/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ /* This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ // This is a testing PKCS #11 module that simulates a token being inserted and // removed from a slot every 50ms. This is achieved mainly in // Test_C_WaitForSlotEvent. If the application that loaded this module calls // C_WaitForSlotEvent, this module waits for 50ms and returns, having changed // its internal state to report that the token has either been inserted or // removed, as appropriate. // This module also provides an alternate token that is always present for tests // that don't want the cyclic behavior described above. #include #include #ifdef _WIN32 # include // for Sleep #else # include // for usleep #endif #include "pkcs11t.h" #undef CK_DECLARE_FUNCTION #ifdef _WIN32 #define CK_DECLARE_FUNCTION(rtype, func) extern rtype __declspec(dllexport) func #else #define CK_DECLARE_FUNCTION(rtype, func) extern rtype func #endif #include "pkcs11.h" #if __cplusplus < 201103L # include # define static_assert(condition, message) PR_STATIC_ASSERT(condition) #endif // Auth state for slot 5 (an auth-required slot used by pk11_auth_unittest). // Reset in Test_C_Initialize so each module load starts fresh. // authSessionOpenCount is a refcount because all C_OpenSession calls on slot 5 // return the same handle (5), so NSS's multiple speculative opens collapse to // one in our mock. Track them via counter to know when the session is truly // closed. // // NOTE: this global state is not synchronized, so the auth slot only behaves // correctly under single-threaded access. The pk11_auth_unittest tests are // single-threaded; if the auth slot is ever exercised from a multi-threaded // test (including when this module is loaded as thread-safe), this state would // need a lock. static const size_t kMaxAuthPinLen = 32; // Object handle of a CKA_ALWAYS_AUTHENTICATE private key on the auth slot, used // by pk11_auth_unittest to drive the sign/decrypt re-login paths. Must match // kAlwaysAuthPrivKeyHandle in pk11_auth_unittest.cc. static const CK_OBJECT_HANDLE kAlwaysAuthPrivKeyHandle = 6; static char authSoPin[kMaxAuthPinLen + 1]; static size_t authSoPinLen; static char authUserPin[kMaxAuthPinLen + 1]; static size_t authUserPinLen; static bool authUserPinInitialized; static CK_STATE authSessionState; static int authSessionOpenCount; static void ResetAuthState() { memcpy(authSoPin, "0000", 5); authSoPinLen = 4; authUserPin[0] = '\0'; authUserPinLen = 0; authUserPinInitialized = false; authSessionState = CKS_RW_PUBLIC_SESSION; authSessionOpenCount = 0; } CK_RV Test_C_Initialize(CK_VOID_PTR) { ResetAuthState(); return CKR_OK; } CK_RV Test_C_Finalize(CK_VOID_PTR) { return CKR_OK; } static const CK_VERSION CryptokiVersion = {2, 2}; static const CK_VERSION TestLibraryVersion = {0, 0}; static const char TestLibraryDescription[] = "Test PKCS11 Library"; static const char TestManufacturerID[] = "Test PKCS11 Manufacturer ID"; /* The dest buffer is one in the CK_INFO or CK_TOKEN_INFO structs. * Those buffers are padded with spaces. DestSize corresponds to the declared * size for those buffers (e.g. 32 for `char foo[32]`). * The src buffer is a string literal. SrcSize includes the string * termination character (e.g. 4 for `const char foo[] = "foo"` */ template void CopyString(unsigned char (&dest)[DestSize], const char (&src)[SrcSize]) { static_assert(DestSize >= SrcSize - 1, "DestSize >= SrcSize - 1"); memcpy(dest, src, SrcSize - 1); memset(dest + SrcSize - 1, ' ', DestSize - SrcSize + 1); } CK_RV Test_C_GetInfo(CK_INFO_PTR pInfo) { if (!pInfo) { return CKR_ARGUMENTS_BAD; } pInfo->cryptokiVersion = CryptokiVersion; CopyString(pInfo->manufacturerID, TestManufacturerID); pInfo->flags = 0; // must be 0 CopyString(pInfo->libraryDescription, TestLibraryDescription); pInfo->libraryVersion = TestLibraryVersion; return CKR_OK; } CK_RV Test_C_GetFunctionList(CK_FUNCTION_LIST_PTR_PTR) { return CKR_OK; } static int tokenPresent = 0; // The token in slot 4 has 4 objects: // 1. CKO_PROFILE with CKP_PUBLIC_CERTIFICATES_TOKEN // 2. CKO_PROFILE with CKP_BASELINE_PROVIDER // 3. CKO_CERTIFICATE with CKA_ID "\x00..\x0f" // 4. CKO_CERTIFICATE with CKA_ID "\x10..\x1f" static bool readingProfile = false; static const CK_PROFILE_ID profiles[] = {CKP_PUBLIC_CERTIFICATES_TOKEN, CKP_BASELINE_PROVIDER}; static int profileIndex = 0; static bool readingCert = false; static const unsigned char certId1[] = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f }; static const char *certLabel1 = "cert1"; static const unsigned char certId2[] = { 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f }; static const char *certLabel2 = "cert2"; static const unsigned char certValue[] = { 0x30, 0x82, 0x01, 0x54, 0x30, 0x81, 0xfc, 0xa0, 0x03, 0x02, 0x01, 0x02, 0x02, 0x02, 0x0e, 0x42, 0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02, 0x30, 0x15, 0x31, 0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x0a, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x20, 0x43, 0x41, 0x30, 0x1e, 0x17, 0x0d, 0x32, 0x30, 0x31, 0x32, 0x31, 0x39, 0x30, 0x39, 0x30, 0x32, 0x34, 0x39, 0x5a, 0x17, 0x0d, 0x32, 0x31, 0x30, 0x33, 0x31, 0x39, 0x30, 0x39, 0x30, 0x32, 0x34, 0x39, 0x5a, 0x30, 0x15, 0x31, 0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x0a, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x20, 0x43, 0x41, 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 0x42, 0x00, 0x04, 0x24, 0xd1, 0x96, 0xcc, 0x72, 0x36, 0xbb, 0xd6, 0x04, 0x36, 0x14, 0x59, 0x9a, 0x27, 0x24, 0x6b, 0x03, 0x7c, 0x02, 0x69, 0x68, 0x50, 0x70, 0x52, 0xe5, 0x5f, 0xe1, 0xf1, 0xd4, 0x0a, 0x00, 0x18, 0x76, 0x14, 0xa3, 0xed, 0x7d, 0xc5, 0x0a, 0xfe, 0xe4, 0x6f, 0x09, 0xf8, 0xcd, 0xe8, 0x5a, 0x39, 0x81, 0xf4, 0xcc, 0x25, 0xbe, 0x26, 0x76, 0xe1, 0x23, 0x52, 0x09, 0x6f, 0xbd, 0xf1, 0x75, 0xbe, 0xa3, 0x3c, 0x30, 0x3a, 0x30, 0x14, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x01, 0x01, 0x01, 0x01, 0xff, 0x04, 0x04, 0x03, 0x02, 0x02, 0x04, 0x30, 0x12, 0x06, 0x03, 0x55, 0x1d, 0x13, 0x01, 0x01, 0xff, 0x04, 0x08, 0x30, 0x06, 0x01, 0x01, 0xff, 0x02, 0x01, 0x00, 0x30, 0x0e, 0x06, 0x03, 0x55, 0x1d, 0x0f, 0x01, 0x01, 0xff, 0x04, 0x04, 0x03, 0x02, 0x07, 0x80, 0x30, 0x0a, 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02, 0x03, 0x47, 0x00, 0x30, 0x44, 0x02, 0x20, 0x76, 0x56, 0x09, 0xe9, 0x79, 0xc2, 0x62, 0x28, 0xfc, 0x48, 0xf8, 0xac, 0x73, 0xbb, 0xe1, 0xe5, 0x79, 0x93, 0x78, 0x05, 0x4b, 0x45, 0x08, 0xcf, 0x10, 0x9f, 0x0d, 0xb9, 0x50, 0x7d, 0x70, 0x24, 0x02, 0x20, 0x27, 0x52, 0xe7, 0x9e, 0x42, 0xe3, 0xb2, 0x4d, 0xbb, 0x7d, 0xa3, 0x81, 0x5f, 0x7f, 0x0f, 0x3a, 0x55, 0x34, 0xfa, 0x86, 0x35, 0xcb, 0x68, 0x4f, 0xad, 0x67, 0x67, 0x05, 0x36, 0xcb, 0x11, 0x4d }; static const unsigned char certSerial[] = { 0x02, 0x02, 0x0e, 0x42 }; static const unsigned char certIssuer[] = { 0x30, 0x15, 0x31, 0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x0a, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x20, 0x43, 0x41 }; static const struct cert { const unsigned char *id; size_t idLen; const char *label; } certs[] = { { certId1, sizeof(certId1), certLabel1 }, { certId2, sizeof(certId2), certLabel2 } }; static int certIndex = 0; static CK_OBJECT_HANDLE certHandle = CK_INVALID_HANDLE; static bool certIdGiven = false; CK_RV Test_C_GetSlotList(CK_BBOOL limitToTokensPresent, CK_SLOT_ID_PTR pSlotList, CK_ULONG_PTR pulCount) { if (!pulCount) { return CKR_ARGUMENTS_BAD; } CK_SLOT_ID slots[5]; CK_ULONG slotCount = 0; // We always return slots 2, 4, and 5. slots[slotCount++] = 2; slots[slotCount++] = 4; slots[slotCount++] = 5; // Slot 1 is a removable slot where a token is present if // tokenPresent = CK_TRUE. if (tokenPresent || !limitToTokensPresent) { slots[slotCount++] = 1; } // Slot 3 is a removable slot which never has a token. if (!limitToTokensPresent) { slots[slotCount++] = 3; } if (pSlotList) { if (*pulCount < slotCount) { return CKR_BUFFER_TOO_SMALL; } memcpy(pSlotList, slots, sizeof(CK_SLOT_ID) * slotCount); } *pulCount = slotCount; return CKR_OK; } static const char TestSlotDescription[] = "Test PKCS11 Slot"; static const char TestSlot2Description[] = "Test PKCS11 Slot 二"; static const char TestSlot3Description[] = "Empty PKCS11 Slot"; static const char TestSlot4Description[] = "Test PKCS11 Public Certs Slot"; static const char TestSlot5Description[] = "Test PKCS11 Auth Slot"; CK_RV Test_C_GetSlotInfo(CK_SLOT_ID slotID, CK_SLOT_INFO_PTR pInfo) { if (!pInfo) { return CKR_ARGUMENTS_BAD; } switch (slotID) { case 1: CopyString(pInfo->slotDescription, TestSlotDescription); pInfo->flags = (tokenPresent ? CKF_TOKEN_PRESENT : 0) | CKF_REMOVABLE_DEVICE; break; case 2: CopyString(pInfo->slotDescription, TestSlot2Description); pInfo->flags = CKF_TOKEN_PRESENT | CKF_REMOVABLE_DEVICE; break; case 3: CopyString(pInfo->slotDescription, TestSlot3Description); pInfo->flags = CKF_REMOVABLE_DEVICE; break; case 4: CopyString(pInfo->slotDescription, TestSlot4Description); pInfo->flags = CKF_TOKEN_PRESENT | CKF_REMOVABLE_DEVICE; break; case 5: CopyString(pInfo->slotDescription, TestSlot5Description); pInfo->flags = CKF_TOKEN_PRESENT | CKF_REMOVABLE_DEVICE; break; default: return CKR_ARGUMENTS_BAD; } CopyString(pInfo->manufacturerID, TestManufacturerID); pInfo->hardwareVersion = TestLibraryVersion; pInfo->firmwareVersion = TestLibraryVersion; return CKR_OK; } // Deliberately include énye to ensure we're handling encoding correctly. // The PKCS #11 base specification v2.20 specifies that strings be encoded // as UTF-8. static const char TestTokenLabel[] = "Test PKCS11 Tokeñ Label"; static const char TestToken2Label[] = "Test PKCS11 Tokeñ 2 Label"; static const char TestToken4Label[] = "Test PKCS11 Public Certs Token"; static const char TestToken5Label[] = "Test PKCS11 Auth Token"; static const char TestTokenModel[] = "Test Model"; CK_RV Test_C_GetTokenInfo(CK_SLOT_ID slotID, CK_TOKEN_INFO_PTR pInfo) { if (!pInfo) { return CKR_ARGUMENTS_BAD; } switch (slotID) { case 1: CopyString(pInfo->label, TestTokenLabel); pInfo->flags = CKF_TOKEN_INITIALIZED; break; case 2: CopyString(pInfo->label, TestToken2Label); pInfo->flags = CKF_TOKEN_INITIALIZED; break; case 4: CopyString(pInfo->label, TestToken4Label); pInfo->flags = CKF_TOKEN_INITIALIZED; break; case 5: CopyString(pInfo->label, TestToken5Label); pInfo->flags = CKF_TOKEN_INITIALIZED | CKF_LOGIN_REQUIRED | (authUserPinInitialized ? CKF_USER_PIN_INITIALIZED : 0); break; default: return CKR_ARGUMENTS_BAD; } CopyString(pInfo->manufacturerID, TestManufacturerID); CopyString(pInfo->model, TestTokenModel); memset(pInfo->serialNumber, 0, sizeof(pInfo->serialNumber)); pInfo->ulMaxSessionCount = 1; pInfo->ulSessionCount = 0; pInfo->ulMaxRwSessionCount = 1; pInfo->ulRwSessionCount = 0; pInfo->ulMaxPinLen = kMaxAuthPinLen; pInfo->ulMinPinLen = 1; pInfo->ulTotalPublicMemory = 1024; pInfo->ulFreePublicMemory = 1024; pInfo->ulTotalPrivateMemory = 1024; pInfo->ulFreePrivateMemory = 1024; pInfo->hardwareVersion = TestLibraryVersion; pInfo->firmwareVersion = TestLibraryVersion; memset(pInfo->utcTime, 0, sizeof(pInfo->utcTime)); return CKR_OK; } CK_RV Test_C_GetMechanismList(CK_SLOT_ID, CK_MECHANISM_TYPE_PTR, CK_ULONG_PTR pulCount) { if (!pulCount) { return CKR_ARGUMENTS_BAD; } *pulCount = 0; return CKR_OK; } CK_RV Test_C_GetMechanismInfo(CK_SLOT_ID, CK_MECHANISM_TYPE, CK_MECHANISM_INFO_PTR) { return CKR_OK; } CK_RV Test_C_InitToken(CK_SLOT_ID, CK_UTF8CHAR_PTR, CK_ULONG, CK_UTF8CHAR_PTR) { return CKR_OK; } CK_RV Test_C_InitPIN(CK_SESSION_HANDLE hSession, CK_UTF8CHAR_PTR pPin, CK_ULONG ulPinLen) { if (hSession != 5) { return CKR_FUNCTION_NOT_SUPPORTED; } if (authSessionState != CKS_RW_SO_FUNCTIONS) { return CKR_USER_NOT_LOGGED_IN; } if (ulPinLen > kMaxAuthPinLen) { return CKR_PIN_LEN_RANGE; } memcpy(authUserPin, pPin, ulPinLen); authUserPin[ulPinLen] = '\0'; authUserPinLen = ulPinLen; authUserPinInitialized = true; return CKR_OK; } CK_RV Test_C_SetPIN(CK_SESSION_HANDLE hSession, CK_UTF8CHAR_PTR pOldPin, CK_ULONG ulOldLen, CK_UTF8CHAR_PTR pNewPin, CK_ULONG ulNewLen) { if (hSession != 5) { return CKR_FUNCTION_NOT_SUPPORTED; } if (ulNewLen > kMaxAuthPinLen) { return CKR_PIN_LEN_RANGE; } // If logged in as SO, change the SO pin; otherwise change the user pin. bool changeSo = (authSessionState == CKS_RW_SO_FUNCTIONS); char *targetPin = changeSo ? authSoPin : authUserPin; size_t *targetLen = changeSo ? &authSoPinLen : &authUserPinLen; if (!changeSo && !authUserPinInitialized) { return CKR_USER_PIN_NOT_INITIALIZED; } if (ulOldLen != *targetLen || memcmp(pOldPin, targetPin, ulOldLen) != 0) { return CKR_PIN_INCORRECT; } memcpy(targetPin, pNewPin, ulNewLen); targetPin[ulNewLen] = '\0'; *targetLen = ulNewLen; if (!changeSo) { authUserPinInitialized = true; } return CKR_OK; } CK_RV Test_C_OpenSession(CK_SLOT_ID slotID, CK_FLAGS, CK_VOID_PTR, CK_NOTIFY, CK_SESSION_HANDLE_PTR phSession) { switch (slotID) { case 1: *phSession = 1; break; case 2: *phSession = 2; break; case 4: *phSession = 4; break; case 5: *phSession = 5; if (authSessionOpenCount == 0) { authSessionState = CKS_RW_PUBLIC_SESSION; } authSessionOpenCount++; break; default: return CKR_ARGUMENTS_BAD; } return CKR_OK; } CK_RV Test_C_CloseSession(CK_SESSION_HANDLE hSession) { if (hSession == 5) { if (authSessionOpenCount > 0) { authSessionOpenCount--; } if (authSessionOpenCount == 0) { authSessionState = CKS_RW_PUBLIC_SESSION; } } return CKR_OK; } CK_RV Test_C_CloseAllSessions(CK_SLOT_ID) { return CKR_OK; } CK_RV Test_C_GetSessionInfo(CK_SESSION_HANDLE hSession, CK_SESSION_INFO_PTR pInfo) { if (!pInfo) { return CKR_ARGUMENTS_BAD; } switch (hSession) { case 1: pInfo->slotID = 1; pInfo->state = CKS_RO_PUBLIC_SESSION; pInfo->flags = CKF_SERIAL_SESSION; break; case 2: pInfo->slotID = 2; pInfo->state = CKS_RO_PUBLIC_SESSION; pInfo->flags = CKF_SERIAL_SESSION; break; case 4: pInfo->slotID = 4; pInfo->state = CKS_RO_PUBLIC_SESSION; pInfo->flags = CKF_SERIAL_SESSION; break; case 5: if (authSessionOpenCount == 0) { return CKR_SESSION_HANDLE_INVALID; } pInfo->slotID = 5; pInfo->state = authSessionState; pInfo->flags = CKF_SERIAL_SESSION | CKF_RW_SESSION; break; default: return CKR_ARGUMENTS_BAD; } return CKR_OK; } CK_RV Test_C_GetOperationState(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SetOperationState(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_OBJECT_HANDLE, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_Login(CK_SESSION_HANDLE hSession, CK_USER_TYPE userType, CK_UTF8CHAR_PTR pPin, CK_ULONG ulPinLen) { if (hSession != 5) { return CKR_FUNCTION_NOT_SUPPORTED; } // CKU_USER logs the session in; CKU_CONTEXT_SPECIFIC re-authenticates an // already-logged-in session for a CKA_ALWAYS_AUTHENTICATE operation. Both // verify the user PIN; they differ only in the required starting state. if (userType == CKU_USER || userType == CKU_CONTEXT_SPECIFIC) { if (userType == CKU_CONTEXT_SPECIFIC) { if (authSessionState != CKS_RW_USER_FUNCTIONS) { return CKR_USER_NOT_LOGGED_IN; } } else if (authSessionState != CKS_RW_PUBLIC_SESSION) { return CKR_USER_ALREADY_LOGGED_IN; } if (!authUserPinInitialized) { return CKR_USER_PIN_NOT_INITIALIZED; } if (ulPinLen != authUserPinLen || memcmp(pPin, authUserPin, ulPinLen) != 0) { return CKR_PIN_INCORRECT; } authSessionState = CKS_RW_USER_FUNCTIONS; return CKR_OK; } if (userType == CKU_SO) { if (authSessionState != CKS_RW_PUBLIC_SESSION) { return CKR_USER_ALREADY_LOGGED_IN; } if (ulPinLen != authSoPinLen || memcmp(pPin, authSoPin, ulPinLen) != 0) { return CKR_PIN_INCORRECT; } authSessionState = CKS_RW_SO_FUNCTIONS; return CKR_OK; } return CKR_USER_TYPE_INVALID; } CK_RV Test_C_Logout(CK_SESSION_HANDLE hSession) { if (hSession != 5) { return CKR_FUNCTION_NOT_SUPPORTED; } // Lenient: NSS calls C_Logout speculatively in several paths and ignores // the result, so always reset state instead of returning NOT_LOGGED_IN. authSessionState = CKS_RW_PUBLIC_SESSION; return CKR_OK; } CK_RV Test_C_CreateObject(CK_SESSION_HANDLE, CK_ATTRIBUTE_PTR, CK_ULONG, CK_OBJECT_HANDLE_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_CopyObject(CK_SESSION_HANDLE, CK_OBJECT_HANDLE, CK_ATTRIBUTE_PTR, CK_ULONG, CK_OBJECT_HANDLE_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DestroyObject(CK_SESSION_HANDLE, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_GetObjectSize(CK_SESSION_HANDLE, CK_OBJECT_HANDLE, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_GetAttributeValue(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE hObject, CK_ATTRIBUTE_PTR pTemplate, CK_ULONG ulCount) { if (hSession == 4) { switch (hObject) { case 1: case 2: for (CK_ULONG count = 0; count < ulCount; count++) { if (pTemplate[count].type == CKA_PROFILE_ID) { if (pTemplate[count].pValue) { assert(pTemplate[count].ulValueLen == sizeof(CK_ULONG)); CK_ULONG value = profiles[hObject - 1]; memcpy(pTemplate[count].pValue, &value, sizeof(value)); } else { pTemplate[count].ulValueLen = sizeof(CK_ULONG); } } else { pTemplate[count].ulValueLen = (CK_ULONG)-1; } } return CKR_OK; case 3: case 4: for (CK_ULONG count = 0; count < ulCount; count++) { switch (pTemplate[count].type) { case CKA_TOKEN: if (pTemplate[count].pValue) { assert(pTemplate[count].ulValueLen == sizeof(CK_BBOOL)); CK_BBOOL value = true; memcpy(pTemplate[count].pValue, &value, sizeof(value)); } else { pTemplate[count].ulValueLen = sizeof(CK_BBOOL); } break; case CKA_LABEL: { const char *label = certs[hObject - 3].label; size_t labelLen = strlen(label); if (pTemplate[count].pValue) { if (pTemplate[count].ulValueLen >= labelLen) { memcpy(pTemplate[count].pValue, label, labelLen); } else { pTemplate[count].ulValueLen = CK_UNAVAILABLE_INFORMATION; } } else { pTemplate[count].ulValueLen = labelLen; } break; } #define BYTEARRAY_CASE(label, array) \ case label: \ if (pTemplate[count].pValue) { \ if (pTemplate[count].ulValueLen >= sizeof(array)) { \ memcpy(pTemplate[count].pValue, array, sizeof(array)); \ } else { \ pTemplate[count].ulValueLen = CK_UNAVAILABLE_INFORMATION; \ } \ } else { \ pTemplate[count].ulValueLen = sizeof(array); \ } \ break; BYTEARRAY_CASE(CKA_VALUE, certValue) BYTEARRAY_CASE(CKA_SERIAL_NUMBER, certSerial) BYTEARRAY_CASE(CKA_ISSUER, certIssuer) case CKA_ID: { const unsigned char *idData = certs[hObject - 3].id; CK_ULONG idLen = certs[hObject - 3].idLen; if (pTemplate[count].pValue) { if (pTemplate[count].ulValueLen >= idLen) { memcpy(pTemplate[count].pValue, idData, idLen); } else { pTemplate[count].ulValueLen = CK_UNAVAILABLE_INFORMATION; } } else { pTemplate[count].ulValueLen = idLen; } break; } default: pTemplate[count].ulValueLen = CK_UNAVAILABLE_INFORMATION; break; } } return CKR_OK; default: break; } } // Auth slot: a private key that always requires per-operation // re-authentication (CKA_ALWAYS_AUTHENTICATE). CKA_PRIVATE is reported false // to keep the test focused on the CKU_CONTEXT_SPECIFIC re-login path. if (hSession == 5 && hObject == kAlwaysAuthPrivKeyHandle) { for (CK_ULONG count = 0; count < ulCount; count++) { CK_BBOOL value; switch (pTemplate[count].type) { case CKA_ALWAYS_AUTHENTICATE: value = CK_TRUE; break; case CKA_PRIVATE: value = CK_FALSE; break; default: pTemplate[count].ulValueLen = CK_UNAVAILABLE_INFORMATION; continue; } if (pTemplate[count].pValue) { if (pTemplate[count].ulValueLen >= sizeof(value)) { memcpy(pTemplate[count].pValue, &value, sizeof(value)); } else { pTemplate[count].ulValueLen = CK_UNAVAILABLE_INFORMATION; } } else { pTemplate[count].ulValueLen = sizeof(value); } } return CKR_OK; } return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SetAttributeValue(CK_SESSION_HANDLE, CK_OBJECT_HANDLE, CK_ATTRIBUTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_FindObjectsInit(CK_SESSION_HANDLE hSession, CK_ATTRIBUTE_PTR pTemplate, CK_ULONG ulCount) { // Slot 4 if (hSession == 4) { CK_OBJECT_CLASS objectClass = CKO_DATA; CK_BYTE *id = NULL; CK_ULONG idLen = 0; for (CK_ULONG count = 0; count < ulCount; count++) { CK_ATTRIBUTE attribute = pTemplate[count]; switch (attribute.type) { case CKA_CLASS: assert(attribute.ulValueLen == sizeof(CK_OBJECT_CLASS)); memcpy(&objectClass, attribute.pValue, attribute.ulValueLen); break; case CKA_ID: id = (CK_BYTE *)attribute.pValue; idLen = attribute.ulValueLen; break; default: break; } } switch (objectClass) { case CKO_PROFILE: readingProfile = true; profileIndex = 0; break; case CKO_CERTIFICATE: readingCert = true; certIndex = 0; if (id) { certIdGiven = true; for (size_t count = 0; count < sizeof(certs) / sizeof(certs[0]); count++) { if (certs[count].idLen == idLen && memcmp(certs[count].id, id, idLen) == 0) { certHandle = count + 3; break; } } } break; default: break; } } return CKR_OK; } CK_RV Test_C_FindObjects(CK_SESSION_HANDLE hSession, CK_OBJECT_HANDLE_PTR phObject, CK_ULONG ulMaxObjectCount, CK_ULONG_PTR pulObjectCount) { if (readingProfile) { assert(hSession == 4); CK_ULONG count = ulMaxObjectCount; size_t remaining = sizeof(profiles) / sizeof(profiles[0]) - profileIndex; if (count > remaining) { count = remaining; } for (CK_ULONG i = 0; i < count; i++) { phObject[i] = i + 1; } profileIndex += count; *pulObjectCount = count; } else if (readingCert) { assert(hSession == 4); if (!certIdGiven) { CK_ULONG count = ulMaxObjectCount; size_t remaining = sizeof(certs) / sizeof(certs[0]) - certIndex; if (count > remaining) { count = remaining; } for (CK_ULONG i = 0; i < count; i++) { phObject[i] = i + 3; } *pulObjectCount = count; certIndex += count; } else if (certHandle != CK_INVALID_HANDLE) { if (certIndex == 0 && ulMaxObjectCount > 0) { phObject[0] = certHandle; *pulObjectCount = 1; certIndex = 1; } else { *pulObjectCount = 0; } } else { *pulObjectCount = 0; } } else { *pulObjectCount = 0; } return CKR_OK; } CK_RV Test_C_FindObjectsFinal(CK_SESSION_HANDLE hSession) { readingProfile = false; readingCert = false; certHandle = CK_INVALID_HANDLE; certIdGiven = false; return CKR_OK; } CK_RV Test_C_EncryptInit(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_Encrypt(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_EncryptUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_EncryptFinal(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DecryptInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR, CK_OBJECT_HANDLE) { if (hSession == 5) { return CKR_OK; } return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_Decrypt(CK_SESSION_HANDLE hSession, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR pData, CK_ULONG_PTR pulDataLen) { if (hSession != 5) { return CKR_FUNCTION_NOT_SUPPORTED; } // No real crypto: return a fixed dummy plaintext. static const CK_BYTE kPlaintext[8] = {7, 6, 5, 4, 3, 2, 1, 0}; if (pData) { if (*pulDataLen < sizeof(kPlaintext)) { return CKR_BUFFER_TOO_SMALL; } memcpy(pData, kPlaintext, sizeof(kPlaintext)); } *pulDataLen = sizeof(kPlaintext); return CKR_OK; } CK_RV Test_C_DecryptUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DecryptFinal(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DigestInit(CK_SESSION_HANDLE, CK_MECHANISM_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_Digest(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DigestUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DigestKey(CK_SESSION_HANDLE, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DigestFinal(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SignInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR, CK_OBJECT_HANDLE) { if (hSession == 5) { return CKR_OK; } return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_Sign(CK_SESSION_HANDLE hSession, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR pSignature, CK_ULONG_PTR pulSignatureLen) { if (hSession != 5) { return CKR_FUNCTION_NOT_SUPPORTED; } // No real crypto: return a fixed dummy signature. static const CK_BYTE kSignature[8] = {0, 1, 2, 3, 4, 5, 6, 7}; if (pSignature) { if (*pulSignatureLen < sizeof(kSignature)) { return CKR_BUFFER_TOO_SMALL; } memcpy(pSignature, kSignature, sizeof(kSignature)); } *pulSignatureLen = sizeof(kSignature); return CKR_OK; } CK_RV Test_C_SignUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SignFinal(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SignRecoverInit(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SignRecover(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_VerifyInit(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_Verify(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_VerifyUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_VerifyFinal(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_VerifyRecoverInit(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_VerifyRecover(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DigestEncryptUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DecryptDigestUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SignEncryptUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DecryptVerifyUpdate(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_GenerateKey(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_ATTRIBUTE_PTR, CK_ULONG, CK_OBJECT_HANDLE_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_GenerateKeyPair(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_ATTRIBUTE_PTR, CK_ULONG, CK_ATTRIBUTE_PTR, CK_ULONG, CK_OBJECT_HANDLE_PTR, CK_OBJECT_HANDLE_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_WrapKey(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE, CK_OBJECT_HANDLE, CK_BYTE_PTR, CK_ULONG_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_UnwrapKey(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE, CK_BYTE_PTR, CK_ULONG, CK_ATTRIBUTE_PTR, CK_ULONG, CK_OBJECT_HANDLE_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_DeriveKey(CK_SESSION_HANDLE, CK_MECHANISM_PTR, CK_OBJECT_HANDLE, CK_ATTRIBUTE_PTR, CK_ULONG, CK_OBJECT_HANDLE_PTR) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_SeedRandom(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_GenerateRandom(CK_SESSION_HANDLE, CK_BYTE_PTR, CK_ULONG) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_GetFunctionStatus(CK_SESSION_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_CancelFunction(CK_SESSION_HANDLE) { return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV Test_C_WaitForSlotEvent(CK_FLAGS, CK_SLOT_ID_PTR pSlot, CK_VOID_PTR) { #ifdef _WIN32 Sleep(50); // Sleep takes the duration argument as milliseconds #else usleep(50000); // usleep takes the duration argument as microseconds #endif *pSlot = 1; tokenPresent = !tokenPresent; return CKR_OK; } static CK_FUNCTION_LIST FunctionList = {{2, 2}, Test_C_Initialize, Test_C_Finalize, Test_C_GetInfo, Test_C_GetFunctionList, Test_C_GetSlotList, Test_C_GetSlotInfo, Test_C_GetTokenInfo, Test_C_GetMechanismList, Test_C_GetMechanismInfo, Test_C_InitToken, Test_C_InitPIN, Test_C_SetPIN, Test_C_OpenSession, Test_C_CloseSession, Test_C_CloseAllSessions, Test_C_GetSessionInfo, Test_C_GetOperationState, Test_C_SetOperationState, Test_C_Login, Test_C_Logout, Test_C_CreateObject, Test_C_CopyObject, Test_C_DestroyObject, Test_C_GetObjectSize, Test_C_GetAttributeValue, Test_C_SetAttributeValue, Test_C_FindObjectsInit, Test_C_FindObjects, Test_C_FindObjectsFinal, Test_C_EncryptInit, Test_C_Encrypt, Test_C_EncryptUpdate, Test_C_EncryptFinal, Test_C_DecryptInit, Test_C_Decrypt, Test_C_DecryptUpdate, Test_C_DecryptFinal, Test_C_DigestInit, Test_C_Digest, Test_C_DigestUpdate, Test_C_DigestKey, Test_C_DigestFinal, Test_C_SignInit, Test_C_Sign, Test_C_SignUpdate, Test_C_SignFinal, Test_C_SignRecoverInit, Test_C_SignRecover, Test_C_VerifyInit, Test_C_Verify, Test_C_VerifyUpdate, Test_C_VerifyFinal, Test_C_VerifyRecoverInit, Test_C_VerifyRecover, Test_C_DigestEncryptUpdate, Test_C_DecryptDigestUpdate, Test_C_SignEncryptUpdate, Test_C_DecryptVerifyUpdate, Test_C_GenerateKey, Test_C_GenerateKeyPair, Test_C_WrapKey, Test_C_UnwrapKey, Test_C_DeriveKey, Test_C_SeedRandom, Test_C_GenerateRandom, Test_C_GetFunctionStatus, Test_C_CancelFunction, Test_C_WaitForSlotEvent}; #ifdef _WIN32 __declspec(dllexport) #endif CK_RV C_GetFunctionList(CK_FUNCTION_LIST_PTR_PTR ppFunctionList) { *ppFunctionList = &FunctionList; return CKR_OK; }