attestation_unittest.cc

// Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "attestation.h"

#include <base/file_util.h>
#include <gmock/gmock.h>
#include <gtest/gtest.h>

#include "mock_platform.h"
#include "mock_tpm.h"

using ::testing::NiceMock;

namespace cryptohome {

static const char* kTestPath = "/tmp/attestation_test.epb";

class AttestationTest : public testing::Test {
 public:
  AttestationTest() : attestation_(&tpm_, &platform_) {
    file_util::Delete(FilePath(kTestPath), true);
    attestation_.set_database_path(kTestPath);
  }
  virtual ~AttestationTest() {
    file_util::Delete(FilePath(kTestPath), true);
  }
 protected:
  NiceMock<MockTpm> tpm_;
  NiceMock<MockPlatform> platform_;
  Attestation attestation_;

  chromeos::SecureBlob GetEnrollBlob() {
    AttestationEnrollmentResponse pb;
    pb.set_status(OK);
    pb.set_detail("");
    pb.mutable_encrypted_identity_credential()->set_asym_ca_contents("1234");
    pb.mutable_encrypted_identity_credential()->set_sym_ca_attestation("5678");
    std::string tmp;
    pb.SerializeToString(&tmp);
    return chromeos::SecureBlob(tmp.data(), tmp.length());
  }

  chromeos::SecureBlob GetCertRequestBlob() {
    AttestationCertificateResponse pb;
    pb.set_status(OK);
    pb.set_detail("");
    pb.set_certified_key_credential("1234");
    std::string tmp;
    pb.SerializeToString(&tmp);
    return chromeos::SecureBlob(tmp.data(), tmp.length());
  }
};

TEST(AttestationTest_, NullTpm) {
  Attestation without_tpm(NULL, NULL);
  without_tpm.PrepareForEnrollment();
  EXPECT_FALSE(without_tpm.IsPreparedForEnrollment());
  EXPECT_FALSE(without_tpm.Verify());
}

TEST_F(AttestationTest, PrepareForEnrollment) {
  attestation_.PrepareForEnrollment();
  EXPECT_TRUE(attestation_.IsPreparedForEnrollment());
}

TEST_F(AttestationTest, Enroll) {
  chromeos::SecureBlob blob;
  EXPECT_FALSE(attestation_.CreateEnrollRequest(&blob));
  attestation_.PrepareForEnrollment();
  EXPECT_FALSE(attestation_.IsEnrolled());
  EXPECT_TRUE(attestation_.CreateEnrollRequest(&blob));
  EXPECT_TRUE(attestation_.Enroll(GetEnrollBlob()));
  EXPECT_TRUE(attestation_.IsEnrolled());
}

TEST_F(AttestationTest, CertRequest) {
  chromeos::SecureBlob blob;
  EXPECT_FALSE(attestation_.CreateCertRequest(false, &blob));
  attestation_.PrepareForEnrollment();
  EXPECT_FALSE(attestation_.CreateCertRequest(false, &blob));
  EXPECT_TRUE(attestation_.Enroll(GetEnrollBlob()));
  EXPECT_TRUE(attestation_.CreateCertRequest(false, &blob));
  EXPECT_TRUE(attestation_.FinishCertRequest(GetCertRequestBlob(), &blob));
  EXPECT_EQ(0, memcmp(blob.data(), "1234", 4));
}

}  // namespace cryptohome