blob: 15b64d441034f93216c338922a6d91c7bf2b23db [file] [log] [blame]
# Copyright (c) 2021 Project CHIP Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Auto-generated scripts for harness use only, please review before automation. The endpoints and cluster names are currently set to default
name: 14.3.1. [TC-SC-3.1] Session Establishment
PICS:
- MCORE.ROLE.COMMISSIONEE
config:
nodeId: 0x12344321
cluster: "Basic"
endpoint: 0
tests:
- label:
"Initiator constructs and sends a TLV-encoded Sigma1 message
containing a random initiation value, destination identifier, session
identifier, the public key for its ephemeral key pair, and optional
MRP parameters."
verification: |
Verify that the message is properly formatted: 1. I Flag is set to 1 2. S flag and DIZ fields of message flags are set to 0 3. Encryption Type of security flags is set to 0 4. The message payload follows the sigma-1-struct TLV encoding format 5. The Session Key Type field is set to 0 6. The Protocol ID field is set to 0 and Protocol Opcode field is set to 48 (0x30) Verify that the responder receives the message.
disabled: true
- label:
"Responder validates the destination identifier contained in the
message."
verification: |
If the destination identifier matches a candidate destination id (as generated by the process in spec section 4.13.2.4), the responder proceeds to generate a Sigma 2 message.
disabled: true
- label:
"Responder constructs and sends a TLV-encoded Sigma2 message
containing a random responder value, responder session id, trusted
root id, public key for its responder ephemeral key pair, and
encrypted integrity data."
verification: |
Verify that the message is properly formatted: 1. I flag is set to 0 2. S flag and DIZ fields of message flags are set to 0 3. Encryption Type of security flags is set to 0 4. The message payload follows the sigma-2-struct TLV encoding format 5. The Session Key Type field is set to 0 6. The Protocol ID field is set to 0 and Protocol Opcode field is set to 49 (0x31) Verify that the initiator receives the message.
disabled: true
- label:
"Initiator generates a shared secret, generates a S2K key, and
decrypts and verifies the message data, node operational certificate
(NOC), and signature data."
verification: |
If the verification succeeds, the initiator moves to the next step to send a Sigma3 message.
disabled: true
- label:
"Initiator constructs and sends a TLV-encoded Sigma3 message
containing encrypted integrity data."
verification: |
Verify that the message is properly formatted: 1. I Flag is set to 1 2. S flag and DIZ fields of message flags are set to 0 3. Encryption Type of security flags is set to 0 4. The message payload follows the sigma-3-struct TLV encoding format 5. The Session Key Type field is set to 0 6. The Protocol ID field is set to 0 and Protocol Opcode field is set to 50 (0x32) Verify that the responder receives the message.
disabled: true
- label:
"Responder decrypts and verifies the message data, NOC, and signature
data."
verification: |
If the verification succeed, the session is established and the responder sends a SigmaFinished StatusReport message with GeneralCode SUCCESS, ProtocolId PROTOCOL_ID_SECURE_CHANNEL, and ProtocolCode SessionEstablishmentSuccess.
disabled: true