/*
 * Copyright (C) 2021 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package android.net.wifi.util;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertNull;
import static org.junit.Assert.assertTrue;

import android.net.MacAddress;
import android.net.wifi.ScanResult;
import android.net.wifi.ScanResult.InformationElement;
import android.net.wifi.SecurityParams;
import android.net.wifi.WifiConfiguration;
import android.net.wifi.WifiSsid;

import androidx.test.filters.SmallTest;

import org.junit.Test;

import java.nio.charset.StandardCharsets;
import java.util.ArrayList;
import java.util.List;

/**
 * Unit tests for {@link ScanResultUtil}.
 */
@SmallTest
public class ScanResultUtilTest {
    @Test
    public void testNetworkCreationFromScanResult() {
        final String ssid = "Another SSid";
        ScanResult scanResult = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();
        scanResult.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };
        WifiConfiguration config;

        scanResult.capabilities = "";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_OPEN,
                config.getDefaultSecurityParams().getSecurityType());

        scanResult.capabilities = "WEP";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_WEP,
                config.getDefaultSecurityParams().getSecurityType());

        scanResult.capabilities = "PSK";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_PSK,
                config.getDefaultSecurityParams().getSecurityType());

        // WPA2 Enterprise network with none MFP capability.
        scanResult.capabilities = "[EAP/SHA1]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP,
                config.getDefaultSecurityParams().getSecurityType());

        // WPA2 Enterprise network with MFPC.
        scanResult.capabilities = "[EAP/SHA1][MFPC]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP,
                config.getDefaultSecurityParams().getSecurityType());

        // WPA2 Enterprise network with MFPR.
        scanResult.capabilities = "[EAP/SHA1][MFPR]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP,
                config.getDefaultSecurityParams().getSecurityType());

        // WPA3 Enterprise transition network
        scanResult.capabilities = "[RSN-EAP/SHA1+EAP/SHA256][MFPC]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP,
                config.getDefaultSecurityParams().getSecurityType());
        assertTrue(config.isSecurityType(WifiConfiguration.SECURITY_TYPE_EAP));
        assertTrue(config.isSecurityType(WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE));

        // WPA3 Enterprise only network
        scanResult.capabilities = "[RSN-EAP/SHA256][MFPC][MFPR]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE,
                config.getDefaultSecurityParams().getSecurityType());

        // Neither a valid WPA3 Enterprise transition network nor WPA3 Enterprise only network
        // Fallback to WPA2 Enterprise
        scanResult.capabilities = "[RSN-EAP/SHA1+EAP/SHA256][MFPC][MFPR]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP,
                config.getDefaultSecurityParams().getSecurityType());

        // WPA3 Enterprise only network
        scanResult.capabilities = "[RSN-SUITE_B_192][MFPR]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE_192_BIT,
                config.getDefaultSecurityParams().getSecurityType());

        scanResult.capabilities = "WAPI-PSK";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_WAPI_PSK,
                config.getDefaultSecurityParams().getSecurityType());

        scanResult.capabilities = "WAPI-CERT";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertEquals(config.SSID, ScanResultUtil.createQuotedSsid(ssid));
        assertEquals(WifiConfiguration.SECURITY_TYPE_WAPI_CERT,
                config.getDefaultSecurityParams().getSecurityType());
    }

    @Test
    public void testGenerateSecurityParamsListFromScanResult() {
        final String ssid = "Another SSid";
        ScanResult scanResult = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();
        scanResult.informationElements =
                new InformationElement[] {
                    createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
                };
        List<SecurityParams> securityParamsList;

        scanResult.capabilities = "";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_OPEN, securityParamsList.get(0).getSecurityType());

        scanResult.capabilities = "OWE_TRANSITION";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(2, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_OPEN, securityParamsList.get(0).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_OWE, securityParamsList.get(1).getSecurityType());

        scanResult.capabilities = "OWE";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_OWE, securityParamsList.get(0).getSecurityType());

        scanResult.capabilities = "WEP";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_WEP, securityParamsList.get(0).getSecurityType());

        scanResult.capabilities = "PSK";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_PSK, securityParamsList.get(0).getSecurityType());

        // WPA2 Enterprise network with none MFP capability.
        scanResult.capabilities = "[EAP/SHA1]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());

        // WPA2 Enterprise network with MFPC.
        scanResult.capabilities = "[EAP/SHA1][MFPC]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());

        // WPA2 Enterprise network with MFPR.
        scanResult.capabilities = "[EAP/SHA1][MFPR]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());

        // WPA3 Enterprise transition network
        scanResult.capabilities = "[RSN-EAP/SHA1+EAP/SHA256][MFPC]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(2, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE,
                securityParamsList.get(1).getSecurityType());

        // WPA3 Enterprise only network
        scanResult.capabilities = "[RSN-EAP/SHA256][MFPC][MFPR]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE,
                securityParamsList.get(0).getSecurityType());

        // Neither a valid WPA3 Enterprise transition network nor WPA3 Enterprise only network
        // Fallback to WPA2 Enterprise
        scanResult.capabilities = "[RSN-EAP/SHA1+EAP/SHA256][MFPC][MFPR]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());

        // WPA3 Enterprise only network
        scanResult.capabilities = "[RSN-SUITE_B_192][MFPR]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE_192_BIT,
                securityParamsList.get(0).getSecurityType());

        scanResult.capabilities = "WAPI-PSK";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_WAPI_PSK,
                securityParamsList.get(0).getSecurityType());

        scanResult.capabilities = "WAPI-CERT";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_WAPI_CERT,
                securityParamsList.get(0).getSecurityType());

        // Passpoint
        scanResult.setFlag(ScanResult.FLAG_PASSPOINT_NETWORK);

        scanResult.capabilities = "[EAP/SHA1]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(2, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_PASSPOINT_R1_R2,
                securityParamsList.get(1).getSecurityType());

        scanResult.capabilities = "[RSN-EAP/SHA1+EAP/SHA256][MFPC]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(3, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP, securityParamsList.get(0).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE,
                securityParamsList.get(1).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_PASSPOINT_R1_R2,
                securityParamsList.get(2).getSecurityType());

        scanResult.capabilities = "[RSN-EAP/SHA256][MFPC][MFPR]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(3, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE,
                securityParamsList.get(0).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_PASSPOINT_R1_R2,
                securityParamsList.get(1).getSecurityType());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_PASSPOINT_R3,
                securityParamsList.get(2).getSecurityType());

        // Suite B should not be passpoint
        scanResult.capabilities = "[RSN-SUITE_B_192][MFPR]";
        securityParamsList = ScanResultUtil.generateSecurityParamsListFromScanResult(scanResult);
        assertEquals(1, securityParamsList.size());
        assertEquals(
                WifiConfiguration.SECURITY_TYPE_EAP_WPA3_ENTERPRISE_192_BIT,
                securityParamsList.get(0).getSecurityType());
    }

    /**
     * Test that a PSK-SHA256+SAE network is detected as transition mode
     */
    @Test
    public void testPskSha256SaeTransitionModeCheck() {
        final String ssid = "WPA3-Transition";
        String caps = "[WPA2-FT/PSK-CCMP][RSN-FT/PSK+PSK-SHA256+SAE+FT/SAE-CCMP][ESS][WPS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForPskSaeTransitionNetwork(input));
    }

    /**
     * Test that a PSK+SAE network is detected as transition mode
     */
    @Test
    public void testPskSaeTransitionModeCheck() {
        final String ssid = "WPA3-Transition";
        String caps = "[WPA2-FT/PSK+PSK+SAE+FT/SAE-CCMP][ESS][WPS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForPskSaeTransitionNetwork(input));
    }

    /**
     * Test that a PSK network is not detected as transition mode
     */
    @Test
    public void testPskNotInTransitionModeCheck() {
        final String ssid = "WPA2-Network";
        String caps = "[WPA2-FT/PSK+PSK][ESS][WPS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertFalse(ScanResultUtil.isScanResultForPskSaeTransitionNetwork(input));
    }

    /**
     * Test that an SAE network is not detected as transition mode
     */
    @Test
    public void testSaeNotInTransitionModeCheck() {
        final String ssid = "WPA3-Network";
        String caps = "[WPA2-FT/SAE+SAE][ESS][WPS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertFalse(ScanResultUtil.isScanResultForPskSaeTransitionNetwork(input));
    }

    /**
     * Test that a network which advertise SAE_EXT_KEY AKM is detected as SAE network
     */
    @Test
    public void testSaeExtKeyAkmSupportedNetwork() {
        final String ssid = "WPA3-AP";
        String caps = "[RSN-SAE_EXT_KEY-CCMP][ESS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForSaeNetwork(input));
    }

    /**
     * Test that provided network supports FT/EAP AKM.
     */
    @Test
    public void testFtEapAkmSupportedNetwork() {
        final String ssid = "FT-EAP-AP";
        String caps = " [WPA2-FT/EAP-CCMP][RSN-FT/EAP-CCMP][ESS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(input));
    }

    /**
     * Test that provided network supports FILS SHA256 AKM.
     */
    @Test
    public void testFilsSha256AkmSupportedNetwork() {
        final String ssid = "FILS-AP";
        String caps = "[WPA2-EAP-FILS-SHA256-CCMP]"
                + "[RSN-EAP-FILS-SHA256-CCMP][ESS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(input));
        assertTrue(ScanResultUtil.isScanResultForFilsSha256Network(input));
    }

    /**
     * Test that provided network supports FILS SHA384 AKM.
     */
    @Test
    public void testFilsSha384AkmSupportedNetwork() {
        final String ssid = "FILS-AP";
        String caps = "[WPA2-EAP-FILS-SHA384-CCMP]"
                + "[RSN-EAP-FILS-SHA384-CCMP][ESS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(input));
        assertTrue(ScanResultUtil.isScanResultForFilsSha384Network(input));
    }

    /**
     * Test that an EAP network is not detected as a Pasppoint network.
     */
    @Test
    public void testEapNetworkNotPasspointNetwork() {
        final String ssid = "EAP-NETWORK";
        String caps = "[EAP/SHA1][ESS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertTrue(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(input));
        assertFalse(ScanResultUtil.isEapScanResultForPasspointR1R2Network(input));
        assertFalse(ScanResultUtil.isEapScanResultForPasspointR3Network(input));
    }

    private void verifyPasspointNetwork(
            String caps, boolean isPasspoint,
            boolean isR1R2Network, boolean isR3Network) {
        final String ssid = "PASSPOINT-NETWORK";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        if (isPasspoint) {
            input.setFlag(ScanResult.FLAG_PASSPOINT_NETWORK);
        }

        assertTrue(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(input));
        assertEquals(isR1R2Network, ScanResultUtil.isEapScanResultForPasspointR1R2Network(input));
        assertEquals(isR3Network, ScanResultUtil.isEapScanResultForPasspointR3Network(input));
    }

    /**
     * Test that a Passpoint R1 network is detected correctly.
     */
    @Test
    public void testPasspointR1NetworkCheck() {
        String caps = "[EAP/SHA1][ESS]";
        verifyPasspointNetwork(caps, true, true, false);
    }

    /**
     * Test that a Passpoint R2 network is detected correctly.
     */
    @Test
    public void testPasspointR2NetworkCheck() {
        String caps = "[EAP/SHA1][ESS]";
        verifyPasspointNetwork(caps, true, true, false);
    }

    /**
     * Test that a Passpoint R3 network is detected correctly.
     */
    @Test
    public void testPasspointR3NetworkCheck() {
        String caps = "[EAP/SHA1][ESS][MFPR]";
        // R3 network is also a valid R1/R2 network.
        verifyPasspointNetwork(caps, true, true, true);
    }

    /**
     * Test that an EAP network without the passpoint flag set is not a passpoint network
     */
    @Test
    public void testEapNetworkWithoutPasspointFlagNotAPasspointNetwork() {
        String caps = "[EAP/SHA1][ESS]";
        verifyPasspointNetwork(caps, false, false, false);
    }

    /**
     * Test that an unknown AMK network is not detected as an open network.
     */
    @Test
    public void testUnknownAkmNotOpenNetwork() {
        final String ssid = "UnknownAkm-Network";
        String caps = "[RSN-?-TKIP+CCMP][ESS][WPS]";

        ScanResult input = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        input.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };

        assertFalse(ScanResultUtil.isScanResultForOpenNetwork(input));
    }

    private ScanResult makeScanResult(String caps) {
        final String ssid = "TestSsid";

        ScanResult r = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setCaps(caps)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        return r;
    }

    @Test
    public void testPurePskNetworkCheck() {
        // PSK only
        assertTrue(ScanResultUtil.isScanResultForPskOnlyNetwork(makeScanResult("[PSK]")));
        // SAE only
        assertFalse(ScanResultUtil.isScanResultForPskOnlyNetwork(makeScanResult("[SAE]")));
        // Transition
        assertFalse(ScanResultUtil.isScanResultForPskOnlyNetwork(makeScanResult("[PSK][SAE]")));
    }

    @Test
    public void testPureSaeNetworkCheck() {
        // SAE only
        assertTrue(ScanResultUtil.isScanResultForSaeOnlyNetwork(makeScanResult("[SAE]")));
        // PSK only
        assertFalse(ScanResultUtil.isScanResultForSaeOnlyNetwork(makeScanResult("[PSK]")));
        // Transition
        assertFalse(ScanResultUtil.isScanResultForSaeOnlyNetwork(makeScanResult("[PSK][SAE]")));
    }

    @Test
    public void testPureOpenNetworkCheck() {
        // OPEN only
        assertTrue(ScanResultUtil.isScanResultForOpenOnlyNetwork(makeScanResult("")));
        // OWE only
        assertFalse(ScanResultUtil.isScanResultForOpenOnlyNetwork(makeScanResult("[OWE]")));
        // Transition
        assertFalse(ScanResultUtil.isScanResultForOpenOnlyNetwork(
                makeScanResult("[OWE_TRANSITION]")));
    }

    @Test
    public void testPureOweNetworkCheck() {
        // OWE only
        assertTrue(ScanResultUtil.isScanResultForOweOnlyNetwork(makeScanResult("[OWE]")));
        // OPEN only
        assertFalse(ScanResultUtil.isScanResultForOweOnlyNetwork(makeScanResult("")));
        // Transition
        assertFalse(ScanResultUtil.isScanResultForOweOnlyNetwork(
                makeScanResult("[OWE_TRANSITION]")));
    }

    @Test
    public void testPureWpa2EnterpriseNetworkCheck() {
        // WPA2 Enterprise Only
        assertTrue(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(
                makeScanResult("[EAP/SHA1]")));
        // WPA3 Enterprise Only
        assertFalse(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(
                makeScanResult("[RSN][EAP/SHA256][MFPC][MFPR]")));
        // Transition
        assertFalse(ScanResultUtil.isScanResultForWpa2EnterpriseOnlyNetwork(
                makeScanResult("[RSN][EAP/SHA1][EAP/SHA256][MFPC]")));
    }

    /**
     * Verify ScanResultList validation.
     */
    @Test
    public void testValidateScanResultList() {
        List<ScanResult> scanResults = new ArrayList<>();
        assertFalse(ScanResultUtil.validateScanResultList(null));
        assertFalse(ScanResultUtil.validateScanResultList(scanResults));
        scanResults.add(null);
        assertFalse(ScanResultUtil.validateScanResultList(scanResults));
        ScanResult scanResult = new ScanResult();
        scanResults.clear();
        scanResults.add(scanResult);
        assertFalse(ScanResultUtil.validateScanResultList(scanResults));
        scanResult.SSID = "test";
        scanResult.capabilities = "[RSN-PSK-CCMP]";
        scanResult.BSSID = "ab:cd:01:ef:45:89";
        assertTrue(ScanResultUtil.validateScanResultList(scanResults));
    }

    /**
     * Verify that unknown AKM in the scan result
     */
    @Test
    public void testUnknownAkmForSecurityParamsGeneration() {
        final String ssid = "Another SSid";
        ScanResult scanResult = new ScanResult.Builder(WifiSsid.fromUtf8Text(ssid),
                "ab:cd:01:ef:45:89")
                .setHessid(1245)
                .setRssi(-78)
                .setFrequency(2450)
                .setTsf(1025)
                .setDistanceCm(22)
                .setDistanceSdCm(33)
                .setIs80211McRTTResponder(true)
                .build();

        scanResult.informationElements = new InformationElement[] {
                createIE(InformationElement.EID_SSID, ssid.getBytes(StandardCharsets.UTF_8))
        };
        WifiConfiguration config;

        scanResult.capabilities = "[RSN-?-CCMP]";
        config = ScanResultUtil.createNetworkFromScanResult(scanResult);
        assertNull(config);
    }

    /**
     * Verify the logic for redacting octets from a BSSID.
     */
    @Test
    public void verifyRedactBssid() throws Exception {
        // Valid case - 0 redacted octets
        String bssidStr = "AB:CD:01:EF:45:89";
        MacAddress bssid = MacAddress.fromString(bssidStr);
        String redactedBssid = ScanResultUtil.redactBssid(bssid, 0);
        assertEquals(bssidStr, redactedBssid);

        // Valid case - 4 redacted octets
        String expectedRedactedBssid = "xx:xx:xx:xx:" + bssidStr.substring(12);
        redactedBssid = ScanResultUtil.redactBssid(bssid, 4);
        assertEquals(expectedRedactedBssid, redactedBssid);

        // Valid case - 6 redacted octets
        expectedRedactedBssid = "xx:xx:xx:xx:xx:xx";
        redactedBssid = ScanResultUtil.redactBssid(bssid, 6);
        assertEquals(expectedRedactedBssid, redactedBssid);

        // Invalid number of redacted octets - should default to 4 redacted octets
        expectedRedactedBssid = "xx:xx:xx:xx:" + bssidStr.substring(12);
        redactedBssid = ScanResultUtil.redactBssid(bssid, 7);
        assertEquals(expectedRedactedBssid, redactedBssid);

        // Null bssid - should return an empty string
        redactedBssid = ScanResultUtil.redactBssid(null, 4);
        assertEquals("", redactedBssid);
    }

    private static InformationElement createIE(int id, byte[] bytes) {
        InformationElement ie = new InformationElement();
        ie.id = id;
        ie.bytes = bytes;
        return ie;
    }
}