arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-11-22 07:28:10 +00:00
Code Issues Releases Wiki Activity

tests/fido_tests: add simple device tests using libfido2

Browse Source
This commit is contained in:
Pavol Rusnak 2019-11-09 10:23:55 +00:00
parent 7de5cec4b0
commit d5129b916d
No known key found for this signature in database
GPG Key ID: 91F3B339B9A02A3D
3 changed files with 52 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
tests/fido_tests/libfido2/.gitignore vendored Normal file
View File

@ -0,0 +1,5 @@
assert_param
cred
cred_param
hmac_assert
pubkey

22
tests/fido_tests/libfido2/cred-assert.sh Executable file
View File

@ -0,0 +1,22 @@
DEVICE=$(fido2-token -L | cut -d : -f 1)
if [ -z "$DEVICE" ] ; then
echo "No FIDO2 token found"
exit 1
fi
# taken from fido2-cred manpage
echo credential challenge | openssl sha256 -binary | base64 > cred_param
echo relying party >> cred_param
echo user name >> cred_param
dd if=/dev/urandom bs=1 count=32 | base64 >> cred_param
fido2-cred -M -i cred_param "$DEVICE" | fido2-cred -V -o cred
# taken from fido2-assert manpage
echo assertion challenge | openssl sha256 -binary | base64 > assert_param
echo relying party >> assert_param
head -1 cred >> assert_param
tail -n +2 cred > pubkey
fido2-assert -G -i assert_param "$DEVICE" | fido2-assert -V pubkey es256

25
tests/fido_tests/libfido2/hmac-secret.sh Executable file
View File

@ -0,0 +1,25 @@
DEVICE=$(fido2-token -L | cut -d : -f 1)
if [ -z "$DEVICE" ] ; then
echo "No FIDO2 token found"
exit 1
fi
# taken from https://github.com/Yubico/libfido2/issues/58
echo credential challenge | openssl sha256 -binary | base64 > cred_param
echo relying party >> cred_param
echo user name >> cred_param
dd if=/dev/urandom bs=1 count=32 | base64 >> cred_param
fido2-cred -M -h -i cred_param "$DEVICE" | fido2-cred -V -h -o cred
# taken from https://github.com/Yubico/libfido2/issues/58
echo assertion challenge | openssl sha256 -binary | base64 > assert_param
echo relying party >> assert_param
head -1 cred >> assert_param
tail -n +2 cred > pubkey
dd if=/dev/urandom bs=1 count=64 | base64 -w0 >> assert_param # hmac salt
fido2-assert -G -h -i assert_param "$DEVICE" > hmac_assert
fido2-assert -V -h -i hmac_assert pubkey es256
tail -1 hmac_assert | base64 -d | xxd # hmac secret