| /****************************************************************************** |
| * @file smp_alg.h |
| * |
| * @brief for TLSR chips |
| * |
| * @author public@telink-semi.com; |
| * @date Sep. 30, 2010 |
| * |
| * @attention |
| * |
| * Copyright (C) 2019-2020 Telink Semiconductor (Shanghai) Co., Ltd. |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| * |
| *****************************************************************************/ |
| #ifndef SMP_ALG_H_ |
| #define SMP_ALG_H_ |
| |
| |
| |
| |
| /** |
| * @brief This function is used to generate the confirm values |
| * @param[out] c1: the confirm value, little--endian. |
| * @param[in] key: aes key, little--endian. |
| * @param[in] r: the plaintext, little--endian. |
| * @param[in] pres: packet buffer2, little--endian. |
| * @param[in] preq: packet buffer2, little--endian. |
| * @param[in] iat: initiate address type |
| * @param[in] ia: initiate address, little--endian. |
| * @param[in] rat: response address type |
| * @param[in] ra: response address, little--endian. |
| * @return none. |
| * @Note Input data requires strict Word alignment |
| */ |
| void blt_smp_alg_c1(unsigned char *c1, unsigned char key[16], unsigned char r[16], unsigned char pres[7], unsigned char preq[7], unsigned char iat, unsigned char ia[6], unsigned char rat, unsigned char ra[6]); |
| |
| /** |
| * @brief This function is used to generate the STK during the LE legacy pairing process. |
| * @param[out] *STK - the result of encrypt, little--endian. |
| * @param[in] *key - aes key, little--endian. |
| * @param[in] *r1 - the plaintext1, little--endian. |
| * @param[in] *r2 - the plaintext2, little--endian. |
| * @return none. |
| * @Note Input data requires strict Word alignment |
| */ |
| void blt_smp_alg_s1(unsigned char *stk, unsigned char key[16], unsigned char r1[16], unsigned char r2[16]); |
| |
| /** |
| * @brief This function is used to compute confirm value by function f4 |
| * --- Ca: f4(U, V, X, Z) = AES-CMACX (U || V || Z) --- |
| * @param[out] r: the output of the confirm:128-bits, big--endian. |
| * @param[in] u: is the 256-bits, big--endian. |
| * @param[in] v: is the 256-bits, big--endian. |
| * @param[in] x: is the 128-bits, big--endian. |
| * @param[in] z: is the 8-bits |
| * @return none. |
| */ |
| void blt_smp_alg_f4 (unsigned char *r, unsigned char u[32], unsigned char v[32], unsigned char x[16], unsigned char z); |
| |
| /** |
| * @brief This function is used to generate the numeric comparison values during authentication |
| * stage 1 of the LE Secure Connections pairing process by function g2 |
| * @param[in] u: is the 256-bits, big--endian. |
| * @param[in] v: is the 256-bits, big--endian. |
| * @param[in] x: is the 128-bits, big--endian. |
| * @param[in] y: is the 128-bits, big--endian. |
| * @return pincode value: 32-bits. |
| */ |
| unsigned int blt_smp_alg_g2 (unsigned char u[32], unsigned char v[32], unsigned char x[16], unsigned char y[16]); |
| |
| /** |
| * @brief This function is used to generate derived keying material in order to create the LTK |
| * and keys for the commitment function f6 by function f5 |
| * @param[out] mac: the output of the MAC value:128-bits, big--endian. |
| * @param[out] ltk: the output of the LTK value:128-bits, big--endian. |
| * @param[in] w: is the 256-bits, big--endian. |
| * @param[in] n1: is the 128-bits, big--endian. |
| * @param[in] n2: is the 128-bits, big--endian. |
| * @param[in] a1: is the 56-bits, big--endian. |
| * @param[in] a2: is the 56-bits, big--endian. |
| * @return none. |
| */ |
| void blt_smp_alg_f5 (unsigned char *mac, unsigned char *ltk, unsigned char w[32], unsigned char n1[16], unsigned char n2[16], |
| unsigned char a1[7], unsigned char a2[7]); |
| |
| /** |
| * @brief This function is used to generate check values during authentication stage 2 of the |
| * LE Secure Connections pairing process by function f6 |
| * @param[out] *e: the output of Ea or Eb:128-bits, big--endian. |
| * @param[in] w: is the 256-bits, big--endian. |
| * @param[in] n1: is the 128-bits, big--endian. |
| * @param[in] n2: is the 128-bits, big--endian. |
| * @param[in] a1: is the 56-bits, big--endian. |
| * @param[in] a2: is the 56-bits, big--endian. |
| * @return none. |
| */ |
| void blt_smp_alg_f6 (unsigned char *e, unsigned char w[16], unsigned char n1[16], unsigned char n2[16], |
| unsigned char r[16], unsigned char iocap[3], unsigned char a1[7], unsigned char a2[7]); |
| |
| /** |
| * @brief This function is used to convert keys of a given size from one key type to another |
| * key type with equivalent strength |
| * @param[out] r: the output of h6:128-bits, big--endian. |
| * @param[in] w: is the 128-bits, big--endian. |
| * @param[in] keyid: is the 32-bits, big--endian. |
| * @return none. |
| */ |
| void blt_smp_alg_h6 (unsigned char *r, unsigned char w[16], unsigned char keyid[4]); |
| |
| |
| /** |
| * @brief This function is used to convert keys of a given size from one key type to another |
| * key type with equivalent strength |
| * --- h7(SALT, W) = AES-CMACsalt(W) --- |
| * @param[out] r: the output of h7:128-bits, big--endian. |
| * @param[in] salt: is the 128-bits, big--endian. |
| * @param[in] w: is the 128-bits, big--endian. |
| * @return none. |
| */ |
| void blt_smp_alg_h7 (unsigned char *r, unsigned char salt[16], unsigned char w[16]); |
| |
| |
| /** |
| * @brief This function is used to generate the Group Session Key (GSK) for encrypting or |
| * decrypting payloads of an encrypted BIS. |
| * --- h8(K, S, keyID) = AES-CMACik(keyID) --- |
| * @param[out] r: the output of h8:128-bits, big--endian. |
| * @param[in] k: is the 128-bits, big--endian. |
| * @param[in] s: is the 128-bits, big--endian. |
| * @param[in] keyid: is the 32-bits, big--endian. |
| * @return none. |
| */ |
| void blt_smp_alg_h8 (unsigned char *r, unsigned char k[16], unsigned char s[16], unsigned char keyId[4]); |
| |
| /** |
| * @brief algorithm used in generating resolvable private address. |
| * @param[out] prand:random number |
| * @return none. |
| */ |
| void blt_crypto_alg_prand(u8 prand[3]); |
| |
| /** |
| * @brief random address hash function. |
| * @param[in] irk: irk buffer |
| * @param[in] r:key |
| * @param[out] out: result |
| * @return none. |
| */ |
| void blt_crypto_alg_ah(const u8 irk[16], u8 r[3], u8 out[3]); |
| |
| |
| #endif /* SMP_ALG_H_ */ |
| |
| |
| |
| |
