Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3a0f503b authored by Jakub Pawlowski's avatar Jakub Pawlowski
Browse files

LE Security Test Test: First successfull LE PTS test 

Implementation of the first successful PTS test implementing
"Just Works IUT Initiator" test case.

Tag: #gd-refactor
Bug: 155399771
Test: gd/cert/run --host --test_filter=LeSecurityTest
Change-Id: I37582b65f4f5acb3ce5e855ea909a6665524d00e
parent 14c1f8af

system/gd/hci/facade/le_acl_manager_facade.proto

+0 −1
Original line number Diff line number Diff line
@@ -3,7 +3,6 @@ syntax = "proto3"; 
package bluetooth.hci;



import "google/protobuf/empty.proto";

import "facade/common.proto";



service LeAclManagerFacade {

  rpc CreateConnection(LeConnectionMsg) returns (stream LeConnectionEvent) {}

system/gd/security/cert/le_security_test.py

+38 −0
Original line number Diff line number Diff line
@@ -33,9 +33,11 @@ from security.cert.cert_security import CertSecurity 
from security.facade_pb2 import AuthenticationRequirements

from security.facade_pb2 import BondMsgType

from security.facade_pb2 import OobDataPresent

from security.facade_pb2 import OobDataMessage

from security.facade_pb2 import UiCallbackMsg

from security.facade_pb2 import UiCallbackType

from security.facade_pb2 import UiMsgType

from security.facade_pb2 import LeAuthReqMsg

from security.facade_pb2 import LeIoCapabilityMessage

from bluetooth_packets_python3.hci_packets import OpCode
@@ -156,3 +158,39 @@ class LeSecurityTest(GdBaseTestClass): 
        # 6. The IUT closes the connection before receiving the delayed response or does not respond to it when it is received.

        #TODO:

        #assertThat(self.dut_hci.get_event_stream()).emits(HciMatchers.Disconnect())



    @metadata(pts_test_id="SM/MAS/JW/BV-01-C", pts_test_name="Just Works IUT Initiator – Success")

    def test_just_works_iut_initiator(self):

        """

            Verify that the IUT performs the Just Works pairing procedure correctly as master, initiator when both sides do not require MITM protection.

        """

        self._prepare_cert_for_connection()



        self.dut.security.SetLeIoCapability(

            LeIoCapabilityMessage(capabilities=LeIoCapabilityMessage.LeIoCapabilities.KEYBOARD_ONLY))

        self.dut.security.SetOobDataPresent(OobDataMessage(data_present=OobDataPresent.NOT_PRESENT))

        self.dut.security.SetLeAuthReq(LeAuthReqMsg(auth_req=0x00))



        self.cert.security.SetLeIoCapability(

            LeIoCapabilityMessage(capabilities=LeIoCapabilityMessage.LeIoCapabilities.DISPLAY_ONLY))

        self.cert.security.SetOobDataPresent(OobDataMessage(data_present=OobDataPresent.NOT_PRESENT))

        self.cert.security.SetLeAuthReq(LeAuthReqMsg(auth_req=0x00))



        # 1. IUT transmits Pairing Request command with:

        # a. IO capability set to any IO capability

        # b. OOB data flag set to 0x00 (OOB Authentication data not present)

        # c. AuthReq Bonding Flags set to ‘00’ and the MITM flag set to ‘0’ and all the reserved bits are set to ‘0’

        self.dut.security.CreateBondLe(self.cert_address)



        self.cert_security.wait_for_ui_event(expected_ui_event=UiMsgType.DISPLAY_PAIRING_PROMPT)



        # 2. Lower Tester responds with a Pairing Response command, with:

        # a. IO capability set to “KeyboardDisplay”

        # b. OOB data flag set to 0x00 (OOB Authentication data not present)

        # c. AuthReq Bonding Flags set to ‘00’, and the MITM flag set to ‘0’ and all the reserved bits are set to ‘0’

        self.cert.security.SendUiCallback(

            UiCallbackMsg(

                message_type=UiCallbackType.PAIRING_PROMPT, boolean=True, unique_id=1, address=self.cert_address))



        # 3. IUT and Lower Tester perform phase 2 of the just works pairing procedure and establish an encrypted link with the key generated in phase 2.

        self.dut_security.wait_for_bond_event(expected_bond_event=BondMsgType.DEVICE_BONDED)

system/gd/security/facade.cc

+6 −0
Original line number Diff line number Diff line
@@ -137,6 +137,12 @@ class SecurityModuleFacadeService : public SecurityModuleFacade::Service, public 
    return ::grpc::Status::OK;

  }



  ::grpc::Status SetLeAuthReq(

      ::grpc::ServerContext* context, const LeAuthReqMsg* request, ::google::protobuf::Empty* response) override {

    security_module_->GetFacadeConfigurationApi()->SetLeAuthReq(request->auth_req());

    return ::grpc::Status::OK;

  }



  ::grpc::Status SetLeInitiatorAddress(

      ::grpc::ServerContext* context,

      const facade::BluetoothAddressWithType* request,

system/gd/security/facade.proto

+6 −1
Original line number Diff line number Diff line
@@ -12,9 +12,10 @@ service SecurityModuleFacade { 
  rpc CancelBond(facade.BluetoothAddressWithType) returns (google.protobuf.Empty) {}

  rpc RemoveBond(facade.BluetoothAddressWithType) returns (google.protobuf.Empty) {}

  rpc SetIoCapability(IoCapabilityMessage) returns (google.protobuf.Empty) {}

  rpc SetLeIoCapability(LeIoCapabilityMessage) returns (google.protobuf.Empty) {}

  rpc SetAuthenticationRequirements(AuthenticationRequirementsMessage) returns (google.protobuf.Empty) {}

  rpc SetOobDataPresent(OobDataMessage) returns (google.protobuf.Empty) {}

  rpc SetLeIoCapability(LeIoCapabilityMessage) returns (google.protobuf.Empty) {}

  rpc SetLeAuthReq(LeAuthReqMsg) returns (google.protobuf.Empty) {}

  rpc SetLeInitiatorAddress(facade.BluetoothAddressWithType) returns (google.protobuf.Empty) {}

  rpc SendUiCallback(UiCallbackMsg) returns (google.protobuf.Empty) {}

  rpc FetchUiEvents(google.protobuf.Empty) returns (stream UiMsg) {}
@@ -98,6 +99,10 @@ message AuthenticationRequirementsMessage { 
  AuthenticationRequirements requirement = 1;

}



message LeAuthReqMsg {

  uint32 auth_req = 1;

}



enum OobDataPresent {

  NOT_PRESENT = 0;

  P192_PRESENT = 1;

system/gd/security/facade_configuration_api.cc

+4 −0
Original line number Diff line number Diff line
@@ -40,5 +40,9 @@ void FacadeConfigurationApi::SetOobData(hci::OobDataPresent data_present) { 
void FacadeConfigurationApi::SetLeIoCapability(security::IoCapability io_capability) {

  security_handler_->CallOn(security_manager_impl_, &internal::SecurityManagerImpl::SetLeIoCapability, io_capability);

}



void FacadeConfigurationApi::SetLeAuthReq(uint8_t auth_req) {

  security_handler_->CallOn(security_manager_impl_, &internal::SecurityManagerImpl::SetLeAuthReq, auth_req);

}

}  // namespace security

}  // namespace bluetooth