unexportable_key_unittest.cc 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106
  1. // Copyright (c) 2021 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #include "crypto/unexportable_key.h"
  5. #include <tuple>
  6. #include "base/logging.h"
  7. #include "base/time/time.h"
  8. #include "crypto/scoped_mock_unexportable_key_provider.h"
  9. #include "testing/gtest/include/gtest/gtest.h"
  10. #include "third_party/abseil-cpp/absl/types/optional.h"
  11. namespace {
  12. const crypto::SignatureVerifier::SignatureAlgorithm kAllAlgorithms[] = {
  13. crypto::SignatureVerifier::SignatureAlgorithm::ECDSA_SHA256,
  14. crypto::SignatureVerifier::SignatureAlgorithm::RSA_PKCS1_SHA256,
  15. };
  16. class UnexportableKeySigningTest
  17. : public testing::TestWithParam<
  18. std::tuple<crypto::SignatureVerifier::SignatureAlgorithm, bool>> {};
  19. INSTANTIATE_TEST_SUITE_P(All,
  20. UnexportableKeySigningTest,
  21. testing::Combine(testing::ValuesIn(kAllAlgorithms),
  22. testing::Bool()));
  23. TEST_P(UnexportableKeySigningTest, RoundTrip) {
  24. const crypto::SignatureVerifier::SignatureAlgorithm algo =
  25. std::get<0>(GetParam());
  26. const bool mock_enabled = std::get<1>(GetParam());
  27. switch (algo) {
  28. case crypto::SignatureVerifier::SignatureAlgorithm::ECDSA_SHA256:
  29. LOG(INFO) << "ECDSA P-256, mock=" << mock_enabled;
  30. break;
  31. case crypto::SignatureVerifier::SignatureAlgorithm::RSA_PKCS1_SHA256:
  32. LOG(INFO) << "RSA, mock=" << mock_enabled;
  33. break;
  34. default:
  35. ASSERT_TRUE(false);
  36. }
  37. SCOPED_TRACE(static_cast<int>(algo));
  38. SCOPED_TRACE(mock_enabled);
  39. absl::optional<crypto::ScopedMockUnexportableKeyProvider> mock;
  40. if (mock_enabled) {
  41. mock.emplace();
  42. }
  43. const crypto::SignatureVerifier::SignatureAlgorithm algorithms[] = {algo};
  44. std::unique_ptr<crypto::UnexportableKeyProvider> provider =
  45. crypto::GetUnexportableKeyProvider();
  46. if (!provider) {
  47. LOG(INFO) << "Skipping test because of lack of hardware support.";
  48. return;
  49. }
  50. if (!provider->SelectAlgorithm(algorithms)) {
  51. LOG(INFO) << "Skipping test because of lack of support for this key type.";
  52. return;
  53. }
  54. const base::TimeTicks generate_start = base::TimeTicks::Now();
  55. std::unique_ptr<crypto::UnexportableSigningKey> key =
  56. provider->GenerateSigningKeySlowly(algorithms);
  57. ASSERT_TRUE(key);
  58. LOG(INFO) << "Generation took " << (base::TimeTicks::Now() - generate_start);
  59. ASSERT_EQ(key->Algorithm(), algo);
  60. const std::vector<uint8_t> wrapped = key->GetWrappedKey();
  61. const std::vector<uint8_t> spki = key->GetSubjectPublicKeyInfo();
  62. const uint8_t msg[] = {1, 2, 3, 4};
  63. const base::TimeTicks sign_start = base::TimeTicks::Now();
  64. const absl::optional<std::vector<uint8_t>> sig = key->SignSlowly(msg);
  65. LOG(INFO) << "Signing took " << (base::TimeTicks::Now() - sign_start);
  66. ASSERT_TRUE(sig);
  67. crypto::SignatureVerifier verifier;
  68. ASSERT_TRUE(verifier.VerifyInit(algo, *sig, spki));
  69. verifier.VerifyUpdate(msg);
  70. ASSERT_TRUE(verifier.VerifyFinal());
  71. const base::TimeTicks import2_start = base::TimeTicks::Now();
  72. std::unique_ptr<crypto::UnexportableSigningKey> key2 =
  73. provider->FromWrappedSigningKeySlowly(wrapped);
  74. ASSERT_TRUE(key2);
  75. LOG(INFO) << "Import took " << (base::TimeTicks::Now() - import2_start);
  76. const base::TimeTicks sign2_start = base::TimeTicks::Now();
  77. const absl::optional<std::vector<uint8_t>> sig2 = key->SignSlowly(msg);
  78. LOG(INFO) << "Signing took " << (base::TimeTicks::Now() - sign2_start);
  79. ASSERT_TRUE(sig2);
  80. crypto::SignatureVerifier verifier2;
  81. ASSERT_TRUE(verifier2.VerifyInit(algo, *sig2, spki));
  82. verifier2.VerifyUpdate(msg);
  83. ASSERT_TRUE(verifier2.VerifyFinal());
  84. }
  85. } // namespace