edhoc 1.0.1 → 1.0.3

package/external/libedhoc/library/edhoc_message_error.c

@@ -0,0 +1,238 @@
+/**
+ * \file    edhoc_message_error.c
+ * \author  Kamil Kielbasa
+ * \brief   EDHOC message error.
+ * \version 0.4
+ * \date    2024-01-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Include files ----------------------------------------------------------- */
+
+/* EDHOC header: */
+#define EDHOC_ALLOW_PRIVATE_ACCESS
+#include "edhoc.h"
+
+/* Standard library headers: */
+#include <stdint.h>
+#include <stddef.h>
+#include <string.h>
+#include <stdbool.h>
+
+#ifdef __clang__
+#pragma clang diagnostic push
+#pragma clang diagnostic ignored "-Wshadow"
+#pragma clang diagnostic ignored "-Wreserved-identifier"
+#pragma clang diagnostic ignored "-Wpadded"
+#pragma clang diagnostic ignored "-Wdocumentation"
+#endif
+
+/* CBOR headers: */
+#include <backend_cbor_message_error_encode.h>
+#include <backend_cbor_message_error_decode.h>
+
+#ifdef __clang__
+#pragma clang diagnostic pop
+#endif
+
+/* Module defines ---------------------------------------------------------- */
+/* Module types and type definitiones -------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Static variables and constants ------------------------------------------ */
+/* Static function declarations -------------------------------------------- */
+/* Static function definitions --------------------------------------------- */
+/* Module interface function definitions ----------------------------------- */
+
+int edhoc_message_error_compose(uint8_t *msg_err, size_t msg_err_size,
+				size_t *msg_err_len, enum edhoc_error_code code,
+				const struct edhoc_error_info *info)
+{
+	if (NULL == msg_err || 0 == msg_err_size || NULL == msg_err_len)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	if (EDHOC_ERROR_CODE_SUCCESS > code ||
+	    EDHOC_ERROR_CODE_UNKNOWN_CREDENTIAL_REFERENCED < code)
+		return EDHOC_ERROR_BAD_STATE;
+
+	int ret = EDHOC_ERROR_GENERIC_ERROR;
+	struct message_error input = { ._message_error_ERR_CODE =
+					       (int32_t)code };
+
+	switch (code) {
+	case EDHOC_ERROR_CODE_SUCCESS: {
+		input._message_error_ERR_INFO_present = false;
+		break;
+	}
+
+	case EDHOC_ERROR_CODE_UNSPECIFIED_ERROR: {
+		if (NULL == info || NULL == info->text_string ||
+		    0 == info->total_entries || 0 == info->written_entries)
+			return EDHOC_ERROR_INVALID_ARGUMENT;
+
+		if (info->written_entries > info->total_entries)
+			return EDHOC_ERROR_INVALID_ARGUMENT;
+
+		input._message_error_ERR_INFO_present = true;
+		input._message_error_ERR_INFO._message_error_ERR_INFO_choice =
+			_message_error_ERR_INFO_tstr;
+		input._message_error_ERR_INFO._message_error_ERR_INFO_tstr
+			.value = (const uint8_t *)info->text_string;
+		input._message_error_ERR_INFO._message_error_ERR_INFO_tstr.len =
+			info->written_entries;
+		break;
+	}
+
+	case EDHOC_ERROR_CODE_WRONG_SELECTED_CIPHER_SUITE: {
+		input._message_error_ERR_INFO_present = true;
+		input._message_error_ERR_INFO._message_error_ERR_INFO_choice =
+			_message_error_ERR_INFO__suites;
+
+		if (NULL == info || NULL == info->cipher_suites ||
+		    0 == info->total_entries || 0 == info->written_entries)
+			return EDHOC_ERROR_INVALID_ARGUMENT;
+
+		if (info->written_entries > info->total_entries)
+			return EDHOC_ERROR_INVALID_ARGUMENT;
+
+		struct suites_ *suites =
+			&input._message_error_ERR_INFO
+				 ._message_error_ERR_INFO__suites;
+
+		if (1 == info->written_entries) {
+			suites->_suites_choice = _suites_int;
+			suites->_suites_int = *info->cipher_suites;
+		} else {
+			if (ARRAY_SIZE(suites->_suites__int_int) <
+			    info->written_entries)
+				return EDHOC_ERROR_BUFFER_TOO_SMALL;
+
+			suites->_suites_choice = _suites__int;
+			suites->_suites__int_int_count = info->written_entries;
+			memcpy(suites->_suites__int_int, info->cipher_suites,
+			       sizeof(*info->cipher_suites) *
+				       info->written_entries);
+		}
+
+		break;
+	}
+
+	case EDHOC_ERROR_CODE_UNKNOWN_CREDENTIAL_REFERENCED: {
+		input._message_error_ERR_INFO_present = true;
+		input._message_error_ERR_INFO._message_error_ERR_INFO_choice =
+			_message_error_ERR_INFO_bool;
+		break;
+	}
+
+	default:
+		return EDHOC_ERROR_NOT_PERMITTED;
+	}
+
+	ret = cbor_encode_message_error(msg_err, msg_err_size, &input,
+					msg_err_len);
+
+	if (ZCBOR_SUCCESS != ret)
+		return EDHOC_ERROR_CBOR_FAILURE;
+
+	return EDHOC_SUCCESS;
+}
+
+int edhoc_message_error_process(const uint8_t *msg_err, size_t msg_err_len,
+				enum edhoc_error_code *code,
+				struct edhoc_error_info *info)
+{
+	if (NULL == msg_err || 0 == msg_err_len || NULL == code)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	int ret = EDHOC_ERROR_GENERIC_ERROR;
+	struct message_error result = { 0 };
+
+	size_t len = 0;
+	ret = cbor_decode_message_error(msg_err, msg_err_len, &result, &len);
+
+	if (ZCBOR_SUCCESS != ret)
+		return EDHOC_ERROR_CBOR_FAILURE;
+
+	switch (result._message_error_ERR_CODE) {
+	case EDHOC_ERROR_CODE_SUCCESS: {
+		*code = EDHOC_ERROR_CODE_SUCCESS;
+		break;
+	}
+
+	case EDHOC_ERROR_CODE_UNSPECIFIED_ERROR: {
+		*code = EDHOC_ERROR_CODE_UNSPECIFIED_ERROR;
+
+		if (NULL == info || NULL == info->text_string ||
+		    0 == info->total_entries)
+			break;
+
+		if (true == result._message_error_ERR_INFO_present) {
+			const struct zcbor_string *tstr =
+				&result._message_error_ERR_INFO
+					 ._message_error_ERR_INFO_tstr;
+
+			if (tstr->len > info->total_entries)
+				return EDHOC_ERROR_BUFFER_TOO_SMALL;
+
+			info->written_entries = tstr->len;
+			memcpy(info->text_string, tstr->value,
+			       sizeof(*info->text_string) * tstr->len);
+		}
+
+		break;
+	}
+
+	case EDHOC_ERROR_CODE_WRONG_SELECTED_CIPHER_SUITE: {
+		*code = EDHOC_ERROR_CODE_WRONG_SELECTED_CIPHER_SUITE;
+
+		if (NULL == info || NULL == info->cipher_suites ||
+		    0 == info->total_entries)
+			break;
+
+		if (true == result._message_error_ERR_INFO_present) {
+			const struct suites_ *suites =
+				&result._message_error_ERR_INFO
+					 ._message_error_ERR_INFO__suites;
+
+			switch (suites->_suites_choice) {
+			case _suites_int: {
+				info->written_entries = 1;
+				*info->cipher_suites = suites->_suites_int;
+				break;
+			}
+
+			case _suites__int: {
+				if (suites->_suites__int_int_count >
+				    info->total_entries)
+					return EDHOC_ERROR_BUFFER_TOO_SMALL;
+
+				info->written_entries =
+					suites->_suites__int_int_count;
+				memcpy(info->cipher_suites,
+				       suites->_suites__int_int,
+				       sizeof(*info->cipher_suites) *
+					       suites->_suites__int_int_count);
+				break;
+			}
+
+			default:
+				return EDHOC_ERROR_NOT_PERMITTED;
+			}
+		}
+
+		break;
+	}
+
+	case EDHOC_ERROR_CODE_UNKNOWN_CREDENTIAL_REFERENCED: {
+		*code = EDHOC_ERROR_CODE_UNKNOWN_CREDENTIAL_REFERENCED;
+
+		break;
+	}
+
+	default:
+		return EDHOC_ERROR_NOT_PERMITTED;
+	}
+
+	return EDHOC_SUCCESS;
+}

package/external/libedhoc/tests/include/cipher_suite_negotiation/test_edhoc_cipher_suite_negotiation.h

@@ -0,0 +1,37 @@
+/**
+ * \file    test_edhoc_cipher_suite_negotiation.h
+ * \author  Kamil Kielbasa
+ * \brief   Test scenarios for cipher suite negotiation.
+ * \version 0.4
+ * \date    2024-01-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Header guard ------------------------------------------------------------ */
+#ifndef TEST_EDHOC_CIPHER_SUITE_NEGOTIATION_H
+#define TEST_EDHOC_CIPHER_SUITE_NEGOTIATION_H
+
+/* Include files ----------------------------------------------------------- */
+/* Defines ----------------------------------------------------------------- */
+/* Types and type definitions ---------------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Extern variables and constant declarations ------------------------------ */
+/* Module interface function declarations ---------------------------------- */
+
+/**
+ * \brief Cipher suite negotiation for scenario:
+ *        - RFC 9528: 6.3.2. Examples:
+ *          - Figure 8: Cipher Suite Negotiation Example 1.
+ */
+void test_edhoc_cipher_suites_negotiation_scenario_1(void);
+
+/**
+ * \brief Cipher suite negotiation for scenario:
+ *        - RFC 9528: 6.3.2. Examples:
+ *          - Figure 9: Cipher Suite Negotiation Example 2.
+ */
+void test_edhoc_cipher_suites_negotiation_scenario_2(void);
+
+#endif /* TEST_EDHOC_CIPHER_SUITE_NEGOTIATION_H */

package/external/libedhoc/tests/include/cipher_suites/cipher_suite_0.h

@@ -0,0 +1,134 @@
+/**
+ * \file    cipher_suite_0.h
+ * \author  Kamil Kielbasa
+ * \brief   Cipher suite 0 API:
+ *            - AEAD algorithm                      = AES-CCM-16-64-128
+ *            - hash algorithm                      = SHA-256
+ *            - MAC length in bytes (Static DH)     = 8
+ *            - key exchange algorithm (ECDH curve) = X25519
+ *            - signature algorithm                 = EdDSA
+ *
+ * \version 0.4
+ * \date    2024-04-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Header guard ------------------------------------------------------------ */
+#ifndef CIPHER_SUITE_0_H
+#define CIPHER_SUITE_0_H
+
+/* Include files ----------------------------------------------------------- */
+
+/* EDHOC header: */
+#include "edhoc_crypto.h"
+
+/* Standard library headers: */
+#include <stdint.h>
+#include <stddef.h>
+
+/* Module defines ---------------------------------------------------------- */
+/* Module types and type definitiones -------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Static variables and constants ------------------------------------------ */
+/* Static function declarations -------------------------------------------- */
+/* Static function definitions --------------------------------------------- */
+/* Module interface function definitions ----------------------------------- */
+
+/**
+ * \brief Crypto key generation.
+ */
+int cipher_suite_0_key_generate(void *user_context,
+				enum edhoc_key_type key_type,
+				const uint8_t *raw_key, size_t raw_key_len,
+				void *kid);
+
+/**
+ * \brief Crypto key destroy.
+ */
+int cipher_suite_0_key_destroy(void *user_context, void *kid);
+
+/**
+ * \brief ECDH make key pair.
+ */
+int cipher_suite_0_make_key_pair(void *user_context, const void *key_id,
+				 uint8_t *restrict private_key,
+				 size_t private_key_size,
+				 size_t *restrict private_key_length,
+				 uint8_t *restrict public_key,
+				 size_t public_key_size,
+				 size_t *restrict public_key_length);
+
+/**
+ * \brief ECDH key agreement.
+ */
+int cipher_suite_0_key_agreement(void *user_context, const void *key_id,
+				 const uint8_t *peer_public_key,
+				 size_t peer_public_key_length,
+				 uint8_t *shared_secret,
+				 size_t shared_secret_size,
+				 size_t *shared_secret_length);
+
+/**
+ * \brief ECDSA signature.
+ */
+int cipher_suite_0_signature(void *user_context, const void *key_id,
+			     const uint8_t *input, size_t input_length,
+			     uint8_t *signature, size_t signature_size,
+			     size_t *signature_length);
+
+/**
+ * \brief ECDSA signature verification.
+ */
+int cipher_suite_0_verify(void *user_context, const void *key_id,
+			  const uint8_t *input, size_t input_length,
+			  const uint8_t *signature, size_t signature_length);
+
+/**
+ * \brief HKDF extract.
+ */
+int cipher_suite_0_extract(void *user_context, const void *key_id,
+			   const uint8_t *salt, size_t salt_len,
+			   uint8_t *psuedo_random_key,
+			   size_t psuedo_random_key_size,
+			   size_t *psuedo_random_key_length);
+
+/**
+ * \brief HKDF expand.
+ */
+int cipher_suite_0_expand(void *user_context, const void *key_id,
+			  const uint8_t *info, size_t info_length,
+			  uint8_t *output_keying_material,
+			  size_t output_keying_material_length);
+
+/**
+ * \brief AEAD encrypt.
+ */
+int cipher_suite_0_encrypt(void *user_context, const void *key_id,
+			   const uint8_t *nonce, size_t nonce_length,
+			   const uint8_t *additional_data,
+			   size_t additional_data_length,
+			   const uint8_t *plaintext, size_t plaintext_length,
+			   uint8_t *ciphertext, size_t ciphertext_size,
+			   size_t *ciphertext_length);
+
+/**
+ * \brief AEAD decrypt.
+ */
+int cipher_suite_0_decrypt(void *user_context, const void *key_id,
+			   const uint8_t *nonce, size_t nonce_length,
+			   const uint8_t *additional_data,
+			   size_t additional_data_length,
+			   const uint8_t *ciphertext, size_t ciphertext_length,
+			   uint8_t *plaintext, size_t plaintext_size,
+			   size_t *plaintext_length);
+
+/**
+ * \brief Hash function.
+ */
+int cipher_suite_0_hash(void *user_context, const uint8_t *input,
+			size_t input_length, uint8_t *hash, size_t hash_size,
+			size_t *hash_length);
+
+#endif /* CIPHER_SUITE_0_H */

package/external/libedhoc/tests/include/cipher_suites/cipher_suite_2.h

@@ -0,0 +1,140 @@
+/**
+ * \file    cipher_suite_2.h
+ * \author  Kamil Kielbasa
+ * \brief   Cipher suite 2 API:
+ *            - AEAD algorithm                      = AES-CCM-16-64-128
+ *            - hash algorithm                      = SHA-256
+ *            - MAC length in bytes (Static DH)     = 8
+ *            - key exchange algorithm (ECDH curve) = P-256
+ *            - signature algorithm                 = ES256
+ *
+ * \version 0.4
+ * \date    2024-04-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Header guard ------------------------------------------------------------ */
+#ifndef CIPHER_SUITE_2_H
+#define CIPHER_SUITE_2_H
+
+/* Include files ----------------------------------------------------------- */
+
+/* EDHOC header: */
+#include "edhoc_crypto.h"
+
+/* Standard library headers: */
+#include <stdint.h>
+#include <stddef.h>
+
+/* Module defines ---------------------------------------------------------- */
+#define ECC_COMP_KEY_LEN (32)
+#define ECC_UNCOMP_KEY_LEN (65)
+
+#define ECC_ECDSA_SIGN_LEN (64)
+#define ECC_ECDH_KEY_AGREEMENT_LEN (32)
+
+/* Module types and type definitiones -------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Static variables and constants ------------------------------------------ */
+/* Static function declarations -------------------------------------------- */
+/* Static function definitions --------------------------------------------- */
+/* Module interface function definitions ----------------------------------- */
+
+/**
+ * \brief Crypto key generation.
+ */
+int cipher_suite_2_key_generate(void *user_context,
+				enum edhoc_key_type key_type,
+				const uint8_t *raw_key, size_t raw_key_len,
+				void *kid);
+
+/**
+ * \brief Crypto key destroy.
+ */
+int cipher_suite_2_key_destroy(void *user_context, void *kid);
+
+/**
+ * \brief ECDH make key pair.
+ */
+int cipher_suite_2_make_key_pair(void *user_context, const void *key_id,
+				 uint8_t *restrict private_key,
+				 size_t private_key_size,
+				 size_t *restrict private_key_length,
+				 uint8_t *restrict public_key,
+				 size_t public_key_size,
+				 size_t *restrict public_key_length);
+
+/**
+ * \brief ECDH key agreement.
+ */
+int cipher_suite_2_key_agreement(void *user_context, const void *key_id,
+				 const uint8_t *peer_public_key,
+				 size_t peer_public_key_length,
+				 uint8_t *shared_secret,
+				 size_t shared_secret_size,
+				 size_t *shared_secret_length);
+
+/**
+ * \brief ECDSA signature.
+ */
+int cipher_suite_2_signature(void *user_context, const void *key_id,
+			     const uint8_t *input, size_t input_length,
+			     uint8_t *signature, size_t signature_size,
+			     size_t *signature_length);
+
+/**
+ * \brief ECDSA signature verification.
+ */
+int cipher_suite_2_verify(void *user_context, const void *key_id,
+			  const uint8_t *input, size_t input_length,
+			  const uint8_t *signature, size_t signature_length);
+
+/**
+ * \brief HKDF extract.
+ */
+int cipher_suite_2_extract(void *user_context, const void *key_id,
+			   const uint8_t *salt, size_t salt_len,
+			   uint8_t *psuedo_random_key,
+			   size_t psuedo_random_key_size,
+			   size_t *psuedo_random_key_length);
+
+/**
+ * \brief HKDF expand.
+ */
+int cipher_suite_2_expand(void *user_context, const void *key_id,
+			  const uint8_t *info, size_t info_length,
+			  uint8_t *output_keying_material,
+			  size_t output_keying_material_length);
+
+/**
+ * \brief AEAD encrypt.
+ */
+int cipher_suite_2_encrypt(void *user_context, const void *key_id,
+			   const uint8_t *nonce, size_t nonce_length,
+			   const uint8_t *additional_data,
+			   size_t additional_data_length,
+			   const uint8_t *plaintext, size_t plaintext_length,
+			   uint8_t *ciphertext, size_t ciphertext_size,
+			   size_t *ciphertext_length);
+
+/**
+ * \brief AEAD decrypt.
+ */
+int cipher_suite_2_decrypt(void *user_context, const void *key_id,
+			   const uint8_t *nonce, size_t nonce_length,
+			   const uint8_t *additional_data,
+			   size_t additional_data_length,
+			   const uint8_t *ciphertext, size_t ciphertext_length,
+			   uint8_t *plaintext, size_t plaintext_size,
+			   size_t *plaintext_length);
+
+/**
+ * \brief Hash function.
+ */
+int cipher_suite_2_hash(void *user_context, const uint8_t *input,
+			size_t input_length, uint8_t *hash, size_t hash_size,
+			size_t *hash_length);
+
+#endif /* CIPHER_SUITE_2_H */

package/external/libedhoc/tests/include/cipher_suites/test_cipher_suite_0.h

@@ -0,0 +1,48 @@
+/**
+ * \file    test_cipher_suite_0.h
+ * \author  Kamil Kielbasa
+ * \brief   Unit tests for cipher suite 0.
+ * \version 0.4
+ * \date    2024-01-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Header guard ------------------------------------------------------------ */
+#ifndef TEST_CIPHER_SUITE_0_H
+#define TEST_CIPHER_SUITE_0_H
+
+/* Include files ----------------------------------------------------------- */
+/* Defines ----------------------------------------------------------------- */
+/* Types and type definitions ---------------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Extern variables and constant declarations ------------------------------ */
+/* Module interface function declarations ---------------------------------- */
+
+/**
+ * \brief Unit test for ECDSA (EdDSA).
+ */
+void test_cipher_suite_0_ecdsa(void);
+
+/**
+ * \brief Unit test for ECDH (X25519).
+ */
+void test_cipher_suite_0_ecdh(void);
+
+/**
+ * \brief Unit test for HKDF extract & expand (HMAC-SHA-256).
+ */
+void test_cipher_suite_0_hkdf(void);
+
+/**
+ * \brief Unit test for AEAD (AES-CCM-16-64-128).
+ */
+void test_cipher_suite_0_aead(void);
+
+/**
+ * \brief Unit test for hash (SHA-256).
+ */
+void test_cipher_suite_0_hash(void);
+
+#endif /* TEST_CIPHER_SUITE_0_H */

package/external/libedhoc/tests/include/cipher_suites/test_cipher_suite_2.h

@@ -0,0 +1,48 @@
+/**
+ * \file    test_cipher_suite_2.h
+ * \author  Kamil Kielbasa
+ * \brief   Unit tests for cipher suite 2.
+ * \version 0.4
+ * \date    2024-01-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Header guard ------------------------------------------------------------ */
+#ifndef TEST_CIPHER_SUITE_2_H
+#define TEST_CIPHER_SUITE_2_H
+
+/* Include files ----------------------------------------------------------- */
+/* Defines ----------------------------------------------------------------- */
+/* Types and type definitions ---------------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Extern variables and constant declarations ------------------------------ */
+/* Module interface function declarations ---------------------------------- */
+
+/**
+ * \brief Unit test for ECDSA (ES256).
+ */
+void test_cipher_suite_2_ecdsa(void);
+
+/**
+ * \brief Unit test for ECDH (P-256).
+ */
+void test_cipher_suite_2_ecdh(void);
+
+/**
+ * \brief Unit test for HKDF extract & expand (HMAC-SHA-256).
+ */
+void test_cipher_suite_2_hkdf(void);
+
+/**
+ * \brief Unit test for AEAD (AES-CCM-16-64-128).
+ */
+void test_cipher_suite_2_aead(void);
+
+/**
+ * \brief Unit test for hash (SHA-256).
+ */
+void test_cipher_suite_2_hash(void);
+
+#endif /* TEST_CIPHER_SUITE_2_H */

package/external/libedhoc/tests/include/edhoc_trace_1/authentication_credentials_1.h

@@ -0,0 +1,60 @@
+/**
+ * \file    authentication_credentials_1.h
+ * \author  Kamil Kielbasa
+ * \brief   Example implementation of authentication credentials callbacks
+ *          for EDHOC traces (RFC 9529) for chapter 2.
+ * \version 0.4
+ * \date    2024-01-01
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Header guard ------------------------------------------------------------ */
+#ifndef AUTHENTICATION_CREDENTIALS_1_H
+#define AUTHENTICATION_CREDENTIALS_1_H
+
+/* Include files ----------------------------------------------------------- */
+
+/* Standard library headers: */
+#include <stdint.h>
+#include <stddef.h>
+
+/* EDHOC header: */
+#include "edhoc_credentials.h"
+
+/* Defines ----------------------------------------------------------------- */
+/* Types and type definitions ---------------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Extern variables and constant declarations ------------------------------ */
+/* Module interface function declarations ---------------------------------- */
+
+/**
+ * \brief Authentication credentials fetch callback for initiator.
+ */
+int auth_cred_fetch_init(void *user_context,
+			 struct edhoc_auth_creds *credentials);
+
+/**
+ * \brief Authentication credentials fetch callback for responder.
+ */
+int auth_cred_fetch_resp(void *user_context,
+			 struct edhoc_auth_creds *credentials);
+
+/**
+ * \brief Authentication credentials verify callback for initiator.
+ */
+int auth_cred_verify_init(void *user_context,
+			  struct edhoc_auth_creds *credentials,
+			  const uint8_t **public_key_reference,
+			  size_t *public_key_length);
+
+/**
+ * \brief Authentication credentials verify callback for responder.
+ */
+int auth_cred_verify_resp(void *user_context,
+			  struct edhoc_auth_creds *credentials,
+			  const uint8_t **public_key_reference,
+			  size_t *public_key_length);
+
+#endif /* AUTHENTICATION_CREDENTIALS_1_H */