Specific low-level tests of the Default Security Context. More...

#include "DefaultScUtils.h"
#include <bsl/BPSecLib_Private.h>
#include <bsl/crypto/CryptoInterface.h>
#include <bsl/dynamic/PublicInterfaceImpl.h>
#include <bsl/default_sc/DefaultSecContext.h>
#include <bsl/default_sc/DefaultSecContext_Private.h>
#include <bsl/mock_bpa/MockBPA.h>
#include <stdio.h>
#include <stdlib.h>
#include <unity.h>

Include dependency graph for test_DefaultSecurityContext.c:

Functions
void	suiteSetUp (void)

int	suiteTearDown (int failures)

void	setUp (void)

void	tearDown (void)

void	test_RFC9173_AppendixA_Example1_BIB_Source (void)
	Purpose: Exercise BIB applying security to a target payload block.

void	test_RFC9173_AppendixA_Example2_BCB_Source (void)
	Purpose: Exercise BCB applying security to a target payload block.

void	test_RFC9173_AppendixA_Example2_BCB_Acceptor (void)

int	rfc3394_cek (unsigned char *buf, int len)

void	test_sec_source_keywrap (bool wrap, bool bib)

void	test_sec_accept_keyunwrap (bool bib)

Variables
static const char *	ApxA2_AuthTag = "efa4b5ac0108e3816c5606479801bc04"

static const char *	ApxA2_Ciphertext = "3a09c1e63fe23a7f66a59c7303837241e070b02619fc59c5214a22f08cd70795e73e9a"

static const char *	ApxA2_PayloadData = "526561647920746f2067656e657261746520612033322d62797465207061796c6f6164"

static BSL_TestContext_t	LocalTestCtx

Detailed Description

Specific low-level tests of the Default Security Context.

Notes:

These tests use constructs defined in the BSL to exercise each context.
It uses test inputs and vectors from RFC9173 Appendix A.
It does NOT use any of the "Plumbing" inside the BSL.
It only directly calls the interfaces exposed by the Default Security Context.

Function Documentation

◆ rfc3394_cek()

int rfc3394_cek	(	unsigned char *	buf,
		int	len
	)

Referenced by test_sec_accept_keyunwrap(), and test_sec_source_keywrap().

◆ setUp()

void setUp ( void )

References BSL_TestContext_t::bsl, BSL_CryptoInit(), BSL_TestContext_Init(), BSL_TestUtils_SetupDefaultSecurityContext(), LocalTestCtx, and TEST_ASSERT_EQUAL().

◆ suiteSetUp()

void suiteSetUp ( void )

References BSL_HostDescriptors_Set(), mock_bpa_LogOpen(), mock_bpa_LogSetLeastSeverity(), and MockBPA_Agent_Descriptors().

◆ suiteTearDown()

int suiteTearDown ( int failures )

References BSL_HostDescriptors_Clear(), and mock_bpa_LogClose().

◆ tearDown()

void tearDown ( void )

References BSL_CryptoDeinit(), BSL_TestContext_Deinit(), LocalTestCtx, and TEST_ASSERT_EQUAL().

◆ test_RFC9173_AppendixA_Example1_BIB_Source()

void test_RFC9173_AppendixA_Example1_BIB_Source ( void )

Purpose: Exercise BIB applying security to a target payload block.

Steps:

Get an unsecured bundle with a primary and payload block (From RFC9173)
Decode it into a BSL_BundleCtx struct
Create a BIB security operation with hard-coded arguments (From RFC9173 A1 ASB)
Run the DefaultSecuritContext's BSLX_BIB_Execute function and confirm result is 0.
Check the operation after the above function to confirm 1 result (the authentication code)
Capture the auth code and ensure it matches the value in the test vector.

Notes:

Common repeated patterns are in the process of being factored out
All values are drawn from RFC9173 Appendix A.

Confirm running BIB as source executes without error

Confirm it produced only 1 result

Confirm the context and result result is the right ID (Defined in RFC)

Confirm the actual HMAC tag matches what is in the RFC

References BIBTestContext_Deinit(), BIBTestContext_Init(), BSL_TestContext_t::bsl, BSL_Crypto_SetRngGenerator(), BSL_Data_Deinit(), BSL_IdValPair_GetAsBytestr(), BSL_SecOper_CountResults(), BSL_SecOper_FindResult(), BSL_SECROLE_SOURCE, BSL_SUCCESS, BSL_TestUtils_InitBIB_AppendixA1(), BSL_TestUtils_IsB16StrEqualTo(), BSL_TestUtils_LoadBundleFromCBOR(), BSLX_BIB_Execute(), mock_bpa_ctr_t::bundle_ref, RFC9173_TestVectors_AppendixA1::hex_bundle_original, RFC9173_TestVectors_AppendixA1::hex_hmac, LocalTestCtx, BSL_TestContext_t::mock_bpa_ctr, RFC9173_BIB_RESULTID_HMAC, rfc9173_byte_gen_fn_a1(), RFC9173_EXAMPLE_A1_KEY, BIBTestContext::sec_oper, TEST_ASSERT_EQUAL(), and TEST_ASSERT_TRUE().

◆ test_RFC9173_AppendixA_Example2_BCB_Acceptor()

void test_RFC9173_AppendixA_Example2_BCB_Acceptor ( void )

Confirm that BCB executes with SUCCESS

Confirm that the target block is decrypted correctly.

References ApxA2_PayloadData, BCBTestContext_Deinit(), BCBTestContext_Init(), MockBPA_Bundle_t::blocks_num, BSL_TestContext_t::bsl, BSL_Data_Deinit(), BSL_DATA_INIT_VIEW, BSL_ExecBCBVerifierAcceptor(), BSL_SECROLE_ACCEPTOR, BSL_SUCCESS, BSL_TestUtils_InitBCB_Appendix2(), BSL_TestUtils_IsB16StrEqualTo(), BSL_TestUtils_LoadBundleFromCBOR(), BSLX_BCB_Execute(), MockBPA_CanonicalBlock_t::btsd, MockBPA_CanonicalBlock_t::btsd_len, mock_bpa_ctr_t::bundle, mock_bpa_ctr_t::bundle_ref, RFC9173_TestVectorsA2::hex_bundle_bcb, LocalTestCtx, BSL_TestContext_t::mock_bpa_ctr, RFC9173_TestVectors_AppendixA2, BCBTestContext::sec_oper, TEST_ASSERT_EQUAL(), and TEST_ASSERT_TRUE().

◆ test_RFC9173_AppendixA_Example2_BCB_Source()

void test_RFC9173_AppendixA_Example2_BCB_Source ( void )

Purpose: Exercise BCB applying security to a target payload block.

Steps:

Get an unsecured bundle with a primary and payload block (From RFC9173)
Decode it into a BSL_BundleCtx struct
Create a BCB security operation with hard-coded arguments (From RFC9173 A2 ASB)
Run the DefaultSecuritContext's BSLX_BCB_Execute function and confirm result is 0.
Check the operation after the above function to confirm 1 result (the auth tag) is present
Capture the auth tag and ensure it matches the value in the test vector.

Notes: