/* Copyright 2013 The ChromiumOS Authors * Use of this source code is governed by a BSD-style license that can be * found in the LICENSE file. * * Tests for TPM lite library */ #include #include #include #include #include "2api.h" #include "common/tests.h" #include "host_common.h" #include "tlcl.h" #include "tlcl_internal.h" /* Mock data */ static char debug_info[4096]; static vb2_error_t mock_retval; /* Call to mocked vb2ex_tpm_send_recv() */ struct srcall { const uint8_t *req; /* Request */ uint8_t *rsp; /* Response */ uint8_t rsp_buf[32]; /* Default response buffer, if not overridden */ int req_size; /* Request size */ uint32_t req_cmd; /* Request command code */ int rsp_size; /* Response size */ vb2_error_t retval; /* Value to return */ }; #define MAXCALLS 8 static struct srcall calls[MAXCALLS]; static int ncalls; /** * Reset mock data (for use before each test) */ static void ResetMocks(void) { int i; *debug_info = 0; mock_retval = VB2_SUCCESS; memset(calls, 0, sizeof(calls)); for (i = 0; i < MAXCALLS; i++) calls[i].rsp = calls[i].rsp_buf; ncalls = 0; } /** * Set response code and length for call . */ static void SetResponse(int call_idx, uint32_t response_code, int rsp_size) { struct srcall *c = calls + call_idx; c->rsp_size = rsp_size; ToTpmUint32(c->rsp_buf + 6, response_code); } /* Mocks */ vb2_error_t vb2ex_tpm_init(void) { return mock_retval; } vb2_error_t vb2ex_tpm_close(void) { return mock_retval; } uint32_t vb2ex_tpm_send_recv(const uint8_t *request, uint32_t request_length, uint8_t *response, uint32_t *response_length) { struct srcall *c = calls + ncalls++; c->req = request; c->req_size = request_length; /* Parse out the command code */ FromTpmUint32(request + 6, &c->req_cmd); // KLUDGE - remove printf("TSR [%d] %#x\n", ncalls-1, c->req_cmd); memset(response, 0, *response_length); if (c->rsp_size) memcpy(response, c->rsp, c->rsp_size); *response_length = c->rsp_size; return c->retval; } vb2_error_t vb2ex_tpm_get_random(uint8_t *buf, uint32_t length) { memset(buf, 0xa5, length); return VB2_SUCCESS; } /** * Test assorted tlcl functions */ static void TlclTest(void) { uint8_t buf[32], buf2[32]; ResetMocks(); TEST_EQ(TlclLibInit(), VB2_SUCCESS, "Init"); ResetMocks(); mock_retval = VB2_ERROR_MOCK; TEST_EQ(TlclLibInit(), mock_retval, "Init bad"); ResetMocks(); TEST_EQ(TlclLibClose(), VB2_SUCCESS, "Close"); ResetMocks(); mock_retval = VB2_ERROR_MOCK; TEST_EQ(TlclLibClose(), mock_retval, "Close bad"); ResetMocks(); ToTpmUint32(buf + 2, 123); TEST_EQ(TlclPacketSize(buf), 123, "TlclPacketSize"); ResetMocks(); ToTpmUint32(buf + 2, 10); TEST_EQ(TlclSendReceive(buf, buf2, sizeof(buf2)), 0, "SendReceive"); TEST_PTR_EQ(calls[0].req, buf, "SendReceive req ptr"); TEST_EQ(calls[0].req_size, 10, "SendReceive size"); ResetMocks(); calls[0].retval = VB2_ERROR_MOCK; ToTpmUint32(buf + 2, 10); TEST_EQ(TlclSendReceive(buf, buf2, sizeof(buf2)), VB2_ERROR_MOCK, "SendReceive fail"); ResetMocks(); SetResponse(0, 123, 10); ToTpmUint32(buf + 2, 10); TEST_EQ(TlclSendReceive(buf, buf2, sizeof(buf2)), 123, "SendReceive error response"); // TODO: continue self test (if needed or doing) // TODO: then retry doing self test } /** * Test send-command functions */ static void SendCommandTest(void) { ResetMocks(); TEST_EQ(TlclStartup(), 0, "SaveState"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd"); ResetMocks(); TEST_EQ(TlclSaveState(), 0, "SaveState"); TEST_EQ(calls[0].req_cmd, TPM_ORD_SaveState, " cmd"); ResetMocks(); TEST_EQ(TlclResume(), 0, "Resume"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Startup, " cmd"); ResetMocks(); TEST_EQ(TlclSelfTestFull(), 0, "SelfTestFull"); TEST_EQ(calls[0].req_cmd, TPM_ORD_SelfTestFull, " cmd"); ResetMocks(); TEST_EQ(TlclContinueSelfTest(), 0, "ContinueSelfTest"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ContinueSelfTest, " cmd"); ResetMocks(); TEST_EQ(TlclAssertPhysicalPresence(), 0, "AssertPhysicalPresence"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclPhysicalPresenceCMDEnable(), 0, "PhysicalPresenceCMDEnable"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclFinalizePhysicalPresence(), 0, "FinalizePhysicalPresence"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclAssertPhysicalPresenceResult(), 0, "AssertPhysicalPresenceResult"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclLockPhysicalPresence(), 0, "LockPhysicalPresence"); TEST_EQ(calls[0].req_cmd, TSC_ORD_PhysicalPresence, " cmd"); ResetMocks(); TEST_EQ(TlclIsOwned(), 0, "IsOwned"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); ResetMocks(); calls[0].retval = VB2_ERROR_MOCK; TEST_NEQ(TlclIsOwned(), 0, "IsOwned"); ResetMocks(); TEST_EQ(TlclForceClear(), 0, "ForceClear"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ForceClear, " cmd"); ResetMocks(); TEST_EQ(TlclSetEnable(), 0, "SetEnable"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalEnable, " cmd"); ResetMocks(); TEST_EQ(TlclClearEnable(), 0, "ClearEnable"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalDisable, " cmd"); ResetMocks(); TEST_EQ(TlclSetDeactivated(0), 0, "SetDeactivated"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PhysicalSetDeactivated, " cmd"); } /** * NV spaces test * * TODO: check params/data read/written. */ static void ReadWriteTest(void) { uint8_t buf[32]; ResetMocks(); TEST_EQ(TlclDefineSpace(1, 2, 3), 0, "DefineSpace"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_DefineSpace, " cmd"); ResetMocks(); TEST_EQ(TlclUndefineSpace(1), 0, "UndefineSpace"); // TPM1.2 use TPM_ORD_NV_DefineSpace with size 0 to delete space TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_DefineSpace, " cmd"); ResetMocks(); TEST_EQ(TlclSetNvLocked(), 0, "SetNvLocked"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_DefineSpace, " cmd"); ResetMocks(); TEST_EQ(TlclWrite(1, buf, 3), 0, "Write"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_WriteValue, " cmd"); ResetMocks(); TEST_EQ(TlclRead(1, buf, 3), 0, "Read"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_ReadValue, " cmd"); ResetMocks(); TEST_EQ(TlclWriteLock(1), 0, "WriteLock"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_WriteValue, " cmd"); ResetMocks(); TEST_EQ(TlclReadLock(1), 0, "ReadLock"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_ReadValue, " cmd"); ResetMocks(); TEST_EQ(TlclSetGlobalLock(), 0, "SetGlobalLock"); TEST_EQ(calls[0].req_cmd, TPM_ORD_NV_WriteValue, " cmd"); } /** * Test DefineSpaceEx */ static void DefineSpaceExTest(void) { uint8_t osap_response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x36, 0x00, 0x00, 0x00, 0x00, 0x02, 0x41, 0x3d, 0xce, 0x20, 0xa2, 0x5a, 0xa5, 0x95, 0xbe, 0x26, 0xe8, 0x76, 0x74, 0x6c, 0x61, 0xf7, 0xa7, 0x24, 0x17, 0xa1, 0x06, 0xcf, 0x53, 0x6d, 0xd4, 0x26, 0x98, 0x68, 0x86, 0xe6, 0xf6, 0x62, 0x58, 0xdb, 0xa2, 0x9f, 0x5b, 0x18, 0xa6, 0xae, 0x36, 0x32, 0x5d, }; uint8_t define_space_response[] = { 0x00, 0xc5, 0x00, 0x00, 0x00, 0x33, 0x00, 0x00, 0x00, 0x00, 0x42, 0xe6, 0x38, 0xc6, 0x37, 0x2a, 0xf2, 0xfe, 0xb4, 0x01, 0x4b, 0x29, 0x63, 0x30, 0x4e, 0x2f, 0x2e, 0x74, 0x58, 0xcd, 0x00, 0x40, 0x42, 0x10, 0x40, 0xac, 0x93, 0x0c, 0xff, 0x8a, 0xc4, 0x98, 0x78, 0xe3, 0xfe, 0x48, 0x5b, 0xb7, 0xc8, 0x8d, 0xf4, }; uint8_t owner_secret[TPM_AUTH_DATA_LEN] = { 0 }; TPM_NV_AUTH_POLICY policy; ResetMocks(); calls[0].rsp = osap_response; calls[0].rsp_size = sizeof(osap_response); calls[1].rsp = define_space_response; calls[1].rsp_size = sizeof(define_space_response); TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret), 0x20000005, 0x2000, 0x10, NULL, 0), TPM_SUCCESS, "DefineSpace"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd"); /* Pass an auth policy. */ ResetMocks(); calls[0].rsp = osap_response; calls[0].rsp_size = sizeof(osap_response); calls[1].rsp = define_space_response; calls[1].rsp_size = sizeof(define_space_response); TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret), 0x20000005, 0x2000, 0x10, &policy, sizeof(policy)), TPM_SUCCESS, "DefineSpace"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd"); /* Verify that the response gets authenticated. */ ResetMocks(); calls[0].rsp = osap_response; calls[0].rsp_size = sizeof(osap_response); calls[1].rsp = define_space_response; calls[1].rsp_size = sizeof(define_space_response); define_space_response[31] = 0; TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret), 0x20000005, 0x2000, 0x10, NULL, 0), TPM_E_AUTHFAIL, "DefineSpace - response auth"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd"); define_space_response[31] = 0x40; /* Verify that a short OSAP response gets caught. */ ResetMocks(); calls[0].rsp = osap_response; calls[0].rsp_size = sizeof(osap_response); ToTpmUint32(osap_response + sizeof(uint16_t), kTpmRequestHeaderLength + sizeof(uint32_t) + 2 * sizeof(TPM_NONCE) - 1); TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret), 0x20000005, 0x2000, 0x10, NULL, 0), TPM_E_INVALID_RESPONSE, "DefineSpace - short OSAP response"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd"); ToTpmUint32(osap_response + sizeof(uint16_t), sizeof(osap_response)); /* Verify that a short DefineSpace response gets caught. */ ResetMocks(); calls[0].rsp = osap_response; calls[0].rsp_size = sizeof(osap_response); calls[1].rsp = define_space_response; calls[1].rsp_size = sizeof(define_space_response); ToTpmUint32(define_space_response + sizeof(uint16_t), kTpmResponseHeaderLength + kTpmResponseAuthBlockLength - 1); TEST_EQ(TlclDefineSpaceEx(owner_secret, sizeof(owner_secret), 0x20000005, 0x2000, 0x10, NULL, 0), TPM_E_INVALID_RESPONSE, "DefineSpace - short DefineSpace response"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OSAP, " osap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_NV_DefineSpace, " definespace cmd"); ToTpmUint32(define_space_response + sizeof(uint16_t), sizeof(define_space_response)); } /** * Test TlclInitNvAuthPolicy. */ static void InitNvAuthPolicyTest(void) { const uint8_t empty_selection_digest[] = { 0x79, 0xdd, 0xda, 0xfd, 0xc1, 0x97, 0xdc, 0xcc, 0xe9, 0x98, 0x9a, 0xee, 0xf5, 0x52, 0x89, 0xee, 0x24, 0x96, 0x4c, 0xac, }; const uint8_t pcr0_selection_digest[] = { 0xb3, 0x2b, 0x96, 0x30, 0xd3, 0x21, 0x1e, 0x99, 0x78, 0x9e, 0xd3, 0x1f, 0x11, 0x8e, 0x96, 0xbc, 0xf7, 0x7e, 0x7b, 0x06, }; const uint8_t empty_selection_encoding[] = { 0x0, 0x0, 0x0 }; const uint8_t pcr0_selection_encoding[] = { 0x1, 0x0, 0x0 }; const uint8_t pcr_values[][TPM_PCR_DIGEST] = { { 0x06, 0x4a, 0xec, 0x9b, 0xbd, 0x94, 0xde, 0xa1, 0x23, 0x1a, 0xe7, 0x57, 0x67, 0x64, 0x7f, 0x09, 0x8c, 0x39, 0x8e, 0x79, }, }; TPM_NV_AUTH_POLICY policy; /* Test empty selection. */ uint32_t policy_size = sizeof(policy); TlclInitNvAuthPolicy(0x0, NULL, &policy, &policy_size); TEST_EQ(policy_size, sizeof(policy), "policy size"); uint16_t size_of_select; FromTpmUint16( (uint8_t*)&policy.pcr_info_read.pcrSelection.sizeOfSelect, &size_of_select); TEST_EQ(size_of_select, 3, "empty PCR selection read size of select"); TEST_EQ(memcmp(policy.pcr_info_read.pcrSelection.pcrSelect, empty_selection_encoding, sizeof(empty_selection_encoding)), 0, "empty PCR selection read selection encoding"); TEST_EQ(policy.pcr_info_read.localityAtRelease, TPM_ALL_LOCALITIES & ~TPM_LOC_THREE, "empty PCR selection read locality"); TEST_EQ(memcmp(empty_selection_digest, policy.pcr_info_read.digestAtRelease.digest, TPM_PCR_DIGEST), 0, "empty PCR selection read digest"); FromTpmUint16( (uint8_t*)&policy.pcr_info_write.pcrSelection.sizeOfSelect, &size_of_select); TEST_EQ(size_of_select, 3, "empty PCR selection write size of select"); TEST_EQ(memcmp(policy.pcr_info_write.pcrSelection.pcrSelect, empty_selection_encoding, sizeof(empty_selection_encoding)), 0, "empty PCR selection write selection encoding"); TEST_EQ(policy.pcr_info_write.localityAtRelease, TPM_ALL_LOCALITIES & ~TPM_LOC_THREE, "empty PCR selection write locality"); TEST_EQ(memcmp(empty_selection_digest, policy.pcr_info_write.digestAtRelease.digest, TPM_PCR_DIGEST), 0, "empty PCR selection write digest"); /* Test PCR0 selection. */ TlclInitNvAuthPolicy(0x1, pcr_values, &policy, &policy_size); TEST_EQ(policy_size, sizeof(policy), "policy size"); TEST_EQ(memcmp(policy.pcr_info_read.pcrSelection.pcrSelect, pcr0_selection_encoding, sizeof(pcr0_selection_encoding)), 0, "PCR0 selection read selection encoding"); TEST_EQ(memcmp(pcr0_selection_digest, policy.pcr_info_read.digestAtRelease.digest, TPM_PCR_DIGEST), 0, "PCR0 selection read digest"); TEST_EQ(memcmp(policy.pcr_info_write.pcrSelection.pcrSelect, pcr0_selection_encoding, sizeof(pcr0_selection_encoding)), 0, "PCR0 selection write selection encoding"); TEST_EQ(memcmp(pcr0_selection_digest, policy.pcr_info_write.digestAtRelease.digest, TPM_PCR_DIGEST), 0, "PCR0 selection write digest"); } /** * Test PCR funcs * * TODO: check params/data read/written. */ static void PcrTest(void) { uint8_t buf[kPcrDigestLength], buf2[kPcrDigestLength]; ResetMocks(); TEST_EQ(TlclPCRRead(1, buf, kPcrDigestLength), 0, "PCRRead"); TEST_EQ(calls[0].req_cmd, TPM_ORD_PcrRead, " cmd"); ResetMocks(); TEST_EQ(TlclPCRRead(1, buf, kPcrDigestLength - 1), TPM_E_IOERROR, "PCRRead too small"); ResetMocks(); TEST_EQ(TlclExtend(1, buf, buf2), 0, "Extend"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Extend, " cmd"); } /** * Test TlclGetSpaceInfo. */ static void GetSpaceInfoTest(void) { uint8_t response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x55, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x00, 0x18, 0x20, 0x00, 0x00, 0x04, 0x00, 0x03, 0x01, 0x00, 0x00, 0x01, 0xb3, 0x2b, 0x96, 0x30, 0xd3, 0x21, 0x1e, 0x99, 0x78, 0x9e, 0xd3, 0x1f, 0x11, 0x8e, 0x96, 0xbc, 0xf7, 0x7e, 0x7b, 0x06, 0x00, 0x03, 0x20, 0x00, 0x00, 0x10, 0x3b, 0xb2, 0x69, 0x03, 0x3d, 0x12, 0xe1, 0x99, 0x87, 0xe9, 0x3d, 0xf1, 0x11, 0xe8, 0x69, 0xcb, 0x7f, 0xe7, 0xb7, 0x60, 0x00, 0x17, 0x00, 0x00, 0x20, 0x00, 0x00, 0x01, 0x01, 0x00, 0x00, 0x00, 0x45, }; uint32_t attributes = 0; uint32_t size = 0; TPM_NV_AUTH_POLICY policy; uint32_t policy_size = sizeof(policy); /* Test successful parsing. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy, &policy_size), TPM_SUCCESS, "GetSpaceInfo"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); TEST_EQ(policy_size, sizeof(policy), " policy_size"); TEST_EQ(attributes, TPM_NV_PER_WRITEDEFINE, " attributes"); TEST_EQ(size, 0x45, " size"); TEST_EQ(memcmp(&policy, response + 20, sizeof(policy)), 0, " policy"); /* Test that GetPermissions returns the attributes as well. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclGetPermissions(0x20000004, &attributes), TPM_SUCCESS, "GetPermissions"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); TEST_EQ(attributes, TPM_NV_PER_WRITEDEFINE, " attributes"); /* Test whether a short response gets detected. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + 10, 0x46); TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy, &policy_size), TPM_E_INVALID_RESPONSE, "GetSpaceInfo short length"); ToTpmUint32(response + 10, 0x47); /* Test whether an overlong PCR selection length causes failure. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint16(response + 20, 4); TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy, &policy_size), TPM_E_INVALID_RESPONSE, "GetSpaceInfo overlong pcr selection"); ToTpmUint16(response + 20, 3); /* Test that a short policy buffer triggers an error. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); policy_size = sizeof(policy) - 1; TEST_EQ(TlclGetSpaceInfo(0x20000004, &attributes, &size, &policy, &policy_size), TPM_E_BUFFER_SIZE, "GetSpaceInfo short policy buffer"); TEST_EQ(sizeof(policy), policy_size, " policy_size"); } /** * Test flags / capabilities * * TODO: check params/data read/written. */ static void FlagsTest(void) { TPM_PERMANENT_FLAGS pflags; TPM_STCLEAR_FLAGS vflags; uint8_t disable = 0, deactivated = 0, nvlocked = 0; uint8_t buf[32]; ResetMocks(); TEST_EQ(TlclGetPermanentFlags(&pflags), 0, "GetPermanentFlags"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); ResetMocks(); TEST_EQ(TlclGetSTClearFlags(&vflags), 0, "GetSTClearFlags"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); ResetMocks(); TEST_EQ(TlclGetFlags(NULL, NULL, NULL), 0, "GetFlags NULL"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); ResetMocks(); TEST_EQ(TlclGetFlags(&disable, &deactivated, &nvlocked), 0, "GetFlags"); ResetMocks(); TEST_EQ(TlclGetOwnership(buf), 0, "GetOwnership"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); } /** * Test random * * TODO: check params/data read/written. * TODO: check overflow tests. */ static void RandomTest(void) { uint8_t buf[32]; uint32_t size; ResetMocks(); size = sizeof(buf); TEST_EQ(TlclGetRandom(buf, sizeof(buf), &size), 0, "GetRandom"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetRandom, " cmd"); TEST_EQ(size, 0, " size 0"); } /** * Test GetVersion */ static void GetVersionTest(void) { uint8_t response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x2a, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x1c, 0x00, 0x30, 0x01, 0x02, 0x04, 0x20, 0x00, 0x02, 0x03, 0x49, 0x46, 0x58, 0x00, 0x00, 0x0d, 0x04, 0x20, 0x03, 0x6f, 0x00, 0x74, 0x70, 0x6d, 0x33, 0x38, 0xff, 0xff, 0xff }; uint32_t vendor; uint64_t firmware_version; uint8_t vendor_specific[32]; size_t vendor_specific_size; ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL), 0, "GetVersion"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); TEST_EQ(vendor, 0x49465800, " vendor"); TEST_EQ(firmware_version, 0x420, " firmware_version"); ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); vendor_specific_size = 100; TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, &vendor_specific_size), 0, "GetVersion - vendor specific size"); TEST_EQ(vendor_specific_size, 0xd, " vendor specific size"); ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); vendor_specific_size = sizeof(vendor_specific); TEST_EQ(TlclGetVersion(&vendor, &firmware_version, vendor_specific, &vendor_specific_size), 0, "GetVersion - vendor specific data"); TEST_EQ(vendor_specific_size, 0xd, " vendor specific size"); TEST_EQ(memcmp(vendor_specific, response + 29, 0xd), 0, " vendor specific data check"); ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); vendor_specific_size = 4; TEST_EQ(TlclGetVersion(&vendor, &firmware_version, vendor_specific, &vendor_specific_size), 0, "GetVersion - vendor specific data, short buf"); TEST_EQ(vendor_specific_size, 4, " min(vendor specific size, buf size)"); TEST_EQ(memcmp(vendor_specific, response + 29, 4), 0, " vendor specific data check"); ResetMocks(); SetResponse(0, TPM_E_IOERROR, 0); TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL), TPM_E_IOERROR, "GetVersion - error"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); /* Adjust response to indicate a 1 byte too short payload size. */ ToTpmUint32(response + kTpmResponseHeaderLength, 14); ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL), TPM_E_IOERROR, "GetVersion -- short"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); /* Adjust response to indicate a payload size too long for the * response buffer. */ ToTpmUint32(response + kTpmResponseHeaderLength, TPM_LARGE_ENOUGH_COMMAND_SIZE - sizeof(uint32_t) - kTpmResponseHeaderLength + 1); ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, NULL), TPM_E_IOERROR, "GetVersion -- long"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); /* Restore the original payload length and adjust response to contain * less vendor specific data than indicated in its size. */ ToTpmUint32(response + kTpmResponseHeaderLength, 0x1c); ToTpmUint16(response + 27, 0xd + 1); ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclGetVersion(&vendor, &firmware_version, NULL, &vendor_specific_size), TPM_E_IOERROR, "GetVersion -- short with vendor specific"); TEST_EQ(calls[0].req_cmd, TPM_ORD_GetCapability, " cmd"); } /** * Test IFX FieldUpgradeInfoRequest2 */ static void IFXFieldUpgradeInfoTest(void) { uint8_t version_response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x2a, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x1c, 0x00, 0x30, 0x01, 0x02, 0x04, 0x20, 0x00, 0x02, 0x03, 0x49, 0x46, 0x58, 0x00, 0x00, 0x0d, 0x04, 0x20, 0x03, 0x6f, 0x00, 0x74, 0x70, 0x6d, 0x33, 0x38, 0xff, 0xff, 0xff }; uint8_t upgrade_info_response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x76, 0x00, 0x00, 0x00, 0x00, 0x00, 0x6a, 0x03, 0x02, 0x04, 0x9c, 0x04, 0x01, 0x00, 0x00, 0x01, 0x02, 0x00, 0x08, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x05, 0x01, 0x00, 0x00, 0x00, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x04, 0x01, 0x01, 0x00, 0x00, 0x00, 0x00, 0xbe, 0x00, 0x00, 0x00, 0x00, 0x04, 0x01, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xee, 0xee, 0x5a, 0x3c, 0x04, 0x01, 0x02, 0x00, 0x00, 0x00, 0x08, 0x32, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x3f }; ResetMocks(); calls[0].rsp = version_response; calls[0].rsp_size = sizeof(version_response); calls[1].rsp = upgrade_info_response; calls[1].rsp_size = sizeof(upgrade_info_response); TPM_IFX_FIELDUPGRADEINFO info; TEST_EQ(TlclIFXFieldUpgradeInfo(&info), 0, "IFXFieldUpgradeInfo"); TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd"); TEST_EQ(info.wMaxDataSize, 1180, " wMaxDatasize"); TEST_EQ(info.sBootloaderFirmwarePackage.FwPackageIdentifier, 0x50100, " bootloader FWPackageIdeintifier"); TEST_EQ(info.sBootloaderFirmwarePackage.Version, 0xffff, " bootloader Version"); TEST_EQ(info.sBootloaderFirmwarePackage.StaleVersion, 0x0, " bootloader StaleVersion"); TEST_EQ(info.sFirmwarePackages[0].FwPackageIdentifier, 0x4010100, " fw[0] FWPackageIdeintifier"); TEST_EQ(info.sFirmwarePackages[0].Version, 0xbe, " fw[0] Version"); TEST_EQ(info.sFirmwarePackages[0].StaleVersion, 0x0, " fw[0] StaleVersion"); TEST_EQ(info.sFirmwarePackages[1].FwPackageIdentifier, 0x4010200, " fw[1] FWPackageIdeintifier"); TEST_EQ(info.sFirmwarePackages[1].Version, 0x0, " fw[1] Version"); TEST_EQ(info.sFirmwarePackages[1].StaleVersion, 0xffffeeee, " fw[1] StaleVersion"); TEST_EQ(info.wSecurityModuleStatus, 0x5a3c, " wSecurityModuleStatus"); TEST_EQ(info.sProcessFirmwarePackage.FwPackageIdentifier, 0x4010200, " process FWPackageIdeintifier"); TEST_EQ(info.sProcessFirmwarePackage.Version, 0x832, " process Version"); TEST_EQ(info.sProcessFirmwarePackage.StaleVersion, 0x0, " process StaleVersion"); TEST_EQ(info.wFieldUpgradeCounter, 0x3f, " wFieldUpgradeCounter"); ResetMocks(); calls[0].rsp = version_response; calls[0].rsp_size = sizeof(version_response); SetResponse(1, TPM_E_IOERROR, sizeof(upgrade_info_response) - 1); TEST_EQ(TlclIFXFieldUpgradeInfo(&info), TPM_E_IOERROR, "IFXFieldUpgradeInfo - error"); TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd"); /* Adjust response to indicate a 1 byte too short payload size. */ ToTpmUint16(upgrade_info_response + kTpmRequestHeaderLength, sizeof(upgrade_info_response) - kTpmRequestHeaderLength - sizeof(uint16_t) - 1); ResetMocks(); calls[0].rsp = version_response; calls[0].rsp_size = sizeof(version_response); calls[1].rsp = upgrade_info_response; calls[1].rsp_size = sizeof(upgrade_info_response); TEST_EQ(TlclIFXFieldUpgradeInfo(&info), TPM_E_INVALID_RESPONSE, "IFXFieldUpgradeInfo - short"); TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd"); /* Adjust version response to claim a non-IFX vendor. */ ToTpmUint32(version_response + kTpmResponseHeaderLength + sizeof(uint32_t), 0); ResetMocks(); calls[0].rsp = version_response; calls[0].rsp_size = sizeof(version_response); TEST_EQ(TlclIFXFieldUpgradeInfo(&info), TPM_E_INVALID_RESPONSE, "IFXFieldUpgradeInfo - bad vendor"); TEST_EQ(calls[1].req_cmd, TPM_ORD_FieldUpgrade, " cmd"); } /** * Test ReadPubek */ static void ReadPubekTest(void) { uint8_t response[] = { 0x00, 0xc4, 0x00, 0x00, 0x01, 0x3a, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x03, 0x00, 0x01, 0x00, 0x00, 0x00, 0x0c, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x9c, 0xa8, 0x8f, 0x15, 0x6d, 0xbf, 0x37, 0x6f, 0x8d, 0xb7, 0xb2, 0xe2, 0x79, 0x81, 0xf7, 0xc2, 0x3c, 0x84, 0x64, 0x35, 0x38, 0x59, 0x6a, 0x87, 0x23, 0xe0, 0x2a, 0xca, 0x40, 0x37, 0x78, 0x75, 0x18, 0xfc, 0x2d, 0xbe, 0x2b, 0xd9, 0x77, 0x49, 0x4b, 0x8c, 0xea, 0xe3, 0xcd, 0xa5, 0x27, 0x2b, 0x48, 0x2f, 0xbe, 0x3b, 0x14, 0xca, 0xe5, 0x22, 0x31, 0xb8, 0xa1, 0x14, 0xc6, 0x06, 0x8d, 0x14, 0xe8, 0x4a, 0x36, 0x4d, 0xd3, 0x5f, 0xde, 0x23, 0xd1, 0x7b, 0xec, 0x3b, 0xdd, 0x84, 0xa4, 0xd4, 0xe9, 0x9a, 0x89, 0x94, 0x5c, 0xa0, 0x01, 0xfb, 0x95, 0x61, 0x01, 0xaf, 0x6b, 0x17, 0x39, 0x44, 0x7e, 0x25, 0x9b, 0x73, 0xfa, 0xde, 0x20, 0xb6, 0x92, 0x95, 0x7b, 0x76, 0x9f, 0x44, 0xb0, 0xfb, 0x86, 0x9f, 0xc5, 0xe2, 0x38, 0x9d, 0xcf, 0xce, 0x32, 0x53, 0x3b, 0x3d, 0x10, 0xb7, 0x89, 0x53, 0x54, 0xc0, 0x28, 0x52, 0xfc, 0x7a, 0xa9, 0x5b, 0x03, 0xd7, 0x55, 0x2b, 0x07, 0xa7, 0x22, 0x5b, 0x1e, 0xe5, 0x4f, 0x43, 0x70, 0x7d, 0x81, 0xbb, 0x3d, 0x56, 0xfe, 0x5c, 0x47, 0xcc, 0xc0, 0x6e, 0xc8, 0xc7, 0xd9, 0x96, 0x53, 0x2d, 0xd2, 0x28, 0xc7, 0xdf, 0x5a, 0x07, 0x50, 0x3b, 0x17, 0x25, 0xe7, 0x51, 0xed, 0xf7, 0x94, 0x02, 0x2a, 0x4c, 0x31, 0x57, 0x34, 0x51, 0x05, 0x26, 0x43, 0xd4, 0x40, 0x47, 0x3e, 0x02, 0xfe, 0xa5, 0x08, 0xc7, 0x94, 0xaa, 0xd3, 0x14, 0x02, 0x1b, 0x41, 0x4c, 0xcd, 0xd6, 0x8c, 0xad, 0x8e, 0x72, 0x1a, 0x36, 0xc7, 0x23, 0xd1, 0x38, 0x83, 0x9f, 0xac, 0x66, 0xc5, 0x25, 0x82, 0x9d, 0x18, 0x67, 0x78, 0xca, 0x15, 0x63, 0x15, 0xd8, 0x83, 0xbd, 0xcc, 0xe7, 0xf7, 0xe9, 0xba, 0xda, 0x23, 0xdf, 0x53, 0x30, 0x51, 0x1a, 0xf1, 0x0c, 0x02, 0xe7, 0x65, 0x0d, 0x95, 0x52, 0x76, 0xd1, 0x1b, 0xb0, 0x77, 0xba, 0x31, 0x0b, 0x17, 0xb5, 0x63, 0x0d, 0x50, 0x7c, 0xbc, 0x63, 0xbf, 0xc3, }; uint32_t exponent = 0; uint8_t modulus[TPM_RSA_2048_LEN]; uint32_t modulus_size = TPM_RSA_2048_LEN; ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); TEST_EQ(TlclReadPubek(&exponent, modulus, &modulus_size), TPM_SUCCESS, "ReadPubek"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); TEST_EQ(exponent, 0x10001, " exponent"); TEST_EQ(memcmp(modulus, response + 38, sizeof(modulus)), TPM_SUCCESS, " modulus"); TEST_EQ(modulus_size, 0x100, " modulus_size"); /* Test that the command returns the full size of the modulus if the * input buffer is too small. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); modulus_size = 0; TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size), TPM_E_BUFFER_SIZE, "ReadPubek - returns modulus size"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); TEST_EQ(modulus_size, 0x100, " modulus_size"); /* Test that a too large parm_size value gets handled correctly. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + 18, 1 << 24); TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size), TPM_E_INVALID_RESPONSE, "ReadPubek - large parm_size"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); ToTpmUint32(response + 18, 12); /* Test that a too small parm_size value gets handled correctly. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + 18, 11); TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size), TPM_E_INVALID_RESPONSE, "ReadPubek - small parm_size"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); ToTpmUint32(response + 18, 12); /* Test that an overlong modulus size gets handled correctly. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + 34, 1 << 24); modulus_size = sizeof(modulus); TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size), TPM_E_INVALID_RESPONSE, "ReadPubek - large modulus size"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); ToTpmUint32(response + 34, TPM_RSA_2048_LEN); /* Test that a large exponent size gets handled correctly. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + 20, 1 << 24); TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size), TPM_E_INVALID_RESPONSE, "ReadPubek - large exponent size"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); ToTpmUint32(response + 20, 0); /* Test that an incorrect auth tag causes an error. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); response[294] = 0; TEST_EQ(TlclReadPubek(&exponent, NULL, &modulus_size), TPM_E_INVALID_RESPONSE, "ReadPubek - incorrect auth"); TEST_EQ(calls[0].req_cmd, TPM_ORD_ReadPubek, " cmd"); response[294] = 0x60; } /** * Test TakeOwnership */ static void TakeOwnershipTest(void) { uint8_t oiap_response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x22, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4c, 0x04, 0x1a, 0x18, 0xa9, 0xf7, 0x9b, 0x2e, 0xe1, 0xf2, 0x16, 0x99, 0xa0, 0x27, 0x5f, 0x0c, 0x8f, 0x24, 0x55, 0x1d, 0xaf, 0x96, 0x49, }; uint8_t take_ownership_response[] = { 0x00, 0xc5, 0x00, 0x00, 0x01, 0x62, 0x00, 0x00, 0x00, 0x00, 0x00, 0x28, 0x00, 0x00, 0x00, 0x11, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x01, 0x00, 0x03, 0x00, 0x01, 0x00, 0x00, 0x00, 0x0c, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x92, 0x61, 0xa5, 0x30, 0x5f, 0x39, 0xb7, 0xc3, 0x51, 0x53, 0x84, 0xaf, 0x51, 0x64, 0x65, 0xd7, 0x58, 0xda, 0x15, 0xb0, 0xb8, 0xe8, 0xea, 0xf5, 0xb2, 0x21, 0x34, 0x09, 0x71, 0xa0, 0xd5, 0x2b, 0x21, 0xd6, 0x16, 0xbd, 0x03, 0xc3, 0x83, 0x7e, 0x48, 0x36, 0xd7, 0xfa, 0xc7, 0x5e, 0x5e, 0xb4, 0xc3, 0x9f, 0x00, 0xcc, 0x7a, 0x3e, 0x0a, 0x00, 0x34, 0xbd, 0xbc, 0x7b, 0x28, 0x0e, 0x4a, 0xef, 0xa5, 0x86, 0x50, 0xa5, 0xfe, 0x8f, 0x7d, 0xbc, 0x86, 0xf3, 0x3d, 0x8c, 0x65, 0x4c, 0x3b, 0x29, 0x3b, 0x40, 0x8b, 0xca, 0xf9, 0xa1, 0xc8, 0x62, 0x52, 0xe1, 0x1f, 0x0d, 0x89, 0x71, 0xca, 0xbb, 0x64, 0xef, 0x3f, 0x97, 0x97, 0xed, 0x57, 0xb3, 0xd8, 0x67, 0x4c, 0x46, 0x1c, 0x35, 0x0c, 0xba, 0x12, 0xae, 0x2e, 0x6d, 0xa7, 0x48, 0xd6, 0x9a, 0x8a, 0x60, 0x22, 0xd9, 0xe5, 0x97, 0x50, 0xc1, 0x24, 0xaf, 0xb6, 0x41, 0xfe, 0x6d, 0xfe, 0x28, 0x3f, 0xce, 0x35, 0x9b, 0x77, 0xe9, 0xd5, 0x36, 0xdb, 0x70, 0x5e, 0xd7, 0xb9, 0x89, 0xac, 0xae, 0x55, 0x59, 0x00, 0x7d, 0x47, 0x5d, 0x73, 0x4f, 0x1b, 0x17, 0xfa, 0xae, 0xb0, 0xf7, 0xb7, 0x63, 0x4d, 0xa9, 0x94, 0x0c, 0x1e, 0x02, 0x59, 0x8d, 0x34, 0x1f, 0x01, 0x6d, 0xa7, 0x05, 0xa7, 0xae, 0xbd, 0x9b, 0xfa, 0xed, 0xe6, 0xe3, 0xf2, 0xc0, 0xa9, 0x16, 0xb6, 0xd2, 0x23, 0x37, 0x2e, 0x43, 0x5e, 0x5f, 0xe6, 0x77, 0x0d, 0x49, 0x48, 0x07, 0x57, 0x64, 0xd2, 0xd9, 0x60, 0xff, 0xe3, 0x60, 0xb6, 0xd7, 0xa5, 0xe3, 0xd8, 0xa3, 0x93, 0xb3, 0xe9, 0xeb, 0x1c, 0x53, 0x42, 0x08, 0x9f, 0x0c, 0x13, 0x72, 0x3c, 0x80, 0xf8, 0xa1, 0x8c, 0x4d, 0xe5, 0x1e, 0xe7, 0xef, 0x2b, 0x33, 0x23, 0x1e, 0x5a, 0xf6, 0xc1, 0x46, 0x78, 0x06, 0x7e, 0xe7, 0x00, 0x00, 0x00, 0x00, 0xef, 0x84, 0x26, 0xd3, 0xb6, 0x27, 0x4a, 0x4a, 0x0f, 0x84, 0x65, 0x4b, 0xff, 0x80, 0x7e, 0xb5, 0xf6, 0xbe, 0x8c, 0xed, 0x00, 0xad, 0xd1, 0x73, 0x8a, 0x55, 0x9f, 0x50, 0xb4, 0x34, 0xba, 0x2d, 0x6d, 0x80, 0x3a, 0xdc, 0x82, 0x94, 0x3b, 0x96, 0x58, }; uint8_t encrypted_secret[] = { 0x46, 0x9a, 0x17, 0x31, 0x04, 0x72, 0x58, 0xcd, 0xac, 0xe7, 0xa4, 0x1f, 0x48, 0xa3, 0x89, 0x10, 0xac, 0x40, 0xe2, 0x66, 0xfa, 0xfd, 0xe9, 0xab, 0x7a, 0x55, 0xd3, 0xc0, 0x61, 0xca, 0x28, 0x0d, 0x29, 0x4a, 0xe4, 0x9a, 0xbe, 0x62, 0x51, 0xe8, 0x3f, 0xbf, 0x84, 0xae, 0x4e, 0x6c, 0x0e, 0x11, 0x2b, 0xba, 0x62, 0x5d, 0xf5, 0x9d, 0xf8, 0xcd, 0x5c, 0x9d, 0x5b, 0xee, 0x5e, 0xdc, 0xaf, 0xc1, 0xbf, 0x22, 0x14, 0x0d, 0x68, 0xdf, 0xe1, 0x94, 0x6b, 0x06, 0xc4, 0x5b, 0xdd, 0xee, 0xd3, 0xef, 0x67, 0xb5, 0xb0, 0xee, 0x58, 0x88, 0x2d, 0x5c, 0x7d, 0xda, 0x83, 0xd5, 0xb5, 0x72, 0x43, 0x33, 0xf7, 0x9e, 0xf0, 0x52, 0x8c, 0xc1, 0xf1, 0xea, 0xcf, 0x9f, 0x0e, 0xfb, 0xb3, 0x03, 0xfe, 0xb3, 0xb4, 0x38, 0xa2, 0xfb, 0x2f, 0x64, 0xb6, 0x42, 0x4c, 0x76, 0x70, 0xfa, 0x67, 0xc0, 0x48, 0x98, 0x52, 0x3e, 0xdb, 0xe6, 0xfe, 0x44, 0x96, 0x14, 0x5a, 0x6a, 0x19, 0x53, 0x46, 0x13, 0xe6, 0xc9, 0x21, 0xee, 0x8e, 0xc2, 0xf2, 0x39, 0x2d, 0xba, 0x6f, 0xeb, 0x80, 0x89, 0xf3, 0xea, 0xfa, 0x5c, 0x9c, 0x88, 0xe0, 0xb1, 0x53, 0xa0, 0xe5, 0xe0, 0x90, 0x33, 0x9d, 0x9d, 0x5f, 0xba, 0x6d, 0x68, 0xb2, 0x9f, 0x4f, 0xa1, 0x28, 0xf9, 0xc4, 0x53, 0x72, 0x51, 0x48, 0x4b, 0xb3, 0xf9, 0x18, 0x43, 0x3a, 0x85, 0xdc, 0x70, 0x46, 0x0c, 0x3c, 0xe1, 0x17, 0x1c, 0x18, 0x6f, 0xfd, 0xff, 0x77, 0x8d, 0x04, 0xfc, 0xb3, 0xc0, 0x9a, 0x03, 0x74, 0x1d, 0x06, 0x8f, 0xb6, 0x0a, 0x3e, 0xea, 0x91, 0x87, 0xa9, 0x68, 0x26, 0x91, 0x81, 0x02, 0xe4, 0x10, 0x66, 0xb6, 0x5f, 0x43, 0x47, 0x55, 0x25, 0xe0, 0xbd, 0xd3, 0xab, 0xbd, 0xfd, 0x15, 0x85, 0x39, 0x22, 0x93, 0xfc, 0x9d, 0x74, 0x0e, 0xcf, 0x5a, }; uint8_t owner_secret[TPM_AUTH_DATA_LEN] = { 0 }; ResetMocks(); calls[0].rsp = oiap_response; calls[0].rsp_size = sizeof(oiap_response); calls[1].rsp = take_ownership_response; calls[1].rsp_size = sizeof(take_ownership_response); TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret, owner_secret), TPM_SUCCESS, "TakeOwnership"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_TakeOwnership, " takeownership cmd"); /* Verify that the response gets authenticated. */ ResetMocks(); calls[0].rsp = oiap_response; calls[0].rsp_size = sizeof(oiap_response); calls[1].rsp = take_ownership_response; calls[1].rsp_size = sizeof(take_ownership_response); take_ownership_response[334] = 0; TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret, owner_secret), TPM_E_AUTHFAIL, "TakeOwnership - response auth"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_TakeOwnership, " takeownership cmd"); take_ownership_response[334] = 0xad; /* Verify that a short OIAP response gets caught. */ ResetMocks(); calls[0].rsp = oiap_response; calls[0].rsp_size = sizeof(oiap_response); ToTpmUint32(oiap_response + sizeof(uint16_t), kTpmRequestHeaderLength + sizeof(uint32_t) + sizeof(TPM_NONCE) - 1); TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret, owner_secret), TPM_E_INVALID_RESPONSE, "TakeOwnership - short OIAP response"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd"); ToTpmUint32(oiap_response + sizeof(uint16_t), sizeof(oiap_response)); /* Verify that a short TakeOwnership response gets caught. */ ResetMocks(); calls[0].rsp = oiap_response; calls[0].rsp_size = sizeof(oiap_response); calls[1].rsp = take_ownership_response; calls[1].rsp_size = sizeof(take_ownership_response); ToTpmUint32(take_ownership_response + sizeof(uint16_t), kTpmResponseHeaderLength + kTpmResponseAuthBlockLength - 1); TEST_EQ(TlclTakeOwnership(encrypted_secret, encrypted_secret, owner_secret), TPM_E_INVALID_RESPONSE, "TakeOwnership - short TakeOwnership response"); TEST_EQ(calls[0].req_cmd, TPM_ORD_OIAP, " oiap cmd"); TEST_EQ(calls[1].req_cmd, TPM_ORD_TakeOwnership, " takeownership cmd"); ToTpmUint32(take_ownership_response + sizeof(uint16_t), sizeof(take_ownership_response)); } /** * Test ReadDelegationFamilyTable */ static void ReadDelegationFamilyTableTest(void) { uint8_t response[] = { 0x00, 0xc4, 0x00, 0x00, 0x00, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x1e, 0x00, 0x25, 0x17, 0x00, 0x00, 0x00, 0x4f, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x02, 0x00, 0x25, 0x42, 0x00, 0x00, 0x00, 0x50, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, }; TPM_FAMILY_TABLE_ENTRY table[20]; uint32_t table_size; ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); table_size = 8; TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size), TPM_SUCCESS, "ReadDelegationFamilyTable"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd"); TEST_EQ(table_size, 2, " table_size"); TEST_EQ(table[0].tag, 0x25, " table[0].tag"); TEST_EQ(table[0].familyLabel, 0x17, " table[0].familyLabel"); TEST_EQ(table[0].familyID, 0x4f, " table[0].familyID"); TEST_EQ(table[0].verificationCount, 0x1, " table[0].verificationCount"); TEST_EQ(table[0].flags, 0x2, " table[0].flags"); TEST_EQ(table[1].tag, 0x25, " table[1].tag"); TEST_EQ(table[1].familyLabel, 0x42, " table[1].familyLabel"); TEST_EQ(table[1].familyID, 0x50, " table[1].familyID"); TEST_EQ(table[1].verificationCount, 0x1, " table[1].verificationCount"); TEST_EQ(table[1].flags, 0x0, " table[1].flags"); /* Test that required table size is returned if more space required. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); table_size = 1; TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size), TPM_E_BUFFER_SIZE, "ReadDelegationFamilyTable"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd"); TEST_EQ(table_size, 2, " table_size"); /* Test that an overlong response gets caught. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + sizeof(uint16_t), TPM_LARGE_ENOUGH_COMMAND_SIZE + 1); TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size), TPM_E_INVALID_RESPONSE, "ReadDelegationFamilyTable - too long response"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd"); ToTpmUint32(response + sizeof(uint16_t), sizeof(response)); /* Test that a short response gets caught. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); ToTpmUint32(response + sizeof(uint16_t), kTpmRequestHeaderLength + sizeof(uint32_t) - 1); TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size), TPM_E_INVALID_RESPONSE, "ReadDelegationFamilyTable - too short response"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd"); ToTpmUint32(response + sizeof(uint16_t), sizeof(response)); /* Test that long table size in response gets caught. */ ResetMocks(); calls[0].rsp = response; calls[0].rsp_size = sizeof(response); table_size = 20; ToTpmUint32(response + kTpmResponseHeaderLength, TPM_LARGE_ENOUGH_COMMAND_SIZE); TEST_EQ(TlclReadDelegationFamilyTable(table, &table_size), TPM_E_INVALID_RESPONSE, "ReadDelegationFamilyTable - overlong family table"); TEST_EQ(calls[0].req_cmd, TPM_ORD_Delegate_ReadTable, " cmd"); ToTpmUint32(response + kTpmResponseHeaderLength, 0x1e); } int main(void) { TlclTest(); SendCommandTest(); ReadWriteTest(); DefineSpaceExTest(); InitNvAuthPolicyTest(); PcrTest(); GetSpaceInfoTest(); FlagsTest(); RandomTest(); GetVersionTest(); IFXFieldUpgradeInfoTest(); ReadPubekTest(); TakeOwnershipTest(); ReadDelegationFamilyTableTest(); return gTestSuccess ? 0 : 255; }