1 /*
2  * Copyright (C) 2019 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #define LOG_TAG "VtsAttestationTests"
18 
19 #include <aidl/Gtest.h>
20 #include <aidl/Vintf.h>
21 #include <android-base/logging.h>
22 #include <android/hardware/identity/IIdentityCredentialStore.h>
23 #include <android/hardware/identity/support/IdentityCredentialSupport.h>
24 #include <binder/IServiceManager.h>
25 #include <binder/ProcessState.h>
26 #include <cppbor.h>
27 #include <cppbor_parse.h>
28 #include <gtest/gtest.h>
29 #include <future>
30 #include <map>
31 
32 #include "Util.h"
33 
34 namespace android::hardware::identity {
35 
36 using std::endl;
37 using std::map;
38 using std::optional;
39 using std::string;
40 using std::vector;
41 
42 using ::android::sp;
43 using ::android::String16;
44 using ::android::binder::Status;
45 
46 using test_utils::setupWritableCredential;
47 using test_utils::validateAttestationCertificate;
48 
49 // This file verifies the Identity Credential VTS Attestation Certificate
50 // generated.
51 class VtsAttestationTests : public testing::TestWithParam<std::string> {
52   public:
SetUp()53     virtual void SetUp() override {
54         credentialStore_ = android::waitForDeclaredService<IIdentityCredentialStore>(
55                 String16(GetParam().c_str()));
56         ASSERT_NE(credentialStore_, nullptr);
57     }
58 
59     sp<IIdentityCredentialStore> credentialStore_;
60 };
61 
TEST_P(VtsAttestationTests,verifyAttestationWithNonemptyChallengeNonemptyId)62 TEST_P(VtsAttestationTests, verifyAttestationWithNonemptyChallengeNonemptyId) {
63     Status result;
64 
65     sp<IWritableIdentityCredential> writableCredential;
66     ASSERT_TRUE(setupWritableCredential(writableCredential, credentialStore_,
67                                         false /* testCredential */));
68 
69     // Must support at least 32 bytes.
70     string challenge = "0123456789abcdef0123456789abcdef";
71     vector<uint8_t> attestationChallenge(challenge.begin(), challenge.end());
72     vector<Certificate> attestationCertificate;
73     string applicationId = "Attestation Verification";
74     vector<uint8_t> attestationApplicationId = {applicationId.begin(), applicationId.end()};
75 
76     result = writableCredential->getAttestationCertificate(
77             attestationApplicationId, attestationChallenge, &attestationCertificate);
78 
79     ASSERT_TRUE(result.isOk()) << result.exceptionCode() << "; " << result.exceptionMessage()
80                                << endl;
81 
82     validateAttestationCertificate(attestationCertificate, attestationChallenge,
83                                    attestationApplicationId, false);
84 }
85 
TEST_P(VtsAttestationTests,verifyAttestationWithVeryShortChallengeAndId)86 TEST_P(VtsAttestationTests, verifyAttestationWithVeryShortChallengeAndId) {
87     Status result;
88 
89     sp<IWritableIdentityCredential> writableCredential;
90     ASSERT_TRUE(setupWritableCredential(writableCredential, credentialStore_,
91                                         false /* testCredential */));
92 
93     string challenge = "c";
94     vector<uint8_t> attestationChallenge(challenge.begin(), challenge.end());
95     vector<Certificate> attestationCertificate;
96     string applicationId = "i";
97     vector<uint8_t> attestationApplicationId = {applicationId.begin(), applicationId.end()};
98 
99     result = writableCredential->getAttestationCertificate(
100             attestationApplicationId, attestationChallenge, &attestationCertificate);
101 
102     ASSERT_TRUE(result.isOk()) << result.exceptionCode() << "; " << result.exceptionMessage()
103                                << endl;
104 
105     validateAttestationCertificate(attestationCertificate, attestationChallenge,
106                                    attestationApplicationId, false);
107 }
108 
109 GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST(VtsAttestationTests);
110 INSTANTIATE_TEST_SUITE_P(
111         Identity, VtsAttestationTests,
112         testing::ValuesIn(android::getAidlHalInstanceNames(IIdentityCredentialStore::descriptor)),
113         android::PrintInstanceNameToString);
114 
115 }  // namespace android::hardware::identity
116