961cc8287944dd3202f516977800d3ab2f39ee"
1850     ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIwOHF4TlNYRzRWemdCV3BjVUdNSmc1czNvbElOVFJsRVQ1aERpNkRKY3ZjIiwieSI6IlVhaGFYQXpKRVpRQk1YaHRUQnlZZVlrOWtJYjk5UDA3UV9NcW9TVVZTVEkifX0.a5_nfMVr7Qe1SW0ZL3u6oQRm5NUCYUSfixDAJOUFN3XUfECBZ6E8fm8xjeSfdOytgRidTz0CTlIRjzPQo82dmQ"
1851     ap_netaccesskey = "30770201010420f6531d17f29dfab655b7c9e923478d5a345164c489aadd44a3519c3e9dcc792da00a06082a8648ce3d030107a14403420004d3cab13525c6e15ce0056a5c506309839b37a2520d4d19444f98438ba0c972f751a85a5c0cc911940131786d4c1c9879893d9086fdf4fd3b43f32aa125154932"
1852     sta_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoiZWMzR3NqQ3lQMzVBUUZOQUJJdEltQnN4WXVyMGJZX1dES1lfSE9zUGdjNCIsInkiOiJTRS1HVllkdWVnTFhLMU1TQXZNMEx2QWdLREpTNWoyQVhCbE9PMTdUSTRBIn19.PDK9zsGlK-e1pEOmNxVeJfCS8pNeay6ckIS1TXCQsR64AR-9wFPCNVjqOxWvVKltehyMFqVAtOcv0IrjtMJFqQ"
1853     sta_netaccesskey = "30770201010420bc33380c26fd2168b69cd8242ed1df07ba89aa4813f8d4e8523de6ca3f8dd28ba00a06082a8648ce3d030107a1440342000479cdc6b230b23f7e40405340048b48981b3162eaf46d8fd60ca63f1ceb0f81ce484f8655876e7a02d72b531202f3342ef020283252e63d805c194e3b5ed32380"
1854
1855     params = { "ssid": "dpp+sae",
1856                "wpa": "2",
1857                "wpa_key_mgmt": "DPP SAE",
1858                "ieee80211w": "2",
1859                "rsn_pairwise": "CCMP",
1860                "sae_password": "sae-password",
1861                "dpp_connector": ap_connector,
1862                "dpp_csign": csign,
1863                "dpp_netaccesskey": ap_netaccesskey }
1864     try:
1865         hapd = hostapd.add_ap(apdev[0], params)
1866     except:
1867         raise HwsimSkip("DPP not supported")
1868
1869     id = dev[0].connect("dpp+sae", key_mgmt="DPP", scan_freq="2412",
1870                         ieee80211w="2",
1871                         dpp_csign=csign,
1872                         dpp_connector=sta_connector,
1873                         dpp_netaccesskey=sta_netaccesskey)
1874     val = dev[0].get_status_field("key_mgmt")
1875     if val != "DPP":
1876         raise Exception("Unexpected key_mgmt for DPP: " + val)
1877
1878     id = dev[1].connect("dpp+sae", key_mgmt="SAE", scan_freq="2412",
1879                         ieee80211w="2", psk="sae-password")
1880     val = dev[1].get_status_field("key_mgmt")
1881     if val != "SAE":
1882         raise Exception("Unexpected key_mgmt for SAE: " + val)
1883
1884 def test_dpp_ap_config(dev, apdev):
1885     """DPP and AP configuration"""
1886     run_dpp_ap_config(dev, apdev)
1887
1888 def test_dpp_ap_config_p256_p256(dev, apdev):
1889     """DPP and AP configuration (P-256 + P-256)"""
1890     run_dpp_ap_config(dev, apdev, curve="P-256", conf_curve="P-256")
1891
1892 def test_dpp_ap_config_p256_p384(dev, apdev):
1893     """DPP and AP configuration (P-256 + P-384)"""
1894     run_dpp_ap_config(dev, apdev, curve="P-256", conf_curve="P-384")
1895
1896 def test_dpp_ap_config_p256_p521(dev, apdev):
1897     """DPP and AP configuration (P-256 + P-521)"""
1898     run_dpp_ap_config(dev, apdev, curve="P-256", conf_curve="P-521")
1899
1900 def test_dpp_ap_config_p384_p256(dev, apdev):
1901     """DPP and AP configuration (P-384 + P-256)"""
1902     run_dpp_ap_config(dev, apdev, curve="P-384", conf_curve="P-256")
1903
1904 def test_dpp_ap_config_p384_p384(dev, apdev):
1905     """DPP and AP configuration (P-384 + P-384)"""
1906     run_dpp_ap_config(dev, apdev, curve="P-384", conf_curve="P-384")
1907
1908 def test_dpp_ap_config_p384_p521(dev, apdev):
1909     """DPP and AP configuration (P-384 + P-521)"""
1910     run_dpp_ap_config(dev, apdev, curve="P-384", conf_curve="P-521")
1911
1912 def test_dpp_ap_config_p521_p256(dev, apdev):
1913     """DPP and AP configuration (P-521 + P-256)"""
1914     run_dpp_ap_config(dev, apdev, curve="P-521", conf_curve="P-256")
1915
1916 def test_dpp_ap_config_p521_p384(dev, apdev):
1917     """DPP and AP configuration (P-521 + P-384)"""
1918     run_dpp_ap_config(dev, apdev, curve="P-521", conf_curve="P-384")
1919
1920 def test_dpp_ap_config_p521_p521(dev, apdev):
1921     """DPP and AP configuration (P-521 + P-521)"""
1922     run_dpp_ap_config(dev, apdev, curve="P-521", conf_curve="P-521")
1923
1924 def test_dpp_ap_config_reconfig_configurator(dev, apdev):
1925     """DPP and AP configuration with Configurator reconfiguration"""
1926     run_dpp_ap_config(dev, apdev, reconf_configurator=True)
1927
1928 def update_hapd_config(hapd):
1929     ev = hapd.wait_event(["DPP-CONFOBJ-SSID"], timeout=1)
1930     if ev is None:
1931         raise Exception("SSID not reported (AP)")
1932     ssid = ev.split(' ')[1]
1933
1934     ev = hapd.wait_event(["DPP-CONNECTOR"], timeout=1)
1935     if ev is None:
1936         raise Exception("Connector not reported (AP)")
1937     connector = ev.split(' ')[1]
1938
1939     ev = hapd.wait_event(["DPP-C-SIGN-KEY"], timeout=1)
1940     if ev is None:
1941         raise Exception("C-sign-key not reported (AP)")
1942     p = ev.split(' ')
1943     csign = p[1]
1944
1945     ev = hapd.wait_event(["DPP-NET-ACCESS-KEY"], timeout=1)
1946     if ev is None:
1947         raise Exception("netAccessKey not reported (AP)")
1948     p = ev.split(' ')
1949     net_access_key = p[1]
1950     net_access_key_expiry = p[2] if len(p) > 2 else None
1951
1952     logger.info("Update AP configuration to use key_mgmt=DPP")
1953     hapd.disable()
1954     hapd.set("ssid", ssid)
1955     hapd.set("wpa", "2")
1956     hapd.set("wpa_key_mgmt", "DPP")
1957     hapd.set("ieee80211w", "2")
1958     hapd.set("rsn_pairwise", "CCMP")
1959     hapd.set("dpp_connector", connector)
1960     hapd.set("dpp_csign", csign)
1961     hapd.set("dpp_netaccesskey", net_access_key)
1962     if net_access_key_expiry:
1963         hapd.set("dpp_netaccesskey_expiry", net_access_key_expiry)
1964     hapd.enable()
1965
1966 def run_dpp_ap_config(dev, apdev, curve=None, conf_curve=None,
1967                       reconf_configurator=False):
1968     check_dpp_capab(dev[0])
1969     check_dpp_capab(dev[1])
1970     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
1971     check_dpp_capab(hapd)
1972
1973     addr = hapd.own_addr().replace(':', '')
1974     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
1975     if curve:
1976         cmd += " curve=" + curve
1977     res = hapd.request(cmd)
1978     if "FAIL" in res:
1979         raise Exception("Failed to generate bootstrapping info")
1980     id_h = int(res)
1981     uri = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id_h)
1982
1983     cmd = "DPP_CONFIGURATOR_ADD"
1984     if conf_curve:
1985         cmd += " curve=" + conf_curve
1986     res = dev[0].request(cmd);
1987     if "FAIL" in res:
1988         raise Exception("Failed to add configurator")
1989     conf_id = int(res)
1990
1991     if reconf_configurator:
1992         csign = dev[0].request("DPP_CONFIGURATOR_GET_KEY %d" % conf_id)
1993         if "FAIL" in csign or len(csign) == 0:
1994             raise Exception("DPP_CONFIGURATOR_GET_KEY failed")
1995
1996     res = dev[0].request("DPP_QR_CODE " + uri)
1997     if "FAIL" in res:
1998         raise Exception("Failed to parse QR Code URI")
1999     id = int(res)
2000
2001     cmd = "DPP_AUTH_INIT peer=%d conf=ap-dpp configurator=%d" % (id, conf_id)
2002     if "OK" not in dev[0].request(cmd):
2003         raise Exception("Failed to initiate DPP Authentication")
2004     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2005     if ev is None:
2006         raise Exception("DPP authentication did not succeed (Responder)")
2007     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2008     if ev is None:
2009         raise Exception("DPP authentication did not succeed (Initiator)")
2010     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
2011     if ev is None:
2012         raise Exception("DPP configuration not completed (Configurator)")
2013     ev = hapd.wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5)
2014     if ev is None:
2015         raise Exception("DPP configuration not completed (Enrollee)")
2016     if "DPP-CONF-FAILED" in ev:
2017         raise Exception("DPP configuration failed")
2018
2019     update_hapd_config(hapd)
2020
2021     addr = dev[1].own_addr().replace(':', '')
2022     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
2023     if curve:
2024         cmd += " curve=" + curve
2025     res = dev[1].request(cmd)
2026     if "FAIL" in res:
2027         raise Exception("Failed to generate bootstrapping info")
2028     id1 = int(res)
2029     uri1 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1)
2030
2031     res = dev[0].request("DPP_QR_CODE " + uri1)
2032     if "FAIL" in res:
2033         raise Exception("Failed to parse QR Code URI")
2034     id0b = int(res)
2035
2036     if reconf_configurator:
2037         res = dev[0].request("DPP_CONFIGURATOR_REMOVE %d" % conf_id)
2038         if "OK" not in res:
2039             raise Exception("DPP_CONFIGURATOR_REMOVE failed")
2040         cmd = "DPP_CONFIGURATOR_ADD"
2041         if conf_curve:
2042             cmd += " curve=" + conf_curve
2043         cmd += " key=" + csign
2044         res = dev[0].request(cmd);
2045         if "FAIL" in res:
2046             raise Exception("Failed to add configurator (reconf)")
2047         conf_id = int(res)
2048
2049     cmd = "DPP_LISTEN 2412"
2050     if "OK" not in dev[1].request(cmd):
2051         raise Exception("Failed to start listen operation")
2052     cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id0b, conf_id)
2053     if "OK" not in dev[0].request(cmd):
2054         raise Exception("Failed to initiate DPP Authentication")
2055     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2056     if ev is None:
2057         raise Exception("DPP authentication did not succeed (Responder)")
2058     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2059     if ev is None:
2060         raise Exception("DPP authentication did not succeed (Initiator)")
2061     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
2062     if ev is None:
2063         raise Exception("DPP configuration not completed (Configurator)")
2064     ev = dev[1].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
2065     if ev is None:
2066         raise Exception("DPP configuration not completed (Enrollee)")
2067     dev[1].request("DPP_STOP_LISTEN")
2068
2069     ev = dev[1].wait_event(["DPP-CONFOBJ-SSID"], timeout=1)
2070     if ev is None:
2071         raise Exception("SSID not reported")
2072     ssid = ev.split(' ')[1]
2073
2074     ev = dev[1].wait_event(["DPP-CONNECTOR"], timeout=1)
2075     if ev is None:
2076         raise Exception("Connector not reported")
2077     connector = ev.split(' ')[1]
2078
2079     ev = dev[1].wait_event(["DPP-C-SIGN-KEY"], timeout=1)
2080     if ev is None:
2081         raise Exception("C-sign-key not reported")
2082     p = ev.split(' ')
2083     csign = p[1]
2084
2085     ev = dev[1].wait_event(["DPP-NET-ACCESS-KEY"], timeout=1)
2086     if ev is None:
2087         raise Exception("netAccessKey not reported")
2088     p = ev.split(' ')
2089     net_access_key = p[1]
2090     net_access_key_expiry = p[2] if len(p) > 2 else None
2091
2092     dev[1].dump_monitor()
2093
2094     id = dev[1].connect(ssid, key_mgmt="DPP", ieee80211w="2", scan_freq="2412",
2095                         only_add_network=True)
2096     dev[1].set_network_quoted(id, "dpp_connector", connector)
2097     dev[1].set_network(id, "dpp_csign", csign)
2098     dev[1].set_network(id, "dpp_netaccesskey", net_access_key)
2099     if net_access_key_expiry:
2100         dev[1].set_network(id, "dpp_netaccess_expiry", net_access_key_expiry)
2101
2102     logger.info("Check data connection")
2103     dev[1].select_network(id, freq="2412")
2104     dev[1].wait_connected()
2105
2106 def test_dpp_auto_connect_1(dev, apdev):
2107     """DPP and auto connect (1)"""
2108     try:
2109         run_dpp_auto_connect(dev, apdev, 1)
2110     finally:
2111         dev[0].set("dpp_config_processing", "0")
2112
2113 def test_dpp_auto_connect_2(dev, apdev):
2114     """DPP and auto connect (2)"""
2115     try:
2116         run_dpp_auto_connect(dev, apdev, 2)
2117     finally:
2118         dev[0].set("dpp_config_processing", "0")
2119
2120 def test_dpp_auto_connect_2_connect_cmd(dev, apdev):
2121     """DPP and auto connect (2) using connect_cmd"""
2122     wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
2123     wpas.interface_add("wlan5", drv_params="force_connect_cmd=1")
2124     dev_new = [ wpas, dev[1] ]
2125     try:
2126         run_dpp_auto_connect(dev_new, apdev, 2)
2127     finally:
2128         wpas.set("dpp_config_processing", "0")
2129
2130 def run_dpp_auto_connect(dev, apdev, processing):
2131     check_dpp_capab(dev[0])
2132     check_dpp_capab(dev[1])
2133
2134     csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
2135     csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708"
2136     ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg"
2137     ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b"
2138
2139     params = { "ssid": "test",
2140                "wpa": "2",
2141                "wpa_key_mgmt": "DPP",
2142                "ieee80211w": "2",
2143                "rsn_pairwise": "CCMP",
2144                "dpp_connector": ap_connector,
2145                "dpp_csign": csign_pub,
2146                "dpp_netaccesskey": ap_netaccesskey }
2147     try:
2148         hapd = hostapd.add_ap(apdev[0], params)
2149     except:
2150         raise HwsimSkip("DPP not supported")
2151
2152     cmd = "DPP_CONFIGURATOR_ADD key=" + csign
2153     res = dev[1].request(cmd)
2154     if "FAIL" in res:
2155         raise Exception("DPP_CONFIGURATOR_ADD failed")
2156     conf_id = int(res)
2157
2158     dev[0].set("dpp_config_processing", str(processing))
2159     addr = dev[0].own_addr().replace(':', '')
2160     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
2161     res = dev[0].request(cmd)
2162     if "FAIL" in res:
2163         raise Exception("Failed to generate bootstrapping info")
2164     id0 = int(res)
2165     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2166
2167     res = dev[1].request("DPP_QR_CODE " + uri0)
2168     if "FAIL" in res:
2169         raise Exception("Failed to parse QR Code URI")
2170     id1 = int(res)
2171
2172     cmd = "DPP_LISTEN 2412"
2173     if "OK" not in dev[0].request(cmd):
2174         raise Exception("Failed to start listen operation")
2175
2176     cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id1, conf_id)
2177     if "OK" not in dev[1].request(cmd):
2178         raise Exception("Failed to initiate DPP Authentication")
2179     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=10)
2180     if ev is None:
2181         raise Exception("DPP configuration not completed (Configurator)")
2182     ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=2)
2183     if ev is None:
2184         raise Exception("DPP configuration not completed (Enrollee)")
2185     ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
2186     if ev is None:
2187         raise Exception("DPP network profile not generated")
2188     id = ev.split(' ')[1]
2189
2190     if processing == 1:
2191         dev[0].select_network(id, freq=2412)
2192
2193     dev[0].wait_connected()
2194     hwsim_utils.test_connectivity(dev[0], hapd)
2195
2196 def test_dpp_auto_connect_legacy(dev, apdev):
2197     """DPP and auto connect (legacy)"""
2198     try:
2199         run_dpp_auto_connect_legacy(dev, apdev)
2200     finally:
2201         dev[0].set("dpp_config_processing", "0")
2202
2203 def test_dpp_auto_connect_legacy_sae_1(dev, apdev):
2204     """DPP and auto connect (legacy SAE)"""
2205     try:
2206         run_dpp_auto_connect_legacy(dev, apdev, conf='sta-sae', psk_sae=True)
2207     finally:
2208         dev[0].set("dpp_config_processing", "0")
2209
2210 def test_dpp_auto_connect_legacy_sae_2(dev, apdev):
2211     """DPP and auto connect (legacy SAE)"""
2212     try:
2213         run_dpp_auto_connect_legacy(dev, apdev, conf='sta-sae', sae_only=True)
2214     finally:
2215         dev[0].set("dpp_config_processing", "0")
2216
2217 def test_dpp_auto_connect_legacy_psk_sae_1(dev, apdev):
2218     """DPP and auto connect (legacy PSK+SAE)"""
2219     try:
2220         run_dpp_auto_connect_legacy(dev, apdev, conf='sta-psk-sae',
2221                                     psk_sae=True)
2222     finally:
2223         dev[0].set("dpp_config_processing", "0")
2224
2225 def test_dpp_auto_connect_legacy_psk_sae_2(dev, apdev):
2226     """DPP and auto connect (legacy PSK+SAE)"""
2227     try:
2228         run_dpp_auto_connect_legacy(dev, apdev, conf='sta-psk-sae',
2229                                     sae_only=True)
2230     finally:
2231         dev[0].set("dpp_config_processing", "0")
2232
2233 def test_dpp_auto_connect_legacy_psk_sae_3(dev, apdev):
2234     """DPP and auto connect (legacy PSK+SAE)"""
2235     try:
2236         run_dpp_auto_connect_legacy(dev, apdev, conf='sta-psk-sae')
2237     finally:
2238         dev[0].set("dpp_config_processing", "0")
2239
2240 def run_dpp_auto_connect_legacy(dev, apdev, conf='sta-psk',
2241                                 psk_sae=False, sae_only=False):
2242     check_dpp_capab(dev[0])
2243     check_dpp_capab(dev[1])
2244
2245     params = hostapd.wpa2_params(ssid="dpp-legacy",
2246                                  passphrase="secret passphrase")
2247     if sae_only:
2248             params['wpa_key_mgmt'] = 'SAE'
2249             params['ieee80211w'] = '2'
2250     elif psk_sae:
2251             params['wpa_key_mgmt'] = 'WPA-PSK SAE'
2252             params['ieee80211w'] = '1'
2253             params['sae_require_mfp'] = '1'
2254
2255     hapd = hostapd.add_ap(apdev[0], params)
2256
2257     dev[0].set("dpp_config_processing", "2")
2258     addr = dev[0].own_addr().replace(':', '')
2259     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
2260     res = dev[0].request(cmd)
2261     if "FAIL" in res:
2262         raise Exception("Failed to generate bootstrapping info")
2263     id0 = int(res)
2264     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2265
2266     res = dev[1].request("DPP_QR_CODE " + uri0)
2267     if "FAIL" in res:
2268         raise Exception("Failed to parse QR Code URI")
2269     id1 = int(res)
2270
2271     cmd = "DPP_LISTEN 2412"
2272     if "OK" not in dev[0].request(cmd):
2273         raise Exception("Failed to start listen operation")
2274
2275     cmd = "DPP_AUTH_INIT peer=%d conf=%s ssid=%s pass=%s" % (id1, conf, "dpp-legacy".encode("hex"), "secret passphrase".encode("hex"))
2276     if "OK" not in dev[1].request(cmd):
2277         raise Exception("Failed to initiate DPP Authentication")
2278     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=10)
2279     if ev is None:
2280         raise Exception("DPP configuration not completed (Configurator)")
2281     ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=2)
2282     if ev is None:
2283         raise Exception("DPP configuration not completed (Enrollee)")
2284     ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
2285     if ev is None:
2286         raise Exception("DPP network profile not generated")
2287     id = ev.split(' ')[1]
2288
2289     dev[0].wait_connected()
2290
2291 def test_dpp_auto_connect_legacy_pmf_required(dev, apdev):
2292     """DPP and auto connect (legacy, PMF required)"""
2293     try:
2294         run_dpp_auto_connect_legacy_pmf_required(dev, apdev)
2295     finally:
2296         dev[0].set("dpp_config_processing", "0")
2297
2298 def run_dpp_auto_connect_legacy_pmf_required(dev, apdev):
2299     check_dpp_capab(dev[0])
2300     check_dpp_capab(dev[1])
2301
2302     params = hostapd.wpa2_params(ssid="dpp-legacy",
2303                                  passphrase="secret passphrase")
2304     params['wpa_key_mgmt'] = "WPA-PSK-SHA256"
2305     params['ieee80211w'] = "2"
2306     hapd = hostapd.add_ap(apdev[0], params)
2307
2308     dev[0].set("dpp_config_processing", "2")
2309     addr = dev[0].own_addr().replace(':', '')
2310     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
2311     res = dev[0].request(cmd)
2312     if "FAIL" in res:
2313         raise Exception("Failed to generate bootstrapping info")
2314     id0 = int(res)
2315     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2316
2317     res = dev[1].request("DPP_QR_CODE " + uri0)
2318     if "FAIL" in res:
2319         raise Exception("Failed to parse QR Code URI")
2320     id1 = int(res)
2321
2322     cmd = "DPP_LISTEN 2412"
2323     if "OK" not in dev[0].request(cmd):
2324         raise Exception("Failed to start listen operation")
2325
2326     cmd = "DPP_AUTH_INIT peer=%d conf=sta-psk ssid=%s pass=%s" % (id1, "dpp-legacy".encode("hex"), "secret passphrase".encode("hex"))
2327     if "OK" not in dev[1].request(cmd):
2328         raise Exception("Failed to initiate DPP Authentication")
2329     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=10)
2330     if ev is None:
2331         raise Exception("DPP configuration not completed (Configurator)")
2332     ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=2)
2333     if ev is None:
2334         raise Exception("DPP configuration not completed (Enrollee)")
2335     ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
2336     if ev is None:
2337         raise Exception("DPP network profile not generated")
2338     id = ev.split(' ')[1]
2339
2340     dev[0].wait_connected()
2341
2342 def test_dpp_qr_code_auth_responder_configurator(dev, apdev):
2343     """DPP QR Code and responder as the configurator"""
2344     run_dpp_qr_code_auth_responder_configurator(dev, apdev, "")
2345
2346 def test_dpp_qr_code_auth_responder_configurator_group_id(dev, apdev):
2347     """DPP QR Code and responder as the configurator with group_id)"""
2348     run_dpp_qr_code_auth_responder_configurator(dev, apdev,
2349                                                 " group_id=test-group")
2350
2351 def run_dpp_qr_code_auth_responder_configurator(dev, apdev, extra):
2352     check_dpp_capab(dev[0])
2353     check_dpp_capab(dev[1])
2354     cmd = "DPP_CONFIGURATOR_ADD"
2355     res = dev[0].request(cmd);
2356     if "FAIL" in res:
2357         raise Exception("Failed to add configurator")
2358     conf_id = int(res)
2359
2360     addr = dev[0].own_addr().replace(':', '')
2361     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
2362     res = dev[0].request(cmd)
2363     if "FAIL" in res:
2364         raise Exception("Failed to generate bootstrapping info")
2365     id0 = int(res)
2366     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2367
2368     res = dev[1].request("DPP_QR_CODE " + uri0)
2369     if "FAIL" in res:
2370         raise Exception("Failed to parse QR Code URI")
2371     id1 = int(res)
2372
2373     dev[0].set("dpp_configurator_params",
2374                " conf=sta-dpp configurator=%d%s" % (conf_id, extra));
2375     cmd = "DPP_LISTEN 2412 role=configurator"
2376     if "OK" not in dev[0].request(cmd):
2377         raise Exception("Failed to start listen operation")
2378     cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1
2379     if "OK" not in dev[1].request(cmd):
2380         raise Exception("Failed to initiate DPP Authentication")
2381     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2382     if ev is None:
2383         raise Exception("DPP authentication did not succeed (Responder)")
2384     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2385     if ev is None:
2386         raise Exception("DPP authentication did not succeed (Initiator)")
2387     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
2388     if ev is None:
2389         raise Exception("DPP configuration not completed (Configurator)")
2390     ev = dev[1].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
2391     if ev is None:
2392         raise Exception("DPP configuration not completed (Enrollee)")
2393     dev[0].request("DPP_STOP_LISTEN")
2394     dev[0].dump_monitor()
2395     dev[1].dump_monitor()
2396
2397 def test_dpp_qr_code_hostapd_init(dev, apdev):
2398     """DPP QR Code and hostapd as initiator"""
2399     check_dpp_capab(dev[0])
2400     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured",
2401                                       "channel": "6" })
2402     check_dpp_capab(hapd)
2403
2404     cmd = "DPP_CONFIGURATOR_ADD"
2405     res = dev[0].request(cmd);
2406     if "FAIL" in res:
2407         raise Exception("Failed to add configurator")
2408     conf_id = int(res)
2409
2410     addr = dev[0].own_addr().replace(':', '')
2411     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr
2412     res = dev[0].request(cmd)
2413     if "FAIL" in res:
2414         raise Exception("Failed to generate bootstrapping info")
2415     id0 = int(res)
2416     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2417
2418     dev[0].set("dpp_configurator_params",
2419                " conf=ap-dpp configurator=%d" % conf_id);
2420     cmd = "DPP_LISTEN 2437 role=configurator"
2421     if "OK" not in dev[0].request(cmd):
2422         raise Exception("Failed to start listen operation")
2423
2424     res = hapd.request("DPP_QR_CODE " + uri0)
2425     if "FAIL" in res:
2426         raise Exception("Failed to parse QR Code URI")
2427     id1 = int(res)
2428
2429     cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1
2430     if "OK" not in hapd.request(cmd):
2431         raise Exception("Failed to initiate DPP Authentication")
2432     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2433     if ev is None:
2434         raise Exception("DPP authentication did not succeed (Responder)")
2435     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2436     if ev is None:
2437         raise Exception("DPP authentication did not succeed (Initiator)")
2438     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
2439     if ev is None:
2440         raise Exception("DPP configuration not completed (Configurator)")
2441     ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
2442     if ev is None:
2443         raise Exception("DPP configuration not completed (Enrollee)")
2444     dev[0].request("DPP_STOP_LISTEN")
2445     dev[0].dump_monitor()
2446
2447 def test_dpp_qr_code_hostapd_init_offchannel(dev, apdev):
2448     """DPP QR Code and hostapd as initiator (offchannel)"""
2449     run_dpp_qr_code_hostapd_init_offchannel(dev, apdev, None)
2450
2451 def test_dpp_qr_code_hostapd_init_offchannel_neg_freq(dev, apdev):
2452     """DPP QR Code and hostapd as initiator (offchannel, neg_freq)"""
2453     run_dpp_qr_code_hostapd_init_offchannel(dev, apdev, "neg_freq=2437")
2454
2455 def run_dpp_qr_code_hostapd_init_offchannel(dev, apdev, extra):
2456     check_dpp_capab(dev[0])
2457     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured",
2458                                       "channel": "6" })
2459     check_dpp_capab(hapd)
2460
2461     cmd = "DPP_CONFIGURATOR_ADD"
2462     res = dev[0].request(cmd);
2463     if "FAIL" in res:
2464         raise Exception("Failed to add configurator")
2465     conf_id = int(res)
2466
2467     addr = dev[0].own_addr().replace(':', '')
2468     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1,81/11 mac=" + addr
2469     res = dev[0].request(cmd)
2470     if "FAIL" in res:
2471         raise Exception("Failed to generate bootstrapping info")
2472     id0 = int(res)
2473     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2474
2475     dev[0].set("dpp_configurator_params",
2476                " conf=ap-dpp configurator=%d" % conf_id);
2477     cmd = "DPP_LISTEN 2462 role=configurator"
2478     if "OK" not in dev[0].request(cmd):
2479         raise Exception("Failed to start listen operation")
2480
2481     res = hapd.request("DPP_QR_CODE " + uri0)
2482     if "FAIL" in res:
2483         raise Exception("Failed to parse QR Code URI")
2484     id1 = int(res)
2485
2486     cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1
2487     if extra:
2488         cmd += " " + extra
2489     if "OK" not in hapd.request(cmd):
2490         raise Exception("Failed to initiate DPP Authentication")
2491     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2492     if ev is None:
2493         raise Exception("DPP authentication did not succeed (Responder)")
2494     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2495     if ev is None:
2496         raise Exception("DPP authentication did not succeed (Initiator)")
2497     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
2498     if ev is None:
2499         raise Exception("DPP configuration not completed (Configurator)")
2500     ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
2501     if ev is None:
2502         raise Exception("DPP configuration not completed (Enrollee)")
2503     dev[0].request("DPP_STOP_LISTEN")
2504     dev[0].dump_monitor()
2505
2506 def test_dpp_test_vector_p_256(dev, apdev):
2507     """DPP P-256 test vector (mutual auth)"""
2508     check_dpp_capab(dev[0])
2509     check_dpp_capab(dev[1])
2510
2511     # Responder bootstrapping key
2512     priv = "54ce181a98525f217216f59b245f60e9df30ac7f6b26c939418cfc3c42d1afa0"
2513     addr = dev[0].own_addr().replace(':', '')
2514     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/11 mac=" + addr + " key=30310201010420" + priv + "a00a06082a8648ce3d030107"
2515     res = dev[0].request(cmd)
2516     if "FAIL" in res:
2517         raise Exception("Failed to generate bootstrapping info")
2518     id0 = int(res)
2519     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2520
2521     # Responder protocol keypair override
2522     priv = "f798ed2e19286f6a6efe210b1863badb99af2a14b497634dbfd2a97394fb5aa5"
2523     dev[0].set("dpp_protocol_key_override",
2524                "30310201010420" + priv + "a00a06082a8648ce3d030107")
2525
2526     dev[0].set("dpp_nonce_override", "3d0cfb011ca916d796f7029ff0b43393")
2527
2528     # Initiator bootstrapping key
2529     priv = "15b2a83c5a0a38b61f2aa8200ee4994b8afdc01c58507d10d0a38f7eedf051bb"
2530     cmd = "DPP_BOOTSTRAP_GEN type=qrcode key=30310201010420" + priv + "a00a06082a8648ce3d030107"
2531     res = dev[1].request(cmd)
2532     if "FAIL" in res:
2533         raise Exception("Failed to generate bootstrapping info")
2534     id1 = int(res)
2535     uri1 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1)
2536
2537     # Initiator protocol keypair override
2538     priv = "a87de9afbb406c96e5f79a3df895ecac3ad406f95da66314c8cb3165e0c61783"
2539     dev[1].set("dpp_protocol_key_override",
2540                "30310201010420" + priv + "a00a06082a8648ce3d030107")
2541
2542     dev[1].set("dpp_nonce_override", "13f4602a16daeb69712263b9c46cba31")
2543
2544     res = dev[1].request("DPP_QR_CODE " + uri0)
2545     if "FAIL" in res:
2546         raise Exception("Failed to parse QR Code URI")
2547     id1peer = int(res)
2548
2549     res = dev[0].request("DPP_QR_CODE " + uri1)
2550     if "FAIL" in res:
2551         raise Exception("Failed to parse QR Code URI")
2552     id0peer = int(res)
2553
2554     cmd = "DPP_LISTEN 2462 qr=mutual"
2555     if "OK" not in dev[0].request(cmd):
2556         raise Exception("Failed to start listen operation")
2557
2558     cmd = "DPP_AUTH_INIT peer=%d own=%d neg_freq=2412" % (id1peer, id1)
2559     if "OK" not in dev[1].request(cmd):
2560         raise Exception("Failed to initiate operation")
2561
2562     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2563     if ev is None:
2564         raise Exception("DPP authentication did not succeed (Initiator)")
2565     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2566     if ev is None:
2567         raise Exception("DPP authentication did not succeed (Responder)")
2568
2569 def test_dpp_test_vector_p_256_b(dev, apdev):
2570     """DPP P-256 test vector (Responder-only auth)"""
2571     check_dpp_capab(dev[0])
2572     check_dpp_capab(dev[1])
2573
2574     # Responder bootstrapping key
2575     priv = "54ce181a98525f217216f59b245f60e9df30ac7f6b26c939418cfc3c42d1afa0"
2576     addr = dev[0].own_addr().replace(':', '')
2577     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/11 mac=" + addr + " key=30310201010420" + priv + "a00a06082a8648ce3d030107"
2578     res = dev[0].request(cmd)
2579     if "FAIL" in res:
2580         raise Exception("Failed to generate bootstrapping info")
2581     id0 = int(res)
2582     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2583
2584     # Responder protocol keypair override
2585     priv = "f798ed2e19286f6a6efe210b1863badb99af2a14b497634dbfd2a97394fb5aa5"
2586     dev[0].set("dpp_protocol_key_override",
2587                "30310201010420" + priv + "a00a06082a8648ce3d030107")
2588
2589     dev[0].set("dpp_nonce_override", "3d0cfb011ca916d796f7029ff0b43393")
2590
2591     # Initiator bootstrapping key
2592     priv = "15b2a83c5a0a38b61f2aa8200ee4994b8afdc01c58507d10d0a38f7eedf051bb"
2593     cmd = "DPP_BOOTSTRAP_GEN type=qrcode key=30310201010420" + priv + "a00a06082a8648ce3d030107"
2594     res = dev[1].request(cmd)
2595     if "FAIL" in res:
2596         raise Exception("Failed to generate bootstrapping info")
2597     id1 = int(res)
2598     uri1 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1)
2599
2600     # Initiator protocol keypair override
2601     priv = "a87de9afbb406c96e5f79a3df895ecac3ad406f95da66314c8cb3165e0c61783"
2602     dev[1].set("dpp_protocol_key_override",
2603                "30310201010420" + priv + "a00a06082a8648ce3d030107")
2604
2605     dev[1].set("dpp_nonce_override", "13f4602a16daeb69712263b9c46cba31")
2606
2607     res = dev[1].request("DPP_QR_CODE " + uri0)
2608     if "FAIL" in res:
2609         raise Exception("Failed to parse QR Code URI")
2610     id1peer = int(res)
2611
2612     cmd = "DPP_LISTEN 2462"
2613     if "OK" not in dev[0].request(cmd):
2614         raise Exception("Failed to start listen operation")
2615
2616     cmd = "DPP_AUTH_INIT peer=%d own=%d neg_freq=2412" % (id1peer, id1)
2617     if "OK" not in dev[1].request(cmd):
2618         raise Exception("Failed to initiate operation")
2619
2620     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2621     if ev is None:
2622         raise Exception("DPP authentication did not succeed (Initiator)")
2623     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2624     if ev is None:
2625         raise Exception("DPP authentication did not succeed (Responder)")
2626
2627 def der_priv_key_p_521(priv):
2628     if len(priv) != 2 * 66:
2629         raise Exception("Unexpected der_priv_key_p_521 parameter: " + priv)
2630     der_prefix = "3081500201010442"
2631     der_postfix = "a00706052b81040023"
2632     return der_prefix + priv + der_postfix
2633
2634 def test_dpp_test_vector_p_521(dev, apdev):
2635     """DPP P-521 test vector (mutual auth)"""
2636     check_dpp_capab(dev[0])
2637     check_dpp_capab(dev[1])
2638
2639     # Responder bootstrapping key
2640     priv = "0061e54f518cdf859735da3dd64c6f72c2f086f41a6fd52915152ea2fe0f24ddaecd8883730c9c9fd82cf7c043a41021696388cf5190b731dd83638bcd56d8b6c743"
2641     addr = dev[0].own_addr().replace(':', '')
2642     #cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/11 mac=" + addr + " key=" + der_prefix + priv + der_postfix
2643     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/11 mac=" + addr + " key=" + der_priv_key_p_521(priv)
2644     res = dev[0].request(cmd)
2645     if "FAIL" in res:
2646         raise Exception("Failed to generate bootstrapping info")
2647     id0 = int(res)
2648     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
2649
2650     # Responder protocol keypair override
2651     priv = "01d8b7b17cd1b0a33f7c66fb4220999329cdaf4f8b44b2ffadde8ab8ed8abffa9f5358c5b1caae26709ca4fb78e52a4d08f2e4f24111a36a6f440d20a0000ff51597"
2652     dev[0].set("dpp_protocol_key_override", der_priv_key_p_521(priv))
2653
2654     dev[0].set("dpp_nonce_override",
2655                "d749a782012eb0a8595af30b2dfc8d0880d004ebddb55ecc5afbdef18c400e01")
2656
2657     # Initiator bootstrapping key
2658     priv = "0060c10df14af5ef27f6e362d31bdd9eeb44be77a323ba64b08f3f03d58b92cbfe05c182a91660caa081ca344243c47b5aa088bcdf738840eb35f0218b9f26881e02"
2659     cmd = "DPP_BOOTSTRAP_GEN type=qrcode key=" + der_priv_key_p_521(priv)
2660     res = dev[1].request(cmd)
2661     if "FAIL" in res:
2662         raise Exception("Failed to generate bootstrapping info")
2663     id1 = int(res)
2664     uri1 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1)
2665
2666     # Initiator protocol keypair override
2667     priv = "019c1c08caaeec38fb931894699b095bc3ab8c1ec7ef0622d2e3eba821477c8c6fca41774f21166ad98aebda37c067d9aa08a8a2e1b5c44c61f2bae02a61f85d9661"
2668     dev[1].set("dpp_protocol_key_override", der_priv_key_p_521(priv))
2669
2670     dev[1].set("dpp_nonce_override",
2671                "de972af3847bec3ba2aedd9f5c21cfdec7bf0bc5fe8b276cbcd0267807fb15b0")
2672
2673     res = dev[1].request("DPP_QR_CODE " + uri0)
2674     if "FAIL" in res:
2675         raise Exception("Failed to parse QR Code URI")
2676     id1peer = int(res)
2677
2678     res = dev[0].request("DPP_QR_CODE " + uri1)
2679     if "FAIL" in res:
2680         raise Exception("Failed to parse QR Code URI")
2681     id0peer = int(res)
2682
2683     cmd = "DPP_LISTEN 2462 qr=mutual"
2684     if "OK" not in dev[0].request(cmd):
2685         raise Exception("Failed to start listen operation")
2686
2687     cmd = "DPP_AUTH_INIT peer=%d own=%d neg_freq=2412" % (id1peer, id1)
2688     if "OK" not in dev[1].request(cmd):
2689         raise Exception("Failed to initiate operation")
2690
2691     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2692     if ev is None:
2693         raise Exception("DPP authentication did not succeed (Initiator)")
2694     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2695     if ev is None:
2696         raise Exception("DPP authentication did not succeed (Responder)")
2697
2698 def test_dpp_pkex(dev, apdev):
2699     """DPP and PKEX"""
2700     run_dpp_pkex(dev, apdev)
2701
2702 def test_dpp_pkex_p256(dev, apdev):
2703     """DPP and PKEX (P-256)"""
2704     run_dpp_pkex(dev, apdev, "P-256")
2705
2706 def test_dpp_pkex_p384(dev, apdev):
2707     """DPP and PKEX (P-384)"""
2708     run_dpp_pkex(dev, apdev, "P-384")
2709
2710 def test_dpp_pkex_p521(dev, apdev):
2711     """DPP and PKEX (P-521)"""
2712     run_dpp_pkex(dev, apdev, "P-521")
2713
2714 def test_dpp_pkex_bp256(dev, apdev):
2715     """DPP and PKEX (BP-256)"""
2716     run_dpp_pkex(dev, apdev, "brainpoolP256r1")
2717
2718 def test_dpp_pkex_bp384(dev, apdev):
2719     """DPP and PKEX (BP-384)"""
2720     run_dpp_pkex(dev, apdev, "brainpoolP384r1")
2721
2722 def test_dpp_pkex_bp512(dev, apdev):
2723     """DPP and PKEX (BP-512)"""
2724     run_dpp_pkex(dev, apdev, "brainpoolP512r1")
2725
2726 def test_dpp_pkex_config(dev, apdev):
2727     """DPP and PKEX with initiator as the configurator"""
2728     check_dpp_capab(dev[1])
2729
2730     cmd = "DPP_CONFIGURATOR_ADD"
2731     res = dev[1].request(cmd);
2732     if "FAIL" in res:
2733         raise Exception("Failed to add configurator")
2734     conf_id = int(res)
2735
2736     run_dpp_pkex(dev, apdev,
2737                  init_extra="conf=sta-dpp configurator=%d" % (conf_id),
2738                  check_config=True)
2739
2740 def run_dpp_pkex(dev, apdev, curve=None, init_extra="", check_config=False):
2741     check_dpp_capab(dev[0], curve and "brainpool" in curve)
2742     check_dpp_capab(dev[1], curve and "brainpool" in curve)
2743
2744     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2745     if curve:
2746         cmd += " curve=" + curve
2747     res = dev[0].request(cmd)
2748     if "FAIL" in res:
2749         raise Exception("Failed to generate bootstrapping info")
2750     id0 = int(res)
2751
2752     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2753     if curve:
2754         cmd += " curve=" + curve
2755     res = dev[1].request(cmd)
2756     if "FAIL" in res:
2757         raise Exception("Failed to generate bootstrapping info")
2758     id1 = int(res)
2759
2760     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
2761     res = dev[0].request(cmd)
2762     if "FAIL" in res:
2763         raise Exception("Failed to set PKEX data (responder)")
2764     cmd = "DPP_LISTEN 2437"
2765     if "OK" not in dev[0].request(cmd):
2766         raise Exception("Failed to start listen operation")
2767
2768     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 %s code=secret" % (id1, init_extra)
2769     res = dev[1].request(cmd)
2770     if "FAIL" in res:
2771         raise Exception("Failed to set PKEX data (initiator)")
2772
2773     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2774     if ev is None:
2775         raise Exception("DPP authentication did not succeed (Initiator)")
2776     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2777     if ev is None:
2778         raise Exception("DPP authentication did not succeed (Responder)")
2779
2780     if check_config:
2781         ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5)
2782         if ev is None:
2783             raise Exception("DPP configuration not completed (Configurator)")
2784         ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
2785         if ev is None:
2786             raise Exception("DPP configuration not completed (Enrollee)")
2787
2788 def test_dpp_pkex_5ghz(dev, apdev):
2789     """DPP and PKEX on 5 GHz"""
2790     try:
2791         dev[0].request("SET country US")
2792         dev[1].request("SET country US")
2793         ev = dev[0].wait_event(["CTRL-EVENT-REGDOM-CHANGE"], timeout=1)
2794         if ev is None:
2795             ev = dev[0].wait_global_event(["CTRL-EVENT-REGDOM-CHANGE"],
2796                                           timeout=1)
2797         run_dpp_pkex_5ghz(dev, apdev)
2798     finally:
2799         dev[0].request("SET country 00")
2800         dev[1].request("SET country 00")
2801         subprocess.call(['iw', 'reg', 'set', '00'])
2802
2803 def run_dpp_pkex_5ghz(dev, apdev):
2804     check_dpp_capab(dev[0])
2805     check_dpp_capab(dev[1])
2806
2807     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2808     res = dev[0].request(cmd)
2809     if "FAIL" in res:
2810         raise Exception("Failed to generate bootstrapping info")
2811     id0 = int(res)
2812
2813     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2814     res = dev[1].request(cmd)
2815     if "FAIL" in res:
2816         raise Exception("Failed to generate bootstrapping info")
2817     id1 = int(res)
2818
2819     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
2820     res = dev[0].request(cmd)
2821     if "FAIL" in res:
2822         raise Exception("Failed to set PKEX data (responder)")
2823     cmd = "DPP_LISTEN 5745"
2824     if "OK" not in dev[0].request(cmd):
2825         raise Exception("Failed to start listen operation")
2826
2827     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 code=secret" % (id1)
2828     res = dev[1].request(cmd)
2829     if "FAIL" in res:
2830         raise Exception("Failed to set PKEX data (initiator)")
2831
2832     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS", "DPP-FAIL"], timeout=20)
2833     if ev is None or "DPP-AUTH-SUCCESS" not in ev:
2834         raise Exception("DPP authentication did not succeed (Initiator)")
2835     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2836     if ev is None:
2837         raise Exception("DPP authentication did not succeed (Responder)")
2838
2839 def test_dpp_pkex_test_vector(dev, apdev):
2840     """DPP and PKEX (P-256) test vector"""
2841     check_dpp_capab(dev[0])
2842     check_dpp_capab(dev[1])
2843
2844     init_addr = "ac:64:91:f4:52:07"
2845     resp_addr = "6e:5e:ce:6e:f3:dd"
2846
2847     identifier = "joes_key"
2848     code = "thisisreallysecret"
2849
2850     # Initiator bootstrapping private key
2851     init_priv = "5941b51acfc702cdc1c347264beb2920db88eb1a0bf03a211868b1632233c269"
2852
2853     # Responder bootstrapping private key
2854     resp_priv = "2ae8956293f49986b6d0b8169a86805d9232babb5f6813fdfe96f19d59536c60"
2855
2856     # Initiator x/X keypair override
2857     init_x_priv = "8365c5ed93d751bef2d92b410dc6adfd95670889183fac1bd66759ad85c3187a"
2858
2859     # Responder y/Y keypair override
2860     resp_y_priv = "d98faa24d7dd3f592665d71a95c862bfd02c4c48acb0c515a41cbc6e929675ea"
2861
2862     p256_prefix = "30310201010420"
2863     p256_postfix = "a00a06082a8648ce3d030107"
2864
2865     dev[0].set("dpp_pkex_own_mac_override", resp_addr)
2866     dev[0].set("dpp_pkex_peer_mac_override", init_addr)
2867     dev[1].set("dpp_pkex_own_mac_override", init_addr)
2868     dev[1].set("dpp_pkex_peer_mac_override", resp_addr)
2869
2870     # Responder bootstrapping key
2871     cmd = "DPP_BOOTSTRAP_GEN type=pkex key=" + p256_prefix + resp_priv + p256_postfix
2872     res = dev[0].request(cmd)
2873     if "FAIL" in res:
2874         raise Exception("Failed to generate bootstrapping info")
2875     id0 = int(res)
2876
2877     # Responder y/Y keypair override
2878     dev[0].set("dpp_pkex_ephemeral_key_override",
2879                p256_prefix + resp_y_priv + p256_postfix)
2880
2881     # Initiator bootstrapping key
2882     cmd = "DPP_BOOTSTRAP_GEN type=pkex key=" + p256_prefix + init_priv + p256_postfix
2883     res = dev[1].request(cmd)
2884     if "FAIL" in res:
2885         raise Exception("Failed to generate bootstrapping info")
2886     id1 = int(res)
2887
2888     # Initiator x/X keypair override
2889     dev[1].set("dpp_pkex_ephemeral_key_override",
2890                p256_prefix + init_x_priv + p256_postfix)
2891
2892     cmd = "DPP_PKEX_ADD own=%d identifier=%s code=%s" % (id0, identifier, code)
2893     res = dev[0].request(cmd)
2894     if "FAIL" in res:
2895         raise Exception("Failed to set PKEX data (responder)")
2896     cmd = "DPP_LISTEN 2437"
2897     if "OK" not in dev[0].request(cmd):
2898         raise Exception("Failed to start listen operation")
2899
2900     cmd = "DPP_PKEX_ADD own=%d identifier=%s init=1 code=%s" % (id1, identifier, code)
2901     res = dev[1].request(cmd)
2902     if "FAIL" in res:
2903         raise Exception("Failed to set PKEX data (initiator)")
2904
2905     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2906     if ev is None:
2907         raise Exception("DPP authentication did not succeed (Initiator)")
2908     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2909     if ev is None:
2910         raise Exception("DPP authentication did not succeed (Responder)")
2911
2912 def test_dpp_pkex_code_mismatch(dev, apdev):
2913     """DPP and PKEX with mismatching code"""
2914     check_dpp_capab(dev[0])
2915     check_dpp_capab(dev[1])
2916
2917     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2918     res = dev[0].request(cmd)
2919     if "FAIL" in res:
2920         raise Exception("Failed to generate bootstrapping info")
2921     id0 = int(res)
2922
2923     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2924     res = dev[1].request(cmd)
2925     if "FAIL" in res:
2926         raise Exception("Failed to generate bootstrapping info")
2927     id1 = int(res)
2928
2929     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
2930     res = dev[0].request(cmd)
2931     if "FAIL" in res:
2932         raise Exception("Failed to set PKEX data (responder)")
2933     cmd = "DPP_LISTEN 2437"
2934     if "OK" not in dev[0].request(cmd):
2935         raise Exception("Failed to start listen operation")
2936
2937     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 code=unknown" % id1
2938     res = dev[1].request(cmd)
2939     if "FAIL" in res:
2940         raise Exception("Failed to set PKEX data (initiator)")
2941
2942     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
2943     if ev is None:
2944         raise Exception("Failure not reported")
2945     if "possible PKEX code mismatch" not in ev:
2946         raise Exception("Unexpected result: " + ev)
2947
2948     dev[0].dump_monitor()
2949     dev[1].dump_monitor()
2950
2951     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 code=secret" % id1
2952     res = dev[1].request(cmd)
2953     if "FAIL" in res:
2954         raise Exception("Failed to set PKEX data (initiator, retry)")
2955
2956     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2957     if ev is None:
2958         raise Exception("DPP authentication did not succeed (Initiator, retry)")
2959     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
2960     if ev is None:
2961         raise Exception("DPP authentication did not succeed (Responder, retry)")
2962
2963 def test_dpp_pkex_code_mismatch_limit(dev, apdev):
2964     """DPP and PKEX with mismatching code limit"""
2965     check_dpp_capab(dev[0])
2966     check_dpp_capab(dev[1])
2967
2968     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2969     res = dev[0].request(cmd)
2970     if "FAIL" in res:
2971         raise Exception("Failed to generate bootstrapping info")
2972     id0 = int(res)
2973
2974     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
2975     res = dev[1].request(cmd)
2976     if "FAIL" in res:
2977         raise Exception("Failed to generate bootstrapping info")
2978     id1 = int(res)
2979
2980     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
2981     res = dev[0].request(cmd)
2982     if "FAIL" in res:
2983         raise Exception("Failed to set PKEX data (responder)")
2984     cmd = "DPP_LISTEN 2437"
2985     if "OK" not in dev[0].request(cmd):
2986         raise Exception("Failed to start listen operation")
2987
2988     for i in range(5):
2989         dev[0].dump_monitor()
2990         dev[1].dump_monitor()
2991         cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 code=unknown" % id1
2992         res = dev[1].request(cmd)
2993         if "FAIL" in res:
2994             raise Exception("Failed to set PKEX data (initiator)")
2995
2996         ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
2997         if ev is None:
2998             raise Exception("Failure not reported")
2999         if "possible PKEX code mismatch" not in ev:
3000             raise Exception("Unexpected result: " + ev)
3001
3002     ev = dev[0].wait_event(["DPP-PKEX-T-LIMIT"], timeout=1)
3003     if ev is None:
3004         raise Exception("PKEX t limit not reported")
3005
3006 def test_dpp_pkex_curve_mismatch(dev, apdev):
3007     """DPP and PKEX with mismatching curve"""
3008     check_dpp_capab(dev[0])
3009     check_dpp_capab(dev[1])
3010
3011     cmd = "DPP_BOOTSTRAP_GEN type=pkex curve=P-256"
3012     res = dev[0].request(cmd)
3013     if "FAIL" in res:
3014         raise Exception("Failed to generate bootstrapping info")
3015     id0 = int(res)
3016
3017     cmd = "DPP_BOOTSTRAP_GEN type=pkex curve=P-384"
3018     res = dev[1].request(cmd)
3019     if "FAIL" in res:
3020         raise Exception("Failed to generate bootstrapping info")
3021     id1 = int(res)
3022
3023     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
3024     res = dev[0].request(cmd)
3025     if "FAIL" in res:
3026         raise Exception("Failed to set PKEX data (responder)")
3027     cmd = "DPP_LISTEN 2437"
3028     if "OK" not in dev[0].request(cmd):
3029         raise Exception("Failed to start listen operation")
3030
3031     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 code=secret" % id1
3032     res = dev[1].request(cmd)
3033     if "FAIL" in res:
3034         raise Exception("Failed to set PKEX data (initiator)")
3035
3036     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
3037     if ev is None:
3038         raise Exception("Failure not reported (dev 0)")
3039     if "Mismatching PKEX curve: peer=20 own=19" not in ev:
3040         raise Exception("Unexpected result: " + ev)
3041
3042     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
3043     if ev is None:
3044         raise Exception("Failure not reported (dev 1)")
3045     if "Peer indicated mismatching PKEX group - proposed 19" not in ev:
3046         raise Exception("Unexpected result: " + ev)
3047
3048 def test_dpp_pkex_config2(dev, apdev):
3049     """DPP and PKEX with responder as the configurator"""
3050     check_dpp_capab(dev[0])
3051
3052     cmd = "DPP_CONFIGURATOR_ADD"
3053     res = dev[0].request(cmd);
3054     if "FAIL" in res:
3055         raise Exception("Failed to add configurator")
3056     conf_id = int(res)
3057
3058     dev[0].set("dpp_configurator_params",
3059                " conf=sta-dpp configurator=%d" % conf_id);
3060     run_dpp_pkex2(dev, apdev)
3061
3062 def run_dpp_pkex2(dev, apdev, curve=None, init_extra=""):
3063     check_dpp_capab(dev[0])
3064     check_dpp_capab(dev[1])
3065
3066     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3067     if curve:
3068         cmd += " curve=" + curve
3069     res = dev[0].request(cmd)
3070     if "FAIL" in res:
3071         raise Exception("Failed to generate bootstrapping info")
3072     id0 = int(res)
3073
3074     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3075     if curve:
3076         cmd += " curve=" + curve
3077     res = dev[1].request(cmd)
3078     if "FAIL" in res:
3079         raise Exception("Failed to generate bootstrapping info")
3080     id1 = int(res)
3081
3082     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
3083     res = dev[0].request(cmd)
3084     if "FAIL" in res:
3085         raise Exception("Failed to set PKEX data (responder)")
3086     cmd = "DPP_LISTEN 2437 role=configurator"
3087     if "OK" not in dev[0].request(cmd):
3088         raise Exception("Failed to start listen operation")
3089
3090     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 role=enrollee %s code=secret" % (id1, init_extra)
3091     res = dev[1].request(cmd)
3092     if "FAIL" in res:
3093         raise Exception("Failed to set PKEX data (initiator)")
3094
3095     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3096     if ev is None:
3097         raise Exception("DPP authentication did not succeed (Initiator)")
3098     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3099     if ev is None:
3100         raise Exception("DPP authentication did not succeed (Responder)")
3101
3102     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
3103     if ev is None:
3104         raise Exception("DPP configuration not completed (Configurator)")
3105     ev = dev[1].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3106     if ev is None:
3107         raise Exception("DPP configuration not completed (Enrollee)")
3108
3109 def test_dpp_pkex_no_responder(dev, apdev):
3110     """DPP and PKEX with no responder (retry behavior)"""
3111     check_dpp_capab(dev[0])
3112
3113     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3114     res = dev[0].request(cmd)
3115     if "FAIL" in res:
3116         raise Exception("Failed to generate bootstrapping info")
3117     id0 = int(res)
3118
3119     cmd = "DPP_PKEX_ADD own=%d init=1 identifier=test code=secret" % (id0)
3120     res = dev[0].request(cmd)
3121     if "FAIL" in res:
3122         raise Exception("Failed to set PKEX data (initiator)")
3123
3124     ev = dev[0].wait_event(["DPP-FAIL"], timeout=15)
3125     if ev is None:
3126         raise Exception("DPP PKEX failure not reported")
3127     if "No response from PKEX peer" not in ev:
3128         raise Exception("Unexpected failure reason: " + ev)
3129
3130 def test_dpp_pkex_after_retry(dev, apdev):
3131     """DPP and PKEX completing after retry"""
3132     check_dpp_capab(dev[0])
3133
3134     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3135     res = dev[0].request(cmd)
3136     if "FAIL" in res:
3137         raise Exception("Failed to generate bootstrapping info")
3138     id0 = int(res)
3139
3140     cmd = "DPP_PKEX_ADD own=%d init=1 identifier=test code=secret" % (id0)
3141     res = dev[0].request(cmd)
3142     if "FAIL" in res:
3143         raise Exception("Failed to set PKEX data (initiator)")
3144
3145     time.sleep(0.1)
3146     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3147     res = dev[1].request(cmd)
3148     if "FAIL" in res:
3149         raise Exception("Failed to generate bootstrapping info")
3150     id1 = int(res)
3151
3152     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id1)
3153     res = dev[1].request(cmd)
3154     if "FAIL" in res:
3155         raise Exception("Failed to set PKEX data (responder)")
3156     cmd = "DPP_LISTEN 2437"
3157     if "OK" not in dev[1].request(cmd):
3158         raise Exception("Failed to start listen operation")
3159
3160     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=10)
3161     if ev is None:
3162         raise Exception("DPP authentication did not succeed (Responder)")
3163     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3164     if ev is None:
3165         raise Exception("DPP authentication did not succeed (Initiator)")
3166     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
3167     if ev is None:
3168         raise Exception("DPP configuration not completed (Configurator)")
3169     # Ignore Enrollee result since configurator was not set here
3170
3171 def test_dpp_pkex_hostapd_responder(dev, apdev):
3172     """DPP PKEX with hostapd as responder"""
3173     check_dpp_capab(dev[0])
3174     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured",
3175                                       "channel": "6" })
3176     check_dpp_capab(hapd)
3177
3178     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3179     res = hapd.request(cmd)
3180     if "FAIL" in res:
3181         raise Exception("Failed to generate bootstrapping info (hostapd)")
3182     id_h = int(res)
3183
3184     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id_h)
3185     res = hapd.request(cmd)
3186     if "FAIL" in res:
3187         raise Exception("Failed to set PKEX data (responder/hostapd)")
3188
3189     cmd = "DPP_CONFIGURATOR_ADD"
3190     res = dev[0].request(cmd);
3191     if "FAIL" in res:
3192         raise Exception("Failed to add configurator")
3193     conf_id = int(res)
3194
3195     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3196     res = dev[0].request(cmd)
3197     if "FAIL" in res:
3198         raise Exception("Failed to generate bootstrapping info (wpa_supplicant)")
3199     id0 = int(res)
3200
3201     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 conf=ap-dpp configurator=%d code=secret" % (id0, conf_id)
3202     res = dev[0].request(cmd)
3203     if "FAIL" in res:
3204         raise Exception("Failed to set PKEX data (initiator/wpa_supplicant)")
3205
3206     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3207     if ev is None:
3208         raise Exception("DPP authentication did not succeed (Initiator)")
3209     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3210     if ev is None:
3211         raise Exception("DPP authentication did not succeed (Responder)")
3212     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
3213     if ev is None:
3214         raise Exception("DPP configuration not completed (Configurator)")
3215     ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3216     if ev is None:
3217         raise Exception("DPP configuration not completed (Enrollee)")
3218     dev[0].request("DPP_STOP_LISTEN")
3219     dev[0].dump_monitor()
3220
3221 def test_dpp_pkex_hostapd_initiator(dev, apdev):
3222     """DPP PKEX with hostapd as initiator"""
3223     check_dpp_capab(dev[0])
3224     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured",
3225                                       "channel": "6" })
3226     check_dpp_capab(hapd)
3227
3228     cmd = "DPP_CONFIGURATOR_ADD"
3229     res = dev[0].request(cmd);
3230     if "FAIL" in res:
3231         raise Exception("Failed to add configurator")
3232     conf_id = int(res)
3233
3234     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3235     res = dev[0].request(cmd)
3236     if "FAIL" in res:
3237         raise Exception("Failed to generate bootstrapping info (wpa_supplicant)")
3238     id0 = int(res)
3239
3240     dev[0].set("dpp_configurator_params",
3241                " conf=ap-dpp configurator=%d" % conf_id);
3242
3243     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
3244     res = dev[0].request(cmd)
3245     if "FAIL" in res:
3246         raise Exception("Failed to set PKEX data (responder/wpa_supplicant)")
3247
3248     cmd = "DPP_LISTEN 2437 role=configurator"
3249     if "OK" not in dev[0].request(cmd):
3250         raise Exception("Failed to start listen operation")
3251
3252     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
3253     res = hapd.request(cmd)
3254     if "FAIL" in res:
3255         raise Exception("Failed to generate bootstrapping info (hostapd)")
3256     id_h = int(res)
3257
3258     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 role=enrollee code=secret" % (id_h)
3259     res = hapd.request(cmd)
3260     if "FAIL" in res:
3261         raise Exception("Failed to set PKEX data (initiator/hostapd)")
3262
3263     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3264     if ev is None:
3265         raise Exception("DPP authentication did not succeed (Initiator)")
3266     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3267     if ev is None:
3268         raise Exception("DPP authentication did not succeed (Responder)")
3269     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
3270     if ev is None:
3271         raise Exception("DPP configuration not completed (Configurator)")
3272     ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3273     if ev is None:
3274         raise Exception("DPP configuration not completed (Enrollee)")
3275     dev[0].request("DPP_STOP_LISTEN")
3276     dev[0].dump_monitor()
3277
3278 def test_dpp_hostapd_configurator(dev, apdev):
3279     """DPP with hostapd as configurator/initiator"""
3280     check_dpp_capab(dev[0])
3281     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured",
3282                                       "channel": "1" })
3283     check_dpp_capab(hapd)
3284
3285     cmd = "DPP_CONFIGURATOR_ADD"
3286     res = hapd.request(cmd);
3287     if "FAIL" in res:
3288         raise Exception("Failed to add configurator")
3289     conf_id = int(res)
3290
3291     addr = dev[0].own_addr().replace(':', '')
3292     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3293     res = dev[0].request(cmd)
3294     if "FAIL" in res:
3295         raise Exception("Failed to generate bootstrapping info")
3296     id0 = int(res)
3297     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
3298
3299     res = hapd.request("DPP_QR_CODE " + uri0)
3300     if "FAIL" in res:
3301         raise Exception("Failed to parse QR Code URI")
3302     id1 = int(res)
3303
3304     res = hapd.request("DPP_BOOTSTRAP_INFO %d" % id0)
3305     if "FAIL" in res:
3306         raise Exception("DPP_BOOTSTRAP_INFO failed")
3307     if "type=QRCODE" not in res:
3308         raise Exception("DPP_BOOTSTRAP_INFO did not report correct type")
3309     if "mac_addr=" + dev[0].own_addr() not in res:
3310         raise Exception("DPP_BOOTSTRAP_INFO did not report correct mac_addr")
3311
3312     cmd = "DPP_LISTEN 2412"
3313     if "OK" not in dev[0].request(cmd):
3314         raise Exception("Failed to start listen operation")
3315     cmd = "DPP_AUTH_INIT peer=%d configurator=%d conf=sta-dpp" % (id1, conf_id)
3316     if "OK" not in hapd.request(cmd):
3317         raise Exception("Failed to initiate DPP Authentication")
3318
3319     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3320     if ev is None:
3321         raise Exception("DPP authentication did not succeed (Responder)")
3322     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3323     if ev is None:
3324         raise Exception("DPP authentication did not succeed (Initiator)")
3325     ev = hapd.wait_event(["DPP-CONF-SENT"], timeout=5)
3326     if ev is None:
3327         raise Exception("DPP configuration not completed (Configurator)")
3328     ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3329     if ev is None:
3330         raise Exception("DPP configuration not completed (Enrollee)")
3331     dev[0].request("DPP_STOP_LISTEN")
3332     dev[0].dump_monitor()
3333
3334 def test_dpp_hostapd_configurator_responder(dev, apdev):
3335     """DPP with hostapd as configurator/responder"""
3336     check_dpp_capab(dev[0])
3337     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured",
3338                                       "channel": "1" })
3339     check_dpp_capab(hapd)
3340
3341     cmd = "DPP_CONFIGURATOR_ADD"
3342     res = hapd.request(cmd);
3343     if "FAIL" in res:
3344         raise Exception("Failed to add configurator")
3345     conf_id = int(res)
3346
3347     hapd.set("dpp_configurator_params",
3348              " conf=sta-dpp configurator=%d" % conf_id);
3349
3350     addr = hapd.own_addr().replace(':', '')
3351     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3352     res = hapd.request(cmd)
3353     if "FAIL" in res:
3354         raise Exception("Failed to generate bootstrapping info")
3355     id0 = int(res)
3356     uri0 = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id0)
3357
3358     res = dev[0].request("DPP_QR_CODE " + uri0)
3359     if "FAIL" in res:
3360         raise Exception("Failed to parse QR Code URI")
3361     id1 = int(res)
3362
3363     cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % (id1)
3364     if "OK" not in dev[0].request(cmd):
3365         raise Exception("Failed to initiate DPP Authentication")
3366
3367     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3368     if ev is None:
3369         raise Exception("DPP authentication did not succeed (Responder)")
3370     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3371     if ev is None:
3372         raise Exception("DPP authentication did not succeed (Initiator)")
3373     ev = hapd.wait_event(["DPP-CONF-SENT"], timeout=5)
3374     if ev is None:
3375         raise Exception("DPP configuration not completed (Configurator)")
3376     ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3377     if ev is None:
3378         raise Exception("DPP configuration not completed (Enrollee)")
3379     dev[0].request("DPP_STOP_LISTEN")
3380     dev[0].dump_monitor()
3381
3382 def test_dpp_own_config(dev, apdev):
3383     """DPP configurator signing own connector"""
3384     try:
3385         run_dpp_own_config(dev, apdev)
3386     finally:
3387         dev[0].set("dpp_config_processing", "0")
3388
3389 def test_dpp_own_config_group_id(dev, apdev):
3390     """DPP configurator signing own connector"""
3391     try:
3392         run_dpp_own_config(dev, apdev, extra=" group_id=test-group")
3393     finally:
3394         dev[0].set("dpp_config_processing", "0")
3395
3396 def test_dpp_own_config_curve_mismatch(dev, apdev):
3397     """DPP configurator signing own connector using mismatching curve"""
3398     try:
3399         run_dpp_own_config(dev, apdev, own_curve="BP-384", expect_failure=True)
3400     finally:
3401         dev[0].set("dpp_config_processing", "0")
3402
3403 def run_dpp_own_config(dev, apdev, own_curve=None, expect_failure=False,
3404                        extra=""):
3405     check_dpp_capab(dev[0], own_curve and "BP" in own_curve)
3406     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
3407     check_dpp_capab(hapd)
3408
3409     addr = hapd.own_addr().replace(':', '')
3410     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3411     res = hapd.request(cmd)
3412     if "FAIL" in res:
3413         raise Exception("Failed to generate bootstrapping info")
3414     id_h = int(res)
3415     uri = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id_h)
3416
3417     cmd = "DPP_CONFIGURATOR_ADD"
3418     res = dev[0].request(cmd);
3419     if "FAIL" in res:
3420         raise Exception("Failed to add configurator")
3421     conf_id = int(res)
3422
3423     res = dev[0].request("DPP_QR_CODE " + uri)
3424     if "FAIL" in res:
3425         raise Exception("Failed to parse QR Code URI")
3426     id = int(res)
3427
3428     cmd = "DPP_AUTH_INIT peer=%d conf=ap-dpp configurator=%d%s" % (id, conf_id, extra)
3429     if "OK" not in dev[0].request(cmd):
3430         raise Exception("Failed to initiate DPP Authentication")
3431     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3432     if ev is None:
3433         raise Exception("DPP authentication did not succeed (Responder)")
3434     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3435     if ev is None:
3436         raise Exception("DPP authentication did not succeed (Initiator)")
3437     ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5)
3438     if ev is None:
3439         raise Exception("DPP configuration not completed (Configurator)")
3440     ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3441     if ev is None:
3442         raise Exception("DPP configuration not completed (Enrollee)")
3443
3444     update_hapd_config(hapd)
3445
3446     dev[0].set("dpp_config_processing", "1")
3447     cmd = "DPP_CONFIGURATOR_SIGN  conf=sta-dpp configurator=%d%s" % (conf_id, extra)
3448     if own_curve:
3449         cmd += " curve=" + own_curve
3450     res = dev[0].request(cmd)
3451     if "FAIL" in res:
3452         raise Exception("Failed to generate own configuration")
3453
3454     ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
3455     if ev is None:
3456         raise Exception("DPP network profile not generated")
3457     id = ev.split(' ')[1]
3458     dev[0].select_network(id, freq="2412")
3459     if expect_failure:
3460         ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
3461         if ev is not None:
3462             raise Exception("Unexpected connection");
3463         dev[0].request("DISCONNECT")
3464     else:
3465         dev[0].wait_connected()
3466
3467 def test_dpp_own_config_ap(dev, apdev):
3468     """DPP configurator (AP) signing own connector"""
3469     try:
3470         run_dpp_own_config_ap(dev, apdev)
3471     finally:
3472         dev[0].set("dpp_config_processing", "0")
3473
3474 def test_dpp_own_config_ap_group_id(dev, apdev):
3475     """DPP configurator (AP) signing own connector (group_id)"""
3476     try:
3477         run_dpp_own_config_ap(dev, apdev, extra=" group_id=test-group")
3478     finally:
3479         dev[0].set("dpp_config_processing", "0")
3480
3481 def test_dpp_own_config_ap_reconf(dev, apdev):
3482     """DPP configurator (AP) signing own connector and configurator reconf"""
3483     try:
3484         run_dpp_own_config_ap(dev, apdev)
3485     finally:
3486         dev[0].set("dpp_config_processing", "0")
3487
3488 def run_dpp_own_config_ap(dev, apdev, reconf_configurator=False, extra=""):
3489     check_dpp_capab(dev[0])
3490     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
3491     check_dpp_capab(hapd)
3492
3493     cmd = "DPP_CONFIGURATOR_ADD"
3494     res = hapd.request(cmd);
3495     if "FAIL" in res:
3496         raise Exception("Failed to add configurator")
3497     conf_id = int(res)
3498
3499     if reconf_configurator:
3500         csign = hapd.request("DPP_CONFIGURATOR_GET_KEY %d" % conf_id)
3501         if "FAIL" in csign or len(csign) == 0:
3502             raise Exception("DPP_CONFIGURATOR_GET_KEY failed")
3503
3504     cmd = "DPP_CONFIGURATOR_SIGN  conf=ap-dpp configurator=%d%s" % (conf_id, extra)
3505     res = hapd.request(cmd)
3506     if "FAIL" in res:
3507         raise Exception("Failed to generate own configuration")
3508     update_hapd_config(hapd)
3509
3510     if reconf_configurator:
3511         res = hapd.request("DPP_CONFIGURATOR_REMOVE %d" % conf_id)
3512         if "OK" not in res:
3513             raise Exception("DPP_CONFIGURATOR_REMOVE failed")
3514         cmd = "DPP_CONFIGURATOR_ADD key=" + csign
3515         res = hapd.request(cmd);
3516         if "FAIL" in res:
3517             raise Exception("Failed to add configurator (reconf)")
3518         conf_id = int(res)
3519
3520     addr = dev[0].own_addr().replace(':', '')
3521     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3522     res = dev[0].request(cmd)
3523     if "FAIL" in res:
3524         raise Exception("Failed to generate bootstrapping info")
3525     id = int(res)
3526     uri = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id)
3527
3528     res = hapd.request("DPP_QR_CODE " + uri)
3529     if "FAIL" in res:
3530         raise Exception("Failed to parse QR Code URI")
3531     id = int(res)
3532
3533     dev[0].set("dpp_config_processing", "2")
3534     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
3535         raise Exception("Failed to start listen operation")
3536     cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d%s" % (id, conf_id, extra)
3537     if "OK" not in hapd.request(cmd):
3538         raise Exception("Failed to initiate DPP Authentication")
3539     ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
3540     if ev is None:
3541         raise Exception("DPP authentication did not succeed (Initiator)")
3542     ev = hapd.wait_event(["DPP-CONF-SENT"], timeout=5)
3543     if ev is None:
3544         raise Exception("DPP configuration not completed (Configurator)")
3545     ev = dev[0].wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5)
3546     if ev is None:
3547         raise Exception("DPP configuration not completed (Enrollee)")
3548     if "DPP-CONF-RECEIVED" not in ev:
3549         raise Exception("DPP configuration failed (Enrollee)")
3550
3551     dev[0].wait_connected()
3552
3553 def test_dpp_intro_mismatch(dev, apdev):
3554     """DPP network introduction mismatch cases"""
3555     try:
3556         wpas = None
3557         wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
3558         wpas.interface_add("wlan5")
3559         check_dpp_capab(wpas)
3560         run_dpp_intro_mismatch(dev, apdev, wpas)
3561     finally:
3562         dev[0].set("dpp_config_processing", "0")
3563         dev[2].set("dpp_config_processing", "0")
3564         if wpas:
3565             wpas.set("dpp_config_processing", "0")
3566
3567 def run_dpp_intro_mismatch(dev, apdev, wpas):
3568     check_dpp_capab(dev[0])
3569     check_dpp_capab(dev[1])
3570     check_dpp_capab(dev[2])
3571
3572     logger.info("Start AP in unconfigured state")
3573     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
3574     check_dpp_capab(hapd)
3575
3576     addr = hapd.own_addr().replace(':', '')
3577     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3578     res = hapd.request(cmd)
3579     if "FAIL" in res:
3580         raise Exception("Failed to generate bootstrapping info")
3581     id_h = int(res)
3582     uri = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id_h)
3583
3584     logger.info("Provision AP with DPP configuration")
3585     res = dev[1].request("DPP_CONFIGURATOR_ADD");
3586     if "FAIL" in res:
3587         raise Exception("Failed to add configurator")
3588     conf_id = int(res)
3589
3590     res = dev[1].request("DPP_QR_CODE " + uri)
3591     if "FAIL" in res:
3592         raise Exception("Failed to parse QR Code URI")
3593     id = int(res)
3594
3595     dev[1].set("dpp_groups_override", '[{"groupId":"a","netRole":"ap"}]')
3596     cmd = "DPP_AUTH_INIT peer=%d conf=ap-dpp configurator=%d" % (id, conf_id)
3597     if "OK" not in dev[1].request(cmd):
3598         raise Exception("Failed to initiate DPP Authentication")
3599     update_hapd_config(hapd)
3600
3601     logger.info("Provision STA0 with DPP Connector that has mismatching groupId")
3602     dev[0].set("dpp_config_processing", "2")
3603     addr = dev[0].own_addr().replace(':', '')
3604     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3605     res = dev[0].request(cmd)
3606     if "FAIL" in res:
3607         raise Exception("Failed to generate bootstrapping info")
3608     id0 = int(res)
3609     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
3610
3611     res = dev[1].request("DPP_QR_CODE " + uri0)
3612     if "FAIL" in res:
3613         raise Exception("Failed to parse QR Code URI")
3614     id1 = int(res)
3615
3616     cmd = "DPP_LISTEN 2412"
3617     if "OK" not in dev[0].request(cmd):
3618         raise Exception("Failed to start listen operation")
3619
3620     dev[1].set("dpp_groups_override", '[{"groupId":"b","netRole":"sta"}]')
3621     cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id1, conf_id)
3622     if "OK" not in dev[1].request(cmd):
3623         raise Exception("Failed to initiate DPP Authentication")
3624     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5)
3625     if ev is None:
3626         raise Exception("DPP configuration not completed (Configurator for STA0)")
3627     ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3628     if ev is None:
3629         raise Exception("DPP configuration not completed (Enrollee STA0)")
3630
3631     logger.info("Provision STA2 with DPP Connector that has mismatching C-sign-key")
3632     dev[2].set("dpp_config_processing", "2")
3633     addr = dev[2].own_addr().replace(':', '')
3634     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3635     res = dev[2].request(cmd)
3636     if "FAIL" in res:
3637         raise Exception("Failed to generate bootstrapping info")
3638     id2 = int(res)
3639     uri2 = dev[2].request("DPP_BOOTSTRAP_GET_URI %d" % id2)
3640
3641     res = dev[1].request("DPP_QR_CODE " + uri2)
3642     if "FAIL" in res:
3643         raise Exception("Failed to parse QR Code URI")
3644     id1 = int(res)
3645
3646     cmd = "DPP_LISTEN 2412"
3647     if "OK" not in dev[2].request(cmd):
3648         raise Exception("Failed to start listen operation")
3649
3650     res = dev[1].request("DPP_CONFIGURATOR_ADD");
3651     if "FAIL" in res:
3652         raise Exception("Failed to add configurator")
3653     conf_id_2 = int(res)
3654     dev[1].set("dpp_groups_override", '')
3655     cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id1, conf_id_2)
3656     if "OK" not in dev[1].request(cmd):
3657         raise Exception("Failed to initiate DPP Authentication")
3658     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5)
3659     if ev is None:
3660         raise Exception("DPP configuration not completed (Configurator for STA2)")
3661     ev = dev[2].wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3662     if ev is None:
3663         raise Exception("DPP configuration not completed (Enrollee STA2)")
3664
3665     logger.info("Provision STA5 with DPP Connector that has mismatching netAccessKey EC group")
3666     wpas.set("dpp_config_processing", "2")
3667     addr = wpas.own_addr().replace(':', '')
3668     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
3669     cmd += " curve=P-521"
3670     res = wpas.request(cmd)
3671     if "FAIL" in res:
3672         raise Exception("Failed to generate bootstrapping info")
3673     id5 = int(res)
3674     uri5 = wpas.request("DPP_BOOTSTRAP_GET_URI %d" % id5)
3675
3676     res = dev[1].request("DPP_QR_CODE " + uri5)
3677     if "FAIL" in res:
3678         raise Exception("Failed to parse QR Code URI")
3679     id1 = int(res)
3680
3681     cmd = "DPP_LISTEN 2412"
3682     if "OK" not in wpas.request(cmd):
3683         raise Exception("Failed to start listen operation")
3684
3685     dev[1].set("dpp_groups_override", '')
3686     cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id1, conf_id)
3687     if "OK" not in dev[1].request(cmd):
3688         raise Exception("Failed to initiate DPP Authentication")
3689     ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5)
3690     if ev is None:
3691         raise Exception("DPP configuration not completed (Configurator for STA0)")
3692     ev = wpas.wait_event(["DPP-CONF-RECEIVED"], timeout=5)
3693     if ev is None:
3694         raise Exception("DPP configuration not completed (Enrollee STA5)")
3695
3696     logger.info("Verify network introduction results")
3697     ev = dev[0].wait_event(["DPP-INTRO"], timeout=10)
3698     if ev is None:
3699         raise Exception("DPP network introduction result not seen on STA0")
3700     if "status=8" not in ev:
3701         raise Exception("Unexpected network introduction result on STA0: " + ev)
3702
3703     ev = dev[2].wait_event(["DPP-INTRO"], timeout=5)
3704     if ev is None:
3705         raise Exception("DPP network introduction result not seen on STA2")
3706     if "status=8" not in ev:
3707         raise Exception("Unexpected network introduction result on STA2: " + ev)
3708
3709     ev = wpas.wait_event(["DPP-INTRO"], timeout=10)
3710     if ev is None:
3711         raise Exception("DPP network introduction result not seen on STA5")
3712     if "status=7" not in ev:
3713         raise Exception("Unexpected network introduction result on STA5: " + ev)
3714
3715 def run_dpp_proto_init(dev, test_dev, test, mutual=False, unicast=True,
3716                        listen=True, chan="81/1", init_enrollee=False,
3717                        incompatible_roles=False):
3718     check_dpp_capab(dev[0])
3719     check_dpp_capab(dev[1])
3720     dev[test_dev].set("dpp_test", str(test))
3721
3722     cmd = "DPP_CONFIGURATOR_ADD"
3723     if init_enrollee:
3724         res = dev[0].request(cmd)
3725     else:
3726         res = dev[1].request(cmd)
3727     if "FAIL" in res:
3728         raise Exception("Failed to add configurator")
3729     conf_id = int(res)
3730
3731     addr = dev[0].own_addr().replace(':', '')
3732     cmd = "DPP_BOOTSTRAP_GEN type=qrcode"
3733     if chan:
3734         cmd += " chan=" + chan
3735     if unicast:
3736         cmd += " mac=" + addr
3737     res = dev[0].request(cmd)
3738     if "FAIL" in res:
3739         raise Exception("Failed to generate bootstrapping info")
3740     id0 = int(res)
3741     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
3742
3743     res = dev[1].request("DPP_QR_CODE " + uri0)
3744     if "FAIL" in res:
3745         raise Exception("Failed to parse QR Code URI")
3746     id1 = int(res)
3747
3748     if mutual:
3749         addr = dev[1].own_addr().replace(':', '')
3750         res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr)
3751         if "FAIL" in res:
3752             raise Exception("Failed to generate bootstrapping info")
3753         id1b = int(res)
3754         uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b)
3755
3756         res = dev[0].request("DPP_QR_CODE " + uri1b)
3757         if "FAIL" in res:
3758             raise Exception("Failed to parse QR Code URI")
3759         id0b = int(res)
3760
3761         cmd = "DPP_LISTEN 2412 qr=mutual"
3762     else:
3763         cmd = "DPP_LISTEN 2412"
3764
3765     if init_enrollee:
3766         if incompatible_roles:
3767             cmd += " role=enrollee"
3768         else:
3769             cmd += " role=configurator"
3770         dev[0].set("dpp_configurator_params",
3771                    " conf=sta-dpp configurator=%d" % conf_id);
3772     elif incompatible_roles:
3773         cmd += " role=enrollee"
3774
3775     if listen:
3776         if "OK" not in dev[0].request(cmd):
3777             raise Exception("Failed to start listen operation")
3778
3779     if init_enrollee:
3780         cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % (id1)
3781     else:
3782         cmd = "DPP_AUTH_INIT peer=%d configurator=%d conf=sta-dpp" % (id1, conf_id)
3783         if incompatible_roles:
3784             cmd += " role=enrollee"
3785     if mutual:
3786         cmd += " own=%d" % id1b
3787     if "OK" not in dev[1].request(cmd):
3788         raise Exception("Failed to initiate DPP Authentication")
3789
3790 def test_dpp_proto_after_wrapped_data_auth_req(dev, apdev):
3791     """DPP protocol testing - attribute after Wrapped Data in Auth Req"""
3792     run_dpp_proto_init(dev, 1, 1)
3793     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
3794     if ev is None:
3795         raise Exception("DPP Authentication Request not seen")
3796     if "type=0" not in ev or "ignore=invalid-attributes" not in ev:
3797         raise Exception("Unexpected RX info: " + ev)
3798     ev = dev[1].wait_event(["DPP-RX"], timeout=0.1)
3799     if ev is not None:
3800         raise Exception("Unexpected DPP message seen")
3801
3802 def test_dpp_auth_req_stop_after_ack(dev, apdev):
3803     """DPP initiator stopping after ACK, but no response"""
3804     run_dpp_proto_init(dev, 1, 1, listen=True)
3805     ev = dev[1].wait_event(["DPP-AUTH-INIT-FAILED"], timeout=5)
3806     if ev is None:
3807         raise Exception("Authentication failure not reported")
3808
3809 def test_dpp_auth_req_retries(dev, apdev):
3810     """DPP initiator retries with no ACK"""
3811     check_dpp_capab(dev[1])
3812     dev[1].set("dpp_init_max_tries", "3")
3813     dev[1].set("dpp_init_retry_time", "1000")
3814     dev[1].set("dpp_resp_wait_time", "100")
3815     run_dpp_proto_init(dev, 1, 1, unicast=False, listen=False)
3816
3817     for i in range(3):
3818         ev = dev[1].wait_event(["DPP-TX "], timeout=5)
3819         if ev is None:
3820             raise Exception("Auth Req not sent (%d)" % i)
3821
3822     ev = dev[1].wait_event(["DPP-AUTH-INIT-FAILED"], timeout=5)
3823     if ev is None:
3824         raise Exception("Authentication failure not reported")
3825
3826 def test_dpp_auth_req_retries_multi_chan(dev, apdev):
3827     """DPP initiator retries with no ACK and multiple channels"""
3828     check_dpp_capab(dev[1])
3829     dev[1].set("dpp_init_max_tries", "3")
3830     dev[1].set("dpp_init_retry_time", "1000")
3831     dev[1].set("dpp_resp_wait_time", "100")
3832     run_dpp_proto_init(dev, 1, 1, unicast=False, listen=False,
3833                        chan="81/1,81/6,81/11")
3834
3835     for i in range(3 * 3):
3836         ev = dev[1].wait_event(["DPP-TX "], timeout=5)
3837         if ev is None:
3838             raise Exception("Auth Req not sent (%d)" % i)
3839
3840     ev = dev[1].wait_event(["DPP-AUTH-INIT-FAILED"], timeout=5)
3841     if ev is None:
3842         raise Exception("Authentication failure not reported")
3843
3844 def test_dpp_proto_after_wrapped_data_auth_resp(dev, apdev):
3845     """DPP protocol testing - attribute after Wrapped Data in Auth Resp"""
3846     run_dpp_proto_init(dev, 0, 2)
3847     ev = dev[1].wait_event(["DPP-RX"], timeout=5)
3848     if ev is None:
3849         raise Exception("DPP Authentication Response not seen")
3850     if "type=1" not in ev or "ignore=invalid-attributes" not in ev:
3851         raise Exception("Unexpected RX info: " + ev)
3852     ev = dev[0].wait_event(["DPP-RX"], timeout=1)
3853     if ev is None or "type=0" not in ev:
3854         raise Exception("DPP Authentication Request not seen")
3855     ev = dev[0].wait_event(["DPP-RX"], timeout=0.1)
3856     if ev is not None:
3857         raise Exception("Unexpected DPP message seen")
3858
3859 def test_dpp_proto_after_wrapped_data_auth_conf(dev, apdev):
3860     """DPP protocol testing - attribute after Wrapped Data in Auth Conf"""
3861     run_dpp_proto_init(dev, 1, 3)
3862     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
3863     if ev is None or "type=0" not in ev:
3864         raise Exception("DPP Authentication Request not seen")
3865     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
3866     if ev is None:
3867         raise Exception("DPP Authentication Confirm not seen")
3868     if "type=2" not in ev or "ignore=invalid-attributes" not in ev:
3869         raise Exception("Unexpected RX info: " + ev)
3870
3871 def test_dpp_proto_after_wrapped_data_conf_req(dev, apdev):
3872     """DPP protocol testing - attribute after Wrapped Data in Conf Req"""
3873     run_dpp_proto_init(dev, 0, 6)
3874     ev = dev[1].wait_event(["DPP-CONF-FAILED"], timeout=10)
3875     if ev is None:
3876         raise Exception("DPP Configuration failure not seen")
3877
3878 def test_dpp_proto_after_wrapped_data_conf_resp(dev, apdev):
3879     """DPP protocol testing - attribute after Wrapped Data in Conf Resp"""
3880     run_dpp_proto_init(dev, 1, 7)
3881     ev = dev[0].wait_event(["DPP-CONF-FAILED"], timeout=10)
3882     if ev is None:
3883         raise Exception("DPP Configuration failure not seen")
3884
3885 def test_dpp_proto_zero_i_capab(dev, apdev):
3886     """DPP protocol testing - zero I-capability in Auth Req"""
3887     run_dpp_proto_init(dev, 1, 8)
3888     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
3889     if ev is None:
3890         raise Exception("DPP failure not seen")
3891     if "Invalid role in I-capabilities 0x00" not in ev:
3892         raise Exception("Unexpected failure: " + ev)
3893     ev = dev[1].wait_event(["DPP-RX"], timeout=0.1)
3894     if ev is not None:
3895         raise Exception("Unexpected DPP message seen")
3896
3897 def test_dpp_proto_zero_r_capab(dev, apdev):
3898     """DPP protocol testing - zero R-capability in Auth Resp"""
3899     run_dpp_proto_init(dev, 0, 9)
3900     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
3901     if ev is None:
3902         raise Exception("DPP failure not seen")
3903     if "Unexpected role in R-capabilities 0x00" not in ev:
3904         raise Exception("Unexpected failure: " + ev)
3905     ev = dev[0].wait_event(["DPP-RX"], timeout=1)
3906     if ev is None or "type=0" not in ev:
3907         raise Exception("DPP Authentication Request not seen")
3908     ev = dev[0].wait_event(["DPP-RX"], timeout=0.1)
3909     if ev is not None:
3910         raise Exception("Unexpected DPP message seen")
3911
3912 def run_dpp_proto_auth_req_missing(dev, test, reason, mutual=False):
3913     run_dpp_proto_init(dev, 1, test, mutual=mutual)
3914     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
3915     if ev is None:
3916         raise Exception("DPP failure not seen")
3917     if reason not in ev:
3918         raise Exception("Unexpected failure: " + ev)
3919     ev = dev[1].wait_event(["DPP-RX"], timeout=0.1)
3920     if ev is not None:
3921         raise Exception("Unexpected DPP message seen")
3922
3923 def test_dpp_proto_auth_req_no_r_bootstrap_key(dev, apdev):
3924     """DPP protocol testing - no R-bootstrap key in Auth Req"""
3925     run_dpp_proto_auth_req_missing(dev, 10, "Missing or invalid required Responder Bootstrapping Key Hash attribute")
3926
3927 def test_dpp_proto_auth_req_invalid_r_bootstrap_key(dev, apdev):
3928     """DPP protocol testing - invalid R-bootstrap key in Auth Req"""
3929     run_dpp_proto_auth_req_missing(dev, 68, "No matching own bootstrapping key found - ignore message")
3930
3931 def test_dpp_proto_auth_req_no_i_bootstrap_key(dev, apdev):
3932     """DPP protocol testing - no I-bootstrap key in Auth Req"""
3933     run_dpp_proto_auth_req_missing(dev, 11, "Missing or invalid required Initiator Bootstrapping Key Hash attribute")
3934
3935 def test_dpp_proto_auth_req_invalid_i_bootstrap_key(dev, apdev):
3936     """DPP protocol testing - invalid I-bootstrap key in Auth Req"""
3937     run_dpp_proto_init(dev, 1, 69, mutual=True)
3938     ev = dev[0].wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=5)
3939     if ev is None:
3940         raise Exception("DPP scan request not seen")
3941     ev = dev[1].wait_event(["DPP-RESPONSE-PENDING"], timeout=5)
3942     if ev is None:
3943         raise Exception("DPP response pending indivation not seen")
3944
3945 def test_dpp_proto_auth_req_no_i_proto_key(dev, apdev):
3946     """DPP protocol testing - no I-proto key in Auth Req"""
3947     run_dpp_proto_auth_req_missing(dev, 12, "Missing required Initiator Protocol Key attribute")
3948
3949 def test_dpp_proto_auth_req_invalid_i_proto_key(dev, apdev):
3950     """DPP protocol testing - invalid I-proto key in Auth Req"""
3951     run_dpp_proto_auth_req_missing(dev, 66, "Invalid Initiator Protocol Key")
3952
3953 def test_dpp_proto_auth_req_no_i_nonce(dev, apdev):
3954     """DPP protocol testing - no I-nonce in Auth Req"""
3955     run_dpp_proto_auth_req_missing(dev, 13, "Missing or invalid I-nonce")
3956
3957 def test_dpp_proto_auth_req_invalid_i_nonce(dev, apdev):
3958     """DPP protocol testing - invalid I-nonce in Auth Req"""
3959     run_dpp_proto_auth_req_missing(dev, 81, "Missing or invalid I-nonce")
3960
3961 def test_dpp_proto_auth_req_no_i_capab(dev, apdev):
3962     """DPP protocol testing - no I-capab in Auth Req"""
3963     run_dpp_proto_auth_req_missing(dev, 14, "Missing or invalid I-capab")
3964
3965 def test_dpp_proto_auth_req_no_wrapped_data(dev, apdev):
3966     """DPP protocol testing - no Wrapped Data in Auth Req"""
3967     run_dpp_proto_auth_req_missing(dev, 15, "Missing or invalid required Wrapped Data attribute")
3968
3969 def run_dpp_proto_auth_resp_missing(dev, test, reason,
3970                                     incompatible_roles=False):
3971     run_dpp_proto_init(dev, 0, test, mutual=True,
3972                        incompatible_roles=incompatible_roles)
3973     if reason is None:
3974         time.sleep(0.1)
3975         return
3976     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
3977     if ev is None:
3978         raise Exception("DPP failure not seen")
3979     if reason not in ev:
3980         raise Exception("Unexpected failure: " + ev)
3981     ev = dev[0].wait_event(["DPP-RX"], timeout=1)
3982     if ev is None or "type=0" not in ev:
3983         raise Exception("DPP Authentication Request not seen")
3984     ev = dev[0].wait_event(["DPP-RX"], timeout=0.1)
3985     if ev is not None:
3986         raise Exception("Unexpected DPP message seen")
3987
3988 def test_dpp_proto_auth_resp_no_status(dev, apdev):
3989     """DPP protocol testing - no Status in Auth Resp"""
3990     run_dpp_proto_auth_resp_missing(dev, 16, "Missing or invalid required DPP Status attribute")
3991
3992 def test_dpp_proto_auth_resp_status_no_status(dev, apdev):
3993     """DPP protocol testing - no Status in Auth Resp(status)"""
3994     run_dpp_proto_auth_resp_missing(dev, 16,
3995                                     "Missing or invalid required DPP Status attribute",
3996                                     incompatible_roles=True)
3997
3998 def test_dpp_proto_auth_resp_invalid_status(dev, apdev):
3999     """DPP protocol testing - invalid Status in Auth Resp"""
4000     run_dpp_proto_auth_resp_missing(dev, 74, "Responder reported failure")
4001
4002 def test_dpp_proto_auth_resp_no_r_bootstrap_key(dev, apdev):
4003     """DPP protocol testing - no R-bootstrap key in Auth Resp"""
4004     run_dpp_proto_auth_resp_missing(dev, 17, "Missing or invalid required Responder Bootstrapping Key Hash attribute")
4005
4006 def test_dpp_proto_auth_resp_status_no_r_bootstrap_key(dev, apdev):
4007     """DPP protocol testing - no R-bootstrap key in Auth Resp(status)"""
4008     run_dpp_proto_auth_resp_missing(dev, 17,
4009                                     "Missing or invalid required Responder Bootstrapping Key Hash attribute",
4010                                     incompatible_roles=True)
4011
4012 def test_dpp_proto_auth_resp_invalid_r_bootstrap_key(dev, apdev):
4013     """DPP protocol testing - invalid R-bootstrap key in Auth Resp"""
4014     run_dpp_proto_auth_resp_missing(dev, 70, "Unexpected Responder Bootstrapping Key Hash value")
4015
4016 def test_dpp_proto_auth_resp_status_invalid_r_bootstrap_key(dev, apdev):
4017     """DPP protocol testing - invalid R-bootstrap key in Auth Resp(status)"""
4018     run_dpp_proto_auth_resp_missing(dev, 70,
4019                                     "Unexpected Responder Bootstrapping Key Hash value",
4020                                     incompatible_roles=True)
4021
4022 def test_dpp_proto_auth_resp_no_i_bootstrap_key(dev, apdev):
4023     """DPP protocol testing - no I-bootstrap key in Auth Resp"""
4024     run_dpp_proto_auth_resp_missing(dev, 18, None)
4025
4026 def test_dpp_proto_auth_resp_status_no_i_bootstrap_key(dev, apdev):
4027     """DPP protocol testing - no I-bootstrap key in Auth Resp(status)"""
4028     run_dpp_proto_auth_resp_missing(dev, 18, None, incompatible_roles=True)
4029
4030 def test_dpp_proto_auth_resp_invalid_i_bootstrap_key(dev, apdev):
4031     """DPP protocol testing - invalid I-bootstrap key in Auth Resp"""
4032     run_dpp_proto_auth_resp_missing(dev, 71, "Initiator Bootstrapping Key Hash attribute did not match")
4033
4034 def test_dpp_proto_auth_resp_status_invalid_i_bootstrap_key(dev, apdev):
4035     """DPP protocol testing - invalid I-bootstrap key in Auth Resp(status)"""
4036     run_dpp_proto_auth_resp_missing(dev, 71,
4037                                     "Initiator Bootstrapping Key Hash attribute did not match",
4038                                     incompatible_roles=True)
4039
4040 def test_dpp_proto_auth_resp_no_r_proto_key(dev, apdev):
4041     """DPP protocol testing - no R-Proto Key in Auth Resp"""
4042     run_dpp_proto_auth_resp_missing(dev, 19, "Missing required Responder Protocol Key attribute")
4043
4044 def test_dpp_proto_auth_resp_invalid_r_proto_key(dev, apdev):
4045     """DPP protocol testing - invalid R-Proto Key in Auth Resp"""
4046     run_dpp_proto_auth_resp_missing(dev, 67, "Invalid Responder Protocol Key")
4047
4048 def test_dpp_proto_auth_resp_no_r_nonce(dev, apdev):
4049     """DPP protocol testing - no R-nonce in Auth Resp"""
4050     run_dpp_proto_auth_resp_missing(dev, 20, "Missing or invalid R-nonce")
4051
4052 def test_dpp_proto_auth_resp_no_i_nonce(dev, apdev):
4053     """DPP protocol testing - no I-nonce in Auth Resp"""
4054     run_dpp_proto_auth_resp_missing(dev, 21, "Missing or invalid I-nonce")
4055
4056 def test_dpp_proto_auth_resp_status_no_i_nonce(dev, apdev):
4057     """DPP protocol testing - no I-nonce in Auth Resp(status)"""
4058     run_dpp_proto_auth_resp_missing(dev, 21, "Missing or invalid I-nonce",
4059                                     incompatible_roles=True)
4060
4061 def test_dpp_proto_auth_resp_no_r_capab(dev, apdev):
4062     """DPP protocol testing - no R-capab in Auth Resp"""
4063     run_dpp_proto_auth_resp_missing(dev, 22, "Missing or invalid R-capabilities")
4064
4065 def test_dpp_proto_auth_resp_no_r_auth(dev, apdev):
4066     """DPP protocol testing - no R-auth in Auth Resp"""
4067     run_dpp_proto_auth_resp_missing(dev, 23, "Missing or invalid Secondary Wrapped Data")
4068
4069 def test_dpp_proto_auth_resp_no_wrapped_data(dev, apdev):
4070     """DPP protocol testing - no Wrapped Data in Auth Resp"""
4071     run_dpp_proto_auth_resp_missing(dev, 24, "Missing or invalid required Wrapped Data attribute")
4072
4073 def test_dpp_proto_auth_resp_i_nonce_mismatch(dev, apdev):
4074     """DPP protocol testing - I-nonce mismatch in Auth Resp"""
4075     run_dpp_proto_init(dev, 0, 30, mutual=True)
4076     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
4077     if ev is None:
4078         raise Exception("DPP failure not seen")
4079     if "I-nonce mismatch" not in ev:
4080         raise Exception("Unexpected failure: " + ev)
4081     ev = dev[0].wait_event(["DPP-RX"], timeout=1)
4082     if ev is None or "type=0" not in ev:
4083         raise Exception("DPP Authentication Request not seen")
4084     ev = dev[0].wait_event(["DPP-RX"], timeout=0.1)
4085     if ev is not None:
4086         raise Exception("Unexpected DPP message seen")
4087
4088 def test_dpp_proto_auth_resp_incompatible_r_capab(dev, apdev):
4089     """DPP protocol testing - Incompatible R-capab in Auth Resp"""
4090     run_dpp_proto_init(dev, 0, 31, mutual=True)
4091     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
4092     if ev is None:
4093         raise Exception("DPP failure not seen")
4094     if "Unexpected role in R-capabilities 0x02" not in ev:
4095         raise Exception("Unexpected failure: " + ev)
4096     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4097     if ev is None:
4098         raise Exception("DPP failure not seen")
4099     if "Peer reported incompatible R-capab role" not in ev:
4100         raise Exception("Unexpected failure: " + ev)
4101
4102 def test_dpp_proto_auth_resp_r_auth_mismatch(dev, apdev):
4103     """DPP protocol testing - R-auth mismatch in Auth Resp"""
4104     run_dpp_proto_init(dev, 0, 32, mutual=True)
4105     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
4106     if ev is None:
4107         raise Exception("DPP failure not seen")
4108     if "Mismatching Responder Authenticating Tag" not in ev:
4109         raise Exception("Unexpected failure: " + ev)
4110     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4111     if ev is None:
4112         raise Exception("DPP failure not seen")
4113     if "Peer reported authentication failure" not in ev:
4114         raise Exception("Unexpected failure: " + ev)
4115
4116 def test_dpp_proto_auth_resp_r_auth_mismatch_failure(dev, apdev):
4117     """DPP protocol testing - Auth Conf RX processing failure"""
4118     with alloc_fail(dev[0], 1, "dpp_auth_conf_rx_failure"):
4119         run_dpp_proto_init(dev, 0, 32, mutual=True)
4120         ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4121         if ev is None:
4122             raise Exception("DPP failure not seen")
4123         if "Authentication failed" not in ev:
4124             raise Exception("Unexpected failure: " + ev)
4125
4126 def test_dpp_proto_auth_resp_r_auth_mismatch_failure2(dev, apdev):
4127     """DPP protocol testing - Auth Conf RX processing failure 2"""
4128     with fail_test(dev[0], 1, "dpp_auth_conf_rx_failure"):
4129         run_dpp_proto_init(dev, 0, 32, mutual=True)
4130         ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4131         if ev is None:
4132             raise Exception("DPP failure not seen")
4133         if "AES-SIV decryption failed" not in ev:
4134             raise Exception("Unexpected failure: " + ev)
4135
4136 def run_dpp_proto_auth_conf_missing(dev, test, reason):
4137     run_dpp_proto_init(dev, 1, test, mutual=True)
4138     if reason is None:
4139         time.sleep(0.1)
4140         return
4141     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4142     if ev is None:
4143         raise Exception("DPP failure not seen")
4144     if reason not in ev:
4145         raise Exception("Unexpected failure: " + ev)
4146
4147 def test_dpp_proto_auth_conf_no_status(dev, apdev):
4148     """DPP protocol testing - no Status in Auth Conf"""
4149     run_dpp_proto_auth_conf_missing(dev, 25, "Missing or invalid required DPP Status attribute")
4150
4151 def test_dpp_proto_auth_conf_invalid_status(dev, apdev):
4152     """DPP protocol testing - invalid Status in Auth Conf"""
4153     run_dpp_proto_auth_conf_missing(dev, 75, "Authentication failed")
4154
4155 def test_dpp_proto_auth_conf_no_r_bootstrap_key(dev, apdev):
4156     """DPP protocol testing - no R-bootstrap key in Auth Conf"""
4157     run_dpp_proto_auth_conf_missing(dev, 26, "Missing or invalid required Responder Bootstrapping Key Hash attribute")
4158
4159 def test_dpp_proto_auth_conf_invalid_r_bootstrap_key(dev, apdev):
4160     """DPP protocol testing - invalid R-bootstrap key in Auth Conf"""
4161     run_dpp_proto_auth_conf_missing(dev, 72, "Responder Bootstrapping Key Hash mismatch")
4162
4163 def test_dpp_proto_auth_conf_no_i_bootstrap_key(dev, apdev):
4164     """DPP protocol testing - no I-bootstrap key in Auth Conf"""
4165     run_dpp_proto_auth_conf_missing(dev, 27, "Missing Initiator Bootstrapping Key Hash attribute")
4166
4167 def test_dpp_proto_auth_conf_invalid_i_bootstrap_key(dev, apdev):
4168     """DPP protocol testing - invalid I-bootstrap key in Auth Conf"""
4169     run_dpp_proto_auth_conf_missing(dev, 73, "Initiator Bootstrapping Key Hash mismatch")
4170
4171 def test_dpp_proto_auth_conf_no_i_auth(dev, apdev):
4172     """DPP protocol testing - no I-Auth in Auth Conf"""
4173     run_dpp_proto_auth_conf_missing(dev, 28, "Missing or invalid Initiator Authenticating Tag")
4174
4175 def test_dpp_proto_auth_conf_no_wrapped_data(dev, apdev):
4176     """DPP protocol testing - no Wrapped Data in Auth Conf"""
4177     run_dpp_proto_auth_conf_missing(dev, 29, "Missing or invalid required Wrapped Data attribute")
4178
4179 def test_dpp_proto_auth_conf_i_auth_mismatch(dev, apdev):
4180     """DPP protocol testing - I-auth mismatch in Auth Conf"""
4181     run_dpp_proto_init(dev, 1, 33, mutual=True)
4182     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4183     if ev is None:
4184         raise Exception("DPP failure not seen")
4185     if "Mismatching Initiator Authenticating Tag" not in ev:
4186         raise Excception("Unexpected failure: " + ev)
4187
4188 def test_dpp_proto_auth_conf_replaced_by_resp(dev, apdev):
4189     """DPP protocol testing - Auth Conf replaced by Resp"""
4190     run_dpp_proto_init(dev, 1, 65, mutual=True)
4191     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4192     if ev is None:
4193         raise Exception("DPP failure not seen")
4194     if "Unexpected Authentication Response" not in ev:
4195         raise Excception("Unexpected failure: " + ev)
4196
4197 def run_dpp_proto_conf_req_missing(dev, test, reason):
4198     run_dpp_proto_init(dev, 0, test)
4199     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
4200     if ev is None:
4201         raise Exception("DPP failure not seen")
4202     if reason not in ev:
4203         raise Exception("Unexpected failure: " + ev)
4204
4205 def test_dpp_proto_conf_req_no_e_nonce(dev, apdev):
4206     """DPP protocol testing - no E-nonce in Conf Req"""
4207     run_dpp_proto_conf_req_missing(dev, 51,
4208                                    "Missing or invalid Enrollee Nonce attribute")
4209
4210 def test_dpp_proto_conf_req_invalid_e_nonce(dev, apdev):
4211     """DPP protocol testing - invalid E-nonce in Conf Req"""
4212     run_dpp_proto_conf_req_missing(dev, 83,
4213                                    "Missing or invalid Enrollee Nonce attribute")
4214
4215 def test_dpp_proto_conf_req_no_config_attr_obj(dev, apdev):
4216     """DPP protocol testing - no Config Attr Obj in Conf Req"""
4217     run_dpp_proto_conf_req_missing(dev, 52,
4218                                    "Missing or invalid Config Attributes attribute")
4219
4220 def test_dpp_proto_conf_req_invalid_config_attr_obj(dev, apdev):
4221     """DPP protocol testing - invalid Config Attr Obj in Conf Req"""
4222     run_dpp_proto_conf_req_missing(dev, 76,
4223                                    "Unsupported wi-fi_tech")
4224
4225 def test_dpp_proto_conf_req_no_wrapped_data(dev, apdev):
4226     """DPP protocol testing - no Wrapped Data in Conf Req"""
4227     run_dpp_proto_conf_req_missing(dev, 53,
4228                                    "Missing or invalid required Wrapped Data attribute")
4229
4230 def run_dpp_proto_conf_resp_missing(dev, test, reason):
4231     run_dpp_proto_init(dev, 1, test)
4232     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4233     if ev is None:
4234         raise Exception("DPP failure not seen")
4235     if reason not in ev:
4236         raise Exception("Unexpected failure: " + ev)
4237
4238 def test_dpp_proto_conf_resp_no_e_nonce(dev, apdev):
4239     """DPP protocol testing - no E-nonce in Conf Resp"""
4240     run_dpp_proto_conf_resp_missing(dev, 54,
4241                                     "Missing or invalid Enrollee Nonce attribute")
4242
4243 def test_dpp_proto_conf_resp_no_config_obj(dev, apdev):
4244     """DPP protocol testing - no Config Object in Conf Resp"""
4245     run_dpp_proto_conf_resp_missing(dev, 55,
4246                                     "Missing required Configuration Object attribute")
4247
4248 def test_dpp_proto_conf_resp_no_status(dev, apdev):
4249     """DPP protocol testing - no Status in Conf Resp"""
4250     run_dpp_proto_conf_resp_missing(dev, 56,
4251                                     "Missing or invalid required DPP Status attribute")
4252
4253 def test_dpp_proto_conf_resp_no_wrapped_data(dev, apdev):
4254     """DPP protocol testing - no Wrapped Data in Conf Resp"""
4255     run_dpp_proto_conf_resp_missing(dev, 57,
4256                                     "Missing or invalid required Wrapped Data attribute")
4257
4258 def test_dpp_proto_conf_resp_invalid_status(dev, apdev):
4259     """DPP protocol testing - invalid Status in Conf Resp"""
4260     run_dpp_proto_conf_resp_missing(dev, 58,
4261                                     "Configurator rejected configuration")
4262
4263 def test_dpp_proto_conf_resp_e_nonce_mismatch(dev, apdev):
4264     """DPP protocol testing - E-nonce mismatch in Conf Resp"""
4265     run_dpp_proto_conf_resp_missing(dev, 59,
4266                                     "Enrollee Nonce mismatch")
4267
4268 def test_dpp_proto_stop_at_auth_req(dev, apdev):
4269     """DPP protocol testing - stop when receiving Auth Req"""
4270     run_dpp_proto_init(dev, 0, 87)
4271     ev = dev[1].wait_event(["DPP-AUTH-INIT-FAILED"], timeout=5)
4272     if ev is None:
4273         raise Exception("Authentication init failure not reported")
4274
4275 def test_dpp_proto_stop_at_auth_resp(dev, apdev):
4276     """DPP protocol testing - stop when receiving Auth Resp"""
4277     run_dpp_proto_init(dev, 1, 88)
4278
4279     ev = dev[1].wait_event(["DPP-TX "], timeout=5)
4280     if ev is None:
4281         raise Exception("Auth Req TX not seen")
4282
4283     ev = dev[0].wait_event(["DPP-TX "], timeout=5)
4284     if ev is None:
4285         raise Exception("Auth Resp TX not seen")
4286
4287     ev = dev[1].wait_event(["DPP-TX "], timeout=0.1)
4288     if ev is not None:
4289         raise Exception("Unexpected Auth Conf TX")
4290
4291 def test_dpp_proto_stop_at_auth_conf(dev, apdev):
4292     """DPP protocol testing - stop when receiving Auth Conf"""
4293     run_dpp_proto_init(dev, 0, 89, init_enrollee=True)
4294     ev = dev[1].wait_event(["GAS-QUERY-START"], timeout=10)
4295     if ev is None:
4296         raise Exception("Enrollee did not start GAS")
4297     ev = dev[1].wait_event(["GAS-QUERY-DONE"], timeout=10)
4298     if ev is None:
4299         raise Exception("Enrollee did not time out GAS")
4300     if "result=TIMEOUT" not in ev:
4301         raise Exception("Unexpected GAS result: " + ev)
4302
4303 def test_dpp_proto_stop_at_auth_conf_tx(dev, apdev):
4304     """DPP protocol testing - stop when transmitting Auth Conf (Registrar)"""
4305     run_dpp_proto_init(dev, 1, 89, init_enrollee=True)
4306     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=10)
4307     if ev is None:
4308         raise Exception("Authentication did not succeed (Initiator)")
4309     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
4310     if ev is None:
4311         raise Exception("Authentication did not succeed (Responder)")
4312     ev = dev[1].wait_event(["GAS-QUERY-START"], timeout=0.1)
4313     if ev is not None:
4314         raise Exception("Unexpected GAS query")
4315
4316     # There is currently no timeout on GAS server side, so no event to wait for
4317     # in this case.
4318
4319 def test_dpp_proto_stop_at_auth_conf_tx2(dev, apdev):
4320     """DPP protocol testing - stop when transmitting Auth Conf (Enrollee)"""
4321     run_dpp_proto_init(dev, 1, 89)
4322     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=10)
4323     if ev is None:
4324         raise Exception("Authentication did not succeed (Initiator)")
4325     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
4326     if ev is None:
4327         raise Exception("Authentication did not succeed (Responder)")
4328
4329     ev = dev[0].wait_event(["GAS-QUERY-DONE"], timeout=5)
4330     if ev is None or "result=TIMEOUT" not in ev:
4331         raise Exception("GAS query did not time out")
4332
4333 def test_dpp_proto_stop_at_conf_req(dev, apdev):
4334     """DPP protocol testing - stop when receiving Auth Req"""
4335     run_dpp_proto_init(dev, 1, 90)
4336     ev = dev[0].wait_event(["GAS-QUERY-START"], timeout=10)
4337     if ev is None:
4338         raise Exception("Enrollee did not start GAS")
4339     ev = dev[0].wait_event(["GAS-QUERY-DONE"], timeout=10)
4340     if ev is None:
4341         raise Exception("Enrollee did not time out GAS")
4342     if "result=TIMEOUT" not in ev:
4343         raise Exception("Unexpected GAS result: " + ev)
4344
4345 def run_dpp_proto_init_pkex(dev, test_dev, test):
4346     check_dpp_capab(dev[0])
4347     check_dpp_capab(dev[1])
4348     dev[test_dev].set("dpp_test", str(test))
4349
4350     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4351     res = dev[0].request(cmd)
4352     if "FAIL" in res:
4353         raise Exception("Failed to generate bootstrapping info")
4354     id0 = int(res)
4355
4356     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4357     res = dev[1].request(cmd)
4358     if "FAIL" in res:
4359         raise Exception("Failed to generate bootstrapping info")
4360     id1 = int(res)
4361
4362     cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
4363     res = dev[0].request(cmd)
4364     if "FAIL" in res:
4365         raise Exception("Failed to set PKEX data (responder)")
4366     cmd = "DPP_LISTEN 2437"
4367     if "OK" not in dev[0].request(cmd):
4368         raise Exception("Failed to start listen operation")
4369
4370     cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 code=secret" % id1
4371     res = dev[1].request(cmd)
4372     if "FAIL" in res:
4373         raise Exception("Failed to set PKEX data (initiator)")
4374
4375 def test_dpp_proto_after_wrapped_data_pkex_cr_req(dev, apdev):
4376     """DPP protocol testing - attribute after Wrapped Data in PKEX CR Req"""
4377     run_dpp_proto_init_pkex(dev, 1, 4)
4378     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
4379     if ev is None or "type=7" not in ev:
4380         raise Exception("PKEX Exchange Request not seen")
4381     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
4382     if ev is None or "type=9" not in ev:
4383         raise Exception("PKEX Commit-Reveal Request not seen")
4384     if "ignore=invalid-attributes" not in ev:
4385         raise Exception("Unexpected RX info: " + ev)
4386
4387 def test_dpp_proto_after_wrapped_data_pkex_cr_resp(dev, apdev):
4388     """DPP protocol testing - attribute after Wrapped Data in PKEX CR Resp"""
4389     run_dpp_proto_init_pkex(dev, 0, 5)
4390     ev = dev[1].wait_event(["DPP-RX"], timeout=5)
4391     if ev is None or "type=8" not in ev:
4392         raise Exception("PKEX Exchange Response not seen")
4393     ev = dev[1].wait_event(["DPP-RX"], timeout=5)
4394     if ev is None or "type=10" not in ev:
4395         raise Exception("PKEX Commit-Reveal Response not seen")
4396     if "ignore=invalid-attributes" not in ev:
4397         raise Exception("Unexpected RX info: " + ev)
4398
4399 def run_dpp_proto_pkex_req_missing(dev, test, reason):
4400     run_dpp_proto_init_pkex(dev, 1, test)
4401     ev = dev[0].wait_event(["DPP-FAIL"], timeout=5)
4402     if ev is None:
4403         raise Exception("DPP failure not seen")
4404     if reason not in ev:
4405         raise Exception("Unexpected failure: " + ev)
4406
4407 def run_dpp_proto_pkex_resp_missing(dev, test, reason):
4408     run_dpp_proto_init_pkex(dev, 0, test)
4409     ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
4410     if ev is None:
4411         raise Exception("DPP failure not seen")
4412     if reason not in ev:
4413         raise Exception("Unexpected failure: " + ev)
4414
4415 def test_dpp_proto_pkex_exchange_req_no_finite_cyclic_group(dev, apdev):
4416     """DPP protocol testing - no Finite Cyclic Group in PKEX Exchange Request"""
4417     run_dpp_proto_pkex_req_missing(dev, 34,
4418                                    "Missing or invalid Finite Cyclic Group attribute")
4419
4420 def test_dpp_proto_pkex_exchange_req_no_encrypted_key(dev, apdev):
4421     """DPP protocol testing - no Encrypted Key in PKEX Exchange Request"""
4422     run_dpp_proto_pkex_req_missing(dev, 35,
4423                                    "Missing Encrypted Key attribute")
4424
4425 def test_dpp_proto_pkex_exchange_resp_no_status(dev, apdev):
4426     """DPP protocol testing - no Status in PKEX Exchange Response"""
4427     run_dpp_proto_pkex_resp_missing(dev, 36, "No DPP Status attribute")
4428
4429 def test_dpp_proto_pkex_exchange_resp_no_encrypted_key(dev, apdev):
4430     """DPP protocol testing - no Encrypted Key in PKEX Exchange Response"""
4431     run_dpp_proto_pkex_resp_missing(dev, 37, "Missing Encrypted Key attribute")
4432
4433 def test_dpp_proto_pkex_cr_req_no_bootstrap_key(dev, apdev):
4434     """DPP protocol testing - no Bootstrap Key in PKEX Commit-Reveal Request"""
4435     run_dpp_proto_pkex_req_missing(dev, 38,
4436                                    "No valid peer bootstrapping key found")
4437
4438 def test_dpp_proto_pkex_cr_req_no_i_auth_tag(dev, apdev):
4439     """DPP protocol testing - no I-Auth Tag in PKEX Commit-Reveal Request"""
4440     run_dpp_proto_pkex_req_missing(dev, 39, "No valid u (I-Auth tag) found")
4441
4442 def test_dpp_proto_pkex_cr_req_no_wrapped_data(dev, apdev):
4443     """DPP protocol testing - no Wrapped Data in PKEX Commit-Reveal Request"""
4444     run_dpp_proto_pkex_req_missing(dev, 40, "Missing or invalid required Wrapped Data attribute")
4445
4446 def test_dpp_proto_pkex_cr_resp_no_bootstrap_key(dev, apdev):
4447     """DPP protocol testing - no Bootstrap Key in PKEX Commit-Reveal Response"""
4448     run_dpp_proto_pkex_resp_missing(dev, 41,
4449                                    "No valid peer bootstrapping key found")
4450
4451 def test_dpp_proto_pkex_cr_resp_no_r_auth_tag(dev, apdev):
4452     """DPP protocol testing - no R-Auth Tag in PKEX Commit-Reveal Response"""
4453     run_dpp_proto_pkex_resp_missing(dev, 42, "No valid v (R-Auth tag) found")
4454
4455 def test_dpp_proto_pkex_cr_resp_no_wrapped_data(dev, apdev):
4456     """DPP protocol testing - no Wrapped Data in PKEX Commit-Reveal Response"""
4457     run_dpp_proto_pkex_resp_missing(dev, 43, "Missing or invalid required Wrapped Data attribute")
4458
4459 def test_dpp_proto_pkex_exchange_req_invalid_encrypted_key(dev, apdev):
4460     """DPP protocol testing - invalid Encrypted Key in PKEX Exchange Request"""
4461     run_dpp_proto_pkex_req_missing(dev, 44,
4462                                    "Invalid Encrypted Key value")
4463
4464 def test_dpp_proto_pkex_exchange_resp_invalid_encrypted_key(dev, apdev):
4465     """DPP protocol testing - invalid Encrypted Key in PKEX Exchange Response"""
4466     run_dpp_proto_pkex_resp_missing(dev, 45,
4467                                     "Invalid Encrypted Key value")
4468
4469 def test_dpp_proto_pkex_exchange_resp_invalid_status(dev, apdev):
4470     """DPP protocol testing - invalid Status in PKEX Exchange Response"""
4471     run_dpp_proto_pkex_resp_missing(dev, 46,
4472                                     "PKEX failed (peer indicated failure)")
4473
4474 def test_dpp_proto_pkex_cr_req_invalid_bootstrap_key(dev, apdev):
4475     """DPP protocol testing - invalid Bootstrap Key in PKEX Commit-Reveal Request"""
4476     run_dpp_proto_pkex_req_missing(dev, 47,
4477                                    "Peer bootstrapping key is invalid")
4478
4479 def test_dpp_proto_pkex_cr_resp_invalid_bootstrap_key(dev, apdev):
4480     """DPP protocol testing - invalid Bootstrap Key in PKEX Commit-Reveal Response"""
4481     run_dpp_proto_pkex_resp_missing(dev, 48,
4482                                     "Peer bootstrapping key is invalid")
4483
4484 def test_dpp_proto_pkex_cr_req_i_auth_tag_mismatch(dev, apdev):
4485     """DPP protocol testing - I-auth tag mismatch in PKEX Commit-Reveal Request"""
4486     run_dpp_proto_pkex_req_missing(dev, 49, "No valid u (I-Auth tag) found")
4487
4488 def test_dpp_proto_pkex_cr_resp_r_auth_tag_mismatch(dev, apdev):
4489     """DPP protocol testing - R-auth tag mismatch in PKEX Commit-Reveal Response"""
4490     run_dpp_proto_pkex_resp_missing(dev, 50, "No valid v (R-Auth tag) found")
4491
4492 def test_dpp_proto_stop_at_pkex_exchange_resp(dev, apdev):
4493     """DPP protocol testing - stop when receiving PKEX Exchange Response"""
4494     run_dpp_proto_init_pkex(dev, 1, 84)
4495
4496     ev = dev[1].wait_event(["DPP-TX "], timeout=5)
4497     if ev is None:
4498         raise Exception("PKEX Exchange Req TX not seen")
4499
4500     ev = dev[0].wait_event(["DPP-TX "], timeout=5)
4501     if ev is None:
4502         raise Exception("PKEX Exchange Resp not seen")
4503
4504     ev = dev[1].wait_event(["DPP-TX "], timeout=0.1)
4505     if ev is not None:
4506         raise Exception("Unexpected PKEX CR Req TX")
4507
4508 def test_dpp_proto_stop_at_pkex_cr_req(dev, apdev):
4509     """DPP protocol testing - stop when receiving PKEX CR Request"""
4510     run_dpp_proto_init_pkex(dev, 0, 85)
4511
4512     ev = dev[1].wait_event(["DPP-TX "], timeout=5)
4513     if ev is None:
4514         raise Exception("PKEX Exchange Req TX not seen")
4515
4516     ev = dev[0].wait_event(["DPP-TX "], timeout=5)
4517     if ev is None:
4518         raise Exception("PKEX Exchange Resp not seen")
4519
4520     ev = dev[1].wait_event(["DPP-TX "], timeout=5)
4521     if ev is None:
4522         raise Exception("PKEX CR Req TX not seen")
4523
4524     ev = dev[0].wait_event(["DPP-TX "], timeout=0.1)
4525     if ev is not None:
4526         raise Exception("Unexpected PKEX CR Resp TX")
4527
4528 def test_dpp_proto_stop_at_pkex_cr_resp(dev, apdev):
4529     """DPP protocol testing - stop when receiving PKEX CR Response"""
4530     run_dpp_proto_init_pkex(dev, 1, 86)
4531
4532     ev = dev[1].wait_event(["DPP-TX "], timeout=5)
4533     if ev is None:
4534         raise Exception("PKEX Exchange Req TX not seen")
4535
4536     ev = dev[0].wait_event(["DPP-TX "], timeout=5)
4537     if ev is None:
4538         raise Exception("PKEX Exchange Resp not seen")
4539
4540     ev = dev[1].wait_event(["DPP-TX "], timeout=5)
4541     if ev is None:
4542         raise Exception("PKEX CR Req TX not seen")
4543
4544     ev = dev[0].wait_event(["DPP-TX "], timeout=5)
4545     if ev is None:
4546         raise Exception("PKEX CR Resp TX not seen")
4547
4548     ev = dev[1].wait_event(["DPP-TX "], timeout=0.1)
4549     if ev is not None:
4550         raise Exception("Unexpected Auth Req TX")
4551
4552 def test_dpp_proto_network_introduction(dev, apdev):
4553     """DPP protocol testing - network introduction"""
4554     check_dpp_capab(dev[0])
4555     check_dpp_capab(dev[1])
4556
4557     csign = "3059301306072a8648ce3d020106082a8648ce3d03010703420004d02e5bd81a120762b5f0f2994777f5d40297238a6c294fd575cdf35fabec44c050a6421c401d98d659fd2ed13c961cc8287944dd3202f516977800d3ab2f39ee"
4558     ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIwOHF4TlNYRzRWemdCV3BjVUdNSmc1czNvbElOVFJsRVQ1aERpNkRKY3ZjIiwieSI6IlVhaGFYQXpKRVpRQk1YaHRUQnlZZVlrOWtJYjk5UDA3UV9NcW9TVVZTVEkifX0.a5_nfMVr7Qe1SW0ZL3u6oQRm5NUCYUSfixDAJOUFN3XUfECBZ6E8fm8xjeSfdOytgRidTz0CTlIRjzPQo82dmQ"
4559     ap_netaccesskey = "30770201010420f6531d17f29dfab655b7c9e923478d5a345164c489aadd44a3519c3e9dcc792da00a06082a8648ce3d030107a14403420004d3cab13525c6e15ce0056a5c506309839b37a2520d4d19444f98438ba0c972f751a85a5c0cc911940131786d4c1c9879893d9086fdf4fd3b43f32aa125154932"
4560     sta_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoiZWMzR3NqQ3lQMzVBUUZOQUJJdEltQnN4WXVyMGJZX1dES1lfSE9zUGdjNCIsInkiOiJTRS1HVllkdWVnTFhLMU1TQXZNMEx2QWdLREpTNWoyQVhCbE9PMTdUSTRBIn19.PDK9zsGlK-e1pEOmNxVeJfCS8pNeay6ckIS1TXCQsR64AR-9wFPCNVjqOxWvVKltehyMFqVAtOcv0IrjtMJFqQ"
4561     sta_netaccesskey = "30770201010420bc33380c26fd2168b69cd8242ed1df07ba89aa4813f8d4e8523de6ca3f8dd28ba00a06082a8648ce3d030107a1440342000479cdc6b230b23f7e40405340048b48981b3162eaf46d8fd60ca63f1ceb0f81ce484f8655876e7a02d72b531202f3342ef020283252e63d805c194e3b5ed32380"
4562
4563     params = { "ssid": "dpp",
4564                "wpa": "2",
4565                "wpa_key_mgmt": "DPP",
4566                "ieee80211w": "2",
4567                "rsn_pairwise": "CCMP",
4568                "dpp_connector": ap_connector,
4569                "dpp_csign": csign,
4570                "dpp_netaccesskey": ap_netaccesskey }
4571     try:
4572         hapd = hostapd.add_ap(apdev[0], params)
4573     except:
4574         raise HwsimSkip("DPP not supported")
4575
4576     for test in [ 60, 61, 80, 82 ]:
4577         dev[0].set("dpp_test", str(test))
4578         dev[0].connect("dpp", key_mgmt="DPP", scan_freq="2412", ieee80211w="2",
4579                        dpp_csign=csign, dpp_connector=sta_connector,
4580                        dpp_netaccesskey=sta_netaccesskey, wait_connect=False)
4581
4582         ev = dev[0].wait_event(["DPP-TX"], timeout=10)
4583         if ev is None or "type=5" not in ev:
4584             raise Exception("Peer Discovery Request TX not reported")
4585         ev = dev[0].wait_event(["DPP-TX-STATUS"], timeout=2)
4586         if ev is None or "result=SUCCESS" not in ev:
4587             raise Exception("Peer Discovery Request TX status not reported")
4588
4589         ev = hapd.wait_event(["DPP-RX"], timeout=10)
4590         if ev is None or "type=5" not in ev:
4591             raise Exception("Peer Discovery Request RX not reported")
4592
4593         if test == 80:
4594             ev = dev[0].wait_event(["DPP-INTRO"], timeout=10)
4595             if ev is None:
4596                 raise Exception("DPP-INTRO not reported for test 80")
4597             if "status=7" not in ev:
4598                 raise Exception("Unexpected result in test 80: " + ev)
4599
4600         dev[0].request("REMOVE_NETWORK all")
4601         dev[0].dump_monitor()
4602         hapd.dump_monitor()
4603     dev[0].set("dpp_test", "0")
4604
4605     for test in [ 62, 63, 64, 77, 78, 79 ]:
4606         hapd.set("dpp_test", str(test))
4607         dev[0].connect("dpp", key_mgmt="DPP", scan_freq="2412", ieee80211w="2",
4608                        dpp_csign=csign, dpp_connector=sta_connector,
4609                        dpp_netaccesskey=sta_netaccesskey, wait_connect=False)
4610
4611         ev = dev[0].wait_event(["DPP-INTRO"], timeout=10)
4612         if ev is None:
4613             raise Exception("Peer introduction result not reported (test %d)" % test)
4614         if test == 77:
4615             if "fail=transaction_id_mismatch" not in ev:
4616                 raise Exception("Connector validation failure not reported")
4617         elif test == 78:
4618             if "status=254" not in ev:
4619                 raise Exception("Invalid status value not reported")
4620         elif test == 79:
4621             if "fail=peer_connector_validation_failed" not in ev:
4622                 raise Exception("Connector validation failure not reported")
4623         elif "status=" in ev:
4624             raise Exception("Unexpected peer introduction result (test %d): " % test + ev)
4625
4626         dev[0].request("REMOVE_NETWORK all")
4627         dev[0].dump_monitor()
4628         hapd.dump_monitor()
4629     hapd.set("dpp_test", "0")
4630
4631     dev[0].connect("dpp", key_mgmt="DPP", scan_freq="2412", ieee80211w="2",
4632                    dpp_csign=csign, dpp_connector=sta_connector,
4633                    dpp_netaccesskey=sta_netaccesskey)
4634
4635 def test_dpp_qr_code_no_chan_list_unicast(dev, apdev):
4636     """DPP QR Code and no channel list (unicast)"""
4637     run_dpp_qr_code_chan_list(dev, apdev, True, 2417, None)
4638
4639 def test_dpp_qr_code_chan_list_unicast(dev, apdev):
4640     """DPP QR Code and 2.4 GHz channels (unicast)"""
4641     run_dpp_qr_code_chan_list(dev, apdev, True, 2417,
4642                               "81/1,81/2,81/3,81/4,81/5,81/6,81/7,81/8,81/9,81/10,81/11,81/12,81/13")
4643
4644 def test_dpp_qr_code_chan_list_no_peer_unicast(dev, apdev):
4645     """DPP QR Code and channel list and no peer (unicast)"""
4646     run_dpp_qr_code_chan_list(dev, apdev, True, 2417, "81/1,81/6,81/11",
4647                               no_wait=True)
4648     ev = dev[1].wait_event(["DPP-AUTH-INIT-FAILED"], timeout=5)
4649     if ev is None:
4650         raise Exception("Initiation failure not reported")
4651
4652 def test_dpp_qr_code_no_chan_list_broadcast(dev, apdev):
4653     """DPP QR Code and no channel list (broadcast)"""
4654     run_dpp_qr_code_chan_list(dev, apdev, False, 2412, None)
4655
4656 def test_dpp_qr_code_chan_list_broadcast(dev, apdev):
4657     """DPP QR Code and some 2.4 GHz channels (broadcast)"""
4658     run_dpp_qr_code_chan_list(dev, apdev, False, 2412, "81/1,81/6,81/11",
4659                               timeout=10)
4660
4661 def run_dpp_qr_code_chan_list(dev, apdev, unicast, listen_freq, chanlist,
4662                               no_wait=False, timeout=5):
4663     check_dpp_capab(dev[0])
4664     check_dpp_capab(dev[1])
4665     dev[1].set("dpp_init_max_tries", "3")
4666     dev[1].set("dpp_init_retry_time", "100")
4667     dev[1].set("dpp_resp_wait_time", "1000")
4668
4669     logger.info("dev0 displays QR Code")
4670     cmd = "DPP_BOOTSTRAP_GEN type=qrcode"
4671     if chanlist:
4672         cmd += " chan=" + chanlist
4673     if unicast:
4674         addr = dev[0].own_addr().replace(':', '')
4675         cmd += " mac=" + addr
4676     res = dev[0].request(cmd)
4677     if "FAIL" in res:
4678         raise Exception("Failed to generate bootstrapping info")
4679     id0 = int(res)
4680     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
4681
4682     logger.info("dev1 scans QR Code")
4683     res = dev[1].request("DPP_QR_CODE " + uri0)
4684     if "FAIL" in res:
4685         raise Exception("Failed to parse QR Code URI")
4686     id1 = int(res)
4687
4688     logger.info("dev1 initiates DPP Authentication")
4689     cmd = "DPP_LISTEN %d" % listen_freq
4690     if "OK" not in dev[0].request(cmd):
4691         raise Exception("Failed to start listen operation")
4692     cmd = "DPP_AUTH_INIT peer=%d" % id1
4693     if "OK" not in dev[1].request(cmd):
4694         raise Exception("Failed to initiate DPP Authentication")
4695     if no_wait:
4696         return
4697     ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=timeout)
4698     if ev is None:
4699         raise Exception("DPP authentication did not succeed (Responder)")
4700     ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
4701     if ev is None:
4702         raise Exception("DPP authentication did not succeed (Initiator)")
4703     ev = dev[0].wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5)
4704     if ev is None:
4705         raise Exception("DPP configuration not completed (Enrollee)")
4706     dev[0].request("DPP_STOP_LISTEN")
4707     dev[0].dump_monitor()
4708     dev[1].dump_monitor()
4709
4710 def test_dpp_qr_code_chan_list_no_match(dev, apdev):
4711     """DPP QR Code and no matching supported channel"""
4712     check_dpp_capab(dev[0])
4713     check_dpp_capab(dev[1])
4714
4715     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=123/123"
4716     res = dev[0].request(cmd)
4717     if "FAIL" in res:
4718         raise Exception("Failed to generate bootstrapping info")
4719     id0 = int(res)
4720     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
4721
4722     res = dev[1].request("DPP_QR_CODE " + uri0)
4723     if "FAIL" in res:
4724         raise Exception("Failed to parse QR Code URI")
4725     id1 = int(res)
4726
4727     cmd = "DPP_AUTH_INIT peer=%d" % id1
4728     if "FAIL" not in dev[1].request(cmd):
4729         raise Exception("DPP Authentication started unexpectedly")
4730
4731 def test_dpp_pkex_alloc_fail(dev, apdev):
4732     """DPP/PKEX and memory allocation failures"""
4733     check_dpp_capab(dev[0])
4734     check_dpp_capab(dev[1])
4735
4736     tests = [ (1, "=dpp_keygen_configurator"),
4737               (1, "base64_gen_encode;dpp_keygen_configurator") ]
4738     for count, func in tests:
4739         with alloc_fail(dev[1], count, func):
4740             cmd = "DPP_CONFIGURATOR_ADD"
4741             res = dev[1].request(cmd);
4742             if "FAIL" not in res:
4743                 raise Exception("Unexpected DPP_CONFIGURATOR_ADD success")
4744
4745     cmd = "DPP_CONFIGURATOR_ADD"
4746     res = dev[1].request(cmd);
4747     if "FAIL" in res:
4748         raise Exception("Failed to add configurator")
4749     conf_id = int(res)
4750
4751     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4752     res = dev[0].request(cmd)
4753     if "FAIL" in res:
4754         raise Exception("Failed to generate bootstrapping info")
4755     id0 = int(res)
4756
4757     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4758     res = dev[1].request(cmd)
4759     if "FAIL" in res:
4760         raise Exception("Failed to generate bootstrapping info")
4761     id1 = int(res)
4762
4763     # Local error cases on the Initiator
4764     tests = [ (1, "dpp_get_pubkey_point"),
4765               (1, "dpp_alloc_msg;dpp_pkex_build_exchange_req"),
4766               (1, "dpp_alloc_msg;dpp_pkex_build_commit_reveal_req"),
4767               (1, "dpp_alloc_msg;dpp_auth_build_req"),
4768               (1, "dpp_alloc_msg;dpp_auth_build_conf"),
4769               (1, "dpp_bootstrap_key_hash"),
4770               (1, "dpp_auth_init"),
4771               (1, "=dpp_auth_resp_rx"),
4772               (2, "=dpp_auth_resp_rx"),
4773               (1, "dpp_build_conf_start"),
4774               (1, "dpp_build_conf_obj_dpp"),
4775               (2, "dpp_build_conf_obj_dpp"),
4776               (3, "dpp_build_conf_obj_dpp"),
4777               (4, "dpp_build_conf_obj_dpp"),
4778               (5, "dpp_build_conf_obj_dpp"),
4779               (6, "dpp_build_conf_obj_dpp"),
4780               (7, "dpp_build_conf_obj_dpp"),
4781               (8, "dpp_build_conf_obj_dpp"),
4782               (1, "dpp_conf_req_rx"),
4783               (2, "dpp_conf_req_rx"),
4784               (3, "dpp_conf_req_rx"),
4785               (4, "dpp_conf_req_rx"),
4786               (5, "dpp_conf_req_rx"),
4787               (6, "dpp_conf_req_rx"),
4788               (7, "dpp_conf_req_rx"),
4789               (1, "dpp_pkex_init"),
4790               (2, "dpp_pkex_init"),
4791               (3, "dpp_pkex_init"),
4792               (1, "dpp_pkex_derive_z"),
4793               (1, "=dpp_pkex_rx_commit_reveal_resp"),
4794               (1, "dpp_get_pubkey_point;dpp_build_jwk"),
4795               (2, "dpp_get_pubkey_point;dpp_build_jwk"),
4796               (1, "dpp_get_pubkey_point;dpp_auth_init") ]
4797     for count, func in tests:
4798         dev[0].request("DPP_STOP_LISTEN")
4799         dev[1].request("DPP_STOP_LISTEN")
4800         dev[0].dump_monitor()
4801         dev[1].dump_monitor()
4802
4803         cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
4804         res = dev[0].request(cmd)
4805         if "FAIL" in res:
4806             raise Exception("Failed to set PKEX data (responder)")
4807         cmd = "DPP_LISTEN 2437"
4808         if "OK" not in dev[0].request(cmd):
4809             raise Exception("Failed to start listen operation")
4810
4811         with alloc_fail(dev[1], count, func):
4812             cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 conf=sta-dpp configurator=%d code=secret" % (id1, conf_id)
4813             dev[1].request(cmd)
4814             wait_fail_trigger(dev[1], "GET_ALLOC_FAIL", max_iter=100)
4815             ev = dev[0].wait_event(["GAS-QUERY-START"], timeout=0.01)
4816             if ev:
4817                 dev[0].request("DPP_STOP_LISTEN")
4818                 dev[0].wait_event(["GAS-QUERY-DONE"], timeout=3)
4819
4820     # Local error cases on the Responder
4821     tests = [ (1, "dpp_get_pubkey_point"),
4822               (1, "dpp_alloc_msg;dpp_pkex_build_exchange_resp"),
4823               (1, "dpp_alloc_msg;dpp_pkex_build_commit_reveal_resp"),
4824               (1, "dpp_alloc_msg;dpp_auth_build_resp"),
4825               (1, "dpp_get_pubkey_point;dpp_auth_build_resp_ok"),
4826               (1, "=dpp_auth_req_rx"),
4827               (2, "=dpp_auth_req_rx"),
4828               (1, "=dpp_auth_conf_rx"),
4829               (1, "json_parse;dpp_parse_jws_prot_hdr"),
4830               (1, "json_get_member_base64url;dpp_parse_jws_prot_hdr"),
4831               (1, "json_get_member_base64url;dpp_parse_jwk"),
4832               (2, "json_get_member_base64url;dpp_parse_jwk"),
4833               (1, "json_parse;dpp_parse_connector"),
4834               (1, "dpp_parse_jwk;dpp_parse_connector"),
4835               (1, "dpp_parse_jwk;dpp_parse_cred_dpp"),
4836               (1, "dpp_get_pubkey_point;dpp_check_pubkey_match"),
4837               (1, "base64_gen_decode;dpp_process_signed_connector"),
4838               (1, "dpp_parse_jws_prot_hdr;dpp_process_signed_connector"),
4839               (2, "base64_gen_decode;dpp_process_signed_connector"),
4840               (3, "base64_gen_decode;dpp_process_signed_connector"),
4841               (4, "base64_gen_decode;dpp_process_signed_connector"),
4842               (1, "json_parse;dpp_parse_conf_obj"),
4843               (1, "dpp_conf_resp_rx"),
4844               (1, "=dpp_pkex_derive_z"),
4845               (1, "=dpp_pkex_rx_exchange_req"),
4846               (2, "=dpp_pkex_rx_exchange_req"),
4847               (3, "=dpp_pkex_rx_exchange_req"),
4848               (1, "=dpp_pkex_rx_commit_reveal_req"),
4849               (1, "dpp_get_pubkey_point;dpp_pkex_rx_commit_reveal_req"),
4850               (1, "dpp_bootstrap_key_hash") ]
4851     for count, func in tests:
4852         dev[0].request("DPP_STOP_LISTEN")
4853         dev[1].request("DPP_STOP_LISTEN")
4854         dev[0].dump_monitor()
4855         dev[1].dump_monitor()
4856
4857         cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
4858         res = dev[0].request(cmd)
4859         if "FAIL" in res:
4860             raise Exception("Failed to set PKEX data (responder)")
4861         cmd = "DPP_LISTEN 2437"
4862         if "OK" not in dev[0].request(cmd):
4863             raise Exception("Failed to start listen operation")
4864
4865         with alloc_fail(dev[0], count, func):
4866             cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 conf=sta-dpp configurator=%d code=secret" % (id1, conf_id)
4867             dev[1].request(cmd)
4868             wait_fail_trigger(dev[0], "GET_ALLOC_FAIL", max_iter=100)
4869             ev = dev[0].wait_event(["GAS-QUERY-START"], timeout=0.01)
4870             if ev:
4871                 dev[0].request("DPP_STOP_LISTEN")
4872                 dev[0].wait_event(["GAS-QUERY-DONE"], timeout=3)
4873
4874 def test_dpp_pkex_test_fail(dev, apdev):
4875     """DPP/PKEX and local failures"""
4876     check_dpp_capab(dev[0])
4877     check_dpp_capab(dev[1])
4878
4879     tests = [ (1, "dpp_keygen_configurator") ]
4880     for count, func in tests:
4881         with fail_test(dev[1], count, func):
4882             cmd = "DPP_CONFIGURATOR_ADD"
4883             res = dev[1].request(cmd);
4884             if "FAIL" not in res:
4885                 raise Exception("Unexpected DPP_CONFIGURATOR_ADD success")
4886
4887     tests = [ (1, "dpp_keygen") ]
4888     for count, func in tests:
4889         with fail_test(dev[1], count, func):
4890             cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4891             res = dev[1].request(cmd);
4892             if "FAIL" not in res:
4893                 raise Exception("Unexpected DPP_BOOTSTRAP_GEN success")
4894
4895     cmd = "DPP_CONFIGURATOR_ADD"
4896     res = dev[1].request(cmd);
4897     if "FAIL" in res:
4898         raise Exception("Failed to add configurator")
4899     conf_id = int(res)
4900
4901     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4902     res = dev[0].request(cmd)
4903     if "FAIL" in res:
4904         raise Exception("Failed to generate bootstrapping info")
4905     id0 = int(res)
4906
4907     cmd = "DPP_BOOTSTRAP_GEN type=pkex"
4908     res = dev[1].request(cmd)
4909     if "FAIL" in res:
4910         raise Exception("Failed to generate bootstrapping info")
4911     id1 = int(res)
4912
4913     # Local error cases on the Initiator
4914     tests = [ (1, "aes_siv_encrypt;dpp_auth_build_req"),
4915               (1, "os_get_random;dpp_auth_init"),
4916               (1, "dpp_derive_k1;dpp_auth_init"),
4917               (1, "dpp_hkdf_expand;dpp_derive_k1;dpp_auth_init"),
4918               (1, "dpp_gen_i_auth;dpp_auth_build_conf"),
4919               (1, "aes_siv_encrypt;dpp_auth_build_conf"),
4920               (1, "dpp_derive_k2;dpp_auth_resp_rx"),
4921               (1, "dpp_hkdf_expand;dpp_derive_k2;dpp_auth_resp_rx"),
4922               (1, "dpp_derive_ke;dpp_auth_resp_rx"),
4923               (1, "dpp_hkdf_expand;dpp_derive_ke;dpp_auth_resp_rx"),
4924               (1, "dpp_gen_r_auth;dpp_auth_resp_rx"),
4925               (1, "aes_siv_encrypt;dpp_build_conf_resp"),
4926               (1, "dpp_pkex_derive_Qi;dpp_pkex_build_exchange_req"),
4927               (1, "aes_siv_encrypt;dpp_pkex_build_commit_reveal_req"),
4928               (1, "hmac_sha256_vector;dpp_pkex_rx_exchange_resp"),
4929               (1, "aes_siv_decrypt;dpp_pkex_rx_commit_reveal_resp"),
4930               (1, "hmac_sha256_vector;dpp_pkex_rx_commit_reveal_resp"),
4931               (1, "dpp_bootstrap_key_hash") ]
4932     for count, func in tests:
4933         dev[0].request("DPP_STOP_LISTEN")
4934         dev[1].request("DPP_STOP_LISTEN")
4935         dev[0].dump_monitor()
4936         dev[1].dump_monitor()
4937
4938         cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
4939         res = dev[0].request(cmd)
4940         if "FAIL" in res:
4941             raise Exception("Failed to set PKEX data (responder)")
4942         cmd = "DPP_LISTEN 2437"
4943         if "OK" not in dev[0].request(cmd):
4944             raise Exception("Failed to start listen operation")
4945
4946         with fail_test(dev[1], count, func):
4947             cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 conf=sta-dpp configurator=%d code=secret" % (id1, conf_id)
4948             dev[1].request(cmd)
4949             wait_fail_trigger(dev[1], "GET_FAIL", max_iter=100)
4950             ev = dev[0].wait_event(["GAS-QUERY-START"], timeout=0.01)
4951             if ev:
4952                 dev[0].request("DPP_STOP_LISTEN")
4953                 dev[0].wait_event(["GAS-QUERY-DONE"], timeout=3)
4954
4955     # Local error cases on the Responder
4956     tests = [ (1, "aes_siv_encrypt;dpp_auth_build_resp"),
4957               (1, "aes_siv_encrypt;dpp_auth_build_resp;dpp_auth_build_resp_ok"),
4958               (1, "os_get_random;dpp_build_conf_req"),
4959               (1, "aes_siv_encrypt;dpp_build_conf_req"),
4960               (1, "os_get_random;dpp_auth_build_resp_ok"),
4961               (1, "dpp_derive_k2;dpp_auth_build_resp_ok"),
4962               (1, "dpp_derive_ke;dpp_auth_build_resp_ok"),
4963               (1, "dpp_gen_r_auth;dpp_auth_build_resp_ok"),
4964               (1, "aes_siv_encrypt;dpp_auth_build_resp_ok"),
4965               (1, "dpp_derive_k1;dpp_auth_req_rx"),
4966               (1, "aes_siv_decrypt;dpp_auth_req_rx"),
4967               (1, "aes_siv_decrypt;dpp_auth_conf_rx"),
4968               (1, "dpp_gen_i_auth;dpp_auth_conf_rx"),
4969               (1, "dpp_check_pubkey_match"),
4970               (1, "aes_siv_decrypt;dpp_conf_resp_rx"),
4971               (1, "hmac_sha256_kdf;dpp_pkex_derive_z"),
4972               (1, "dpp_pkex_derive_Qi;dpp_pkex_rx_exchange_req"),
4973               (1, "dpp_pkex_derive_Qr;dpp_pkex_rx_exchange_req"),
4974               (1, "aes_siv_encrypt;dpp_pkex_build_commit_reveal_resp"),
4975               (1, "aes_siv_decrypt;dpp_pkex_rx_commit_reveal_req"),
4976               (1, "hmac_sha256_vector;dpp_pkex_rx_commit_reveal_req"),
4977               (2, "hmac_sha256_vector;dpp_pkex_rx_commit_reveal_req") ]
4978     for count, func in tests:
4979         dev[0].request("DPP_STOP_LISTEN")
4980         dev[1].request("DPP_STOP_LISTEN")
4981         dev[0].dump_monitor()
4982         dev[1].dump_monitor()
4983
4984         cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0)
4985         res = dev[0].request(cmd)
4986         if "FAIL" in res:
4987             raise Exception("Failed to set PKEX data (responder)")
4988         cmd = "DPP_LISTEN 2437"
4989         if "OK" not in dev[0].request(cmd):
4990             raise Exception("Failed to start listen operation")
4991
4992         with fail_test(dev[0], count, func):
4993             cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 conf=sta-dpp configurator=%d code=secret" % (id1, conf_id)
4994             dev[1].request(cmd)
4995             wait_fail_trigger(dev[0], "GET_FAIL", max_iter=100)
4996             ev = dev[0].wait_event(["GAS-QUERY-START"], timeout=0.01)
4997             if ev:
4998                 dev[0].request("DPP_STOP_LISTEN")
4999                 dev[0].wait_event(["GAS-QUERY-DONE"], timeout=3)
5000
5001 def test_dpp_keygen_configurator_error(dev, apdev):
5002     """DPP Configurator keygen error case"""
5003     check_dpp_capab(dev[0])
5004     if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_ADD curve=unknown"):
5005         raise Exception("Unexpected success of invalid DPP_CONFIGURATOR_ADD")
5006
5007 def rx_process_frame(dev):
5008     msg = dev.mgmt_rx()
5009     if "OK" not in dev.request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))):
5010         raise Exception("MGMT_RX_PROCESS failed")
5011
5012 def wait_auth_success(responder, initiator):
5013     ev = responder.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
5014     if ev is None:
5015         raise Exception("DPP authentication did not succeed (Responder)")
5016     ev = initiator.wait_event(["DPP-AUTH-SUCCESS"], timeout=5)
5017     if ev is None:
5018         raise Exception("DPP authentication did not succeed (Initiator)")
5019
5020 def wait_conf_completion(configurator, enrollee):
5021     ev = configurator.wait_event(["DPP-CONF-SENT"], timeout=5)
5022     if ev is None:
5023         raise Exception("DPP configuration not completed (Configurator)")
5024     ev = enrollee.wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"],
5025                              timeout=5)
5026     if ev is None:
5027         raise Exception("DPP configuration not completed (Enrollee)")
5028
5029 def start_dpp(dev):
5030     addr = dev[0].own_addr().replace(':', '')
5031     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
5032     res = dev[0].request(cmd)
5033     if "FAIL" in res:
5034         raise Exception("Failed to generate bootstrapping info")
5035     id0 = int(res)
5036     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
5037
5038     res = dev[1].request("DPP_QR_CODE " + uri0)
5039     if "FAIL" in res:
5040         raise Exception("Failed to parse QR Code URI")
5041     id1 = int(res)
5042
5043     conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}' + 3000*' '
5044     dev[0].set("dpp_config_obj_override", conf)
5045
5046     dev[0].set("ext_mgmt_frame_handling", "1")
5047     cmd = "DPP_LISTEN 2412"
5048     if "OK" not in dev[0].request(cmd):
5049         raise Exception("Failed to start listen operation")
5050     cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1
5051     if "OK" not in dev[1].request(cmd):
5052         raise Exception("Failed to initiate DPP Authentication")
5053
5054 def test_dpp_gas_timeout_handling(dev, apdev):
5055     """DPP and GAS timeout handling"""
5056     check_dpp_capab(dev[0])
5057     check_dpp_capab(dev[1])
5058     start_dpp(dev)
5059
5060     # DPP Authentication Request
5061     rx_process_frame(dev[0])
5062
5063     # DPP Authentication Confirmation
5064     rx_process_frame(dev[0])
5065
5066     wait_auth_success(dev[0], dev[1])
5067
5068     # DPP Configuration Request (GAS Initial Request frame)
5069     rx_process_frame(dev[0])
5070
5071     # DPP Configuration Request (GAS Comeback Request frame)
5072     rx_process_frame(dev[0])
5073
5074     # Wait for GAS timeout
5075     ev = dev[1].wait_event(["DPP-CONF-FAILED"], timeout=5)
5076     if ev is None:
5077         raise Exception("DPP configuration not completed (Enrollee)")
5078
5079 def test_dpp_gas_comeback_after_failure(dev, apdev):
5080     """DPP and GAS comeback after failure"""
5081     check_dpp_capab(dev[0])
5082     check_dpp_capab(dev[1])
5083     start_dpp(dev)
5084
5085     # DPP Authentication Request
5086     rx_process_frame(dev[0])
5087
5088     # DPP Authentication Confirmation
5089     rx_process_frame(dev[0])
5090
5091     wait_auth_success(dev[0], dev[1])
5092
5093     # DPP Configuration Request (GAS Initial Request frame)
5094     rx_process_frame(dev[0])
5095
5096     # DPP Configuration Request (GAS Comeback Request frame)
5097     msg = dev[0].mgmt_rx()
5098     frame = msg['frame'].encode('hex')
5099     with alloc_fail(dev[0], 1, "gas_build_comeback_resp;gas_server_handle_rx_comeback_req"):
5100         if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame)):
5101             raise Exception("MGMT_RX_PROCESS failed")
5102         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5103     # Try the same frame again - this is expected to fail since the response has
5104     # already been freed.
5105     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame)):
5106         raise Exception("MGMT_RX_PROCESS failed")
5107
5108     # DPP Configuration Request (GAS Comeback Request frame retry)
5109     msg = dev[0].mgmt_rx()
5110
5111 def test_dpp_gas(dev, apdev):
5112     """DPP and GAS protocol testing"""
5113     check_dpp_capab(dev[0])
5114     check_dpp_capab(dev[1])
5115     start_dpp(dev)
5116
5117     # DPP Authentication Request
5118     rx_process_frame(dev[0])
5119
5120     # DPP Authentication Confirmation
5121     rx_process_frame(dev[0])
5122
5123     wait_auth_success(dev[0], dev[1])
5124
5125     # DPP Configuration Request (GAS Initial Request frame)
5126     msg = dev[0].mgmt_rx()
5127
5128     # Protected Dual of GAS Initial Request frame (dropped by GAS server)
5129     frame = msg['frame'].encode('hex')
5130     frame = frame[0:48] + "09" + frame[50:]
5131     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame)):
5132         raise Exception("MGMT_RX_PROCESS failed")
5133
5134     with alloc_fail(dev[0], 1, "gas_server_send_resp"):
5135         frame = msg['frame'].encode('hex')
5136         if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame)):
5137             raise Exception("MGMT_RX_PROCESS failed")
5138         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5139
5140     with alloc_fail(dev[0], 1, "gas_build_initial_resp;gas_server_send_resp"):
5141         frame = msg['frame'].encode('hex')
5142         if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame)):
5143             raise Exception("MGMT_RX_PROCESS failed")
5144         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5145
5146     # Add extra data after Query Request field to trigger
5147     # "GAS: Ignored extra data after Query Request field"
5148     frame = msg['frame'].encode('hex') + "00"
5149     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame)):
5150         raise Exception("MGMT_RX_PROCESS failed")
5151
5152     # DPP Configuration Request (GAS Comeback Request frame)
5153     rx_process_frame(dev[0])
5154
5155     # DPP Configuration Request (GAS Comeback Request frame)
5156     rx_process_frame(dev[0])
5157
5158     # DPP Configuration Request (GAS Comeback Request frame)
5159     rx_process_frame(dev[0])
5160
5161     wait_conf_completion(dev[0], dev[1])
5162
5163 def test_dpp_truncated_attr(dev, apdev):
5164     """DPP and truncated attribute"""
5165     check_dpp_capab(dev[0])
5166     check_dpp_capab(dev[1])
5167     start_dpp(dev)
5168
5169     # DPP Authentication Request
5170     msg = dev[0].mgmt_rx()
5171     frame = msg['frame']
5172
5173     # DPP: Truncated message - not enough room for the attribute - dropped
5174     frame1 = frame[0:36].encode('hex')
5175     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame1)):
5176         raise Exception("MGMT_RX_PROCESS failed")
5177     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
5178     if ev is None or "ignore=invalid-attributes" not in ev:
5179         raise Exception("Invalid attribute error not reported")
5180
5181     # DPP: Unexpected octets (3) after the last attribute
5182     frame2 = frame.encode('hex') + "000000"
5183     if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], frame2)):
5184         raise Exception("MGMT_RX_PROCESS failed")
5185     ev = dev[0].wait_event(["DPP-RX"], timeout=5)
5186     if ev is None or "ignore=invalid-attributes" not in ev:
5187         raise Exception("Invalid attribute error not reported")
5188
5189 def test_dpp_bootstrap_key_autogen_issues(dev, apdev):
5190     """DPP bootstrap key autogen issues"""
5191     check_dpp_capab(dev[0])
5192     check_dpp_capab(dev[1])
5193
5194     logger.info("dev0 displays QR Code")
5195     addr = dev[0].own_addr().replace(':', '')
5196     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
5197     res = dev[0].request(cmd)
5198     if "FAIL" in res:
5199         raise Exception("Failed to generate bootstrapping info")
5200     id0 = int(res)
5201     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
5202
5203     logger.info("dev1 scans QR Code")
5204     res = dev[1].request("DPP_QR_CODE " + uri0)
5205     if "FAIL" in res:
5206         raise Exception("Failed to parse QR Code URI")
5207     id1 = int(res)
5208
5209     logger.info("dev1 initiates DPP Authentication")
5210     cmd = "DPP_LISTEN 2412"
5211     if "OK" not in dev[0].request(cmd):
5212         raise Exception("Failed to start listen operation")
5213     with alloc_fail(dev[1], 1, "dpp_autogen_bootstrap_key"):
5214         cmd = "DPP_AUTH_INIT peer=%d" % id1
5215         if "FAIL" not in dev[1].request(cmd):
5216             raise Exception("Failure not reported")
5217     with alloc_fail(dev[1], 2, "=dpp_autogen_bootstrap_key"):
5218         cmd = "DPP_AUTH_INIT peer=%d" % id1
5219         if "FAIL" not in dev[1].request(cmd):
5220             raise Exception("Failure not reported")
5221     with fail_test(dev[1], 1, "dpp_keygen;dpp_autogen_bootstrap_key"):
5222         cmd = "DPP_AUTH_INIT peer=%d" % id1
5223         if "FAIL" not in dev[1].request(cmd):
5224             raise Exception("Failure not reported")
5225     dev[0].request("DPP_STOP_LISTEN")
5226
5227 def test_dpp_auth_resp_status_failure(dev, apdev):
5228     """DPP and Auth Resp(status) build failure"""
5229     with alloc_fail(dev[0], 1, "dpp_auth_build_resp"):
5230         run_dpp_proto_auth_resp_missing(dev, 99999, None,
5231                                         incompatible_roles=True)
5232
5233 def test_dpp_auth_resp_aes_siv_issue(dev, apdev):
5234     """DPP Auth Resp AES-SIV issue"""
5235     check_dpp_capab(dev[0])
5236     check_dpp_capab(dev[1])
5237
5238     logger.info("dev0 displays QR Code")
5239     addr = dev[0].own_addr().replace(':', '')
5240     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
5241     res = dev[0].request(cmd)
5242     if "FAIL" in res:
5243         raise Exception("Failed to generate bootstrapping info")
5244     id0 = int(res)
5245     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
5246
5247     logger.info("dev1 scans QR Code")
5248     res = dev[1].request("DPP_QR_CODE " + uri0)
5249     if "FAIL" in res:
5250         raise Exception("Failed to parse QR Code URI")
5251     id1 = int(res)
5252
5253     logger.info("dev1 initiates DPP Authentication")
5254     cmd = "DPP_LISTEN 2412"
5255     if "OK" not in dev[0].request(cmd):
5256         raise Exception("Failed to start listen operation")
5257     cmd = "DPP_AUTH_INIT peer=%d" % id1
5258     with fail_test(dev[1], 1, "aes_siv_decrypt;dpp_auth_resp_rx"):
5259         if "OK" not in dev[1].request(cmd):
5260             raise Exception("Failed to initiate DPP Authentication")
5261         ev = dev[1].wait_event(["DPP-FAIL"], timeout=5)
5262         if ev is None or "AES-SIV decryption failed" not in ev:
5263             raise Exception("AES-SIV decryption failure not reported")
5264     dev[0].request("DPP_STOP_LISTEN")
5265
5266 def test_dpp_invalid_legacy_params(dev, apdev):
5267     """DPP invalid legacy parameters"""
5268     check_dpp_capab(dev[0])
5269     check_dpp_capab(dev[1])
5270
5271     addr = dev[0].own_addr().replace(':', '')
5272     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
5273     res = dev[0].request(cmd)
5274     if "FAIL" in res:
5275         raise Exception("Failed to generate bootstrapping info")
5276     id0 = int(res)
5277     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
5278
5279     res = dev[1].request("DPP_QR_CODE " + uri0)
5280     if "FAIL" in res:
5281         raise Exception("Failed to parse QR Code URI")
5282     id1 = int(res)
5283
5284     # No pass/psk
5285     cmd = "DPP_AUTH_INIT peer=%d conf=sta-psk ssid=%s" % (id1, "dpp-legacy".encode("hex"))
5286     if "FAIL" not in dev[1].request(cmd):
5287         raise Exception("Invalid command not rejected")
5288
5289 def test_dpp_invalid_legacy_params2(dev, apdev):
5290     """DPP invalid legacy parameters 2"""
5291     check_dpp_capab(dev[0])
5292     check_dpp_capab(dev[1])
5293
5294     addr = dev[0].own_addr().replace(':', '')
5295     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
5296     res = dev[0].request(cmd)
5297     if "FAIL" in res:
5298         raise Exception("Failed to generate bootstrapping info")
5299     id0 = int(res)
5300     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
5301
5302     res = dev[1].request("DPP_QR_CODE " + uri0)
5303     if "FAIL" in res:
5304         raise Exception("Failed to parse QR Code URI")
5305     id1 = int(res)
5306
5307     dev[0].set("dpp_configurator_params",
5308                " conf=sta-psk ssid=%s" % ("dpp-legacy".encode("hex")))
5309     cmd = "DPP_LISTEN 2412 role=configurator"
5310     if "OK" not in dev[0].request(cmd):
5311         raise Exception("Failed to start listen operation")
5312
5313     # No pass/psk
5314     cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1
5315     if "OK" not in dev[1].request(cmd):
5316         raise Exception("Failed to initiate DPP Authentication")
5317     ev = dev[0].wait_event(["DPP: Failed to set configurator parameters"],
5318                            timeout=5)
5319     if ev is None:
5320         raise Exception("DPP configuration failure not reported")
5321
5322 def test_dpp_legacy_params_failure(dev, apdev):
5323     """DPP legacy parameters local failure"""
5324     check_dpp_capab(dev[0])
5325     check_dpp_capab(dev[1])
5326
5327     addr = dev[0].own_addr().replace(':', '')
5328     cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr
5329     res = dev[0].request(cmd)
5330     if "FAIL" in res:
5331         raise Exception("Failed to generate bootstrapping info")
5332     id0 = int(res)
5333     uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0)
5334
5335     res = dev[1].request("DPP_QR_CODE " + uri0)
5336     if "FAIL" in res:
5337         raise Exception("Failed to parse QR Code URI")
5338     id1 = int(res)
5339
5340     if "OK" not in dev[0].request("DPP_LISTEN 2412"):
5341         raise Exception("Failed to start listen operation")
5342
5343     cmd = "DPP_AUTH_INIT peer=%d conf=sta-psk pass=%s ssid=%s" % (id1, "passphrase".encode("hex"), "dpp-legacy".encode("hex"))
5344     with alloc_fail(dev[1], 1, "dpp_build_conf_obj_legacy"):
5345         if "OK" not in dev[1].request(cmd):
5346             raise Exception("Failed to initiate DPP")
5347         ev = dev[0].wait_event(["DPP-CONF-FAILED"], timeout=5)
5348         if ev is None:
5349             raise Exception("DPP configuration failure not reported")
5350
5351 def test_dpp_invalid_configurator_key(dev, apdev):
5352     """DPP invalid configurator key"""
5353     check_dpp_capab(dev[0])
5354
5355     if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_ADD key=aa"):
5356         raise Exception("Invalid key accepted")
5357
5358     with alloc_fail(dev[0], 1, "dpp_keygen_configurator"):
5359         if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_ADD key=" + dpp_key_p256):
5360             raise Exception("Error not reported")
5361
5362     with alloc_fail(dev[0], 1, "dpp_get_pubkey_point;dpp_keygen_configurator"):
5363         if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_ADD key=" + dpp_key_p256):
5364             raise Exception("Error not reported")
5365
5366     with alloc_fail(dev[0], 1, "base64_gen_encode;dpp_keygen_configurator"):
5367         if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_ADD key=" + dpp_key_p256):
5368             raise Exception("Error not reported")
5369
5370     with fail_test(dev[0], 1, "dpp_keygen_configurator"):
5371         if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_ADD key=" + dpp_key_p256):
5372             raise Exception("Error not reported")
5373
5374 def test_dpp_own_config_sign_fail(dev, apdev):
5375     """DPP own config signing failure"""
5376     check_dpp_capab(dev[0])
5377     res = dev[0].request("DPP_CONFIGURATOR_ADD");
5378     if "FAIL" in res:
5379         raise Exception("Failed to add configurator")
5380     conf_id = int(res)
5381     tests = [ "",
5382               " ",
5383               " conf=sta-dpp",
5384               " configurator=%d" % conf_id,
5385               " conf=sta-dpp configurator=%d curve=unsupported" % conf_id ]
5386     for t in tests:
5387         if "FAIL" not in dev[0].request("DPP_CONFIGURATOR_SIGN " + t):
5388             raise Exception("Invalid command accepted: " + t)
5389
5390 def test_dpp_peer_intro_failures(dev, apdev):
5391     """DPP peer introduction failures"""
5392     try:
5393         run_dpp_peer_intro_failures(dev, apdev)
5394     finally:
5395         dev[0].set("dpp_config_processing", "0")
5396
5397 def run_dpp_peer_intro_failures(dev, apdev):
5398     check_dpp_capab(dev[0])
5399     hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" })
5400     check_dpp_capab(hapd)
5401
5402     res = hapd.request("DPP_CONFIGURATOR_ADD key=" + dpp_key_p256);
5403     if "FAIL" in res:
5404         raise Exception("Failed to add configurator")
5405     conf_id = int(res)
5406     csign = hapd.request("DPP_CONFIGURATOR_GET_KEY %d" % conf_id)
5407     if "FAIL" in csign or len(csign) == 0:
5408         raise Exception("DPP_CONFIGURATOR_GET_KEY failed")
5409
5410     res = dev[0].request("DPP_CONFIGURATOR_ADD key=" + csign);
5411     if "FAIL" in res:
5412         raise Exception("Failed to add configurator")
5413     conf_id2 = int(res)
5414     csign2 = dev[0].request("DPP_CONFIGURATOR_GET_KEY %d" % conf_id2)
5415
5416     if csign != csign2:
5417         raise Exception("Unexpected difference in configurator key")
5418
5419     cmd = "DPP_CONFIGURATOR_SIGN  conf=ap-dpp configurator=%d" % conf_id
5420     res = hapd.request(cmd)
5421     if "FAIL" in res:
5422         raise Exception("Failed to generate own configuration")
5423     update_hapd_config(hapd)
5424
5425     dev[0].set("dpp_config_processing", "1")
5426     cmd = "DPP_CONFIGURATOR_SIGN  conf=sta-dpp configurator=%d" % conf_id
5427     res = dev[0].request(cmd)
5428     if "FAIL" in res:
5429         raise Exception("Failed to generate own configuration")
5430     ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
5431     if ev is None:
5432         raise Exception("DPP network profile not generated")
5433     id = ev.split(' ')[1]
5434     dev[0].select_network(id, freq=2412)
5435     dev[0].wait_connected()
5436     dev[0].request("DISCONNECT")
5437     dev[0].wait_disconnected()
5438     dev[0].dump_monitor()
5439
5440     tests = [ "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiIwTlNSNTlxRTc0alFfZTFLVGVPV1lYY1pTWnFUaDdNXzU0aHJPcFRpaFJnIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOltdLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJiVmFMRGlBT09OQmFjcVFVN1pYamFBVEtEMVhhbDVlUExqOUZFZUl3VkN3IiwieSI6Il95c25JR1hTYjBvNEsyMWg0anZmSkZxMHdVNnlPNWp1VUFPd3FuM0dHVHMifX0.WgzZBOJaisWBRxvtXPbVYPXU7OIZxs6sZD-cPOLmJVTIYZKdMkSOMvP5b6si_j61FIrjhm43tmGq1P6cpoxB_g",
5441               "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiIwTlNSNTlxRTc0alFfZTFLVGVPV1lYY1pTWnFUaDdNXzU0aHJPcFRpaFJnIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7fV0sIm5ldEFjY2Vzc0tleSI6eyJrdHkiOiJFQyIsImNydiI6IlAtMjU2IiwieCI6IkJhY3BWSDNpNDBrZklNS0RHa1FFRzhCODBCaEk4cEFmTWpLbzM5NlFZT2ciLCJ5IjoiMjBDYjhDNjRsSjFzQzV2NXlKMnBFZXRRempxMjI4YVV2cHMxNmQ0M3EwQSJ9fQ.dG2y8VvZQJ5hfob8E5F2FAeR7Nd700qstYkxDgA2QfARaNMZ0_SfKfoG-yKXsIZNM-TvGBfACgfhagG9Oaw_Xw",
5442               "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiIwTlNSNTlxRTc0alFfZTFLVGVPV1lYY1pTWnFUaDdNXzU0aHJPcFRpaFJnIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJkc2VmcmJWWlhad0RMWHRpLWlObDBBYkFIOXpqeFFKd0R1SUd5NzNuZGU0IiwieSI6IjZFQnExN3cwYW1fZlh1OUQ4UGxWYk9XZ2I3b19DcTUxWHlmSG8wcHJyeDQifX0.caBvdDUtXrhnS61-juVZ_2FQdprepv0yZjC04G4ERvLUpeX7cgu0Hp-A1aFDogP1PEFGpkaEdcAWRQnSSRiIKQ" ]
5443     for t in tests:
5444         dev[0].set_network_quoted(id, "dpp_connector", t)
5445         dev[0].select_network(id, freq=2412)
5446         ev = dev[0].wait_event(["DPP-INTRO"], timeout=5)
5447         if ev is None or "status=8" not in ev:
5448             raise Exception("Introduction failure not reported")
5449         dev[0].request("DISCONNECT")
5450         dev[0].dump_monitor()