Add a unit test for remote_prov_utils am: 7a55bb5cf8 (3a6cb24f) · Commits · e / os / android_hardware_interfaces

security/keymint/support/Android.bp

+16 −0

Original line number	Diff line number	Diff line
		@@ -62,3 +62,19 @@ cc_library {
		"libcrypto",
		],
		}

		cc_test {
		name: "libkeymint_remote_prov_support_test",
		srcs: ["remote_prov_utils_test.cpp"],
		static_libs: [
		"libgmock",
		"libgtest_main",
		],
		shared_libs: [
		"libcppbor_external",
		"libcppcose_rkp",
		"libcrypto",
		"libkeymaster_portable",
		"libkeymint_remote_prov_support",
		],
		}

security/keymint/support/remote_prov_utils.cpp

+4 −0

Original line number	Diff line number	Diff line
		@@ -31,6 +31,10 @@ bytevec randomBytes(size_t numBytes) {
		}

		ErrMsgOr<EekChain> generateEekChain(size_t length, const bytevec& eekId) {
		if (length < 2) {
		return "EEK chain must contain at least 2 certs.";
		}

		auto eekChain = cppbor::Array();

		bytevec prev_priv_key;

security/keymint/support/remote_prov_utils_test.cpp

0 → 100644

+55 −0

Original line number	Diff line number	Diff line
		/*
		* Copyright 2021 The Android Open Source Project
		*
		* Licensed under the Apache License, Version 2.0 (the "License");
		* you may not use this file except in compliance with the License.
		* You may obtain a copy of the License at
		*
		* http://www.apache.org/licenses/LICENSE-2.0
		*
		* Unless required by applicable law or agreed to in writing, software
		* distributed under the License is distributed on an "AS IS" BASIS,
		* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
		* See the License for the specific language governing permissions and
		* limitations under the License.
		*/

		#include <gmock/gmock.h>
		#include <gtest/gtest.h>
		#include <keymaster/android_keymaster_utils.h>
		#include <keymaster/remote_provisioning_utils.h>
		#include <openssl/curve25519.h>
		#include <remote_prov/remote_prov_utils.h>
		#include <cstdint>

		namespace aidl::android::hardware::security::keymint::remote_prov {
		namespace {

		using ::keymaster::KeymasterBlob;
		using ::keymaster::validateAndExtractEekPubAndId;
		using ::testing::ElementsAreArray;

		TEST(RemoteProvUtilsTest, GenerateEekChainInvalidLength) {
		ASSERT_FALSE(generateEekChain(1, /eekId=/{}));
		}

		TEST(RemoteProvUtilsTest, GenerateEekChain) {
		bytevec kTestEekId = {'t', 'e', 's', 't', 'I', 'd', 0};
		for (size_t length : {2, 3, 31}) {
		auto get_eek_result = generateEekChain(length, kTestEekId);
		ASSERT_TRUE(get_eek_result) << get_eek_result.message();

		auto& [chain, pubkey, privkey] = *get_eek_result;

		auto validation_result = validateAndExtractEekPubAndId(
		/testMode=/true, KeymasterBlob(chain.data(), chain.size()));
		ASSERT_TRUE(validation_result.isOk());

		auto& [eekPub, eekId] = *validation_result;
		EXPECT_THAT(eekId, ElementsAreArray(kTestEekId));
		EXPECT_THAT(eekPub, ElementsAreArray(pubkey));
		}
		}

		} // namespace
		} // namespace aidl::android::hardware::security::keymint::remote_prov