blob: cf37fcf72e8ee0604913438c11129661845c1969 [file] [log] [blame]
Alice Wang2925b0a2023-01-19 10:44:24 +00001/*
2 * Copyright (C) 2023 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Alice Wangeccdd392023-01-23 08:50:27 +000017//! Utility functions used by API tests.
Alice Wang2925b0a2023-01-19 10:44:24 +000018
Alice Wang1f0add02023-01-23 16:22:53 +000019use anyhow::{anyhow, Result};
Alice Wang2925b0a2023-01-19 10:44:24 +000020use avb_bindgen::{
21 avb_footer_validate_and_byteswap, avb_vbmeta_image_header_to_host_byte_order, AvbFooter,
22 AvbVBMetaImageHeader,
23};
Alice Wang1f0add02023-01-23 16:22:53 +000024use openssl::sha;
Shikha Panwar84707e42023-10-04 15:21:41 +000025use pvmfw_avb::{
26 verify_payload, Capability, DebugLevel, Digest, PvmfwVerifyError, VerifiedBootData,
27};
Alice Wang2925b0a2023-01-19 10:44:24 +000028use std::{
29 fs,
30 mem::{size_of, transmute, MaybeUninit},
31};
32
33const MICRODROID_KERNEL_IMG_PATH: &str = "microdroid_kernel";
34const INITRD_NORMAL_IMG_PATH: &str = "microdroid_initrd_normal.img";
35const INITRD_DEBUG_IMG_PATH: &str = "microdroid_initrd_debuggable.img";
36const PUBLIC_KEY_RSA4096_PATH: &str = "data/testkey_rsa4096_pub.bin";
37
38pub const PUBLIC_KEY_RSA2048_PATH: &str = "data/testkey_rsa2048_pub.bin";
39
Alice Wang1f0add02023-01-23 16:22:53 +000040pub fn assert_payload_verification_with_initrd_fails(
Alice Wang2925b0a2023-01-19 10:44:24 +000041 kernel: &[u8],
42 initrd: &[u8],
43 trusted_public_key: &[u8],
David Pursella7c727b2023-08-14 16:24:40 -070044 expected_error: PvmfwVerifyError,
Alice Wang2925b0a2023-01-19 10:44:24 +000045) -> Result<()> {
Alice Wang1f0add02023-01-23 16:22:53 +000046 assert_payload_verification_fails(kernel, Some(initrd), trusted_public_key, expected_error)
Alice Wang2925b0a2023-01-19 10:44:24 +000047}
48
Alice Wang1f0add02023-01-23 16:22:53 +000049pub fn assert_payload_verification_fails(
Alice Wang2925b0a2023-01-19 10:44:24 +000050 kernel: &[u8],
51 initrd: Option<&[u8]>,
52 trusted_public_key: &[u8],
David Pursella7c727b2023-08-14 16:24:40 -070053 expected_error: PvmfwVerifyError,
Alice Wang2925b0a2023-01-19 10:44:24 +000054) -> Result<()> {
Alice Wang1f0add02023-01-23 16:22:53 +000055 assert_eq!(expected_error, verify_payload(kernel, initrd, trusted_public_key).unwrap_err());
Alice Wang2925b0a2023-01-19 10:44:24 +000056 Ok(())
57}
58
59pub fn load_latest_signed_kernel() -> Result<Vec<u8>> {
60 Ok(fs::read(MICRODROID_KERNEL_IMG_PATH)?)
61}
62
63pub fn load_latest_initrd_normal() -> Result<Vec<u8>> {
64 Ok(fs::read(INITRD_NORMAL_IMG_PATH)?)
65}
66
67pub fn load_latest_initrd_debug() -> Result<Vec<u8>> {
68 Ok(fs::read(INITRD_DEBUG_IMG_PATH)?)
69}
70
71pub fn load_trusted_public_key() -> Result<Vec<u8>> {
72 Ok(fs::read(PUBLIC_KEY_RSA4096_PATH)?)
73}
74
75pub fn extract_avb_footer(kernel: &[u8]) -> Result<AvbFooter> {
76 let footer_start = kernel.len() - size_of::<AvbFooter>();
77 // SAFETY: The slice is the same size as the struct which only contains simple data types.
78 let mut footer = unsafe {
79 transmute::<[u8; size_of::<AvbFooter>()], AvbFooter>(kernel[footer_start..].try_into()?)
80 };
81 // SAFETY: The function updates the struct in-place.
82 unsafe {
83 avb_footer_validate_and_byteswap(&footer, &mut footer);
84 }
85 Ok(footer)
86}
87
88pub fn extract_vbmeta_header(kernel: &[u8], footer: &AvbFooter) -> Result<AvbVBMetaImageHeader> {
89 let vbmeta_offset: usize = footer.vbmeta_offset.try_into()?;
90 let vbmeta_size: usize = footer.vbmeta_size.try_into()?;
91 let vbmeta_src = &kernel[vbmeta_offset..(vbmeta_offset + vbmeta_size)];
92 // SAFETY: The latest kernel has a valid VBMeta header at the position specified in footer.
93 let vbmeta_header = unsafe {
94 let mut header = MaybeUninit::uninit();
95 let src = vbmeta_src.as_ptr() as *const _ as *const AvbVBMetaImageHeader;
96 avb_vbmeta_image_header_to_host_byte_order(src, header.as_mut_ptr());
97 header.assume_init()
98 };
99 Ok(vbmeta_header)
100}
Alice Wang1f0add02023-01-23 16:22:53 +0000101
102pub fn assert_latest_payload_verification_passes(
103 initrd: &[u8],
104 initrd_salt: &[u8],
105 expected_debug_level: DebugLevel,
106) -> Result<()> {
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000107 let public_key = load_trusted_public_key()?;
Alice Wang1f0add02023-01-23 16:22:53 +0000108 let kernel = load_latest_signed_kernel()?;
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000109 let verified_boot_data = verify_payload(&kernel, Some(initrd), &public_key)
Alice Wang1f0add02023-01-23 16:22:53 +0000110 .map_err(|e| anyhow!("Verification failed. Error: {}", e))?;
111
Alice Wang1f0add02023-01-23 16:22:53 +0000112 let footer = extract_avb_footer(&kernel)?;
Pierre-Clément Tosi81ca0802023-02-14 10:41:38 +0000113 let kernel_digest =
114 hash(&[&hash(&[b"bootloader"]), &kernel[..usize::try_from(footer.original_image_size)?]]);
Shikha Panwar84707e42023-10-04 15:21:41 +0000115 let capabilities =
116 if cfg!(llpvm_changes) { vec![Capability::SecretkeeperProtection] } else { vec![] };
Pierre-Clément Tosi81ca0802023-02-14 10:41:38 +0000117 let initrd_digest = Some(hash(&[&hash(&[initrd_salt]), initrd]));
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000118 let expected_boot_data = VerifiedBootData {
119 debug_level: expected_debug_level,
120 kernel_digest,
121 initrd_digest,
122 public_key: &public_key,
Shikha Panwar84707e42023-10-04 15:21:41 +0000123 capabilities,
Shikha Panwara26f16a2023-09-27 09:39:00 +0000124 rollback_index: if cfg!(llpvm_changes) { 1 } else { 0 },
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000125 };
Pierre-Clément Tosi81ca0802023-02-14 10:41:38 +0000126 assert_eq!(expected_boot_data, verified_boot_data);
127
Alice Wang1f0add02023-01-23 16:22:53 +0000128 Ok(())
129}
130
131pub fn hash(inputs: &[&[u8]]) -> Digest {
132 let mut digester = sha::Sha256::new();
133 inputs.iter().for_each(|input| digester.update(input));
134 digester.finish()
135}