Data structure and interface for manipulating and handing firmware images for verified boot.

src/platform/vboot_reference/tests/run_tests.sh

 #!/bin/bash
 
 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Run tests for cryptographic routine implementations - Message digests 
 # and RSA Signature verification.
 
 hash_algos=( sha1 sha256 sha512 )
 key_lengths=( 1024 2048 4096 8192 ) 
 TEST_FILE=test_file 
 TEST_FILE_SIZE=1000000
 UTIL_DIR=../utils/
+TEST_DIR=../tests/
+
+# Color code output
+COL_YELLOW='\E[1;33m'
+COL_RED='\E[1;31m'
+COL_GREEN='\E[1;32m'
+COL_STOP='\E[0m'
 
 # Generate RSA test keys of various lengths. 
 function generate_keys {
   for i in ${key_lengths[@]}
   do
     openssl genrsa -F4 -out key_rsa$i.pem $i
     # Generate self-signed certificate from key.
     openssl req -batch -new -x509 -key key_rsa$i.pem -out key_rsa$i.crt
     # Generate pre-processed key for use by RSA signature verification code.
     ${UTIL_DIR}/dumpRSAPublicKey key_rsa$i.crt > key_rsa$i.keyb
@@ skipping 22 matching lines @@
     for hashalgo in ${hash_algos[@]}
     do
       echo "For RSA-$keylen and $hashalgo:"
       ${UTIL_DIR}/verify_data $algorithmcounter key_rsa${keylen}.keyb \
         ${TEST_FILE}.rsa${keylen}\_${hashalgo}.sig ${TEST_FILE}
       let algorithmcounter=algorithmcounter+1
     done
   done
 }
 
+function test_verification {
+  algorithmcounter=0
+  for keylen in ${key_lengths[@]}
+  do
+    for hashalgo in ${hash_algos[@]}
+    do
+      echo -e "For ${COL_YELLOW}RSA-$keylen and $hashalgo${COL_STOP}:"
+      cd ${UTIL_DIR} && ${TEST_DIR}/firmware_image_tests $algorithmcounter testkeys/key_rsa8192.pem \
+        testkeys/key_rsa8192.keyb testkeys/key_rsa${keylen}.pem \
+        testkeys/key_rsa${keylen}.keyb
+      let algorithmcounter=algorithmcounter+1
+    done
+  done
+}
+
 function pre_work {
   # Generate a file with random bytes for signature tests.
   echo "Generating test file..."
   dd if=/dev/urandom of=${TEST_FILE} bs=${TEST_FILE_SIZE} count=1
   echo "Generating test keys..."
   generate_keys
   echo "Generating signatures..."
   generate_signatures $TEST_FILE
 }
 
 function cleanup {
   rm ${TEST_FILE} ${TEST_FILE}.*.sig key_rsa*.*
 }
 
 echo "Testing message digests..."
 ./sha_tests
 
 echo
 echo "Testing signature verification..."
-pre_work
+#pre_work
 test_signatures
 
 echo
+echo "Testing high-level image verification..."
+test_verification
+
+echo
 echo "Cleaning up..."
-cleanup
+#cleanup