8b6c1cd53d
Crypto: - Replace broken ChaCha20 (static nonce) with ChaCha20-Poly1305 AEAD - HKDF-SHA256 key derivation from per-device factory NVS master keys - Random 12-byte nonce per message (ESP32 hardware RNG) - crypto_init/encrypt/decrypt API with mbedtls legacy (ESP-IDF v5.3.2) - Custom partition table with factory NVS (fctry at 0x10000) Firmware: - crypto.c full rewrite, messages.c device_id prefix + AEAD encrypt - crypto_init() at boot with esp_restart() on failure - Fix command_t initializations across all modules (sub/help fields) - Clean CMakeLists dependencies for ESP-IDF v5.3.2 C3PO (C2): - Rename tools/c2 + tools/c3po -> tools/C3PO - Per-device CryptoContext with HKDF key derivation - KeyStore (keys.json) for master key management - Transport parses device_id:base64(...) wire format Tools: - New tools/provisioning/provision.py for factory NVS key generation - Updated flasher with mbedtls config for v5.3.2 Docs: - Update all READMEs for new crypto, C3PO paths, provisioning - Update roadmap, architecture diagrams, security sections - Update CONTRIBUTING.md project structure
49 lines
1.4 KiB
C
49 lines
1.4 KiB
C
#include <string.h>
|
|
|
|
#include "c2.pb.h"
|
|
#include "command.h"
|
|
#include "utils.h"
|
|
#include "esp_log.h"
|
|
|
|
static const char *TAG = "PROCESS";
|
|
|
|
/* =========================================================
|
|
* UNIQUE ENTRY POINT — C2 → ESP
|
|
* ========================================================= */
|
|
void process_command(const c2_Command *cmd)
|
|
{
|
|
if (!cmd) {
|
|
ESP_LOGE(TAG, "NULL command");
|
|
return;
|
|
}
|
|
|
|
/* -----------------------------------------------------
|
|
* Device ID check — allow broadcast (empty device_id)
|
|
* ----------------------------------------------------- */
|
|
if (cmd->device_id[0] != '\0' &&
|
|
strcmp(CONFIG_DEVICE_ID, cmd->device_id) != 0) {
|
|
ESP_LOGW(TAG,
|
|
"Command not for this device (target=%s, self=%s)",
|
|
cmd->device_id, CONFIG_DEVICE_ID);
|
|
return;
|
|
}
|
|
|
|
/* -----------------------------------------------------
|
|
* Basic validation
|
|
* ----------------------------------------------------- */
|
|
if (cmd->command_name[0] == '\0') {
|
|
msg_error(TAG, "Empty command name", cmd->request_id);
|
|
return;
|
|
}
|
|
|
|
ESP_LOGI(TAG,
|
|
"CMD received: %s (argc=%d)",
|
|
cmd->command_name,
|
|
cmd->argv_count);
|
|
|
|
/* -----------------------------------------------------
|
|
* Dispatch to command engine
|
|
* ----------------------------------------------------- */
|
|
command_process_pb(cmd);
|
|
}
|