-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[nrfconnect] Fix handling Spake2+ salt in factory data script #20924
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pullapprove
bot
requested review from
anush-apple,
arkq,
Byungjoo-Lee,
bzbarsky-apple,
carol-apple,
chrisdecenzo,
chshu,
chulspro,
dhrishi,
electrocucaracha,
emargolis,
erjiaqing,
franck-apple,
gjc13,
harimau-qirex,
harsha-rajendran,
hawk248,
isiu-apple,
jelderton,
jepenven-silabs,
jmartinez-silabs,
jtung-apple,
kghost,
kpschoedel,
lazarkov and
LuDuda
July 19, 2022 08:31
pullapprove
bot
requested review from
xylophone21,
turon,
yufengwangca,
vijs,
vivien-apple,
wbschiller and
woody-apple
July 19, 2022 08:31
PR #20924: Size comparison from ea78432 to 4d398c8 Increases (1 build for esp32)
Decreases (2 builds for bl602)
Full report (41 builds for bl602, cc13x2_26x2, cyw30739, efr32, esp32, k32w, linux, mbed, p6, telink)
|
PR #20924: Size comparison from fcd6594 to d74677c Increases (1 build for esp32)
Decreases (2 builds for nrfconnect, telink)
Full report (51 builds for bl602, cc13x2_26x2, cyw30739, efr32, esp32, k32w, linux, mbed, nrfconnect, p6, telink)
|
woody-apple
approved these changes
Jul 19, 2022
The script would take base64-encoded salt and pass it to spake2p tool that expects an ascii string. It would generate an incorrect Spake2+ verifier. Signed-off-by: Damian Krolik <[email protected]>
Signed-off-by: Damian Krolik <[email protected]>
PR #20924: Size comparison from 4cdecc9 to c008351 Increases (1 build for telink)
Decreases (2 builds for esp32, mbed)
Full report (30 builds for bl602, cc13x2_26x2, cyw30739, efr32, esp32, k32w, linux, mbed, p6, telink)
|
woody-apple
approved these changes
Jul 19, 2022
github-actions bot
pushed a commit
that referenced
this pull request
Jul 20, 2022
* [nrfconnect] Fix handling Spake2+ salt in factory data script The script would take base64-encoded salt and pass it to spake2p tool that expects an ascii string. It would generate an incorrect Spake2+ verifier. Signed-off-by: Damian Krolik <[email protected]> * Fix and improve comments and help texts Signed-off-by: Damian Krolik <[email protected]> * Add unit tests * Update spake2p tool to take base64 salt * Fix typo
woody-apple
added a commit
that referenced
this pull request
Jul 20, 2022
#20972) * [nrfconnect] Fix handling Spake2+ salt in factory data script The script would take base64-encoded salt and pass it to spake2p tool that expects an ascii string. It would generate an incorrect Spake2+ verifier. Signed-off-by: Damian Krolik <[email protected]> * Fix and improve comments and help texts Signed-off-by: Damian Krolik <[email protected]> * Add unit tests * Update spake2p tool to take base64 salt * Fix typo Co-authored-by: Damian Królik <[email protected]>
isiu-apple
pushed a commit
to isiu-apple/connectedhomeip
that referenced
this pull request
Sep 16, 2022
…t-chip#20924) * [nrfconnect] Fix handling Spake2+ salt in factory data script The script would take base64-encoded salt and pass it to spake2p tool that expects an ascii string. It would generate an incorrect Spake2+ verifier. Signed-off-by: Damian Krolik <[email protected]> * Fix and improve comments and help texts Signed-off-by: Damian Krolik <[email protected]> * Add unit tests * Update spake2p tool to take base64 salt * Fix typo
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Problem
The script takes base64-encoded salt and passes it to
spake2p
tool that expects an ascii string. It generates an incorrect Spake2+ verifier.Change overview
Testing
Built nRF Connect lock-app with
-DCONFIG_CHIP_FACTORY_DATA=y -DCONFIG_CHIP_FACTORY_DATA_BUILD=y -DCONFIG_CHIP_DEVICE_SPAKE2_PASSCODE=20212223 -DCONFIG_CHIP_FACTORY_DATA_GENERATE_SPAKE2_VERIFIER=y
flags and commissioned the device.Added unit tests to verify the factory data generation script output.