Momentum-Apps/seos_common.h

#pragma once

#include <stdlib.h>
#include <stdint.h>

#include <furi.h>
#include <furi_hal.h>
#include <lib/toolbox/bit_buffer.h>

#include <mbedtls/des.h>
#include <mbedtls/aes.h>

#include "aes_cmac.h"
#include "des_cmac.h"

#define TWO_KEY_3DES_CBC_MODE   2
#define THREE_KEY_3DES_CBC_MODE 4
#define SHA1                    6
#define SHA256                  7
#define AES_128_CBC             9

#define SEOS_WORKER_MAX_BUFFER_SIZE 128
#define SEOS_WORKER_CMAC_SIZE       8

#define SEOS_APP_EXTENSION        ".seos"
#define SEOS_FILE_NAME_MAX_LENGTH 32

extern char* seos_file_header;
extern uint32_t seos_file_version;

typedef enum {
    BLE_PERIPHERAL,
    BLE_CENTRAL,
} BleMode;

typedef enum {
    FLOW_READER,
    FLOW_CRED,
    FLOW_READER_SCANNER,
    FLOW_CRED_SCANNER,
} FlowMode;

typedef enum {
    SELECT_AID,
    SELECT_ADF,
    GENERAL_AUTHENTICATION_1,
    GENERAL_AUTHENTICATION_2,
    REQUEST_SIO,
} SeosPhase;

typedef struct {
    uint8_t diversifier[16];
    size_t diversifier_len;
    uint8_t sio[128];
    size_t sio_len;
    uint8_t priv_key[16];
    uint8_t auth_key[16];
    uint8_t adf_response[72];
} SeosCredential;

typedef struct {
    uint8_t rndICC[8];
    uint8_t UID[8];
    uint8_t cNonce[16];
    uint8_t rNonce[16];
    uint8_t priv_key[16];
    uint8_t auth_key[16];
    uint8_t key_no;
    uint8_t cipher;
    uint8_t hash;
} AuthParameters;

void seos_log_bitbuffer(char* TAG, char* prefix, BitBuffer* buffer);
void seos_log_buffer(char* TAG, char* prefix, uint8_t* buffer, size_t buffer_len);

void seos_common_copy_credential(const SeosCredential* src, SeosCredential* dst);

void seos_worker_diversify_key(
    uint8_t master_key_value[16],
    uint8_t* diversifier,
    size_t diversifier_len,
    uint8_t* adf_oid,
    size_t adf_oid_len,
    uint8_t algo_id1,
    uint8_t algo_id2,
    uint8_t reference_qualifier,
    bool is_encryption,
    uint8_t* div_key);

void seos_worker_aes_decrypt(
    uint8_t key[16],
    size_t length,
    const uint8_t* encrypted,
    uint8_t* clear);
void seos_worker_des_decrypt(
    uint8_t key[16],
    size_t length,
    const uint8_t* encrypted,
    uint8_t* clear);

void seos_worker_aes_encrypt(
    uint8_t key[16],
    size_t length,
    const uint8_t* clear,
    uint8_t* encrypted);
void seos_worker_des_encrypt(
    uint8_t key[16],
    size_t length,
    const uint8_t* clear,
    uint8_t* encrypted);