diff options
Diffstat (limited to 'tests/vboot_common3_tests.c')
| -rw-r--r-- | tests/vboot_common3_tests.c | 270 |
1 files changed, 0 insertions, 270 deletions
diff --git a/tests/vboot_common3_tests.c b/tests/vboot_common3_tests.c deleted file mode 100644 index 390b7f30..00000000 --- a/tests/vboot_common3_tests.c +++ /dev/null @@ -1,270 +0,0 @@ -/* Copyright (c) 2013 The Chromium OS Authors. All rights reserved. - * Use of this source code is governed by a BSD-style license that can be - * found in the LICENSE file. - * - * Tests for firmware image library. - */ - -#include <stdint.h> -#include <stdio.h> -#include <stdlib.h> -#include <string.h> - -#include "2sysincludes.h" -#include "2common.h" -#include "2sha.h" -#include "cryptolib.h" -#include "file_keys.h" -#include "host_common.h" -#include "test_common.h" -#include "vboot_common.h" - - -static void ReChecksumKeyBlock(VbKeyBlockHeader *h) -{ - vb2_digest_buffer((const uint8_t *)h, - h->key_block_checksum.data_size, - VB2_HASH_SHA512, - GetSignatureData(&h->key_block_checksum), - VB2_SHA512_DIGEST_SIZE); -} - -static void KeyBlockVerifyTest(const VbPublicKey *public_key, - const struct vb2_private_key *private_key, - const struct vb2_packed_key *data_key) -{ - VbKeyBlockHeader *hdr; - VbKeyBlockHeader *h; - unsigned hsize; - - hdr = (VbKeyBlockHeader *) - vb2_create_keyblock((struct vb2_packed_key *)data_key, - private_key, - 0x1234); - TEST_NEQ((size_t)hdr, 0, "KeyBlockVerify() prerequisites"); - if (!hdr) - return; - hsize = (unsigned) hdr->key_block_size; - h = (VbKeyBlockHeader *)malloc(hsize + 1024); - - TEST_EQ(KeyBlockVerify(hdr, hsize, NULL, 1), 0, - "KeyBlockVerify() ok using checksum"); - TEST_EQ(KeyBlockVerify(hdr, hsize, public_key, 0), 0, - "KeyBlockVerify() ok using key"); - TEST_NEQ(KeyBlockVerify(hdr, hsize, NULL, 0), 0, - "KeyBlockVerify() missing key"); - - TEST_NEQ(KeyBlockVerify(hdr, hsize - 1, NULL, 1), 0, - "KeyBlockVerify() size--"); - TEST_EQ(KeyBlockVerify(hdr, hsize + 1, NULL, 1), 0, - "KeyBlockVerify() size++"); - - memcpy(h, hdr, hsize); - h->magic[0] &= 0x12; - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() magic"); - - /* Care about major version but not minor */ - memcpy(h, hdr, hsize); - h->header_version_major++; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() major++"); - - memcpy(h, hdr, hsize); - h->header_version_major--; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() major--"); - - memcpy(h, hdr, hsize); - h->header_version_minor++; - ReChecksumKeyBlock(h); - TEST_EQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() minor++"); - - memcpy(h, hdr, hsize); - h->header_version_minor--; - ReChecksumKeyBlock(h); - TEST_EQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() minor--"); - - /* Check hash */ - memcpy(h, hdr, hsize); - h->key_block_checksum.sig_offset = hsize; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() checksum off end"); - - memcpy(h, hdr, hsize); - h->key_block_checksum.sig_size /= 2; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() checksum too small"); - - memcpy(h, hdr, hsize); - GetPublicKeyData(&h->data_key)[0] ^= 0x34; - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() checksum mismatch"); - - /* Check signature */ - memcpy(h, hdr, hsize); - h->key_block_signature.sig_offset = hsize; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, public_key, 0), 0, - "KeyBlockVerify() sig off end"); - - memcpy(h, hdr, hsize); - h->key_block_signature.sig_size--; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, public_key, 0), 0, - "KeyBlockVerify() sig too small"); - - memcpy(h, hdr, hsize); - GetPublicKeyData(&h->data_key)[0] ^= 0x34; - TEST_NEQ(KeyBlockVerify(h, hsize, public_key, 0), 0, - "KeyBlockVerify() sig mismatch"); - - memcpy(h, hdr, hsize); - h->key_block_checksum.data_size = h->key_block_size + 1; - TEST_NEQ(KeyBlockVerify(h, hsize, public_key, 1), 0, - "KeyBlockVerify() checksum data past end of block"); - - /* Check that we signed header and data key */ - memcpy(h, hdr, hsize); - h->key_block_checksum.data_size = 4; - h->data_key.key_offset = 0; - h->data_key.key_size = 0; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() didn't sign header"); - - memcpy(h, hdr, hsize); - h->data_key.key_offset = hsize; - ReChecksumKeyBlock(h); - TEST_NEQ(KeyBlockVerify(h, hsize, NULL, 1), 0, - "KeyBlockVerify() data key off end"); - - /* Corner cases for error checking */ - TEST_NEQ(KeyBlockVerify(NULL, 4, NULL, 1), 0, - "KeyBlockVerify size too small"); - - /* - * TODO: verify parser can support a bigger header (i.e., one where - * data_key.key_offset is bigger than expected). - */ - - free(h); - free(hdr); -} - -int test_permutation(int signing_key_algorithm, int data_key_algorithm, - const char *keys_dir) -{ - char filename[1024]; - int signing_rsa_len = siglen_map[signing_key_algorithm] * 8; - int data_rsa_len = siglen_map[data_key_algorithm] * 8; - - struct vb2_private_key *signing_private_key = NULL; - struct vb2_packed_key *data_public_key = NULL; - VbPublicKey *signing_public_key = NULL; - int retval = 1; - - printf("***Testing signing algorithm: %s\n", - algo_strings[signing_key_algorithm]); - printf("***With data key algorithm: %s\n", - algo_strings[data_key_algorithm]); - - snprintf(filename, sizeof(filename), - "%s/key_rsa%d.pem", keys_dir, signing_rsa_len); - signing_private_key = - vb2_read_private_key_pem(filename, signing_key_algorithm); - if (!signing_private_key) { - fprintf(stderr, "Error reading signing_private_key: %s\n", - filename); - goto cleanup; - } - - snprintf(filename, sizeof(filename), - "%s/key_rsa%d.keyb", keys_dir, signing_rsa_len); - signing_public_key = (VbPublicKey *) - vb2_read_packed_keyb(filename, signing_key_algorithm, 1); - if (!signing_public_key) { - fprintf(stderr, "Error reading signing_public_key: %s\n", - filename); - goto cleanup; - } - - snprintf(filename, sizeof(filename), - "%s/key_rsa%d.keyb", keys_dir, data_rsa_len); - data_public_key = vb2_read_packed_keyb(filename, data_key_algorithm, 1); - if (!data_public_key) { - fprintf(stderr, "Error reading data_public_key: %s\n", - filename); - goto cleanup; - } - - KeyBlockVerifyTest(signing_public_key, signing_private_key, - data_public_key); - retval = 0; - -cleanup: - if (signing_public_key) - free(signing_public_key); - if (signing_private_key) - free(signing_private_key); - if (data_public_key) - free(data_public_key); - - return retval; -} - -struct test_perm -{ - int signing_algorithm; - int data_key_algorithm; -}; - -/* - * Permutations of signing and data key algorithms in active use: - * 7 (rsa4096 sha256) - 4 (rsa2048 sha256) - * 11 (rsa8192 sha512) - 4 (rsa2048 sha256) - * 11 (rsa8192 sha512) - 7 (rsa4096 sha256) - */ -const struct test_perm test_perms[] = {{7, 4}, {11, 4}, {11, 7}}; - -int main(int argc, char *argv[]) -{ - if (argc == 2) { - /* Test only the algorithms we use */ - int i; - - for (i = 0; i < ARRAY_SIZE(test_perms); i++) { - if (test_permutation(test_perms[i].signing_algorithm, - test_perms[i].data_key_algorithm, - argv[1])) - return 1; - } - - } else if (argc == 3 && !strcasecmp(argv[2], "--all")) { - /* Test all the algorithms */ - int sign_alg, data_alg; - - for (sign_alg = 0; sign_alg < kNumAlgorithms; sign_alg++) { - for (data_alg = 0; data_alg < kNumAlgorithms; - data_alg++) { - if (test_permutation(sign_alg, data_alg, - argv[1])) - return 1; - } - } - } else { - fprintf(stderr, "Usage: %s <keys_dir> [--all]", argv[0]); - return -1; - } - - if (vboot_api_stub_check_memory()) - return 255; - - return gTestSuccess ? 0 : 255; -} |