#!/bin/bash
#

#################################################################################
#										#
#			TPM2 regression test					#
#			     Written by Ken Goldman				#
#		       IBM Thomas J. Watson Research Center			#
#										#
# (c) Copyright IBM Corporation 2014 - 2020					#
# 										#
# All rights reserved.								#
# 										#
# Redistribution and use in source and binary forms, with or without		#
# modification, are permitted provided that the following conditions are	#
# met:										#
# 										#
# Redistributions of source code must retain the above copyright notice,	#
# this list of conditions and the following disclaimer.				#
# 										#
# Redistributions in binary form must reproduce the above copyright		#
# notice, this list of conditions and the following disclaimer in the		#
# documentation and/or other materials provided with the distribution.		#
# 										#
# Neither the names of the IBM Corporation nor the names of its			#
# contributors may be used to endorse or promote products derived from		#
# this software without specific prior written permission.			#
# 										#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS		#
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT		#
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR		#
# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT		#
# HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,	#
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT		#
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,		#
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY		#
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT		#
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE		#
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.		#
#										#
#################################################################################

# handles are
# 80000000 platform hierarchy primary storage key
#    password pps
# storage key under primary
#    password sto
#    storepriv.bin
# signing key under primary
#    password sig
#    signpriv.bin
# RSA encryption key under primary
#    password dec
#    decpriv.bin

# at test entry and exit, there is a platform primary key at 80000000 and
# storage and signing keys under them, ready to load.
# The exception is the last test case, which rolls the seeds.

# This is a namespace prefix 
# For the basic tarball, PREFIX is set to ./   (the current directory)

PREFIX=./

# The distro releases prefix all the TPM 2.0 utility names with tss,
# so PREFIX is set to tss

# PREFIX=tss

#PREFIX="valgrind ./"

# hash algorithms to be used for testing

export ITERATE_ALGS="sha1 sha256 sha384 sha512"
export BAD_ITERATE_ALGS="sha256 sha384 sha512 sha1"

printUsage ()
{
    echo ""
    echo ""
    echo "-h help"
    echo "-a all tests"
    echo "-1 random number generator"
    echo "-2 PCR"
    echo "-3 primary keys"
    echo "-4 createloaded - rev 146"
    echo "-5 HMAC session - no bind or salt"
    echo "-6 HMAC session - bind"
    echo "-7 HMAC session - salt"
    echo "-8 Hierarchy"
    echo "-9 Storage"
    echo "-10 Object Change Auth"
    echo "-11 Encrypt and decrypt sessions"
    echo "-12 Sign"
    echo "-13 NV"
    echo "-14 NV PIN Index - rev 138"
    echo "-15 Evict control"
    echo "-16 RSA encrypt decrypt"
    echo "-17 AES encrypt decrypt"
    echo "-18 AES encrypt decrypt - rev 138"
    echo "-19 HMAC and Hash"
    echo "-20 Attestation"
    echo "-21 Policy"
    echo "-22 Policy - rev 138"
    echo "-23 Context"
    echo "-24 Clocks and Timers"
    echo "-25 DA logic"
    echo "-26 Unseal"
    echo "-27 Duplication"
    echo "-28 ECC"
    echo "-29 Credential"
    echo "-30 Attestation - rev 155" 
    echo "-31 X509 - rev 155" 
    echo "-32 Get Capability"
    echo "-35 Shutdown (only run for simulator)"
    echo "-40 Tests under development (not part of all)"
    echo ""
    echo "-50 Change seed"
}

checkSuccess()
{
if [ $1 -ne 0 ]; then
    echo " ERROR:"
    cat run.out
    exit 255
else
    echo " INFO:"
fi

}

# FIXME should not increment past 254

checkWarning()
{
if [ $1 -ne 0 ]; then
    echo " WARN: $2"
    ((WARN++))
else
    echo " INFO:"
fi
}

checkFailure()
{
if [ $1 -eq 0 ]; then
    echo " ERROR:"
    cat run.out
    exit 255
else
    echo " INFO:"
fi
}

cleanup()
{
# stdout
    rm -f run.out
# general purpose keys
    rm -f derrsa2048priv.bin
    rm -f derrsa2048pub.bin
    rm -f derrsa3072priv.bin
    rm -f derrsa3072pub.bin
    rm -f despriv.bin
    rm -f despub.bin
    rm -f khprivsha1.bin
    rm -f khprivsha256.bin
    rm -f khprivsha384.bin
    rm -f khprivsha512.bin
    rm -f khpubsha1.bin
    rm -f khpubsha256.bin
    rm -f khpubsha384.bin
    rm -f khpubsha512.bin
    rm -f khrprivsha1.bin
    rm -f khrprivsha256.bin
    rm -f khrprivsha384.bin
    rm -f khrprivsha512.bin
    rm -f khrpubsha1.bin
    rm -f khrpubsha256.bin
    rm -f khrpubsha384.bin
    rm -f khrpubsha512.bin
    rm -f prich.bin
    rm -f pritk.bin
    rm -f signeccnfpriv.bin
    rm -f signeccnfpub.bin
    rm -f signeccnfpub.pem
    rm -f signeccpriv.bin
    rm -f signeccpub.bin
    rm -f signeccpub.pem
    rm -f signeccrpriv.bin
    rm -f signeccrpub.bin
    rm -f signeccrpub.pem
    rm -f signrsa2048nfpriv.bin
    rm -f signrsa2048nfpub.bin
    rm -f signrsa2048nfpub.pem
    rm -f signrsa2048priv.bin
    rm -f signrsa2048pub.bin
    rm -f signrsa2048pub.pem
    rm -f signrsa3072priv.bin
    rm -f signrsa3072pub.bin
    rm -f signrsa3072pub.pem
    rm -f signrsa2048rpriv.bin
    rm -f signrsa2048rpub.bin
    rm -f signrsa2048rpub.pem
    rm -f stoch.bin
    rm -f storeeccpriv.bin
    rm -f storeeccpub.bin
    rm -f storsach.bin
    rm -f storsatk.bin
    rm -f stotk.bin
    rm -r storersa2048priv.bin
    rm -r storersa2048pub.bin

# misc
    rm -f dec.bin
    rm -f enc.bin
    rm -f msg.bin
    rm -f noncetpm.bin
    rm -f policyapproved.bin
    rm -f pssig.bin
    rm -f sig.bin
    rm -f tkt.bin
    rm -f tmp.bin
    rm -f tmp1.bin
    rm -f tmp2.bin
    rm -f tmpsha1.bin
    rm -f tmpsha256.bin
    rm -f tmpsha384.bin
    rm -f tmpsha512.bin
    rm -f tmppriv.bin
    rm -f tmppub.bin
    rm -f tmpspriv.bin
    rm -f tmpspub.bin
    rm -f to.bin
    rm -f zero.bin
}

initprimary()
{
    echo "Create a platform primary RSA storage key"
    ${PREFIX}createprimary -hi p -pwdk sto -pol policies/zerosha256.bin -tk pritk.bin -ch prich.bin > run.out
    checkSuccess $?
}


export -f checkSuccess
export -f checkWarning
export -f checkFailure
export WARN
export PREFIX
export -f initprimary
# hack because the mbedtls port is incomplete
export CRYPTOLIBRARY=`${PREFIX}getcryptolibrary`

# example for running scripts with encrypted sessions, see TPM_SESSION_ENCKEY=getrandom below
export TPM_SESSION_ENCKEY

main ()
{
    RC=0
    I=0
    ((WARN=0))

    if [ "$1" == "-h" ]; then
	printUsage
	echo ""
	echo "crypto library is ${CRYPTOLIBRARY}"
	echo ""
	exit 0
    else
	# the MS simulator needs power up and startup
	if [ -z ${TPM_INTERFACE_TYPE} ] || [ ${TPM_INTERFACE_TYPE} == "socsim" ];  then
	    if [ -z ${TPM_SERVER_TYPE} ] || [ ${TPM_SERVER_TYPE} == "mssim" ]; then
		./regtests/inittpm.sh
	    fi
	fi
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	# example for running scripts with encrypted sessions, see TPM_ENCRYPT_SESSIONS above
	# getrandom must wait until after inittpm.sh (powerup and startup)
	TPM_SESSION_ENCKEY=`${PREFIX}getrandom -by 16 -ns`
	./regtests/initkeys.sh
	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((WARN=$RC))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-1" ]; then
    	./regtests/testrng.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-2" ]; then
    	./regtests/testpcr.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-3" ]; then
    	./regtests/testprimary.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-4" ]; then
    	./regtests/testcreateloaded.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
    	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-5" ]; then
    	./regtests/testhmacsession.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-6" ]; then
    	./regtests/testbind.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-7" ]; then
    	./regtests/testsalt.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-8" ]; then
    	./regtests/testhierarchy.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-9" ]; then
    	./regtests/teststorage.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-10" ]; then
    	./regtests/testchangeauth.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-11" ]; then
    	./regtests/testencsession.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-12" ]; then
    	./regtests/testsign.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-13" ]; then
    	./regtests/testnv.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-14" ]; then
    	./regtests/testnvpin.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-15" ]; then
    	./regtests/testevict.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-16" ]; then
    	./regtests/testrsa.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-17" ]; then
    	./regtests/testaes.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-18" ]; then
    	./regtests/testaes138.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-19" ]; then
    	./regtests/testhmac.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-20" ]; then
    	./regtests/testattest.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
	((WARN=$RC))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-21" ]; then
    	./regtests/testpolicy.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-22" ]; then
    	./regtests/testpolicy138.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-23" ]; then
    	./regtests/testcontext.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-24" ]; then
    	./regtests/testclocks.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-25" ]; then
    	./regtests/testda.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-26" ]; then
    	./regtests/testunseal.sh
    	RC=$?
    	if [ $RC -ne 0 ]; then
    	    exit 255
    	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-27" ]; then
    	./regtests/testdup.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-28" ]; then
    	./regtests/testecc.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-29" ]; then
    	./regtests/testcredential.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-30" ]; then
    	./regtests/testattest155.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-31" ]; then
    	./regtests/testx509.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-32" ]; then
    	./regtests/testgetcap.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-a" ] || [ "$1" == "-35" ]; then
	# the MS simulator supports power cycling
	if [ -z ${TPM_INTERFACE_TYPE} ] || [ ${TPM_INTERFACE_TYPE} == "socsim" ];  then
	    if [ -z ${TPM_SERVER_TYPE} ] || [ ${TPM_SERVER_TYPE} == "mssim" ]; then
		./regtests/testshutdown.sh
	    fi
	fi
   	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ "$1" == "-40" ]; then
     	./regtests/testdevel.sh
     	RC=$?
     	if [ $RC -ne 0 ]; then
     	    exit 255
     	fi
     	((I++))
     	((WARN=$RC))
    fi
# this must be the last test
    if [ "$1" == "-a" ] || [ "$1" == "-50" ]; then
    	./regtests/testchangeseed.sh
    	RC=$?
	if [ $RC -ne 0 ]; then
	    exit 255
	fi
	((I++))
    fi
    if [ $RC -ne 0 ]; then
	echo ""
	echo "Failed"
	echo ""
	exit 255
    else
	# -0 is a debug mode that initializes and does not clean up
	if [ "$1" != "-0" ]; then
	    ${PREFIX}flushcontext -ha 80000000
	    cleanup
	fi

	echo ""
	echo "Success - ${I} Tests ${WARN} Warnings"
	echo ""
    fi
}


main "$@"