Implement Secure Pairing class

[pan-apple]

Problem

Need a class that wraps complexities of secure pairing (using SPAKE2P).

Summary of Changes

Added a new class SecurePairingSession. Added some unit tests. More tests are forthcoming.

[woody-apple]

@andy31415 @jelderton ?

[tcarmelveilleux]

Perhaps we should already create a minimum salt length constant since it can never be 0.

[pan-apple]

@balducci-apple do you have a suggestion for minimum salt length?

[pan-apple]

Filed #2075 to track it.

[woody-apple]

Thanks!

[turon]

Looks great! Thanks for the contribution.

[turon]

The IETF specification includes test vectors at the end. Could a test be added that proves the code passes the IETF test vectors?

[pan-apple]

We are running the test vectors on the underlying spake2p implementation (part of CHIP in src/crypto/tests). https://github.com/project-chip/connectedhomeip/blob/master/src/crypto/tests/SPAKE2P_RFC_test_vectors.h

Running those test vectors here may not be feasible, as we cannot control what random values are generated/used by the spake2p APIs internally.

[github-actions]

Size increase report for "gn_nrf-example-build"

File	Section	File	VM

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

[github-actions]

Size increase report for "gn_linux-example-build"

File	Section	File	VM

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

[github-actions]

Size increase report for "nrf-example-build"

File	Section	File	VM
chip-nrf52840-lock-example.out	.text	5580	5580
chip-nrf52840-lock-example.out	.data	4	4
chip-nrf52840-lock-example.out	.bss	0	-184

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

Comparing ./master_artifact/chip-nrf52840-lock-example.out and ./pull_artifact/chip-nrf52840-lock-example.out:

sections,vmsize,filesize
.debug_str,0,588588
.debug_info,0,110071
.debug_macro,0,62230
.debug_line,0,32784
.debug_loc,0,20506
.debug_abbrev,0,9286
.debug_frame,0,6808
.text,5580,5580
.symtab,0,4112
.strtab,0,3283
.debug_ranges,0,2032
.debug_aranges,0,2008
.data,4,4
.bss,-184,0
[Unmapped],0,-5580

[github-actions]

Size increase report for "nrfconnect-example-build"

File	Section	File	VM
chip-nrf52840-lock-example.elf	text	4288	4288
chip-nrf52840-lock-example.elf	[LOAD #3 [RW]]	0	8
chip-nrf52840-lock-example.elf	datas	3	3
chip-nrf52840-lock-example.elf	[LOAD #2 [RW]]	-3	-3
chip-nrf52840-lock-example.elf	bss	0	-200
chip-nrf52840-lock-example.elf	rodata	-456	-456

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

Comparing ./master_artifact/chip-nrf52840-lock-example.elf and ./pull_artifact/chip-nrf52840-lock-example.elf:

sections,vmsize,filesize
.debug_info,0,124002
.debug_loc,0,34244
.debug_line,0,24701
.debug_str,0,19772
.debug_abbrev,0,10845
.debug_frame,0,4804
text,4288,4288
.debug_ranges,0,3784
.symtab,0,2704
.strtab,0,1990
.debug_aranges,0,1728
[LOAD #3 [RW]],8,0
datas,3,3
[LOAD #2 [RW]],-3,-3
[Unmapped],0,-22
bss,-200,0
rodata,-456,-456

[github-actions]

Size increase report for "linux-example-build"

File	Section	File	VM

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

Comparing ./master_artifact/chip-standalone-demo.out and ./pull_artifact/chip-standalone-demo.out:

BLOAT EXECUTION FAILED WITH CODE 1:
bloaty: integer overflow

[github-actions]

Size increase report for "esp32-example-build"

File	Section	File	VM
chip-wifi-echo.elf	.flash.text	140	140
chip-wifi-echo.elf	.flash.rodata	64	64

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

Comparing ./master_artifact/chip-wifi-echo.elf and ./pull_artifact/chip-wifi-echo.elf:

sections,vmsize,filesize
[Unmapped],0,4030
.debug_info,0,1085
.debug_line,0,571
.debug_str,0,177
.flash.text,140,140
.debug_frame,0,72
.flash.rodata,64,64
.strtab,0,53
.debug_aranges,0,24
.debug_ranges,0,24
.symtab,0,16