hwsec

func AccountDiskUsage ¶

func AccountDiskUsage(ctx context.Context, s *testing.State)

func Attestation ¶

func Attestation(ctx context.Context, s *testing.State)

Attestation runs through the attestation flow, including enrollment, cert, sign challenge. Also, it verifies the the key access functionality.

func AttestationEID ¶

func AttestationEID(ctx context.Context, s *testing.State)

func AttestationEnrollOnly ¶

func AttestationEnrollOnly(ctx context.Context, s *testing.State)

AttestationEnrollOnly enrolls the device. Note that this item it to check if crbug/1070162 can be reproduced.

func AttestationNoExternalServer ¶

func AttestationNoExternalServer(ctx context.Context, s *testing.State)

AttestationNoExternalServer runs through the attestation flow, including enrollment, cert, sign challenge. Also, it verifies the the key access functionality. All the external dependencies are replaced with the locally generated server responses.

func CertProvision ¶

func CertProvision(ctx context.Context, s *testing.State)

func CertProvisionNoDatabase ¶

func CertProvisionNoDatabase(ctx context.Context, s *testing.State)

func ChallengeResponseMount ¶

func ChallengeResponseMount(ctx context.Context, s *testing.State)

func ChapsAttributePolicy ¶

func ChapsAttributePolicy(ctx context.Context, s *testing.State)

func ChapsCloseAllSessions ¶

func ChapsCloseAllSessions(ctx context.Context, s *testing.State)

ChapsCloseAllSessions verifies the behaviour of C_CloseAllSessions() in libchaps is correct.

func ChapsECDSA ¶

func ChapsECDSA(ctx context.Context, s *testing.State)

func ChapsECPerf ¶

func ChapsECPerf(ctx context.Context, s *testing.State)

func ChapsPKCS1V15 ¶

func ChapsPKCS1V15(ctx context.Context, s *testing.State)

func ChapsPerf ¶

func ChapsPerf(ctx context.Context, s *testing.State)

func ChapsRSAPSS ¶

func ChapsRSAPSS(ctx context.Context, s *testing.State)

func ChapsRemount ¶

func ChapsRemount(ctx context.Context, s *testing.State)

func CrossVersionLogin ¶

func CrossVersionLogin(ctx context.Context, s *testing.State)

func CryptohomeBadPerms ¶

func CryptohomeBadPerms(ctx context.Context, s *testing.State)

CryptohomeBadPerms checks that cryptohome could detect directories with bad permissions or ownership in the mount path of a home directory.

func CryptohomeCorruptedKeys ¶

func CryptohomeCorruptedKeys(ctx context.Context, s *testing.State)

CryptohomeCorruptedKeys checks that the mount and keys works when part of the vaultkeys corrupted.

func CryptohomeDataLeak ¶

func CryptohomeDataLeak(ctx context.Context, s *testing.State)

func CryptohomeKeyEviction ¶

func CryptohomeKeyEviction(ctx context.Context, s *testing.State)

CryptohomeKeyEviction ensures that the cryptohome properly manages key eviction from the tpm. This test verifies this behaviour by creating 30 keys using chaps, and then remounting a user's cryptohome. Mount requires use of the user's cryptohome key, and thus the mount only succeeds if the cryptohome key was properly evicted and reloaded into the TPM.

func CryptohomeMigrateKey ¶

func CryptohomeMigrateKey(ctx context.Context, s *testing.State)

CryptohomeMigrateKey checks that cryptohome could migrate the key and login correctly.

func CryptohomeMount ¶

func CryptohomeMount(ctx context.Context, s *testing.State)

CryptohomeMount checks that cryptohome could mount the user folder correctly.

func CryptohomeNonDirs ¶

func CryptohomeNonDirs(ctx context.Context, s *testing.State)

CryptohomeNonDirs checks that cryptohome could detect directories with bad permissions or ownership in the mount path of a home directory.

func CryptohomeTestAuth ¶

func CryptohomeTestAuth(ctx context.Context, s *testing.State)

CryptohomeTestAuth checks that cryptohome could test the user authorization correctly.

func DaemonsRestartStress ¶

func DaemonsRestartStress(ctx context.Context, s *testing.State)

DaemonsRestartStress checks that restarting hwsec daemons wouldn't cause problems.

func DictionaryAttackLockoutResetTPM1 ¶

func DictionaryAttackLockoutResetTPM1(ctx context.Context, s *testing.State)

DictionaryAttackLockoutResetTPM1 checks that get dictionary attack info and reset dictionary attack lockout works as expected.

func DictionaryAttackLockoutResetTPM2 ¶

func DictionaryAttackLockoutResetTPM2(ctx context.Context, s *testing.State)

DictionaryAttackLockoutResetTPM2 checks that get dictionary attack info and reset dictionary attack lockout works as expected.

func ECDHShortKey ¶

func ECDHShortKey(ctx context.Context, s *testing.State)

ECDHShortKey verifies ECDD can work with short ECC keys.

func FirmwareManagementParameters ¶

func FirmwareManagementParameters(ctx context.Context, s *testing.State)

FirmwareManagementParameters checks that the firmware management parameters are functioning correctly.

func KeysetTiedToTPM2 ¶

func KeysetTiedToTPM2(ctx context.Context, s *testing.State)

KeysetTiedToTPM2 is an integration test that verifies a user's VKK is tied to the TPM after the second login.

func Login ¶

func Login(ctx context.Context, s *testing.State)

func LoginGuest ¶

func LoginGuest(ctx context.Context, s *testing.State)

func MountCombinations ¶

func MountCombinations(ctx context.Context, s *testing.State)

MountCombinations tests that we are able to signin/mount 2+ users with different combinations of pin/password.

func Pkcs11ChangeAuthData ¶

func Pkcs11ChangeAuthData(ctx context.Context, s *testing.State)

Pkcs11ChangeAuthData test the chapsd behavior of change auth data.

func Pkcs11Events ¶

func Pkcs11Events(ctx context.Context, s *testing.State)

Pkcs11Events test the response of the PKCS #11 system to load /unload events.

func Pkcs11InitOnLogin ¶

func Pkcs11InitOnLogin(ctx context.Context, s *testing.State)

Pkcs11InitOnLogin test the PKCS#11 behavior of initialization on login.

func Pkcs11InitUnderErrors ¶

func Pkcs11InitUnderErrors(ctx context.Context, s *testing.State)

Pkcs11InitUnderErrors test the chapsd pkcs11 initialization under various system states.

func Pkcs11LoadPerf ¶

func Pkcs11LoadPerf(ctx context.Context, s *testing.State)

Pkcs11LoadPerf test the chapsd load key performance.

func PrepareCrossVersionLoginData ¶

func PrepareCrossVersionLoginData(ctx context.Context, s *testing.State)

func RecreateUserVaultTPM2 ¶

func RecreateUserVaultTPM2(ctx context.Context, s *testing.State)

RecreateUserVaultTPM2 is ported from the autotest test platform_CryptohomeTPMReOwn and renamed to reflects what's being tested. It avoids reboots in the original test by using the soft-clearing TPM utils and restarting TPM-related daemons.

func SanitizedUsernameAndSalt ¶

func SanitizedUsernameAndSalt(ctx context.Context, s *testing.State)

func UnmountAll ¶

func UnmountAll(ctx context.Context, s *testing.State)

UnmountAll tests that cryptohome's Unmount() correctly unmount all logged-in user's vault.