Prepare for crypto access control tests

- Add a secure side test partition
- Add a proxy to communicate with the test partition
- Add main test file

Author: itayzafrir

TESTS/psa/crypto_access_control/COMPONENT_NSPE/main.cpp

@@ -0,0 +1,89 @@
+/*
+ * Copyright (c) 2019, Arm Limited and affiliates
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#if ((!defined(TARGET_PSA)) || (!defined(MBEDTLS_PSA_CRYPTO_C)) || (!defined(COMPONENT_PSA_SRV_IPC)))
+#error [NOT_SUPPORTED] These tests can run only on SPM-enabled targets and where Mbed Crypto is ON - skipping.
+#endif
+
+#include <stdio.h>
+#include "mbed.h"
+#include "greentea-client/test_env.h"
+#include "unity.h"
+#include "utest.h"
+#include "psa/crypto.h"
+#include "entropy.h"
+#include "entropy_poll.h"
+#include "test_partition_proxy.h"
+#include "psa/lifecycle.h"
+
+using namespace utest::v1;
+
+#if defined(MBEDTLS_ENTROPY_NV_SEED) || defined(COMPONENT_PSA_SRV_IPC)
+
+#if !defined(MAX)
+#define MAX(a,b) (((a)>(b))?(a):(b))
+#endif
+
+#define MBEDTLS_PSA_INJECT_ENTROPY_MIN_SIZE \
+            MAX(MBEDTLS_ENTROPY_MIN_PLATFORM, MBEDTLS_ENTROPY_BLOCK_SIZE)
+
+void inject_entropy()
+{
+    uint8_t seed[MBEDTLS_PSA_INJECT_ENTROPY_MIN_SIZE] = { 0 };
+    for (int i = 0; i < MBEDTLS_PSA_INJECT_ENTROPY_MIN_SIZE; ++i) {
+        seed[i] = i;
+    }
+    mbedtls_psa_inject_entropy(seed, MBEDTLS_PSA_INJECT_ENTROPY_MIN_SIZE);
+}
+#endif // defined(MBEDTLS_ENTROPY_NV_SEED) || defined(COMPONENT_PSA_SRV_IPC)
+
+utest::v1::status_t case_setup_handler(const Case *const source, const size_t index_of_case)
+{
+    psa_status_t status = mbed_psa_reboot_and_request_new_security_state(PSA_LIFECYCLE_ASSEMBLY_AND_TEST);
+    TEST_ASSERT_EQUAL(PSA_SUCCESS, status);
+    status = psa_crypto_init();
+#if defined(MBEDTLS_ENTROPY_NV_SEED) || defined(COMPONENT_PSA_SRV_IPC)
+    if (status == PSA_ERROR_INSUFFICIENT_ENTROPY) {
+        inject_entropy();
+        status = psa_crypto_init();
+    }
+#endif
+    TEST_ASSERT_EQUAL(PSA_SUCCESS, status);
+    return greentea_case_setup_handler(source, index_of_case);
+}
+
+utest::v1::status_t case_teardown_handler(const Case *const source, const size_t passed,
+                                          const size_t failed, const failure_t failure)
+{
+    psa_status_t status = mbed_psa_reboot_and_request_new_security_state(PSA_LIFECYCLE_ASSEMBLY_AND_TEST);
+    TEST_ASSERT_EQUAL(PSA_SUCCESS, status);
+    mbedtls_psa_crypto_free();
+    return greentea_case_teardown_handler(source, passed, failed, failure);
+}
+
+utest::v1::status_t test_setup(const size_t number_of_cases)
+{
+#ifndef NO_GREENTEA
+    GREENTEA_SETUP(120, "default_auto");
+#endif
+    return verbose_test_setup_handler(number_of_cases);
+}
+
+int main(void)
+{
+    return (1);
+}

TESTS/psa/crypto_access_control/COMPONENT_PSA_SRV_IPC/test_partition_proxy.c

@@ -0,0 +1,119 @@
+/*
+ * Copyright (c) 2019, Arm Limited and affiliates
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include "psa/client.h"
+#include "psa_test_partition_ifs.h"
+#include "test_partition_proxy.h"
+
+#define MINOR_VER 1
+
+static psa_status_t invoke_ipc_call(uint32_t sid, psa_invec *in_vec, size_t in_vec_size,
+                                    psa_outvec *out_vec, size_t out_vec_size)
+{
+    psa_status_t status;
+
+    psa_handle_t handle = psa_connect(sid, MINOR_VER);
+    if (handle <= 0) {
+        return (PSA_ERROR_COMMUNICATION_FAILURE);
+    }
+
+    status = psa_call(handle, in_vec, in_vec_size, out_vec, out_vec_size);
+    psa_close(handle);
+
+    if (status < 0) {
+        status = PSA_ERROR_COMMUNICATION_FAILURE;
+    }
+
+    return (status);
+}
+
+psa_status_t test_partition_crypto_create_persistent_key(psa_key_id_t key_id, psa_key_handle_t *key_handle)
+{
+    psa_invec in_vec = { &key_id, sizeof(key_id) };
+    psa_outvec out_vec = { key_handle, sizeof(*key_handle) };
+    psa_status_t status = invoke_ipc_call(CRYPTO_CREATE_PERSISTENT_KEY, &in_vec, 1, &out_vec, 1);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_set_key_policy(psa_key_handle_t key_handle, psa_key_usage_t key_usage,
+                                                  psa_algorithm_t key_alg)
+{
+    psa_invec in_vec[3] = {
+        { &key_handle, sizeof(key_handle) },
+        { &key_usage, sizeof(key_usage) },
+        { &key_alg, sizeof(key_alg) }
+    };
+    psa_status_t status = invoke_ipc_call(CRYPTO_SET_KEY_POLICY, in_vec, 3, NULL, 0);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_get_key_policy(psa_key_handle_t key_handle, psa_key_usage_t *key_usage,
+                                                  psa_algorithm_t *key_alg)
+{
+    psa_invec in_vec = { &key_handle, sizeof(key_handle) };
+    psa_outvec out_vec[2] = {
+        { key_usage, sizeof(*key_usage) },
+        { key_alg, sizeof(*key_alg) }
+    };
+    psa_status_t status = invoke_ipc_call(CRYPTO_GET_KEY_POLICY, &in_vec, 1, out_vec, 2);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_get_key_information(psa_key_handle_t key_handle, psa_key_type_t *key_type,
+                                                       size_t *key_bits)
+{
+    psa_invec in_vec = { &key_handle, sizeof(key_handle) };
+    psa_outvec out_vec[2] = {
+        { key_type, sizeof(*key_type) },
+        { key_bits, sizeof(*key_bits) }
+    };
+    psa_status_t status = invoke_ipc_call(CRYPTO_GET_KEY_INFO, &in_vec, 1, out_vec, 2);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_generate_key(psa_key_handle_t key_handle, psa_key_type_t key_type, size_t key_bits)
+{
+    psa_invec in_vec[3] = {
+        { &key_handle, sizeof(key_handle) },
+        { &key_type, sizeof(key_type) },
+        { &key_bits, sizeof(key_bits) }
+    };
+    psa_status_t status = invoke_ipc_call(CRYPTO_GENERATE_KEY, in_vec, 3, NULL, 0);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_open_persistent_key(psa_key_id_t key_id, psa_key_handle_t *key_handle)
+{
+    psa_invec in_vec = { &key_id, sizeof(key_id) };
+    psa_outvec out_vec = { key_handle, sizeof(*key_handle) };
+    psa_status_t status = invoke_ipc_call(CRYPTO_OPEN_PERSISTENT_KEY, &in_vec, 1, &out_vec, 1);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_close_key(psa_key_handle_t key_handle)
+{
+    psa_invec in_vec = { &key_handle, sizeof(key_handle) };
+    psa_status_t status = invoke_ipc_call(CRYPTO_CLOSE_KEY, &in_vec, 1, NULL, 0);
+    return (status);
+}
+
+psa_status_t test_partition_crypto_destroy_key(psa_key_handle_t key_handle)
+{
+    psa_invec in_vec = { &key_handle, sizeof(key_handle) };
+    psa_status_t status = invoke_ipc_call(CRYPTO_DESTROY_KEY, &in_vec, 1, NULL, 0);
+    return (status);
+}

TESTS/psa/crypto_access_control/COMPONENT_PSA_SRV_IPC/test_partition_proxy.h

@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2019, Arm Limited and affiliates
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef TEST_PARTITION_PROXY_H
+#define TEST_PARTITION_PROXY_H
+
+#include "psa/crypto.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+psa_status_t test_partition_crypto_create_persistent_key(psa_key_id_t key_id, psa_key_handle_t *key_handle);
+
+psa_status_t test_partition_crypto_set_key_policy(psa_key_handle_t key_handle, psa_key_usage_t key_usage,
+                                                  psa_algorithm_t key_alg);
+
+psa_status_t test_partition_crypto_get_key_policy(psa_key_handle_t key_handle, psa_key_usage_t *key_usage,
+                                                  psa_algorithm_t *key_alg);
+
+psa_status_t test_partition_crypto_get_key_information(psa_key_handle_t key_handle, psa_key_type_t *key_type,
+                                                       size_t *key_bits);
+
+psa_status_t test_partition_crypto_generate_key(psa_key_handle_t key_handle, psa_key_type_t key_type, size_t key_bits);
+
+psa_status_t test_partition_crypto_open_persistent_key(psa_key_id_t key_id, psa_key_handle_t *key_handle);
+
+psa_status_t test_partition_crypto_close_key(psa_key_handle_t key_handle);
+
+psa_status_t test_partition_crypto_destroy_key(psa_key_handle_t key_handle);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* TEST_PARTITION_PROXY_H */