Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a Secure Mode setting for PD #169

Closed
bytedreamer opened this issue Apr 6, 2024 · 0 comments
Closed

Add a Secure Mode setting for PD #169

bytedreamer opened this issue Apr 6, 2024 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@bytedreamer
Copy link
Owner

When the PD is in secure mode, only certain commands are allowed to be processed in the clear. The OSDP spec version 2.2.1 outline the proper behavior.

Unsecured communication (USC) is any packet not sent through a Secure Channel Session (SCS).
For an unsecured PD (using SCBK_D ), USC commands from the ACU and replies from the PD are
allowed. Once a SCS is established, communication between the ACU and PD shall adhere to the
SCS packet format (use of SCB and MAC). The only exceptions are osdp_BUSY or osdp_NAK error
code 0x01 Message check character(s) error (bad checksum/ or bad cyclic redundancy check).
Interleaving USC packets during communication in a SCS is NOT allowed.

If a PD is configured to operate in a OSDP-SC Ffully Ssecurityed Mode (see D.7D.7) or is paired via
user SCBK the following commands and replies may be allowed outside of SCS for the purpose of
network configuration, maintenance, and establishing the SCS:
Function Command Reply
ID Report osdp_ID osdp_PDID
Capabilities Report osdp_CAP osdp_PDCAP
Communication Configuration osdp_COMSET osdp_COM
Challenge and Secure Session Initialization osdp_CHLNG osdp_CCRYPT
Server's Random Number and Server Cryptogram osdp_SCRYPT osdp_RMAC_I
Negative Acknowledge osdp_NAK
PD Busy osdp_BUSY

The PD shouldmay respond with OSDPosdp_NAK error 0x06 Encrypted Command Required if it
receives any other USC command while configured for OSDP-SC full securityFully Secured Mode.
The manufacturer of the PD may choose NOT to allow osdp_ID, osdp_PDID, osdp_CAP,

@bytedreamer bytedreamer added the enhancement New feature or request label Jul 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants