summaryrefslogtreecommitdiffstats
path: root/src/knx/ssl/qknxcurve25519.h
blob: 2d34e8ba23ac1eb70105fe66929fc73231871ca7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
/******************************************************************************
**
** Copyright (C) 2018 The Qt Company Ltd.
** Contact: https://www.qt.io/licensing/
**
** This file is part of the QtKnx module.
**
** $QT_BEGIN_LICENSE:GPL$
** Commercial License Usage
** Licensees holding valid commercial Qt licenses may use this file in
** accordance with the commercial license agreement provided with the
** Software or, alternatively, in accordance with the terms contained in
** a written agreement between you and The Qt Company. For licensing terms
** and conditions see https://www.qt.io/terms-conditions. For further
** information use the contact form at https://www.qt.io/contact-us.
**
** GNU General Public License Usage
** Alternatively, this file may be used under the terms of the GNU
** General Public License version 3 or (at your option) any later version
** approved by the KDE Free Qt Foundation. The licenses are as published by
** the Free Software Foundation and appearing in the file LICENSE.GPL3
** included in the packaging of this file. Please review the following
** information to ensure the GNU General Public License requirements will
** be met: https://www.gnu.org/licenses/gpl-3.0.html.
**
** $QT_END_LICENSE$
**
******************************************************************************/

#ifndef QKNXCURVE25519_H
#define QKNXCURVE25519_H

#include <QtCore/qshareddata.h>

#include <QtKnx/qknxbytearray.h>
#include <QtKnx/qtknxglobal.h>
#include <QtKnx/qknxnetipframe.h>

QT_BEGIN_NAMESPACE

class QKnxCurve25519KeyData;
class QKnxCurve25519PrivateKey;

class Q_KNX_EXPORT QKnxCurve25519PublicKey final
{
public:
    QKnxCurve25519PublicKey();
    ~QKnxCurve25519PublicKey();

    QKnxCurve25519PublicKey(const QKnxCurve25519PrivateKey &key);

    bool isNull() const;
    bool isValid() const;

    QKnxByteArray bytes() const;
    static QKnxCurve25519PublicKey fromBytes(const QKnxByteArray &data, quint16 index = 0);

    QKnxCurve25519PublicKey(const QKnxCurve25519PublicKey &other);
    QKnxCurve25519PublicKey &operator=(const QKnxCurve25519PublicKey &other);

private:
    friend class QKnxCryptographicEngine;
    QSharedDataPointer<QKnxCurve25519KeyData> d_ptr;
};

class Q_KNX_EXPORT QKnxCurve25519PrivateKey final
{
public:
    QKnxCurve25519PrivateKey();
    ~QKnxCurve25519PrivateKey();

    bool isNull() const;
    bool isValid() const;

    QKnxByteArray bytes() const;
    static QKnxCurve25519PrivateKey fromBytes(const QKnxByteArray &data, quint16 index = 0);

    QKnxCurve25519PrivateKey(const QKnxCurve25519PrivateKey &other);
    QKnxCurve25519PrivateKey &operator=(const QKnxCurve25519PrivateKey &other);

private:
    friend class QKnxCurve25519PublicKey;
    friend class QKnxCryptographicEngine;
    QSharedDataPointer<QKnxCurve25519KeyData> d_ptr;
};

class Q_KNX_EXPORT QKnxCryptographicEngine final
{
public:
    QKnxCryptographicEngine() = delete;
    ~QKnxCryptographicEngine() = default;

    static QKnxByteArray sharedSecret(const QKnxCurve25519PublicKey &pub,
                                      const QKnxCurve25519PrivateKey &priv);

    static QKnxByteArray sessionKey(const QKnxByteArray &sharedSecret);
    static QKnxByteArray sessionKey(const QKnxCurve25519PublicKey &pub,
                                    const QKnxCurve25519PrivateKey &priv);

    static QKnxByteArray userPasswordHash(const QByteArray &password);
    static QKnxByteArray deviceAuthenticationCodeHash(const QByteArray &password);

    static QKnxByteArray XOR(const QKnxByteArray &l, const QKnxByteArray &r, bool adjust = true);

    static QKnxByteArray calculateMessageAuthenticationCode(const QKnxByteArray &key,
                                                            const QKnxNetIpFrameHeader &header,
                                                            quint16 id,
                                                            const QKnxByteArray &data,
                                                            quint48 sequenceNumber = 0,
                                                            const QKnxByteArray &serialNumber = {},
                                                            quint16 messageTag = 0);

    static QKnxByteArray encryptSecureWrapperPayload(const QKnxByteArray &key,
                                                     const QKnxNetIpFrame &frame,
                                                     quint48 sequenceNumber,
                                                     const QKnxByteArray &serialNumber,
                                                     quint16 messageTag);

    static QKnxByteArray decryptSecureWrapperPayload(const QKnxByteArray &key,
                                                     const QKnxByteArray &frame,
                                                     quint48 sequenceNumber,
                                                     const QKnxByteArray &serialNumber,
                                                     quint16 messageTag);

    static QKnxByteArray encryptMessageAuthenticationCode(const QKnxByteArray &key,
                                                          const QKnxByteArray &mac,
                                                          quint48 sequenceNumber = 0,
                                                          const QKnxByteArray &serialNumber = {},
                                                          quint16 messageTag = 0);

    static QKnxByteArray decryptMessageAuthenticationCode(const QKnxByteArray &key,
                                                          const QKnxByteArray &data,
                                                          quint48 sequenceNumber = 0,
                                                          const QKnxByteArray &serialNumber = {},
                                                          quint16 messageTag = 0);

    static QKnxByteArray pkcs5Pbkdf2HmacSha256(const QByteArray &password, const QKnxByteArray &salt,
        qint32 iterations, quint8 derivedKeyLength);
};

QT_END_NAMESPACE

#endif