@project-chip/matter.js 0.2.1 → 0.4.0

package/dist/cjs/session/case/CaseMessenger.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaseClientMessenger = exports.CaseServerMessenger = void 0;
+const CaseMessages_js_1 = require("./CaseMessages.js");
+const SecureChannelMessenger_js_1 = require("../../protocol/securechannel/SecureChannelMessenger.js");
+class CaseServerMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    readSigma1() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(48 /* MessageType.Sigma1 */);
+            return { sigma1Bytes: payload, sigma1: CaseMessages_js_1.TlvCaseSigma1.decode(payload) };
+        });
+    }
+    sendSigma2(sigma2) {
+        return this.send(sigma2, 49 /* MessageType.Sigma2 */, CaseMessages_js_1.TlvCaseSigma2);
+    }
+    sendSigma2Resume(sigma2Resume) {
+        return this.send(sigma2Resume, 51 /* MessageType.Sigma2Resume */, CaseMessages_js_1.TlvCaseSigma2Resume);
+    }
+    readSigma3() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(50 /* MessageType.Sigma3 */);
+            return { sigma3Bytes: payload, sigma3: CaseMessages_js_1.TlvCaseSigma3.decode(payload) };
+        });
+    }
+}
+exports.CaseServerMessenger = CaseServerMessenger;
+class CaseClientMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    sendSigma1(sigma1) {
+        return this.send(sigma1, 48 /* MessageType.Sigma1 */, CaseMessages_js_1.TlvCaseSigma1);
+    }
+    readSigma2() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload, payloadHeader: { messageType } } = yield this.nextMessage();
+            switch (messageType) {
+                case 49 /* MessageType.Sigma2 */:
+                    return { sigma2Bytes: payload, sigma2: CaseMessages_js_1.TlvCaseSigma2.decode(payload) };
+                case 51 /* MessageType.Sigma2Resume */:
+                    return { sigma2Resume: CaseMessages_js_1.TlvCaseSigma2Resume.decode(payload) };
+                default:
+                    throw new Error(`Received unexpected message type: ${messageType}, expected: ${49 /* MessageType.Sigma2 */} or ${51 /* MessageType.Sigma2Resume */}`);
+            }
+        });
+    }
+    sendSigma3(sigma3) {
+        return this.send(sigma3, 50 /* MessageType.Sigma3 */, CaseMessages_js_1.TlvCaseSigma3);
+    }
+}
+exports.CaseClientMessenger = CaseClientMessenger;
+//# sourceMappingURL=CaseMessenger.js.map

package/dist/cjs/session/case/CaseMessenger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessenger.js","sourceRoot":"","sources":["../../../../src/session/case/CaseMessenger.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;AAIH,uDAAqG;AACrG,sGAAgG;AAIhG,MAAa,mBAAoB,SAAQ,kDAAoC;IACnE,UAAU;;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,6BAAoB,CAAC;YAC/D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,+BAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,CAAC;KAAA;IAED,UAAU,CAAC,MAA4C;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,+BAAsB,+BAAa,CAAC,CAAC;IAChE,CAAC;IAED,gBAAgB,CAAC,YAAwD;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,qCAA4B,qCAAmB,CAAC,CAAC;IAClF,CAAC;IAEK,UAAU;;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,6BAAoB,CAAC;YAC/D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,+BAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,CAAC;KAAA;CACJ;AAlBD,kDAkBC;AAED,MAAa,mBAAoB,SAAQ,kDAAwC;IAC7E,UAAU,CAAC,MAA4C;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,+BAAsB,+BAAa,CAAC,CAAC;IAChE,CAAC;IAEK,UAAU;;YACZ,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7E,QAAQ,WAAW,EAAE;gBACjB;oBACI,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,+BAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3E;oBACI,OAAO,EAAE,YAAY,EAAE,qCAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjE;oBACI,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,eAAe,2BAAkB,OAAO,iCAAwB,EAAE,CAAC,CAAC;aAC3I;QACL,CAAC;KAAA;IAED,UAAU,CAAC,MAA4C;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,+BAAsB,+BAAa,CAAC,CAAC;IAChE,CAAC;CACJ;AApBD,kDAoBC"}

package/dist/cjs/session/case/CaseServer.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterDevice } from "../../MatterDevice.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { ProtocolHandler } from "../../protocol/ProtocolHandler.js";
+export declare class CaseServer implements ProtocolHandler<MatterDevice> {
+    onNewExchange(exchange: MessageExchange<MatterDevice>): Promise<void>;
+    getId(): number;
+    private handleSigma1;
+}
+//# sourceMappingURL=CaseServer.d.ts.map

package/dist/cjs/session/case/CaseServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseServer.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAUpE,qBAAa,UAAW,YAAW,eAAe,CAAC,YAAY,CAAC;IACtD,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,YAAY,CAAC;IAU3D,KAAK,IAAI,MAAM;YAID,YAAY;CAgF7B"}

package/dist/cjs/session/case/CaseServer.js

@@ -0,0 +1,116 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaseServer = void 0;
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const CaseMessenger_js_1 = require("./CaseMessenger.js");
+const CaseMessages_js_1 = require("./CaseMessages.js");
+const CertificateManager_js_1 = require("../../certificate/CertificateManager.js");
+const SecureChannelMessages_js_1 = require("../../protocol/securechannel/SecureChannelMessages.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const logger = Logger_js_1.Logger.get("CaseServer");
+class CaseServer {
+    onNewExchange(exchange) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new CaseMessenger_js_1.CaseServerMessenger(exchange);
+            try {
+                yield this.handleSigma1(exchange.session.getContext(), messenger);
+            }
+            catch (error) {
+                logger.error("An error occurred during the commissioning", error);
+                yield messenger.sendError();
+            }
+        });
+    }
+    getId() {
+        return SecureChannelMessages_js_1.SECURE_CHANNEL_PROTOCOL_ID;
+    }
+    handleSigma1(server, messenger) {
+        return __awaiter(this, void 0, void 0, function* () {
+            logger.info(`Received pairing request from ${messenger.getChannelName()}`);
+            // Generate pairing info
+            const sessionId = server.getNextAvailableSessionId();
+            const random = Crypto_js_1.Crypto.getRandom();
+            // Read and process sigma 1
+            const { sigma1Bytes, sigma1 } = yield messenger.readSigma1();
+            const { sessionId: peerSessionId, resumptionId: peerResumptionId, resumeMic: peerResumeMic, destinationId, random: peerRandom, ecdhPublicKey: peerEcdhPublicKey, mrpParams } = sigma1;
+            // Try to resume a previous session
+            const resumptionId = Crypto_js_1.Crypto.getRandomData(16);
+            let resumptionRecord;
+            // We try to resume the session
+            if (peerResumptionId !== undefined && peerResumeMic !== undefined && (resumptionRecord = server.findResumptionRecordById(peerResumptionId)) !== undefined) {
+                const { sharedSecret, fabric, peerNodeId } = resumptionRecord;
+                const peerResumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, ByteArray_js_1.ByteArray.concat(peerRandom, peerResumptionId), CaseMessages_js_1.KDFSR1_KEY_INFO);
+                Crypto_js_1.Crypto.decrypt(peerResumeKey, peerResumeMic, CaseMessages_js_1.RESUME1_MIC_NONCE);
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(peerRandom, peerResumptionId);
+                const secureSession = yield server.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, false, true, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.idleRetransTimeoutMs, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.activeRetransTimeoutMs);
+                // Generate sigma 2 resume
+                const resumeSalt = ByteArray_js_1.ByteArray.concat(peerRandom, resumptionId);
+                const resumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, resumeSalt, CaseMessages_js_1.KDFSR2_KEY_INFO);
+                const resumeMic = Crypto_js_1.Crypto.encrypt(resumeKey, new ByteArray_js_1.ByteArray(0), CaseMessages_js_1.RESUME2_MIC_NONCE);
+                try {
+                    yield messenger.sendSigma2Resume({ resumptionId, resumeMic, sessionId });
+                }
+                catch (error) {
+                    // If we fail to send the resume, we destroy the session
+                    secureSession.destroy();
+                    throw error;
+                }
+                logger.info(`session ${secureSession.getId()} resumed with ${messenger.getChannelName()}`);
+                resumptionRecord.resumptionId = resumptionId; /* Update the ID */
+                // Wait for success on the peer side
+                yield messenger.waitForSuccess();
+                messenger.close();
+                server.saveResumptionRecord(resumptionRecord);
+            }
+            else {
+                // Generate sigma 2
+                const fabric = server.findFabricFromDestinationId(destinationId, peerRandom);
+                const { operationalCert: nodeOpCert, intermediateCACert, operationalIdentityProtectionKey } = fabric;
+                const { publicKey: ecdhPublicKey, sharedSecret } = Crypto_js_1.Crypto.ecdhGeneratePublicKeyAndSecret(peerEcdhPublicKey);
+                const sigma2Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, random, ecdhPublicKey, Crypto_js_1.Crypto.hash(sigma1Bytes));
+                const sigma2Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma2Salt, CaseMessages_js_1.KDFSR2_INFO);
+                const signatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert, intermediateCACert, ecdhPublicKey, peerEcdhPublicKey });
+                const signature = fabric.sign(signatureData);
+                const encryptedData = CaseMessages_js_1.TlvEncryptedDataSigma2.encode({ nodeOpCert, intermediateCACert, signature, resumptionId });
+                const encrypted = Crypto_js_1.Crypto.encrypt(sigma2Key, encryptedData, CaseMessages_js_1.TBE_DATA2_NONCE);
+                const sigma2Bytes = yield messenger.sendSigma2({ random, sessionId, ecdhPublicKey, encrypted, mrpParams });
+                // Read and process sigma 3
+                const { sigma3Bytes, sigma3: { encrypted: peerEncrypted } } = yield messenger.readSigma3();
+                const sigma3Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes]));
+                const sigma3Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma3Salt, CaseMessages_js_1.KDFSR3_INFO);
+                const peerEncryptedData = Crypto_js_1.Crypto.decrypt(sigma3Key, peerEncrypted, CaseMessages_js_1.TBE_DATA3_NONCE);
+                const { nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, signature: peerSignature } = CaseMessages_js_1.TlvEncryptedDataSigma3.decode(peerEncryptedData);
+                fabric.verifyCredentials(peerNewOpCert, peerIntermediateCACert);
+                const peerSignatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, ecdhPublicKey: peerEcdhPublicKey, peerEcdhPublicKey: ecdhPublicKey });
+                const { ellipticCurvePublicKey: peerPublicKey, subject: { nodeId: peerNodeId } } = CertificateManager_js_1.TlvOperationalCertificate.decode(peerNewOpCert);
+                Crypto_js_1.Crypto.verifySpki(peerPublicKey, peerSignatureData, peerSignature);
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes]));
+                const secureSession = yield server.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, false, false, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.idleRetransTimeoutMs, mrpParams === null || mrpParams === void 0 ? void 0 : mrpParams.activeRetransTimeoutMs);
+                logger.info(`session ${secureSession.getId()} created with ${messenger.getChannelName()}`);
+                yield messenger.sendSuccess();
+                resumptionRecord = { peerNodeId, fabric, sharedSecret, resumptionId };
+                messenger.close();
+                server.saveResumptionRecord(resumptionRecord);
+            }
+        });
+    }
+}
+exports.CaseServer = CaseServer;
+//# sourceMappingURL=CaseServer.js.map

package/dist/cjs/session/case/CaseServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseServer.js","sourceRoot":"","sources":["../../../../src/session/case/CaseServer.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;AAEH,sDAAgD;AAIhD,yDAAyD;AACzD,uDAAsO;AACtO,mFAAoF;AACpF,oGAAmG;AACnG,0DAAoD;AACpD,mDAA6C;AAE7C,MAAM,MAAM,GAAG,kBAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAExC,MAAa,UAAU;IACb,aAAa,CAAC,QAAuC;;YACvD,MAAM,SAAS,GAAG,IAAI,sCAAmB,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI;gBACA,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;aACrE;YAAC,OAAO,KAAK,EAAE;gBACZ,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;gBAClE,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;aAC/B;QACL,CAAC;KAAA;IAED,KAAK;QACD,OAAO,qDAA0B,CAAC;IACtC,CAAC;IAEa,YAAY,CAAC,MAAoB,EAAE,SAA8B;;YAC3E,MAAM,CAAC,IAAI,CAAC,iCAAiC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC3E,wBAAwB;YACxB,MAAM,SAAS,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,kBAAM,CAAC,SAAS,EAAE,CAAC;YAElC,2BAA2B;YAC3B,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7D,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;YAEtL,mCAAmC;YACnC,MAAM,YAAY,GAAG,kBAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,gBAAgB,CAAC;YAErB,+BAA+B;YAC/B,IAAI,gBAAgB,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,KAAK,SAAS,EAAE;gBACvJ,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC;gBAC9D,MAAM,aAAa,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,wBAAS,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,iCAAe,CAAC,CAAC;gBACvH,kBAAM,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,mCAAiB,CAAC,CAAC;gBAEhE,kCAAkC;gBAClC,MAAM,iBAAiB,GAAG,wBAAS,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;gBACzE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,oBAAoB,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,sBAAsB,CAAC,CAAC;gBAEvN,0BAA0B;gBAC1B,MAAM,UAAU,GAAG,wBAAS,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,iCAAe,CAAC,CAAC;gBAC/E,MAAM,SAAS,GAAG,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,wBAAS,CAAC,CAAC,CAAC,EAAE,mCAAiB,CAAC,CAAC;gBACjF,IAAI;oBACA,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;iBAC5E;gBAAC,OAAO,KAAK,EAAE;oBACZ,wDAAwD;oBACxD,aAAa,CAAC,OAAO,EAAE,CAAC;oBACxB,MAAM,KAAK,CAAC;iBACf;gBAED,MAAM,CAAC,IAAI,CAAC,WAAW,aAAa,CAAC,KAAK,EAAE,iBAAiB,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAC3F,gBAAgB,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC,mBAAmB;gBAEjE,oCAAoC;gBACpC,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;gBAEjC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;aACjD;iBAAM;gBACH,mBAAmB;gBACnB,MAAM,MAAM,GAAG,MAAM,CAAC,2BAA2B,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBAC7E,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,gCAAgC,EAAE,GAAG,MAAM,CAAC;gBACrG,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,kBAAM,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;gBAC5G,MAAM,UAAU,GAAG,wBAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvH,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,6BAAW,CAAC,CAAC;gBAC3E,MAAM,aAAa,GAAG,+BAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACjH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7C,MAAM,aAAa,GAAG,wCAAsB,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjH,MAAM,SAAS,GAAG,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,iCAAe,CAAC,CAAC;gBAC5E,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBAE3G,2BAA2B;gBAC3B,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;gBAC3F,MAAM,UAAU,GAAG,wBAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,kBAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC/G,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,6BAAW,CAAC,CAAC;gBAC3E,MAAM,iBAAiB,GAAG,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,iCAAe,CAAC,CAAC;gBACpF,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,wCAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC7J,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;gBAChE,MAAM,iBAAiB,GAAG,+BAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC9L,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,iDAAyB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACnI,kBAAM,CAAC,UAAU,CAAC,aAAa,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;gBAEnE,kCAAkC;gBAClC,MAAM,iBAAiB,GAAG,wBAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,kBAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBACnI,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,oBAAoB,EAAE,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,sBAAsB,CAAC,CAAC;gBACxN,MAAM,CAAC,IAAI,CAAC,WAAW,aAAa,CAAC,KAAK,EAAE,iBAAiB,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAC3F,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;gBAE9B,gBAAgB,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;gBAEtE,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;aACjD;QACL,CAAC;KAAA;CACJ;AA/FD,gCA+FC"}

package/dist/cjs/session/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./SecureSession.js";
+export * from "./SessionManager.js";
+export * from "./Session.js";
+export * from "./UnsecureSession.js";
+export * from "./pase/PaseClient.js";
+export * from "./pase/PaseMessages.js";
+export * from "./pase/PaseMessenger.js";
+export * from "./pase/PaseServer.js";
+export * from "./case/CaseClient.js";
+export * from "./case/CaseMessages.js";
+export * from "./case/CaseMessenger.js";
+export * from "./case/CaseServer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/dist/cjs/session/index.js

@@ -0,0 +1,37 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Export generic Session classes
+__exportStar(require("./SecureSession.js"), exports);
+__exportStar(require("./SessionManager.js"), exports);
+__exportStar(require("./Session.js"), exports);
+__exportStar(require("./UnsecureSession.js"), exports);
+// Export PaseSession classes
+__exportStar(require("./pase/PaseClient.js"), exports);
+__exportStar(require("./pase/PaseMessages.js"), exports);
+__exportStar(require("./pase/PaseMessenger.js"), exports);
+__exportStar(require("./pase/PaseServer.js"), exports);
+// Export CaseSession classes
+__exportStar(require("./case/CaseClient.js"), exports);
+__exportStar(require("./case/CaseMessages.js"), exports);
+__exportStar(require("./case/CaseMessenger.js"), exports);
+__exportStar(require("./case/CaseServer.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/session/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;AAEH,iCAAiC;AACjC,qDAAmC;AACnC,sDAAoC;AACpC,+CAA6B;AAC7B,uDAAqC;AAErC,6BAA6B;AAC7B,uDAAqC;AACrC,yDAAuC;AACvC,0DAAwC;AACxC,uDAAqC;AAErC,6BAA6B;AAC7B,uDAAqC;AACrC,yDAAuC;AACvC,0DAAwC;AACxC,uDAAqC"}

package/dist/cjs/session/pase/PaseClient.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { MatterController } from "../../MatterController.js";
+import { SecureSession } from "../SecureSession.js";
+export declare class PaseClient {
+    pair(client: MatterController, exchange: MessageExchange<MatterController>, setupPin: number): Promise<SecureSession<MatterController>>;
+}
+//# sourceMappingURL=PaseClient.d.ts.map

package/dist/cjs/session/pase/PaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,qBAAa,UAAU;IACb,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,MAAM;CA8BrG"}

package/dist/cjs/session/pase/PaseClient.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaseClient = void 0;
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const Spake2p_js_1 = require("../../crypto/Spake2p.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const SessionManager_js_1 = require("../SessionManager.js");
+const PaseMessenger_js_1 = require("./PaseMessenger.js");
+const logger = Logger_js_1.Logger.get("PaseClient");
+class PaseClient {
+    pair(client, exchange, setupPin) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new PaseMessenger_js_1.PaseClientMessenger(exchange);
+            const random = Crypto_js_1.Crypto.getRandom();
+            const sessionId = client.getNextAvailableSessionId();
+            // Send pbkdRequest and Read pbkdResponse
+            const requestPayload = yield messenger.sendPbkdfParamRequest({ random, sessionId, passcodeId: PaseMessenger_js_1.DEFAULT_PASSCODE_ID, hasPbkdfParameters: false });
+            const { responsePayload, response: { pbkdfParameters, sessionId: peerSessionId } } = yield messenger.readPbkdfParamResponse();
+            if (pbkdfParameters === undefined)
+                throw new Error("Missing requested PbkdfParameters in the response");
+            // Compute pake1 and read pake2
+            const { w0, w1 } = yield Spake2p_js_1.Spake2p.computeW0W1(pbkdfParameters, setupPin);
+            const spake2p = Spake2p_js_1.Spake2p.create(Crypto_js_1.Crypto.hash([PaseMessenger_js_1.SPAKE_CONTEXT, requestPayload, responsePayload]), w0);
+            const X = spake2p.computeX();
+            yield messenger.sendPasePake1({ x: X });
+            // Process pack2 and send pake3
+            const { y: Y, verifier } = yield messenger.readPasePake2();
+            const { Ke, hAY, hBX } = yield spake2p.computeSecretAndVerifiersFromY(w1, X, Y);
+            if (!verifier.equals(hBX))
+                throw new Error("Received incorrect key confirmation from the receiver");
+            yield messenger.sendPasePake3({ verifier: hAY });
+            // All good! Creating the secure session
+            yield messenger.waitForSuccess();
+            const secureSession = yield client.createSecureSession(sessionId, undefined, SessionManager_js_1.UNDEFINED_NODE_ID, peerSessionId, Ke, new ByteArray_js_1.ByteArray(0), true, false);
+            messenger.close();
+            logger.info(`Pase client: Paired successfully with ${messenger.getChannelName()}`);
+            return secureSession;
+        });
+    }
+}
+exports.PaseClient = PaseClient;
+//# sourceMappingURL=PaseClient.js.map

package/dist/cjs/session/pase/PaseClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseClient.js","sourceRoot":"","sources":["../../../../src/session/pase/PaseClient.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;AAEH,sDAAgD;AAChD,wDAAkD;AAClD,0DAAoD;AACpD,mDAA6C;AAG7C,4DAAyD;AACzD,yDAA6F;AAG7F,MAAM,MAAM,GAAG,kBAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAExC,MAAa,UAAU;IACb,IAAI,CAAC,MAAwB,EAAE,QAA2C,EAAE,QAAgB;;YAC9F,MAAM,SAAS,GAAG,IAAI,sCAAmB,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,kBAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC;YAErD,yCAAyC;YACzC,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,sCAAmB,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;YAChJ,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,sBAAsB,EAAE,CAAC;YAC9H,IAAI,eAAe,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAExG,+BAA+B;YAC/B,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,oBAAO,CAAC,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,oBAAO,CAAC,MAAM,CAAC,kBAAM,CAAC,IAAI,CAAC,CAAC,gCAAa,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAExC,+BAA+B;YAC/B,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC;YAC3D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,8BAA8B,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACpG,MAAM,SAAS,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAEjD,wCAAwC;YACxC,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,qCAAiB,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,wBAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAoC,CAAC;YACrL,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAEnF,OAAO,aAAa,CAAC;QACzB,CAAC;KAAA;CACJ;AA/BD,gCA+BC"}

package/dist/cjs/session/pase/PaseMessages.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPbkdfParamRequest: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    passcodeId: import("../../tlv/TlvObject.js").FieldType<number>;
+    hasPbkdfParameters: import("../../tlv/TlvObject.js").FieldType<boolean>;
+    mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPbkdfParamResponse: import("../../tlv/TlvObject.js").ObjectSchema<{
+    peerRandom: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    pbkdfParameters: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        iterations: import("../../tlv/TlvObject.js").FieldType<number>;
+        salt: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    }>>;
+    mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake1: import("../../tlv/TlvObject.js").ObjectSchema<{
+    x: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    y: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+export declare const TlvPasePake3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=PaseMessages.d.ts.map

package/dist/cjs/session/pase/PaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB;;;;;;QAR7B,wDAAwD;;QAGxD,0DAA0D;;;EAW5D,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB;;;;;;;;;QAjB9B,wDAAwD;;QAGxD,0DAA0D;;;EAuB5D,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;EAEvB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY;;EAEvB,CAAC"}

package/dist/cjs/session/pase/PaseMessages.js

@@ -0,0 +1,53 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TlvPasePake3 = exports.TlvPasePake2 = exports.TlvPasePake1 = exports.TlvPbkdfParamResponse = exports.TlvPbkdfParamRequest = void 0;
+const CryptoConstants_js_1 = require("../../crypto/CryptoConstants.js");
+const TlvBoolean_js_1 = require("../../tlv/TlvBoolean.js");
+const TlvNumber_js_1 = require("../../tlv/TlvNumber.js");
+const TlvObject_js_1 = require("../../tlv/TlvObject.js");
+const TlvString_js_1 = require("../../tlv/TlvString.js");
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = (0, TlvObject_js_1.TlvObject)({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(1, TlvNumber_js_1.TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(2, TlvNumber_js_1.TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPbkdfParamRequest = (0, TlvObject_js_1.TlvObject)({
+    random: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(2, TlvNumber_js_1.TlvUInt16),
+    passcodeId: (0, TlvObject_js_1.TlvField)(3, TlvNumber_js_1.TlvUInt16),
+    hasPbkdfParameters: (0, TlvObject_js_1.TlvField)(4, TlvBoolean_js_1.TlvBoolean),
+    mrpParameters: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPbkdfParamResponse = (0, TlvObject_js_1.TlvObject)({
+    peerRandom: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    random: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(3, TlvNumber_js_1.TlvUInt16),
+    pbkdfParameters: (0, TlvObject_js_1.TlvOptionalField)(4, (0, TlvObject_js_1.TlvObject)({
+        iterations: (0, TlvObject_js_1.TlvField)(1, TlvNumber_js_1.TlvUInt32),
+        salt: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ minLength: 16, maxLength: 32 })),
+    })),
+    mrpParameters: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPasePake1 = (0, TlvObject_js_1.TlvObject)({
+    x: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPasePake2 = (0, TlvObject_js_1.TlvObject)({
+    y: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    verifier: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_HASH_LEN_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.1.2 */
+exports.TlvPasePake3 = (0, TlvObject_js_1.TlvObject)({
+    verifier: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_HASH_LEN_BYTES })),
+});
+//# sourceMappingURL=PaseMessages.js.map

package/dist/cjs/session/pase/PaseMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessages.js","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessages.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,wEAAqG;AACrG,2DAAqD;AACrD,yDAA8D;AAC9D,yDAA+E;AAC/E,yDAAuD;AAGvD,wDAAwD;AACxD,MAAM,gBAAgB,GAAG,IAAA,wBAAS,EAAC;IAC/B,wDAAwD;IACxD,oBAAoB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,wBAAS,CAAC;IAEpD,0DAA0D;IAC1D,sBAAsB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,wBAAS,CAAC,EAAE,oBAAoB;CAC/E,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,oBAAoB,GAAG,IAAA,wBAAS,EAAC;IAC1C,MAAM,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;IACjC,UAAU,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;IAClC,kBAAkB,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,0BAAU,CAAC;IAC3C,aAAa,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,gBAAgB,CAAC;CACvD,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,qBAAqB,GAAG,IAAA,wBAAS,EAAC;IAC3C,UAAU,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;IACjC,eAAe,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,IAAA,wBAAS,EAAC;QAC3C,UAAU,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;QAClC,IAAI,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;KAC3E,CAAC,CAAC;IACH,aAAa,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,gBAAgB,CAAC;CACvD,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,YAAY,GAAG,IAAA,wBAAS,EAAC;IAClC,CAAC,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;CAChF,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,YAAY,GAAG,IAAA,wBAAS,EAAC;IAClC,CAAC,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;IAC7E,QAAQ,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,0CAAqB,EAAE,CAAC,CAAC;CAChF,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,YAAY,GAAG,IAAA,wBAAS,EAAC;IAClC,QAAQ,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,0CAAqB,EAAE,CAAC,CAAC;CAChF,CAAC,CAAC"}

package/dist/cjs/session/pase/PaseMessenger.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvPasePake1, TlvPasePake2, TlvPasePake3, TlvPbkdfParamRequest, TlvPbkdfParamResponse } from "./PaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare const DEFAULT_PASSCODE_ID = 0;
+export declare const SPAKE_CONTEXT: Uint8Array;
+type PbkdfParamRequest = TypeFromSchema<typeof TlvPbkdfParamRequest>;
+type PbkdfParamResponse = TypeFromSchema<typeof TlvPbkdfParamResponse>;
+type PasePake1 = TypeFromSchema<typeof TlvPasePake1>;
+type PasePake2 = TypeFromSchema<typeof TlvPasePake2>;
+type PasePake3 = TypeFromSchema<typeof TlvPasePake3>;
+export declare class PaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readPbkdfParamRequest(): Promise<{
+        requestPayload: Uint8Array;
+        request: import("../../tlv/TlvObject.js").TypeFromFields<{
+            random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+            passcodeId: import("../../tlv/TlvObject.js").FieldType<number>;
+            hasPbkdfParameters: import("../../tlv/TlvObject.js").FieldType<boolean>;
+            mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+                activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+            }>>;
+        }>;
+    }>;
+    sendPbkdfParamResponse(response: PbkdfParamResponse): Promise<Uint8Array>;
+    readPasePake1(): Promise<import("../../tlv/TlvObject.js").TypeFromFields<{
+        x: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    }>>;
+    sendPasePake2(pasePake2: PasePake2): Promise<Uint8Array>;
+    readPasePake3(): Promise<import("../../tlv/TlvObject.js").TypeFromFields<{
+        verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    }>>;
+}
+export declare class PaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendPbkdfParamRequest(request: PbkdfParamRequest): Promise<Uint8Array>;
+    readPbkdfParamResponse(): Promise<{
+        responsePayload: Uint8Array;
+        response: import("../../tlv/TlvObject.js").TypeFromFields<{
+            peerRandom: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+            pbkdfParameters: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                iterations: import("../../tlv/TlvObject.js").FieldType<number>;
+                salt: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            }>>;
+            mrpParameters: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+                activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+            }>>;
+        }>;
+    }>;
+    sendPasePake1(pasePake1: PasePake1): Promise<Uint8Array>;
+    readPasePake2(): Promise<import("../../tlv/TlvObject.js").TypeFromFields<{
+        y: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+        verifier: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    }>>;
+    sendPasePake3(pasePake3: PasePake3): Promise<Uint8Array>;
+}
+export {};
+//# sourceMappingURL=PaseMessenger.d.ts.map

package/dist/cjs/session/pase/PaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,aAAa,YAAqD,CAAC;AAEhF,KAAK,iBAAiB,GAAG,cAAc,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,KAAK,kBAAkB,GAAG,cAAc,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACvE,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AAErD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,qBAAqB;;;;;;;;;;;;;IAKrB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB;IAIzD,aAAa;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;CAGhB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,qBAAqB,CAAC,OAAO,EAAE,iBAAiB;IAI1C,sBAAsB;;;;;;;;;;;;;;;;IAK5B,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;CAGrC"}

package/dist/cjs/session/pase/PaseMessenger.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaseClientMessenger = exports.PaseServerMessenger = exports.SPAKE_CONTEXT = exports.DEFAULT_PASSCODE_ID = void 0;
+const PaseMessages_js_1 = require("./PaseMessages.js");
+const SecureChannelMessenger_js_1 = require("../../protocol/securechannel/SecureChannelMessenger.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+exports.DEFAULT_PASSCODE_ID = 0;
+exports.SPAKE_CONTEXT = ByteArray_js_1.ByteArray.fromString("CHIP PAKE V1 Commissioning");
+class PaseServerMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    readPbkdfParamRequest() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(32 /* MessageType.PbkdfParamRequest */);
+            return { requestPayload: payload, request: PaseMessages_js_1.TlvPbkdfParamRequest.decode(payload) };
+        });
+    }
+    sendPbkdfParamResponse(response) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.send(response, 33 /* MessageType.PbkdfParamResponse */, PaseMessages_js_1.TlvPbkdfParamResponse);
+        });
+    }
+    readPasePake1() {
+        return this.nextMessageDecoded(34 /* MessageType.PasePake1 */, PaseMessages_js_1.TlvPasePake1);
+    }
+    sendPasePake2(pasePake2) {
+        return this.send(pasePake2, 35 /* MessageType.PasePake2 */, PaseMessages_js_1.TlvPasePake2);
+    }
+    readPasePake3() {
+        return this.nextMessageDecoded(36 /* MessageType.PasePake3 */, PaseMessages_js_1.TlvPasePake3);
+    }
+}
+exports.PaseServerMessenger = PaseServerMessenger;
+class PaseClientMessenger extends SecureChannelMessenger_js_1.SecureChannelMessenger {
+    sendPbkdfParamRequest(request) {
+        return this.send(request, 32 /* MessageType.PbkdfParamRequest */, PaseMessages_js_1.TlvPbkdfParamRequest);
+    }
+    readPbkdfParamResponse() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { payload } = yield this.nextMessage(33 /* MessageType.PbkdfParamResponse */);
+            return { responsePayload: payload, response: PaseMessages_js_1.TlvPbkdfParamResponse.decode(payload) };
+        });
+    }
+    sendPasePake1(pasePake1) {
+        return this.send(pasePake1, 34 /* MessageType.PasePake1 */, PaseMessages_js_1.TlvPasePake1);
+    }
+    readPasePake2() {
+        return this.nextMessageDecoded(35 /* MessageType.PasePake2 */, PaseMessages_js_1.TlvPasePake2);
+    }
+    sendPasePake3(pasePake3) {
+        return this.send(pasePake3, 36 /* MessageType.PasePake3 */, PaseMessages_js_1.TlvPasePake3);
+    }
+}
+exports.PaseClientMessenger = PaseClientMessenger;
+//# sourceMappingURL=PaseMessenger.js.map

package/dist/cjs/session/pase/PaseMessenger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessenger.js","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessenger.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;AAIH,uDAA0H;AAC1H,sGAAgG;AAChG,0DAAoD;AAIvC,QAAA,mBAAmB,GAAG,CAAC,CAAC;AACxB,QAAA,aAAa,GAAG,wBAAS,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;AAQhF,MAAa,mBAAoB,SAAQ,kDAAoC;IACnE,qBAAqB;;YACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,wCAA+B,CAAC;YAC1E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,sCAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtF,CAAC;KAAA;IAEK,sBAAsB,CAAC,QAA4B;;YACrD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,2CAAkC,uCAAqB,CAAC,CAAC;QACtF,CAAC;KAAA;IAED,aAAa;QACT,OAAO,IAAI,CAAC,kBAAkB,iCAAwB,8BAAY,CAAC,CAAC;IACxE,CAAC;IAED,aAAa,CAAC,SAAoB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,kCAAyB,8BAAY,CAAC,CAAC;IACrE,CAAC;IAED,aAAa;QACT,OAAO,IAAI,CAAC,kBAAkB,iCAAwB,8BAAY,CAAC,CAAC;IACxE,CAAC;CACJ;AArBD,kDAqBC;AAED,MAAa,mBAAoB,SAAQ,kDAAwC;IAC7E,qBAAqB,CAAC,OAA0B;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,0CAAiC,sCAAoB,CAAC,CAAC;IACnF,CAAC;IAEK,sBAAsB;;YACxB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,yCAAgC,CAAC;YAC3E,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,uCAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzF,CAAC;KAAA;IAED,aAAa,CAAC,SAAoB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,kCAAyB,8BAAY,CAAC,CAAC;IACrE,CAAC;IAED,aAAa;QACT,OAAO,IAAI,CAAC,kBAAkB,iCAAwB,8BAAY,CAAC,CAAC;IACxE,CAAC;IAED,aAAa,CAAC,SAAoB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,kCAAyB,8BAAY,CAAC,CAAC;IACrE,CAAC;CACJ;AArBD,kDAqBC"}