mirror of
https://github.com/Evolution-X/hardware_interfaces
synced 2026-02-02 23:07:49 +00:00
8898d2ec57
Add `ISecretkeeper::getAuthGraphKe()` method to the Secretkeeper HAL. Align the AIDL targets between AuthGraph and Secretkeeper, and add some defaults that automatically link to the current version of the Secretkeeper AIDL targets. Move the non-secure implementation of AuthGraph to run the TA in a separate thread. Alter the nonsecure implementation of Secretkeeper so that it no longer directly implements Secretkeeper functionality, but instead re-uses common code from the Secretkeeper reference implementation. This involves re-using the common implementation of the HAL service (from `authgraph_hal`), but also involves using the reference implementation of the the TA code that would normally run in a separate secure environment. The latter code expects to run in a single-threaded environment, so run it in a single local thread. Note that the negotiated session keys emitted by AuthGraph are not yet used by Secretkeeper (coming in a subsequent CL). Extend the Secretkeeper VTS tests to invoke the AuthGraph VTS inner tests on the returned IAuthGraphKeyExchange instance, exercising the instance as an AuthGraph sink. Bug: 291228560 Test: VtsSecretkeeperTargetTest Change-Id: Ia2c97976edc4530b2c902d95a74f3c340d342174
68 lines
2.2 KiB
Rust
68 lines
2.2 KiB
Rust
/*
|
|
* Copyright (C) 2023 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
//! VTS test library for AuthGraph functionality.
|
|
//!
|
|
//! This test code is bundled as a library, not as `[cfg(test)]`, to allow it to be
|
|
//! re-used inside the (Rust) VTS tests of components that use AuthGraph.
|
|
|
|
use android_hardware_security_authgraph::aidl::android::hardware::security::authgraph::{
|
|
Error::Error, IAuthGraphKeyExchange::IAuthGraphKeyExchange, Identity::Identity,
|
|
PlainPubKey::PlainPubKey, PubKey::PubKey, SessionIdSignature::SessionIdSignature,
|
|
};
|
|
use authgraph_boringssl as boring;
|
|
use authgraph_core::{error::Error as AgError, keyexchange as ke};
|
|
use coset::CborSerializable;
|
|
use std::{cell::RefCell, rc::Rc};
|
|
|
|
pub mod sink;
|
|
pub mod source;
|
|
|
|
/// Return an AuthGraphParticipant suitable for testing.
|
|
pub fn test_ag_participant() -> Result<ke::AuthGraphParticipant, AgError> {
|
|
Ok(ke::AuthGraphParticipant::new(
|
|
boring::crypto_trait_impls(),
|
|
Rc::new(RefCell::new(boring::test_device::AgDevice::default())),
|
|
ke::MAX_OPENED_SESSIONS,
|
|
)?)
|
|
}
|
|
|
|
fn build_plain_pub_key(pub_key: &Option<Vec<u8>>) -> PubKey {
|
|
PubKey::PlainKey(PlainPubKey {
|
|
plainPubKey: pub_key.clone().unwrap(),
|
|
})
|
|
}
|
|
|
|
fn extract_plain_pub_key(pub_key: &Option<PubKey>) -> &PlainPubKey {
|
|
match pub_key {
|
|
Some(PubKey::PlainKey(pub_key)) => pub_key,
|
|
Some(PubKey::SignedKey(_)) => panic!("expect unsigned public key"),
|
|
None => panic!("expect pubKey to be populated"),
|
|
}
|
|
}
|
|
|
|
fn vec_to_identity(data: &[u8]) -> Identity {
|
|
Identity {
|
|
identity: data.to_vec(),
|
|
}
|
|
}
|
|
|
|
fn vec_to_signature(data: &[u8]) -> SessionIdSignature {
|
|
SessionIdSignature {
|
|
signature: data.to_vec(),
|
|
}
|
|
}
|