@project-chip/matter.js 0.2.1 → 0.4.0

package/dist/es/session/SessionManager.js

@@ -0,0 +1,108 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Crypto } from "../crypto/Crypto.js";
+import { NodeId } from "../datatype/NodeId.js";
+import { SecureSession } from "./SecureSession.js";
+import { UnsecureSession } from "./UnsecureSession.js";
+export const UNDEFINED_NODE_ID = new NodeId(BigInt(0));
+export const UNICAST_UNSECURE_SESSION_ID = 0x0000;
+export class SessionManager {
+    constructor(context, storageManager) {
+        this.context = context;
+        this.sessions = new Map();
+        this.nextSessionId = Crypto.getRandomUInt16();
+        this.resumptionRecords = new Map();
+        this.sessionStorage = storageManager.createContext("SessionManager");
+        this.unsecureSession = new UnsecureSession(context);
+        this.sessions.set(UNICAST_UNSECURE_SESSION_ID, this.unsecureSession);
+    }
+    createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, salt, isInitiator, isResumption, idleRetransTimeoutMs, activeRetransTimeoutMs) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const session = yield SecureSession.create(this.context, sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, salt, isInitiator, isResumption, () => this.removeSession(sessionId, peerNodeId), idleRetransTimeoutMs, activeRetransTimeoutMs);
+            this.sessions.set(sessionId, session);
+            // TODO: close previous secure channel for
+            return session;
+        });
+    }
+    removeSession(sessionId, peerNodeId) {
+        this.sessions.delete(sessionId);
+        this.resumptionRecords.delete(peerNodeId.id);
+        this.storeResumptionRecords();
+    }
+    getNextAvailableSessionId() {
+        while (true) {
+            if (this.sessions.has(this.nextSessionId)) {
+                this.nextSessionId = (this.nextSessionId + 1) & 0xFFFF;
+                if (this.nextSessionId === 0)
+                    this.nextSessionId++;
+                continue;
+            }
+            return this.nextSessionId++;
+        }
+    }
+    getSession(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    getSessionForNode(fabric, nodeId) {
+        //TODO: It can have multiple sessions for one node ...
+        return [...this.sessions.values()].find(session => {
+            var _a;
+            if (!session.isSecure())
+                return false;
+            const secureSession = session;
+            return ((_a = secureSession.getFabric()) === null || _a === void 0 ? void 0 : _a.fabricId.id) === fabric.fabricId.id && secureSession.getPeerNodeId().id === nodeId.id;
+        });
+    }
+    getUnsecureSession() {
+        return this.unsecureSession;
+    }
+    findResumptionRecordById(resumptionId) {
+        return [...this.resumptionRecords.values()].find(record => record.resumptionId.equals(resumptionId));
+    }
+    findResumptionRecordByNodeId(nodeId) {
+        return this.resumptionRecords.get(nodeId.id);
+    }
+    saveResumptionRecord(resumptionRecord) {
+        this.resumptionRecords.set(resumptionRecord.peerNodeId.id, resumptionRecord);
+        this.storeResumptionRecords();
+    }
+    storeResumptionRecords() {
+        this.sessionStorage.set("resumptionRecords", [...this.resumptionRecords].map(([nodeId, { sharedSecret, resumptionId, peerNodeId, fabric }]) => ({
+            nodeId,
+            sharedSecret,
+            resumptionId,
+            fabricId: fabric.fabricId.id,
+            peerNodeId: peerNodeId.id,
+        })));
+    }
+    initFromStorage(fabrics) {
+        const storedResumptionRecords = this.sessionStorage.get("resumptionRecords", []);
+        storedResumptionRecords.forEach(({ nodeId, sharedSecret, resumptionId, fabricId, peerNodeId }) => {
+            console.log("restoring resumption record for node", nodeId);
+            const fabric = fabrics.find(fabric => fabric.fabricId.id === fabricId);
+            if (!fabric) {
+                console.log("fabric not found for resumption record", fabricId);
+                return;
+            }
+            this.resumptionRecords.set(nodeId, {
+                sharedSecret,
+                resumptionId,
+                fabric,
+                peerNodeId: new NodeId(peerNodeId),
+            });
+        });
+    }
+}
+//# sourceMappingURL=SessionManager.js.map

package/dist/es/session/SessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionManager.js","sourceRoot":"","sources":["../../../src/session/SessionManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAK/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAiBlD,MAAM,OAAO,cAAc;IAOvB,YACqB,OAAiB,EAClC,cAA8B;QADb,YAAO,GAAP,OAAO,CAAU;QANrB,aAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;QACzD,kBAAa,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACzC,sBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAO5D,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAA;QACpE,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAEK,mBAAmB,CAAC,SAAiB,EAAE,MAA0B,EAAE,UAAkB,EAAE,aAAqB,EAAE,YAAuB,EAAE,IAAe,EAAE,WAAoB,EAAE,YAAqB,EAAE,oBAA6B,EAAE,sBAA+B;;YACrQ,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;YACrP,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAEtC,0CAA0C;YAC1C,OAAO,OAAO,CAAC;QACnB,CAAC;KAAA;IAED,aAAa,CAAC,SAAiB,EAAE,UAAkB;QAC/C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,yBAAyB;QACrB,OAAO,IAAI,EAAE;YACT,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;gBACvC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;gBACvD,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;oBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnD,SAAS;aACZ;YACD,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;SAC/B;IACL,CAAC;IAED,UAAU,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,MAAc;QAC5C,sDAAsD;QACtD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;;YAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAAE,OAAO,KAAK,CAAC;YACtC,MAAM,aAAa,GAAG,OAA6B,CAAC;YACpD,OAAO,CAAA,MAAA,aAAa,CAAC,SAAS,EAAE,0CAAE,QAAQ,CAAC,EAAE,MAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QAC3H,CAAC,CAAC,CAAC;IACP,CAAC;IAED,kBAAkB;QACd,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;IAED,wBAAwB,CAAC,YAAuB;QAC5C,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,4BAA4B,CAAC,MAAc;QACvC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,oBAAoB,CAAC,gBAAkC;QACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC7E,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,sBAAsB;QAClB,IAAI,CAAC,cAAc,CAAC,GAAG,CAA4B,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvK,MAAM;YACN,YAAY;YACZ,YAAY;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;YAC5B,UAAU,EAAE,UAAU,CAAC,EAAE;SAC5B,CAAC,CAAC,CAAC,CAAC;IACT,CAAC;IAED,eAAe,CAAC,OAAiB;QAC7B,MAAM,uBAAuB,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAA4B,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAE5G,uBAAuB,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC7F,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,EAAE;gBACT,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE,QAAQ,CAAC,CAAC;gBAChE,OAAO;aACV;YACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE;gBAC/B,YAAY;gBACZ,YAAY;gBACZ,MAAM;gBACN,UAAU,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC;aACrC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/es/session/UnsecureSession.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Packet, Message } from "../codec/MessageCodec.js";
+import { Fabric } from "../fabric/Fabric.js";
+import { Session } from "./Session.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+export declare class UnsecureSession<T> implements Session<T> {
+    private readonly context;
+    private readonly initiatorNodeId;
+    constructor(context: T);
+    isSecure(): boolean;
+    notifyActivity(_messageReceived: boolean): void;
+    isPeerActive(): boolean;
+    decode(packet: Packet): Message;
+    encode(message: Message): Packet;
+    getAttestationChallengeKey(): ByteArray;
+    setFabric(_fabric: Fabric): void;
+    getName(): string;
+    getMrpParameters(): {
+        idleRetransmissionTimeoutMs: number;
+        activeRetransmissionTimeoutMs: number;
+        retransmissionRetries: number;
+    };
+    getContext(): T;
+    getId(): number;
+    getPeerSessionId(): number;
+    getNodeId(): NodeId;
+    getPeerNodeId(): undefined;
+    destroy(): void;
+}
+//# sourceMappingURL=UnsecureSession.d.ts.map

package/dist/es/session/UnsecureSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnsecureSession.d.ts","sourceRoot":"","sources":["../../../src/session/UnsecureSession.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAgB,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAoH,OAAO,EAAE,MAAM,cAAc,CAAC;AAEzJ,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,qBAAa,eAAe,CAAC,CAAC,CAAE,YAAW,OAAO,CAAC,CAAC,CAAC;IAI7C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH5B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuC;gBAGlD,OAAO,EAAE,CAAC;IAG/B,QAAQ,IAAI,OAAO;IAInB,cAAc,CAAC,gBAAgB,EAAE,OAAO;IAIxC,YAAY,IAAI,OAAO;IAIvB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI/B,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAIhC,0BAA0B,IAAI,SAAS;IAIvC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhC,OAAO;IAIP,gBAAgB;;;;;IAQhB,UAAU;IAIV,KAAK,IAAI,MAAM;IAIf,gBAAgB,IAAI,MAAM;IAI1B,SAAS;IAIT,aAAa;IAIb,OAAO;CAGV"}

package/dist/es/session/UnsecureSession.js

@@ -0,0 +1,65 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MessageCodec } from "../codec/MessageCodec.js";
+import { DEFAULT_ACTIVE_RETRANSMISSION_TIMEOUT_MS, DEFAULT_IDLE_RETRANSMISSION_TIMEOUT_MS, DEFAULT_RETRANSMISSION_RETRIES } from "./Session.js";
+import { UNICAST_UNSECURE_SESSION_ID } from "./SessionManager.js";
+import { NodeId } from "../datatype/NodeId.js";
+export class UnsecureSession {
+    constructor(context) {
+        this.context = context;
+        this.initiatorNodeId = NodeId.getRandomOperationalNodeId();
+    }
+    isSecure() {
+        return false;
+    }
+    notifyActivity(_messageReceived) {
+        // Do nothing
+    }
+    isPeerActive() {
+        return true;
+    }
+    decode(packet) {
+        return MessageCodec.decodePayload(packet);
+    }
+    encode(message) {
+        return MessageCodec.encodePayload(message);
+    }
+    getAttestationChallengeKey() {
+        throw new Error("Not supported on an unsecure session");
+    }
+    setFabric(_fabric) {
+        throw new Error("Not supported on an unsecure session");
+    }
+    getName() {
+        return "unsecure";
+    }
+    getMrpParameters() {
+        return {
+            idleRetransmissionTimeoutMs: DEFAULT_IDLE_RETRANSMISSION_TIMEOUT_MS,
+            activeRetransmissionTimeoutMs: DEFAULT_ACTIVE_RETRANSMISSION_TIMEOUT_MS,
+            retransmissionRetries: DEFAULT_RETRANSMISSION_RETRIES,
+        };
+    }
+    getContext() {
+        return this.context;
+    }
+    getId() {
+        return UNICAST_UNSECURE_SESSION_ID;
+    }
+    getPeerSessionId() {
+        return UNICAST_UNSECURE_SESSION_ID;
+    }
+    getNodeId() {
+        return this.initiatorNodeId;
+    }
+    getPeerNodeId() {
+        return undefined;
+    }
+    destroy() {
+        throw new Error("The unsecure session should never be destroyed.");
+    }
+}
+//# sourceMappingURL=UnsecureSession.js.map

package/dist/es/session/UnsecureSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnsecureSession.js","sourceRoot":"","sources":["../../../src/session/UnsecureSession.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmB,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,8BAA8B,EAAW,MAAM,cAAc,CAAC;AACzJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,OAAO,eAAe;IAGxB,YACqB,OAAU;QAAV,YAAO,GAAP,OAAO,CAAG;QAHd,oBAAe,GAAG,MAAM,CAAC,0BAA0B,EAAE,CAAC;IAInE,CAAC;IAEL,QAAQ;QACJ,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,cAAc,CAAC,gBAAyB;QACpC,aAAa;IACjB,CAAC;IAED,YAAY;QACR,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,MAAc;QACjB,OAAO,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,OAAgB;QACnB,OAAO,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,0BAA0B;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IAED,SAAS,CAAC,OAAe;QACrB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,gBAAgB;QACZ,OAAO;YACH,2BAA2B,EAAE,sCAAsC;YACnE,6BAA6B,EAAE,wCAAwC;YACvE,qBAAqB,EAAE,8BAA8B;SACxD,CAAA;IACL,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK;QACD,OAAO,2BAA2B,CAAC;IACvC,CAAC;IAED,gBAAgB;QACZ,OAAO,2BAA2B,CAAC;IACvC,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;IAED,aAAa;QACT,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;CACJ"}

package/dist/es/session/case/CaseClient.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Fabric } from "../../fabric/Fabric.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { MatterController } from "../../MatterController.js";
+import { NodeId } from "../../datatype/NodeId.js";
+export declare class CaseClient {
+    pair(client: MatterController, exchange: MessageExchange<MatterController>, fabric: Fabric, peerNodeId: NodeId): Promise<any>;
+}
+//# sourceMappingURL=CaseClient.d.ts.map

package/dist/es/session/case/CaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAQ7D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAIlD,qBAAa,UAAU;IACb,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CA0EvH"}

package/dist/es/session/case/CaseClient.js

@@ -0,0 +1,94 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { TlvOperationalCertificate } from "../../certificate/CertificateManager.js";
+import { Crypto } from "../../crypto/Crypto.js";
+import { KDFSR1_KEY_INFO, KDFSR2_INFO, KDFSR2_KEY_INFO, KDFSR3_INFO, RESUME1_MIC_NONCE, RESUME2_MIC_NONCE, TlvEncryptedDataSigma2, TlvSignedData, TBE_DATA2_NONCE, TBE_DATA3_NONCE, TlvEncryptedDataSigma3 } from "./CaseMessages.js";
+import { CaseClientMessenger } from "./CaseMessenger.js";
+import { ByteArray } from "../../util/ByteArray.js";
+import { Logger } from "../../log/Logger.js";
+const logger = Logger.get("CaseClient");
+export class CaseClient {
+    pair(client, exchange, fabric, peerNodeId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new CaseClientMessenger(exchange);
+            // Generate pairing info
+            const random = Crypto.getRandom();
+            const sessionId = client.getNextAvailableSessionId();
+            const { operationalIdentityProtectionKey, operationalCert: nodeOpCert, intermediateCACert } = fabric;
+            const { publicKey: ecdhPublicKey, ecdh } = Crypto.ecdhGeneratePublicKey();
+            // Send sigma1
+            let sigma1Bytes;
+            let resumptionRecord = client.findResumptionRecordByNodeId(peerNodeId);
+            if (resumptionRecord !== undefined) {
+                const { sharedSecret, resumptionId } = resumptionRecord;
+                const resumeKey = yield Crypto.hkdf(sharedSecret, ByteArray.concat(random, resumptionId), KDFSR1_KEY_INFO);
+                const resumeMic = Crypto.encrypt(resumeKey, new ByteArray(0), RESUME1_MIC_NONCE);
+                sigma1Bytes = yield messenger.sendSigma1({ sessionId, destinationId: fabric.getDestinationId(peerNodeId, random), ecdhPublicKey, random, resumptionId, resumeMic });
+            }
+            else {
+                sigma1Bytes = yield messenger.sendSigma1({ sessionId, destinationId: fabric.getDestinationId(peerNodeId, random), ecdhPublicKey, random });
+            }
+            let secureSession;
+            const { sigma2Bytes, sigma2, sigma2Resume } = yield messenger.readSigma2();
+            if (sigma2Resume !== undefined) {
+                // Process sigma2 resume
+                if (resumptionRecord === undefined)
+                    throw new Error("Received an unexpected sigma2Resume");
+                const { sharedSecret, fabric } = resumptionRecord;
+                const { sessionId: peerSessionId, resumptionId, resumeMic } = sigma2Resume;
+                const resumeSalt = ByteArray.concat(random, resumptionId);
+                const resumeKey = yield Crypto.hkdf(sharedSecret, resumeSalt, KDFSR2_KEY_INFO);
+                Crypto.decrypt(resumeKey, resumeMic, RESUME2_MIC_NONCE);
+                const secureSessionSalt = ByteArray.concat(random, resumptionRecord.resumptionId);
+                secureSession = yield client.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, true, true);
+                yield messenger.sendSuccess();
+                logger.info(`Case client: session resumed with ${messenger.getChannelName()}`);
+                resumptionRecord.resumptionId = resumptionId; /* update resumptionId */
+            }
+            else {
+                // Process sigma2
+                const { ecdhPublicKey: peerEcdhPublicKey, encrypted: peerEncrypted, random: peerRandom, sessionId: peerSessionId } = sigma2;
+                const sharedSecret = Crypto.ecdhGenerateSecret(peerEcdhPublicKey, ecdh);
+                const sigma2Salt = ByteArray.concat(operationalIdentityProtectionKey, peerRandom, peerEcdhPublicKey, Crypto.hash(sigma1Bytes));
+                const sigma2Key = yield Crypto.hkdf(sharedSecret, sigma2Salt, KDFSR2_INFO);
+                const peerEncryptedData = Crypto.decrypt(sigma2Key, peerEncrypted, TBE_DATA2_NONCE);
+                const { nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, signature: peerSignature, resumptionId: peerResumptionId } = TlvEncryptedDataSigma2.decode(peerEncryptedData);
+                const peerSignatureData = TlvSignedData.encode({ nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, ecdhPublicKey: peerEcdhPublicKey, peerEcdhPublicKey: ecdhPublicKey });
+                const { ellipticCurvePublicKey: peerPublicKey, subject: { nodeId: peerNodeIdCert } } = TlvOperationalCertificate.decode(peerNewOpCert);
+                if (peerNodeIdCert.id !== peerNodeId.id)
+                    throw new Error("The node ID in the peer certificate doesn't match the expected peer node ID");
+                Crypto.verifySpki(peerPublicKey, peerSignatureData, peerSignature);
+                // Generate and send sigma3
+                const sigma3Salt = ByteArray.concat(operationalIdentityProtectionKey, Crypto.hash([sigma1Bytes, sigma2Bytes]));
+                const sigma3Key = yield Crypto.hkdf(sharedSecret, sigma3Salt, KDFSR3_INFO);
+                const signatureData = TlvSignedData.encode({ nodeOpCert, intermediateCACert, ecdhPublicKey, peerEcdhPublicKey });
+                const signature = fabric.sign(signatureData);
+                const encryptedData = TlvEncryptedDataSigma3.encode({ nodeOpCert, intermediateCACert, signature });
+                const encrypted = Crypto.encrypt(sigma3Key, encryptedData, TBE_DATA3_NONCE);
+                const sigma3Bytes = yield messenger.sendSigma3({ encrypted });
+                yield messenger.waitForSuccess();
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray.concat(operationalIdentityProtectionKey, Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes]));
+                secureSession = yield client.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, true, false);
+                logger.info(`Case client: Paired succesfully with ${messenger.getChannelName()}`);
+                resumptionRecord = { fabric, peerNodeId, sharedSecret, resumptionId: peerResumptionId };
+            }
+            messenger.close();
+            client.saveResumptionRecord(resumptionRecord);
+            return secureSession;
+        });
+    }
+}
+//# sourceMappingURL=CaseClient.js.map

package/dist/es/session/case/CaseClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseClient.js","sourceRoot":"","sources":["../../../../src/session/case/CaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAIhD,OAAO,EACH,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAChG,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,EAClG,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAG7C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAExC,MAAM,OAAO,UAAU;IACb,IAAI,CAAC,MAAwB,EAAE,QAA2C,EAAE,MAAc,EAAE,UAAkB;;YAChH,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAEpD,wBAAwB;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrD,MAAM,EAAE,gCAAgC,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;YACrG,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAE1E,cAAc;YACd,IAAI,WAAW,CAAC;YAChB,IAAI,gBAAgB,GAAG,MAAM,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,gBAAgB,KAAK,SAAS,EAAE;gBAChC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC;gBACxD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,eAAe,CAAC,CAAC;gBAC3G,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBACjF,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;aACvK;iBAAM;gBACH,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;aAC9I;YAED,IAAI,aAAa,CAAC;YAClB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;YAC3E,IAAI,YAAY,KAAK,SAAS,EAAE;gBAC5B,wBAAwB;gBACxB,IAAI,gBAAgB,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBAC3F,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;gBAClD,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;gBAE3E,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBAC1D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;gBAC/E,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBAExD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAClF,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5I,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,qCAAqC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAE/E,gBAAgB,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC,yBAAyB;aAC1E;iBAAM;gBACH,iBAAiB;gBACjB,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;gBAC5H,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACxE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC/H,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;gBAC3E,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;gBACpF,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,sBAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC7L,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC9L,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,GAAG,yBAAyB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACvI,IAAI,cAAc,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;gBACxI,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;gBAEnE,2BAA2B;gBAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC/G,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;gBAC3E,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACjH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7C,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnG,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;gBAC5E,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9D,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;gBAEjC,kCAAkC;gBAClC,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBACnI,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7I,MAAM,CAAC,IAAI,CAAC,wCAAwC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAClF,gBAAgB,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;aAC3F;YAED,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAE9C,OAAO,aAAa,CAAC;QACzB,CAAC;KAAA;CACJ"}

package/dist/es/session/case/CaseMessages.d.ts

@@ -0,0 +1,67 @@
+export declare const KDFSR1_KEY_INFO: Uint8Array;
+export declare const KDFSR2_KEY_INFO: Uint8Array;
+export declare const RESUME1_MIC_NONCE: Uint8Array;
+export declare const RESUME2_MIC_NONCE: Uint8Array;
+export declare const KDFSR2_INFO: Uint8Array;
+export declare const KDFSR3_INFO: Uint8Array;
+export declare const TBE_DATA2_NONCE: Uint8Array;
+export declare const TBE_DATA3_NONCE: Uint8Array;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma1: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    destinationId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+    }>>;
+    resumptionId: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    resumeMic: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma2Resume: import("../../tlv/TlvObject.js").ObjectSchema<{
+    resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    resumeMic: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvSignedData: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    peerEcdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvEncryptedDataSigma2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    signature: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvEncryptedDataSigma3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    signature: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=CaseMessages.d.ts.map

package/dist/es/session/case/CaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessages.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,iBAAiB,YAAwC,CAAC;AACvE,eAAO,MAAM,iBAAiB,YAAwC,CAAC;AACvE,eAAO,MAAM,WAAW,YAAiC,CAAC;AAC1D,eAAO,MAAM,WAAW,YAAiC,CAAC;AAC1D,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,eAAe,YAAwC,CAAC;AAWrE,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;;QARtB,wDAAwD;;QAGxD,0DAA0D;;;;;EAa5D,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;;QAnBtB,wDAAwD;;QAGxD,0DAA0D;;;EAsB5D,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;EAExB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;EAKxB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;;EAKjC,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;EAIjC,CAAC"}

package/dist/es/session/case/CaseMessages.js

@@ -0,0 +1,76 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CRYPTO_AEAD_MIC_LENGTH_BYTES, CRYPTO_GROUP_SIZE_BYTES, CRYPTO_HASH_LEN_BYTES, CRYPTO_PUBLIC_KEY_SIZE_BYTES } from "../../crypto/CryptoConstants.js";
+import { TlvUInt16, TlvUInt32 } from "../../tlv/TlvNumber.js";
+import { TlvField, TlvObject, TlvOptionalField } from "../../tlv/TlvObject.js";
+import { TlvByteString } from "../../tlv/TlvString.js";
+import { ByteArray } from "../../util/ByteArray.js";
+const CASE_SIGNATURE_LENGTH = CRYPTO_GROUP_SIZE_BYTES * 2;
+const CASE2_ENCRYPTED_LENGTH = 800 + CRYPTO_AEAD_MIC_LENGTH_BYTES + CASE_SIGNATURE_LENGTH; // NOC + ICAC + CASE-Sig + Mic
+export const KDFSR1_KEY_INFO = ByteArray.fromString("Sigma1_Resume");
+export const KDFSR2_KEY_INFO = ByteArray.fromString("Sigma2_Resume");
+export const RESUME1_MIC_NONCE = ByteArray.fromString("NCASE_SigmaS1");
+export const RESUME2_MIC_NONCE = ByteArray.fromString("NCASE_SigmaS2");
+export const KDFSR2_INFO = ByteArray.fromString("Sigma2");
+export const KDFSR3_INFO = ByteArray.fromString("Sigma3");
+export const TBE_DATA2_NONCE = ByteArray.fromString("NCASE_Sigma2N");
+export const TBE_DATA3_NONCE = ByteArray.fromString("NCASE_Sigma3N");
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = TlvObject({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: TlvOptionalField(1, TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: TlvOptionalField(2, TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma1 = TlvObject({
+    random: TlvField(1, TlvByteString.bound({ length: 32 })),
+    sessionId: TlvField(2, TlvUInt16),
+    destinationId: TlvField(3, TlvByteString.bound({ length: CRYPTO_HASH_LEN_BYTES })),
+    ecdhPublicKey: TlvField(4, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    mrpParams: TlvOptionalField(5, TlvSedParameters),
+    resumptionId: TlvOptionalField(6, TlvByteString.bound({ length: 16 })),
+    resumeMic: TlvOptionalField(7, TlvByteString.bound({ length: CRYPTO_AEAD_MIC_LENGTH_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma2 = TlvObject({
+    random: TlvField(1, TlvByteString.bound({ length: 32 })),
+    sessionId: TlvField(2, TlvUInt16),
+    ecdhPublicKey: TlvField(3, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    encrypted: TlvField(4, TlvByteString.bound({ maxLength: CASE2_ENCRYPTED_LENGTH })),
+    mrpParams: TlvOptionalField(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma2Resume = TlvObject({
+    resumptionId: TlvField(1, TlvByteString.bound({ length: 16 })),
+    resumeMic: TlvField(2, TlvByteString.bound({ length: 16 })),
+    sessionId: TlvField(3, TlvUInt16),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvCaseSigma3 = TlvObject({
+    encrypted: TlvField(1, TlvByteString),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvSignedData = TlvObject({
+    nodeOpCert: TlvField(1, TlvByteString),
+    intermediateCACert: TlvOptionalField(2, TlvByteString),
+    ecdhPublicKey: TlvField(3, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    peerEcdhPublicKey: TlvField(4, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvEncryptedDataSigma2 = TlvObject({
+    nodeOpCert: TlvField(1, TlvByteString),
+    intermediateCACert: TlvOptionalField(2, TlvByteString),
+    signature: TlvField(3, TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+    resumptionId: TlvField(4, TlvByteString.bound({ length: 16 })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export const TlvEncryptedDataSigma3 = TlvObject({
+    nodeOpCert: TlvField(1, TlvByteString),
+    intermediateCACert: TlvOptionalField(2, TlvByteString),
+    signature: TlvField(3, TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+});
+//# sourceMappingURL=CaseMessages.js.map

package/dist/es/session/case/CaseMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessages.js","sourceRoot":"","sources":["../../../../src/session/case/CaseMessages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC7J,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,MAAM,qBAAqB,GAAG,uBAAuB,GAAG,CAAC,CAAC;AAE1D,MAAM,sBAAsB,GAAG,GAAG,GAAG,4BAA4B,GAAG,qBAAqB,CAAC,CAAC,8BAA8B;AAEzH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAErE,wDAAwD;AACxD,MAAM,gBAAgB,GAAG,SAAS,CAAC;IAC/B,wDAAwD;IACxD,oBAAoB,EAAE,gBAAgB,CAAC,CAAC,EAAE,SAAS,CAAC;IAEpD,0DAA0D;IAC1D,sBAAsB,EAAE,gBAAgB,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,oBAAoB;CAC/E,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;IACnC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACjC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClF,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IACzF,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAE,gBAAgB,CAAC;IAChD,YAAY,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;CAChG,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;IACnC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACjC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IACzF,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAClF,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAE,gBAAgB,CAAC;CACnD,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;IACzC,YAAY,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;CACpC,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;IACnC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;CACxC,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;IACnC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC;IACtD,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IACzF,iBAAiB,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;CAChG,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC;IACtD,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC9E,YAAY,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;CACjE,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC;IACtD,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;CACjF,CAAC,CAAC"}

package/dist/es/session/case/CaseMessenger.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvCaseSigma1, TlvCaseSigma2Resume, TlvCaseSigma2, TlvCaseSigma3 } from "./CaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare class CaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readSigma1(): Promise<{
+        sigma1Bytes: Uint8Array;
+        sigma1: import("../../tlv/TlvObject.js").TypeFromFields<{
+            random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+            destinationId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+                activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+            }>>;
+            resumptionId: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+            resumeMic: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+        }>;
+    }>;
+    sendSigma2(sigma2: TypeFromSchema<typeof TlvCaseSigma2>): Promise<Uint8Array>;
+    sendSigma2Resume(sigma2Resume: TypeFromSchema<typeof TlvCaseSigma2Resume>): Promise<Uint8Array>;
+    readSigma3(): Promise<{
+        sigma3Bytes: Uint8Array;
+        sigma3: import("../../tlv/TlvObject.js").TypeFromFields<{
+            encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+        }>;
+    }>;
+}
+export declare class CaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendSigma1(sigma1: TypeFromSchema<typeof TlvCaseSigma1>): Promise<Uint8Array>;
+    readSigma2(): Promise<{
+        sigma2Bytes: Uint8Array;
+        sigma2: import("../../tlv/TlvObject.js").TypeFromFields<{
+            random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+            ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+                activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+            }>>;
+        }>;
+        sigma2Resume?: undefined;
+    } | {
+        sigma2Resume: import("../../tlv/TlvObject.js").TypeFromFields<{
+            resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            resumeMic: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+        }>;
+        sigma2Bytes?: undefined;
+        sigma2?: undefined;
+    }>;
+    sendSigma3(sigma3: TypeFromSchema<typeof TlvCaseSigma3>): Promise<Uint8Array>;
+}
+//# sourceMappingURL=CaseMessenger.d.ts.map

package/dist/es/session/case/CaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,UAAU;;;;;;;;;;;;;;;IAKhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIvD,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC,OAAO,mBAAmB,CAAC;IAInE,UAAU;;;;;;CAInB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIjD,UAAU;;;;;;;;;;;;;;;;;;;;;;IAYhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;CAG1D"}