/* * Copyright (C) 2025 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package com.android.rkpdapp.unittest; import static org.junit.Assert.assertArrayEquals; import static org.junit.Assert.assertEquals; import static org.junit.Assert.assertNotNull; import static org.junit.Assert.assertNull; import android.platform.test.annotations.Presubmit; import androidx.test.ext.junit.runners.AndroidJUnit4; import co.nstant.in.cbor.CborBuilder; import co.nstant.in.cbor.CborEncoder; import co.nstant.in.cbor.model.Array; import co.nstant.in.cbor.model.ByteString; import co.nstant.in.cbor.model.DataItem; import co.nstant.in.cbor.model.Map; import co.nstant.in.cbor.model.UnicodeString; import co.nstant.in.cbor.model.UnsignedInteger; import com.android.rkpdapp.GeekResponse; import java.io.ByteArrayOutputStream; import java.time.Duration; import java.time.Instant; import java.util.UUID; import org.junit.Before; import org.junit.Test; import org.junit.runner.RunWith; /** Unit tests for {@link GeekResponse}. */ @RunWith(AndroidJUnit4.class) public class GeekResponseTest { private static final byte[] CHALLENGE = new byte[] {0x0a, 0x0b, 0x0c}; private static final int TEST_EXTRA_KEYS = 18; private static final int TEST_TIME_TO_REFRESH_HOURS = 42; private static final Instant BAD_CERT_START = Instant.now().minus(Duration.ofDays(2)); private static final Instant BAD_CERT_END = Instant.now().plus(Duration.ofDays(2)); private static final String TEST_URL = "https://www.wonderifthisisvalid.combutjustincase"; private static final Array GEEK_CHAIN_1 = new Array() .add(new ByteString(new byte[] {0x01, 0x02, 0x03})) .add(new ByteString(new byte[] {0x04, 0x05, 0x06})) .add(new ByteString(new byte[] {0x07, 0x08, 0x09})); private static final Array GEEK_CHAIN_2 = new Array() .add(new ByteString(new byte[] {0x09, 0x08, 0x07})) .add(new ByteString(new byte[] {0x06, 0x05, 0x04})) .add(new ByteString(new byte[] {0x03, 0x02, 0x01})); private static final Map DEVICE_CONFIG_WITH_BAD_CERT_INFO = new Map() .put( new UnicodeString(GeekResponse.EXTRA_KEYS), new UnsignedInteger(TEST_EXTRA_KEYS)) .put( new UnicodeString(GeekResponse.TIME_TO_REFRESH), new UnsignedInteger(TEST_TIME_TO_REFRESH_HOURS)) .put( new UnicodeString(GeekResponse.PROVISIONING_URL), new UnicodeString(TEST_URL)) .put( new UnicodeString(GeekResponse.LAST_BAD_CERT_TIME_START_MILLIS), new UnsignedInteger(BAD_CERT_START.toEpochMilli())) .put( new UnicodeString(GeekResponse.LAST_BAD_CERT_TIME_END_MILLIS), new UnsignedInteger(BAD_CERT_END.toEpochMilli())); private ByteArrayOutputStream mBaos; private byte[] mEncodedGeekChain1; private byte[] mEncodedGeekChain2; private Map mDeviceConfig; private byte[] encodeDataItem(DataItem toEncode) throws Exception { new CborEncoder(mBaos).encode(new CborBuilder().add(toEncode).build()); byte[] encoded = mBaos.toByteArray(); mBaos.reset(); return encoded; } @Before public void setUp() throws Exception { mBaos = new ByteArrayOutputStream(); mEncodedGeekChain1 = encodeDataItem(GEEK_CHAIN_1); mEncodedGeekChain2 = encodeDataItem(GEEK_CHAIN_2); mDeviceConfig = new Map() .put( new UnicodeString(GeekResponse.EXTRA_KEYS), new UnsignedInteger(TEST_EXTRA_KEYS)) .put( new UnicodeString(GeekResponse.TIME_TO_REFRESH), new UnsignedInteger(TEST_TIME_TO_REFRESH_HOURS)) .put( new UnicodeString(GeekResponse.PROVISIONING_URL), new UnicodeString(TEST_URL)); } @Test public void testRequestIdIsGenerated() throws Exception { GeekResponse response = new GeekResponse(); String requestId = response.requestId; assertNotNull(requestId); UUID.fromString(requestId); // Throws exception if not a UUID. } @Presubmit @Test public void testParseGeekResponseFakeData() throws Exception { new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .add(mDeviceConfig) .end() .build()); GeekResponse resp = GeekResponse.parse(mBaos.toByteArray()); mBaos.reset(); assertArrayEquals(mEncodedGeekChain1, resp.getGeekChain(GeekResponse.EC_CURVE_25519)); assertArrayEquals(mEncodedGeekChain2, resp.getGeekChain(GeekResponse.EC_CURVE_P256)); assertArrayEquals(CHALLENGE, resp.getChallenge()); assertEquals(TEST_EXTRA_KEYS, resp.numExtraAttestationKeys); assertEquals(TEST_TIME_TO_REFRESH_HOURS, resp.timeToRefresh.toHours()); assertEquals(TEST_URL, resp.provisioningUrl); } @Presubmit @Test public void testParseGeekResponseFakeDataWithBadCertTimeRange() throws Exception { new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .add(DEVICE_CONFIG_WITH_BAD_CERT_INFO) .end() .build()); GeekResponse resp = GeekResponse.parse(mBaos.toByteArray()); mBaos.reset(); assertEquals(TEST_EXTRA_KEYS, resp.numExtraAttestationKeys); assertEquals(TEST_TIME_TO_REFRESH_HOURS, resp.timeToRefresh.toHours()); assertEquals(TEST_URL, resp.provisioningUrl); assertEquals(BAD_CERT_START.toEpochMilli(), resp.lastBadCertTimeStart.toEpochMilli()); assertEquals(BAD_CERT_END.toEpochMilli(), resp.lastBadCertTimeEnd.toEpochMilli()); } @Test public void testExtraDeviceConfigEntriesDontFail() throws Exception { new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .add( mDeviceConfig.put( new UnicodeString("new_field"), new UnsignedInteger(84))) .end() .build()); GeekResponse resp = GeekResponse.parse(mBaos.toByteArray()); mBaos.reset(); assertArrayEquals(mEncodedGeekChain1, resp.getGeekChain(GeekResponse.EC_CURVE_25519)); assertArrayEquals(mEncodedGeekChain2, resp.getGeekChain(GeekResponse.EC_CURVE_P256)); assertArrayEquals(CHALLENGE, resp.getChallenge()); assertEquals(TEST_EXTRA_KEYS, resp.numExtraAttestationKeys); assertEquals(TEST_TIME_TO_REFRESH_HOURS, resp.timeToRefresh.toHours()); assertEquals(TEST_URL, resp.provisioningUrl); } @Test public void testMissingDeviceConfigDoesntFail() throws Exception { new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .end() .build()); GeekResponse resp = GeekResponse.parse(mBaos.toByteArray()); mBaos.reset(); assertArrayEquals(mEncodedGeekChain1, resp.getGeekChain(GeekResponse.EC_CURVE_25519)); assertArrayEquals(mEncodedGeekChain2, resp.getGeekChain(GeekResponse.EC_CURVE_P256)); assertArrayEquals(CHALLENGE, resp.getChallenge()); assertEquals(GeekResponse.NO_EXTRA_KEY_UPDATE, resp.numExtraAttestationKeys); assertNull(resp.timeToRefresh); assertNull(resp.provisioningUrl); assertNull(resp.lastBadCertTimeStart); assertNull(resp.lastBadCertTimeEnd); } @Test public void testMissingDeviceConfigEntriesDoesntFail() throws Exception { mDeviceConfig.remove(new UnicodeString(GeekResponse.TIME_TO_REFRESH)); new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .add(mDeviceConfig) .end() .build()); GeekResponse resp = GeekResponse.parse(mBaos.toByteArray()); mBaos.reset(); assertArrayEquals(mEncodedGeekChain1, resp.getGeekChain(GeekResponse.EC_CURVE_25519)); assertArrayEquals(mEncodedGeekChain2, resp.getGeekChain(GeekResponse.EC_CURVE_P256)); assertArrayEquals(CHALLENGE, resp.getChallenge()); assertEquals(TEST_EXTRA_KEYS, resp.numExtraAttestationKeys); assertNull(resp.timeToRefresh); assertNull(resp.lastBadCertTimeStart); assertNull(resp.lastBadCertTimeEnd); assertEquals(TEST_URL, resp.provisioningUrl); } @Test public void testParseGeekResponseFailsOnWrongType() throws Exception { new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() .addArray() .add("String instead of curve enum") .add(GEEK_CHAIN_1) .end() .end() .add(CHALLENGE) .add(mDeviceConfig) .end() .build()); assertNull(GeekResponse.parse(mBaos.toByteArray())); mBaos.reset(); new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(new ByteString(CHALLENGE)) // Must be an array of bstrs .end() .end() .add(CHALLENGE) .add(mDeviceConfig) .end() .build()); assertNull(GeekResponse.parse(mBaos.toByteArray())); mBaos.reset(); new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .end() .add(new UnicodeString("tstr instead of bstr")) .add(mDeviceConfig) .end() .build()); assertNull(GeekResponse.parse(mBaos.toByteArray())); mBaos.reset(); new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .addArray() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .end() .add(CHALLENGE) .add(CHALLENGE) .end() .build()); assertNull(GeekResponse.parse(mBaos.toByteArray())); } @Test public void testParseGeekResponseWrongSize() throws Exception { new CborEncoder(mBaos) .encode( new CborBuilder() .addArray() .add("one entry") .add("two entries") .add("three entries") .add("whoops") .end() .build()); assertNull(GeekResponse.parse(mBaos.toByteArray())); } @Test public void testParseInvalidUrl() throws Exception { Map deviceConfigInvalidUrl = new Map() .put( new UnicodeString(GeekResponse.PROVISIONING_URL), new UnicodeString("obviously not a url")); ByteArrayOutputStream baos = new ByteArrayOutputStream(); new CborEncoder(baos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .add(deviceConfigInvalidUrl) .end() .build()); GeekResponse resp = GeekResponse.parse(baos.toByteArray()); baos.reset(); assertNull(resp.provisioningUrl); } @Test public void testParseRelativeUrl() throws Exception { Map deviceConfigRelativeUrl = new Map() .put( new UnicodeString(GeekResponse.PROVISIONING_URL), new UnicodeString("relative/url")); ByteArrayOutputStream baos = new ByteArrayOutputStream(); new CborEncoder(baos) .encode( new CborBuilder() .addArray() .addArray() // GEEK Curve to Chains .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_25519)) .add(GEEK_CHAIN_1) .end() .addArray() .add(new UnsignedInteger(GeekResponse.EC_CURVE_P256)) .add(GEEK_CHAIN_2) .end() .end() .add(CHALLENGE) .add(deviceConfigRelativeUrl) .end() .build()); GeekResponse resp = GeekResponse.parse(baos.toByteArray()); baos.reset(); assertNull(resp.provisioningUrl); } }