1 /*
2 * Copyright (C) 2019 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #define LOG_TAG "VtsAttestationTests"
18
19 #include <aidl/Gtest.h>
20 #include <aidl/Vintf.h>
21 #include <android-base/logging.h>
22 #include <android/hardware/identity/IIdentityCredentialStore.h>
23 #include <android/hardware/identity/support/IdentityCredentialSupport.h>
24 #include <binder/IServiceManager.h>
25 #include <binder/ProcessState.h>
26 #include <cppbor.h>
27 #include <cppbor_parse.h>
28 #include <gtest/gtest.h>
29 #include <future>
30 #include <map>
31
32 #include "Util.h"
33
34 namespace android::hardware::identity {
35
36 using std::endl;
37 using std::map;
38 using std::optional;
39 using std::string;
40 using std::vector;
41
42 using ::android::sp;
43 using ::android::String16;
44 using ::android::binder::Status;
45
46 using test_utils::setupWritableCredential;
47 using test_utils::validateAttestationCertificate;
48
49 // This file verifies the Identity Credential VTS Attestation Certificate
50 // generated.
51 class VtsAttestationTests : public testing::TestWithParam<std::string> {
52 public:
SetUp()53 virtual void SetUp() override {
54 credentialStore_ = android::waitForDeclaredService<IIdentityCredentialStore>(
55 String16(GetParam().c_str()));
56 ASSERT_NE(credentialStore_, nullptr);
57 }
58
59 sp<IIdentityCredentialStore> credentialStore_;
60 };
61
TEST_P(VtsAttestationTests,verifyAttestationWithNonemptyChallengeNonemptyId)62 TEST_P(VtsAttestationTests, verifyAttestationWithNonemptyChallengeNonemptyId) {
63 Status result;
64
65 sp<IWritableIdentityCredential> writableCredential;
66 ASSERT_TRUE(setupWritableCredential(writableCredential, credentialStore_,
67 false /* testCredential */));
68
69 // Must support at least 32 bytes.
70 string challenge = "0123456789abcdef0123456789abcdef";
71 vector<uint8_t> attestationChallenge(challenge.begin(), challenge.end());
72 vector<Certificate> attestationCertificate;
73 string applicationId = "Attestation Verification";
74 vector<uint8_t> attestationApplicationId = {applicationId.begin(), applicationId.end()};
75
76 result = writableCredential->getAttestationCertificate(
77 attestationApplicationId, attestationChallenge, &attestationCertificate);
78
79 ASSERT_TRUE(result.isOk()) << result.exceptionCode() << "; " << result.exceptionMessage()
80 << endl;
81
82 validateAttestationCertificate(attestationCertificate, attestationChallenge,
83 attestationApplicationId, false);
84 }
85
TEST_P(VtsAttestationTests,verifyAttestationWithVeryShortChallengeAndId)86 TEST_P(VtsAttestationTests, verifyAttestationWithVeryShortChallengeAndId) {
87 Status result;
88
89 sp<IWritableIdentityCredential> writableCredential;
90 ASSERT_TRUE(setupWritableCredential(writableCredential, credentialStore_,
91 false /* testCredential */));
92
93 string challenge = "c";
94 vector<uint8_t> attestationChallenge(challenge.begin(), challenge.end());
95 vector<Certificate> attestationCertificate;
96 string applicationId = "i";
97 vector<uint8_t> attestationApplicationId = {applicationId.begin(), applicationId.end()};
98
99 result = writableCredential->getAttestationCertificate(
100 attestationApplicationId, attestationChallenge, &attestationCertificate);
101
102 ASSERT_TRUE(result.isOk()) << result.exceptionCode() << "; " << result.exceptionMessage()
103 << endl;
104
105 validateAttestationCertificate(attestationCertificate, attestationChallenge,
106 attestationApplicationId, false);
107 }
108
109 GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST(VtsAttestationTests);
110 INSTANTIATE_TEST_SUITE_P(
111 Identity, VtsAttestationTests,
112 testing::ValuesIn(android::getAidlHalInstanceNames(IIdentityCredentialStore::descriptor)),
113 android::PrintInstanceNameToString);
114
115 } // namespace android::hardware::identity
116