mirror of https://github.com/ARMmbed/mbed-os.git
moved db into its own file
paul-szczepanek-arm
parent
2d8451f770
commit
b4e85b3d06
|
|
@ -0,0 +1,198 @@
|
|||
/* mbed Microcontroller Library
|
||||
* Copyright (c) 2018 ARM Limited
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
#ifndef __GENERIC_SECURITY_MANAGER_DB_H__
|
||||
#define __GENERIC_SECURITY_MANAGER_DB_H__
|
||||
|
||||
#include "Callback.h"
|
||||
#include "ble/pal/GapTypes.h"
|
||||
#include "ble/BLETypes.h"
|
||||
|
||||
namespace ble {
|
||||
namespace generic {
|
||||
|
||||
using ble::pal::address_t;
|
||||
using ble::pal::irk_t;
|
||||
using ble::pal::csrk_t;
|
||||
using ble::pal::ltk_t;
|
||||
using ble::pal::ediv_t;
|
||||
using ble::pal::rand_t;
|
||||
|
||||
/* separate structs to allow db implementation to minimise memory usage */
|
||||
|
||||
struct SecurityEntry_t {
|
||||
connection_handle_t handle;
|
||||
address_t peer_identity_address;
|
||||
uint8_t encryption_key_size;
|
||||
uint8_t peer_address_public:1;
|
||||
uint8_t mitm_performed:1;
|
||||
uint8_t mitm:1; /**< does the key provide mitm */
|
||||
uint8_t connected:1;
|
||||
uint8_t authenticated:1; /**< have we authenticated during this connection */
|
||||
uint8_t sign_data:1;
|
||||
uint8_t encryption_requested:1;
|
||||
uint8_t encrypted:1;
|
||||
uint8_t oob:1;
|
||||
uint8_t oob_mitm_protection:1;
|
||||
uint8_t secure_connections:1;
|
||||
uint8_t signing_key:1;
|
||||
uint8_t encryption_key:1;
|
||||
};
|
||||
|
||||
struct SecurityEntryKeys_t {
|
||||
ltk_t ltk;
|
||||
ediv_t ediv;
|
||||
rand_t rand;
|
||||
};
|
||||
|
||||
struct SecurityEntryIdentity_t {
|
||||
irk_t irk;
|
||||
csrk_t csrk;
|
||||
};
|
||||
|
||||
enum DbCbAction_t {
|
||||
DB_CB_ACTION_UPDATE,
|
||||
DB_CB_ACTION_NO_UPDATE_REQUIRED, /* does not guarantee discarding changes if you made any */
|
||||
DB_CB_ACTION_REMOVE
|
||||
};
|
||||
|
||||
typedef mbed::Callback<DbCbAction_t(SecurityEntry_t&)> SecurityEntryDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(SecurityEntry_t&, SecurityEntryKeys_t&)> SecurityEntryKeysDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(connection_handle_t, csrk_t)> SecurityEntryCsrkDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(SecurityEntry_t&, SecurityEntryIdentity_t&)> SecurityEntryIdentityDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(Gap::Whitelist_t&)> WhitelistDbCb_t;
|
||||
|
||||
/**
|
||||
* SecurityDB holds the state for active connections and bonded devices.
|
||||
* Keys can be stored in NVM and are returned via callbacks.
|
||||
* SecurityDB is responsible for serialising any requests and keeping
|
||||
* the store in a consistent state.
|
||||
* Active connections state must be returned immediately.
|
||||
*/
|
||||
class GenericSecurityDb {
|
||||
public:
|
||||
GenericSecurityDb() { };
|
||||
virtual ~GenericSecurityDb() { };
|
||||
|
||||
/**
|
||||
* Return immediately security entry containing the state
|
||||
* information for active connection.
|
||||
* @param[in] handle valid connection handle
|
||||
* @return pointer to security entry, NULL if handle was invalid
|
||||
*/
|
||||
virtual SecurityEntry_t* get_entry(connection_handle_t connection);
|
||||
|
||||
/* local keys */
|
||||
|
||||
/* get */
|
||||
virtual void get_entry_local_keys(
|
||||
SecurityEntryKeysDbCb_t cb,
|
||||
connection_handle_t connection,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
/* set */
|
||||
virtual void set_entry_local_ltk(
|
||||
connection_handle_t connection,
|
||||
const ltk_t ltk
|
||||
);
|
||||
virtual void set_entry_local_ediv_rand(
|
||||
connection_handle_t connection,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
|
||||
/* peer's keys */
|
||||
|
||||
/* get */
|
||||
virtual void get_entry_csrk(
|
||||
SecurityEntryCsrkDbCb_t cb,
|
||||
connection_handle_t connection
|
||||
);
|
||||
virtual void get_entry_peer_keys(
|
||||
SecurityEntryKeysDbCb_t cb,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
virtual void get_entry_peer_keys(
|
||||
SecurityEntryKeysDbCb_t cb,
|
||||
connection_handle_t connection
|
||||
);
|
||||
/* set */
|
||||
virtual void set_entry_peer(
|
||||
connection_handle_t connection,
|
||||
bool address_is_public,
|
||||
const address_t &peer_address,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand,
|
||||
const ltk_t ltk,
|
||||
const irk_t irk,
|
||||
const csrk_t csrk
|
||||
);
|
||||
virtual void set_entry_peer_ltk(
|
||||
connection_handle_t connection,
|
||||
const ltk_t ltk
|
||||
);
|
||||
virtual void set_entry_peer_ediv_rand(
|
||||
connection_handle_t connection,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
virtual void set_entry_peer_irk(
|
||||
connection_handle_t connection,
|
||||
const irk_t irk
|
||||
);
|
||||
virtual void set_entry_peer_bdaddr(
|
||||
connection_handle_t connection,
|
||||
bool address_is_public,
|
||||
const address_t &peer_address
|
||||
);
|
||||
virtual void set_entry_peer_csrk(
|
||||
connection_handle_t connection,
|
||||
const csrk_t csrk
|
||||
);
|
||||
|
||||
/* local csrk */
|
||||
|
||||
virtual const csrk_t* get_local_csrk();
|
||||
virtual void set_local_csrk(
|
||||
const csrk_t csrk
|
||||
);
|
||||
|
||||
/* list management */
|
||||
|
||||
virtual void remove_entry( address_t peer_identity_address);
|
||||
virtual void clear_entries();
|
||||
|
||||
virtual void get_whitelist(WhitelistDbCb_t cb);
|
||||
|
||||
virtual void update_whitelist(Gap::Whitelist_t& whitelist);
|
||||
virtual void add_whitelist_entry(const address_t &address);
|
||||
|
||||
virtual void remove_whitelist_entry(const address_t &address);
|
||||
virtual void clear_whitelist();
|
||||
|
||||
/* saving and loading from nvm */
|
||||
|
||||
virtual void restore();
|
||||
virtual void sync();
|
||||
virtual void set_restore(bool reload);
|
||||
};
|
||||
|
||||
} /* namespace generic */
|
||||
} /* namespace ble */
|
||||
|
||||
#endif /*__GENERIC_SECURITY_MANAGER_DB_H__*/
|
||||
|
|
@ -14,14 +14,12 @@
|
|||
* limitations under the License.
|
||||
*/
|
||||
|
||||
#ifndef __GENERIC_SECURITY_MANAGER_H__
|
||||
#define __GENERIC_SECURITY_MANAGER_H__
|
||||
|
||||
#include "SecurityManager.h"
|
||||
#include "PalSecurityManager.h"
|
||||
#include "Callback.h"
|
||||
#include "ble/pal/GapTypes.h"
|
||||
#include "ble/BLETypes.h"
|
||||
#include "ble/generic/GenericSecurityDb.h"
|
||||
|
||||
namespace ble {
|
||||
namespace generic {
|
||||
|
|
@ -40,169 +38,8 @@ using ble::pal::PasskeyAsci;
|
|||
using ble::pal::passkey_num_t;
|
||||
typedef SecurityManager::SecurityIOCapabilities_t SecurityIOCapabilities_t;
|
||||
|
||||
/* separate structs to allow db implementation to minimise memory usage */
|
||||
|
||||
struct SecurityEntry_t {
|
||||
connection_handle_t handle;
|
||||
address_t peer_identity_address;
|
||||
uint8_t encryption_key_size;
|
||||
uint8_t peer_address_public:1;
|
||||
uint8_t mitm_performed:1;
|
||||
uint8_t mitm:1; /**< does the key provide mitm */
|
||||
uint8_t connected:1;
|
||||
uint8_t authenticated:1; /**< have we authenticated during this connection */
|
||||
uint8_t sign_data:1;
|
||||
uint8_t encryption_requested:1;
|
||||
uint8_t encrypted:1;
|
||||
uint8_t oob:1;
|
||||
uint8_t oob_mitm_protection:1;
|
||||
uint8_t secure_connections:1;
|
||||
uint8_t signing_key:1;
|
||||
uint8_t encryption_key:1;
|
||||
};
|
||||
|
||||
struct SecurityEntryKeys_t {
|
||||
ltk_t ltk;
|
||||
ediv_t ediv;
|
||||
rand_t rand;
|
||||
};
|
||||
|
||||
struct SecurityEntryIdentity_t {
|
||||
irk_t irk;
|
||||
csrk_t csrk;
|
||||
};
|
||||
|
||||
enum DbCbAction_t {
|
||||
DB_CB_ACTION_UPDATE,
|
||||
DB_CB_ACTION_NO_UPDATE_REQUIRED, /* does not guarantee discarding changes if you made any */
|
||||
DB_CB_ACTION_REMOVE
|
||||
};
|
||||
|
||||
typedef mbed::Callback<DbCbAction_t(SecurityEntry_t&)> SecurityEntryDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(SecurityEntry_t&, SecurityEntryKeys_t&)> SecurityEntryKeysDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(connection_handle_t, csrk_t)> SecurityEntryCsrkDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(SecurityEntry_t&, SecurityEntryIdentity_t&)> SecurityEntryIdentityDbCb_t;
|
||||
typedef mbed::Callback<DbCbAction_t(Gap::Whitelist_t&)> WhitelistDbCb_t;
|
||||
|
||||
class GenericSecurityManagerEventHandler;
|
||||
|
||||
/**
|
||||
* SecurityDB holds the state for active connections and bonded devices.
|
||||
* Keys can be stored in NVM and are returned via callbacks.
|
||||
* SecurityDB is responsible for serialising any requests and keeping
|
||||
* the store in a consistent state.
|
||||
* Active connections state must be returned immediately.
|
||||
*/
|
||||
class SecurityDb {
|
||||
public:
|
||||
SecurityDb() { };
|
||||
virtual ~SecurityDb() { };
|
||||
|
||||
/**
|
||||
* Return immediately security entry containing the state
|
||||
* information for active connection.
|
||||
* @param[in] handle valid connection handle
|
||||
* @return pointer to security entry, NULL if handle was invalid
|
||||
*/
|
||||
virtual SecurityEntry_t* get_entry(connection_handle_t connection);
|
||||
|
||||
/* local keys */
|
||||
|
||||
/* get */
|
||||
virtual void get_entry_local_keys(
|
||||
SecurityEntryKeysDbCb_t cb,
|
||||
connection_handle_t connection,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
/* set */
|
||||
virtual void set_entry_local_ltk(
|
||||
connection_handle_t connection,
|
||||
const ltk_t ltk
|
||||
);
|
||||
virtual void set_entry_local_ediv_rand(
|
||||
connection_handle_t connection,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
|
||||
/* peer's keys */
|
||||
|
||||
/* get */
|
||||
virtual void get_entry_csrk(
|
||||
SecurityEntryCsrkDbCb_t cb,
|
||||
connection_handle_t connection
|
||||
);
|
||||
virtual void get_entry_peer_keys(
|
||||
SecurityEntryKeysDbCb_t cb,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
virtual void get_entry_peer_keys(
|
||||
SecurityEntryKeysDbCb_t cb,
|
||||
connection_handle_t connection
|
||||
);
|
||||
/* set */
|
||||
virtual void set_entry_peer(
|
||||
connection_handle_t connection,
|
||||
bool address_is_public,
|
||||
const address_t &peer_address,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand,
|
||||
const ltk_t ltk,
|
||||
const irk_t irk,
|
||||
const csrk_t csrk
|
||||
);
|
||||
virtual void set_entry_peer_ltk(
|
||||
connection_handle_t connection,
|
||||
const ltk_t ltk
|
||||
);
|
||||
virtual void set_entry_peer_ediv_rand(
|
||||
connection_handle_t connection,
|
||||
const ediv_t ediv,
|
||||
const rand_t rand
|
||||
);
|
||||
virtual void set_entry_peer_irk(
|
||||
connection_handle_t connection,
|
||||
const irk_t irk
|
||||
);
|
||||
virtual void set_entry_peer_bdaddr(
|
||||
connection_handle_t connection,
|
||||
bool address_is_public,
|
||||
const address_t &peer_address
|
||||
);
|
||||
virtual void set_entry_peer_csrk(
|
||||
connection_handle_t connection,
|
||||
const csrk_t csrk
|
||||
);
|
||||
|
||||
/* local csrk */
|
||||
|
||||
virtual const csrk_t* get_local_csrk();
|
||||
virtual void set_local_csrk(
|
||||
const csrk_t csrk
|
||||
);
|
||||
|
||||
/* list management */
|
||||
|
||||
virtual void remove_entry( address_t peer_identity_address);
|
||||
virtual void clear_entries();
|
||||
|
||||
virtual void get_whitelist(WhitelistDbCb_t cb);
|
||||
|
||||
virtual void update_whitelist(Gap::Whitelist_t& whitelist);
|
||||
virtual void add_whitelist_entry(const address_t &address);
|
||||
|
||||
virtual void remove_whitelist_entry(const address_t &address);
|
||||
virtual void clear_whitelist();
|
||||
|
||||
/* saving and loading from nvm */
|
||||
|
||||
virtual void restore();
|
||||
virtual void sync();
|
||||
virtual void set_restore(bool reload);
|
||||
};
|
||||
|
||||
class GenericSecurityManager : public SecurityManager,
|
||||
public ble::pal::SecurityManagerEventHandler {
|
||||
public:
|
||||
|
|
@ -728,7 +565,7 @@ protected:
|
|||
|
||||
private:
|
||||
ble::pal::SecurityManager& pal;
|
||||
SecurityDb db;
|
||||
GenericSecurityDb db;
|
||||
|
||||
bool pairing_authorisation_required;
|
||||
bool legacy_pairing_allowed;
|
||||
|
|
@ -1002,5 +839,3 @@ private:
|
|||
|
||||
} /* namespace generic */
|
||||
} /* namespace ble */
|
||||
|
||||
#endif /*__GENERIC_SECURITY_MANAGER_H__*/
|
||||
|
|
|
|||
Loading…
Reference in New Issue