Depending on compiling flags, HID and/or CCID may be enabled independently and run simultaneously. Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
373 lines
14 KiB
C
373 lines
14 KiB
C
/*
|
|
* This file is part of the Pico HSM SDK distribution (https://github.com/polhenarejos/pico-hsm-sdk).
|
|
* Copyright (c) 2022 Pol Henarejos.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, version 3.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "tusb.h"
|
|
#include "ctap_hid.h"
|
|
#include "hsm.h"
|
|
#include "hsm_version.h"
|
|
#include "apdu.h"
|
|
#include "usb.h"
|
|
#include "bsp/board.h"
|
|
|
|
static bool mounted = false;
|
|
extern int cbor_process(uint8_t, const uint8_t *, size_t);
|
|
extern void init_fido(bool);
|
|
|
|
typedef struct msg_packet {
|
|
uint16_t len;
|
|
uint16_t current_len;
|
|
uint8_t data[CTAP_MAX_PACKET_SIZE];
|
|
} __packed msg_packet_t;
|
|
|
|
msg_packet_t msg_packet = { 0 };
|
|
|
|
void tud_mount_cb()
|
|
{
|
|
mounted = true;
|
|
}
|
|
|
|
bool driver_mounted_hid() {
|
|
return mounted;
|
|
}
|
|
|
|
CTAPHID_FRAME *ctap_req = NULL, *ctap_resp = NULL;
|
|
|
|
int driver_init_hid() {
|
|
tud_init(BOARD_TUD_RHPORT);
|
|
ctap_req = (CTAPHID_FRAME *)usb_get_rx(ITF_HID);
|
|
apdu.header = ctap_req->init.data;
|
|
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
apdu.rdata = ctap_resp->init.data;
|
|
|
|
usb_set_timeout_counter(ITF_HID, 200);
|
|
|
|
return 0;
|
|
}
|
|
|
|
//--------------------------------------------------------------------+
|
|
// USB HID
|
|
//--------------------------------------------------------------------+
|
|
|
|
// Invoked when received GET_REPORT control request
|
|
// Application must fill buffer report's content and return its length.
|
|
// Return zero will cause the stack to STALL request
|
|
uint16_t tud_hid_get_report_cb(uint8_t itf, uint8_t report_id, hid_report_type_t report_type, uint8_t* buffer, uint16_t reqlen)
|
|
{
|
|
// TODO not Implemented
|
|
(void) itf;
|
|
(void) report_id;
|
|
(void) report_type;
|
|
(void) buffer;
|
|
(void) reqlen;
|
|
printf("get_report\n");
|
|
DEBUG_PAYLOAD(buffer, reqlen);
|
|
|
|
return 0;
|
|
}
|
|
|
|
uint32_t hid_write_offset(uint16_t size, uint16_t offset) {
|
|
if (*usb_get_tx(ITF_HID) != 0x81)
|
|
DEBUG_PAYLOAD(usb_get_tx(ITF_HID)+offset, size);
|
|
return usb_write_offset(ITF_HID, size, offset);
|
|
}
|
|
|
|
uint32_t hid_write(uint16_t size) {
|
|
return hid_write_offset(size, 0);
|
|
}
|
|
|
|
uint16_t send_buffer_size = 0;
|
|
bool last_write_result = false;
|
|
|
|
void tud_hid_report_complete_cb(uint8_t instance, uint8_t const* report, /*uint16_t*/ uint8_t len) {
|
|
uint8_t seq = report[4] & TYPE_MASK ? 0 : report[4] + 1;
|
|
if (send_buffer_size > 0) {
|
|
if (last_write_result == true) {
|
|
ctap_resp->cid = ctap_req->cid;
|
|
ctap_resp->cont.seq = seq;
|
|
}
|
|
if (hid_write_offset(64, (uint8_t *)ctap_resp - (usb_get_tx(ITF_HID))) > 0) {
|
|
send_buffer_size -= MIN(64 - 5, send_buffer_size);
|
|
ctap_resp = (CTAPHID_FRAME *)((uint8_t *)ctap_resp + 64 - 5);
|
|
}
|
|
}
|
|
}
|
|
|
|
int driver_write_hid(const uint8_t *buffer, size_t buffer_size) {
|
|
last_write_result = tud_hid_report(0, buffer, buffer_size);
|
|
printf("result %d\n", last_write_result);
|
|
if (last_write_result == false)
|
|
return 0;
|
|
return MIN(64, buffer_size);
|
|
}
|
|
|
|
size_t driver_read_hid(uint8_t *buffer, size_t buffer_size) {
|
|
return 0;
|
|
}
|
|
|
|
// Invoked when received SET_REPORT control request or
|
|
// received data on OUT endpoint ( Report ID = 0, Type = 0 )
|
|
void tud_hid_set_report_cb(uint8_t itf, uint8_t report_id, hid_report_type_t report_type, uint8_t const* buffer, uint16_t bufsize) {
|
|
// This example doesn't use multiple report and report ID
|
|
(void) itf;
|
|
(void) report_id;
|
|
(void) report_type;
|
|
|
|
usb_rx(ITF_HID, buffer, bufsize);
|
|
}
|
|
|
|
uint32_t last_cmd_time = 0, last_packet_time = 0;
|
|
int ctap_error(uint8_t error) {
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
memset(ctap_resp, 0, sizeof(CTAPHID_FRAME));
|
|
ctap_resp->cid = ctap_req->cid;
|
|
ctap_resp->init.cmd = CTAPHID_ERROR;
|
|
ctap_resp->init.bcntl = 1;
|
|
ctap_resp->init.data[0] = error;
|
|
hid_write(64);
|
|
usb_clear_rx(ITF_HID);
|
|
last_packet_time = 0;
|
|
return 0;
|
|
}
|
|
|
|
uint8_t last_cmd = 0;
|
|
uint8_t last_seq = 0;
|
|
CTAPHID_FRAME last_req = { 0 };
|
|
uint32_t lock = 0;
|
|
|
|
uint8_t thread_type = 0; //1 is APDU, 2 is CBOR
|
|
extern void cbor_thread();
|
|
extern bool cancel_button;
|
|
|
|
int driver_process_usb_nopacket_hid() {
|
|
if (last_packet_time > 0 && last_packet_time+500 < board_millis()) {
|
|
ctap_error(CTAP1_ERR_MSG_TIMEOUT);
|
|
last_packet_time = 0;
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int driver_process_usb_packet_hid(uint16_t read) {
|
|
int apdu_sent = 0;
|
|
if (read >= 5) {
|
|
driver_init_hid();
|
|
last_packet_time = board_millis();
|
|
DEBUG_PAYLOAD(usb_get_rx(ITF_HID),64);
|
|
memset(ctap_resp, 0, sizeof(CTAPHID_FRAME));
|
|
if (ctap_req->cid == 0x0 || (ctap_req->cid == CID_BROADCAST && ctap_req->init.cmd != CTAPHID_INIT))
|
|
return ctap_error(CTAP1_ERR_INVALID_CHANNEL);
|
|
if (board_millis() < lock && ctap_req->cid != last_req.cid && last_cmd_time+100 > board_millis())
|
|
return ctap_error(CTAP1_ERR_CHANNEL_BUSY);
|
|
if (FRAME_TYPE(ctap_req) == TYPE_INIT)
|
|
{
|
|
if (MSG_LEN(ctap_req) > CTAP_MAX_PACKET_SIZE)
|
|
return ctap_error(CTAP1_ERR_INVALID_LEN);
|
|
if (msg_packet.len > 0 && last_cmd_time+100 > board_millis() && ctap_req->init.cmd != CTAPHID_INIT) {
|
|
if (last_req.cid != ctap_req->cid) //We are in a transaction
|
|
return ctap_error(CTAP1_ERR_CHANNEL_BUSY);
|
|
else
|
|
return ctap_error(CTAP1_ERR_INVALID_SEQ);
|
|
}
|
|
printf("command %x\n", FRAME_CMD(ctap_req));
|
|
printf("len %d\n", MSG_LEN(ctap_req));
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
if (MSG_LEN(ctap_req) > 64 - 7)
|
|
{
|
|
msg_packet.len = MSG_LEN(ctap_req);
|
|
memcpy(msg_packet.data + msg_packet.current_len, ctap_req->init.data, 64-7);
|
|
msg_packet.current_len += 64 - 7;
|
|
}
|
|
memcpy(&last_req, ctap_req, sizeof(CTAPHID_FRAME));
|
|
last_cmd = ctap_req->init.cmd;
|
|
last_seq = 0;
|
|
last_cmd_time = board_millis();
|
|
}
|
|
else {
|
|
if (msg_packet.len == 0) //Received a cont with a prior init pkt
|
|
return 0;
|
|
if (last_seq != ctap_req->cont.seq)
|
|
return ctap_error(CTAP1_ERR_INVALID_SEQ);
|
|
if (last_req.cid == ctap_req->cid) {
|
|
memcpy(msg_packet.data + msg_packet.current_len, ctap_req->cont.data, MIN(64 - 5, msg_packet.len - msg_packet.current_len));
|
|
msg_packet.current_len += MIN(64 - 5, msg_packet.len - msg_packet.current_len);
|
|
memcpy(&last_req, ctap_req, sizeof(CTAPHID_FRAME));
|
|
last_seq++;
|
|
}
|
|
else if (last_cmd_time+100 > board_millis())
|
|
return ctap_error(CTAP1_ERR_CHANNEL_BUSY);
|
|
|
|
}
|
|
|
|
if (ctap_req->init.cmd == CTAPHID_INIT) {
|
|
init_fido(false);
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
memset(ctap_resp, 0, 64);
|
|
CTAPHID_INIT_REQ *req = (CTAPHID_INIT_REQ *)ctap_req->init.data;
|
|
CTAPHID_INIT_RESP *resp = (CTAPHID_INIT_RESP *)ctap_resp->init.data;
|
|
memcpy(resp->nonce, req->nonce, sizeof(resp->nonce));
|
|
resp->cid = 0x01000000;
|
|
resp->versionInterface = CTAPHID_IF_VERSION;
|
|
resp->versionMajor = HSM_SDK_VERSION_MAJOR;
|
|
resp->versionMinor = HSM_SDK_VERSION_MINOR;
|
|
resp->capFlags = CAPFLAG_WINK | CAPFLAG_CBOR;
|
|
|
|
ctap_resp->cid = CID_BROADCAST;
|
|
ctap_resp->init.cmd = CTAPHID_INIT;
|
|
ctap_resp->init.bcntl = 17;
|
|
ctap_resp->init.bcnth = 0;
|
|
driver_exec_finished_hid(17);
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
}
|
|
else if (ctap_req->init.cmd == CTAPHID_WINK) {
|
|
if (MSG_LEN(ctap_req) != 0) {
|
|
return ctap_error(CTAP1_ERR_INVALID_LEN);
|
|
}
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
memcpy(ctap_resp, ctap_req, sizeof(CTAPHID_FRAME));
|
|
sleep_ms(1000); //For blinking the device during 1 seg
|
|
hid_write(64);
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
}
|
|
else if ((last_cmd == CTAPHID_PING || last_cmd == CTAPHID_SYNC) && (msg_packet.len == 0 || (msg_packet.len == msg_packet.current_len && msg_packet.len > 0))) {
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
if (msg_packet.current_len == msg_packet.len && msg_packet.len > 0) {
|
|
memcpy(ctap_resp->init.data, msg_packet.data, msg_packet.len);
|
|
driver_exec_finished_hid(msg_packet.len);
|
|
}
|
|
else {
|
|
memcpy(ctap_resp->init.data, ctap_req->init.data, MSG_LEN(ctap_req));
|
|
ctap_resp->cid = ctap_req->cid;
|
|
ctap_resp->init.cmd = last_cmd;
|
|
ctap_resp->init.bcnth = MSG_LEN(ctap_req) >> 8;
|
|
ctap_resp->init.bcntl = MSG_LEN(ctap_req) & 0xff;
|
|
hid_write(64);
|
|
}
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
}
|
|
else if (ctap_req->init.cmd == CTAPHID_LOCK) {
|
|
if (MSG_LEN(ctap_req) != 1)
|
|
return ctap_error(CTAP1_ERR_INVALID_LEN);
|
|
if (ctap_req->init.data[0] > 10)
|
|
return ctap_error(CTAP1_ERR_INVALID_PARAMETER);
|
|
lock = board_millis() + ctap_req->init.data[0] * 1000;
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
memset(ctap_resp, 0, 64);
|
|
ctap_resp->cid = ctap_req->cid;
|
|
ctap_resp->init.cmd = ctap_req->init.cmd;
|
|
hid_write(64);
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
}
|
|
else if (last_cmd == CTAPHID_MSG && (msg_packet.len == 0 || (msg_packet.len == msg_packet.current_len && msg_packet.len > 0))) {
|
|
|
|
current_app = apps[0].select_aid(&apps[0]);
|
|
if (thread_type != 1)
|
|
card_start(apdu_thread);
|
|
thread_type = 1;
|
|
|
|
if (msg_packet.current_len == msg_packet.len && msg_packet.len > 0)
|
|
apdu_sent = apdu_process(ITF_HID, msg_packet.data, msg_packet.len);
|
|
else
|
|
apdu_sent = apdu_process(ITF_HID, ctap_req->init.data, MSG_LEN(ctap_req));
|
|
DEBUG_PAYLOAD(apdu.data, (int)apdu.nc);
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
}
|
|
else if ((last_cmd == CTAPHID_CBOR || (last_cmd >= CTAPHID_VENDOR_FIRST && last_cmd <= CTAPHID_VENDOR_LAST)) && (msg_packet.len == 0 || (msg_packet.len == msg_packet.current_len && msg_packet.len > 0))) {
|
|
|
|
if (thread_type != 2)
|
|
card_start(cbor_thread);
|
|
thread_type = 2;
|
|
if (msg_packet.current_len == msg_packet.len && msg_packet.len > 0)
|
|
apdu_sent = cbor_process(last_cmd, msg_packet.data, msg_packet.len);
|
|
else
|
|
apdu_sent = cbor_process(last_cmd, ctap_req->init.data, MSG_LEN(ctap_req));
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
if (apdu_sent < 0)
|
|
return ctap_error(-apdu_sent);
|
|
}
|
|
else if (ctap_req->init.cmd == CTAPHID_CANCEL) {
|
|
ctap_error(0x2D);
|
|
msg_packet.len = msg_packet.current_len = 0;
|
|
last_packet_time = 0;
|
|
cancel_button = true;
|
|
}
|
|
else {
|
|
if (msg_packet.len == 0)
|
|
return ctap_error(CTAP1_ERR_INVALID_CMD);
|
|
}
|
|
// echo back anything we received from host
|
|
//tud_hid_report(0, buffer, bufsize);
|
|
//printf("END\n");
|
|
usb_clear_rx(ITF_HID);
|
|
}
|
|
return apdu_sent;
|
|
}
|
|
|
|
void send_keepalive() {
|
|
CTAPHID_FRAME *resp = (CTAPHID_FRAME *)(usb_get_tx(ITF_HID) + 4096);
|
|
//memset(ctap_resp, 0, sizeof(CTAPHID_FRAME));
|
|
resp->cid = ctap_req->cid;
|
|
resp->init.cmd = CTAPHID_KEEPALIVE;
|
|
resp->init.bcntl = 1;
|
|
resp->init.data[0] = is_req_button_pending() ? 2 : 1;
|
|
send_buffer_size = 0;
|
|
hid_write_offset(64, 4096);
|
|
}
|
|
|
|
void driver_exec_timeout_hid() {
|
|
if (thread_type == 2)
|
|
send_keepalive();
|
|
}
|
|
|
|
uint8_t *driver_prepare_response_hid() {
|
|
ctap_resp = (CTAPHID_FRAME *)usb_get_tx(ITF_HID);
|
|
apdu.rdata = ctap_resp->init.data;
|
|
send_buffer_size = 0;
|
|
memset(usb_get_tx(ITF_HID), 0, 4096);
|
|
return ctap_resp->init.data;
|
|
}
|
|
|
|
void driver_exec_finished_hid(size_t size_next) {
|
|
if (size_next > 0) {
|
|
if (thread_type == 2 && apdu.sw != 0)
|
|
ctap_error(apdu.sw & 0xff);
|
|
else
|
|
driver_exec_finished_cont_hid(size_next, 7);
|
|
}
|
|
apdu.sw = 0;
|
|
}
|
|
|
|
void driver_exec_finished_cont_hid(size_t size_next, size_t offset) {
|
|
offset -= 7;
|
|
ctap_resp = (CTAPHID_FRAME *)(usb_get_tx(ITF_HID) + offset);
|
|
ctap_resp->cid = ctap_req->cid;
|
|
ctap_resp->init.cmd = last_cmd;
|
|
ctap_resp->init.bcnth = size_next >> 8;
|
|
ctap_resp->init.bcntl = size_next & 0xff;
|
|
send_buffer_size = size_next;
|
|
if (hid_write_offset(64, offset) > 0) {
|
|
ctap_resp = (CTAPHID_FRAME *)((uint8_t *)ctap_resp + 64 - 5);
|
|
|
|
send_buffer_size -= MIN(64-7, send_buffer_size);
|
|
}
|
|
}
|