1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
package plugin
import (
"bytes"
"errors"
"fmt"
"io"
"testing"
"github.com/google/go-tpm/tpm2/transport/simulator"
)
func TestEncryptionDecryption(t *testing.T) {
tpm, err := simulator.OpenSimulator()
if err != nil {
t.Fatalf("failed opening tpm: %v", err)
}
defer tpm.Close()
SetLogger(io.Discard)
cases := []struct {
msg string
filekey []byte
pin []byte
decryptpin []byte
shouldfail bool
}{
{
msg: "test encryption/decrypt - no pin",
filekey: []byte("this is a test filekey"),
},
{
msg: "test encryption/decrypt - pin",
filekey: []byte("this is a test filekey"),
pin: []byte("123"),
decryptpin: []byte("123"),
},
{
msg: "test encryption/decrypt - no pin for decryption",
filekey: []byte("this is a test filekey"),
pin: []byte("123"),
shouldfail: true,
},
{
msg: "test encryption/decrypt - no pin for key, pin for decryption",
filekey: []byte("this is a test filekey"),
pin: []byte(""),
decryptpin: []byte("123"),
shouldfail: false,
},
}
for n, c := range cases {
t.Run(fmt.Sprintf("case %d, %s", n, c.msg), func(t *testing.T) {
identity, _, err1 := CreateIdentity(tpm, c.pin)
identity.Callbacks(nil, tpm, func() ([]byte, error) {
return c.decryptpin, nil
})
// Ensure we can always use both recipients
recipient := identity.TPMRecipient()
stanzas, err2 := recipient.Wrap(c.filekey)
unwrappedFileKey, err3 := identity.Unwrap(stanzas)
rrecipient, err := identity.Recipient()
if err != nil {
t.Fatal(err)
}
stanzas, err22 := rrecipient.Wrap(c.filekey)
unwrappedFileKey2, err33 := identity.Unwrap(stanzas)
if errors.Join(err, err1, err2, err3, err22, err33) != nil {
if c.shouldfail {
return
}
t.Fatalf("failed test: %v", err)
}
if c.shouldfail {
t.Fatalf("test should be failing")
}
if !bytes.Equal(c.filekey, unwrappedFileKey) {
t.Fatalf("filkeys are not the same")
}
if !bytes.Equal(c.filekey, unwrappedFileKey2) {
t.Fatalf("filkeys are not the same")
}
})
}
}
|
