mirror of
https://gitlab.gnome.org/GNOME/libsecret.git
synced 2024-12-22 04:38:55 +00:00
63907d907e
These changes define the TPM2 API and add its implementations to the incubation area (egg/). Summary of the public API: `egg_tpm2_initialize`: Start a TPM context. `egg_tpm2_finalize`: End a TPM context. `egg_tpm2_generate_master_password`: Generate and returns an encrypted master password in `GBytes` format. TSS Marshaling, GVariant serialization is used. `egg_tpm2_decrypt_master_password`: Decrypts a master password generated from `egg_tpm2_generate_master_password`. TSS Unmarshaling, GVariant deserialization is used. TPM2 API: TSS Enhanced System API (ESAPI) Proposal: [extend file backend to use TPM2 derived encryption keys](https://gitlab.gnome.org/Teams/Engagement/gsoc-2021/-/issues/13) Related MRs: [#86](https://gitlab.gnome.org/GNOME/libsecret/-/merge_requests/86) Related Issues: [#63](https://gitlab.gnome.org/GNOME/libsecret/-/issues/63)
79 lines
2.2 KiB
C
79 lines
2.2 KiB
C
/* libsecret - Test TSS interface for libsecret
|
|
*
|
|
* Copyright (C) 2021 Dhanuka Warusadura
|
|
*
|
|
* This library is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as
|
|
* published by the Free Software Foundation; either version 2.1 of
|
|
* the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
|
|
* MA 02110-1301 USA
|
|
*
|
|
* Author: Dhanuka Warusadura
|
|
*/
|
|
|
|
#include "egg-tpm2.h"
|
|
|
|
void
|
|
test_egg_tpm2_generate_master_password(void)
|
|
{
|
|
EggTpm2Context *context;
|
|
GBytes *result;
|
|
|
|
GError *error = NULL;
|
|
g_assert_no_error(error);
|
|
context = egg_tpm2_initialize(&error);
|
|
g_assert_nonnull(context);
|
|
result = egg_tpm2_generate_master_password(context, &error);
|
|
g_assert_nonnull(result);
|
|
egg_tpm2_finalize(context);
|
|
g_bytes_unref(result);
|
|
}
|
|
|
|
void
|
|
test_egg_tpm2_decrypt_master_password(void)
|
|
{
|
|
EggTpm2Context *context;
|
|
GBytes *result, *decrypted1, *decrypted2;
|
|
|
|
GError *error = NULL;
|
|
g_assert_no_error(error);
|
|
context = egg_tpm2_initialize(&error);
|
|
g_assert_nonnull(context);
|
|
result = egg_tpm2_generate_master_password(context, &error);
|
|
g_assert_nonnull(result);
|
|
decrypted1 = egg_tpm2_decrypt_master_password(context, result,
|
|
&error);
|
|
g_assert_nonnull(decrypted1);
|
|
decrypted2 = egg_tpm2_decrypt_master_password(context, result,
|
|
&error);
|
|
g_assert_nonnull(decrypted2);
|
|
g_assert(g_bytes_equal(decrypted1, decrypted2));
|
|
egg_tpm2_finalize(context);
|
|
g_bytes_unref(result);
|
|
g_bytes_unref(decrypted1);
|
|
g_bytes_unref(decrypted2);
|
|
}
|
|
|
|
int
|
|
main (int argc, char *argv[])
|
|
{
|
|
g_test_init(&argc, &argv, NULL);
|
|
g_test_add_func(
|
|
"/tpm/test_egg_tpm2_generate_master_password",
|
|
test_egg_tpm2_generate_master_password);
|
|
g_test_add_func(
|
|
"/tpm/test_egg_tpm2_decrypt_master_password",
|
|
test_egg_tpm2_decrypt_master_password);
|
|
|
|
return g_test_run();
|
|
}
|