1 /* 2 * Copyright (C) 2014 BlueKitchen GmbH 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. Neither the name of the copyright holders nor the names of 14 * contributors may be used to endorse or promote products derived 15 * from this software without specific prior written permission. 16 * 4. Any redistribution, use, or modification is done solely for 17 * personal benefit and not for any commercial purpose or for 18 * monetary gain. 19 * 20 * THIS SOFTWARE IS PROVIDED BY BLUEKITCHEN GMBH AND CONTRIBUTORS 21 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 22 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 23 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL MATTHIAS 24 * RINGWALD OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 25 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 26 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS 27 * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED 28 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 29 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF 30 * THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 * 33 * Please inquire about commercial licensing options at 34 * [email protected] 35 * 36 */ 37 38 #include <stdarg.h> 39 #include "btstack_tlv.h" 40 #include "mesh/mesh_foundation.h" 41 #include "mesh_upper_transport.h" 42 #include "mesh/mesh.h" 43 #include "mesh/mesh_proxy.h" 44 #include "mesh/mesh_node.h" 45 46 #define BTSTACK_FILE__ "mesh_upper_transport.c" 47 48 #include "mesh/mesh_upper_transport.h" 49 50 #include <stdio.h> 51 #include <stdlib.h> 52 #include <string.h> 53 54 #include "btstack_util.h" 55 #include "btstack_memory.h" 56 #include "btstack_debug.h" 57 #include "btstack_bool.h" 58 59 #include "mesh/beacon.h" 60 #include "mesh/mesh_iv_index_seq_number.h" 61 #include "mesh/mesh_keys.h" 62 #include "mesh/mesh_lower_transport.h" 63 #include "mesh/mesh_peer.h" 64 #include "mesh/mesh_virtual_addresses.h" 65 66 // TODO: extract mesh_pdu functions into lower transport or network 67 #include "mesh/mesh_access.h" 68 69 // combined key x address iterator for upper transport decryption 70 71 typedef struct { 72 // state 73 mesh_transport_key_iterator_t key_it; 74 mesh_virtual_address_iterator_t address_it; 75 // elements 76 const mesh_transport_key_t * key; 77 const mesh_virtual_address_t * address; 78 // address - might be virtual 79 uint16_t dst; 80 // key info 81 } mesh_transport_key_and_virtual_address_iterator_t; 82 83 static void mesh_upper_transport_validate_access_message(void); 84 static void mesh_upper_transport_run(void); 85 86 // upper transport callbacks - in access layer 87 static void (*mesh_access_message_handler)( mesh_transport_callback_type_t callback_type, mesh_transport_status_t status, mesh_pdu_t * pdu); 88 static void (*mesh_control_message_handler)( mesh_transport_callback_type_t callback_type, mesh_transport_status_t status, mesh_pdu_t * pdu); 89 90 // 91 static int crypto_active; 92 static uint8_t application_nonce[13]; 93 static btstack_crypto_ccm_t ccm; 94 static mesh_transport_key_and_virtual_address_iterator_t mesh_transport_key_it; 95 96 // incoming segmented (mesh_segmented_pdu_t) or unsegmented (network_pdu_t) 97 static mesh_pdu_t * incoming_access_encrypted; 98 99 // multi-purpose union: segmented control reassembly, decrypted access pdu 100 static union { 101 mesh_control_pdu_t control; 102 mesh_access_pdu_t access; 103 } incoming_pdu_singleton; 104 105 // pointer to incoming_pdu_singleton.access 106 static mesh_access_pdu_t * incoming_access_decrypted; 107 108 // pointer to incoming_pdu_singleton.access 109 static mesh_control_pdu_t * incoming_control_pdu; 110 111 // incoming unsegmented (network) and segmented (transport) control and access messages 112 static btstack_linked_list_t upper_transport_incoming; 113 114 // outgoing unsegmented and segmented control and access messages 115 static btstack_linked_list_t upper_transport_outgoing; 116 117 // outgoing upper transport messages that have been sent to lower transport and wait for sent event 118 static btstack_linked_list_t upper_transport_outgoing_active; 119 120 // TODO: higher layer define used for assert 121 #define MESH_ACCESS_OPCODE_NOT_SET 0xFFFFFFFEu 122 123 static void mesh_print_hex(const char * name, const uint8_t * data, uint16_t len){ 124 printf("%-20s ", name); 125 printf_hexdump(data, len); 126 } 127 // static void mesh_print_x(const char * name, uint32_t value){ 128 // printf("%20s: 0x%x", name, (int) value); 129 // } 130 131 static void mesh_transport_key_and_virtual_address_iterator_init(mesh_transport_key_and_virtual_address_iterator_t *it, 132 uint16_t dst, uint16_t netkey_index, uint8_t akf, 133 uint8_t aid) { 134 printf("KEY_INIT: dst %04x, akf %x, aid %x\n", dst, akf, aid); 135 // config 136 it->dst = dst; 137 // init elements 138 it->key = NULL; 139 it->address = NULL; 140 // init element iterators 141 mesh_transport_key_aid_iterator_init(&it->key_it, netkey_index, akf, aid); 142 // init address iterator 143 if (mesh_network_address_virtual(it->dst)){ 144 mesh_virtual_address_iterator_init(&it->address_it, dst); 145 // get first key 146 if (mesh_transport_key_aid_iterator_has_more(&it->key_it)) { 147 it->key = mesh_transport_key_aid_iterator_get_next(&it->key_it); 148 } 149 } 150 } 151 152 // cartesian product: keys x addressses 153 static int mesh_transport_key_and_virtual_address_iterator_has_more(mesh_transport_key_and_virtual_address_iterator_t * it){ 154 if (mesh_network_address_virtual(it->dst)) { 155 // find next valid entry 156 while (true){ 157 if (mesh_virtual_address_iterator_has_more(&it->address_it)) return 1; 158 if (!mesh_transport_key_aid_iterator_has_more(&it->key_it)) return 0; 159 // get next key 160 it->key = mesh_transport_key_aid_iterator_get_next(&it->key_it); 161 mesh_virtual_address_iterator_init(&it->address_it, it->dst); 162 } 163 } else { 164 return mesh_transport_key_aid_iterator_has_more(&it->key_it); 165 } 166 } 167 168 static void mesh_transport_key_and_virtual_address_iterator_next(mesh_transport_key_and_virtual_address_iterator_t * it){ 169 if (mesh_network_address_virtual(it->dst)) { 170 it->address = mesh_virtual_address_iterator_get_next(&it->address_it); 171 } else { 172 it->key = mesh_transport_key_aid_iterator_get_next(&it->key_it); 173 } 174 } 175 176 // UPPER TRANSPORT 177 178 static void mesh_segmented_pdu_flatten(btstack_linked_list_t * segments, uint8_t segment_len, uint8_t * buffer) { 179 // assemble payload 180 btstack_linked_list_iterator_t it; 181 btstack_linked_list_iterator_init(&it, segments); 182 while (btstack_linked_list_iterator_has_next(&it)) { 183 mesh_network_pdu_t *segment = (mesh_network_pdu_t *) btstack_linked_list_iterator_next(&it); 184 btstack_assert(segment->pdu_header.pdu_type == MESH_PDU_TYPE_NETWORK); 185 uint8_t offset = 0; 186 while (offset < segment->len){ 187 uint8_t seg_o = segment->data[offset++]; 188 (void) memcpy(&buffer[seg_o * segment_len], &segment->data[offset], segment_len); 189 offset += segment_len; 190 } 191 } 192 } 193 194 static uint16_t mesh_upper_pdu_flatten(mesh_upper_transport_pdu_t * upper_pdu, uint8_t * buffer, uint16_t buffer_len) { 195 // assemble payload 196 btstack_linked_list_iterator_t it; 197 btstack_linked_list_iterator_init(&it, &upper_pdu->segments); 198 uint16_t offset = 0; 199 while (btstack_linked_list_iterator_has_next(&it)) { 200 mesh_network_pdu_t *segment = (mesh_network_pdu_t *) btstack_linked_list_iterator_next(&it); 201 btstack_assert(segment->pdu_header.pdu_type == MESH_PDU_TYPE_NETWORK); 202 btstack_assert((offset + segment->len) <= buffer_len); 203 (void) memcpy(&buffer[offset], segment->data, segment->len); 204 offset += segment->len; 205 } 206 return offset; 207 } 208 209 // store payload in provided list of network pdus 210 static void mesh_segmented_store_payload(const uint8_t * payload, uint16_t payload_len, btstack_linked_list_t * in_segments, btstack_linked_list_t * out_segments){ 211 uint16_t payload_offset = 0; 212 uint16_t bytes_current_segment = 0; 213 mesh_network_pdu_t * network_pdu = NULL; 214 while (payload_offset < payload_len){ 215 if (bytes_current_segment == 0){ 216 network_pdu = (mesh_network_pdu_t *) btstack_linked_list_pop(in_segments); 217 btstack_assert(network_pdu != NULL); 218 btstack_linked_list_add_tail(out_segments, (btstack_linked_item_t *) network_pdu); 219 bytes_current_segment = MESH_NETWORK_PAYLOAD_MAX; 220 } 221 uint16_t bytes_to_copy = btstack_min(bytes_current_segment, payload_len - payload_offset); 222 (void) memcpy(&network_pdu->data[network_pdu->len], &payload[payload_offset], bytes_to_copy); 223 bytes_current_segment -= bytes_to_copy; 224 network_pdu->len += bytes_to_copy; 225 payload_offset += bytes_to_copy; 226 } 227 } 228 229 // tries allocate and add enough segments to store payload of given size 230 static bool mesh_segmented_allocate_segments(btstack_linked_list_t * segments, uint16_t payload_len){ 231 uint16_t storage_size = btstack_linked_list_count(segments) * MESH_NETWORK_PAYLOAD_MAX; 232 while (storage_size < payload_len){ 233 mesh_network_pdu_t * network_pdu = mesh_network_pdu_get(); 234 if (network_pdu == NULL) break; 235 storage_size += MESH_NETWORK_PAYLOAD_MAX; 236 btstack_linked_list_add(segments, (btstack_linked_item_t *) network_pdu); 237 } 238 return (storage_size >= payload_len); 239 } 240 241 // stub lower transport 242 243 static void mesh_upper_transport_dump_pdus(const char *name, btstack_linked_list_t *list){ 244 printf("List: %s:\n", name); 245 btstack_linked_list_iterator_t it; 246 btstack_linked_list_iterator_init(&it, list); 247 while (btstack_linked_list_iterator_has_next(&it)){ 248 mesh_pdu_t * pdu = (mesh_pdu_t*) btstack_linked_list_iterator_next(&it); 249 printf("- %p\n", pdu); 250 // printf_hexdump( mesh_pdu_data(pdu), mesh_pdu_len(pdu)); 251 } 252 } 253 254 static void mesh_upper_transport_reset_pdus(btstack_linked_list_t *list){ 255 while (!btstack_linked_list_empty(list)){ 256 mesh_upper_transport_pdu_free((mesh_pdu_t *) btstack_linked_list_pop(list)); 257 } 258 } 259 260 void mesh_upper_transport_dump(void){ 261 mesh_upper_transport_dump_pdus("upper_transport_incoming", &upper_transport_incoming); 262 } 263 264 void mesh_upper_transport_reset(void){ 265 crypto_active = 0; 266 mesh_upper_transport_reset_pdus(&upper_transport_incoming); 267 } 268 269 static mesh_transport_key_t * mesh_upper_transport_get_outgoing_appkey(uint16_t netkey_index, uint16_t appkey_index){ 270 // Device Key is fixed 271 if (appkey_index == MESH_DEVICE_KEY_INDEX) { 272 return mesh_transport_key_get(appkey_index); 273 } 274 275 // Get key refresh state from subnet 276 mesh_subnet_t * subnet = mesh_subnet_get_by_netkey_index(netkey_index); 277 if (subnet == NULL) return NULL; 278 279 // identify old and new app keys for given appkey_index 280 mesh_transport_key_t * old_key = NULL; 281 mesh_transport_key_t * new_key = NULL; 282 mesh_transport_key_iterator_t it; 283 mesh_transport_key_iterator_init(&it, netkey_index); 284 while (mesh_transport_key_iterator_has_more(&it)){ 285 mesh_transport_key_t * transport_key = mesh_transport_key_iterator_get_next(&it); 286 if (transport_key->appkey_index != appkey_index) continue; 287 if (transport_key->old_key == 0) { 288 new_key = transport_key; 289 } else { 290 old_key = transport_key; 291 } 292 } 293 294 // if no key is marked as old, just use the current one 295 if (old_key == NULL) return new_key; 296 297 // use new key if it exists in phase two 298 if ((subnet->key_refresh == MESH_KEY_REFRESH_SECOND_PHASE) && (new_key != NULL)){ 299 return new_key; 300 } else { 301 return old_key; 302 } 303 } 304 305 static uint32_t iv_index_for_ivi_nid(uint8_t ivi_nid){ 306 // get IV Index and IVI 307 uint32_t iv_index = mesh_get_iv_index(); 308 int ivi = ivi_nid >> 7; 309 310 // if least significant bit differs, use previous IV Index 311 if ((iv_index & 1 ) ^ ivi){ 312 iv_index--; 313 } 314 return iv_index; 315 } 316 317 static void transport_segmented_setup_nonce(uint8_t * nonce, const mesh_pdu_t * pdu){ 318 mesh_access_pdu_t * access_pdu; 319 mesh_upper_transport_pdu_t * upper_pdu; 320 switch (pdu->pdu_type){ 321 case MESH_PDU_TYPE_ACCESS: 322 access_pdu = (mesh_access_pdu_t *) pdu; 323 nonce[1] = access_pdu->transmic_len == 8 ? 0x80 : 0x00; 324 big_endian_store_24(nonce, 2, access_pdu->seq); 325 big_endian_store_16(nonce, 5, access_pdu->src); 326 big_endian_store_16(nonce, 7, access_pdu->dst); 327 big_endian_store_32(nonce, 9, iv_index_for_ivi_nid(access_pdu->ivi_nid)); 328 break; 329 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 330 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 331 upper_pdu = (mesh_upper_transport_pdu_t *) pdu; 332 nonce[1] = upper_pdu->transmic_len == 8 ? 0x80 : 0x00; 333 // 'network header' 334 big_endian_store_24(nonce, 2, upper_pdu->seq); 335 big_endian_store_16(nonce, 5, upper_pdu->src); 336 big_endian_store_16(nonce, 7, upper_pdu->dst); 337 big_endian_store_32(nonce, 9, iv_index_for_ivi_nid(upper_pdu->ivi_nid)); 338 break; 339 default: 340 btstack_assert(0); 341 break; 342 } 343 } 344 345 static void transport_segmented_setup_application_nonce(uint8_t * nonce, const mesh_pdu_t * pdu){ 346 nonce[0] = 0x01; 347 transport_segmented_setup_nonce(nonce, pdu); 348 mesh_print_hex("AppNonce", nonce, 13); 349 } 350 351 static void transport_segmented_setup_device_nonce(uint8_t * nonce, const mesh_pdu_t * pdu){ 352 nonce[0] = 0x02; 353 transport_segmented_setup_nonce(nonce, pdu); 354 mesh_print_hex("DeviceNonce", nonce, 13); 355 } 356 357 static void mesh_upper_transport_process_access_message_done(mesh_access_pdu_t *access_pdu){ 358 crypto_active = 0; 359 btstack_assert((access_pdu->ctl_ttl & 0x80) == 0); 360 mesh_lower_transport_message_processed_by_higher_layer(incoming_access_encrypted); 361 incoming_access_encrypted = NULL; 362 incoming_access_decrypted = NULL; 363 mesh_upper_transport_run(); 364 } 365 366 static void mesh_upper_transport_process_control_message_done(mesh_control_pdu_t * control_pdu){ 367 crypto_active = 0; 368 incoming_control_pdu = NULL; 369 mesh_upper_transport_run(); 370 } 371 372 static void mesh_upper_transport_validate_access_message_ccm(void * arg){ 373 UNUSED(arg); 374 375 uint8_t * upper_transport_pdu = incoming_access_decrypted->data; 376 uint8_t upper_transport_pdu_len = incoming_access_decrypted->len - incoming_access_decrypted->transmic_len; 377 378 mesh_print_hex("Decrypted PDU", upper_transport_pdu, upper_transport_pdu_len); 379 380 // store TransMIC 381 uint8_t trans_mic[8]; 382 btstack_crypto_ccm_get_authentication_value(&ccm, trans_mic); 383 mesh_print_hex("TransMIC", trans_mic, incoming_access_decrypted->transmic_len); 384 385 if (memcmp(trans_mic, &upper_transport_pdu[upper_transport_pdu_len], incoming_access_decrypted->transmic_len) == 0){ 386 printf("TransMIC matches\n"); 387 388 // remove TransMIC from payload 389 incoming_access_decrypted->len -= incoming_access_decrypted->transmic_len; 390 391 // if virtual address, update dst to pseudo_dst 392 if (mesh_network_address_virtual(incoming_access_decrypted->dst)){ 393 incoming_access_decrypted->dst = mesh_transport_key_it.address->pseudo_dst; 394 } 395 396 // pass to upper layer 397 btstack_assert(mesh_access_message_handler != NULL); 398 mesh_pdu_t * pdu = (mesh_pdu_t*) incoming_access_decrypted; 399 mesh_access_message_handler(MESH_TRANSPORT_PDU_RECEIVED, MESH_TRANSPORT_STATUS_SUCCESS, pdu); 400 401 printf("\n"); 402 403 } else { 404 uint8_t akf = incoming_access_decrypted->akf_aid_control & 0x40; 405 if (akf){ 406 printf("TransMIC does not match, try next key\n"); 407 mesh_upper_transport_validate_access_message(); 408 } else { 409 printf("TransMIC does not match device key, done\n"); 410 // done 411 mesh_upper_transport_process_access_message_done(incoming_access_decrypted); 412 } 413 } 414 } 415 416 static void mesh_upper_transport_validate_access_message_digest(void * arg){ 417 UNUSED(arg); 418 uint8_t upper_transport_pdu_len = incoming_access_decrypted->len - incoming_access_decrypted->transmic_len; 419 uint8_t * upper_transport_pdu_data_in = incoming_access_decrypted->data; 420 uint8_t * upper_transport_pdu_data_out = incoming_access_decrypted->data; 421 422 mesh_network_pdu_t * unsegmented_pdu = NULL; 423 mesh_segmented_pdu_t * segmented_pdu = NULL; 424 switch (incoming_access_encrypted->pdu_type){ 425 case MESH_PDU_TYPE_SEGMENTED: 426 segmented_pdu = (mesh_segmented_pdu_t *) incoming_access_encrypted; 427 mesh_segmented_pdu_flatten(&segmented_pdu->segments, 12, upper_transport_pdu_data_out); 428 mesh_print_hex("Encrypted Payload:", upper_transport_pdu_data_out, upper_transport_pdu_len); 429 btstack_crypto_ccm_decrypt_block(&ccm, upper_transport_pdu_len, upper_transport_pdu_data_out, upper_transport_pdu_data_out, 430 &mesh_upper_transport_validate_access_message_ccm, NULL); 431 break; 432 case MESH_PDU_TYPE_UNSEGMENTED: 433 unsegmented_pdu = (mesh_network_pdu_t *) incoming_access_encrypted; 434 (void)memcpy(upper_transport_pdu_data_out, &unsegmented_pdu->data[10], incoming_access_decrypted->len); 435 btstack_crypto_ccm_decrypt_block(&ccm, upper_transport_pdu_len, upper_transport_pdu_data_out, upper_transport_pdu_data_out, 436 &mesh_upper_transport_validate_access_message_ccm, NULL); 437 break; 438 default: 439 btstack_assert(false); 440 break; 441 } 442 443 } 444 445 static void mesh_upper_transport_validate_access_message(void){ 446 uint8_t * upper_transport_pdu_data = incoming_access_decrypted->data; 447 uint8_t upper_transport_pdu_len = incoming_access_decrypted->len - incoming_access_decrypted->transmic_len; 448 449 if (!mesh_transport_key_and_virtual_address_iterator_has_more(&mesh_transport_key_it)){ 450 printf("No valid transport key found\n"); 451 mesh_upper_transport_process_access_message_done(incoming_access_decrypted); 452 return; 453 } 454 mesh_transport_key_and_virtual_address_iterator_next(&mesh_transport_key_it); 455 const mesh_transport_key_t * message_key = mesh_transport_key_it.key; 456 457 if (message_key->akf){ 458 transport_segmented_setup_application_nonce(application_nonce, (mesh_pdu_t *) incoming_access_decrypted); 459 } else { 460 transport_segmented_setup_device_nonce(application_nonce, (mesh_pdu_t *) incoming_access_decrypted); 461 } 462 463 // store application / device key index 464 mesh_print_hex("AppOrDevKey", message_key->key, 16); 465 incoming_access_decrypted->appkey_index = message_key->appkey_index; 466 467 mesh_print_hex("EncAccessPayload", upper_transport_pdu_data, upper_transport_pdu_len); 468 469 // decrypt ccm 470 crypto_active = 1; 471 uint16_t aad_len = 0; 472 if (mesh_network_address_virtual(incoming_access_decrypted->dst)){ 473 aad_len = 16; 474 } 475 btstack_crypto_ccm_init(&ccm, message_key->key, application_nonce, upper_transport_pdu_len, aad_len, incoming_access_decrypted->transmic_len); 476 477 if (aad_len){ 478 btstack_crypto_ccm_digest(&ccm, (uint8_t *) mesh_transport_key_it.address->label_uuid, aad_len, 479 &mesh_upper_transport_validate_access_message_digest, NULL); 480 } else { 481 mesh_upper_transport_validate_access_message_digest(NULL); 482 } 483 } 484 485 static void mesh_upper_transport_process_access_message(void){ 486 uint8_t * upper_transport_pdu = incoming_access_decrypted->data; 487 uint8_t upper_transport_pdu_len = incoming_access_decrypted->len - incoming_access_decrypted->transmic_len; 488 mesh_print_hex("Upper Transport pdu", upper_transport_pdu, upper_transport_pdu_len); 489 490 uint8_t aid = incoming_access_decrypted->akf_aid_control & 0x3f; 491 uint8_t akf = (incoming_access_decrypted->akf_aid_control & 0x40) >> 6; 492 493 printf("AKF: %u\n", akf); 494 printf("AID: %02x\n", aid); 495 496 mesh_transport_key_and_virtual_address_iterator_init(&mesh_transport_key_it, incoming_access_decrypted->dst, 497 incoming_access_decrypted->netkey_index, akf, aid); 498 mesh_upper_transport_validate_access_message(); 499 } 500 501 static void mesh_upper_transport_message_received(mesh_pdu_t * pdu){ 502 btstack_linked_list_add_tail(&upper_transport_incoming, (btstack_linked_item_t*) pdu); 503 mesh_upper_transport_run(); 504 } 505 506 static void mesh_upper_transport_send_access_segmented(mesh_upper_transport_pdu_t * upper_pdu){ 507 508 mesh_segmented_pdu_t * segmented_pdu = (mesh_segmented_pdu_t *) upper_pdu->lower_pdu; 509 segmented_pdu->pdu_header.pdu_type = MESH_PDU_TYPE_SEGMENTED; 510 511 // convert mesh_access_pdu_t into mesh_segmented_pdu_t 512 btstack_linked_list_t free_segments = segmented_pdu->segments; 513 segmented_pdu->segments = NULL; 514 mesh_segmented_store_payload(incoming_pdu_singleton.access.data, upper_pdu->len, &free_segments, &segmented_pdu->segments); 515 516 // copy meta 517 segmented_pdu->len = upper_pdu->len; 518 segmented_pdu->netkey_index = upper_pdu->netkey_index; 519 segmented_pdu->akf_aid_control = upper_pdu->akf_aid_control; 520 segmented_pdu->flags = upper_pdu->flags; 521 522 // setup segmented_pdu header 523 // (void)memcpy(segmented_pdu->network_header, upper_pdu->network_header, 9); 524 // TODO: use fields in mesh_segmented_pdu_t and setup network header in lower transport 525 segmented_pdu->ivi_nid = upper_pdu->ivi_nid; 526 segmented_pdu->ctl_ttl = upper_pdu->ctl_ttl; 527 segmented_pdu->seq = upper_pdu->seq; 528 segmented_pdu->src = upper_pdu->src; 529 segmented_pdu->dst = upper_pdu->dst; 530 531 switch (upper_pdu->transmic_len){ 532 case 4: 533 break; 534 case 8: 535 segmented_pdu->flags |= MESH_TRANSPORT_FLAG_TRANSMIC_64; 536 break; 537 default: 538 btstack_assert(false); 539 break; 540 } 541 542 // queue up 543 upper_pdu->lower_pdu = (mesh_pdu_t *) segmented_pdu; 544 btstack_linked_list_add(&upper_transport_outgoing_active, (btstack_linked_item_t *) upper_pdu); 545 546 mesh_lower_transport_send_pdu((mesh_pdu_t*) segmented_pdu); 547 } 548 549 static void mesh_upper_transport_send_access_unsegmented(mesh_upper_transport_pdu_t * upper_pdu){ 550 551 // provide segment 552 mesh_network_pdu_t * network_pdu = (mesh_network_pdu_t *) upper_pdu->lower_pdu; 553 554 // setup network pdu 555 network_pdu->pdu_header.pdu_type = MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS; 556 network_pdu->data[0] = upper_pdu->ivi_nid; 557 network_pdu->data[1] = upper_pdu->ctl_ttl; 558 big_endian_store_24(network_pdu->data, 2, upper_pdu->seq); 559 big_endian_store_16(network_pdu->data, 5, upper_pdu->src); 560 big_endian_store_16(network_pdu->data, 7, upper_pdu->dst); 561 network_pdu->netkey_index = upper_pdu->netkey_index; 562 563 // setup access message 564 network_pdu->data[9] = upper_pdu->akf_aid_control; 565 btstack_assert(upper_pdu->len < 15); 566 (void)memcpy(&network_pdu->data[10], &incoming_pdu_singleton.access.data, upper_pdu->len); 567 network_pdu->len = 10 + upper_pdu->len; 568 network_pdu->flags = 0; 569 570 // queue up 571 btstack_linked_list_add(&upper_transport_outgoing_active, (btstack_linked_item_t *) upper_pdu); 572 573 mesh_lower_transport_send_pdu((mesh_pdu_t*) network_pdu); 574 } 575 576 static void mesh_upper_transport_send_access_ccm(void * arg){ 577 crypto_active = 0; 578 579 mesh_upper_transport_pdu_t * upper_pdu = (mesh_upper_transport_pdu_t *) arg; 580 mesh_print_hex("EncAccessPayload", incoming_pdu_singleton.access.data, upper_pdu->len); 581 // store TransMIC 582 btstack_crypto_ccm_get_authentication_value(&ccm, &incoming_pdu_singleton.access.data[upper_pdu->len]); 583 mesh_print_hex("TransMIC", &incoming_pdu_singleton.access.data[upper_pdu->len], upper_pdu->transmic_len); 584 upper_pdu->len += upper_pdu->transmic_len; 585 mesh_print_hex("UpperTransportPDU", incoming_pdu_singleton.access.data, upper_pdu->len); 586 switch (upper_pdu->pdu_header.pdu_type){ 587 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 588 mesh_upper_transport_send_access_unsegmented(upper_pdu); 589 break; 590 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 591 mesh_upper_transport_send_access_segmented(upper_pdu); 592 break; 593 default: 594 btstack_assert(false); 595 } 596 } 597 598 static void mesh_upper_transport_send_access_digest(void *arg){ 599 mesh_upper_transport_pdu_t * upper_pdu = (mesh_upper_transport_pdu_t *) arg; 600 uint16_t access_pdu_len = upper_pdu->len; 601 btstack_crypto_ccm_encrypt_block(&ccm, access_pdu_len, incoming_pdu_singleton.access.data, incoming_pdu_singleton.access.data, 602 &mesh_upper_transport_send_access_ccm, upper_pdu); 603 } 604 605 static void mesh_upper_transport_send_access(mesh_upper_transport_pdu_t * upper_pdu){ 606 607 // if dst is virtual address, lookup label uuid and hash 608 uint16_t aad_len = 0; 609 mesh_virtual_address_t * virtual_address = NULL; 610 if (mesh_network_address_virtual(upper_pdu->dst)){ 611 virtual_address = mesh_virtual_address_for_pseudo_dst(upper_pdu->dst); 612 if (!virtual_address){ 613 printf("No virtual address register for pseudo dst %4x\n", upper_pdu->dst); 614 mesh_access_message_handler(MESH_TRANSPORT_PDU_SENT, MESH_TRANSPORT_STATUS_SEND_FAILED, (mesh_pdu_t *) upper_pdu); 615 return; 616 } 617 // printf("Using hash %4x with LabelUUID: ", virtual_address->hash); 618 // printf_hexdump(virtual_address->label_uuid, 16); 619 aad_len = 16; 620 upper_pdu->dst = virtual_address->hash; 621 } 622 623 // get app or device key 624 uint16_t appkey_index = upper_pdu->appkey_index; 625 const mesh_transport_key_t * appkey = mesh_upper_transport_get_outgoing_appkey(upper_pdu->netkey_index, appkey_index); 626 if (appkey == NULL){ 627 printf("AppKey %04x not found, drop message\n", appkey_index); 628 mesh_access_message_handler(MESH_TRANSPORT_PDU_SENT, MESH_TRANSPORT_STATUS_SEND_FAILED, (mesh_pdu_t *) upper_pdu); 629 return; 630 } 631 632 // reserve slot 633 mesh_lower_transport_reserve_slot(); 634 635 // reserve one sequence number, which is also used to encrypt access payload 636 uint32_t seq = mesh_sequence_number_next(); 637 upper_pdu->flags |= MESH_TRANSPORT_FLAG_SEQ_RESERVED; 638 upper_pdu->seq = seq; 639 640 // also reserves crypto_buffer 641 crypto_active = 1; 642 643 // flatten segmented pdu into crypto buffer 644 uint16_t payload_len = mesh_upper_pdu_flatten(upper_pdu, incoming_pdu_singleton.access.data, sizeof(incoming_pdu_singleton.access.data)); 645 btstack_assert(payload_len == upper_pdu->len); 646 647 // Dump PDU 648 printf("[+] Upper transport, send upper (un)segmented Access PDU - dest %04x, seq %06x\n", upper_pdu->dst, upper_pdu->seq); 649 mesh_print_hex("Access Payload", incoming_pdu_singleton.access.data, upper_pdu->len); 650 651 // setup nonce - uses dst, so after pseudo address translation 652 if (appkey_index == MESH_DEVICE_KEY_INDEX){ 653 transport_segmented_setup_device_nonce(application_nonce, (mesh_pdu_t *) upper_pdu); 654 } else { 655 transport_segmented_setup_application_nonce(application_nonce, (mesh_pdu_t *) upper_pdu); 656 } 657 658 // Dump key 659 mesh_print_hex("AppOrDevKey", appkey->key, 16); 660 661 // encrypt ccm 662 uint8_t transmic_len = upper_pdu->transmic_len; 663 uint16_t access_pdu_len = upper_pdu->len; 664 btstack_crypto_ccm_init(&ccm, appkey->key, application_nonce, access_pdu_len, aad_len, transmic_len); 665 if (virtual_address){ 666 mesh_print_hex("LabelUUID", virtual_address->label_uuid, 16); 667 btstack_crypto_ccm_digest(&ccm, virtual_address->label_uuid, 16, 668 &mesh_upper_transport_send_access_digest, upper_pdu); 669 } else { 670 mesh_upper_transport_send_access_digest(upper_pdu); 671 } 672 } 673 674 static void mesh_upper_transport_send_unsegmented_control_pdu(mesh_network_pdu_t * network_pdu){ 675 // reserve slot 676 mesh_lower_transport_reserve_slot(); 677 // reserve sequence number 678 uint32_t seq = mesh_sequence_number_next(); 679 mesh_network_pdu_set_seq(network_pdu, seq); 680 // Dump PDU 681 uint8_t opcode = network_pdu->data[9]; 682 printf("[+] Upper transport, send unsegmented Control PDU %p - seq %06x opcode %02x\n", network_pdu, seq, opcode); 683 mesh_print_hex("Access Payload", &network_pdu->data[10], network_pdu->len - 10); 684 685 // send 686 mesh_lower_transport_send_pdu((mesh_pdu_t *) network_pdu); 687 } 688 689 static void mesh_upper_transport_send_segmented_control_pdu(mesh_upper_transport_pdu_t * upper_pdu){ 690 // reserve slot 691 mesh_lower_transport_reserve_slot(); 692 // reserve sequence number 693 uint32_t seq = mesh_sequence_number_next(); 694 upper_pdu->flags |= MESH_TRANSPORT_FLAG_SEQ_RESERVED; 695 upper_pdu->seq = seq; 696 // Dump PDU 697 // uint8_t opcode = upper_pdu->data[0]; 698 // printf("[+] Upper transport, send segmented Control PDU %p - seq %06x opcode %02x\n", upper_pdu, seq, opcode); 699 // mesh_print_hex("Access Payload", &upper_pdu->data[1], upper_pdu->len - 1); 700 // send 701 mesh_segmented_pdu_t * segmented_pdu = (mesh_segmented_pdu_t *) upper_pdu->lower_pdu; 702 segmented_pdu->pdu_header.pdu_type = MESH_PDU_TYPE_SEGMENTED; 703 704 // lend segments to lower transport pdu 705 segmented_pdu->segments = upper_pdu->segments; 706 upper_pdu->segments = NULL; 707 708 // copy meta 709 segmented_pdu->len = upper_pdu->len; 710 segmented_pdu->netkey_index = upper_pdu->netkey_index; 711 segmented_pdu->akf_aid_control = upper_pdu->akf_aid_control; 712 segmented_pdu->flags = upper_pdu->flags; 713 714 btstack_assert((upper_pdu->flags & MESH_TRANSPORT_FLAG_TRANSMIC_64) == 0); 715 716 // setup segmented_pdu header 717 // TODO: use fields in mesh_segmented_pdu_t and setup network header in lower transport 718 segmented_pdu->ivi_nid = upper_pdu->ivi_nid; 719 segmented_pdu->ctl_ttl = upper_pdu->ctl_ttl; 720 segmented_pdu->seq = upper_pdu->seq; 721 segmented_pdu->src = upper_pdu->src; 722 segmented_pdu->dst = upper_pdu->dst; 723 724 // queue up 725 upper_pdu->lower_pdu = (mesh_pdu_t *) segmented_pdu; 726 btstack_linked_list_add(&upper_transport_outgoing_active, (btstack_linked_item_t *) upper_pdu); 727 728 mesh_lower_transport_send_pdu((mesh_pdu_t *) segmented_pdu); 729 } 730 731 static void mesh_upper_transport_run(void){ 732 733 while(!btstack_linked_list_empty(&upper_transport_incoming)){ 734 735 if (crypto_active) return; 736 737 // get next message 738 mesh_pdu_t * pdu = (mesh_pdu_t *) btstack_linked_list_pop(&upper_transport_incoming); 739 mesh_network_pdu_t * network_pdu; 740 mesh_segmented_pdu_t * segmented_pdu; 741 switch (pdu->pdu_type){ 742 case MESH_PDU_TYPE_UNSEGMENTED: 743 network_pdu = (mesh_network_pdu_t *) pdu; 744 // control? 745 if (mesh_network_control(network_pdu)) { 746 747 incoming_control_pdu = &incoming_pdu_singleton.control; 748 incoming_control_pdu->pdu_header.pdu_type = MESH_PDU_TYPE_CONTROL; 749 incoming_control_pdu->len = network_pdu->len; 750 incoming_control_pdu->netkey_index = network_pdu->netkey_index; 751 752 uint8_t * lower_transport_pdu = mesh_network_pdu_data(network_pdu); 753 754 incoming_control_pdu->akf_aid_control = lower_transport_pdu[0]; 755 incoming_control_pdu->len = network_pdu->len - 10; // 9 header + 1 opcode 756 (void)memcpy(incoming_control_pdu->data, &lower_transport_pdu[1], incoming_control_pdu->len); 757 758 // copy meta data into encrypted pdu buffer 759 incoming_control_pdu->ivi_nid = network_pdu->data[0]; 760 incoming_control_pdu->ctl_ttl = network_pdu->data[1]; 761 incoming_control_pdu->seq = big_endian_read_24(network_pdu->data, 2); 762 incoming_control_pdu->src = big_endian_read_16(network_pdu->data, 5); 763 incoming_control_pdu->dst = big_endian_read_16(network_pdu->data, 7); 764 765 mesh_print_hex("Assembled payload", incoming_control_pdu->data, incoming_control_pdu->len); 766 767 // free mesh message 768 mesh_lower_transport_message_processed_by_higher_layer(pdu); 769 770 btstack_assert(mesh_control_message_handler != NULL); 771 mesh_pdu_t * pdu = (mesh_pdu_t*) incoming_control_pdu; 772 mesh_control_message_handler(MESH_TRANSPORT_PDU_RECEIVED, MESH_TRANSPORT_STATUS_SUCCESS, pdu); 773 774 } else { 775 776 incoming_access_encrypted = (mesh_pdu_t *) network_pdu; 777 778 incoming_access_decrypted = &incoming_pdu_singleton.access; 779 incoming_access_decrypted->pdu_header.pdu_type = MESH_PDU_TYPE_ACCESS; 780 incoming_access_decrypted->netkey_index = network_pdu->netkey_index; 781 incoming_access_decrypted->transmic_len = 4; 782 incoming_access_decrypted->akf_aid_control = network_pdu->data[9]; 783 incoming_access_decrypted->len = network_pdu->len - 10; // 9 header + 1 AID 784 incoming_access_decrypted->ivi_nid = network_pdu->data[0]; 785 incoming_access_decrypted->ctl_ttl = network_pdu->data[1]; 786 incoming_access_decrypted->seq = big_endian_read_24(network_pdu->data, 2); 787 incoming_access_decrypted->src = big_endian_read_16(network_pdu->data, 5); 788 incoming_access_decrypted->dst = big_endian_read_16(network_pdu->data, 7); 789 // (void)memcpy(incoming_access_decrypted->network_header, network_pdu->data, 9); 790 791 mesh_upper_transport_process_access_message(); 792 } 793 break; 794 case MESH_PDU_TYPE_SEGMENTED: 795 segmented_pdu = (mesh_segmented_pdu_t *) pdu; 796 uint8_t ctl = segmented_pdu->ctl_ttl >> 7; 797 if (ctl){ 798 incoming_control_pdu= &incoming_pdu_singleton.control; 799 incoming_control_pdu->pdu_header.pdu_type = MESH_PDU_TYPE_CONTROL; 800 801 // flatten 802 mesh_segmented_pdu_flatten(&segmented_pdu->segments, 8, incoming_control_pdu->data); 803 804 // copy meta data into encrypted pdu buffer 805 incoming_control_pdu->flags = 0; 806 incoming_control_pdu->len = segmented_pdu->len; 807 incoming_control_pdu->netkey_index = segmented_pdu->netkey_index; 808 incoming_control_pdu->akf_aid_control = segmented_pdu->akf_aid_control; 809 incoming_access_decrypted->ivi_nid = segmented_pdu->ivi_nid; 810 incoming_access_decrypted->ctl_ttl = segmented_pdu->ctl_ttl; 811 incoming_access_decrypted->seq = segmented_pdu->seq; 812 incoming_access_decrypted->src = segmented_pdu->src; 813 incoming_access_decrypted->dst = segmented_pdu->dst; 814 815 mesh_print_hex("Assembled payload", incoming_control_pdu->data, incoming_control_pdu->len); 816 817 // free mesh message 818 mesh_lower_transport_message_processed_by_higher_layer((mesh_pdu_t *)segmented_pdu); 819 820 btstack_assert(mesh_control_message_handler != NULL); 821 mesh_pdu_t * pdu = (mesh_pdu_t*) incoming_control_pdu; 822 mesh_access_message_handler(MESH_TRANSPORT_PDU_RECEIVED, MESH_TRANSPORT_STATUS_SUCCESS, pdu); 823 824 } else { 825 826 incoming_access_encrypted = (mesh_pdu_t *) segmented_pdu; 827 828 incoming_access_decrypted = &incoming_pdu_singleton.access; 829 incoming_access_decrypted->pdu_header.pdu_type = MESH_PDU_TYPE_ACCESS; 830 incoming_access_decrypted->len = segmented_pdu->len; 831 incoming_access_decrypted->netkey_index = segmented_pdu->netkey_index; 832 incoming_access_decrypted->transmic_len = ((segmented_pdu->flags & MESH_TRANSPORT_FLAG_TRANSMIC_64) != 0) ? 8 : 4; 833 incoming_access_decrypted->akf_aid_control = segmented_pdu->akf_aid_control; 834 incoming_access_decrypted->ivi_nid = segmented_pdu->ivi_nid; 835 incoming_access_decrypted->ctl_ttl = segmented_pdu->ctl_ttl; 836 incoming_access_decrypted->seq = segmented_pdu->seq; 837 incoming_access_decrypted->src = segmented_pdu->src; 838 incoming_access_decrypted->dst = segmented_pdu->dst; 839 840 mesh_upper_transport_process_access_message(); 841 } 842 break; 843 default: 844 btstack_assert(0); 845 break; 846 } 847 } 848 849 while (!btstack_linked_list_empty(&upper_transport_outgoing)){ 850 851 if (crypto_active) break; 852 853 mesh_pdu_t * pdu = (mesh_pdu_t *) btstack_linked_list_get_first_item(&upper_transport_outgoing); 854 if (mesh_lower_transport_can_send_to_dest(mesh_pdu_dst(pdu)) == 0) break; 855 856 mesh_upper_transport_pdu_t * upper_pdu; 857 mesh_segmented_pdu_t * segmented_pdu; 858 bool ok; 859 860 switch (pdu->pdu_type){ 861 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_CONTROL: 862 // control pdus can go through directly 863 btstack_assert(mesh_pdu_ctl(pdu) != 0); 864 (void) btstack_linked_list_pop(&upper_transport_outgoing); 865 mesh_upper_transport_send_unsegmented_control_pdu((mesh_network_pdu_t *) pdu); 866 break; 867 case MESH_PDU_TYPE_UPPER_SEGMENTED_CONTROL: 868 // control pdus can go through directly 869 btstack_assert(mesh_pdu_ctl(pdu) != 0); 870 (void) btstack_linked_list_pop(&upper_transport_outgoing); 871 mesh_upper_transport_send_segmented_control_pdu((mesh_upper_transport_pdu_t *) pdu); 872 break; 873 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 874 // segmented access pdus required a mesh-segmented-pdu 875 upper_pdu = (mesh_upper_transport_pdu_t *) pdu; 876 if (upper_pdu->lower_pdu == NULL){ 877 segmented_pdu = btstack_memory_mesh_segmented_pdu_get(); 878 } 879 if (segmented_pdu == NULL) break; 880 upper_pdu->lower_pdu = (mesh_pdu_t *) segmented_pdu; 881 segmented_pdu->pdu_header.pdu_type = MESH_PDU_TYPE_SEGMENTED; 882 // and a mesh-network-pdu for each segment in upper pdu 883 ok = mesh_segmented_allocate_segments(&segmented_pdu->segments, upper_pdu->len + upper_pdu->transmic_len); 884 if (!ok) break; 885 // all buffers available, get started 886 (void) btstack_linked_list_pop(&upper_transport_outgoing); 887 mesh_upper_transport_send_access(upper_pdu); 888 break; 889 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 890 // unsegmented access pdus require a single mesh-network-dpu 891 upper_pdu = (mesh_upper_transport_pdu_t *) pdu; 892 if (upper_pdu->lower_pdu == NULL){ 893 upper_pdu->lower_pdu = (mesh_pdu_t *) mesh_network_pdu_get(); 894 } 895 if (upper_pdu->lower_pdu == NULL) break; 896 (void) btstack_linked_list_pop(&upper_transport_outgoing); 897 mesh_upper_transport_send_access((mesh_upper_transport_pdu_t *) pdu); 898 break; 899 default: 900 btstack_assert(false); 901 break; 902 } 903 } 904 } 905 906 static mesh_upper_transport_pdu_t * mesh_upper_transport_find_pdu_for_lower(mesh_pdu_t * pdu_to_find){ 907 btstack_linked_list_iterator_t it; 908 btstack_linked_list_iterator_init(&it, &upper_transport_outgoing_active); 909 mesh_upper_transport_pdu_t * upper_pdu; 910 while (btstack_linked_list_iterator_has_next(&it)){ 911 mesh_pdu_t * mesh_pdu = (mesh_pdu_t *) btstack_linked_list_iterator_next(&it); 912 switch (mesh_pdu->pdu_type){ 913 case MESH_PDU_TYPE_UPPER_SEGMENTED_CONTROL: 914 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 915 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 916 upper_pdu = (mesh_upper_transport_pdu_t *) mesh_pdu; 917 if (upper_pdu->lower_pdu == pdu_to_find){ 918 btstack_linked_list_iterator_remove(&it); 919 return upper_pdu; 920 } 921 break; 922 default: 923 break; 924 } 925 } 926 return NULL; 927 } 928 929 static void mesh_upper_transport_pdu_handler(mesh_transport_callback_type_t callback_type, mesh_transport_status_t status, mesh_pdu_t * pdu){ 930 mesh_upper_transport_pdu_t * upper_pdu; 931 mesh_network_pdu_t * network_pdu; 932 mesh_segmented_pdu_t * segmented_pdu; 933 switch (callback_type){ 934 case MESH_TRANSPORT_PDU_RECEIVED: 935 mesh_upper_transport_message_received(pdu); 936 break; 937 case MESH_TRANSPORT_PDU_SENT: 938 switch (pdu->pdu_type){ 939 case MESH_PDU_TYPE_SEGMENTED: 940 // try to find in outgoing active 941 upper_pdu = mesh_upper_transport_find_pdu_for_lower(pdu); 942 btstack_assert(upper_pdu != NULL); 943 segmented_pdu = (mesh_segmented_pdu_t *) pdu; 944 // free chunks 945 while (!btstack_linked_list_empty(&segmented_pdu->segments)){ 946 mesh_network_pdu_t * network_pdu = (mesh_network_pdu_t *) btstack_linked_list_pop(&segmented_pdu->segments); 947 mesh_network_pdu_free(network_pdu); 948 } 949 // free segmented pdu 950 btstack_memory_mesh_segmented_pdu_free(segmented_pdu); 951 // TODO: free segmented_pdu 952 upper_pdu->lower_pdu = NULL; 953 switch (upper_pdu->pdu_header.pdu_type){ 954 case MESH_PDU_TYPE_UPPER_SEGMENTED_CONTROL: 955 mesh_control_message_handler(callback_type, status, (mesh_pdu_t *) upper_pdu); 956 break; 957 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 958 mesh_access_message_handler(callback_type, status, (mesh_pdu_t *) upper_pdu); 959 break; 960 default: 961 btstack_assert(false); 962 break; 963 } 964 break; 965 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 966 // find corresponding upper transport pdu and free single segment 967 upper_pdu = mesh_upper_transport_find_pdu_for_lower(pdu); 968 btstack_assert(upper_pdu != NULL); 969 btstack_assert(upper_pdu->lower_pdu == (mesh_pdu_t *) pdu); 970 mesh_network_pdu_free((mesh_network_pdu_t *) pdu); 971 upper_pdu->lower_pdu = NULL; 972 mesh_access_message_handler(callback_type, status, (mesh_pdu_t*) upper_pdu); 973 break; 974 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_CONTROL: 975 mesh_access_message_handler(callback_type, status, pdu); 976 break; 977 default: 978 btstack_assert(false); 979 break; 980 } 981 mesh_upper_transport_run(); 982 break; 983 default: 984 break; 985 } 986 } 987 988 void mesh_upper_transport_pdu_free(mesh_pdu_t * pdu){ 989 btstack_assert(pdu != NULL); 990 mesh_network_pdu_t * network_pdu; 991 mesh_segmented_pdu_t * message_pdu; 992 mesh_upper_transport_pdu_t * upper_pdu; 993 switch (pdu->pdu_type) { 994 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_CONTROL: 995 case MESH_PDU_TYPE_NETWORK: 996 network_pdu = (mesh_network_pdu_t *) pdu; 997 mesh_network_pdu_free(network_pdu); 998 break; 999 case MESH_PDU_TYPE_SEGMENTED: 1000 message_pdu = (mesh_segmented_pdu_t *) pdu; 1001 mesh_segmented_pdu_free(message_pdu); 1002 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 1003 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 1004 case MESH_PDU_TYPE_UPPER_SEGMENTED_CONTROL: 1005 upper_pdu = (mesh_upper_transport_pdu_t *) pdu; 1006 while (upper_pdu->segments) { 1007 mesh_network_pdu_t *segment = (mesh_network_pdu_t *) btstack_linked_list_pop(&upper_pdu->segments); 1008 mesh_network_pdu_free(segment); 1009 } 1010 btstack_memory_mesh_upper_transport_pdu_free(upper_pdu); 1011 break; 1012 default: 1013 btstack_assert(false); 1014 break; 1015 } 1016 } 1017 1018 void mesh_upper_transport_message_processed_by_higher_layer(mesh_pdu_t * pdu){ 1019 crypto_active = 0; 1020 switch (pdu->pdu_type){ 1021 case MESH_PDU_TYPE_ACCESS: 1022 mesh_upper_transport_process_access_message_done((mesh_access_pdu_t *) pdu); 1023 case MESH_PDU_TYPE_CONTROL: 1024 mesh_upper_transport_process_control_message_done((mesh_control_pdu_t *) pdu); 1025 break; 1026 default: 1027 btstack_assert(0); 1028 break; 1029 } 1030 } 1031 1032 void mesh_upper_transport_send_access_pdu(mesh_pdu_t *pdu){ 1033 switch (pdu->pdu_type){ 1034 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 1035 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 1036 break; 1037 default: 1038 btstack_assert(false); 1039 break; 1040 } 1041 1042 btstack_assert(((mesh_upper_transport_pdu_t *) pdu)->lower_pdu == NULL); 1043 1044 btstack_linked_list_add_tail(&upper_transport_outgoing, (btstack_linked_item_t*) pdu); 1045 mesh_upper_transport_run(); 1046 } 1047 1048 void mesh_upper_transport_send_control_pdu(mesh_pdu_t * pdu){ 1049 switch (pdu->pdu_type){ 1050 case MESH_PDU_TYPE_UPPER_SEGMENTED_CONTROL: 1051 break; 1052 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_CONTROL: 1053 btstack_assert( ((mesh_network_pdu_t *) pdu)->len >= 9); 1054 break; 1055 default: 1056 btstack_assert(false); 1057 break; 1058 } 1059 1060 btstack_linked_list_add_tail(&upper_transport_outgoing, (btstack_linked_item_t*) pdu); 1061 mesh_upper_transport_run(); 1062 } 1063 1064 static uint8_t mesh_upper_transport_setup_unsegmented_control_pdu(mesh_network_pdu_t * network_pdu, uint16_t netkey_index, uint8_t ttl, uint16_t src, uint16_t dest, uint8_t opcode, 1065 const uint8_t * control_pdu_data, uint16_t control_pdu_len){ 1066 1067 if (control_pdu_len > 11) return 1; 1068 1069 const mesh_network_key_t * network_key = mesh_network_key_list_get(netkey_index); 1070 if (!network_key) return 1; 1071 1072 uint8_t transport_pdu_data[12]; 1073 transport_pdu_data[0] = opcode; 1074 (void)memcpy(&transport_pdu_data[1], control_pdu_data, control_pdu_len); 1075 uint16_t transport_pdu_len = control_pdu_len + 1; 1076 1077 // setup network_pdu 1078 mesh_network_setup_pdu(network_pdu, netkey_index, network_key->nid, 1, ttl, 0, src, dest, transport_pdu_data, transport_pdu_len); 1079 1080 return 0; 1081 } 1082 1083 static uint8_t mesh_upper_transport_setup_segmented_control_pdu(mesh_upper_transport_pdu_t * upper_pdu, uint16_t netkey_index, uint8_t ttl, uint16_t src, uint16_t dest, uint8_t opcode, 1084 const uint8_t * control_pdu_data, uint16_t control_pdu_len){ 1085 1086 if (control_pdu_len > 256) return 1; 1087 1088 const mesh_network_key_t * network_key = mesh_network_key_list_get(netkey_index); 1089 if (!network_key) return 1; 1090 1091 upper_pdu->ivi_nid = network_key->nid | ((mesh_get_iv_index_for_tx() & 1) << 7); 1092 upper_pdu->ctl_ttl = ttl; 1093 upper_pdu->src = src; 1094 upper_pdu->dst = dest; 1095 upper_pdu->transmic_len = 0; // no TransMIC for control 1096 upper_pdu->netkey_index = netkey_index; 1097 upper_pdu->akf_aid_control = opcode; 1098 1099 // allocate segments 1100 btstack_linked_list_t free_segments = NULL; 1101 bool ok = mesh_segmented_allocate_segments( &free_segments, control_pdu_len); 1102 if (!ok) return 1; 1103 // store control pdu 1104 mesh_segmented_store_payload(control_pdu_data, control_pdu_len, &free_segments, &upper_pdu->segments); 1105 upper_pdu->len = control_pdu_len; 1106 return 0; 1107 } 1108 1109 uint8_t mesh_upper_transport_setup_control_pdu(mesh_pdu_t * pdu, uint16_t netkey_index, 1110 uint8_t ttl, uint16_t src, uint16_t dest, uint8_t opcode, const uint8_t * control_pdu_data, uint16_t control_pdu_len){ 1111 switch (pdu->pdu_type){ 1112 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_CONTROL: 1113 return mesh_upper_transport_setup_unsegmented_control_pdu((mesh_network_pdu_t *) pdu, netkey_index, ttl, src, dest, opcode, control_pdu_data, control_pdu_len); 1114 case MESH_PDU_TYPE_UPPER_SEGMENTED_CONTROL: 1115 return mesh_upper_transport_setup_segmented_control_pdu((mesh_upper_transport_pdu_t *) pdu, netkey_index, ttl, src, dest, opcode, control_pdu_data, control_pdu_len); 1116 default: 1117 btstack_assert(0); 1118 return 1; 1119 } 1120 } 1121 1122 static uint8_t mesh_upper_transport_setup_segmented_access_pdu_header(mesh_access_pdu_t * access_pdu, uint16_t netkey_index, 1123 uint16_t appkey_index, uint8_t ttl, uint16_t src, uint16_t dest, uint8_t szmic){ 1124 1125 // get app or device key 1126 const mesh_transport_key_t *appkey; 1127 appkey = mesh_transport_key_get(appkey_index); 1128 if (appkey == NULL) { 1129 printf("[!] Upper transport, setup segmented Access PDU - appkey_index %x unknown\n", appkey_index); 1130 return 1; 1131 } 1132 uint8_t akf_aid = (appkey->akf << 6) | appkey->aid; 1133 1134 // lookup network by netkey_index 1135 const mesh_network_key_t *network_key = mesh_network_key_list_get(netkey_index); 1136 if (!network_key) return 1; 1137 if (network_key == NULL) { 1138 printf("[!] Upper transport, setup segmented Access PDU - netkey_index %x unknown\n", appkey_index); 1139 return 1; 1140 } 1141 1142 const uint8_t trans_mic_len = szmic ? 8 : 4; 1143 1144 // store in transport pdu 1145 access_pdu->transmic_len = trans_mic_len; 1146 access_pdu->netkey_index = netkey_index; 1147 access_pdu->appkey_index = appkey_index; 1148 access_pdu->akf_aid_control = akf_aid; 1149 uint8_t iviNid = network_key->nid | ((mesh_get_iv_index_for_tx() & 1) << 7); 1150 access_pdu->ivi_nid = iviNid; 1151 access_pdu->src = src; 1152 access_pdu->dst = dest; 1153 access_pdu->ctl_ttl = ttl; 1154 return 0; 1155 } 1156 1157 static uint8_t mesh_upper_transport_setup_upper_access_pdu_header(mesh_upper_transport_pdu_t * upper_pdu, uint16_t netkey_index, 1158 uint16_t appkey_index, uint8_t ttl, uint16_t src, uint16_t dest, uint8_t szmic){ 1159 1160 // get app or device key 1161 const mesh_transport_key_t *appkey; 1162 appkey = mesh_transport_key_get(appkey_index); 1163 if (appkey == NULL) { 1164 printf("[!] Upper transport, setup segmented Access PDU - appkey_index %x unknown\n", appkey_index); 1165 return 1; 1166 } 1167 uint8_t akf_aid = (appkey->akf << 6) | appkey->aid; 1168 1169 // lookup network by netkey_index 1170 const mesh_network_key_t *network_key = mesh_network_key_list_get(netkey_index); 1171 if (!network_key) return 1; 1172 if (network_key == NULL) { 1173 printf("[!] Upper transport, setup segmented Access PDU - netkey_index %x unknown\n", appkey_index); 1174 return 1; 1175 } 1176 1177 const uint8_t trans_mic_len = szmic ? 8 : 4; 1178 1179 // store in transport pdu 1180 upper_pdu->ivi_nid = network_key->nid | ((mesh_get_iv_index_for_tx() & 1) << 7); 1181 upper_pdu->ctl_ttl = ttl; 1182 upper_pdu->src = src; 1183 upper_pdu->dst = dest; 1184 upper_pdu->transmic_len = trans_mic_len; 1185 upper_pdu->netkey_index = netkey_index; 1186 upper_pdu->appkey_index = appkey_index; 1187 upper_pdu->akf_aid_control = akf_aid; 1188 return 0; 1189 } 1190 1191 static uint8_t mesh_upper_transport_setup_upper_access_pdu(mesh_upper_transport_pdu_t * upper_pdu, uint16_t netkey_index, uint16_t appkey_index, uint8_t ttl, uint16_t src, uint16_t dest, 1192 uint8_t szmic, const uint8_t * access_pdu_data, uint8_t access_pdu_len){ 1193 int status = mesh_upper_transport_setup_upper_access_pdu_header(upper_pdu, netkey_index, appkey_index, ttl, src, 1194 dest, szmic); 1195 if (status) return status; 1196 1197 // allocate segments 1198 btstack_linked_list_t free_segments = NULL; 1199 bool ok = mesh_segmented_allocate_segments( &free_segments, access_pdu_len); 1200 if (!ok) return 1; 1201 // store control pdu 1202 mesh_segmented_store_payload(access_pdu_data, access_pdu_len, &free_segments, &upper_pdu->segments); 1203 upper_pdu->len = access_pdu_len; 1204 return 0; 1205 } 1206 1207 1208 uint8_t mesh_upper_transport_setup_access_pdu_header(mesh_pdu_t * pdu, uint16_t netkey_index, uint16_t appkey_index, 1209 uint8_t ttl, uint16_t src, uint16_t dest, uint8_t szmic){ 1210 switch (pdu->pdu_type){ 1211 case MESH_PDU_TYPE_ACCESS: 1212 return mesh_upper_transport_setup_segmented_access_pdu_header((mesh_access_pdu_t *) pdu, netkey_index, appkey_index, ttl, src, dest, szmic); 1213 default: 1214 btstack_assert(false); 1215 return 1; 1216 } 1217 } 1218 1219 uint8_t mesh_upper_transport_setup_access_pdu(mesh_pdu_t * pdu, uint16_t netkey_index, uint16_t appkey_index, 1220 uint8_t ttl, uint16_t src, uint16_t dest, uint8_t szmic, 1221 const uint8_t * access_pdu_data, uint8_t access_pdu_len){ 1222 switch (pdu->pdu_type){ 1223 case MESH_PDU_TYPE_UPPER_SEGMENTED_ACCESS: 1224 case MESH_PDU_TYPE_UPPER_UNSEGMENTED_ACCESS: 1225 return mesh_upper_transport_setup_upper_access_pdu((mesh_upper_transport_pdu_t *) pdu, netkey_index, 1226 appkey_index, ttl, src, dest, szmic, access_pdu_data, 1227 access_pdu_len); 1228 default: 1229 btstack_assert(false); 1230 return 1; 1231 } 1232 } 1233 1234 void mesh_upper_transport_register_access_message_handler(void (*callback)(mesh_transport_callback_type_t callback_type, mesh_transport_status_t status, mesh_pdu_t * pdu)) { 1235 mesh_access_message_handler = callback; 1236 } 1237 1238 void mesh_upper_transport_register_control_message_handler(void (*callback)(mesh_transport_callback_type_t callback_type, mesh_transport_status_t status, mesh_pdu_t * pdu)){ 1239 mesh_control_message_handler = callback; 1240 } 1241 1242 void mesh_upper_transport_init(){ 1243 mesh_lower_transport_set_higher_layer_handler(&mesh_upper_transport_pdu_handler); 1244 } 1245 1246 1247 void mesh_upper_transport_message_init(mesh_upper_transport_builder_t * builder, mesh_pdu_type_t pdu_type) { 1248 btstack_assert(builder != NULL); 1249 1250 builder->pdu = btstack_memory_mesh_upper_transport_pdu_get(); 1251 if (!builder->pdu) return; 1252 1253 builder->segment = NULL; 1254 builder->pdu->pdu_header.pdu_type = pdu_type; 1255 builder->pdu->transmic_len = 4; 1256 builder->pdu->ack_opcode = MESH_ACCESS_OPCODE_NOT_SET; 1257 } 1258 1259 1260 void mesh_upper_transport_message_add_data(mesh_upper_transport_builder_t * builder, const uint8_t * data, uint16_t data_len){ 1261 btstack_assert(builder != NULL); 1262 1263 if (builder->pdu == NULL) return; 1264 1265 uint16_t bytes_current_segment = 0; 1266 if (builder->segment){ 1267 bytes_current_segment = MESH_NETWORK_PAYLOAD_MAX - builder->segment->len; 1268 } 1269 while (data_len > 0){ 1270 if (bytes_current_segment == 0){ 1271 builder->segment = (mesh_network_pdu_t *) mesh_network_pdu_get(); 1272 if (builder->segment == NULL) { 1273 mesh_upper_transport_pdu_free((mesh_pdu_t *) builder->pdu); 1274 builder->pdu = NULL; 1275 return; 1276 } 1277 btstack_linked_list_add_tail(&builder->pdu->segments, (btstack_linked_item_t *) builder->segment); 1278 bytes_current_segment = MESH_NETWORK_PAYLOAD_MAX; 1279 } 1280 uint16_t bytes_to_copy = btstack_min(bytes_current_segment, data_len); 1281 (void) memcpy(&builder->segment->data[builder->segment->len], data, bytes_to_copy); 1282 builder->segment->len += bytes_to_copy; 1283 bytes_current_segment -= bytes_to_copy; 1284 data += bytes_to_copy; 1285 data_len -= bytes_to_copy; 1286 } 1287 } 1288 1289 void mesh_upper_transport_message_add_uint8(mesh_upper_transport_builder_t * builder, uint8_t value){ 1290 mesh_upper_transport_message_add_data(builder, &value, 1); 1291 } 1292 1293 void mesh_upper_transport_message_add_uint16(mesh_upper_transport_builder_t * builder, uint16_t value){ 1294 uint8_t buffer[2]; 1295 little_endian_store_16(buffer, 0, value); 1296 mesh_upper_transport_message_add_data(builder, buffer, sizeof(buffer)); 1297 } 1298 1299 void mesh_upper_transport_message_add_uint24(mesh_upper_transport_builder_t * builder, uint16_t value){ 1300 uint8_t buffer[3]; 1301 little_endian_store_24(buffer, 0, value); 1302 mesh_upper_transport_message_add_data(builder, buffer, sizeof(buffer)); 1303 } 1304 1305 void mesh_upper_transport_message_add_uint32(mesh_upper_transport_builder_t * builder, uint16_t value){ 1306 uint8_t buffer[4]; 1307 little_endian_store_32(buffer, 0, value); 1308 mesh_upper_transport_message_add_data(builder, buffer, sizeof(buffer)); 1309 } 1310 1311 mesh_upper_transport_pdu_t * mesh_upper_transport_message_finalize(mesh_upper_transport_builder_t * builder){ 1312 return builder->pdu; 1313 } 1314