@project-chip/matter.js 0.2.1 → 0.3.0

package/dist/cjs/session/case/CaseClient.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaseClient = void 0;
+const CertificateManager_js_1 = require("../../certificate/CertificateManager.js");
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const CaseMessages_js_1 = require("./CaseMessages.js");
+const CaseMessenger_js_1 = require("./CaseMessenger.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const logger = Logger_js_1.Logger.get("CaseClient");
+class CaseClient {
+    pair(client, exchange, fabric, peerNodeId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new CaseMessenger_js_1.CaseClientMessenger(exchange);
+            // Generate pairing info
+            const random = Crypto_js_1.Crypto.getRandom();
+            const sessionId = client.getNextAvailableSessionId();
+            const { operationalIdentityProtectionKey, operationalCert: nodeOpCert, intermediateCACert } = fabric;
+            const { publicKey: ecdhPublicKey, ecdh } = Crypto_js_1.Crypto.ecdhGeneratePublicKey();
+            // Send sigma1
+            let sigma1Bytes;
+            let resumptionRecord = client.findResumptionRecordByNodeId(peerNodeId);
+            if (resumptionRecord !== undefined) {
+                const { sharedSecret, resumptionId } = resumptionRecord;
+                const resumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, ByteArray_js_1.ByteArray.concat(random, resumptionId), CaseMessages_js_1.KDFSR1_KEY_INFO);
+                const resumeMic = Crypto_js_1.Crypto.encrypt(resumeKey, new ByteArray_js_1.ByteArray(0), CaseMessages_js_1.RESUME1_MIC_NONCE);
+                sigma1Bytes = yield messenger.sendSigma1({ sessionId, destinationId: fabric.getDestinationId(peerNodeId, random), ecdhPublicKey, random, resumptionId, resumeMic });
+            }
+            else {
+                sigma1Bytes = yield messenger.sendSigma1({ sessionId, destinationId: fabric.getDestinationId(peerNodeId, random), ecdhPublicKey, random });
+            }
+            let secureSession;
+            const { sigma2Bytes, sigma2, sigma2Resume } = yield messenger.readSigma2();
+            if (sigma2Resume !== undefined) {
+                // Process sigma2 resume
+                if (resumptionRecord === undefined)
+                    throw new Error("Received an unexpected sigma2Resume");
+                const { sharedSecret, fabric } = resumptionRecord;
+                const { sessionId: peerSessionId, resumptionId, resumeMic } = sigma2Resume;
+                const resumeSalt = ByteArray_js_1.ByteArray.concat(random, resumptionId);
+                const resumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, resumeSalt, CaseMessages_js_1.KDFSR2_KEY_INFO);
+                Crypto_js_1.Crypto.decrypt(resumeKey, resumeMic, CaseMessages_js_1.RESUME2_MIC_NONCE);
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(random, resumptionRecord.resumptionId);
+                secureSession = yield client.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, true, true);
+                yield messenger.sendSuccess();
+                logger.info(`Case client: session resumed with ${messenger.getChannelName()}`);
+                resumptionRecord.resumptionId = resumptionId; /* update resumptionId */
+            }
+            else {
+                // Process sigma2
+                const { ecdhPublicKey: peerEcdhPublicKey, encrypted: peerEncrypted, random: peerRandom, sessionId: peerSessionId } = sigma2;
+                const sharedSecret = Crypto_js_1.Crypto.ecdhGenerateSecret(peerEcdhPublicKey, ecdh);
+                const sigma2Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, peerRandom, peerEcdhPublicKey, Crypto_js_1.Crypto.hash(sigma1Bytes));
+                const sigma2Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma2Salt, CaseMessages_js_1.KDFSR2_INFO);
+                const peerEncryptedData = Crypto_js_1.Crypto.decrypt(sigma2Key, peerEncrypted, CaseMessages_js_1.TBE_DATA2_NONCE);
+                const { nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, signature: peerSignature, resumptionId: peerResumptionId } = CaseMessages_js_1.TlvEncryptedDataSigma2.decode(peerEncryptedData);
+                const peerSignatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, ecdhPublicKey: peerEcdhPublicKey, peerEcdhPublicKey: ecdhPublicKey });
+                const { ellipticCurvePublicKey: peerPublicKey, subject: { nodeId: peerNodeIdCert } } = CertificateManager_js_1.TlvOperationalCertificate.decode(peerNewOpCert);
+                if (peerNodeIdCert.id !== peerNodeId.id)
+                    throw new Error("The node ID in the peer certificate doesn't match the expected peer node ID");
+                Crypto_js_1.Crypto.verifySpki(peerPublicKey, peerSignatureData, peerSignature);
+                // Generate and send sigma3
+                const sigma3Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes]));
+                const sigma3Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma3Salt, CaseMessages_js_1.KDFSR3_INFO);
+                const signatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert, intermediateCACert, ecdhPublicKey, peerEcdhPublicKey });
+                const signature = fabric.sign(signatureData);
+                const encryptedData = CaseMessages_js_1.TlvEncryptedDataSigma3.encode({ nodeOpCert, intermediateCACert, signature });
+                const encrypted = Crypto_js_1.Crypto.encrypt(sigma3Key, encryptedData, CaseMessages_js_1.TBE_DATA3_NONCE);
+                const sigma3Bytes = yield messenger.sendSigma3({ encrypted });
+                yield messenger.waitForSuccess();
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes]));
+                secureSession = yield client.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, true, false);
+                logger.info(`Case client: Paired succesfully with ${messenger.getChannelName()}`);
+                resumptionRecord = { fabric, peerNodeId, sharedSecret, resumptionId: peerResumptionId };
+            }
+            messenger.close();
+            client.saveResumptionRecord(resumptionRecord);
+            return secureSession;
+        });
+    }
+}
+exports.CaseClient = CaseClient;

package/dist/cjs/session/case/CaseMessages.d.ts

@@ -0,0 +1,63 @@
+export declare const KDFSR1_KEY_INFO: Uint8Array;
+export declare const KDFSR2_KEY_INFO: Uint8Array;
+export declare const RESUME1_MIC_NONCE: Uint8Array;
+export declare const RESUME2_MIC_NONCE: Uint8Array;
+export declare const KDFSR2_INFO: Uint8Array;
+export declare const KDFSR3_INFO: Uint8Array;
+export declare const TBE_DATA2_NONCE: Uint8Array;
+export declare const TBE_DATA3_NONCE: Uint8Array;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma1: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    destinationId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        idleRetransTimeoutMs?: number | undefined;
+        activeRetransTimeoutMs?: number | undefined;
+    }>;
+    resumptionId: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    resumeMic: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<{
+        idleRetransTimeoutMs?: number | undefined;
+        activeRetransTimeoutMs?: number | undefined;
+    }>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma2Resume: import("../../tlv/TlvObject.js").ObjectSchema<{
+    resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    resumeMic: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvSignedData: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    peerEcdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvEncryptedDataSigma2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    signature: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvEncryptedDataSigma3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    signature: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=CaseMessages.d.ts.map

package/dist/cjs/session/case/CaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessages.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,iBAAiB,YAAwC,CAAC;AACvE,eAAO,MAAM,iBAAiB,YAAwC,CAAC;AACvE,eAAO,MAAM,WAAW,YAAiC,CAAC;AAC1D,eAAO,MAAM,WAAW,YAAiC,CAAC;AAC1D,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,eAAe,YAAwC,CAAC;AAWrE,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;;;;;;;EAQxB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;;;;;EAMxB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;EAExB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;EAKxB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;;EAKjC,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;EAIjC,CAAC"}

package/dist/cjs/session/case/CaseMessages.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TlvEncryptedDataSigma3 = exports.TlvEncryptedDataSigma2 = exports.TlvSignedData = exports.TlvCaseSigma3 = exports.TlvCaseSigma2Resume = exports.TlvCaseSigma2 = exports.TlvCaseSigma1 = exports.TBE_DATA3_NONCE = exports.TBE_DATA2_NONCE = exports.KDFSR3_INFO = exports.KDFSR2_INFO = exports.RESUME2_MIC_NONCE = exports.RESUME1_MIC_NONCE = exports.KDFSR2_KEY_INFO = exports.KDFSR1_KEY_INFO = void 0;
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const CryptoConstants_js_1 = require("../../crypto/CryptoConstants.js");
+const TlvNumber_js_1 = require("../../tlv/TlvNumber.js");
+const TlvObject_js_1 = require("../../tlv/TlvObject.js");
+const TlvString_js_1 = require("../../tlv/TlvString.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const CASE_SIGNATURE_LENGTH = CryptoConstants_js_1.CRYPTO_GROUP_SIZE_BYTES * 2;
+const CASE2_ENCRYPTED_LENGTH = 800 + CryptoConstants_js_1.CRYPTO_AEAD_MIC_LENGTH_BYTES + CASE_SIGNATURE_LENGTH; // NOC + ICAC + CASE-Sig + Mic
+exports.KDFSR1_KEY_INFO = ByteArray_js_1.ByteArray.fromString("Sigma1_Resume");
+exports.KDFSR2_KEY_INFO = ByteArray_js_1.ByteArray.fromString("Sigma2_Resume");
+exports.RESUME1_MIC_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_SigmaS1");
+exports.RESUME2_MIC_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_SigmaS2");
+exports.KDFSR2_INFO = ByteArray_js_1.ByteArray.fromString("Sigma2");
+exports.KDFSR3_INFO = ByteArray_js_1.ByteArray.fromString("Sigma3");
+exports.TBE_DATA2_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_Sigma2N");
+exports.TBE_DATA3_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_Sigma3N");
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = (0, TlvObject_js_1.TlvObject)({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(1, TlvNumber_js_1.TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(2, TlvNumber_js_1.TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma1 = (0, TlvObject_js_1.TlvObject)({
+    random: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(2, TlvNumber_js_1.TlvUInt16),
+    destinationId: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_HASH_LEN_BYTES })),
+    ecdhPublicKey: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    mrpParams: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+    resumptionId: (0, TlvObject_js_1.TlvOptionalField)(6, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+    resumeMic: (0, TlvObject_js_1.TlvOptionalField)(7, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_AEAD_MIC_LENGTH_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma2 = (0, TlvObject_js_1.TlvObject)({
+    random: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(2, TlvNumber_js_1.TlvUInt16),
+    ecdhPublicKey: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    encrypted: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ maxLength: CASE2_ENCRYPTED_LENGTH })),
+    mrpParams: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma2Resume = (0, TlvObject_js_1.TlvObject)({
+    resumptionId: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+    resumeMic: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(3, TlvNumber_js_1.TlvUInt16),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma3 = (0, TlvObject_js_1.TlvObject)({
+    encrypted: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvSignedData = (0, TlvObject_js_1.TlvObject)({
+    nodeOpCert: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+    intermediateCACert: (0, TlvObject_js_1.TlvOptionalField)(2, TlvString_js_1.TlvByteString),
+    ecdhPublicKey: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    peerEcdhPublicKey: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvEncryptedDataSigma2 = (0, TlvObject_js_1.TlvObject)({
+    nodeOpCert: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+    intermediateCACert: (0, TlvObject_js_1.TlvOptionalField)(2, TlvString_js_1.TlvByteString),
+    signature: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+    resumptionId: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvEncryptedDataSigma3 = (0, TlvObject_js_1.TlvObject)({
+    nodeOpCert: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+    intermediateCACert: (0, TlvObject_js_1.TlvOptionalField)(2, TlvString_js_1.TlvByteString),
+    signature: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+});

package/dist/cjs/session/case/CaseMessenger.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvCaseSigma1, TlvCaseSigma2Resume, TlvCaseSigma2, TlvCaseSigma3 } from "./CaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare class CaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readSigma1(): Promise<{
+        sigma1Bytes: Uint8Array;
+        sigma1: {
+            sessionId: number;
+            random: Uint8Array;
+            destinationId: Uint8Array;
+            ecdhPublicKey: Uint8Array;
+            mrpParams?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+            resumptionId?: Uint8Array | undefined;
+            resumeMic?: Uint8Array | undefined;
+        };
+    }>;
+    sendSigma2(sigma2: TypeFromSchema<typeof TlvCaseSigma2>): Promise<Uint8Array>;
+    sendSigma2Resume(sigma2Resume: TypeFromSchema<typeof TlvCaseSigma2Resume>): Promise<Uint8Array>;
+    readSigma3(): Promise<{
+        sigma3Bytes: Uint8Array;
+        sigma3: {
+            encrypted: Uint8Array;
+        };
+    }>;
+}
+export declare class CaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendSigma1(sigma1: TypeFromSchema<typeof TlvCaseSigma1>): Promise<Uint8Array>;
+    readSigma2(): Promise<{
+        sigma2Bytes: Uint8Array;
+        sigma2: {
+            sessionId: number;
+            random: Uint8Array;
+            ecdhPublicKey: Uint8Array;
+            encrypted: Uint8Array;
+            mrpParams?: {
+                idleRetransTimeoutMs?: number | undefined;
+                activeRetransTimeoutMs?: number | undefined;
+            } | undefined;
+        };
+        sigma2Resume?: undefined;
+    } | {
+        sigma2Resume: {
+            sessionId: number;
+            resumptionId: Uint8Array;
+            resumeMic: Uint8Array;
+        };
+        sigma2Bytes?: undefined;
+        sigma2?: undefined;
+    }>;
+    sendSigma3(sigma3: TypeFromSchema<typeof TlvCaseSigma3>): Promise<Uint8Array>;
+}
+//# sourceMappingURL=CaseMessenger.d.ts.map

package/dist/cjs/session/case/CaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,UAAU;;;;;;;;;;;;;;;IAKhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIvD,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC,OAAO,mBAAmB,CAAC;IAInE,UAAU;;;;;;CAInB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIjD,UAAU;;;;;;;;;;;;;;;;;;;;;;IAYhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;CAG1D"}

package/dist/cjs/session/case/CaseMessenger.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaseClientMessenger = exports.CaseServerMessenger = void 0;
+const CaseMessages_js_1 = require("./CaseMessages.js");
+const SecureChannelMessenger_js_1 = require("../../protocol/securechannel/SecureChannelMessenger.js");
+class CaseServerMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    readSigma1() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(48 /* MessageType.Sigma1 */);
+            return { sigma1Bytes: payload, sigma1: CaseMessages_js_1.TlvCaseSigma1.decode(payload) };
+        });
+    }
+    sendSigma2(sigma2) {
+        return this.send(sigma2, 49 /* MessageType.Sigma2 */, CaseMessages_js_1.TlvCaseSigma2);
+    }
+    sendSigma2Resume(sigma2Resume) {
+        return this.send(sigma2Resume, 51 /* MessageType.Sigma2Resume */, CaseMessages_js_1.TlvCaseSigma2Resume);
+    }
+    readSigma3() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(50 /* MessageType.Sigma3 */);
+            return { sigma3Bytes: payload, sigma3: CaseMessages_js_1.TlvCaseSigma3.decode(payload) };
+        });
+    }
+}
+exports.CaseServerMessenger = CaseServerMessenger;
+class CaseClientMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    sendSigma1(sigma1) {
+        return this.send(sigma1, 48 /* MessageType.Sigma1 */, CaseMessages_js_1.TlvCaseSigma1);
+    }
+    readSigma2() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload, payloadHeader: { messageType } } = yield this.nextMessage();
+            switch (messageType) {
+                case 49 /* MessageType.Sigma2 */:
+                    return { sigma2Bytes: payload, sigma2: CaseMessages_js_1.TlvCaseSigma2.decode(payload) };
+                case 51 /* MessageType.Sigma2Resume */:
+                    return { sigma2Resume: CaseMessages_js_1.TlvCaseSigma2Resume.decode(payload) };
+                default:
+                    throw new Error(`Received unexpected message type: ${messageType}, expected: ${49 /* MessageType.Sigma2 */} or ${51 /* MessageType.Sigma2Resume */}`);
+            }
+        });
+    }
+    sendSigma3(sigma3) {
+        return this.send(sigma3, 50 /* MessageType.Sigma3 */, CaseMessages_js_1.TlvCaseSigma3);
+    }
+}
+exports.CaseClientMessenger = CaseClientMessenger;

package/dist/cjs/session/case/CaseServer.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterDevice } from "../../MatterDevice.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { ProtocolHandler } from "../../protocol/ProtocolHandler.js";
+export declare class CaseServer implements ProtocolHandler<MatterDevice> {
+    onNewExchange(exchange: MessageExchange<MatterDevice>): Promise<void>;
+    getId(): number;
+    private handleSigma1;
+}
+//# sourceMappingURL=CaseServer.d.ts.map

package/dist/cjs/session/case/CaseServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseServer.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAUpE,qBAAa,UAAW,YAAW,eAAe,CAAC,YAAY,CAAC;IACtD,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,YAAY,CAAC;IAU3D,KAAK,IAAI,MAAM;YAID,YAAY;CAgF7B"}

package/dist/cjs/session/case/CaseServer.js

@@ -0,0 +1,115 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaseServer = void 0;
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const CaseMessenger_js_1 = require("./CaseMessenger.js");
+const CaseMessages_js_1 = require("./CaseMessages.js");
+const CertificateManager_js_1 = require("../../certificate/CertificateManager.js");
+const SecureChannelMessages_js_1 = require("../../protocol/securechannel/SecureChannelMessages.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const logger = Logger_js_1.Logger.get("CaseServer");
+class CaseServer {
+    onNewExchange(exchange) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new CaseMessenger_js_1.CaseServerMessenger(exchange);
+            try {
+                yield this.handleSigma1(exchange.session.getContext(), messenger);
+            }
+            catch (error) {
+                logger.error("An error occurred during the commissioning", error);
+                yield messenger.sendError();
+            }
+        });
+    }
+    getId() {
+        return SecureChannelMessages_js_1.SECURE_CHANNEL_PROTOCOL_ID;
+    }
+    handleSigma1(server, messenger) {
+        return __awaiter(this, void 0, void 0, function* () {
+            logger.info(`Case server: Received pairing request from ${messenger.getChannelName()}`);
+            // Generate pairing info
+            const sessionId = server.getNextAvailableSessionId();
+            const random = Crypto_js_1.Crypto.getRandom();
+            // Read and process sigma 1
+            const { sigma1Bytes, sigma1 } = yield messenger.readSigma1();
+            const { sessionId: peerSessionId, resumptionId: peerResumptionId, resumeMic: peerResumeMic, destinationId, random: peerRandom, ecdhPublicKey: peerEcdhPublicKey, mrpParams } = sigma1;
+            // Try to resume a previous session
+            const resumptionId = Crypto_js_1.Crypto.getRandomData(16);
+            let resumptionRecord;
+            // We try to resume the session
+            if (peerResumptionId !== undefined && peerResumeMic !== undefined && (resumptionRecord = server.findResumptionRecordById(peerResumptionId)) !== undefined) {
+                const { sharedSecret, fabric, peerNodeId } = resumptionRecord;
+                const peerResumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, ByteArray_js_1.ByteArray.concat(peerRandom, peerResumptionId), CaseMessages_js_1.KDFSR1_KEY_INFO);
+                Crypto_js_1.Crypto.decrypt(peerResumeKey, peerResumeMic, CaseMessages_js_1.RESUME1_MIC_NONCE);
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(peerRandom, peerResumptionId);
+                const secureSession = yield server.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, false, true, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.idleRetransTimeoutMs, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.activeRetransTimeoutMs);
+                // Generate sigma 2 resume
+                const resumeSalt = ByteArray_js_1.ByteArray.concat(peerRandom, resumptionId);
+                const resumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, resumeSalt, CaseMessages_js_1.KDFSR2_KEY_INFO);
+                const resumeMic = Crypto_js_1.Crypto.encrypt(resumeKey, new ByteArray_js_1.ByteArray(0), CaseMessages_js_1.RESUME2_MIC_NONCE);
+                try {
+                    yield messenger.sendSigma2Resume({ resumptionId, resumeMic, sessionId });
+                }
+                catch (error) {
+                    // If we fail to send the resume, we destroy the session
+                    secureSession.destroy();
+                    throw error;
+                }
+                logger.info(`Case server: session ${secureSession.getId()} resumed with ${messenger.getChannelName()}`);
+                resumptionRecord.resumptionId = resumptionId; /* Update the ID */
+                // Wait for success on the peer side
+                yield messenger.waitForSuccess();
+                messenger.close();
+                server.saveResumptionRecord(resumptionRecord);
+            }
+            else {
+                // Generate sigma 2
+                const fabric = server.findFabricFromDestinationId(destinationId, peerRandom);
+                const { operationalCert: nodeOpCert, intermediateCACert, operationalIdentityProtectionKey } = fabric;
+                const { publicKey: ecdhPublicKey, sharedSecret } = Crypto_js_1.Crypto.ecdhGeneratePublicKeyAndSecret(peerEcdhPublicKey);
+                const sigma2Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, random, ecdhPublicKey, Crypto_js_1.Crypto.hash(sigma1Bytes));
+                const sigma2Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma2Salt, CaseMessages_js_1.KDFSR2_INFO);
+                const signatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert, intermediateCACert, ecdhPublicKey, peerEcdhPublicKey });
+                const signature = fabric.sign(signatureData);
+                const encryptedData = CaseMessages_js_1.TlvEncryptedDataSigma2.encode({ nodeOpCert, intermediateCACert, signature, resumptionId });
+                const encrypted = Crypto_js_1.Crypto.encrypt(sigma2Key, encryptedData, CaseMessages_js_1.TBE_DATA2_NONCE);
+                const sigma2Bytes = yield messenger.sendSigma2({ random, sessionId, ecdhPublicKey, encrypted, mrpParams });
+                // Read and process sigma 3
+                const { sigma3Bytes, sigma3: { encrypted: peerEncrypted } } = yield messenger.readSigma3();
+                const sigma3Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes]));
+                const sigma3Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma3Salt, CaseMessages_js_1.KDFSR3_INFO);
+                const peerEncryptedData = Crypto_js_1.Crypto.decrypt(sigma3Key, peerEncrypted, CaseMessages_js_1.TBE_DATA3_NONCE);
+                const { nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, signature: peerSignature } = CaseMessages_js_1.TlvEncryptedDataSigma3.decode(peerEncryptedData);
+                fabric.verifyCredentials(peerNewOpCert, peerIntermediateCACert);
+                const peerSignatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, ecdhPublicKey: peerEcdhPublicKey, peerEcdhPublicKey: ecdhPublicKey });
+                const { ellipticCurvePublicKey: peerPublicKey, subject: { nodeId: peerNodeId } } = CertificateManager_js_1.TlvOperationalCertificate.decode(peerNewOpCert);
+                Crypto_js_1.Crypto.verifySpki(peerPublicKey, peerSignatureData, peerSignature);
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes]));
+                const secureSession = yield server.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, false, false, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.idleRetransTimeoutMs, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.activeRetransTimeoutMs);
+                logger.info(`Case server: session ${secureSession.getId()} created with ${messenger.getChannelName()}`);
+                yield messenger.sendSuccess();
+                resumptionRecord = { peerNodeId, fabric, sharedSecret, resumptionId };
+                messenger.close();
+                server.saveResumptionRecord(resumptionRecord);
+            }
+        });
+    }
+}
+exports.CaseServer = CaseServer;

package/dist/cjs/session/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./SecureSession.js";
+export * from "./SessionManager.js";
+export * from "./Session.js";
+export * from "./UnsecureSession.js";
+export * from "./pase/PaseClient.js";
+export * from "./pase/PaseMessages.js";
+export * from "./pase/PaseMessenger.js";
+export * from "./pase/PaseServer.js";
+export * from "./case/CaseClient.js";
+export * from "./case/CaseMessages.js";
+export * from "./case/CaseMessenger.js";
+export * from "./case/CaseServer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/dist/cjs/session/index.js

@@ -0,0 +1,36 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Export generic Session classes
+__exportStar(require("./SecureSession.js"), exports);
+__exportStar(require("./SessionManager.js"), exports);
+__exportStar(require("./Session.js"), exports);
+__exportStar(require("./UnsecureSession.js"), exports);
+// Export PaseSession classes
+__exportStar(require("./pase/PaseClient.js"), exports);
+__exportStar(require("./pase/PaseMessages.js"), exports);
+__exportStar(require("./pase/PaseMessenger.js"), exports);
+__exportStar(require("./pase/PaseServer.js"), exports);
+// Export CaseSession classes
+__exportStar(require("./case/CaseClient.js"), exports);
+__exportStar(require("./case/CaseMessages.js"), exports);
+__exportStar(require("./case/CaseMessenger.js"), exports);
+__exportStar(require("./case/CaseServer.js"), exports);

package/dist/cjs/session/pase/PaseClient.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { MatterController } from "../../MatterController.js";
+import { SecureSession } from "../SecureSession.js";
+export declare class PaseClient {
+    pair(client: MatterController, exchange: MessageExchange<MatterController>, setupPin: number): Promise<SecureSession<MatterController>>;
+}
+//# sourceMappingURL=PaseClient.d.ts.map

package/dist/cjs/session/pase/PaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,qBAAa,UAAU;IACb,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,MAAM;CA8BrG"}