1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
// Copyright 2018 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <libdevmapper.h>
#include <base/files/file_util.h>
#include <base/memory/ptr_util.h>
#include <base/strings/string_number_conversions.h>
#include <base/strings/string_split.h>
#include <brillo/blkdev_utils/device_mapper_fake.h>
#include <gtest/gtest.h>
namespace brillo {
TEST(DevmapperTableTest, CreateTableFromSecureBlobTest) {
SecureBlob crypt_table_str("0 100 crypt");
DevmapperTable dm_table =
DevmapperTable::CreateTableFromSecureBlob(crypt_table_str);
EXPECT_EQ(DevmapperTable(0, 0, "", SecureBlob()).ToSecureBlob(),
dm_table.ToSecureBlob());
}
TEST(DevmapperTableTest, CryptCreateParametersTest) {
base::FilePath device("/some/random/filepath");
SecureBlob secret;
SecureBlob::HexStringToSecureBlob("0123456789ABCDEF", &secret);
SecureBlob crypt_parameters = DevmapperTable::CryptCreateParameters(
"aes-cbc-essiv:sha256", secret, 0, device, 0, true);
DevmapperTable crypt_table(0, 100, "crypt", crypt_parameters);
SecureBlob crypt_table_str(
"0 100 crypt aes-cbc-essiv:sha256 "
"0123456789ABCDEF 0 /some/random/filepath 0 1 "
"allow_discards");
EXPECT_EQ(crypt_table.ToSecureBlob().to_string(),
crypt_table_str.to_string());
}
TEST(DevmapperTableTest, CryptCreateTableFromSecureBlobTest) {
base::FilePath device("/some/random/filepath");
SecureBlob secret;
SecureBlob::HexStringToSecureBlob("0123456789ABCDEF", &secret);
SecureBlob crypt_parameters = DevmapperTable::CryptCreateParameters(
"aes-cbc-essiv:sha256", secret, 0, device, 0, true);
DevmapperTable crypt_table(0, 100, "crypt", crypt_parameters);
SecureBlob crypt_table_str(
"0 100 crypt aes-cbc-essiv:sha256 "
"0123456789ABCDEF 0 /some/random/filepath 0 1 "
"allow_discards");
DevmapperTable parsed_blob_table =
DevmapperTable::CreateTableFromSecureBlob(crypt_table_str);
EXPECT_EQ(crypt_table.ToSecureBlob(), parsed_blob_table.ToSecureBlob());
}
TEST(DevmapperTableTest, CryptGetKeyTest) {
SecureBlob secret;
SecureBlob::HexStringToSecureBlob("0123456789ABCDEF", &secret);
SecureBlob crypt_table_str(
"0 100 crypt aes-cbc-essiv:sha256 "
"0123456789ABCDEF 0 /some/random/filepath 0 1 "
"allow_discards");
DevmapperTable dm_table =
DevmapperTable::CreateTableFromSecureBlob(crypt_table_str);
EXPECT_EQ(secret, dm_table.CryptGetKey());
}
TEST(DevmapperTableTest, MalformedCryptTableTest) {
SecureBlob secret;
SecureBlob::HexStringToSecureBlob("0123456789ABCDEF", &secret);
// Pass malformed crypt table string.
SecureBlob crypt_table_str(
"0 100 crypt ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ"
"ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ"
"ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ"
"ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ");
DevmapperTable dm_table =
DevmapperTable::CreateTableFromSecureBlob(crypt_table_str);
EXPECT_EQ(SecureBlob(), dm_table.CryptGetKey());
}
TEST(DevmapperTableTest, GetterTest) {
SecureBlob verity_table(
"0 40 verity payload=/dev/loop6 hashtree=/dev/loop6 "
"hashstart=40 alg=sha256 root_hexdigest="
"01234567 "
"salt=89ABCDEF "
"error_behavior=eio");
DevmapperTable dm_table =
DevmapperTable::CreateTableFromSecureBlob(verity_table);
EXPECT_EQ(dm_table.GetStart(), 0);
EXPECT_EQ(dm_table.GetSize(), 40);
EXPECT_EQ(dm_table.GetType(), "verity");
EXPECT_EQ(dm_table.GetParameters(),
SecureBlob("payload=/dev/loop6 hashtree=/dev/loop6 "
"hashstart=40 alg=sha256 root_hexdigest=01234567 "
"salt=89ABCDEF error_behavior=eio"));
}
TEST(DevmapperTest, FakeTaskConformance) {
SecureBlob secret;
SecureBlob::HexStringToSecureBlob("0123456789ABCDEF", &secret);
SecureBlob crypt_table_str(
"0 100 crypt aes-cbc-essiv:sha256 "
"0123456789ABCDEF 0 /some/random/filepath 0 1 "
"allow_discards");
DevmapperTable dm_table =
DevmapperTable::CreateTableFromSecureBlob(crypt_table_str);
EXPECT_EQ(secret, dm_table.CryptGetKey());
DeviceMapper dm(base::Bind(&fake::CreateDevmapperTask));
// Add device.
EXPECT_TRUE(dm.Setup("abcd", dm_table));
EXPECT_FALSE(dm.Setup("abcd", dm_table));
DevmapperTable table = dm.GetTable("abcd");
// Expect tables to be the same.
EXPECT_EQ(table.ToSecureBlob(), dm_table.ToSecureBlob());
// Expect key to match.
EXPECT_EQ(table.CryptGetKey(), secret);
EXPECT_TRUE(dm.Remove("abcd"));
EXPECT_FALSE(dm.Remove("abcd"));
}
} // namespace brillo
|
