@project-chip/matter.js 0.2.0 → 0.3.0

package/dist/cjs/session/pase/PaseClient.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaseClient = void 0;
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const Spake2p_js_1 = require("../../crypto/Spake2p.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const SessionManager_js_1 = require("../SessionManager.js");
+const PaseMessenger_js_1 = require("./PaseMessenger.js");
+const logger = Logger_js_1.Logger.get("PaseClient");
+class PaseClient {
+    pair(client, exchange, setupPin) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new PaseMessenger_js_1.PaseClientMessenger(exchange);
+            const random = Crypto_js_1.Crypto.getRandom();
+            const sessionId = client.getNextAvailableSessionId();
+            // Send pbkdRequest and Read pbkdResponse
+            const requestPayload = yield messenger.sendPbkdfParamRequest({ random, sessionId, passcodeId: PaseMessenger_js_1.DEFAULT_PASSCODE_ID, hasPbkdfParameters: false });
+            const { responsePayload, response: { pbkdfParameters, sessionId: peerSessionId } } = yield messenger.readPbkdfParamResponse();
+            if (pbkdfParameters === undefined)
+                throw new Error("Missing requested PbkdfParameters in the response");
+            // Compute pake1 and read pake2
+            const { w0, w1 } = yield Spake2p_js_1.Spake2p.computeW0W1(pbkdfParameters, setupPin);
+            const spake2p = Spake2p_js_1.Spake2p.create(Crypto_js_1.Crypto.hash([PaseMessenger_js_1.SPAKE_CONTEXT, requestPayload, responsePayload]), w0);
+            const X = spake2p.computeX();
+            yield messenger.sendPasePake1({ x: X });
+            // Process pack2 and send pake3
+            const { y: Y, verifier } = yield messenger.readPasePake2();
+            const { Ke, hAY, hBX } = yield spake2p.computeSecretAndVerifiersFromY(w1, X, Y);
+            if (!verifier.equals(hBX))
+                throw new Error("Received incorrect key confirmation from the receiver");
+            yield messenger.sendPasePake3({ verifier: hAY });
+            // All good! Creating the secure session
+            yield messenger.waitForSuccess();
+            const secureSession = yield client.createSecureSession(sessionId, undefined, SessionManager_js_1.UNDEFINED_NODE_ID, peerSessionId, Ke, new ByteArray_js_1.ByteArray(0), true, false);
+            messenger.close();
+            logger.info(`Pase client: Paired successfully with ${messenger.getChannelName()}`);
+            return secureSession;
+        });
+    }
+}
+exports.PaseClient = PaseClient;

package/dist/cjs/session/pase/PaseMessages.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPbkdfParamRequest: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    passcodeId: import("../../tlv/TlvObject.js").FieldType<number>;
+    hasPbkdfParameters: import("../../tlv/TlvObject.js").FieldType<boolean>;
+    mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        idleRetransTimeoutMs?: number | undefined;
+        activeRetransTimeoutMs?: number | undefined;
+    }>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPbkdfParamResponse: import("../../tlv/TlvObject.js").ObjectSchema<{
+    peerRandom: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    pbkdfParameters: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        iterations: number;
+        salt: Uint8Array;
+    }>;
+    mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        idleRetransTimeoutMs?: number | undefined;
+        activeRetransTimeoutMs?: number | undefined;
+    }>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake1: import("../../tlv/TlvObject.js").ObjectSchema<{
+    x: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    y: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=PaseMessages.d.ts.map

package/dist/cjs/session/pase/PaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB;;;;;;;;;EAM/B,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAShC,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;EAEvB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;EAEvB,CAAC"}

package/dist/cjs/session/pase/PaseMessages.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TlvPasePake3 = exports.TlvPasePake2 = exports.TlvPasePake1 = exports.TlvPbkdfParamResponse = exports.TlvPbkdfParamRequest = void 0;
+const CryptoConstants_js_1 = require("../../crypto/CryptoConstants.js");
+const TlvBoolean_js_1 = require("../../tlv/TlvBoolean.js");
+const TlvNumber_js_1 = require("../../tlv/TlvNumber.js");
+const TlvObject_js_1 = require("../../tlv/TlvObject.js");
+const TlvString_js_1 = require("../../tlv/TlvString.js");
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = (0, TlvObject_js_1.TlvObject)({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(1, TlvNumber_js_1.TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(2, TlvNumber_js_1.TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPbkdfParamRequest = (0, TlvObject_js_1.TlvObject)({
+    random: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(2, TlvNumber_js_1.TlvUInt16),
+    passcodeId: (0, TlvObject_js_1.TlvField)(3, TlvNumber_js_1.TlvUInt16),
+    hasPbkdfParameters: (0, TlvObject_js_1.TlvField)(4, TlvBoolean_js_1.TlvBoolean),
+    mrpParameters: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPbkdfParamResponse = (0, TlvObject_js_1.TlvObject)({
+    peerRandom: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    random: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(3, TlvNumber_js_1.TlvUInt16),
+    pbkdfParameters: (0, TlvObject_js_1.TlvOptionalField)(4, (0, TlvObject_js_1.TlvObject)({
+        iterations: (0, TlvObject_js_1.TlvField)(1, TlvNumber_js_1.TlvUInt32),
+        salt: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ minLength: 16, maxLength: 32 })),
+    })),
+    mrpParameters: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPasePake1 = (0, TlvObject_js_1.TlvObject)({
+    x: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPasePake2 = (0, TlvObject_js_1.TlvObject)({
+    y: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    verifier: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_HASH_LEN_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPasePake3 = (0, TlvObject_js_1.TlvObject)({
+    verifier: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_HASH_LEN_BYTES })),
+});

package/dist/cjs/session/pase/PaseMessenger.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvPasePake1, TlvPasePake2, TlvPasePake3, TlvPbkdfParamRequest, TlvPbkdfParamResponse } from "./PaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare const DEFAULT_PASSCODE_ID = 0;
+export declare const SPAKE_CONTEXT: Uint8Array;
+type PbkdfParamRequest = TypeFromSchema<typeof TlvPbkdfParamRequest>;
+type PbkdfParamResponse = TypeFromSchema<typeof TlvPbkdfParamResponse>;
+type PasePake1 = TypeFromSchema<typeof TlvPasePake1>;
+type PasePake2 = TypeFromSchema<typeof TlvPasePake2>;
+type PasePake3 = TypeFromSchema<typeof TlvPasePake3>;
+export declare class PaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readPbkdfParamRequest(): Promise<{
+        requestPayload: Uint8Array;
+        request: {
+            sessionId: number;
+            random: Uint8Array;
+            passcodeId: number;
+            hasPbkdfParameters: boolean;
+            mrpParameters?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+        };
+    }>;
+    sendPbkdfParamResponse(response: PbkdfParamResponse): Promise<Uint8Array>;
+    readPasePake1(): Promise<{
+        x: Uint8Array;
+    }>;
+    sendPasePake2(pasePake2: PasePake2): Promise<Uint8Array>;
+    readPasePake3(): Promise<{
+        verifier: Uint8Array;
+    }>;
+}
+export declare class PaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendPbkdfParamRequest(request: PbkdfParamRequest): Promise<Uint8Array>;
+    readPbkdfParamResponse(): Promise<{
+        responsePayload: Uint8Array;
+        response: {
+            sessionId: number;
+            random: Uint8Array;
+            peerRandom: Uint8Array;
+            mrpParameters?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+            pbkdfParameters?: {
+                iterations: number;
+                salt: Uint8Array;
+            } | undefined;
+        };
+    }>;
+    sendPasePake1(pasePake1: PasePake1): Promise<Uint8Array>;
+    readPasePake2(): Promise<{
+        y: Uint8Array;
+        verifier: Uint8Array;
+    }>;
+    sendPasePake3(pasePake3: PasePake3): Promise<Uint8Array>;
+}
+export {};
+//# sourceMappingURL=PaseMessenger.d.ts.map

package/dist/cjs/session/pase/PaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,aAAa,YAAqD,CAAC;AAEhF,KAAK,iBAAiB,GAAG,cAAc,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,KAAK,kBAAkB,GAAG,cAAc,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACvE,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AAErD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,qBAAqB;;;;;;;;;;;;;IAKrB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB;IAIzD,aAAa;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;CAGhB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,qBAAqB,CAAC,OAAO,EAAE,iBAAiB;IAI1C,sBAAsB;;;;;;;;;;;;;;;;IAK5B,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;CAGrC"}

package/dist/cjs/session/pase/PaseMessenger.js

@@ -0,0 +1,66 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaseClientMessenger = exports.PaseServerMessenger = exports.SPAKE_CONTEXT = exports.DEFAULT_PASSCODE_ID = void 0;
+const PaseMessages_js_1 = require("./PaseMessages.js");
+const SecureChannelMessenger_js_1 = require("../../protocol/securechannel/SecureChannelMessenger.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+exports.DEFAULT_PASSCODE_ID = 0;
+exports.SPAKE_CONTEXT = ByteArray_js_1.ByteArray.fromString("CHIP PAKE V1 Commissioning");
+class PaseServerMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    readPbkdfParamRequest() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(32 /* MessageType.PbkdfParamRequest */);
+            return { requestPayload: payload, request: PaseMessages_js_1.TlvPbkdfParamRequest.decode(payload) };
+        });
+    }
+    sendPbkdfParamResponse(response) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.send(response, 33 /* MessageType.PbkdfParamResponse */, PaseMessages_js_1.TlvPbkdfParamResponse);
+        });
+    }
+    readPasePake1() {
+        return this.nextMessageDecoded(34 /* MessageType.PasePake1 */, PaseMessages_js_1.TlvPasePake1);
+    }
+    sendPasePake2(pasePake2) {
+        return this.send(pasePake2, 35 /* MessageType.PasePake2 */, PaseMessages_js_1.TlvPasePake2);
+    }
+    readPasePake3() {
+        return this.nextMessageDecoded(36 /* MessageType.PasePake3 */, PaseMessages_js_1.TlvPasePake3);
+    }
+}
+exports.PaseServerMessenger = PaseServerMessenger;
+class PaseClientMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    sendPbkdfParamRequest(request) {
+        return this.send(request, 32 /* MessageType.PbkdfParamRequest */, PaseMessages_js_1.TlvPbkdfParamRequest);
+    }
+    readPbkdfParamResponse() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(33 /* MessageType.PbkdfParamResponse */);
+            return { responsePayload: payload, response: PaseMessages_js_1.TlvPbkdfParamResponse.decode(payload) };
+        });
+    }
+    sendPasePake1(pasePake1) {
+        return this.send(pasePake1, 34 /* MessageType.PasePake1 */, PaseMessages_js_1.TlvPasePake1);
+    }
+    readPasePake2() {
+        return this.nextMessageDecoded(35 /* MessageType.PasePake2 */, PaseMessages_js_1.TlvPasePake2);
+    }
+    sendPasePake3(pasePake3) {
+        return this.send(pasePake3, 36 /* MessageType.PasePake3 */, PaseMessages_js_1.TlvPasePake3);
+    }
+}
+exports.PaseClientMessenger = PaseClientMessenger;

package/dist/cjs/session/pase/PaseServer.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { ProtocolHandler } from "../../protocol/ProtocolHandler.js";
+import { PbkdfParameters } from "../../crypto/Spake2p.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { ByteArray } from "../../util/ByteArray.js";
+import BN from "bn.js";
+export declare class PaseServer implements ProtocolHandler<MatterDevice> {
+    private readonly w0;
+    private readonly L;
+    private readonly pbkdfParameters?;
+    static fromPin(setupPinCode: number, pbkdfParameters: PbkdfParameters): Promise<PaseServer>;
+    static fromVerificationValue(verificationValue: ByteArray, pbkdfParameters?: PbkdfParameters): PaseServer;
+    constructor(w0: BN, L: ByteArray, pbkdfParameters?: PbkdfParameters | undefined);
+    getId(): number;
+    onNewExchange(exchange: MessageExchange<MatterDevice>): Promise<void>;
+    private handlePairingRequest;
+}
+//# sourceMappingURL=PaseServer.d.ts.map

package/dist/cjs/session/pase/PaseServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseServer.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAW,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EAAE,MAAM,OAAO,CAAC;AAKvB,qBAAa,UAAW,YAAW,eAAe,CAAC,YAAY,CAAC;IAcxD,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;WAdxB,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe;IAK3E,MAAM,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,eAAe;gBAOvE,EAAE,EAAE,EAAE,EACN,CAAC,EAAE,SAAS,EACZ,eAAe,CAAC,6BAAiB;IAGtD,KAAK,IAAI,MAAM;IAIT,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,YAAY,CAAC;YAU7C,oBAAoB;CA2BrC"}

package/dist/cjs/session/pase/PaseServer.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaseServer = void 0;
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const SessionManager_js_1 = require("../SessionManager.js");
+const PaseMessenger_js_1 = require("./PaseMessenger.js");
+const Spake2p_js_1 = require("../../crypto/Spake2p.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const bn_js_1 = __importDefault(require("bn.js"));
+const SecureChannelMessages_js_1 = require("../../protocol/securechannel/SecureChannelMessages.js");
+const logger = Logger_js_1.Logger.get("PaseServer");
+class PaseServer {
+    static fromPin(setupPinCode, pbkdfParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { w0, L } = yield Spake2p_js_1.Spake2p.computeW0L(pbkdfParameters, setupPinCode);
+            return new PaseServer(w0, L, pbkdfParameters);
+        });
+    }
+    static fromVerificationValue(verificationValue, pbkdfParameters) {
+        const w0 = new bn_js_1.default(verificationValue.slice(0, 32));
+        const L = verificationValue.slice(32, 32 + 65);
+        return new PaseServer(w0, L, pbkdfParameters);
+    }
+    constructor(w0, L, pbkdfParameters) {
+        this.w0 = w0;
+        this.L = L;
+        this.pbkdfParameters = pbkdfParameters;
+    }
+    getId() {
+        return SecureChannelMessages_js_1.SECURE_CHANNEL_PROTOCOL_ID;
+    }
+    onNewExchange(exchange) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new PaseMessenger_js_1.PaseServerMessenger(exchange);
+            try {
+                yield this.handlePairingRequest(exchange.session.getContext(), messenger);
+            }
+            catch (error) {
+                logger.error("An error occured during the commissioning", error);
+                yield messenger.sendError();
+            }
+        });
+    }
+    handlePairingRequest(server, messenger) {
+        return __awaiter(this, void 0, void 0, function* () {
+            logger.info(`Pase server: Received pairing request from ${messenger.getChannelName()}`);
+            const sessionId = server.getNextAvailableSessionId();
+            const random = Crypto_js_1.Crypto.getRandom();
+            // Read pbkdRequest and send pbkdResponse
+            const { requestPayload, request: { random: peerRandom, mrpParameters, passcodeId, hasPbkdfParameters, sessionId: peerSessionId } } = yield messenger.readPbkdfParamRequest();
+            if (passcodeId !== PaseMessenger_js_1.DEFAULT_PASSCODE_ID)
+                throw new Error(`Unsupported passcode ID ${passcodeId}`);
+            const responsePayload = yield messenger.sendPbkdfParamResponse({ peerRandom, random, sessionId, mrpParameters, pbkdfParameters: hasPbkdfParameters ? undefined : this.pbkdfParameters });
+            // Process pake1 and send pake2
+            const spake2p = Spake2p_js_1.Spake2p.create(Crypto_js_1.Crypto.hash([PaseMessenger_js_1.SPAKE_CONTEXT, requestPayload, responsePayload]), this.w0);
+            const { x: X } = yield messenger.readPasePake1();
+            const Y = spake2p.computeY();
+            const { Ke, hAY, hBX } = yield spake2p.computeSecretAndVerifiersFromX(this.L, X, Y);
+            yield messenger.sendPasePake2({ y: Y, verifier: hBX });
+            // Read and process pake3
+            const { verifier } = yield messenger.readPasePake3();
+            if (!verifier.equals(hAY))
+                throw new Error("Received incorrect key confirmation from the initiator");
+            // All good! Creating the secure session
+            yield server.createSecureSession(sessionId, undefined /* fabric */, SessionManager_js_1.UNDEFINED_NODE_ID, peerSessionId, Ke, new ByteArray_js_1.ByteArray(0), false, false, mrpParameters === null || mrpParameters === void 0 ? void 0 : mrpParameters.idleRetransTimeoutMs, mrpParameters === null || mrpParameters === void 0 ? void 0 : mrpParameters.activeRetransTimeoutMs);
+            yield messenger.sendSuccess();
+            messenger.close();
+            logger.info(`Pase server: session ${sessionId} created with ${messenger.getChannelName()}`);
+        });
+    }
+}
+exports.PaseServer = PaseServer;

package/dist/{dts → cjs}/spec/Specifications.d.ts

@@ -1,6 +1,6 @@
 /**
  * @license
- * Copyright 2022 Project CHIP Authors
+ * Copyright 2022-2023 Project CHIP Authors
  * SPDX-License-Identifier: Apache-2.0
  */
 /** {@link https://csa-iot.org/developer-resource/specifications-download-request/ Matter Core Specification 1.0} */
@@ -12,3 +12,4 @@ export interface MatterApplicationClusterSpecificationV1_0 {
 /** {@link https://csa-iot.org/developer-resource/specifications-download-request/ Matter Device Library Specification 1.0} */
 export interface MatterDeviceLibrarySpecificationV1_0 {
 }
+//# sourceMappingURL=Specifications.d.ts.map

package/dist/cjs/spec/Specifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Specifications.d.ts","sourceRoot":"","sources":["../../../src/spec/Specifications.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,oHAAoH;AACpH,MAAM,WAAW,2BAA2B;CAAI;AAEhD,mIAAmI;AACnI,MAAM,WAAW,yCAAyC;CAAI;AAE9D,8HAA8H;AAC9H,MAAM,WAAW,oCAAoC;CAAI"}

package/dist/cjs/spec/Specifications.js

@@ -1,7 +1,7 @@
 "use strict";
 /**
  * @license
- * Copyright 2022 Project CHIP Authors
+ * Copyright 2022-2023 Project CHIP Authors
  * SPDX-License-Identifier: Apache-2.0
  */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/spec/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./Specifications.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/spec/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/spec/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,qBAAqB,CAAC"}

package/dist/cjs/spec/index.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./Specifications.js"), exports);

package/dist/cjs/storage/Storage.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { SupportedStorageTypes } from "./StringifyTools.js";
+export declare abstract class Storage {
+    abstract initialize(): Promise<void>;
+    abstract close(): Promise<void>;
+    abstract get<T extends SupportedStorageTypes>(context: string, key: string): T | undefined;
+    abstract set<T extends SupportedStorageTypes>(context: string, key: string, value: T): void;
+}
+//# sourceMappingURL=Storage.d.ts.map

package/dist/cjs/storage/Storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Storage.d.ts","sourceRoot":"","sources":["../../../src/storage/Storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,8BAAsB,OAAO;IACzB,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAC1F,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;CAC9F"}

package/dist/cjs/storage/Storage.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Storage = void 0;
+class Storage {
+}
+exports.Storage = Storage;

package/dist/cjs/storage/StorageBackendMemory.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Storage } from "./Storage.js";
+import { SupportedStorageTypes } from "./StringifyTools.js";
+export declare class StorageBackendMemory implements Storage {
+    protected store: any;
+    constructor(store?: any);
+    initialize(): Promise<void>;
+    close(): Promise<void>;
+    get<T extends SupportedStorageTypes>(context: string, key: string): T | undefined;
+    set<T extends SupportedStorageTypes>(context: string, key: string, value: T): void;
+}
+//# sourceMappingURL=StorageBackendMemory.d.ts.map

package/dist/cjs/storage/StorageBackendMemory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StorageBackendMemory.d.ts","sourceRoot":"","sources":["../../../src/storage/StorageBackendMemory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,qBAAa,oBAAqB,YAAW,OAAO;IAE5C,SAAS,CAAC,KAAK,EAAE,GAAG;gBAAV,KAAK,GAAE,GAAQ;IAGvB,UAAU;IAIV,KAAK;IAIX,GAAG,CAAC,CAAC,SAAS,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAKjF,GAAG,CAAC,CAAC,SAAS,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;CASrF"}

package/dist/cjs/storage/StorageBackendMemory.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageBackendMemory = void 0;
+class StorageBackendMemory {
+    constructor(store = {}) {
+        this.store = store;
+    }
+    initialize() {
+        return __awaiter(this, void 0, void 0, function* () {
+            // nothing to do
+        });
+    }
+    close() {
+        return __awaiter(this, void 0, void 0, function* () {
+            // nothing to do
+        });
+    }
+    get(context, key) {
+        var _a;
+        if (!context.length || !key.length)
+            throw new Error("Context and key must not be empty strings!");
+        return (_a = this.store[context]) === null || _a === void 0 ? void 0 : _a[key];
+    }
+    set(context, key, value) {
+        if (!context.length || !key.length)
+            throw new Error("Context and key must not be empty strings!");
+        let contextStore = this.store[context];
+        if (contextStore === undefined) {
+            contextStore = {};
+            this.store[context] = contextStore;
+        }
+        contextStore[key] = value;
+    }
+}
+exports.StorageBackendMemory = StorageBackendMemory;

package/dist/cjs/storage/StorageContext.d.ts

@@ -0,0 +1,16 @@
+/**
+* @license
+* Copyright 2022-2023 Project CHIP Authors
+* SPDX-License-Identifier: Apache-2.0
+*/
+import { Storage } from "./Storage.js";
+import { SupportedStorageTypes } from "./StringifyTools.js";
+export declare class StorageContext {
+    private readonly storage;
+    private readonly context;
+    constructor(storage: Storage, context: string);
+    get<T extends SupportedStorageTypes>(key: string, defaultValue?: T): T;
+    has(key: string): boolean;
+    set<T extends SupportedStorageTypes>(key: string, value: T): void;
+}
+//# sourceMappingURL=StorageContext.d.ts.map

package/dist/cjs/storage/StorageContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StorageContext.d.ts","sourceRoot":"","sources":["../../../src/storage/StorageContext.ts"],"names":[],"mappings":"AAAA;;;;EAIE;AAEF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,qBAAa,cAAc;IAEnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM;IAGpC,GAAG,CAAC,CAAC,SAAS,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC;IAStE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,GAAG,CAAC,CAAC,SAAS,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;CAGpE"}

package/dist/cjs/storage/StorageContext.js

@@ -0,0 +1,30 @@
+"use strict";
+/**
+* @license
+* Copyright 2022-2023 Project CHIP Authors
+* SPDX-License-Identifier: Apache-2.0
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageContext = void 0;
+class StorageContext {
+    constructor(storage, context) {
+        this.storage = storage;
+        this.context = context;
+    }
+    get(key, defaultValue) {
+        const value = this.storage.get(this.context, key);
+        if (value !== undefined)
+            return value;
+        if (defaultValue === undefined) {
+            throw new Error(`No value found for key ${key} in context ${this.context} and no default value specified!`);
+        }
+        return defaultValue;
+    }
+    has(key) {
+        return this.storage.get(this.context, key) !== undefined;
+    }
+    set(key, value) {
+        this.storage.set(this.context, key, value);
+    }
+}
+exports.StorageContext = StorageContext;