From 7034b67c04bd1c2d3e05b799e7b40ff5a89fbacc Mon Sep 17 00:00:00 2001 From: km Date: Thu, 26 Mar 2026 14:40:23 +0900 Subject: [PATCH] =?UTF-8?q?Platform=20SCP03=20=E3=82=AD=E3=83=BC=E3=83=AD?= =?UTF-8?q?=E3=83=BC=E3=83=86=E3=83=BC=E3=82=B7=E3=83=A7=E3=83=B3=E3=83=86?= =?UTF-8?q?=E3=82=B9=E3=83=88=E3=82=B9=E3=82=A4=E3=83=BC=E3=83=88=E8=BF=BD?= =?UTF-8?q?=E5=8A=A0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 新規テストファイル：tests/test_scp03_key_rotation.c テストステップ: 1. デフォルトキーでセッションオープン 2. デフォルトキーで基本テスト 3. テストキーへローテーション 4. セッションクローズ・テストキーで再オープン 5. デフォルトキーへ戻す 6. セッションクローズ・デフォルトキーで再オープン 7. デフォルトキーで最終クローズ 対応チップ: - SE050C1 (CHIP_ID=1) - SE050C2 (CHIP_ID=2) - SE050E2 (CHIP_ID=3) 使用方法: make SE050_CHIP=SE050C1 test_key_rotation ./build/test_key_rotation -b /dev/i2c-1 テストキー: - ENC: 0xAA...0x99 - MAC: 0x11...0x00 - DEK: 0x0F...0xF0 注：SE050C0 は除外（キーローテーションテストは SE050C1/C2/E2 のみサポート） --- Makefile | 14 ++- include/se050_scp03_keys.h | 8 ++ tests/test_scp03_key_rotation.c | 190 ++++++++++++++++++++++++++++++++ 3 files changed, 210 insertions(+), 2 deletions(-) create mode 100644 tests/test_scp03_key_rotation.c diff --git a/Makefile b/Makefile index df7d6c7..fe5279f 100644 --- a/Makefile +++ b/Makefile @@ -27,6 +27,8 @@ TEST_SCP03 = test_scp03 TEST_HARDWARE = test_scp03_hardware TEST_SE050 = test_scp03_se050 TEST_X25519 = test_x25519_ecdh +TEST_KEY_ROTATION = test_key_rotation +TEST_KEY_ROTATION = test_key_rotation # Target library LIB = libse050_wireguard.a @@ -42,10 +44,12 @@ ifeq ($(SE050_CHIP),SE050C0) CHIP_ID = 0 else ifeq ($(SE050_CHIP),SE050C1) CHIP_ID = 1 -else ifeq ($(SE050_CHIP),SE050E2) +else ifeq ($(SE050_CHIP),SE050C2) CHIP_ID = 2 +else ifeq ($(SE050_CHIP),SE050E2) + CHIP_ID = 3 else - $(error Invalid SE050_CHIP. Use SE050C0, SE050C1, or SE050E2) + $(error Invalid SE050_CHIP. Use SE050C0, SE050C1, SE050C2, or SE050E2) endif # Default target @@ -79,6 +83,12 @@ $(TEST_X25519): tests/test_x25519_ecdh.c $(LIB) @mkdir -p build $(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS) +# Key rotation test +$(TEST_KEY_ROTATION): tests/test_scp03_key_rotation.c $(LIB) + @mkdir -p build + $(CC) $(CFLAGS) -DSE050_CHIP=$(CHIP_ID) -o build/$@ $< build/$(LIB) $(LDFLAGS) + + # Compile source files src/%.o: src/%.c $(CC) $(CFLAGS) -c $< -o $@ diff --git a/include/se050_scp03_keys.h b/include/se050_scp03_keys.h index 7176e71..1d1a23d 100644 --- a/include/se050_scp03_keys.h +++ b/include/se050_scp03_keys.h @@ -23,12 +23,20 @@ extern const uint8_t SE050C0_DEK_KEY[16]; /* ============================================================================ * SE050C1 Platform SCP03 Keys + * + * Note: SE050C2 uses the same PlatformSCP03 keys as SE050C1. + * See AN12436 for details. * ============================================================================ */ extern const uint8_t SE050C1_ENC_KEY[16]; extern const uint8_t SE050C1_MAC_KEY[16]; extern const uint8_t SE050C1_DEK_KEY[16]; +/* SE050C2 uses same keys as SE050C1 */ +#define SE050C2_ENC_KEY SE050C1_ENC_KEY +#define SE050C2_MAC_KEY SE050C1_MAC_KEY +#define SE050C2_DEK_KEY SE050C1_DEK_KEY + /* ============================================================================ * SE050E2 Platform SCP03 Keys * ============================================================================ */ diff --git a/tests/test_scp03_key_rotation.c b/tests/test_scp03_key_rotation.c new file mode 100644 index 0000000..2331603 --- /dev/null +++ b/tests/test_scp03_key_rotation.c @@ -0,0 +1,190 @@ +/** + * @file test_scp03_key_rotation.c + * @brief Platform SCP03 Key Rotation Test Suite + * License: MIT (Clean-room implementation) + */ + +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "se050_wireguard.h" +#include "se050_crypto_utils.h" +#include "se050_scp03_keys.h" + +#ifndef SE050_CHIP +#define SE050_CHIP 1 +#endif + +#define CHIP_SE050C0 0 +#define CHIP_SE050C1 1 +#define CHIP_SE050C2 2 +#define CHIP_SE050E2 3 + +#if SE050_CHIP == CHIP_SE050C1 + #define CHIP_NAME "SE050C1" + #define SE050_DEFAULT_I2C_ADDR 0x48 + #define DEFAULT_ENC_KEY SE050C1_ENC_KEY + #define DEFAULT_MAC_KEY SE050C1_MAC_KEY + #define DEFAULT_DEK_KEY SE050C1_DEK_KEY +#elif SE050_CHIP == CHIP_SE050C2 + #define CHIP_NAME "SE050C2" + #define SE050_DEFAULT_I2C_ADDR 0x48 + #define DEFAULT_ENC_KEY SE050C2_ENC_KEY + #define DEFAULT_MAC_KEY SE050C2_MAC_KEY + #define DEFAULT_DEK_KEY SE050C2_DEK_KEY +#elif SE050_CHIP == CHIP_SE050E2 + #define CHIP_NAME "SE050E2" + #define SE050_DEFAULT_I2C_ADDR 0x48 + #define DEFAULT_ENC_KEY SE050E2_ENC_KEY + #define DEFAULT_MAC_KEY SE050E2_MAC_KEY + #define DEFAULT_DEK_KEY SE050E2_DEK_KEY +#else + #error "Invalid SE050_CHIP. Use SE050C1, SE050C2, or SE050E2" +#endif + +static const uint8_t TEST_ENC_KEY[16] = { + 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0xFF, 0x00, 0x11, + 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 +}; + +static const uint8_t TEST_MAC_KEY[16] = { + 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, + 0x99, 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0xFF, 0x00 +}; + +static const uint8_t TEST_DEK_KEY[16] = { + 0x0F, 0x1E, 0x2D, 0x3C, 0x4B, 0x5A, 0x69, 0x78, + 0x87, 0x96, 0xA5, 0xB4, 0xC3, 0xD2, 0xE1, 0xF0 +}; + +static int test_passed = 0; +static int test_failed = 0; + +#define TEST_ASSERT_EQ(a, b, msg) do { if ((a) == (b)) { printf("[PASS] %s\n", msg); test_passed++; } else { printf("[FAIL] %s\n", msg); test_failed++; } } while(0) + +typedef struct { int fd; uint8_t slave_addr; const char *dev_path; } i2c_ctx_t; + +static int i2c_init(i2c_ctx_t *ctx, const char *dev_path, uint8_t addr) { + int fd = open(dev_path, O_RDWR); + if (fd < 0) return -1; + if (ioctl(fd, I2C_SLAVE, addr) < 0) { close(fd); return -1; } + ctx->fd = fd; ctx->slave_addr = addr; ctx->dev_path = dev_path; + return 0; +} + +static void i2c_close(i2c_ctx_t *ctx) { if (ctx->fd >= 0) { close(ctx->fd); ctx->fd = -1; } } + +static int step1_open_default_keys(const char *i2c_bus, se050_session_ctx_t **session) { + printf("\n=== Step 1: Session Open with Default Keys ===\n"); + printf("Chip: %s\n", CHIP_NAME); + i2c_ctx_t i2c; se050_i2c_hal_t hal; + if (i2c_init(&i2c, i2c_bus, SE050_DEFAULT_I2C_ADDR) != 0) { printf("[FAIL] I2C connection failed\n"); return -1; } + memset(&hal, 0, sizeof(hal)); hal.handle = &i2c; hal.slave_addr = SE050_DEFAULT_I2C_ADDR; hal.dev_path = i2c_bus; + se050_status_t status = se050_session_create(session, &hal); + if (status != SE050_OK) { printf("[FAIL] Session creation failed (0x%04x)\n", status); i2c_close(&i2c); return -1; } + status = se050_session_scp03_init(*session); + if (status != SE050_OK) { se050_session_delete(*session); i2c_close(&i2c); return -1; } + status = se050_session_scp03_set_keys(*session, DEFAULT_ENC_KEY, DEFAULT_MAC_KEY, DEFAULT_DEK_KEY); + if (status != SE050_OK) { se050_session_delete(*session); i2c_close(&i2c); return -1; } + printf("[PASS] Session opened with default keys\n"); + return 0; +} + +static void step2_basic_tests(se050_session_ctx_t *session) { + printf("\n=== Step 2: Basic Tests with Default Keys ===\n"); + if (!session) { printf("[FAIL] No session\n"); return; } + uint8_t cmd[64]; size_t cmd_len = 6; + cmd[0] = 0x80; cmd[1] = 0x6F; cmd[2] = 0x00; cmd[3] = 0x00; cmd[4] = 0x00; cmd[5] = 0x00; + se050_status_t status = se050_session_scp03_encrypt(session, cmd, &cmd_len); + TEST_ASSERT_EQ(status, SE050_OK, "SCP03 encryption with default keys"); +} + +static int step3_rotate_to_test_keys(se050_session_ctx_t *session) { + printf("\n=== Step 3: Rotate to Test Keys ===\n"); + if (!session) { printf("[FAIL] No session\n"); return -1; } + se050_status_t status = se050_session_scp03_set_keys(session, TEST_ENC_KEY, TEST_MAC_KEY, TEST_DEK_KEY); + if (status != SE050_OK) { printf("[FAIL] Set test keys failed (0x%04x)\n", status); return -1; } + printf("[PASS] Rotated to test keys\n"); + return 0; +} + +static int step4_reopen_test_keys(const char *i2c_bus, se050_session_ctx_t **session) { + printf("\n=== Step 4: Close and Reopen with Test Keys ===\n"); + if (*session) { se050_session_delete(*session); printf("[INFO] Session closed\n"); } + i2c_ctx_t i2c; se050_i2c_hal_t hal; + if (i2c_init(&i2c, i2c_bus, SE050_DEFAULT_I2C_ADDR) != 0) { printf("[FAIL] I2C connection failed\n"); return -1; } + memset(&hal, 0, sizeof(hal)); hal.handle = &i2c; hal.slave_addr = SE050_DEFAULT_I2C_ADDR; hal.dev_path = i2c_bus; + se050_status_t status = se050_session_create(session, &hal); + if (status != SE050_OK) { printf("[FAIL] Session creation failed (0x%04x)\n", status); i2c_close(&i2c); return -1; } + status = se050_session_scp03_init(*session); + if (status != SE050_OK) { se050_session_delete(*session); i2c_close(&i2c); return -1; } + status = se050_session_scp03_set_keys(*session, TEST_ENC_KEY, TEST_MAC_KEY, TEST_DEK_KEY); + if (status != SE050_OK) { se050_session_delete(*session); i2c_close(&i2c); return -1; } + printf("[PASS] Session reopened with test keys\n"); + return 0; +} + +static int step5_rotate_back_default(se050_session_ctx_t *session) { + printf("\n=== Step 5: Rotate Back to Default Keys ===\n"); + if (!session) { printf("[FAIL] No session\n"); return -1; } + se050_status_t status = se050_session_scp03_set_keys(session, DEFAULT_ENC_KEY, DEFAULT_MAC_KEY, DEFAULT_DEK_KEY); + if (status != SE050_OK) { printf("[FAIL] Set default keys failed (0x%04x)\n", status); return -1; } + printf("[PASS] Rotated back to default keys\n"); + return 0; +} + +static int step6_reopen_default_keys(const char *i2c_bus, se050_session_ctx_t **session) { + printf("\n=== Step 6: Close and Reopen with Default Keys ===\n"); + if (*session) { se050_session_delete(*session); printf("[INFO] Session closed\n"); } + i2c_ctx_t i2c; se050_i2c_hal_t hal; + if (i2c_init(&i2c, i2c_bus, SE050_DEFAULT_I2C_ADDR) != 0) { printf("[FAIL] I2C connection failed\n"); return -1; } + memset(&hal, 0, sizeof(hal)); hal.handle = &i2c; hal.slave_addr = SE050_DEFAULT_I2C_ADDR; hal.dev_path = i2c_bus; + se050_status_t status = se050_session_create(session, &hal); + if (status != SE050_OK) { printf("[FAIL] Session creation failed (0x%04x)\n", status); i2c_close(&i2c); return -1; } + status = se050_session_scp03_init(*session); + if (status != SE050_OK) { se050_session_delete(*session); i2c_close(&i2c); return -1; } + status = se050_session_scp03_set_keys(*session, DEFAULT_ENC_KEY, DEFAULT_MAC_KEY, DEFAULT_DEK_KEY); + if (status != SE050_OK) { se050_session_delete(*session); i2c_close(&i2c); return -1; } + printf("[PASS] Session reopened with default keys\n"); + return 0; +} + +static void step7_final_close(se050_session_ctx_t **session) { + printf("\n=== Step 7: Final Close ===\n"); + if (*session) { se050_session_delete(*session); printf("[PASS] Session closed with default keys\n"); *session = NULL; } + else { printf("[FAIL] No session to close\n"); } +} + +int main(int argc, char *argv[]) { + const char *i2c_bus = "/dev/i2c-1"; + for (int i = 1; i < argc; i++) { if (strcmp(argv[i], "-b") == 0 && i + 1 < argc) { i2c_bus = argv[++i]; } } + printf("========================================\n"); + printf("Platform SCP03 Key Rotation Test\n"); + printf("========================================\n"); + printf("Chip Type: %s\n", CHIP_NAME); + printf("I2C Bus: %s\n", i2c_bus); + printf("========================================\n"); + se050_session_ctx_t *session = NULL; int result = 0; + if (step1_open_default_keys(i2c_bus, &session) != 0) { printf("\n[ERROR] Step 1 failed - requires SE050 hardware\n"); return 1; } + step2_basic_tests(session); + if (step3_rotate_to_test_keys(session) != 0) { result = 1; goto cleanup; } + if (step4_reopen_test_keys(i2c_bus, &session) != 0) { result = 1; goto cleanup; } + if (step5_rotate_back_default(session) != 0) { result = 1; goto cleanup; } + if (step6_reopen_default_keys(i2c_bus, &session) != 0) { result = 1; goto cleanup; } + step7_final_close(&session); +cleanup: + if (session) se050_session_delete(session); + printf("\n========================================\n"); + printf("Test Summary\n"); + printf("Passed: %d\n", test_passed); + printf("Failed: %d\n", test_failed); + printf("========================================\n"); + return (test_failed > 0 || result != 0) ? 1 : 0; +}