@project-chip/matter.js 0.2.0 → 0.3.0

package/dist/es/session/case/CaseMessages.js

@@ -0,0 +1,75 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CRYPTO_AEAD_MIC_LENGTH_BYTES, CRYPTO_GROUP_SIZE_BYTES, CRYPTO_HASH_LEN_BYTES, CRYPTO_PUBLIC_KEY_SIZE_BYTES } from "../../crypto/CryptoConstants.js";
+import { TlvUInt16, TlvUInt32 } from "../../tlv/TlvNumber.js";
+import { TlvField, TlvObject, TlvOptionalField } from "../../tlv/TlvObject.js";
+import { TlvByteString } from "../../tlv/TlvString.js";
+import { ByteArray } from "../../util/ByteArray.js";
+const CASE_SIGNATURE_LENGTH = CRYPTO_GROUP_SIZE_BYTES * 2;
+const CASE2_ENCRYPTED_LENGTH = 800 + CRYPTO_AEAD_MIC_LENGTH_BYTES + CASE_SIGNATURE_LENGTH; // NOC + ICAC + CASE-Sig + Mic
+export const KDFSR1_KEY_INFO = ByteArray.fromString("Sigma1_Resume");
+export const KDFSR2_KEY_INFO = ByteArray.fromString("Sigma2_Resume");
+export const RESUME1_MIC_NONCE = ByteArray.fromString("NCASE_SigmaS1");
+export const RESUME2_MIC_NONCE = ByteArray.fromString("NCASE_SigmaS2");
+export const KDFSR2_INFO = ByteArray.fromString("Sigma2");
+export const KDFSR3_INFO = ByteArray.fromString("Sigma3");
+export const TBE_DATA2_NONCE = ByteArray.fromString("NCASE_Sigma2N");
+export const TBE_DATA3_NONCE = ByteArray.fromString("NCASE_Sigma3N");
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = TlvObject({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: TlvOptionalField(1, TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: TlvOptionalField(2, TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma1 = TlvObject({
+    random: TlvField(1, TlvByteString.bound({ length: 32 })),
+    sessionId: TlvField(2, TlvUInt16),
+    destinationId: TlvField(3, TlvByteString.bound({ length: CRYPTO_HASH_LEN_BYTES })),
+    ecdhPublicKey: TlvField(4, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    mrpParams: TlvOptionalField(5, TlvSedParameters),
+    resumptionId: TlvOptionalField(6, TlvByteString.bound({ length: 16 })),
+    resumeMic: TlvOptionalField(7, TlvByteString.bound({ length: CRYPTO_AEAD_MIC_LENGTH_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma2 = TlvObject({
+    random: TlvField(1, TlvByteString.bound({ length: 32 })),
+    sessionId: TlvField(2, TlvUInt16),
+    ecdhPublicKey: TlvField(3, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    encrypted: TlvField(4, TlvByteString.bound({ maxLength: CASE2_ENCRYPTED_LENGTH })),
+    mrpParams: TlvOptionalField(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma2Resume = TlvObject({
+    resumptionId: TlvField(1, TlvByteString.bound({ length: 16 })),
+    resumeMic: TlvField(2, TlvByteString.bound({ length: 16 })),
+    sessionId: TlvField(3, TlvUInt16),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma3 = TlvObject({
+    encrypted: TlvField(1, TlvByteString),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvSignedData = TlvObject({
+    nodeOpCert: TlvField(1, TlvByteString),
+    intermediateCACert: TlvOptionalField(2, TlvByteString),
+    ecdhPublicKey: TlvField(3, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    peerEcdhPublicKey: TlvField(4, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvEncryptedDataSigma2 = TlvObject({
+    nodeOpCert: TlvField(1, TlvByteString),
+    intermediateCACert: TlvOptionalField(2, TlvByteString),
+    signature: TlvField(3, TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+    resumptionId: TlvField(4, TlvByteString.bound({ length: 16 })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvEncryptedDataSigma3 = TlvObject({
+    nodeOpCert: TlvField(1, TlvByteString),
+    intermediateCACert: TlvOptionalField(2, TlvByteString),
+    signature: TlvField(3, TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+});

package/dist/es/session/case/CaseMessenger.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvCaseSigma1, TlvCaseSigma2Resume, TlvCaseSigma2, TlvCaseSigma3 } from "./CaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare class CaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readSigma1(): Promise<{
+        sigma1Bytes: Uint8Array;
+        sigma1: {
+            sessionId: number;
+            random: Uint8Array;
+            destinationId: Uint8Array;
+            ecdhPublicKey: Uint8Array;
+            mrpParams?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+            resumptionId?: Uint8Array | undefined;
+            resumeMic?: Uint8Array | undefined;
+        };
+    }>;
+    sendSigma2(sigma2: TypeFromSchema<typeof TlvCaseSigma2>): Promise<Uint8Array>;
+    sendSigma2Resume(sigma2Resume: TypeFromSchema<typeof TlvCaseSigma2Resume>): Promise<Uint8Array>;
+    readSigma3(): Promise<{
+        sigma3Bytes: Uint8Array;
+        sigma3: {
+            encrypted: Uint8Array;
+        };
+    }>;
+}
+export declare class CaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendSigma1(sigma1: TypeFromSchema<typeof TlvCaseSigma1>): Promise<Uint8Array>;
+    readSigma2(): Promise<{
+        sigma2Bytes: Uint8Array;
+        sigma2: {
+            sessionId: number;
+            random: Uint8Array;
+            ecdhPublicKey: Uint8Array;
+            encrypted: Uint8Array;
+            mrpParams?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+        };
+        sigma2Resume?: undefined;
+    } | {
+        sigma2Resume: {
+            sessionId: number;
+            resumptionId: Uint8Array;
+            resumeMic: Uint8Array;
+        };
+        sigma2Bytes?: undefined;
+        sigma2?: undefined;
+    }>;
+    sendSigma3(sigma3: TypeFromSchema<typeof TlvCaseSigma3>): Promise<Uint8Array>;
+}
+//# sourceMappingURL=CaseMessenger.d.ts.map

package/dist/es/session/case/CaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,UAAU;;;;;;;;;;;;;;;IAKhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIvD,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC,OAAO,mBAAmB,CAAC;IAInE,UAAU;;;;;;CAInB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIjD,UAAU;;;;;;;;;;;;;;;;;;;;;;IAYhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;CAG1D"}

package/dist/es/session/case/CaseMessenger.js

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { TlvCaseSigma1, TlvCaseSigma2Resume, TlvCaseSigma2, TlvCaseSigma3 } from "./CaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+export class CaseServerMessenger extends SecureChannelMessenger {
+    readSigma1() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(48 /* MessageType.Sigma1 */);
+            return { sigma1Bytes: payload, sigma1: TlvCaseSigma1.decode(payload) };
+        });
+    }
+    sendSigma2(sigma2) {
+        return this.send(sigma2, 49 /* MessageType.Sigma2 */, TlvCaseSigma2);
+    }
+    sendSigma2Resume(sigma2Resume) {
+        return this.send(sigma2Resume, 51 /* MessageType.Sigma2Resume */, TlvCaseSigma2Resume);
+    }
+    readSigma3() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(50 /* MessageType.Sigma3 */);
+            return { sigma3Bytes: payload, sigma3: TlvCaseSigma3.decode(payload) };
+        });
+    }
+}
+export class CaseClientMessenger extends SecureChannelMessenger {
+    sendSigma1(sigma1) {
+        return this.send(sigma1, 48 /* MessageType.Sigma1 */, TlvCaseSigma1);
+    }
+    readSigma2() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload, payloadHeader: { messageType } } = yield this.nextMessage();
+            switch (messageType) {
+                case 49 /* MessageType.Sigma2 */:
+                    return { sigma2Bytes: payload, sigma2: TlvCaseSigma2.decode(payload) };
+                case 51 /* MessageType.Sigma2Resume */:
+                    return { sigma2Resume: TlvCaseSigma2Resume.decode(payload) };
+                default:
+                    throw new Error(`Received unexpected message type: ${messageType}, expected: ${49 /* MessageType.Sigma2 */} or ${51 /* MessageType.Sigma2Resume */}`);
+            }
+        });
+    }
+    sendSigma3(sigma3) {
+        return this.send(sigma3, 50 /* MessageType.Sigma3 */, TlvCaseSigma3);
+    }
+}

package/dist/es/session/case/CaseServer.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterDevice } from "../../MatterDevice.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { ProtocolHandler } from "../../protocol/ProtocolHandler.js";
+export declare class CaseServer implements ProtocolHandler<MatterDevice> {
+    onNewExchange(exchange: MessageExchange<MatterDevice>): Promise<void>;
+    getId(): number;
+    private handleSigma1;
+}
+//# sourceMappingURL=CaseServer.d.ts.map

package/dist/es/session/case/CaseServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseServer.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAUpE,qBAAa,UAAW,YAAW,eAAe,CAAC,YAAY,CAAC;IACtD,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,YAAY,CAAC;IAU3D,KAAK,IAAI,MAAM;YAID,YAAY;CAgF7B"}

package/dist/es/session/case/CaseServer.js

@@ -0,0 +1,111 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Crypto } from "../../crypto/Crypto.js";
+import { CaseServerMessenger } from "./CaseMessenger.js";
+import { KDFSR1_KEY_INFO, KDFSR2_INFO, KDFSR2_KEY_INFO, KDFSR3_INFO, RESUME1_MIC_NONCE, RESUME2_MIC_NONCE, TlvEncryptedDataSigma2, TlvSignedData, TBE_DATA2_NONCE, TBE_DATA3_NONCE, TlvEncryptedDataSigma3 } from "./CaseMessages.js";
+import { TlvOperationalCertificate } from "../../certificate/CertificateManager.js";
+import { SECURE_CHANNEL_PROTOCOL_ID } from "../../protocol/securechannel/SecureChannelMessages.js";
+import { ByteArray } from "../../util/ByteArray.js";
+import { Logger } from "../../log/Logger.js";
+const logger = Logger.get("CaseServer");
+export class CaseServer {
+    onNewExchange(exchange) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new CaseServerMessenger(exchange);
+            try {
+                yield this.handleSigma1(exchange.session.getContext(), messenger);
+            }
+            catch (error) {
+                logger.error("An error occurred during the commissioning", error);
+                yield messenger.sendError();
+            }
+        });
+    }
+    getId() {
+        return SECURE_CHANNEL_PROTOCOL_ID;
+    }
+    handleSigma1(server, messenger) {
+        return __awaiter(this, void 0, void 0, function* () {
+            logger.info(`Case server: Received pairing request from ${messenger.getChannelName()}`);
+            // Generate pairing info
+            const sessionId = server.getNextAvailableSessionId();
+            const random = Crypto.getRandom();
+            // Read and process sigma 1
+            const { sigma1Bytes, sigma1 } = yield messenger.readSigma1();
+            const { sessionId: peerSessionId, resumptionId: peerResumptionId, resumeMic: peerResumeMic, destinationId, random: peerRandom, ecdhPublicKey: peerEcdhPublicKey, mrpParams } = sigma1;
+            // Try to resume a previous session
+            const resumptionId = Crypto.getRandomData(16);
+            let resumptionRecord;
+            // We try to resume the session
+            if (peerResumptionId !== undefined && peerResumeMic !== undefined && (resumptionRecord = server.findResumptionRecordById(peerResumptionId)) !== undefined) {
+                const { sharedSecret, fabric, peerNodeId } = resumptionRecord;
+                const peerResumeKey = yield Crypto.hkdf(sharedSecret, ByteArray.concat(peerRandom, peerResumptionId), KDFSR1_KEY_INFO);
+                Crypto.decrypt(peerResumeKey, peerResumeMic, RESUME1_MIC_NONCE);
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray.concat(peerRandom, peerResumptionId);
+                const secureSession = yield server.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, false, true, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.idleRetransTimeoutMs, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.activeRetransTimeoutMs);
+                // Generate sigma 2 resume
+                const resumeSalt = ByteArray.concat(peerRandom, resumptionId);
+                const resumeKey = yield Crypto.hkdf(sharedSecret, resumeSalt, KDFSR2_KEY_INFO);
+                const resumeMic = Crypto.encrypt(resumeKey, new ByteArray(0), RESUME2_MIC_NONCE);
+                try {
+                    yield messenger.sendSigma2Resume({ resumptionId, resumeMic, sessionId });
+                }
+                catch (error) {
+                    // If we fail to send the resume, we destroy the session
+                    secureSession.destroy();
+                    throw error;
+                }
+                logger.info(`Case server: session ${secureSession.getId()} resumed with ${messenger.getChannelName()}`);
+                resumptionRecord.resumptionId = resumptionId; /* Update the ID */
+                // Wait for success on the peer side
+                yield messenger.waitForSuccess();
+                messenger.close();
+                server.saveResumptionRecord(resumptionRecord);
+            }
+            else {
+                // Generate sigma 2
+                const fabric = server.findFabricFromDestinationId(destinationId, peerRandom);
+                const { operationalCert: nodeOpCert, intermediateCACert, operationalIdentityProtectionKey } = fabric;
+                const { publicKey: ecdhPublicKey, sharedSecret } = Crypto.ecdhGeneratePublicKeyAndSecret(peerEcdhPublicKey);
+                const sigma2Salt = ByteArray.concat(operationalIdentityProtectionKey, random, ecdhPublicKey, Crypto.hash(sigma1Bytes));
+                const sigma2Key = yield Crypto.hkdf(sharedSecret, sigma2Salt, KDFSR2_INFO);
+                const signatureData = TlvSignedData.encode({ nodeOpCert, intermediateCACert, ecdhPublicKey, peerEcdhPublicKey });
+                const signature = fabric.sign(signatureData);
+                const encryptedData = TlvEncryptedDataSigma2.encode({ nodeOpCert, intermediateCACert, signature, resumptionId });
+                const encrypted = Crypto.encrypt(sigma2Key, encryptedData, TBE_DATA2_NONCE);
+                const sigma2Bytes = yield messenger.sendSigma2({ random, sessionId, ecdhPublicKey, encrypted, mrpParams });
+                // Read and process sigma 3
+                const { sigma3Bytes, sigma3: { encrypted: peerEncrypted } } = yield messenger.readSigma3();
+                const sigma3Salt = ByteArray.concat(operationalIdentityProtectionKey, Crypto.hash([sigma1Bytes, sigma2Bytes]));
+                const sigma3Key = yield Crypto.hkdf(sharedSecret, sigma3Salt, KDFSR3_INFO);
+                const peerEncryptedData = Crypto.decrypt(sigma3Key, peerEncrypted, TBE_DATA3_NONCE);
+                const { nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, signature: peerSignature } = TlvEncryptedDataSigma3.decode(peerEncryptedData);
+                fabric.verifyCredentials(peerNewOpCert, peerIntermediateCACert);
+                const peerSignatureData = TlvSignedData.encode({ nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, ecdhPublicKey: peerEcdhPublicKey, peerEcdhPublicKey: ecdhPublicKey });
+                const { ellipticCurvePublicKey: peerPublicKey, subject: { nodeId: peerNodeId } } = TlvOperationalCertificate.decode(peerNewOpCert);
+                Crypto.verifySpki(peerPublicKey, peerSignatureData, peerSignature);
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray.concat(operationalIdentityProtectionKey, Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes]));
+                const secureSession = yield server.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, false, false, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.idleRetransTimeoutMs, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.activeRetransTimeoutMs);
+                logger.info(`Case server: session ${secureSession.getId()} created with ${messenger.getChannelName()}`);
+                yield messenger.sendSuccess();
+                resumptionRecord = { peerNodeId, fabric, sharedSecret, resumptionId };
+                messenger.close();
+                server.saveResumptionRecord(resumptionRecord);
+            }
+        });
+    }
+}

package/dist/es/session/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./SecureSession.js";
+export * from "./SessionManager.js";
+export * from "./Session.js";
+export * from "./UnsecureSession.js";
+export * from "./pase/PaseClient.js";
+export * from "./pase/PaseMessages.js";
+export * from "./pase/PaseMessenger.js";
+export * from "./pase/PaseServer.js";
+export * from "./case/CaseClient.js";
+export * from "./case/CaseMessages.js";
+export * from "./case/CaseMessenger.js";
+export * from "./case/CaseServer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/es/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/dist/es/session/index.js

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+// Export generic Session classes
+export * from "./SecureSession.js";
+export * from "./SessionManager.js";
+export * from "./Session.js";
+export * from "./UnsecureSession.js";
+// Export PaseSession classes
+export * from "./pase/PaseClient.js";
+export * from "./pase/PaseMessages.js";
+export * from "./pase/PaseMessenger.js";
+export * from "./pase/PaseServer.js";
+// Export CaseSession classes
+export * from "./case/CaseClient.js";
+export * from "./case/CaseMessages.js";
+export * from "./case/CaseMessenger.js";
+export * from "./case/CaseServer.js";

package/dist/es/session/pase/PaseClient.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { MatterController } from "../../MatterController.js";
+import { SecureSession } from "../SecureSession.js";
+export declare class PaseClient {
+    pair(client: MatterController, exchange: MessageExchange<MatterController>, setupPin: number): Promise<SecureSession<MatterController>>;
+}
+//# sourceMappingURL=PaseClient.d.ts.map

package/dist/es/session/pase/PaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,qBAAa,UAAU;IACb,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,MAAM;CA8BrG"}

package/dist/es/session/pase/PaseClient.js

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Crypto } from "../../crypto/Crypto.js";
+import { Spake2p } from "../../crypto/Spake2p.js";
+import { ByteArray } from "../../util/ByteArray.js";
+import { Logger } from "../../log/Logger.js";
+import { UNDEFINED_NODE_ID } from "../SessionManager.js";
+import { DEFAULT_PASSCODE_ID, PaseClientMessenger, SPAKE_CONTEXT } from "./PaseMessenger.js";
+const logger = Logger.get("PaseClient");
+export class PaseClient {
+    pair(client, exchange, setupPin) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new PaseClientMessenger(exchange);
+            const random = Crypto.getRandom();
+            const sessionId = client.getNextAvailableSessionId();
+            // Send pbkdRequest and Read pbkdResponse
+            const requestPayload = yield messenger.sendPbkdfParamRequest({ random, sessionId, passcodeId: DEFAULT_PASSCODE_ID, hasPbkdfParameters: false });
+            const { responsePayload, response: { pbkdfParameters, sessionId: peerSessionId } } = yield messenger.readPbkdfParamResponse();
+            if (pbkdfParameters === undefined)
+                throw new Error("Missing requested PbkdfParameters in the response");
+            // Compute pake1 and read pake2
+            const { w0, w1 } = yield Spake2p.computeW0W1(pbkdfParameters, setupPin);
+            const spake2p = Spake2p.create(Crypto.hash([SPAKE_CONTEXT, requestPayload, responsePayload]), w0);
+            const X = spake2p.computeX();
+            yield messenger.sendPasePake1({ x: X });
+            // Process pack2 and send pake3
+            const { y: Y, verifier } = yield messenger.readPasePake2();
+            const { Ke, hAY, hBX } = yield spake2p.computeSecretAndVerifiersFromY(w1, X, Y);
+            if (!verifier.equals(hBX))
+                throw new Error("Received incorrect key confirmation from the receiver");
+            yield messenger.sendPasePake3({ verifier: hAY });
+            // All good! Creating the secure session
+            yield messenger.waitForSuccess();
+            const secureSession = yield client.createSecureSession(sessionId, undefined, UNDEFINED_NODE_ID, peerSessionId, Ke, new ByteArray(0), true, false);
+            messenger.close();
+            logger.info(`Pase client: Paired successfully with ${messenger.getChannelName()}`);
+            return secureSession;
+        });
+    }
+}

package/dist/es/session/pase/PaseMessages.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPbkdfParamRequest: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    passcodeId: import("../../tlv/TlvObject.js").FieldType<number>;
+    hasPbkdfParameters: import("../../tlv/TlvObject.js").FieldType<boolean>;
+    mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        idleRetransTimeoutMs?: number | undefined;
+        activeRetransTimeoutMs?: number | undefined;
+    }>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPbkdfParamResponse: import("../../tlv/TlvObject.js").ObjectSchema<{
+    peerRandom: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    pbkdfParameters: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        iterations: number;
+        salt: Uint8Array;
+    }>;
+    mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        idleRetransTimeoutMs?: number | undefined;
+        activeRetransTimeoutMs?: number | undefined;
+    }>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake1: import("../../tlv/TlvObject.js").ObjectSchema<{
+    x: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    y: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=PaseMessages.d.ts.map

package/dist/es/session/pase/PaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB;;;;;;;;;EAM/B,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAShC,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;EAEvB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;EAEvB,CAAC"}

package/dist/es/session/pase/PaseMessages.js

@@ -0,0 +1,49 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CRYPTO_HASH_LEN_BYTES, CRYPTO_PUBLIC_KEY_SIZE_BYTES } from "../../crypto/CryptoConstants.js";
+import { TlvBoolean } from "../../tlv/TlvBoolean.js";
+import { TlvUInt16, TlvUInt32 } from "../../tlv/TlvNumber.js";
+import { TlvField, TlvObject, TlvOptionalField } from "../../tlv/TlvObject.js";
+import { TlvByteString } from "../../tlv/TlvString.js";
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = TlvObject({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: TlvOptionalField(1, TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: TlvOptionalField(2, TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export const TlvPbkdfParamRequest = TlvObject({
+    random: TlvField(1, TlvByteString.bound({ length: 32 })),
+    sessionId: TlvField(2, TlvUInt16),
+    passcodeId: TlvField(3, TlvUInt16),
+    hasPbkdfParameters: TlvField(4, TlvBoolean),
+    mrpParameters: TlvOptionalField(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export const TlvPbkdfParamResponse = TlvObject({
+    peerRandom: TlvField(1, TlvByteString.bound({ length: 32 })),
+    random: TlvField(2, TlvByteString.bound({ length: 32 })),
+    sessionId: TlvField(3, TlvUInt16),
+    pbkdfParameters: TlvOptionalField(4, TlvObject({
+        iterations: TlvField(1, TlvUInt32),
+        salt: TlvField(2, TlvByteString.bound({ minLength: 16, maxLength: 32 })),
+    })),
+    mrpParameters: TlvOptionalField(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export const TlvPasePake1 = TlvObject({
+    x: TlvField(1, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export const TlvPasePake2 = TlvObject({
+    y: TlvField(1, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    verifier: TlvField(2, TlvByteString.bound({ length: CRYPTO_HASH_LEN_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export const TlvPasePake3 = TlvObject({
+    verifier: TlvField(1, TlvByteString.bound({ length: CRYPTO_HASH_LEN_BYTES })),
+});

package/dist/es/session/pase/PaseMessenger.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvPasePake1, TlvPasePake2, TlvPasePake3, TlvPbkdfParamRequest, TlvPbkdfParamResponse } from "./PaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare const DEFAULT_PASSCODE_ID = 0;
+export declare const SPAKE_CONTEXT: Uint8Array;
+type PbkdfParamRequest = TypeFromSchema<typeof TlvPbkdfParamRequest>;
+type PbkdfParamResponse = TypeFromSchema<typeof TlvPbkdfParamResponse>;
+type PasePake1 = TypeFromSchema<typeof TlvPasePake1>;
+type PasePake2 = TypeFromSchema<typeof TlvPasePake2>;
+type PasePake3 = TypeFromSchema<typeof TlvPasePake3>;
+export declare class PaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readPbkdfParamRequest(): Promise<{
+        requestPayload: Uint8Array;
+        request: {
+            sessionId: number;
+            random: Uint8Array;
+            passcodeId: number;
+            hasPbkdfParameters: boolean;
+            mrpParameters?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+        };
+    }>;
+    sendPbkdfParamResponse(response: PbkdfParamResponse): Promise<Uint8Array>;
+    readPasePake1(): Promise<{
+        x: Uint8Array;
+    }>;
+    sendPasePake2(pasePake2: PasePake2): Promise<Uint8Array>;
+    readPasePake3(): Promise<{
+        verifier: Uint8Array;
+    }>;
+}
+export declare class PaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendPbkdfParamRequest(request: PbkdfParamRequest): Promise<Uint8Array>;
+    readPbkdfParamResponse(): Promise<{
+        responsePayload: Uint8Array;
+        response: {
+            sessionId: number;
+            random: Uint8Array;
+            peerRandom: Uint8Array;
+            mrpParameters?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+            pbkdfParameters?: {
+                iterations: number;
+                salt: Uint8Array;
+            } | undefined;
+        };
+    }>;
+    sendPasePake1(pasePake1: PasePake1): Promise<Uint8Array>;
+    readPasePake2(): Promise<{
+        y: Uint8Array;
+        verifier: Uint8Array;
+    }>;
+    sendPasePake3(pasePake3: PasePake3): Promise<Uint8Array>;
+}
+export {};
+//# sourceMappingURL=PaseMessenger.d.ts.map

package/dist/es/session/pase/PaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,aAAa,YAAqD,CAAC;AAEhF,KAAK,iBAAiB,GAAG,cAAc,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,KAAK,kBAAkB,GAAG,cAAc,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACvE,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AAErD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,qBAAqB;;;;;;;;;;;;;IAKrB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB;IAIzD,aAAa;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;CAGhB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,qBAAqB,CAAC,OAAO,EAAE,iBAAiB;IAI1C,sBAAsB;;;;;;;;;;;;;;;;IAK5B,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;CAGrC"}