2 * Wi-Fi Protected Setup
3 * Copyright (c) 2007-2009, Jouni Malinen <j@w1.fi>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
9 * Alternatively, this software may be distributed under the terms of BSD
12 * See README and COPYING for more details.
21 * enum wsc_op_code - EAP-WSC OP-Code values
24 WSC_UPnP = 0 /* No OP Code in UPnP transport */,
34 struct upnp_wps_device_sm;
38 * struct wps_credential - WPS Credential
40 * @ssid_len: Length of SSID
41 * @auth_type: Authentication Type (WPS_AUTH_OPEN, .. flags)
42 * @encr_type: Encryption Type (WPS_ENCR_NONE, .. flags)
45 * @key_len: Key length in octets
46 * @mac_addr: MAC address of the Credential receiver
47 * @cred_attr: Unparsed Credential attribute data (used only in cred_cb());
48 * this may be %NULL, if not used
49 * @cred_attr_len: Length of cred_attr in octets
51 struct wps_credential {
59 u8 mac_addr[ETH_ALEN];
64 #define WPS_DEV_TYPE_LEN 8
65 #define WPS_DEV_TYPE_BUFSIZE 21
68 * struct wps_device_data - WPS Device Data
69 * @mac_addr: Device MAC address
70 * @device_name: Device Name (0..32 octets encoded in UTF-8)
71 * @manufacturer: Manufacturer (0..64 octets encoded in UTF-8)
72 * @model_name: Model Name (0..32 octets encoded in UTF-8)
73 * @model_number: Model Number (0..32 octets encoded in UTF-8)
74 * @serial_number: Serial Number (0..32 octets encoded in UTF-8)
75 * @pri_dev_type: Primary Device Type
76 * @os_version: OS Version
77 * @rf_bands: RF bands (WPS_RF_24GHZ, WPS_RF_50GHZ flags)
78 * @p2p: Whether the device is a P2P device
80 struct wps_device_data {
81 u8 mac_addr[ETH_ALEN];
87 u8 pri_dev_type[WPS_DEV_TYPE_LEN];
94 struct oob_conf_data {
96 OOB_METHOD_UNKNOWN = 0,
101 struct wpabuf *dev_password;
102 struct wpabuf *pubkey_hash;
106 * struct wps_config - WPS configuration for a single registration protocol run
110 * wps - Pointer to long term WPS context
112 struct wps_context *wps;
115 * registrar - Whether this end is a Registrar
120 * pin - Enrollee Device Password (%NULL for Registrar or PBC)
125 * pin_len - Length on pin in octets
130 * pbc - Whether this is protocol run uses PBC
135 * assoc_wps_ie: (Re)AssocReq WPS IE (in AP; %NULL if not AP)
137 const struct wpabuf *assoc_wps_ie;
140 * new_ap_settings - New AP settings (%NULL if not used)
142 * This parameter provides new AP settings when using a wireless
143 * stations as a Registrar to configure the AP. %NULL means that AP
144 * will not be reconfigured, i.e., the station will only learn the
145 * current AP settings by using AP PIN.
147 const struct wps_credential *new_ap_settings;
150 * peer_addr: MAC address of the peer in AP; %NULL if not AP
155 * use_psk_key - Use PSK format key in Credential
157 * Force PSK format to be used instead of ASCII passphrase when
158 * building Credential for an Enrollee. The PSK value is set in
159 * struct wpa_context::psk.
164 struct wps_data * wps_init(const struct wps_config *cfg);
166 void wps_deinit(struct wps_data *data);
169 * enum wps_process_res - WPS message processing result
171 enum wps_process_res {
173 * WPS_DONE - Processing done
178 * WPS_CONTINUE - Processing continues
183 * WPS_FAILURE - Processing failed
188 * WPS_PENDING - Processing continues, but waiting for an external
189 * event (e.g., UPnP message from an external Registrar)
193 enum wps_process_res wps_process_msg(struct wps_data *wps,
194 enum wsc_op_code op_code,
195 const struct wpabuf *msg);
197 struct wpabuf * wps_get_msg(struct wps_data *wps, enum wsc_op_code *op_code);
199 int wps_is_selected_pbc_registrar(const struct wpabuf *msg);
200 int wps_is_selected_pin_registrar(const struct wpabuf *msg);
201 int wps_ap_priority_compar(const struct wpabuf *wps_a,
202 const struct wpabuf *wps_b);
203 int wps_is_addr_authorized(const struct wpabuf *msg, const u8 *addr,
205 const u8 * wps_get_uuid_e(const struct wpabuf *msg);
207 struct wpabuf * wps_build_assoc_req_ie(enum wps_request_type req_type);
208 struct wpabuf * wps_build_assoc_resp_ie(void);
209 struct wpabuf * wps_build_probe_req_ie(int pbc, struct wps_device_data *dev,
211 enum wps_request_type req_type);
215 * struct wps_registrar_config - WPS Registrar configuration
217 struct wps_registrar_config {
219 * new_psk_cb - Callback for new PSK
220 * @ctx: Higher layer context data (cb_ctx)
221 * @mac_addr: MAC address of the Enrollee
223 * @psk_len: The length of psk in octets
224 * Returns: 0 on success, -1 on failure
226 * This callback is called when a new per-device PSK is provisioned.
228 int (*new_psk_cb)(void *ctx, const u8 *mac_addr, const u8 *psk,
232 * set_ie_cb - Callback for WPS IE changes
233 * @ctx: Higher layer context data (cb_ctx)
234 * @beacon_ie: WPS IE for Beacon
235 * @probe_resp_ie: WPS IE for Probe Response
236 * Returns: 0 on success, -1 on failure
238 * This callback is called whenever the WPS IE in Beacon or Probe
239 * Response frames needs to be changed (AP only). Callee is responsible
240 * for freeing the buffers.
242 int (*set_ie_cb)(void *ctx, struct wpabuf *beacon_ie,
243 struct wpabuf *probe_resp_ie);
246 * pin_needed_cb - Callback for requesting a PIN
247 * @ctx: Higher layer context data (cb_ctx)
248 * @uuid_e: UUID-E of the unknown Enrollee
249 * @dev: Device Data from the unknown Enrollee
251 * This callback is called whenever an unknown Enrollee requests to use
252 * PIN method and a matching PIN (Device Password) is not found in
255 void (*pin_needed_cb)(void *ctx, const u8 *uuid_e,
256 const struct wps_device_data *dev);
259 * reg_success_cb - Callback for reporting successful registration
260 * @ctx: Higher layer context data (cb_ctx)
261 * @mac_addr: MAC address of the Enrollee
262 * @uuid_e: UUID-E of the Enrollee
264 * This callback is called whenever an Enrollee completes registration
267 void (*reg_success_cb)(void *ctx, const u8 *mac_addr,
271 * set_sel_reg_cb - Callback for reporting selected registrar changes
272 * @ctx: Higher layer context data (cb_ctx)
273 * @sel_reg: Whether the Registrar is selected
274 * @dev_passwd_id: Device Password ID to indicate with method or
275 * specific password the Registrar intends to use
276 * @sel_reg_config_methods: Bit field of active config methods
278 * This callback is called whenever the Selected Registrar state
279 * changes (e.g., a new PIN becomes available or PBC is invoked). This
280 * callback is only used by External Registrar implementation;
281 * set_ie_cb() is used by AP implementation in similar caes, but it
282 * provides the full WPS IE data instead of just the minimal Registrar
285 void (*set_sel_reg_cb)(void *ctx, int sel_reg, u16 dev_passwd_id,
286 u16 sel_reg_config_methods);
289 * enrollee_seen_cb - Callback for reporting Enrollee based on ProbeReq
290 * @ctx: Higher layer context data (cb_ctx)
291 * @addr: MAC address of the Enrollee
292 * @uuid_e: UUID of the Enrollee
293 * @pri_dev_type: Primary device type
294 * @config_methods: Config Methods
295 * @dev_password_id: Device Password ID
296 * @request_type: Request Type
297 * @dev_name: Device Name (if available)
299 void (*enrollee_seen_cb)(void *ctx, const u8 *addr, const u8 *uuid_e,
300 const u8 *pri_dev_type, u16 config_methods,
301 u16 dev_password_id, u8 request_type,
302 const char *dev_name);
305 * cb_ctx: Higher layer context data for Registrar callbacks
310 * skip_cred_build: Do not build credential
312 * This option can be used to disable internal code that builds
313 * Credential attribute into M8 based on the current network
314 * configuration and Enrollee capabilities. The extra_cred data will
315 * then be used as the Credential(s).
320 * extra_cred: Additional Credential attribute(s)
322 * This optional data (set to %NULL to disable) can be used to add
323 * Credential attribute(s) for other networks into M8. If
324 * skip_cred_build is set, this will also override the automatically
325 * generated Credential attribute.
327 const u8 *extra_cred;
330 * extra_cred_len: Length of extra_cred in octets
332 size_t extra_cred_len;
335 * disable_auto_conf - Disable auto-configuration on first registration
337 * By default, the AP that is started in not configured state will
338 * generate a random PSK and move to configured state when the first
339 * registration protocol run is completed successfully. This option can
340 * be used to disable this functionality and leave it up to an external
341 * program to take care of configuration. This requires the extra_cred
342 * to be set with a suitable Credential and skip_cred_build being used.
344 int disable_auto_conf;
347 * static_wep_only - Whether the BSS supports only static WEP
354 * enum wps_event - WPS event types
358 * WPS_EV_M2D - M2D received (Registrar did not know us)
363 * WPS_EV_FAIL - Registration failed
368 * WPS_EV_SUCCESS - Registration succeeded
373 * WPS_EV_PWD_AUTH_FAIL - Password authentication failed
375 WPS_EV_PWD_AUTH_FAIL,
378 * WPS_EV_PBC_OVERLAP - PBC session overlap detected
383 * WPS_EV_PBC_TIMEOUT - PBC walktime expired before protocol run start
388 * WPS_EV_ER_AP_ADD - ER: AP added
393 * WPS_EV_ER_AP_REMOVE - ER: AP removed
398 * WPS_EV_ER_ENROLLEE_ADD - ER: Enrollee added
400 WPS_EV_ER_ENROLLEE_ADD,
403 * WPS_EV_ER_ENROLLEE_REMOVE - ER: Enrollee removed
405 WPS_EV_ER_ENROLLEE_REMOVE,
408 * WPS_EV_ER_AP_SETTINGS - ER: AP Settings learned
410 WPS_EV_ER_AP_SETTINGS
414 * union wps_event_data - WPS event data
416 union wps_event_data {
418 * struct wps_event_m2d - M2D event data
420 struct wps_event_m2d {
422 const u8 *manufacturer;
423 size_t manufacturer_len;
424 const u8 *model_name;
425 size_t model_name_len;
426 const u8 *model_number;
427 size_t model_number_len;
428 const u8 *serial_number;
429 size_t serial_number_len;
432 const u8 *primary_dev_type; /* 8 octets */
438 * struct wps_event_fail - Registration failure information
439 * @msg: enum wps_msg_type
441 struct wps_event_fail {
445 struct wps_event_pwd_auth_fail {
450 struct wps_event_er_ap {
453 const char *friendly_name;
454 const char *manufacturer;
455 const char *manufacturer_url;
456 const char *model_description;
457 const char *model_name;
458 const char *model_number;
459 const char *model_url;
460 const char *serial_number;
462 const u8 *pri_dev_type;
466 struct wps_event_er_enrollee {
472 const u8 *pri_dev_type;
473 const char *dev_name;
474 const char *manufacturer;
475 const char *model_name;
476 const char *model_number;
477 const char *serial_number;
480 struct wps_event_er_ap_settings {
482 const struct wps_credential *cred;
487 * struct upnp_pending_message - Pending PutWLANResponse messages
488 * @next: Pointer to next pending message or %NULL
489 * @addr: NewWLANEventMAC
491 * @type: Message Type
493 struct upnp_pending_message {
494 struct upnp_pending_message *next;
497 enum wps_msg_type type;
501 * struct wps_context - Long term WPS context data
503 * This data is stored at the higher layer Authenticator or Supplicant data
504 * structures and it is maintained over multiple registration protocol runs.
508 * ap - Whether the local end is an access point
513 * registrar - Pointer to WPS registrar data from wps_registrar_init()
515 struct wps_registrar *registrar;
518 * wps_state - Current WPS state
520 enum wps_state wps_state;
523 * ap_setup_locked - Whether AP setup is locked (only used at AP)
535 * This SSID is used by the Registrar to fill in information for
536 * Credentials. In addition, AP uses it when acting as an Enrollee to
537 * notify Registrar of the current configuration.
542 * ssid_len - Length of ssid in octets
547 * dev - Own WPS device data
549 struct wps_device_data dev;
552 * oob_conf - OOB Config data
554 struct oob_conf_data oob_conf;
557 * oob_dev_pw_id - OOB Device password id
562 * dh_ctx - Context data for Diffie-Hellman operation
567 * dh_privkey - Diffie-Hellman private key
569 struct wpabuf *dh_privkey;
572 * dh_pubkey_oob - Diffie-Hellman public key
574 struct wpabuf *dh_pubkey;
577 * config_methods - Enabled configuration methods
579 * Bit field of WPS_CONFIG_*
584 * encr_types - Enabled encryption types (bit field of WPS_ENCR_*)
589 * auth_types - Authentication types (bit field of WPS_AUTH_*)
594 * network_key - The current Network Key (PSK) or %NULL to generate new
596 * If %NULL, Registrar will generate per-device PSK. In addition, AP
597 * uses this when acting as an Enrollee to notify Registrar of the
598 * current configuration.
600 * When using WPA/WPA2-Person, this key can be either the ASCII
601 * passphrase (8..63 characters) or the 32-octet PSK (64 hex
602 * characters). When this is set to the ASCII passphrase, the PSK can
603 * be provided in the psk buffer and used per-Enrollee to control which
604 * key type is included in the Credential (e.g., to reduce calculation
605 * need on low-powered devices by provisioning PSK while still allowing
606 * other devices to get the passphrase).
611 * network_key_len - Length of network_key in octets
613 size_t network_key_len;
616 * psk - The current network PSK
618 * This optional value can be used to provide the current PSK if
619 * network_key is set to the ASCII passphrase.
624 * psk_set - Whether psk value is set
629 * ap_settings - AP Settings override for M7 (only used at AP)
631 * If %NULL, AP Settings attributes will be generated based on the
632 * current network configuration.
637 * ap_settings_len - Length of ap_settings in octets
639 size_t ap_settings_len;
642 * friendly_name - Friendly Name (required for UPnP)
647 * manufacturer_url - Manufacturer URL (optional for UPnP)
649 char *manufacturer_url;
652 * model_description - Model Description (recommended for UPnP)
654 char *model_description;
657 * model_url - Model URL (optional for UPnP)
662 * upc - Universal Product Code (optional for UPnP)
667 * cred_cb - Callback to notify that new Credentials were received
668 * @ctx: Higher layer context data (cb_ctx)
669 * @cred: The received Credential
670 * Return: 0 on success, -1 on failure
672 int (*cred_cb)(void *ctx, const struct wps_credential *cred);
675 * event_cb - Event callback (state information about progress)
676 * @ctx: Higher layer context data (cb_ctx)
680 void (*event_cb)(void *ctx, enum wps_event event,
681 union wps_event_data *data);
684 * cb_ctx: Higher layer context data for callbacks
688 struct upnp_wps_device_sm *wps_upnp;
690 /* Pending messages from UPnP PutWLANResponse */
691 struct upnp_pending_message *upnp_msgs;
694 struct oob_device_data {
697 void * (*init_func)(struct wps_context *, struct oob_device_data *,
699 struct wpabuf * (*read_func)(void *);
700 int (*write_func)(void *, struct wpabuf *);
701 void (*deinit_func)(void *);
704 struct oob_nfc_device_data {
705 int (*init_func)(char *);
706 void * (*read_func)(size_t *);
707 int (*write_func)(void *, size_t);
708 void (*deinit_func)(void);
711 struct wps_registrar *
712 wps_registrar_init(struct wps_context *wps,
713 const struct wps_registrar_config *cfg);
714 void wps_registrar_deinit(struct wps_registrar *reg);
715 int wps_registrar_add_pin(struct wps_registrar *reg, const u8 *addr,
716 const u8 *uuid, const u8 *pin, size_t pin_len,
718 int wps_registrar_invalidate_pin(struct wps_registrar *reg, const u8 *uuid);
719 int wps_registrar_unlock_pin(struct wps_registrar *reg, const u8 *uuid);
720 int wps_registrar_button_pushed(struct wps_registrar *reg);
721 void wps_registrar_probe_req_rx(struct wps_registrar *reg, const u8 *addr,
722 const struct wpabuf *wps_data);
723 int wps_registrar_update_ie(struct wps_registrar *reg);
724 int wps_registrar_get_info(struct wps_registrar *reg, const u8 *addr,
725 char *buf, size_t buflen);
727 unsigned int wps_pin_checksum(unsigned int pin);
728 unsigned int wps_pin_valid(unsigned int pin);
729 unsigned int wps_generate_pin(void);
730 void wps_free_pending_msgs(struct upnp_pending_message *msgs);
732 struct oob_device_data * wps_get_oob_device(char *device_type);
733 struct oob_nfc_device_data * wps_get_oob_nfc_device(char *device_name);
734 int wps_get_oob_method(char *method);
735 int wps_process_oob(struct wps_context *wps, struct oob_device_data *oob_dev,
737 int wps_attr_text(struct wpabuf *data, char *buf, char *end);
739 struct wps_er * wps_er_init(struct wps_context *wps, const char *ifname,
741 void wps_er_refresh(struct wps_er *er);
742 void wps_er_deinit(struct wps_er *er, void (*cb)(void *ctx), void *ctx);
743 void wps_er_set_sel_reg(struct wps_er *er, int sel_reg, u16 dev_passwd_id,
744 u16 sel_reg_config_methods);
745 int wps_er_pbc(struct wps_er *er, const u8 *uuid);
746 int wps_er_learn(struct wps_er *er, const u8 *uuid, const u8 *pin,
748 int wps_er_config(struct wps_er *er, const u8 *uuid, const u8 *pin,
749 size_t pin_len, const struct wps_credential *cred);
751 int wps_dev_type_str2bin(const char *str, u8 dev_type[WPS_DEV_TYPE_LEN]);
752 char * wps_dev_type_bin2str(const u8 dev_type[WPS_DEV_TYPE_LEN], char *buf,
754 void uuid_gen_mac_addr(const u8 *mac_addr, u8 *uuid);
755 u16 wps_config_methods_str2bin(const char *str);
757 #ifdef CONFIG_WPS_STRICT
758 int wps_validate_beacon(const struct wpabuf *wps_ie);
759 int wps_validate_beacon_probe_resp(const struct wpabuf *wps_ie, int probe);
760 int wps_validate_probe_req(const struct wpabuf *wps_ie);
761 int wps_validate_assoc_req(const struct wpabuf *wps_ie);
762 int wps_validate_assoc_resp(const struct wpabuf *wps_ie);
763 int wps_validate_m1(const struct wpabuf *tlvs);
764 int wps_validate_m2(const struct wpabuf *tlvs);
765 int wps_validate_m2d(const struct wpabuf *tlvs);
766 int wps_validate_m3(const struct wpabuf *tlvs);
767 int wps_validate_m4(const struct wpabuf *tlvs);
768 int wps_validate_m4_encr(const struct wpabuf *tlvs);
769 int wps_validate_m5(const struct wpabuf *tlvs);
770 int wps_validate_m5_encr(const struct wpabuf *tlvs);
771 int wps_validate_m6(const struct wpabuf *tlvs);
772 int wps_validate_m6_encr(const struct wpabuf *tlvs);
773 int wps_validate_m7(const struct wpabuf *tlvs);
774 int wps_validate_m7_encr(const struct wpabuf *tlvs, int ap);
775 int wps_validate_m8(const struct wpabuf *tlvs);
776 int wps_validate_m8_encr(const struct wpabuf *tlvs, int ap);
777 int wps_validate_wsc_ack(const struct wpabuf *tlvs);
778 int wps_validate_wsc_nack(const struct wpabuf *tlvs);
779 int wps_validate_wsc_done(const struct wpabuf *tlvs);
780 int wps_validate_upnp_set_selected_registrar(const struct wpabuf *tlvs);
781 #else /* CONFIG_WPS_STRICT */
782 static inline int wps_validate_beacon(const struct wpabuf *wps_ie){
786 static inline int wps_validate_beacon_probe_resp(const struct wpabuf *wps_ie,
792 static inline int wps_validate_probe_req(const struct wpabuf *wps_ie)
797 static inline int wps_validate_assoc_req(const struct wpabuf *wps_ie)
802 static inline int wps_validate_assoc_resp(const struct wpabuf *wps_ie)
807 static inline int wps_validate_m1(const struct wpabuf *tlvs)
812 static inline int wps_validate_m2(const struct wpabuf *tlvs)
817 static inline int wps_validate_m2d(const struct wpabuf *tlvs)
822 static inline int wps_validate_m3(const struct wpabuf *tlvs)
827 static inline int wps_validate_m4(const struct wpabuf *tlvs)
832 static inline int wps_validate_m4_encr(const struct wpabuf *tlvs)
837 static inline int wps_validate_m5(const struct wpabuf *tlvs)
842 static inline int wps_validate_m5_encr(const struct wpabuf *tlvs)
847 static inline int wps_validate_m6(const struct wpabuf *tlvs)
852 static inline int wps_validate_m6_encr(const struct wpabuf *tlvs)
857 static inline int wps_validate_m7(const struct wpabuf *tlvs)
862 static inline int wps_validate_m7_encr(const struct wpabuf *tlvs, int ap)
867 static inline int wps_validate_m8(const struct wpabuf *tlvs)
872 static inline int wps_validate_m8_encr(const struct wpabuf *tlvs, int ap)
877 static inline int wps_validate_wsc_ack(const struct wpabuf *tlvs)
882 static inline int wps_validate_wsc_nack(const struct wpabuf *tlvs)
887 static inline int wps_validate_wsc_done(const struct wpabuf *tlvs)
892 static inline int wps_validate_upnp_set_selected_registrar(
893 const struct wpabuf *tlvs)
897 #endif /* CONFIG_WPS_STRICT */