Marcelo Aquino
28c4f3f19e
* Signing support with MAX_PAYLOAD>32 Support in the signing backends to handle configurations where MAX_PAYLOAD is more than 32 bytes. Fixes #748 * Support big message signatures Support for signing messages larger than 32 bytes. This is not fully testable with the current version of the library but the change would add theoretical support for signing any sized messages. Fixes #749 * Have gw properly indicate whitelisting preferences If the gateway hold a signing whitelist, inform all nodes of this requirement and not just nodes that hold whitelists themselves. Fixes #806 * Harden security The flag MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL has been removed. Gateway will now request signatures from everyone by default. In addition to this, no nodes in the network will allow clearing of signing/whitelisting preferences by OTA commands by default. If the old behaviour is needed (suitable for gradual signing roll out and development purposes) a new flag, MY_SIGNING_WEAK_SECURITY can be set. Fixes #807 * Signing debug messages rewritten All signing related debug has been rewritten to better match other core debug printouts. Also, backends are updated to have a smaller implementation delta. * Simplified signing option implemented Enable by MY_SIGNING_SIMPLE_PASSWD. Signing, and signing requirements will be enabled, as will encryption. Whitelisting is optional. The value provided to MY_SIGNING_SIMPLE_PASSWD is used as HMAC and AES key. Whitelists use the first 8 bytes of the password and the ninth byte from the node ID as serial. Password is required to be at least 8 characters wide. It is zero padded if it is not long enough to cover the AES (16 bytes) and HMAC (32 bytes) keys. It is not recommended to have a password shorter than 32 bytes, and there is no need for a password longer than 32 bytes. * Add documentation section for signing debug * Add nRF5 encryption to simple signing option * Restructure MySigning documentation * Minor fixes for Linux
143 lines
4.0 KiB
C
143 lines
4.0 KiB
C
/**
|
|
* The MySensors Arduino library handles the wireless radio link and protocol
|
|
* between your home built sensors/actuators and HA controller of choice.
|
|
* The sensors forms a self healing radio network with optional repeaters. Each
|
|
* repeater and gateway builds a routing tables in EEPROM which keeps track of
|
|
* the
|
|
* network topology allowing messages to be routed to nodes.
|
|
*
|
|
* Created by Henrik Ekblad <henrik.ekblad@mysensors.org>
|
|
* Copyright (C) 2013-2015 Sensnology AB
|
|
* Copyright (C) 2017 Frank Holtz
|
|
* Full contributor list:
|
|
* https://github.com/mysensors/Arduino/graphs/contributors
|
|
*
|
|
* Documentation: http://www.mysensors.org
|
|
* Support Forum: http://forum.mysensors.org
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* version 2 as published by the Free Software Foundation.
|
|
*/
|
|
#ifndef MyHwNRF5_h
|
|
#define MyHwNRF5_h
|
|
|
|
#include "MyHw.h"
|
|
|
|
#ifdef __cplusplus
|
|
#include <Arduino.h>
|
|
#endif
|
|
|
|
// Define NRF5_SOFTDEVICE when SoftDevice found
|
|
#if defined(S110) || defined(S130) || defined(S132)
|
|
#ifndef NRF5_SOFTDEVICE
|
|
#define NRF5_SOFTDEVICE
|
|
#endif
|
|
#endif
|
|
|
|
#include "drivers/NRF5/nrf5_wiring_digital.c"
|
|
#include "drivers/NRF5/wdt.h"
|
|
#include "drivers/NVM/NVRAM.h"
|
|
#include "drivers/NVM/VirtualPage.h"
|
|
#include <avr/dtostrf.h>
|
|
#include <nrf.h>
|
|
|
|
#define snprintf_P(s, f, ...) snprintf((s), (f), __VA_ARGS__)
|
|
#define printf_P printf
|
|
|
|
#define MIN(a,b) min(a,b)
|
|
#define MAX(a,b) max(a,b)
|
|
|
|
// Define these as macros to save valuable space
|
|
#define hwDigitalWrite(__pin, __value) digitalWrite(__pin, __value)
|
|
#define hwDigitalRead(__pin) digitalRead(__pin)
|
|
#define hwPinMode(__pin, __value) nrf5_pinMode(__pin, __value)
|
|
#define hwMillis() millis()
|
|
|
|
bool hwInit();
|
|
void hwWatchdogReset();
|
|
void hwReboot();
|
|
void hwReadConfigBlock(void *buf, void *adr, size_t length);
|
|
void hwWriteConfigBlock(void *buf, void *adr, size_t length);
|
|
void hwWriteConfig(int adr, uint8_t value);
|
|
uint8_t hwReadConfig(int adr);
|
|
void hwRandomNumberInit();
|
|
ssize_t hwGetentropy(void *__buffer, size_t __length);
|
|
#define MY_HW_HAS_GETRANDOM
|
|
|
|
#ifndef MY_SERIALDEVICE
|
|
#define MY_SERIALDEVICE Serial
|
|
#endif
|
|
|
|
/**
|
|
* Disable all interrupts.
|
|
* Helper function for MY_CRITICAL_SECTION.
|
|
*/
|
|
static __inline__ uint8_t __disableIntsRetVal(void)
|
|
{
|
|
__disable_irq();
|
|
return 1;
|
|
}
|
|
|
|
/**
|
|
* Restore priority mask register.
|
|
* Helper function for MY_CRITICAL_SECTION.
|
|
*/
|
|
static __inline__ void __priMaskRestore(const uint32_t *priMask)
|
|
{
|
|
__set_PRIMASK(*priMask);
|
|
}
|
|
|
|
/**
|
|
* Reset events and read back on nRF52
|
|
* http://infocenter.nordicsemi.com/pdf/nRF52_Series_Migration_v1.0.pdf
|
|
*/
|
|
#if __CORTEX_M == 0x04
|
|
#define NRF_RESET_EVENT(event) \
|
|
event = 0; \
|
|
(void)event
|
|
#else
|
|
#define NRF_RESET_EVENT(event) event = 0
|
|
#endif
|
|
/**
|
|
* RTC to use for hwSleep
|
|
* RTC1 is used by arduino-nRF5
|
|
* RTC2 is used on nRF52
|
|
* RTC0 is used on nRF51. This conflicts with SoftDevice!
|
|
*/
|
|
#ifdef NRF_RTC2
|
|
#define MY_HW_RTC NRF_RTC2
|
|
#define MY_HW_RTC_IRQ_HANDLER RTC2_IRQHandler
|
|
#define MY_HW_RTC_IRQN RTC2_IRQn
|
|
#else
|
|
#define MY_HW_RTC NRF_RTC0
|
|
#define MY_HW_RTC_IRQ_HANDLER RTC0_IRQHandler
|
|
#define MY_HW_RTC_IRQN RTC0_IRQn
|
|
#endif
|
|
|
|
/** Datastructure for AES ECB unit
|
|
*/
|
|
typedef struct {
|
|
/** AES Key
|
|
*/
|
|
uint8_t key[16];
|
|
/** Unencrypted data
|
|
*/
|
|
uint8_t cleartext[16];
|
|
/** Encrypted data
|
|
*/
|
|
uint8_t ciphertext[16];
|
|
} nrf_ecb_t;
|
|
|
|
#ifndef DOXYGEN
|
|
#define MY_CRITICAL_SECTION
|
|
// temp. commented, to fix "CircularBuffer.h:94:2: warning: control reaches end of non-void function" error
|
|
#define __MY_CRITICAL_SECTION \
|
|
for (uint32_t __savePriMask \
|
|
__attribute__((__cleanup__(__priMaskRestore))) = __get_PRIMASK(), \
|
|
__ToDo = __disableIntsRetVal(); \
|
|
__ToDo; __ToDo = 0)
|
|
#endif /* DOXYGEN */
|
|
|
|
#endif // #ifdef ARDUINO_ARCH_NRF5
|