aliro_stepup.h

Cstruct aliro_stepup_digest

Step-up credential element digest: SHA-256 hash of a disclosed IssuerSignedItem, with its digest_id for verification.

Cstruct aliro_stepup_item

Single disclosed IssuerSignedItem from a Step-up document: digest_id (which digest to check against), tagged (24(bstr(IssuerSignedItem)) bytes for hashing), elem_id (element name).

Cstruct aliro_stepup_doc

Parsed Step-up access document (ISO/IEC 18013-5 mDoc): have_document (0 if device declined), status (DeviceResponse "3" code), doc_type and name_space (issuer namespace), IssuerAuth COSE_Sign1 components (protected header, kid, x5chain, payload=24(bstr(MSO)), signature r||s), MobileSecurityObject (digest algorithm, doc type, disclosed digests), validity dates (signed/valid_from/valid_until as epoch seconds, with flags), and disclosed IssuerSignedItems (elem_id, tagged bytes, digest_id for matching against MSO).

Cstruct aliro_stepup_issuer

---- verifier (§7.4) ----

Cstruct aliro_stepup_verify_ctx

Context for Step-up document verification: issuers (trust store), time_valid/now_epoch (clock state), access_iteration (stored iteration for replay check), expected_doctype, ecdsa_verify callback (ES256 over message, takes 65-byte pub, message, 64-byte r||s sig, returns 0 on valid).

Cstruct aliro_stepup_verdict

Verdict of Step-up document verification (ISO/IEC 18013-5 §7.4): valid (all passed steps + >=1 valid element), reject_step (0=accepted, else step 1-6 that failed), issuer_key_found/issuer_chain_validated/sig_ok/digests_ok/doctype_ok/time_ok/iteration_ok (per-step flags), valid_elements (count of disclosed items with verified digest).

Cstruct aliro_stepup_job

---- ESP worker seam (implemented per-platform; see aliro_stepup_worker.c) ---- Copies the collected SessionData response + keys + verify inputs and runs aliro_stepup_run() off the BLE-host task, so parse/verify never touches the auth segment or the ranging arm window. Returns 0 if queued.

##define ALIRO_STEPUP_DOCTYPE_ACCESS "aliro-a"

##define ALIRO_STEPUP_DOCTYPE_REVOCATION "aliro-r"

##define ALIRO_STEPUP_SK_OFFSET 64u

Fint aliro_stepup_derive_keys(const uint8_t block[ALIRO_KEY_BLOCK_LEN], uint8_t sk_reader[ALIRO_SESSION_KEY_LEN], uint8_t sk_device[ALIRO_SESSION_KEY_LEN])

Fvoid aliro_stepup_channel_init(struct aliro_secchan *sc, const uint8_t sk_reader[ALIRO_SESSION_KEY_LEN], const uint8_t sk_device[ALIRO_SESSION_KEY_LEN])

Fint aliro_stepup_build_device_request(const char *const *elems, size_t n_elems, uint8_t *out, size_t cap, size_t *out_len)

Fint aliro_stepup_seal_sessiondata(struct aliro_secchan *sc, const uint8_t *plain, size_t plain_len, uint8_t *out, size_t cap, size_t *out_len)

Fint aliro_stepup_open_sessiondata(struct aliro_secchan *sc, const uint8_t *sd, size_t sd_len, uint8_t *out, size_t cap, size_t *out_len)

##define ALIRO_INS_ENVELOPE 0xC3u

##define ALIRO_INS_GET_RESPONSE 0xC0u

Fint aliro_stepup_build_envelope(const uint8_t *data, size_t data_len, int chaining, uint8_t *out, size_t cap, size_t *out_len)

Fint aliro_stepup_build_get_response(uint8_t le, uint8_t *out, size_t cap, size_t *out_len)

##define ALIRO_STEPUP_MAX_DIGESTS 24u

##define ALIRO_STEPUP_MAX_ITEMS 16u

##define ALIRO_STEPUP_ID_MAX 32u

Fint aliro_stepup_parse_response(const uint8_t *buf, size_t len, struct aliro_stepup_doc *doc)

Fint aliro_stepup_verify(const struct aliro_stepup_doc *doc, const struct aliro_stepup_verify_ctx *ctx, struct aliro_stepup_verdict *verdict)

Fint aliro_stepup_run(struct aliro_secchan *sc, const uint8_t *sd_resp, size_t sd_len, const struct aliro_stepup_verify_ctx *ctx, uint8_t *scratch, size_t scratch_cap, struct aliro_stepup_doc *doc, struct aliro_stepup_verdict *verdict)

Fint aliro_stepup_worker_submit(const struct aliro_stepup_job *job)

Fint aliro_stepup_worker_last(struct aliro_stepup_verdict *verdict, uint16_t *conn)