DPP: Authentication exchange

[thirdparty/hostap.git] / src / common / dpp.h

diff --git a/src/common/dpp.h b/src/common/dpp.h
index 22c348dd411c96af50a35ad91300de9a625799f3..a2ca9b98d6377b7c3287f9114429352ea08a265b 100644 (file)
--- a/src/common/dpp.h
+++ b/src/common/dpp.h
@@ -14,7 +14,64 @@
 #include "utils/list.h"
 #include "crypto/sha256.h"
 
+/* DPP Public Action frame identifiers - OUI_WFA */
+#define DPP_OUI_TYPE 0x1A
+
+enum dpp_public_action_frame_type {
+       DPP_PA_AUTHENTICATION_REQ = 0,
+       DPP_PA_AUTHENTICATION_RESP = 1,
+       DPP_PA_AUTHENTICATION_CONF = 2,
+       DPP_PA_PEER_DISCOVERY_REQ = 5,
+       DPP_PA_PEER_DISCOVERY_RESP = 6,
+       DPP_PA_PKEX_EXCHANGE_REQ = 7,
+       DPP_PA_PKEX_EXCHANGE_RESP = 8,
+       DPP_PA_PKEX_COMMIT_REVEAL_REQ = 9,
+       DPP_PA_PKEX_COMMIT_REVEAL_RESP = 10,
+};
+
+enum dpp_attribute_id {
+       DPP_ATTR_STATUS = 0x1000,
+       DPP_ATTR_I_BOOTSTRAP_KEY_HASH = 0x1001,
+       DPP_ATTR_R_BOOTSTRAP_KEY_HASH = 0x1002,
+       DPP_ATTR_I_PROTOCOL_KEY = 0x1003,
+       DPP_ATTR_WRAPPED_DATA = 0x1004,
+       DPP_ATTR_I_NONCE = 0x1005,
+       DPP_ATTR_I_CAPABILITIES = 0x1006,
+       DPP_ATTR_R_NONCE = 0x1007,
+       DPP_ATTR_R_CAPABILITIES = 0x1008,
+       DPP_ATTR_R_PROTOCOL_KEY = 0x1009,
+       DPP_ATTR_I_AUTH_TAG = 0x100A,
+       DPP_ATTR_R_AUTH_TAG = 0x100B,
+       DPP_ATTR_CONFIG_OBJ = 0x100C,
+       DPP_ATTR_CONNECTOR = 0x100D,
+       DPP_ATTR_CONFIG_ATTR_OBJ = 0x100E,
+       DPP_ATTR_BOOTSTRAP_KEY = 0x100F,
+       DPP_ATTR_PEER_NET_PK_HASH = 0x1010,
+       DPP_ATTR_OWN_NET_NK_HASH = 0x1011,
+       DPP_ATTR_FINITE_CYCLIC_GROUP = 0x1012,
+       DPP_ATTR_ENCRYPTED_KEY = 0x1013,
+       DPP_ATTR_ENROLLEE_NONCE = 0x1014,
+       DPP_ATTR_CODE_IDENTIFIER = 0x1015,
+};
+
+enum dpp_status_error {
+       DPP_STATUS_OK = 0,
+       DPP_STATUS_NOT_COMPATIBLE = 1,
+       DPP_STATUS_AUTH_FAILURE = 2,
+       DPP_STATUS_UNWRAP_FAILURE = 3,
+       DPP_STATUS_BAD_GROUP = 4,
+       DPP_STATUS_CONFIGURE_FAILURE = 5,
+       DPP_STATUS_RESPONSE_PENDING = 6,
+};
+
+#define DPP_CAPAB_ENROLLEE BIT(0)
+#define DPP_CAPAB_CONFIGURATOR BIT(1)
+#define DPP_CAPAB_ROLE_MASK (BIT(0) | BIT(1))
+
 #define DPP_BOOTSTRAP_MAX_FREQ 30
+#define DPP_MAX_NONCE_LEN 32
+#define DPP_MAX_HASH_LEN 64
+#define DPP_MAX_SHARED_SECRET_LEN 66
 
 struct dpp_curve_params {
        const char *name;
@@ -44,6 +101,37 @@ struct dpp_bootstrap_info {
        const struct dpp_curve_params *curve;
 };
 
+struct dpp_authentication {
+       void *msg_ctx;
+       const struct dpp_curve_params *curve;
+       struct dpp_bootstrap_info *peer_bi;
+       struct dpp_bootstrap_info *own_bi;
+       u8 waiting_pubkey_hash[SHA256_MAC_LEN];
+       int response_pending;
+       enum dpp_status_error auth_resp_status;
+       u8 peer_mac_addr[ETH_ALEN];
+       u8 i_nonce[DPP_MAX_NONCE_LEN];
+       u8 r_nonce[DPP_MAX_NONCE_LEN];
+       u8 i_capab;
+       u8 r_capab;
+       EVP_PKEY *own_protocol_key;
+       EVP_PKEY *peer_protocol_key;
+       struct wpabuf *req_attr;
+       struct wpabuf *resp_attr;
+       unsigned int curr_freq;
+       size_t secret_len;
+       u8 Mx[DPP_MAX_SHARED_SECRET_LEN];
+       u8 Nx[DPP_MAX_SHARED_SECRET_LEN];
+       u8 Lx[DPP_MAX_SHARED_SECRET_LEN];
+       u8 k1[DPP_MAX_HASH_LEN];
+       u8 k2[DPP_MAX_HASH_LEN];
+       u8 ke[DPP_MAX_HASH_LEN];
+       int initiator;
+       int configurator;
+       int remove_on_tx_status;
+       int auth_success;
+};
+
 void dpp_bootstrap_info_free(struct dpp_bootstrap_info *info);
 int dpp_parse_uri_chan_list(struct dpp_bootstrap_info *bi,
                            const char *chan_list);
@@ -52,5 +140,27 @@ int dpp_parse_uri_info(struct dpp_bootstrap_info *bi, const char *info);
 struct dpp_bootstrap_info * dpp_parse_qr_code(const char *uri);
 char * dpp_keygen(struct dpp_bootstrap_info *bi, const char *curve,
                  const u8 *privkey, size_t privkey_len);
+struct dpp_authentication * dpp_auth_init(void *msg_ctx,
+                                         struct dpp_bootstrap_info *peer_bi,
+                                         struct dpp_bootstrap_info *own_bi,
+                                         int configurator);
+struct dpp_authentication *
+dpp_auth_req_rx(void *msg_ctx, u8 dpp_allowed_roles, int qr_mutual,
+               struct dpp_bootstrap_info *peer_bi,
+               struct dpp_bootstrap_info *own_bi,
+               unsigned int freq, const u8 *attr_start,
+               const u8 *wrapped_data, u16 wrapped_data_len);
+struct wpabuf *
+dpp_auth_resp_rx(struct dpp_authentication *auth, const u8 *attr_start,
+                size_t attr_len);
+int dpp_auth_conf_rx(struct dpp_authentication *auth, const u8 *attr_start,
+                    size_t attr_len);
+int dpp_notify_new_qr_code(struct dpp_authentication *auth,
+                          struct dpp_bootstrap_info *peer_bi);
+void dpp_auth_deinit(struct dpp_authentication *auth);
+struct wpabuf * dpp_alloc_msg(enum dpp_public_action_frame_type type,
+                             size_t len);
+const u8 * dpp_get_attr(const u8 *buf, size_t len, u16 req_id, u16 *ret_len);
+int dpp_check_attrs(const u8 *buf, size_t len);
 
 #endif /* DPP_H */