David Drysdale
5fa61b6df6
Allow extra ID attestation error codes am: c68dc93788 am: c67f8ef755 am: caaedb0a79
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2646791
Change-Id: I5bbde92b1b5c8b4896cfa418200d3608080a4269
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-07-06 12:31:59 +00:00
David Drysdale
c68dc93788
Allow extra ID attestation error codes
...
When deliberately testing invalid ID attestation, use the helper
function (which checks the error return code is correct) in one more
place.
Test: VtsAidlKeyMintTargetTest
Bug: 286733800
Change-Id: I6ea5bd7ee19b3b172330117bfde1b16745debba7
2023-07-06 10:23:55 +01:00
David Drysdale
e13d20b746
Merge "Fix attestation error checks" am: 82f86a1d4b am: 18283b6ca8 am: 286d2f7ea6
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2648423
Change-Id: I2a602430efb68876909246f1704a8f470f8232dc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-07-05 07:27:36 +00:00
David Drysdale
82f86a1d4b
Merge "Fix attestation error checks"
2023-07-05 05:20:29 +00:00
David Drysdale
809a1a0205
Skip ATTEST_KEY using variant on waivered devices am: c3de1caf43 am: f2c3944f9f am: ab73150eb7
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2583373
Change-Id: Iad85e0fd9382c51d7cfa1ad997d184d14b425170
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-07-04 16:03:51 +00:00
David Drysdale
c3de1caf43
Skip ATTEST_KEY using variant on waivered devices
...
Bug: 281452355
Bug: 289451966
Test: VtsAidlKeyMintTargetTest
Change-Id: Id448edae88569518deb2db4ab7bf50d16f33709a
2023-07-04 13:23:04 +01:00
David Drysdale
810fbcffed
Fix attestation error checks
...
Avoid the ADD_FAILURE at the end if attestion ID failure uses an allowed
return code.
Test: VtsAidlKeyMintTargetTest
Bug: 286733800
Change-Id: I0dcac312ac4516a078b2742721e3a19074da52b1
2023-07-04 13:14:12 +01:00
Treehugger Robot
8623f8eef1
Merge "Validating key characteristics of generated/imported keys." am: 2e46e91864 am: 5250f6dc10 am: a7eae920f4
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2566036
Change-Id: Ic95cbb9b4639ae993f0c877e2ce3c608c7d8b489
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-29 19:54:17 +00:00
Eran Messeri
e743381ae8
Merge "Update default KeyMint version to 3" am: 4a7c3810fc am: e7a36fadae am: 7b1f23fe51
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2633329
Change-Id: Icfae835c4b6ed7472e7b24a780acbbcc2e568598
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-29 18:42:16 +00:00
Treehugger Robot
2e46e91864
Merge "Validating key characteristics of generated/imported keys."
2023-06-29 17:34:26 +00:00
Eran Messeri
4a7c3810fc
Merge "Update default KeyMint version to 3"
2023-06-29 16:37:48 +00:00
Treehugger Robot
c8307ef9bb
Merge "Check for MGF1 digests in key characteristics." am: efb4b9397a am: 44502769e4 am: 0557be7193
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2552043
Change-Id: If43d94585c91dfe541a72c36af802d5850c9cdcc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-26 19:33:46 +00:00
Rajesh Nyamagoud
7b9ae3c485
Validating key characteristics of generated/imported keys.
...
Updated VTS tests to verify mgf-digests in key characteristics of
RSA-OAEP keys. Added new tests to import RSA-OAEP keys with
mgf-digests and verified imported key characteristics.
Bug: 279721313
Test: atest VtsAidlKeyMintTargetTest
Change-Id: I06474a85c9e77fded264031ff5636f2c35bee6b4
2023-06-26 18:40:53 +00:00
Treehugger Robot
efb4b9397a
Merge "Check for MGF1 digests in key characteristics."
2023-06-26 17:22:09 +00:00
David Drysdale
5f7d0654be
Merge "Allow extra error code in device ID attestation" am: 1d7447e5d3 am: 013030d9a4 am: 36a30021e6
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2627969
Change-Id: I7b6fffac2ada0e039f79bad8cc9b4d954e9c3460
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-22 08:08:43 +00:00
David Drysdale
1d7447e5d3
Merge "Allow extra error code in device ID attestation"
2023-06-22 05:58:57 +00:00
Eran Messeri
8417708fe4
Update default KeyMint version to 3
...
Update the default KeyMint version to v3.
Note this affects the pure software implementation of KeyMint that is
not used for anything that tests currently run against.
Bug: 275982952
Test: m (that it builds)
Change-Id: I6ab10329af590bd2a045710dfff47c6e78740464
2023-06-21 16:11:25 +01:00
David Drysdale
f42238c99f
Allow extra error code in device ID attestation
...
Generalize the existing helper function to allow more variants.
Remove a couple of pointless invocations of the existing helper.
Bug: 286733800
Test: VtsAidlKeyMintTargetTest
Change-Id: Ic01c53cbe79f55c2d403a66acbfd04029395c287
2023-06-15 09:43:18 +01:00
Treehugger Robot
d87f909dc3
Merge "Support to get EC public key from the UdsCertchain." am: 1acca5c139 am: 8426045977 am: 7bfabde3fc
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2615472
Change-Id: I4416b43432519db134e1f26e759bfc74e566c1f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-14 20:04:25 +00:00
Treehugger Robot
1acca5c139
Merge "Support to get EC public key from the UdsCertchain."
2023-06-14 17:38:22 +00:00
Subrahmanyaman
a18883a58c
Support to get EC public key from the UdsCertchain.
...
Bug: 285896470
Test: VtsHalRemotelyProvisionedComponentTargetTest
Change-Id: I7f829b1346feeab0fd429ad7b9714181b6668b34
2023-06-12 17:29:38 +00:00
David Drysdale
6a7f8f3320
Merge "Use RAII to ensure KeyMint keyblobs deleted" am: 462eccaa3b am: 15bc932a09 am: 8eac8ba511
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2617612
Change-Id: I70a7a9ddfd5e62cd674f9d202dbb098224a439e6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-08 12:02:16 +00:00
David Drysdale
1b9febc5ca
Use RAII to ensure KeyMint keyblobs deleted
...
If some check in a VTS test case fails, the test function may exit early
and not call CheckedDeleteKey(&some_keyblob), thus "leaking" a key blob.
This isn't normally an issue, but if the key blob happens to use a
feature that uses some secure storage (e.g. ROLLBACK_RESISTANCE or
USAGE_COUNT_LIMIT=1) then this may leak some scarse resource.
To avoid the chance of this, use an RAII holder to ensure that
manually-managed keyblobs (i.e. key blobs that are not held in the
key_blob_ member of the base test class) are always deleted.
Bug: 262212842
Test: VtsAidlKeyMintTargetTest
Change-Id: Ie8806095e249870484b9875eb660070607f339a3
2023-06-07 15:46:42 +01:00
David Drysdale
3aff152024
Merge "KeyMint: more authentication tests" am: 130e32ad5f am: 524f7607df am: b32416e8c8
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2615470
Change-Id: Id07e2638aed619eee8037c6852b9c4785d4de69d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-06 11:55:39 +00:00
David Drysdale
de2a493b9a
KeyMint: more authentication tests
...
- Test key with multiple allowed SIDs
- Test invalid timestamp token
Test: VtsAidlKeyMintTargetTest
Change-Id: Ieb18d43d8c2db821d32857a332a0a68917b1eba4
2023-06-05 15:02:30 +01:00
Treehugger Robot
74634c2db5
Merge "Extend QC SPU waiver to VSR-S devices." am: 3258884207 am: f25e3b2bcb am: 2415be97e3
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2609268
Change-Id: I41cbb8d74e4fb5e3a09fce966b63a63c0da4625a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-06-01 21:59:04 +00:00
Shawn Willden
0f1b257f96
Extend QC SPU waiver to VSR-S devices.
...
Bug: 281452355
Test: VtsAidlKeyMintTargetTest
Change-Id: I9fc1d1f9a3b5b29cfee3ad325bc1c4ef72c44c13
2023-05-31 10:22:54 -06:00
Treehugger Robot
f7ca2c881d
Merge "VTS: Test specifying --expect_upgrade {yes,no}" am: 434a0cc160 am: 9715eb7117 am: 239b468f30
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2588687
Change-Id: I0d2c43aaf6ac295f7f1f824efe5045c886b29beb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-05-15 11:19:42 +00:00
Treehugger Robot
434a0cc160
Merge "VTS: Test specifying --expect_upgrade {yes,no}"
2023-05-15 09:11:41 +00:00
Tommy Chiu
025f3c5acd
VTS: Test specifying --expect_upgrade {yes,no}
...
It should definitely be the case that a different SPL triggers key
requires upgrade, but the converse isn't true -- if no SPL change, it's
OK for the device to request upgrade anyhow.
Bug: 281604435
Change-Id: Ic03ce51fb4b18ff669595ab430f9fccd1da48997
2023-05-15 07:23:27 +00:00
Treehugger Robot
ef1d68d6b1
Merge "KM VTS test fix - handled "null" value for imei." am: 95ec2cdd2f am: 6b4a8807a5 am: 64369644bb
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2584850
Change-Id: Ic35998f7b4ed7e445012d4ed71cd377bb5a95724
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-05-12 04:18:02 +00:00
Treehugger Robot
95ec2cdd2f
Merge "KM VTS test fix - handled "null" value for imei."
2023-05-12 02:44:22 +00:00
Rajesh Nyamagoud
71d19b21c3
KM VTS test fix - handled "null" value for imei.
...
Added a check to make sure IMEI is not "null".
Bug: 281676499
Test: atest VtsAidlKeyMintTargetTest
Change-Id: Ia1569a30412d633eee4d4de8cd00dea077d1c23d
2023-05-09 17:23:02 +00:00
Tri Vo
9aad35fa97
Merge "Test cases for attested Root-of-Trust" am: 67567baf94 am: de5d2be299 am: a483e7bd70
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2576910
Change-Id: Id0a3de5ac79f2947c756ff8a9c36bc56d09082c0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-05-05 19:11:54 +00:00
Tri Vo
67567baf94
Merge "Test cases for attested Root-of-Trust"
2023-05-05 17:07:39 +00:00
Tri Vo
520a95bc31
Test cases for attested Root-of-Trust
...
Add tests for verfied boot state and VBMeta digest.
Bug: 255344624
Test: VtsKeyMintAidlTargetTest
Change-Id: I4f0697e1a7cb83ca87150b6683cac3084a593864
2023-05-05 10:04:39 -07:00
Hasini Gunasinghe
4d14f24928
Merge "Challenge is expected in timestamp token in case 2" am: 51471dcfce am: aa54976ba4 am: 86a83243ec
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2574790
Change-Id: I36b53c635b8c3a288c20fd16e31df808ce837e73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-05-04 17:32:03 +00:00
Hasini Gunasinghe
51471dcfce
Merge "Challenge is expected in timestamp token in case 2"
2023-05-04 15:21:15 +00:00
Hasini Gunasinghe
77819bb988
Challenge is expected in timestamp token in case 2
...
In the second case out of the two cases of authorization enforcement
described for update(), it seems like the challenge is expected in
the timestamp token.
Test: N/A
Change-Id: I33e1b84bf8218335665b31ca144b3b4ecb342328
2023-05-03 22:33:30 +00:00
Max Bires
929c88fd70
Merge "Support for non-factory attestation in Strongbox." am: c4f05e81e0 am: 41f750ff37 am: 0ca0cd5c87
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2553970
Change-Id: I680f41959d83d5569b60b5f74930b8c85505bd73
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-05-03 18:22:49 +00:00
Max Bires
c4f05e81e0
Merge "Support for non-factory attestation in Strongbox."
2023-05-03 16:05:49 +00:00
Treehugger Robot
7f17abc28a
Merge "Strongbox may not support 1024 bit key size for RSA." am: 453ec12115 am: cde000ed4b am: 9949e31f36
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2573531
Change-Id: I47e0856e0ab557075abaa8be335fef728a6092f2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-05-02 17:48:09 +00:00
Subrahmanyaman
ce2bebdd79
Strongbox may not support 1024 bit key size for RSA.
...
Strongbox may not support 1024 bit key size for RSA.
So in NoUserConfirmation test updated the key size to
2048 so that the test works for both TEE and Strongbox.
Bug: 280117495
Test: run VtsAidlKeyMintTarget
Change-Id: I32bb28001aca9b69eedb1bd3d0bcff43052d06e4
2023-04-28 23:37:02 +00:00
Subrahmanyaman
50fcf7d066
Support for non-factory attestation in Strongbox.
...
Updated the BootLoaderStateTest for strongbox implementations which
do not support factory attestation.
Test: vts -m VtsAidlKeyMintTarget
Change-Id: I8fe176a18fc0b9e2b2d0b012b7b63124d15c9e2f
2023-04-26 18:58:03 +00:00
Shawn Willden
207322654a
Check for MGF1 digests in key characteristics.
...
A bug in the Trusty HAL service caused it to replace MGF1 digest tags
with Tag::INVALID. This tests that MGF1 tags are returned properly in
the MGF1 success test, and verifies that Tag::INVALID is never
returned by any test.
Bug: 278157584
Test: adb shell /data/nativetest/VtsAidlKeyMintTargetTest/VtsAidlKeyMintTargetTest
Change-Id: I5d391310795c99f37acf3c48310c127a7a31fac3
2023-04-21 16:51:33 -06:00
Treehugger Robot
3e925253ad
Merge "Add checks for different size of challenge" am: a95f69da2e am: 15ffcaf669 am: 6b32036b41
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2495456
Change-Id: Iab818789f86cf498e40a4e6fb2f592b7be7d9822
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-04-17 05:43:33 +00:00
Treehugger Robot
a95f69da2e
Merge "Add checks for different size of challenge"
2023-04-17 04:20:54 +00:00
Treehugger Robot
9d9af1049a
Merge "Allow uninstantiated BootloaderStateTest" am: d83eed2fe3 am: cfc708d3ef am: d5663b9625
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2535086
Change-Id: I43e8c83658920718a9a7588ea8ab195cdd6d6f0a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-04-14 23:04:26 +00:00
Tri Vo
78e07d5dff
Allow uninstantiated BootloaderStateTest
...
No tests are instantiated if KeyMint is present on the the device.
Explicitly allow that.
Bug: 277975776
Test: VtsAidlKeyMintTargetTest
Change-Id: I88f1c0a81f36d198dabcb1420b62a00bacdbb6e7
2023-04-14 11:01:22 -07:00
Tri Vo
dc91a4dbf4
Merge "Test for bootloader state" am: eb94a4f9ef am: e1c1abb059 am: cd06c1740a
...
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2514097
Change-Id: I96df03008dc42ad6c251b8d6f22f115a9480a680
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com >
2023-04-12 17:54:36 +00:00