1175 lines
40 KiB
C
1175 lines
40 KiB
C
/* Copyright (c) 2013 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*
|
|
* Tests for TPM lite library
|
|
*/
|
|
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include "host_common.h"
|
|
#include "test_common.h"
|
|
#include "tlcl.h"
|
|
#include "tlcl_internal.h"
|
|
#include "vboot_common.h"
|
|
|
|
/* Mock data */
|
|
static char debug_info[4096];
|
|
static vb2_error_t mock_retval;
|
|
|
|
/* Call to mocked VbExTpmSendReceive() */
|
|
struct srcall
|
|
{
|
|
const uint8_t *req; /* Request */
|
|
uint8_t *rsp; /* Response */
|
|
uint8_t rsp_buf[32]; /* Default response buffer, if not overridden */
|
|
int req_size; /* Request size */
|
|
uint32_t req_cmd; /* Request command code */
|
|
int rsp_size; /* Response size */
|
|
vb2_error_t retval; /* Value to return */
|
|
};
|
|
|
|
#define MAXCALLS 8
|
|
static struct srcall calls[MAXCALLS];
|
|
static int ncalls;
|
|
|
|
/**
|
|
* Reset mock data (for use before each test)
|
|
*/
|
|
static void ResetMocks(void)
|
|
{
|
|
int i;
|
|
|
|
*debug_info = 0;
|
|
mock_retval = VB2_SUCCESS;
|
|
|
|
memset(calls, 0, sizeof(calls));
|
|
for (i = 0; i < MAXCALLS; i++)
|
|
calls[i].rsp = calls[i].rsp_buf;
|
|
ncalls = 0;
|
|
}
|
|
|
|
/**
|
|
* Set response code and length for call <call_idx>.
|
|
*/
|
|
static void SetResponse(int call_idx, uint32_t response_code, int rsp_size)
|
|
{
|
|
struct srcall *c = calls + call_idx;
|
|
|
|
c->rsp_size = rsp_size;
|
|
ToTpmUint32(c->rsp_buf + 6, response_code);
|
|
}
|
|
|
|
/* Mocks */
|
|
|
|
vb2_error_t VbExTpmInit(void)
|
|
{
|
|
return mock_retval;
|
|
}
|
|
|
|
|
|
vb2_error_t VbExTpmClose(void)
|
|
{
|
|
return mock_retval;
|
|
}
|
|
|
|
uint32_t VbExTpmSendReceive(const uint8_t *request, uint32_t request_length,
|
|
uint8_t *response, uint32_t *response_length)
|
|
{
|
|
struct srcall *c = calls + ncalls++;
|
|
|
|
c->req = request;
|
|
c->req_size = request_length;
|
|
|
|
/* Parse out the command code */
|
|
FromTpmUint32(request + 6, &c->req_cmd);
|
|
|
|
// KLUDGE - remove
|
|
printf("TSR [%d] %#x\n", ncalls-1, c->req_cmd);
|
|
|
|
memset(response, 0, *response_length);
|
|
if (c->rsp_size)
|
|
memcpy(response, c->rsp, c->rsp_size);
|
|
*response_length = c->rsp_size;
|
|
|
|
return c->retval;
|
|
}
|
|
|
|
vb2_error_t VbExTpmGetRandom(uint8_t *buf, uint32_t length)
|
|
{
|
|
memset(buf, 0xa5, length);
|
|
return VB2_SUCCESS;
|
|
}
|
|
|
|
/**
|
|
* Test assorted tlcl functions
|
|
*/
|
|
static void TlclTest(void)
|
|
{
|
|
uint8_t buf[32], buf2[32];
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclLibInit(), VB2_SUCCESS, "Init");
|
|
|
|
ResetMocks();
|
|
mock_retval = VB2_ERROR_MOCK;
|
|
TEST_EQ(TlclLibInit(), mock_retval, "Init bad");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclLibClose(), VB2_SUCCESS, "Close");
|
|
|
|
ResetMocks();
|
|
mock_retval = VB2_ERROR_MOCK;
|
|
TEST_EQ(TlclLibClose(), mock_retval, "Close bad");
|
|
|
|
ResetMocks();
|
|
ToTpmUint32(buf + 2, 123);
|
|
TEST_EQ(TlclPacketSize(buf), 123, "TlclPacketSize");
|
|
|
|
ResetMocks();
|
|
ToTpmUint32(buf + 2, 10);
|
|
TEST_EQ(TlclSendReceive(buf, buf2, sizeof(buf2)), 0, "SendReceive");
|
|
TEST_PTR_EQ(calls[0].req, buf, "SendReceive req ptr");
|
|
TEST_EQ(calls[0].req_size, 10, "SendReceive size");
|
|
|
|
ResetMocks();
|
|
calls[0].retval = VB2_ERROR_MOCK;
|
|
ToTpmUint32(buf + 2, 10);
|
|
TEST_EQ(TlclSendReceive(buf, buf2, sizeof(buf2)), VB2_ERROR_MOCK,
|
|
"SendReceive fail");
|
|
|
|
ResetMocks();
|
|
SetResponse(0, 123, 10);
|
|
ToTpmUint32(buf + 2, 10);
|
|
TEST_EQ(TlclSendReceive(buf, buf2, sizeof(buf2)), 123,
|
|
"SendReceive error response");
|
|
|
|
// TODO: continue self test (if needed or doing)
|
|
// TODO: then retry doing self test
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* Test send-command functions
|
|
*/
|
|
static void SendCommandTest(void)
|
|
{
|
|
ResetMocks();
|
|
TEST_EQ(TlclStartup(), 0, "SaveState");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclSaveState(), 0, "SaveState");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_SaveState, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclResume(), 0, "Resume");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclSelfTestFull(), 0, "SelfTestFull");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_SelfTestFull, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclContinueSelfTest(), 0, "ContinueSelfTest");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ContinueSelfTest, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclAssertPhysicalPresence(), 0,
|
|
"AssertPhysicalPresence");
|
|
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclPhysicalPresenceCMDEnable(), 0,
|
|
"PhysicalPresenceCMDEnable");
|
|
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclFinalizePhysicalPresence(), 0,
|
|
"FinalizePhysicalPresence");
|
|
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclAssertPhysicalPresenceResult(), 0,
|
|
"AssertPhysicalPresenceResult");
|
|
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclLockPhysicalPresence(), 0,
|
|
"LockPhysicalPresence");
|
|
TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclIsOwned(), 0, "IsOwned");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
ResetMocks();
|
|
calls[0].retval = VB2_ERROR_MOCK;
|
|
TEST_NEQ(TlclIsOwned(), 0, "IsOwned");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclForceClear(), 0, "ForceClear");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ForceClear, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclSetEnable(), 0, "SetEnable");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalEnable, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclClearEnable(), 0, "ClearEnable");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalDisable, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclSetDeactivated(0), 0, "SetDeactivated");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalSetDeactivated, " cmd");
|
|
}
|
|
|
|
/**
|
|
* NV spaces test
|
|
*
|
|
* TODO: check params/data read/written.
|
|
*/
|
|
static void ReadWriteTest(void)
|
|
{
|
|
uint8_t buf[32];
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclDefineSpace(1, 2, 3), 0, "DefineSpace");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_DefineSpace, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclUndefineSpace(1), 0, "UndefineSpace");
|
|
// TPM1.2 use TPM_ORD_NV_DefineSpace with size 0 to delete space
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_DefineSpace, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclSetNvLocked(), 0, "SetNvLocked");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_DefineSpace, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclWrite(1, buf, 3), 0, "Write");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_WriteValue, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclRead(1, buf, 3), 0, "Read");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_ReadValue, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclWriteLock(1), 0, "WriteLock");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_WriteValue, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclReadLock(1), 0, "ReadLock");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_ReadValue, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclSetGlobalLock(), 0, "SetGlobalLock");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_WriteValue, " cmd");
|
|
}
|
|
|
|
/**
|
|
* Test DefineSpaceEx
|
|
*/
|
|
static void DefineSpaceExTest(void) {
|
|
uint8_t osap_response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x36, 0x00, 0x00,
|
|
0x00, 0x00, 0x02, 0x41, 0x3d, 0xce, 0x20, 0xa2,
|
|
0x5a, 0xa5, 0x95, 0xbe, 0x26, 0xe8, 0x76, 0x74,
|
|
0x6c, 0x61, 0xf7, 0xa7, 0x24, 0x17, 0xa1, 0x06,
|
|
0xcf, 0x53, 0x6d, 0xd4, 0x26, 0x98, 0x68, 0x86,
|
|
0xe6, 0xf6, 0x62, 0x58, 0xdb, 0xa2, 0x9f, 0x5b,
|
|
0x18, 0xa6, 0xae, 0x36, 0x32, 0x5d,
|
|
};
|
|
uint8_t define_space_response[] = {
|
|
0x00, 0xc5, 0x00, 0x00, 0x00, 0x33, 0x00, 0x00,
|
|
0x00, 0x00, 0x42, 0xe6, 0x38, 0xc6, 0x37, 0x2a,
|
|
0xf2, 0xfe, 0xb4, 0x01, 0x4b, 0x29, 0x63, 0x30,
|
|
0x4e, 0x2f, 0x2e, 0x74, 0x58, 0xcd, 0x00, 0x40,
|
|
0x42, 0x10, 0x40, 0xac, 0x93, 0x0c, 0xff, 0x8a,
|
|
0xc4, 0x98, 0x78, 0xe3, 0xfe, 0x48, 0x5b, 0xb7,
|
|
0xc8, 0x8d, 0xf4,
|
|
};
|
|
uint8_t owner_secret[TPM_AUTH_DATA_LEN] = { 0 };
|
|
TPM_NV_AUTH_POLICY policy;
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = osap_response;
|
|
calls[0].rsp_size = sizeof(osap_response);
|
|
calls[1].rsp = define_space_response;
|
|
calls[1].rsp_size = sizeof(define_space_response);
|
|
TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret),
|
|
0x20000005, 0x2000, 0x10, NULL, 0),
|
|
TPM_SUCCESS, "DefineSpace");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd");
|
|
|
|
/* Pass an auth policy. */
|
|
ResetMocks();
|
|
calls[0].rsp = osap_response;
|
|
calls[0].rsp_size = sizeof(osap_response);
|
|
calls[1].rsp = define_space_response;
|
|
calls[1].rsp_size = sizeof(define_space_response);
|
|
TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret),
|
|
0x20000005, 0x2000, 0x10, &policy,
|
|
sizeof(policy)),
|
|
TPM_SUCCESS, "DefineSpace");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd");
|
|
|
|
/* Verify that the response gets authenticated. */
|
|
ResetMocks();
|
|
calls[0].rsp = osap_response;
|
|
calls[0].rsp_size = sizeof(osap_response);
|
|
calls[1].rsp = define_space_response;
|
|
calls[1].rsp_size = sizeof(define_space_response);
|
|
define_space_response[31] = 0;
|
|
TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret),
|
|
0x20000005, 0x2000, 0x10, NULL, 0),
|
|
TPM_E_AUTHFAIL, "DefineSpace - response auth");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd");
|
|
define_space_response[31] = 0x40;
|
|
|
|
/* Verify that a short OSAP response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = osap_response;
|
|
calls[0].rsp_size = sizeof(osap_response);
|
|
ToTpmUint32(osap_response + sizeof(uint16_t),
|
|
kTpmRequestHeaderLength + sizeof(uint32_t) +
|
|
2 * sizeof(TPM_NONCE) - 1);
|
|
TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret),
|
|
0x20000005, 0x2000, 0x10, NULL, 0),
|
|
TPM_E_INVALID_RESPONSE, "DefineSpace - short OSAP response");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd");
|
|
ToTpmUint32(osap_response + sizeof(uint16_t), sizeof(osap_response));
|
|
|
|
/* Verify that a short DefineSpace response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = osap_response;
|
|
calls[0].rsp_size = sizeof(osap_response);
|
|
calls[1].rsp = define_space_response;
|
|
calls[1].rsp_size = sizeof(define_space_response);
|
|
ToTpmUint32(define_space_response + sizeof(uint16_t),
|
|
kTpmResponseHeaderLength + kTpmResponseAuthBlockLength - 1);
|
|
TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret),
|
|
0x20000005, 0x2000, 0x10, NULL, 0),
|
|
TPM_E_INVALID_RESPONSE,
|
|
"DefineSpace - short DefineSpace response");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd");
|
|
ToTpmUint32(define_space_response + sizeof(uint16_t),
|
|
sizeof(define_space_response));
|
|
}
|
|
|
|
/**
|
|
* Test TlclInitNvAuthPolicy.
|
|
*/
|
|
static void InitNvAuthPolicyTest(void) {
|
|
const uint8_t empty_selection_digest[] = {
|
|
0x79, 0xdd, 0xda, 0xfd, 0xc1, 0x97, 0xdc, 0xcc,
|
|
0xe9, 0x98, 0x9a, 0xee, 0xf5, 0x52, 0x89, 0xee,
|
|
0x24, 0x96, 0x4c, 0xac,
|
|
};
|
|
const uint8_t pcr0_selection_digest[] = {
|
|
0xb3, 0x2b, 0x96, 0x30, 0xd3, 0x21, 0x1e, 0x99,
|
|
0x78, 0x9e, 0xd3, 0x1f, 0x11, 0x8e, 0x96, 0xbc,
|
|
0xf7, 0x7e, 0x7b, 0x06,
|
|
};
|
|
const uint8_t empty_selection_encoding[] = { 0x0, 0x0, 0x0 };
|
|
const uint8_t pcr0_selection_encoding[] = { 0x1, 0x0, 0x0 };
|
|
const uint8_t pcr_values[][TPM_PCR_DIGEST] = {
|
|
{ 0x06, 0x4a, 0xec, 0x9b, 0xbd, 0x94, 0xde, 0xa1,
|
|
0x23, 0x1a, 0xe7, 0x57, 0x67, 0x64, 0x7f, 0x09,
|
|
0x8c, 0x39, 0x8e, 0x79, },
|
|
};
|
|
TPM_NV_AUTH_POLICY policy;
|
|
|
|
/* Test empty selection. */
|
|
uint32_t policy_size = sizeof(policy);
|
|
TlclInitNvAuthPolicy(0x0, NULL, &policy, &policy_size);
|
|
TEST_EQ(policy_size, sizeof(policy), "policy size");
|
|
|
|
uint16_t size_of_select;
|
|
FromTpmUint16(
|
|
(uint8_t*)&policy.pcr_info_read.pcrSelection.sizeOfSelect,
|
|
&size_of_select);
|
|
TEST_EQ(size_of_select, 3, "empty PCR selection read size of select");
|
|
TEST_EQ(memcmp(policy.pcr_info_read.pcrSelection.pcrSelect,
|
|
empty_selection_encoding,
|
|
sizeof(empty_selection_encoding)), 0,
|
|
"empty PCR selection read selection encoding");
|
|
TEST_EQ(policy.pcr_info_read.localityAtRelease,
|
|
TPM_ALL_LOCALITIES & ~TPM_LOC_THREE,
|
|
"empty PCR selection read locality");
|
|
TEST_EQ(memcmp(empty_selection_digest,
|
|
policy.pcr_info_read.digestAtRelease.digest,
|
|
TPM_PCR_DIGEST),
|
|
0, "empty PCR selection read digest");
|
|
|
|
FromTpmUint16(
|
|
(uint8_t*)&policy.pcr_info_write.pcrSelection.sizeOfSelect,
|
|
&size_of_select);
|
|
TEST_EQ(size_of_select, 3, "empty PCR selection write size of select");
|
|
TEST_EQ(memcmp(policy.pcr_info_write.pcrSelection.pcrSelect,
|
|
empty_selection_encoding,
|
|
sizeof(empty_selection_encoding)), 0,
|
|
"empty PCR selection write selection encoding");
|
|
TEST_EQ(policy.pcr_info_write.localityAtRelease,
|
|
TPM_ALL_LOCALITIES & ~TPM_LOC_THREE,
|
|
"empty PCR selection write locality");
|
|
TEST_EQ(memcmp(empty_selection_digest,
|
|
policy.pcr_info_write.digestAtRelease.digest,
|
|
TPM_PCR_DIGEST),
|
|
0, "empty PCR selection write digest");
|
|
|
|
/* Test PCR0 selection. */
|
|
TlclInitNvAuthPolicy(0x1, pcr_values, &policy, &policy_size);
|
|
TEST_EQ(policy_size, sizeof(policy), "policy size");
|
|
|
|
TEST_EQ(memcmp(policy.pcr_info_read.pcrSelection.pcrSelect,
|
|
pcr0_selection_encoding,
|
|
sizeof(pcr0_selection_encoding)), 0,
|
|
"PCR0 selection read selection encoding");
|
|
TEST_EQ(memcmp(pcr0_selection_digest,
|
|
policy.pcr_info_read.digestAtRelease.digest,
|
|
TPM_PCR_DIGEST),
|
|
0, "PCR0 selection read digest");
|
|
|
|
TEST_EQ(memcmp(policy.pcr_info_write.pcrSelection.pcrSelect,
|
|
pcr0_selection_encoding,
|
|
sizeof(pcr0_selection_encoding)), 0,
|
|
"PCR0 selection write selection encoding");
|
|
TEST_EQ(memcmp(pcr0_selection_digest,
|
|
policy.pcr_info_write.digestAtRelease.digest,
|
|
TPM_PCR_DIGEST),
|
|
0, "PCR0 selection write digest");
|
|
}
|
|
|
|
/**
|
|
* Test PCR funcs
|
|
*
|
|
* TODO: check params/data read/written.
|
|
*/
|
|
static void PcrTest(void)
|
|
{
|
|
uint8_t buf[kPcrDigestLength], buf2[kPcrDigestLength];
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclPCRRead(1, buf, kPcrDigestLength), 0, "PCRRead");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_PcrRead, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclPCRRead(1, buf, kPcrDigestLength - 1), TPM_E_IOERROR,
|
|
"PCRRead too small");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclExtend(1, buf, buf2), 0, "Extend");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Extend, " cmd");
|
|
}
|
|
|
|
/**
|
|
* Test TlclGetSpaceInfo.
|
|
*/
|
|
static void GetSpaceInfoTest(void)
|
|
{
|
|
uint8_t response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x55, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x00, 0x18,
|
|
0x20, 0x00, 0x00, 0x04, 0x00, 0x03, 0x01, 0x00,
|
|
0x00, 0x01, 0xb3, 0x2b, 0x96, 0x30, 0xd3, 0x21,
|
|
0x1e, 0x99, 0x78, 0x9e, 0xd3, 0x1f, 0x11, 0x8e,
|
|
0x96, 0xbc, 0xf7, 0x7e, 0x7b, 0x06, 0x00, 0x03,
|
|
0x20, 0x00, 0x00, 0x10, 0x3b, 0xb2, 0x69, 0x03,
|
|
0x3d, 0x12, 0xe1, 0x99, 0x87, 0xe9, 0x3d, 0xf1,
|
|
0x11, 0xe8, 0x69, 0xcb, 0x7f, 0xe7, 0xb7, 0x60,
|
|
0x00, 0x17, 0x00, 0x00, 0x20, 0x00, 0x00, 0x01,
|
|
0x01, 0x00, 0x00, 0x00, 0x45,
|
|
};
|
|
|
|
uint32_t attributes = 0;
|
|
uint32_t size = 0;
|
|
TPM_NV_AUTH_POLICY policy;
|
|
uint32_t policy_size = sizeof(policy);
|
|
|
|
/* Test successful parsing. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy,
|
|
&policy_size),
|
|
TPM_SUCCESS, "GetSpaceInfo");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
TEST_EQ(policy_size, sizeof(policy), " policy_size");
|
|
TEST_EQ(attributes, TPM_NV_PER_WRITEDEFINE, " attributes");
|
|
TEST_EQ(size, 0x45, " size");
|
|
TEST_EQ(memcmp(&policy, response + 20, sizeof(policy)), 0, " policy");
|
|
|
|
/* Test that GetPermissions returns the attributes as well. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclGetPermissions(0x20000004, &attributes),
|
|
TPM_SUCCESS, "GetPermissions");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
TEST_EQ(attributes, TPM_NV_PER_WRITEDEFINE, " attributes");
|
|
|
|
/* Test whether a short response gets detected. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + 10, 0x46);
|
|
TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy,
|
|
&policy_size),
|
|
TPM_E_INVALID_RESPONSE, "GetSpaceInfo short length");
|
|
ToTpmUint32(response + 10, 0x47);
|
|
|
|
/* Test whether an overlong PCR selection length causes failure. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint16(response + 20, 4);
|
|
TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy,
|
|
&policy_size),
|
|
TPM_E_INVALID_RESPONSE, "GetSpaceInfo overlong pcr selection");
|
|
ToTpmUint16(response + 20, 3);
|
|
|
|
/* Test that a short policy buffer triggers an error. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
policy_size = sizeof(policy) - 1;
|
|
TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy,
|
|
&policy_size),
|
|
TPM_E_BUFFER_SIZE, "GetSpaceInfo short policy buffer");
|
|
TEST_EQ(sizeof(policy), policy_size, " policy_size");
|
|
}
|
|
|
|
/**
|
|
* Test flags / capabilities
|
|
*
|
|
* TODO: check params/data read/written.
|
|
*/
|
|
static void FlagsTest(void)
|
|
{
|
|
TPM_PERMANENT_FLAGS pflags;
|
|
TPM_STCLEAR_FLAGS vflags;
|
|
uint8_t disable = 0, deactivated = 0, nvlocked = 0;
|
|
uint8_t buf[32];
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclGetPermanentFlags(&pflags), 0, "GetPermanentFlags");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclGetSTClearFlags(&vflags), 0, "GetSTClearFlags");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclGetFlags(NULL, NULL, NULL), 0, "GetFlags NULL");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
ResetMocks();
|
|
TEST_EQ(TlclGetFlags(&disable, &deactivated, &nvlocked), 0, "GetFlags");
|
|
|
|
ResetMocks();
|
|
TEST_EQ(TlclGetOwnership(buf), 0, "GetOwnership");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
}
|
|
|
|
/**
|
|
* Test random
|
|
*
|
|
* TODO: check params/data read/written.
|
|
* TODO: check overflow tests.
|
|
*/
|
|
static void RandomTest(void)
|
|
{
|
|
uint8_t buf[32];
|
|
uint32_t size;
|
|
|
|
ResetMocks();
|
|
size = sizeof(buf);
|
|
TEST_EQ(TlclGetRandom(buf, sizeof(buf), &size), 0, "GetRandom");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetRandom, " cmd");
|
|
TEST_EQ(size, 0, " size 0");
|
|
}
|
|
|
|
/**
|
|
* Test GetVersion
|
|
*/
|
|
static void GetVersionTest(void)
|
|
{
|
|
uint8_t response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x2a, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x1c, 0x00, 0x30,
|
|
0x01, 0x02, 0x04, 0x20, 0x00, 0x02, 0x03, 0x49,
|
|
0x46, 0x58, 0x00, 0x00, 0x0d, 0x04, 0x20, 0x03,
|
|
0x6f, 0x00, 0x74, 0x70, 0x6d, 0x33, 0x38, 0xff,
|
|
0xff, 0xff
|
|
};
|
|
|
|
uint32_t vendor;
|
|
uint64_t firmware_version;
|
|
uint8_t vendor_specific[32];
|
|
size_t vendor_specific_size;
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL), 0,
|
|
"GetVersion");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
TEST_EQ(vendor, 0x49465800, " vendor");
|
|
TEST_EQ(firmware_version, 0x420, " firmware_version");
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
vendor_specific_size = 100;
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version,
|
|
NULL, &vendor_specific_size), 0,
|
|
"GetVersion - vendor specific size");
|
|
TEST_EQ(vendor_specific_size, 0xd, " vendor specific size");
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
vendor_specific_size = sizeof(vendor_specific);
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version,
|
|
vendor_specific, &vendor_specific_size), 0,
|
|
"GetVersion - vendor specific data");
|
|
TEST_EQ(vendor_specific_size, 0xd, " vendor specific size");
|
|
TEST_EQ(memcmp(vendor_specific, response + 29, 0xd), 0,
|
|
" vendor specific data check");
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
vendor_specific_size = 4;
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version,
|
|
vendor_specific, &vendor_specific_size), 0,
|
|
"GetVersion - vendor specific data, short buf");
|
|
TEST_EQ(vendor_specific_size, 4,
|
|
" min(vendor specific size, buf size)");
|
|
TEST_EQ(memcmp(vendor_specific, response + 29, 4), 0,
|
|
" vendor specific data check");
|
|
|
|
ResetMocks();
|
|
SetResponse(0, TPM_E_IOERROR, 0);
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL),
|
|
TPM_E_IOERROR, "GetVersion - error");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
|
|
/* Adjust response to indicate a 1 byte too short payload size. */
|
|
ToTpmUint32(response + kTpmResponseHeaderLength, 14);
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL),
|
|
TPM_E_IOERROR, "GetVersion -- short");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
|
|
/* Adjust response to indicate a payload size too long for the
|
|
* response buffer. */
|
|
ToTpmUint32(response + kTpmResponseHeaderLength,
|
|
TPM_LARGE_ENOUGH_COMMAND_SIZE - sizeof(uint32_t) -
|
|
kTpmResponseHeaderLength + 1);
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL),
|
|
TPM_E_IOERROR, "GetVersion -- long");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
|
|
/* Restore the original payload length and adjust response to contain
|
|
* less vendor specific data than indicated in its size. */
|
|
ToTpmUint32(response + kTpmResponseHeaderLength, 0x1c);
|
|
ToTpmUint16(response + 27, 0xd + 1);
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclGetVersion(&vendor, &firmware_version,
|
|
NULL, &vendor_specific_size), TPM_E_IOERROR,
|
|
"GetVersion -- short with vendor specific");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd");
|
|
}
|
|
|
|
/**
|
|
* Test IFX FieldUpgradeInfoRequest2
|
|
*/
|
|
static void IFXFieldUpgradeInfoTest(void)
|
|
{
|
|
uint8_t version_response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x2a, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x1c, 0x00, 0x30,
|
|
0x01, 0x02, 0x04, 0x20, 0x00, 0x02, 0x03, 0x49,
|
|
0x46, 0x58, 0x00, 0x00, 0x0d, 0x04, 0x20, 0x03,
|
|
0x6f, 0x00, 0x74, 0x70, 0x6d, 0x33, 0x38, 0xff,
|
|
0xff, 0xff
|
|
};
|
|
uint8_t upgrade_info_response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x76, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x6a, 0x03, 0x02, 0x04, 0x9c,
|
|
0x04, 0x01, 0x00, 0x00, 0x01, 0x02, 0x00, 0x08,
|
|
0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x05, 0x01, 0x00, 0x00, 0x00, 0xff, 0xff,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x04, 0x01,
|
|
0x01, 0x00, 0x00, 0x00, 0x00, 0xbe, 0x00, 0x00,
|
|
0x00, 0x00, 0x04, 0x01, 0x02, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0xff, 0xff, 0xee, 0xee, 0x5a, 0x3c,
|
|
0x04, 0x01, 0x02, 0x00, 0x00, 0x00, 0x08, 0x32,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x3f
|
|
};
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = version_response;
|
|
calls[0].rsp_size = sizeof(version_response);
|
|
calls[1].rsp = upgrade_info_response;
|
|
calls[1].rsp_size = sizeof(upgrade_info_response);
|
|
TPM_IFX_FIELDUPGRADEINFO info;
|
|
TEST_EQ(TlclIFXFieldUpgradeInfo(&info), 0, "IFXFieldUpgradeInfo");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd");
|
|
TEST_EQ(info.wMaxDataSize, 1180, " wMaxDatasize");
|
|
TEST_EQ(info.sBootloaderFirmwarePackage.FwPackageIdentifier, 0x50100,
|
|
" bootloader FWPackageIdeintifier");
|
|
TEST_EQ(info.sBootloaderFirmwarePackage.Version, 0xffff,
|
|
" bootloader Version");
|
|
TEST_EQ(info.sBootloaderFirmwarePackage.StaleVersion, 0x0,
|
|
" bootloader StaleVersion");
|
|
TEST_EQ(info.sFirmwarePackages[0].FwPackageIdentifier, 0x4010100,
|
|
" fw[0] FWPackageIdeintifier");
|
|
TEST_EQ(info.sFirmwarePackages[0].Version, 0xbe,
|
|
" fw[0] Version");
|
|
TEST_EQ(info.sFirmwarePackages[0].StaleVersion, 0x0,
|
|
" fw[0] StaleVersion");
|
|
TEST_EQ(info.sFirmwarePackages[1].FwPackageIdentifier, 0x4010200,
|
|
" fw[1] FWPackageIdeintifier");
|
|
TEST_EQ(info.sFirmwarePackages[1].Version, 0x0,
|
|
" fw[1] Version");
|
|
TEST_EQ(info.sFirmwarePackages[1].StaleVersion, 0xffffeeee,
|
|
" fw[1] StaleVersion");
|
|
TEST_EQ(info.wSecurityModuleStatus, 0x5a3c, " wSecurityModuleStatus");
|
|
TEST_EQ(info.sProcessFirmwarePackage.FwPackageIdentifier, 0x4010200,
|
|
" process FWPackageIdeintifier");
|
|
TEST_EQ(info.sProcessFirmwarePackage.Version, 0x832,
|
|
" process Version");
|
|
TEST_EQ(info.sProcessFirmwarePackage.StaleVersion, 0x0,
|
|
" process StaleVersion");
|
|
TEST_EQ(info.wFieldUpgradeCounter, 0x3f, " wFieldUpgradeCounter");
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = version_response;
|
|
calls[0].rsp_size = sizeof(version_response);
|
|
SetResponse(1, TPM_E_IOERROR, sizeof(upgrade_info_response) - 1);
|
|
TEST_EQ(TlclIFXFieldUpgradeInfo(&info), TPM_E_IOERROR,
|
|
"IFXFieldUpgradeInfo - error");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd");
|
|
|
|
/* Adjust response to indicate a 1 byte too short payload size. */
|
|
ToTpmUint16(upgrade_info_response + kTpmRequestHeaderLength,
|
|
sizeof(upgrade_info_response) - kTpmRequestHeaderLength -
|
|
sizeof(uint16_t) - 1);
|
|
ResetMocks();
|
|
calls[0].rsp = version_response;
|
|
calls[0].rsp_size = sizeof(version_response);
|
|
calls[1].rsp = upgrade_info_response;
|
|
calls[1].rsp_size = sizeof(upgrade_info_response);
|
|
TEST_EQ(TlclIFXFieldUpgradeInfo(&info), TPM_E_INVALID_RESPONSE,
|
|
"IFXFieldUpgradeInfo - short");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd");
|
|
|
|
/* Adjust version response to claim a non-IFX vendor. */
|
|
ToTpmUint32(version_response + kTpmResponseHeaderLength +
|
|
sizeof(uint32_t), 0);
|
|
ResetMocks();
|
|
calls[0].rsp = version_response;
|
|
calls[0].rsp_size = sizeof(version_response);
|
|
TEST_EQ(TlclIFXFieldUpgradeInfo(&info), TPM_E_INVALID_RESPONSE,
|
|
"IFXFieldUpgradeInfo - bad vendor");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd");
|
|
}
|
|
|
|
/**
|
|
* Test ReadPubek
|
|
*/
|
|
static void ReadPubekTest(void) {
|
|
uint8_t response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x01, 0x3a, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x03,
|
|
0x00, 0x01, 0x00, 0x00, 0x00, 0x0c, 0x00, 0x00,
|
|
0x08, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x9c, 0xa8,
|
|
0x8f, 0x15, 0x6d, 0xbf, 0x37, 0x6f, 0x8d, 0xb7,
|
|
0xb2, 0xe2, 0x79, 0x81, 0xf7, 0xc2, 0x3c, 0x84,
|
|
0x64, 0x35, 0x38, 0x59, 0x6a, 0x87, 0x23, 0xe0,
|
|
0x2a, 0xca, 0x40, 0x37, 0x78, 0x75, 0x18, 0xfc,
|
|
0x2d, 0xbe, 0x2b, 0xd9, 0x77, 0x49, 0x4b, 0x8c,
|
|
0xea, 0xe3, 0xcd, 0xa5, 0x27, 0x2b, 0x48, 0x2f,
|
|
0xbe, 0x3b, 0x14, 0xca, 0xe5, 0x22, 0x31, 0xb8,
|
|
0xa1, 0x14, 0xc6, 0x06, 0x8d, 0x14, 0xe8, 0x4a,
|
|
0x36, 0x4d, 0xd3, 0x5f, 0xde, 0x23, 0xd1, 0x7b,
|
|
0xec, 0x3b, 0xdd, 0x84, 0xa4, 0xd4, 0xe9, 0x9a,
|
|
0x89, 0x94, 0x5c, 0xa0, 0x01, 0xfb, 0x95, 0x61,
|
|
0x01, 0xaf, 0x6b, 0x17, 0x39, 0x44, 0x7e, 0x25,
|
|
0x9b, 0x73, 0xfa, 0xde, 0x20, 0xb6, 0x92, 0x95,
|
|
0x7b, 0x76, 0x9f, 0x44, 0xb0, 0xfb, 0x86, 0x9f,
|
|
0xc5, 0xe2, 0x38, 0x9d, 0xcf, 0xce, 0x32, 0x53,
|
|
0x3b, 0x3d, 0x10, 0xb7, 0x89, 0x53, 0x54, 0xc0,
|
|
0x28, 0x52, 0xfc, 0x7a, 0xa9, 0x5b, 0x03, 0xd7,
|
|
0x55, 0x2b, 0x07, 0xa7, 0x22, 0x5b, 0x1e, 0xe5,
|
|
0x4f, 0x43, 0x70, 0x7d, 0x81, 0xbb, 0x3d, 0x56,
|
|
0xfe, 0x5c, 0x47, 0xcc, 0xc0, 0x6e, 0xc8, 0xc7,
|
|
0xd9, 0x96, 0x53, 0x2d, 0xd2, 0x28, 0xc7, 0xdf,
|
|
0x5a, 0x07, 0x50, 0x3b, 0x17, 0x25, 0xe7, 0x51,
|
|
0xed, 0xf7, 0x94, 0x02, 0x2a, 0x4c, 0x31, 0x57,
|
|
0x34, 0x51, 0x05, 0x26, 0x43, 0xd4, 0x40, 0x47,
|
|
0x3e, 0x02, 0xfe, 0xa5, 0x08, 0xc7, 0x94, 0xaa,
|
|
0xd3, 0x14, 0x02, 0x1b, 0x41, 0x4c, 0xcd, 0xd6,
|
|
0x8c, 0xad, 0x8e, 0x72, 0x1a, 0x36, 0xc7, 0x23,
|
|
0xd1, 0x38, 0x83, 0x9f, 0xac, 0x66, 0xc5, 0x25,
|
|
0x82, 0x9d, 0x18, 0x67, 0x78, 0xca, 0x15, 0x63,
|
|
0x15, 0xd8, 0x83, 0xbd, 0xcc, 0xe7, 0xf7, 0xe9,
|
|
0xba, 0xda, 0x23, 0xdf, 0x53, 0x30, 0x51, 0x1a,
|
|
0xf1, 0x0c, 0x02, 0xe7, 0x65, 0x0d, 0x95, 0x52,
|
|
0x76, 0xd1, 0x1b, 0xb0, 0x77, 0xba, 0x31, 0x0b,
|
|
0x17, 0xb5, 0x63, 0x0d, 0x50, 0x7c, 0xbc, 0x63,
|
|
0xbf, 0xc3,
|
|
};
|
|
uint32_t exponent = 0;
|
|
uint8_t modulus[TPM_RSA_2048_LEN];
|
|
uint32_t modulus_size = TPM_RSA_2048_LEN;
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
TEST_EQ(TlclReadPubek(&exponent, modulus, &modulus_size), TPM_SUCCESS,
|
|
"ReadPubek");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
TEST_EQ(exponent, 0x10001, " exponent");
|
|
TEST_EQ(memcmp(modulus, response + 38, sizeof(modulus)), TPM_SUCCESS,
|
|
" modulus");
|
|
TEST_EQ(modulus_size, 0x100, " modulus_size");
|
|
|
|
/* Test that the command returns the full size of the modulus if the
|
|
* input buffer is too small. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
modulus_size = 0;
|
|
TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size),
|
|
TPM_E_BUFFER_SIZE, "ReadPubek - returns modulus size");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
TEST_EQ(modulus_size, 0x100, " modulus_size");
|
|
|
|
/* Test that a too large parm_size value gets handled correctly. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + 18, 1 << 24);
|
|
TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size),
|
|
TPM_E_INVALID_RESPONSE, "ReadPubek - large parm_size");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
ToTpmUint32(response + 18, 12);
|
|
|
|
/* Test that a too small parm_size value gets handled correctly. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + 18, 11);
|
|
TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size),
|
|
TPM_E_INVALID_RESPONSE, "ReadPubek - small parm_size");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
ToTpmUint32(response + 18, 12);
|
|
|
|
/* Test that an overlong modulus size gets handled correctly. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + 34, 1 << 24);
|
|
modulus_size = sizeof(modulus);
|
|
TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size),
|
|
TPM_E_INVALID_RESPONSE, "ReadPubek - large modulus size");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
ToTpmUint32(response + 34, TPM_RSA_2048_LEN);
|
|
|
|
/* Test that a large exponent size gets handled correctly. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + 20, 1 << 24);
|
|
TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size),
|
|
TPM_E_INVALID_RESPONSE, "ReadPubek - large exponent size");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
ToTpmUint32(response + 20, 0);
|
|
|
|
/* Test that an incorrect auth tag causes an error. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
response[294] = 0;
|
|
TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size),
|
|
TPM_E_INVALID_RESPONSE, "ReadPubek - incorrect auth");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd");
|
|
response[294] = 0x60;
|
|
}
|
|
|
|
/**
|
|
* Test TakeOwnership
|
|
*/
|
|
static void TakeOwnershipTest(void) {
|
|
uint8_t oiap_response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x22, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x4c, 0x04, 0x1a, 0x18, 0xa9,
|
|
0xf7, 0x9b, 0x2e, 0xe1, 0xf2, 0x16, 0x99, 0xa0,
|
|
0x27, 0x5f, 0x0c, 0x8f, 0x24, 0x55, 0x1d, 0xaf,
|
|
0x96, 0x49,
|
|
};
|
|
uint8_t take_ownership_response[] = {
|
|
0x00, 0xc5, 0x00, 0x00, 0x01, 0x62, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x28, 0x00, 0x00, 0x00, 0x11,
|
|
0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00,
|
|
0x01, 0x00, 0x03, 0x00, 0x01, 0x00, 0x00, 0x00,
|
|
0x0c, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00,
|
|
0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x01, 0x00, 0x92, 0x61, 0xa5,
|
|
0x30, 0x5f, 0x39, 0xb7, 0xc3, 0x51, 0x53, 0x84,
|
|
0xaf, 0x51, 0x64, 0x65, 0xd7, 0x58, 0xda, 0x15,
|
|
0xb0, 0xb8, 0xe8, 0xea, 0xf5, 0xb2, 0x21, 0x34,
|
|
0x09, 0x71, 0xa0, 0xd5, 0x2b, 0x21, 0xd6, 0x16,
|
|
0xbd, 0x03, 0xc3, 0x83, 0x7e, 0x48, 0x36, 0xd7,
|
|
0xfa, 0xc7, 0x5e, 0x5e, 0xb4, 0xc3, 0x9f, 0x00,
|
|
0xcc, 0x7a, 0x3e, 0x0a, 0x00, 0x34, 0xbd, 0xbc,
|
|
0x7b, 0x28, 0x0e, 0x4a, 0xef, 0xa5, 0x86, 0x50,
|
|
0xa5, 0xfe, 0x8f, 0x7d, 0xbc, 0x86, 0xf3, 0x3d,
|
|
0x8c, 0x65, 0x4c, 0x3b, 0x29, 0x3b, 0x40, 0x8b,
|
|
0xca, 0xf9, 0xa1, 0xc8, 0x62, 0x52, 0xe1, 0x1f,
|
|
0x0d, 0x89, 0x71, 0xca, 0xbb, 0x64, 0xef, 0x3f,
|
|
0x97, 0x97, 0xed, 0x57, 0xb3, 0xd8, 0x67, 0x4c,
|
|
0x46, 0x1c, 0x35, 0x0c, 0xba, 0x12, 0xae, 0x2e,
|
|
0x6d, 0xa7, 0x48, 0xd6, 0x9a, 0x8a, 0x60, 0x22,
|
|
0xd9, 0xe5, 0x97, 0x50, 0xc1, 0x24, 0xaf, 0xb6,
|
|
0x41, 0xfe, 0x6d, 0xfe, 0x28, 0x3f, 0xce, 0x35,
|
|
0x9b, 0x77, 0xe9, 0xd5, 0x36, 0xdb, 0x70, 0x5e,
|
|
0xd7, 0xb9, 0x89, 0xac, 0xae, 0x55, 0x59, 0x00,
|
|
0x7d, 0x47, 0x5d, 0x73, 0x4f, 0x1b, 0x17, 0xfa,
|
|
0xae, 0xb0, 0xf7, 0xb7, 0x63, 0x4d, 0xa9, 0x94,
|
|
0x0c, 0x1e, 0x02, 0x59, 0x8d, 0x34, 0x1f, 0x01,
|
|
0x6d, 0xa7, 0x05, 0xa7, 0xae, 0xbd, 0x9b, 0xfa,
|
|
0xed, 0xe6, 0xe3, 0xf2, 0xc0, 0xa9, 0x16, 0xb6,
|
|
0xd2, 0x23, 0x37, 0x2e, 0x43, 0x5e, 0x5f, 0xe6,
|
|
0x77, 0x0d, 0x49, 0x48, 0x07, 0x57, 0x64, 0xd2,
|
|
0xd9, 0x60, 0xff, 0xe3, 0x60, 0xb6, 0xd7, 0xa5,
|
|
0xe3, 0xd8, 0xa3, 0x93, 0xb3, 0xe9, 0xeb, 0x1c,
|
|
0x53, 0x42, 0x08, 0x9f, 0x0c, 0x13, 0x72, 0x3c,
|
|
0x80, 0xf8, 0xa1, 0x8c, 0x4d, 0xe5, 0x1e, 0xe7,
|
|
0xef, 0x2b, 0x33, 0x23, 0x1e, 0x5a, 0xf6, 0xc1,
|
|
0x46, 0x78, 0x06, 0x7e, 0xe7, 0x00, 0x00, 0x00,
|
|
0x00, 0xef, 0x84, 0x26, 0xd3, 0xb6, 0x27, 0x4a,
|
|
0x4a, 0x0f, 0x84, 0x65, 0x4b, 0xff, 0x80, 0x7e,
|
|
0xb5, 0xf6, 0xbe, 0x8c, 0xed, 0x00, 0xad, 0xd1,
|
|
0x73, 0x8a, 0x55, 0x9f, 0x50, 0xb4, 0x34, 0xba,
|
|
0x2d, 0x6d, 0x80, 0x3a, 0xdc, 0x82, 0x94, 0x3b,
|
|
0x96, 0x58,
|
|
};
|
|
uint8_t encrypted_secret[] = {
|
|
0x46, 0x9a, 0x17, 0x31, 0x04, 0x72, 0x58, 0xcd,
|
|
0xac, 0xe7, 0xa4, 0x1f, 0x48, 0xa3, 0x89, 0x10,
|
|
0xac, 0x40, 0xe2, 0x66, 0xfa, 0xfd, 0xe9, 0xab,
|
|
0x7a, 0x55, 0xd3, 0xc0, 0x61, 0xca, 0x28, 0x0d,
|
|
0x29, 0x4a, 0xe4, 0x9a, 0xbe, 0x62, 0x51, 0xe8,
|
|
0x3f, 0xbf, 0x84, 0xae, 0x4e, 0x6c, 0x0e, 0x11,
|
|
0x2b, 0xba, 0x62, 0x5d, 0xf5, 0x9d, 0xf8, 0xcd,
|
|
0x5c, 0x9d, 0x5b, 0xee, 0x5e, 0xdc, 0xaf, 0xc1,
|
|
0xbf, 0x22, 0x14, 0x0d, 0x68, 0xdf, 0xe1, 0x94,
|
|
0x6b, 0x06, 0xc4, 0x5b, 0xdd, 0xee, 0xd3, 0xef,
|
|
0x67, 0xb5, 0xb0, 0xee, 0x58, 0x88, 0x2d, 0x5c,
|
|
0x7d, 0xda, 0x83, 0xd5, 0xb5, 0x72, 0x43, 0x33,
|
|
0xf7, 0x9e, 0xf0, 0x52, 0x8c, 0xc1, 0xf1, 0xea,
|
|
0xcf, 0x9f, 0x0e, 0xfb, 0xb3, 0x03, 0xfe, 0xb3,
|
|
0xb4, 0x38, 0xa2, 0xfb, 0x2f, 0x64, 0xb6, 0x42,
|
|
0x4c, 0x76, 0x70, 0xfa, 0x67, 0xc0, 0x48, 0x98,
|
|
0x52, 0x3e, 0xdb, 0xe6, 0xfe, 0x44, 0x96, 0x14,
|
|
0x5a, 0x6a, 0x19, 0x53, 0x46, 0x13, 0xe6, 0xc9,
|
|
0x21, 0xee, 0x8e, 0xc2, 0xf2, 0x39, 0x2d, 0xba,
|
|
0x6f, 0xeb, 0x80, 0x89, 0xf3, 0xea, 0xfa, 0x5c,
|
|
0x9c, 0x88, 0xe0, 0xb1, 0x53, 0xa0, 0xe5, 0xe0,
|
|
0x90, 0x33, 0x9d, 0x9d, 0x5f, 0xba, 0x6d, 0x68,
|
|
0xb2, 0x9f, 0x4f, 0xa1, 0x28, 0xf9, 0xc4, 0x53,
|
|
0x72, 0x51, 0x48, 0x4b, 0xb3, 0xf9, 0x18, 0x43,
|
|
0x3a, 0x85, 0xdc, 0x70, 0x46, 0x0c, 0x3c, 0xe1,
|
|
0x17, 0x1c, 0x18, 0x6f, 0xfd, 0xff, 0x77, 0x8d,
|
|
0x04, 0xfc, 0xb3, 0xc0, 0x9a, 0x03, 0x74, 0x1d,
|
|
0x06, 0x8f, 0xb6, 0x0a, 0x3e, 0xea, 0x91, 0x87,
|
|
0xa9, 0x68, 0x26, 0x91, 0x81, 0x02, 0xe4, 0x10,
|
|
0x66, 0xb6, 0x5f, 0x43, 0x47, 0x55, 0x25, 0xe0,
|
|
0xbd, 0xd3, 0xab, 0xbd, 0xfd, 0x15, 0x85, 0x39,
|
|
0x22, 0x93, 0xfc, 0x9d, 0x74, 0x0e, 0xcf, 0x5a,
|
|
};
|
|
uint8_t owner_secret[TPM_AUTH_DATA_LEN] = { 0 };
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = oiap_response;
|
|
calls[0].rsp_size = sizeof(oiap_response);
|
|
calls[1].rsp = take_ownership_response;
|
|
calls[1].rsp_size = sizeof(take_ownership_response);
|
|
TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret,
|
|
owner_secret), TPM_SUCCESS, "TakeOwnership");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_TakeOwnership, " takeownership cmd");
|
|
|
|
/* Verify that the response gets authenticated. */
|
|
ResetMocks();
|
|
calls[0].rsp = oiap_response;
|
|
calls[0].rsp_size = sizeof(oiap_response);
|
|
calls[1].rsp = take_ownership_response;
|
|
calls[1].rsp_size = sizeof(take_ownership_response);
|
|
take_ownership_response[334] = 0;
|
|
TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret,
|
|
owner_secret),
|
|
TPM_E_AUTHFAIL, "TakeOwnership - response auth");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_TakeOwnership, " takeownership cmd");
|
|
take_ownership_response[334] = 0xad;
|
|
|
|
/* Verify that a short OIAP response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = oiap_response;
|
|
calls[0].rsp_size = sizeof(oiap_response);
|
|
ToTpmUint32(oiap_response + sizeof(uint16_t),
|
|
kTpmRequestHeaderLength + sizeof(uint32_t) +
|
|
sizeof(TPM_NONCE) - 1);
|
|
TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret,
|
|
owner_secret),
|
|
TPM_E_INVALID_RESPONSE, "TakeOwnership - short OIAP response");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd");
|
|
ToTpmUint32(oiap_response + sizeof(uint16_t), sizeof(oiap_response));
|
|
|
|
/* Verify that a short TakeOwnership response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = oiap_response;
|
|
calls[0].rsp_size = sizeof(oiap_response);
|
|
calls[1].rsp = take_ownership_response;
|
|
calls[1].rsp_size = sizeof(take_ownership_response);
|
|
ToTpmUint32(take_ownership_response + sizeof(uint16_t),
|
|
kTpmResponseHeaderLength + kTpmResponseAuthBlockLength - 1);
|
|
TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret,
|
|
owner_secret),
|
|
TPM_E_INVALID_RESPONSE,
|
|
"TakeOwnership - short TakeOwnership response");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd");
|
|
TEST_EQ(calls[1].req_cmd, TPM_ORD_TakeOwnership, " takeownership cmd");
|
|
ToTpmUint32(take_ownership_response + sizeof(uint16_t),
|
|
sizeof(take_ownership_response));
|
|
}
|
|
|
|
/**
|
|
* Test ReadDelegationFamilyTable
|
|
*/
|
|
static void ReadDelegationFamilyTableTest(void) {
|
|
uint8_t response[] = {
|
|
0x00, 0xc4, 0x00, 0x00, 0x00, 0x30, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x1e, 0x00, 0x25,
|
|
0x17, 0x00, 0x00, 0x00, 0x4f, 0x00, 0x00, 0x00,
|
|
0x01, 0x00, 0x00, 0x00, 0x02, 0x00, 0x25, 0x42,
|
|
0x00, 0x00, 0x00, 0x50, 0x00, 0x00, 0x00, 0x01,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
};
|
|
|
|
TPM_FAMILY_TABLE_ENTRY table[20];
|
|
uint32_t table_size;
|
|
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
table_size = 8;
|
|
TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size),
|
|
TPM_SUCCESS, "ReadDelegationFamilyTable");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd");
|
|
TEST_EQ(table_size, 2, " table_size");
|
|
TEST_EQ(table[0].tag, 0x25, " table[0].tag");
|
|
TEST_EQ(table[0].familyLabel, 0x17, " table[0].familyLabel");
|
|
TEST_EQ(table[0].familyID, 0x4f, " table[0].familyID");
|
|
TEST_EQ(table[0].verificationCount, 0x1,
|
|
" table[0].verificationCount");
|
|
TEST_EQ(table[0].flags, 0x2, " table[0].flags");
|
|
TEST_EQ(table[1].tag, 0x25, " table[1].tag");
|
|
TEST_EQ(table[1].familyLabel, 0x42, " table[1].familyLabel");
|
|
TEST_EQ(table[1].familyID, 0x50, " table[1].familyID");
|
|
TEST_EQ(table[1].verificationCount, 0x1,
|
|
" table[1].verificationCount");
|
|
TEST_EQ(table[1].flags, 0x0, " table[1].flags");
|
|
|
|
/* Test that required table size is returned if more space required. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
table_size = 1;
|
|
TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size),
|
|
TPM_E_BUFFER_SIZE, "ReadDelegationFamilyTable");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd");
|
|
TEST_EQ(table_size, 2, " table_size");
|
|
|
|
/* Test that an overlong response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + sizeof(uint16_t), TPM_LARGE_ENOUGH_COMMAND_SIZE +
|
|
1);
|
|
TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size),
|
|
TPM_E_INVALID_RESPONSE,
|
|
"ReadDelegationFamilyTable - too long response");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd");
|
|
ToTpmUint32(response + sizeof(uint16_t), sizeof(response));
|
|
|
|
/* Test that a short response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
ToTpmUint32(response + sizeof(uint16_t),
|
|
kTpmRequestHeaderLength + sizeof(uint32_t) - 1);
|
|
TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size),
|
|
TPM_E_INVALID_RESPONSE,
|
|
"ReadDelegationFamilyTable - too short response");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd");
|
|
ToTpmUint32(response + sizeof(uint16_t), sizeof(response));
|
|
|
|
/* Test that long table size in response gets caught. */
|
|
ResetMocks();
|
|
calls[0].rsp = response;
|
|
calls[0].rsp_size = sizeof(response);
|
|
table_size = 20;
|
|
ToTpmUint32(response + kTpmResponseHeaderLength,
|
|
TPM_LARGE_ENOUGH_COMMAND_SIZE);
|
|
TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size),
|
|
TPM_E_INVALID_RESPONSE,
|
|
"ReadDelegationFamilyTable - overlong family table");
|
|
TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd");
|
|
ToTpmUint32(response + kTpmResponseHeaderLength, 0x1e);
|
|
}
|
|
|
|
int main(void)
|
|
{
|
|
TlclTest();
|
|
SendCommandTest();
|
|
ReadWriteTest();
|
|
DefineSpaceExTest();
|
|
InitNvAuthPolicyTest();
|
|
PcrTest();
|
|
GetSpaceInfoTest();
|
|
FlagsTest();
|
|
RandomTest();
|
|
GetVersionTest();
|
|
IFXFieldUpgradeInfoTest();
|
|
ReadPubekTest();
|
|
TakeOwnershipTest();
|
|
ReadDelegationFamilyTableTest();
|
|
|
|
return gTestSuccess ? 0 : 255;
|
|
}
|