WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfBoot/tools/test.mk

1288 lines
60 KiB
Makefile
Raw Blame History

TEST_UPDATE_VERSION?=2
WOLFBOOT_VERSION?=0
EXPVER=tools/test-expect-version/test-expect-version
EXPVER_CMD=$(EXPVER) /dev/ttyAMA0
BINASSEMBLE=tools/bin-assemble/bin-assemble
SPI_CHIP=SST25VF080B
SPI_OPTIONS=SPI_FLASH=1 WOLFBOOT_PARTITION_SIZE=0x80000 WOLFBOOT_PARTITION_UPDATE_ADDRESS=0x00000 WOLFBOOT_PARTITION_SWAP_ADDRESS=0x80000
SIGN_ENC_ARGS=
DELTA_DATA_SIZE?=2000
ifneq ("$(wildcard $(WOLFBOOT_ROOT)/tools/keytools/keygen.exe)","")
KEYGEN_TOOL="$(WOLFBOOT_ROOT)/tools/keytools/keygen.exe"
else
KEYGEN_TOOL="$(WOLFBOOT_ROOT)/tools/keytools/keygen"
endif
ifneq ("$(wildcard $(WOLFBOOT_ROOT)/tools/keytools/sign.exe)","")
SIGN_TOOL="$(WOLFBOOT_ROOT)/tools/keytools/sign.exe"
else
SIGN_TOOL="$(WOLFBOOT_ROOT)/tools/keytools/sign"
endif
ifeq ($(FLAGS_INVERT),1)
INVERSION=
else
INVERSION=| tr "\000" "\377"
endif
$(EXPVER):
$(MAKE) -C $(dir $@)
$(BINASSEMBLE):
$(MAKE) -C $(dir $@)
test-size: FORCE
$(Q)make clean
$(Q)make wolfboot.bin
$(Q)$(CROSS_COMPILE)strip wolfboot.elf
$(Q)FP=`$(SIZE) -A wolfboot.elf | awk ' /Total/ {print $$2;}'`; echo SIZE: $$FP LIMIT: $$LIMIT; test $$FP -le $$LIMIT
# Testbed actions
#
#
# tpm-mute mode is the default
#
tpm-mute:
@if ! (test -d /sys/class/gpio/gpio7); then echo "7" > /sys/class/gpio/export || true; fi
@echo "out" >/sys/class/gpio/gpio7/direction || true
@echo "1" >/sys/class/gpio/gpio7/value || true
tpm-unmute:
@if ! (test -d /sys/class/gpio/gpio7); then echo "7" > /sys/class/gpio/export || true; fi
@echo "in" >/sys/class/gpio/gpio7/direction || true
testbed-on: FORCE
@if ! (test -d /sys/class/gpio/gpio4); then echo "4" > /sys/class/gpio/export || true; fi
@echo "out" >/sys/class/gpio/gpio4/direction || true
@echo "0" >/sys/class/gpio/gpio4/value || true
@make tpm-mute
@echo "Testbed on."
testbed-off: FORCE
@make tpm-mute
@if ! (test -d /sys/class/gpio/gpio4); then echo "4" > /sys/class/gpio/export || true; fi
@echo "out" >/sys/class/gpio/gpio4/direction || true
@echo "1" >/sys/class/gpio/gpio4/value || true
@echo "Testbed off."
test-reset: FORCE
@(sleep 1 && st-flash reset && sleep 1)&
test-spi-on: FORCE
@make testbed-off
@echo "8" >/sys/class/gpio/unexport || true
@echo "9" >/sys/class/gpio/unexport || true
@echo "10" >/sys/class/gpio/unexport || true
@echo "11" >/sys/class/gpio/unexport || true
@modprobe spi_bcm2835
#@modprobe spidev
test-spi-off: FORCE
@rmmod spi_bcm2835 || true
@rmmod spidev || true
@echo "8" >/sys/class/gpio/export || true
@echo "9" >/sys/class/gpio/export || true
@echo "10" >/sys/class/gpio/export || true
@echo "11" >/sys/class/gpio/export || true
@echo "in" >/sys/class/gpio/gpio8/direction || true
@echo "in" >/sys/class/gpio/gpio9/direction || true
@echo "in" >/sys/class/gpio/gpio10/direction || true
@echo "in" >/sys/class/gpio/gpio11/direction || true
@make testbed-on
test-update: test-app/image.bin FORCE
@dd if=/dev/zero bs=131067 count=1 2>/dev/null $(INVERSION) > test-update.bin
@$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.bin $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
@dd if=test-app/image_v$(TEST_UPDATE_VERSION)_signed.bin of=test-update.bin bs=1 conv=notrunc
@printf "pBOOT" >> test-update.bin
@make test-reset
@sleep 2
@st-flash --reset write test-update.bin 0x08040000 || \
(make test-reset && sleep 1 && st-flash --reset write test-update.bin 0x08040000) || \
(make test-reset && sleep 1 && st-flash --reset write test-update.bin 0x08040000)
test-sim-external-flash-with-update: wolfboot.bin test-app/image.elf FORCE
$(Q)cp test-app/image.elf test-app/image.bak.elf
$(Q)dd if=/dev/urandom of=test-app/image.elf bs=1K count=16 oflag=append conv=notrunc
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.elf $(PRIVATE_KEY) 1
$(Q)cp test-app/image.bak.elf test-app/image.elf
$(Q)dd if=/dev/urandom of=test-app/image.elf bs=1K count=16 oflag=append conv=notrunc
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
# Assembling internal flash image
#
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null $(INVERSION) > v1_part.dd
$(Q)dd if=test-app/image_v1_signed.bin bs=256 of=v1_part.dd conv=notrunc
$(Q)$(BINASSEMBLE) internal_flash.dd 0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) v1_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null $(INVERSION) > erased_sec.dd
$(Q)$(BINASSEMBLE) external_flash.dd 0 test-app/image_v$(TEST_UPDATE_VERSION)_signed.bin \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd
test-sim-external-flash-with-enc-delta-update-extradata:DELTA_UPDATE_OPTIONS=--delta test-app/image_v1_signed.bin
test-sim-external-flash-with-enc-delta-update-extradata:SIGN_ENC_ARGS=--encrypt /tmp/enc_key.der --aes128
test-sim-external-flash-with-enc-delta-update-extradata: wolfboot.bin test-app/image.elf FORCE
@printf "0123456789abcdef0123456789abcdef0123456789abcdef" > /tmp/enc_key.der
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.elf $(PRIVATE_KEY) 1
$(Q)cp test-app/image_v1_signed.bin test-app/image_v1_signed.bak
$(Q)rm -f test-app/image.elf test-app/app_sim.o
$(Q)make -C test-app delta-extra-data DELTA_DATA_SIZE=$(DELTA_DATA_SIZE)
$(Q)cp test-app/image_v1_signed.bak test-app/image_v1_signed.bin
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) $(SIGN_ENC_ARGS) test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) $(DELTA_UPDATE_OPTIONS) $(SIGN_ENC_ARGS) \
test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null $(INVERSION) > v1_part.dd
$(Q)dd if=test-app/image_v1_signed.bin bs=256 of=v1_part.dd conv=notrunc
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) v1_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null $(INVERSION) > erased_sec.dd
$(Q)$(BINASSEMBLE) external_flash.dd 0 test-app/image_v$(TEST_UPDATE_VERSION)_signed_diff_encrypted.bin \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd
$(Q)ls -l test-app/*.bin
test-sim-external-flash-with-enc-update:SIGN_ENC_ARGS=--encrypt /tmp/enc_key.der --aes128
test-sim-external-flash-with-enc-update: wolfboot.bin test-app/image.elf FORCE
$(Q)cp test-app/image.elf test-app/image.bak.elf
$(Q)dd if=/dev/urandom of=test-app/image.elf bs=1k count=16 oflag=append conv=notrunc
@printf "0123456789abcdef0123456789abcdef0123456789abcdef" > /tmp/enc_key.der
# First sign command: Create version 1 of the encrypted application (base image)
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) $(SIGN_ENC_ARGS) test-app/image.elf $(PRIVATE_KEY) 1
$(Q)cp test-app/image.bak.elf test-app/image.elf
$(Q)dd if=/dev/urandom of=test-app/image.elf bs=1k count=16 oflag=append conv=notrunc
# Second sign command: Create a full encrypted update (version 2 by default)
# This produces image_v2_signed_and_encrypted.bin which is needed for the first flash assembly step
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) $(SIGN_ENC_ARGS) test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
# Third sign command: Create update with delta option (if specified), producing image_v2_signed_diff_encrypted.bin
# This file is used by the test-sim-external-flash-with-enc-delta-update target
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) $(DELTA_UPDATE_OPTIONS) $(SIGN_ENC_ARGS) \
test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
# Assembling internal flash image
#
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null $(INVERSION) > v1_part.dd
$(Q)dd if=test-app/image_v1_signed.bin bs=256 of=v1_part.dd conv=notrunc
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) v1_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null $(INVERSION) > erased_sec.dd
$(Q)$(BINASSEMBLE) external_flash.dd 0 test-app/image_v$(TEST_UPDATE_VERSION)_signed_and_encrypted.bin \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd
test-sim-external-flash-with-enc-delta-update:
# This target first calls test-sim-external-flash-with-enc-update to generate both
# image_v2_signed_and_encrypted.bin (full update) and image_v2_signed_diff_encrypted.bin (delta update)
# Then it rebuilds the external flash image using the delta update version
make test-sim-external-flash-with-enc-update DELTA_UPDATE_OPTIONS="--delta test-app/image_v1_signed.bin"
$(Q)$(BINASSEMBLE) external_flash.dd 0 test-app/image_v$(TEST_UPDATE_VERSION)_signed_diff_encrypted.bin \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd
test-sim-internal-flash-with-update: wolfboot.bin test-app/image.elf FORCE
$(Q)cp test-app/image.elf test-app/image.bak.elf
$(Q)dd if=/dev/urandom of=test-app/image.elf bs=1k count=16 oflag=append conv=notrunc
# Create version 1 of the application (base image)
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.elf $(PRIVATE_KEY) 1
$(Q)cp test-app/image.bak.elf test-app/image.elf
$(Q)dd if=/dev/urandom of=test-app/image.elf bs=1k count=16 oflag=append conv=notrunc
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null $(INVERSION) > erased_sec.dd
# Sign the update image (version 2 by default)
# This command handles both standard and delta update modes based on DELTA_UPDATE_OPTIONS
# empty DELTA_UPDATE_OPTIONS (Without --delta): Produces image_v2_signed.bin
# DELTA_UPDATE_OPTIONS="--delta test-app/image_v1_signed.bin": Produces image_v2_signed_diff.bin
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) $(DELTA_UPDATE_OPTIONS) \
test-app/image.elf $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) test-app/image_v1_signed.bin \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS)-$(ARCH_FLASH_OFFSET))) test-app/image_v$(TEST_UPDATE_VERSION)_signed.bin \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS)-$(ARCH_FLASH_OFFSET))) erased_sec.dd
test-sim-internal-flash-with-delta-update:
# This target calls test-sim-internal-flash-with-update with the delta option
# The delta option causes the sign tool to produce image_v2_signed_diff.bin instead of image_v2_signed.bin
# Then it rebuilds the internal flash image using the delta update version
make test-sim-internal-flash-with-update DELTA_UPDATE_OPTIONS="--delta test-app/image_v1_signed.bin"
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) test-app/image_v1_signed.bin \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS)-$(ARCH_FLASH_OFFSET))) test-app/image_v$(TEST_UPDATE_VERSION)_signed_diff.bin \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS)-$(ARCH_FLASH_OFFSET))) erased_sec.dd
test-sim-internal-flash-with-delta-update-no-base-sha:
make test-sim-internal-flash-with-update DELTA_UPDATE_OPTIONS="--no-base-sha --delta test-app/image_v1_signed.bin"
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) test-app/image_v1_signed.bin \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS)-$(ARCH_FLASH_OFFSET))) test-app/image_v$(TEST_UPDATE_VERSION)_signed_diff.bin \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS)-$(ARCH_FLASH_OFFSET))) erased_sec.dd
test-sim-internal-flash-with-wrong-delta-update:
# This target tests the bootloader's ability to reject delta updates with wrong base hashes
# First it creates a delta update based on v1, then creates a different delta update based on v2
# The final image contains v1 as the base image but a delta update that expects v2 as its base
make test-sim-internal-flash-with-update DELTA_UPDATE_OPTIONS="--delta test-app/image_v1_signed.bin"
make test-sim-internal-flash-with-update DELTA_UPDATE_OPTIONS="--delta test-app/image_v2_signed.bin" TEST_UPDATE_VERSION=3
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) test-app/image_v1_signed.bin \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS)-$(ARCH_FLASH_OFFSET))) test-app/image_v3_signed_diff.bin \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS)-$(ARCH_FLASH_OFFSET))) erased_sec.dd
test-sim-update-flash: wolfboot.elf test-sim-internal-flash-with-update FORCE
$(Q)(test `./wolfboot.elf success update_trigger get_version` -eq 1)
$(Q)(test `./wolfboot.elf success get_version` -eq $(TEST_UPDATE_VERSION))
test-sim-rollback-flash: wolfboot.elf test-sim-internal-flash-with-update FORCE
$(Q)(test `./wolfboot.elf success update_trigger get_version` -eq 1)
$(Q)(test `./wolfboot.elf get_version` -eq $(TEST_UPDATE_VERSION))
$(Q)(test `./wolfboot.elf success get_version` -eq 1)
$(Q)(test `./wolfboot.elf get_version` -eq 1)
# Test bootloader self-update mechanism using simulator. Since simulator memmaps runtime addresses
# the best we can do is ensure the self-update copies the intact self-update image to the expected location
test-sim-self-update: wolfboot.bin FORCE
@echo "=== Simulator Self-Update Test ==="
@# Create dummy payload (0xAA pattern) and sign as wolfBoot update v2
$(Q)dd if=/dev/zero bs=$$(wc -c < wolfboot.bin | awk '{print $$1}') count=1 2>/dev/null | tr '\000' '\252' > dummy_update.bin
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update dummy_update.bin $(PRIVATE_KEY) 2
@# Create update partition with signed update and "pBOOT" trailer. Necessary since there is no running
@# app to trigger an initial update
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=dummy_update_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(WOLFBOOT_PARTITION_SIZE) - 5)) conv=notrunc
@# Create erased boot and swap partitions
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > erased_sec.dd
@# Assemble flash: wolfboot.bin at 0, empty boot partition, update partition, swap
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS) - $(ARCH_FLASH_OFFSET))) update_part.dd \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS) - $(ARCH_FLASH_OFFSET))) erased_sec.dd
@# Run simulator - self-update runs before app boot, writes dummy to offset 0, then reboots
$(Q)./wolfboot.elf get_version || true
@# Verify dummy payload was written to bootloader region, indicating the self update swapped images as expected
$(Q)cmp -n $$(wc -c < dummy_update.bin | awk '{print $$1}') dummy_update.bin internal_flash.dd && echo "=== Self-update test PASSED ==="
# Test monolithic self-update mechanism using simulator. A monolithic self-update
# updates both the bootloader AND the boot partition application image in a single
# operation by crafting a payload that spans the bootloader region and spills into
# the contiguous boot partition.
test-sim-self-update-monolithic: wolfboot.bin test-app/image_v1_signed.bin FORCE
@echo "=== Simulator Monolithic Self-Update Test ==="
@# Create dummy bootloader (0xAA pattern, exactly bootloader region size: WOLFBOOT_PARTITION_BOOT_ADDRESS - ARCH_FLASH_OFFSET)
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=1 2>/dev/null | tr '\000' '\252' > monolithic_dummy_bl.bin
@# Concatenate dummy bootloader + signed app image to form monolithic payload
$(Q)cat monolithic_dummy_bl.bin test-app/image_v1_signed.bin > monolithic_payload.bin
@# Sign monolithic payload as wolfBoot self-update v2
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update monolithic_payload.bin $(PRIVATE_KEY) 2
@# Create update partition with signed monolithic image and "pBOOT" trailer
$(Q)dd if=/dev/zero bs=$$(($(or $(WOLFBOOT_PARTITION_UPDATE_SIZE),$(WOLFBOOT_PARTITION_SIZE)))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=monolithic_payload_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(or $(WOLFBOOT_PARTITION_UPDATE_SIZE),$(WOLFBOOT_PARTITION_SIZE)) - 5)) conv=notrunc
@# Create erased boot partition
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
@# Assemble flash: wolfboot.bin at 0, empty boot partition, update partition
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS) - $(ARCH_FLASH_OFFSET))) update_part.dd
@# Run simulator - self-update fires, copies monolithic payload to offset 0
$(Q)./wolfboot.elf get_version || true
@# Verify bootloader region contains 0xAA pattern (dummy bootloader was written)
$(Q)cmp -n $$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) monolithic_dummy_bl.bin internal_flash.dd
@echo " Bootloader region 0xAA pattern: PASSED"
@# Extract nested app from boot partition and verify it matches original signed app
$(Q)dd if=internal_flash.dd bs=1 skip=$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=$$(wc -c < test-app/image_v1_signed.bin | awk '{print $$1}') of=nested_app.dd 2>/dev/null
$(Q)cmp nested_app.dd test-app/image_v1_signed.bin
@echo " Nested app at boot partition: PASSED"
@echo "=== Monolithic Self-Update Test PASSED ==="
# Test monolithic self-update with self-header persistence.
# Same as test-sim-self-update-monolithic, but also verifies that the
# self-header was persisted at WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS and
# matches the signing tool's --header-only output byte-for-byte.
#
test-sim-self-update-monolithic-self-header: wolfboot.bin test-app/image_v1_signed.bin FORCE
@echo "=== Simulator Monolithic Self-Update + Self-Header Test ==="
@# Create dummy bootloader (0xAA pattern, exactly bootloader region size)
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=1 2>/dev/null | tr '\000' '\252' > monolithic_dummy_bl.bin
@# Concatenate dummy bootloader + signed app image to form monolithic payload
$(Q)cat monolithic_dummy_bl.bin test-app/image_v1_signed.bin > monolithic_payload.bin
@# Sign monolithic payload as wolfBoot self-update v2, and generate header-only
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update monolithic_payload.bin $(PRIVATE_KEY) 2
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update --header-only monolithic_payload.bin $(PRIVATE_KEY) 2
@# Create update partition with signed monolithic image and "pBOOT" trailer
$(Q)dd if=/dev/zero bs=$$(($(or $(WOLFBOOT_PARTITION_UPDATE_SIZE),$(WOLFBOOT_PARTITION_SIZE)))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=monolithic_payload_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(or $(WOLFBOOT_PARTITION_UPDATE_SIZE),$(WOLFBOOT_PARTITION_SIZE)) - 5)) conv=notrunc
@# Create erased boot partition and self-header sector
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > self_hdr.dd
@# Assemble flash: wolfboot.bin at 0, erased self-header, empty boot partition, update partition
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) self_hdr.dd \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS) - $(ARCH_FLASH_OFFSET))) update_part.dd
@# Run simulator - self-update fires, copies monolithic payload to offset 0 and persists header
$(Q)./wolfboot.elf get_version || true
@# Verify bootloader region up to self-header contains 0xAA pattern
@# (the self-header sector itself is overwritten by wolfBoot_update_self_header)
$(Q)cmp -n $$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) monolithic_dummy_bl.bin internal_flash.dd
@echo " Bootloader region 0xAA pattern: PASSED"
@# Extract nested app from boot partition and verify it matches original signed app
$(Q)dd if=internal_flash.dd bs=1 skip=$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=$$(wc -c < test-app/image_v1_signed.bin | awk '{print $$1}') of=nested_app.dd 2>/dev/null
$(Q)cmp nested_app.dd test-app/image_v1_signed.bin
@echo " Nested app at boot partition: PASSED"
@# Extract persisted self-header and verify it matches --header-only output
$(Q)dd if=internal_flash.dd bs=1 skip=$$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=$$(($(WOLFBOOT_SECTOR_SIZE))) of=persisted_hdr.dd 2>/dev/null
$(Q)cmp -n $$(($(IMAGE_HEADER_SIZE))) persisted_hdr.dd monolithic_payload_v2_header.bin
@echo " Self-header persisted correctly: PASSED"
@echo "=== Monolithic Self-Update + Self-Header Test PASSED ==="
# Test that an oversized monolithic self-update is rejected. The payload is
# signed and staged normally, but its firmware size exceeds the install span
# (bootloader region + BOOT partition minus the trailer sector), so wolfBoot
# must refuse it and leave the bootloader and BOOT partition untouched.
# Requires a build with wolfBoot_printf output (e.g. DEBUG=1, as in the
# sim-self-update-monolithic example config).
test-sim-self-update-monolithic-oversize: wolfboot.bin test-app/image_v1_signed.bin FORCE
@echo "=== Simulator Monolithic Self-Update Oversize Rejection Test ==="
@# Create dummy bootloader (0xAA pattern, exactly bootloader region size)
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=1 2>/dev/null | tr '\000' '\252' > monolithic_dummy_bl.bin
@# Build a payload 0x100 bytes past the max install span, padded with 0xFF.
@# It still fits the UPDATE partition, so only the install-span check can
@# reject it.
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET) + $(WOLFBOOT_PARTITION_SIZE) - $(WOLFBOOT_SECTOR_SIZE) + 0x100)) count=1 2>/dev/null | tr '\000' '\377' > monolithic_oversize.bin
$(Q)cat monolithic_dummy_bl.bin test-app/image_v1_signed.bin | dd of=monolithic_oversize.bin conv=notrunc 2>/dev/null
@# Sign with an inflated update partition size: the keytool refuses
@# oversized images, and the point here is the bootloader's own guard
$(Q)$(SIGN_ENV) WOLFBOOT_PARTITION_UPDATE_SIZE=0x1000000 $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update monolithic_oversize.bin $(PRIVATE_KEY) 2
@# Create update partition with signed oversized image and "pBOOT" trailer
$(Q)dd if=/dev/zero bs=$$(($(or $(WOLFBOOT_PARTITION_UPDATE_SIZE),$(WOLFBOOT_PARTITION_SIZE)))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=monolithic_oversize_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(or $(WOLFBOOT_PARTITION_UPDATE_SIZE),$(WOLFBOOT_PARTITION_SIZE)) - 5)) conv=notrunc
@# Create erased boot partition
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
@# Assemble flash: wolfboot.bin at 0, empty boot partition, update partition
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS) - $(ARCH_FLASH_OFFSET))) update_part.dd
@# Run simulator - the self-update must be refused before any flash write
$(Q)./wolfboot.elf get_version > monolithic_oversize.log 2>&1 || true
$(Q)grep -q "Self update image too large" monolithic_oversize.log || \
{ echo "Rejection message not found; simulator output:"; \
cat monolithic_oversize.log; false; }
@echo " Oversized self-update rejected: PASSED"
@# Verify the bootloader region still contains the original wolfboot.bin
$(Q)cmp -n $$(wc -c < wolfboot.bin | awk '{print $$1}') wolfboot.bin internal_flash.dd
@echo " Bootloader region untouched: PASSED"
@# Verify the boot partition is still fully erased
$(Q)cmp -n $$(($(WOLFBOOT_PARTITION_SIZE))) boot_part.dd internal_flash.dd 0 $$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET)))
@echo " Boot partition untouched: PASSED"
@echo "=== Monolithic Self-Update Oversize Rejection Test PASSED ==="
# Test self-header cryptographic verification (hash + signature validation)
#
# Verifies that an application can cryptographically verify the bootloader using
# the persisted self-header. Uses the real wolfboot.bin (not a dummy) so the
# header hash matches the actual firmware bytes in flash.
#
# First triggers a self-update so the bootloader persists its signed header,
# then verifies the persisted header matches the signing tool's --header-only
# output byte-for-byte, and finally boots into the test-app which calls
# open_self/verify_integrity/verify_authenticity to simulate an external entity
# verifying the bootloader image
#
test-sim-self-header-verify: wolfboot.bin test-app/image_v1_signed.bin FORCE
@echo "=== Simulator Self-Header Verification Test ==="
@# Sign real wolfboot.bin as v2 update (header hash will match firmware bytes)
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update wolfboot.bin $(PRIVATE_KEY) 2
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update --header-only wolfboot.bin $(PRIVATE_KEY) 2
@# Create partition images and assemble flash with pBOOT trigger to initiate self-update
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=wolfboot_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(WOLFBOOT_PARTITION_SIZE) - 5)) conv=notrunc
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > erased_sec.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > self_hdr.dd
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) self_hdr.dd \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS) - $(ARCH_FLASH_OFFSET))) update_part.dd \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS) - $(ARCH_FLASH_OFFSET))) erased_sec.dd
@# Run simulator — triggers self-update, which persists the header to flash
$(Q)./wolfboot.elf get_version || true
@# Extract the persisted header that the self-update wrote
$(Q)dd if=internal_flash.dd bs=1 skip=$$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=$$(($(WOLFBOOT_SECTOR_SIZE))) of=persisted_hdr.dd 2>/dev/null
@# Verify persisted header matches the signing tool's --header-only output
$(Q)cmp -n $$(($(IMAGE_HEADER_SIZE))) persisted_hdr.dd wolfboot_v2_header.bin
@# Reassemble flash with test-app in boot partition so the app runs after wolfboot
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > update_part_empty.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_with_app.dd
$(Q)dd if=test-app/image_v1_signed.bin of=boot_with_app.dd bs=1 conv=notrunc
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) persisted_hdr.dd \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_with_app.dd \
$$(($(WOLFBOOT_PARTITION_UPDATE_ADDRESS) - $(ARCH_FLASH_OFFSET))) update_part_empty.dd \
$$(($(WOLFBOOT_PARTITION_SWAP_ADDRESS) - $(ARCH_FLASH_OFFSET))) erased_sec.dd
@# Boot into test-app which calls verify_self to validate bootloader hash + signature
$(Q)./wolfboot.elf verify_self && echo "=== Self-Header Cryptographic Verification PASSED ==="
# Test self-header cryptographic verification with external self-header storage.
#
# Same verification chain as test-sim-self-header-verify, but the self-header is
# persisted to external flash instead of internal.
#
test-sim-self-header-ext-verify: wolfboot.bin test-app/image_v1_signed.bin FORCE
@echo "=== Simulator External Self-Header Verification Test ==="
@# Sign real wolfboot.bin as v2 update (header hash will match firmware bytes)
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update wolfboot.bin $(PRIVATE_KEY) 2
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update --header-only wolfboot.bin $(PRIVATE_KEY) 2
@# Create partition images and assemble internal + external flash
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=wolfboot_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(WOLFBOOT_PARTITION_SIZE) - 5)) conv=notrunc
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > erased_sec.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > self_hdr.dd
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd
$(Q)$(BINASSEMBLE) external_flash.dd \
0 update_part.dd \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd \
$(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) self_hdr.dd
@# Run simulator — triggers self-update, which persists the header to external flash
$(Q)./wolfboot.elf get_version || true
@# Confirm internal flash self-header location remains erased (header went to external only)
$(Q)dd if=/dev/zero bs=$$(($(IMAGE_HEADER_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > erased_hdr.dd
$(Q)dd if=internal_flash.dd bs=1 skip=$$(($(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) - $(ARCH_FLASH_OFFSET))) count=$$(($(IMAGE_HEADER_SIZE))) 2>/dev/null | cmp -s erased_hdr.dd - && echo "=== Internal Self-Header location remains erased PASSED ==="
@# Extract persisted header from external flash and verify it matches the signed header
$(Q)dd if=external_flash.dd bs=1 skip=$(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) count=$$(($(WOLFBOOT_SECTOR_SIZE))) of=persisted_hdr.dd 2>/dev/null
$(Q)cmp -n $$(($(IMAGE_HEADER_SIZE))) persisted_hdr.dd wolfboot_v2_header.bin
@# Reassemble flash with test-app in boot and the persisted external header
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > update_part_empty.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_with_app.dd
$(Q)dd if=test-app/image_v1_signed.bin of=boot_with_app.dd bs=1 conv=notrunc
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_with_app.dd
$(Q)$(BINASSEMBLE) external_flash.dd \
0 update_part_empty.dd \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd \
$(WOLFBOOT_PARTITION_SELF_HEADER_ADDRESS) persisted_hdr.dd
@# Boot into test-app which calls verify_self to validate bootloader hash + signature
$(Q)./wolfboot.elf verify_self && echo "=== External Self-Header Cryptographic Verification PASSED ==="
# Test bootloader self-update mechanism with external flash
test-sim-self-update-ext: wolfboot.bin FORCE
@echo "=== Simulator Self-Update Test (External Flash) ==="
@# Create dummy payload (0xAA pattern) and sign as wolfBoot update v2
$(Q)dd if=/dev/zero bs=$$(wc -c < wolfboot.bin | awk '{print $$1}') count=1 2>/dev/null | tr '\000' '\252' > dummy_update.bin
$(Q)$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update dummy_update.bin $(PRIVATE_KEY) 2
@# Create update partition with signed update and "pBOOT" trailer
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > update_part.dd
$(Q)dd if=dummy_update_v2_signed.bin of=update_part.dd bs=1 conv=notrunc
$(Q)printf "pBOOT" | dd of=update_part.dd bs=1 seek=$$(($(WOLFBOOT_PARTITION_SIZE) - 5)) conv=notrunc
@# Create erased boot and swap partitions
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_PARTITION_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > boot_part.dd
$(Q)dd if=/dev/zero bs=$$(($(WOLFBOOT_SECTOR_SIZE))) count=1 2>/dev/null | tr '\000' '\377' > erased_sec.dd
@# Assemble internal flash: wolfboot.bin at 0, empty boot partition
$(Q)$(BINASSEMBLE) internal_flash.dd \
0 wolfboot.bin \
$$(($(WOLFBOOT_PARTITION_BOOT_ADDRESS) - $(ARCH_FLASH_OFFSET))) boot_part.dd
@# Assemble external flash: update partition, swap sector
$(Q)$(BINASSEMBLE) external_flash.dd \
0 update_part.dd \
$(WOLFBOOT_PARTITION_SIZE) erased_sec.dd
@# Run simulator - self-update reads from external, writes to internal at offset 0
$(Q)./wolfboot.elf get_version || true
@# Verify dummy payload was written to bootloader region
$(Q)cmp -n $$(wc -c < dummy_update.bin | awk '{print $$1}') dummy_update.bin internal_flash.dd && echo "=== Self-update test (External Flash) PASSED ==="
test-self-update: FORCE
@mv $(PRIVATE_KEY) private_key.old
@make clean factory.bin RAM_CODE=1 WOLFBOOT_VERSION=1 SIGN=$(SIGN)
@$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.bin $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
@st-flash --reset write test-app/image_v2_signed.bin 0x08020000 || \
(make test-reset && sleep 1 && st-flash --reset write test-app/image_v2_signed.bin 0x08020000) || \
(make test-reset && sleep 1 && st-flash --reset write test-app/image_v2_signed.bin 0x08020000)
@dd if=/dev/zero bs=131067 count=1 2>/dev/null $(INVERSION) > test-self-update.bin
@$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) --wolfboot-update wolfboot.bin private_key.old $(WOLFBOOT_VERSION)
@dd if=wolfboot_v$(WOLFBOOT_VERSION)_signed.bin of=test-self-update.bin bs=1 conv=notrunc
@printf "pBOOT" >> test-self-update.bin
@st-flash --reset write test-self-update.bin 0x08040000 || \
(make test-reset && sleep 1 && st-flash --reset write test-self-update.bin 0x08040000) || \
(make test-reset && sleep 1 && st-flash --reset write test-self-update.bin 0x08040000)
test-update-ext: test-app/image.bin FORCE
@$(SIGN_ENV) $(SIGN_TOOL) $(SIGN_OPTIONS) test-app/image.bin $(PRIVATE_KEY) $(TEST_UPDATE_VERSION)
@(dd if=/dev/zero bs=1M count=1 | tr '\000' '\377' > test-update.rom)
@dd if=test-app/image_v$(TEST_UPDATE_VERSION)_signed.bin of=test-update.rom bs=1 count=524283 conv=notrunc
@printf "pBOOT" | dd of=test-update.rom obs=1 seek=524283 count=5 conv=notrunc
@make test-spi-on || true
flashrom -c $(SPI_CHIP) -p linux_spi:dev=/dev/spidev0.0 -w test-update.rom
@make test-spi-off
@make test-reset
@sleep 2
@make clean
test-erase: FORCE
@echo Mass-erasing the internal flash:
@make test-reset
@sleep 2
@st-flash erase
test-erase-ext: FORCE
@make test-spi-on || true
@echo Mass-erasing the external SPI flash:
flashrom -c $(SPI_CHIP) -p linux_spi:dev=/dev/spidev0.0 -E
@make test-spi-off || true
test-factory: factory.bin
@make test-reset
@sleep 2
@st-flash --reset write factory.bin 0x08000000 || \
((make test-reset && sleep 1 && st-flash --reset write factory.bin 0x08000000) || \
(make test-reset && sleep 1 && st-flash --reset write factory.bin 0x08000000))&
test-resetold: FORCE
@(sleep 1 && st-info --reset) &
## Test cases:
# Group '0': ED25519 (default)
#
#
test-01-forward-update-no-downgrade: $(EXPVER) FORCE
@make test-erase
@echo Creating and uploading factory image...
@make test-factory
@echo Expecting version '1'
(test `$(EXPVER_CMD)` -eq 1)
@echo
@echo Creating and uploading update image...
@make test-update TEST_UPDATE_VERSION=4
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@echo
@echo Creating and uploading update image...
@make test-update TEST_UPDATE_VERSION=1
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@make clean
@echo TEST PASSED
test-02-forward-update-allow-downgrade: $(EXPVER) FORCE
@make test-erase
@echo Creating and uploading factory image...
@make test-factory ALLOW_DOWNGRADE=1
@echo Expecting version '1'
@(test `$(EXPVER_CMD)` -eq 1)
@echo
@echo Creating and uploading update image...
@make test-update TEST_UPDATE_VERSION=4
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@echo
@echo Creating and uploading update image...
@make test-update TEST_UPDATE_VERSION=2
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 2)
@make clean
@echo TEST PASSED
test-03-rollback: $(EXPVER) FORCE
@make test-erase
@echo Creating and uploading factory image...
@make test-factory
@echo Expecting version '1'
@(test `$(EXPVER_CMD)` -eq 1)
@echo
@echo Creating and uploading update image...
@make test-update TEST_UPDATE_VERSION=4
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@echo
@echo Creating and uploading update image...
@make test-update TEST_UPDATE_VERSION=5
@echo Expecting version '5'
@(test `$(EXPVER_CMD)` -eq 5)
@echo
@echo Resetting to trigger rollback...
@make test-reset
@(test `$(EXPVER_CMD)` -eq 4)
@make clean
@echo TEST PASSED
# Group '1': ECC
#
#
test-11-forward-update-no-downgrade-ECC: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=ECC256
test-13-rollback-ECC: $(EXPVER) FORCE
@make test-03-rollback SIGN=ECC256
# Group '2': SPI flash
#
#
test-21-forward-update-no-downgrade-SPI: $(EXPVER) FORCE
@make test-erase-ext
@echo Creating and uploading factory image...
@make test-factory $(SPI_OPTIONS)
@echo Expecting version '1'
@(test `$(EXPVER_CMD)` -eq 1)
@echo
@echo Creating and uploading update image...
@make test-update-ext TEST_UPDATE_VERSION=4 $(SPI_OPTIONS)
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@echo
@echo Creating and uploading update image...
@make test-update-ext TEST_UPDATE_VERSION=1 $(SPI_OPTIONS)
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@make clean
@echo TEST PASSED
test-23-rollback-SPI: $(EXPVER) FORCE
@make test-erase-ext
@echo Creating and uploading factory image...
@make test-factory $(SPI_OPTIONS)
@echo Expecting version '1'
@(test `$(EXPVER_CMD)` -eq 1)
@echo
@echo Creating and uploading update image...
@make test-update-ext TEST_UPDATE_VERSION=4 $(SPI_OPTIONS)
@echo Expecting version '4'
@(test `$(EXPVER_CMD)` -eq 4)
@echo
@echo Creating and uploading update image...
@make test-update-ext TEST_UPDATE_VERSION=5 $(SPI_OPTIONS)
@echo Expecting version '5'
@(test `$(EXPVER_CMD)` -eq 5)
@echo
@echo Resetting to trigger rollback...
@make test-reset
@sleep 2
@(test `$(EXPVER_CMD)` -eq 4)
@make clean
@echo TEST PASSED
# Group '3,4': bootloader self-update
#
#
test-34-forward-self-update: $(EXPVER) FORCE
@echo Creating and uploading factory image...
@make test-factory WOLFBOOT_VERSION=1 RAM_CODE=1 SIGN=$(SIGN)
@echo Expecting version '1'
@(test `$(EXPVER_CMD)` -eq 1)
@echo
@echo Updating keys, firmware, bootloader
@make test-self-update WOLFBOOT_VERSION=4 TEST_UPDATE_VERSION=2 RAM_CODE=1 SIGN=$(SIGN)
@sleep 2
@echo Expecting version '2'
@(test `$(EXPVER_CMD)` -eq 2)
@make clean
@echo TEST PASSED
test-44-forward-self-update-ECC: $(EXPVER) FORCE
@make test-34-forward-self-update SIGN=ECC256
# Group '5': RSA 2048 bit
#
#
test-51-forward-update-no-downgrade-RSA: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=RSA2048
test-53-rollback-RSA: $(EXPVER) FORCE
@make test-03-rollback SIGN=RSA2048
# Group '6': wolfTPM
#
#
test-61-forward-update-no-downgrade-TPM: $(EXPVER) FORCE
@make test-spi-off || true
@make tpm-unmute
@make test-01-forward-update-no-downgrade SIGN=ECC256 WOLFTPM=1 TPM2=1
@make tpm-mute
test-63-rollback-TPM: $(EXPVER) FORCE
@make test-spi-off || true
@make tpm-unmute
@make test-03-rollback SIGN=ECC256 WOLFTPM=1
@make tpm-mute
# Group '7': RSA 4096 bit, ED448 and RSA 3072
#
#
test-71-forward-update-no-downgrade-RSA-4096: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=RSA4096
test-73-rollback-RSA-4096: $(EXPVER) FORCE
@make test-03-rollback SIGN=RSA4096
test-74-forward-update-no-downgrade-ED448: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=ED448
test-75-rollback-ED448: $(EXPVER) FORCE
@make test-03-rollback SIGN=ED448
test-76-forward-update-no-downgrade-RSA3072: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=RSA3072
test-77-rollback-RSA3072: $(EXPVER) FORCE
@make test-03-rollback SIGN=RSA3072
# Group '8,9,10,11': SHA3 combined with the five ciphers
#
#
test-81-forward-update-no-downgrade-ED25519-SHA3: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=ED25519 HASH=SHA3
test-91-forward-update-no-downgrade-ECC256-SHA3: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=ECC256 HASH=SHA3
test-101-forward-update-no-downgrade-RSA2048-SHA3: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=RSA2048 HASH=SHA3
test-111-forward-update-no-downgrade-RSA4096-SHA3: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=RSA4096 HASH=SHA3
test-112-forward-update-no-downgrade-ED448-SHA3: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=ED448 HASH=SHA3 IMAGE_HEADER_SIZE=512
test-113-forward-update-no-downgrade-RSA3072-SHA3: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=RSA3072 HASH=SHA3
# Group 16: TPM with RSA
#
#
test-161-forward-update-no-downgrade-TPM-RSA: $(EXPVER) FORCE
@make test-spi-off || true
@make tpm-unmute
@make test-01-forward-update-no-downgrade SIGN=RSA2048 WOLFTPM=1
@make tpm-mute
test-163-rollback-TPM-RSA: $(EXPVER) FORCE
@make test-spi-off || true
@make tpm-unmute
@make test-03-rollback SIGN=RSA2048 WOLFTPM=1
@make tpm-mute
# Group 17: NULL cipher, no signature
#
#
test-171-forward-update-no-downgrade-NOSIGN: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SIGN=NONE
test-173-rollback-NOSIGN: $(EXPVER) FORCE
@make test-03-rollback SIGN=NONE
# Groups 20:31,37: Combinations of previous tests with WOLFBOOT_SMALL_STACK
#
#
test-201-smallstack-forward-update-no-downgrade: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade WOLFBOOT_SMALL_STACK=1
test-211-smallstack-forward-update-no-downgrade-ECC: $(EXPVER) FORCE
@make test-11-forward-update-no-downgrade-ECC WOLFBOOT_SMALL_STACK=1
test-221-smallstack-forward-update-no-downgrade-SPI: $(EXPVER) FORCE
@make test-21-forward-update-no-downgrade-SPI WOLFBOOT_SMALL_STACK=1
test-251-smallstack-forward-update-no-downgrade-RSA: $(EXPVER) FORCE
@make test-51-forward-update-no-downgrade-RSA WOLFBOOT_SMALL_STACK=1
test-271-smallstack-forward-update-no-downgrade-RSA4096: $(EXPVER) FORCE
@make test-71-forward-update-no-downgrade-RSA-4096 WOLFBOOT_SMALL_STACK=1
test-274-smallstack-forward-update-no-downgrade-ED448: $(EXPVER) FORCE
@make test-74-forward-update-no-downgrade-ED448 WOLFBOOT_SMALL_STACK=1
test-281-smallstack-forward-update-no-downgrade-ED25519-SHA3: $(EXPVER) FORCE
@make test-81-forward-update-no-downgrade-ED25519-SHA3 WOLFBOOT_SMALL_STACK=1
test-291-smallstack-forward-update-no-downgrade-ECC256-SHA3: $(EXPVER) FORCE
@make test-91-forward-update-no-downgrade-ECC256-SHA3 WOLFBOOT_SMALL_STACK=1
test-301-smallstack-forward-update-no-downgrade-RSA2048-SHA3: $(EXPVER) FORCE
@make test-101-forward-update-no-downgrade-RSA2048-SHA3 WOLFBOOT_SMALL_STACK=1
test-311-smallstack-forward-update-no-downgrade-RSA4096-SHA3: $(EXPVER) FORCE
@make test-111-forward-update-no-downgrade-RSA4096-SHA3 WOLFBOOT_SMALL_STACK=1
test-312-smallstack-forward-update-no-downgrade-ED448-SHA3: $(EXPVER) FORCE
@make test-112-forward-update-no-downgrade-ED448-SHA3 WOLFBOOT_SMALL_STACK=1
test-371-smallstack-forward-update-no-downgrade-NOSIGN: $(EXPVER) FORCE
@make test-171-forward-update-no-downgrade-NOSIGN WOLFBOOT_SMALL_STACK=1
# Groups 40:51,57: Combinations of previous tests with USE_FAST_MATH
#
#
test-401-fastmath-forward-update-no-downgrade: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SPMATH=0
test-411-fastmath-forward-update-no-downgrade-ECC: $(EXPVER) FORCE
@make test-11-forward-update-no-downgrade-ECC SPMATH=0
test-421-fastmath-forward-update-no-downgrade-SPI: $(EXPVER) FORCE
@make test-21-forward-update-no-downgrade-SPI SPMATH=0
test-451-fastmath-forward-update-no-downgrade-RSA: $(EXPVER) FORCE
@make test-51-forward-update-no-downgrade-RSA SPMATH=0
test-471-fastmath-forward-update-no-downgrade-RSA4096: $(EXPVER) FORCE
@make test-71-forward-update-no-downgrade-RSA-4096 SPMATH=0
test-474-fastmath-forward-update-no-downgrade-ED448: $(EXPVER) FORCE
@make test-74-forward-update-no-downgrade-ED448 SPMATH=0
test-481-fastmath-forward-update-no-downgrade-ED25519-SHA3: $(EXPVER) FORCE
@make test-81-forward-update-no-downgrade-ED25519-SHA3 SPMATH=0
test-491-fastmath-forward-update-no-downgrade-ECC256-SHA3: $(EXPVER) FORCE
@make test-91-forward-update-no-downgrade-ECC256-SHA3 SPMATH=0
test-501-fastmath-forward-update-no-downgrade-RSA2048-SHA3: $(EXPVER) FORCE
@make test-101-forward-update-no-downgrade-RSA2048-SHA3 SPMATH=0
test-511-fastmath-forward-update-no-downgrade-RSA4096-SHA3: $(EXPVER) FORCE
@make test-111-forward-update-no-downgrade-RSA4096-SHA3 SPMATH=0
test-512-fastmath-forward-update-no-downgrade-ED448-SHA3: $(EXPVER) FORCE
@make test-112-forward-update-no-downgrade-ED448-SHA3 SPMATH=0
test-571-fastmath-forward-update-no-downgrade-NOSIGN: $(EXPVER) FORCE
@make test-171-forward-update-no-downgrade-NOSIGN SPMATH=0
# Groups 60:71,77: Combinations of previous tests with NO_ASM
#
#
test-601-no-asm-forward-update-no-downgrade: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade NO_ASM=1
test-611-no-asm-forward-update-no-downgrade-ECC: $(EXPVER) FORCE
@make test-11-forward-update-no-downgrade-ECC NO_ASM=1
test-621-no-asm-forward-update-no-downgrade-SPI: $(EXPVER) FORCE
@make test-21-forward-update-no-downgrade-SPI NO_ASM=1
test-651-no-asm-forward-update-no-downgrade-RSA: $(EXPVER) FORCE
@make test-51-forward-update-no-downgrade-RSA NO_ASM=1
test-671-no-asm-forward-update-no-downgrade-RSA4096: $(EXPVER) FORCE
@make test-71-forward-update-no-downgrade-RSA-4096 NO_ASM=1
test-674-no-asm-forward-update-no-downgrade-ED448: $(EXPVER) FORCE
@make test-74-forward-update-no-downgrade-ED448 NO_ASM=1
test-681-no-asm-forward-update-no-downgrade-ED25519-SHA3: $(EXPVER) FORCE
@make test-81-forward-update-no-downgrade-ED25519-SHA3 NO_ASM=1
test-691-no-asm-forward-update-no-downgrade-ECC256-SHA3: $(EXPVER) FORCE
@make test-91-forward-update-no-downgrade-ECC256-SHA3 NO_ASM=1
test-701-no-asm-forward-update-no-downgrade-RSA2048-SHA3: $(EXPVER) FORCE
@make test-101-forward-update-no-downgrade-RSA2048-SHA3 NO_ASM=1
test-711-no-asm-forward-update-no-downgrade-RSA4096-SHA3: $(EXPVER) FORCE
@make test-111-forward-update-no-downgrade-RSA4096-SHA3 NO_ASM=1
test-712-no-asm-forward-update-no-downgrade-ED448-SHA3: $(EXPVER) FORCE
@make test-112-forward-update-no-downgrade-ED448-SHA3 NO_ASM=1
test-771-no-asm-forward-update-no-downgrade-NOSIGN: $(EXPVER) FORCE
@make test-171-forward-update-no-downgrade-NOSIGN NO_ASM=1
# Groups 80:91,97: Combinations of previous tests with NO_ASM
#
#
test-801-no-asm-smallstack-forward-update-no-downgrade: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-811-no-asm-smallstack-forward-update-no-downgrade-ECC: $(EXPVER) FORCE
@make test-11-forward-update-no-downgrade-ECC NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-821-no-asm-smallstack-forward-update-no-downgrade-SPI: $(EXPVER) FORCE
@make test-21-forward-update-no-downgrade-SPI NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-851-no-asm-smallstack-forward-update-no-downgrade-RSA: $(EXPVER) FORCE
@make test-51-forward-update-no-downgrade-RSA NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-871-no-asm-smallstack-forward-update-no-downgrade-RSA4096: $(EXPVER) FORCE
@make test-71-forward-update-no-downgrade-RSA-4096 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-874-no-asm-smallstack-forward-update-no-downgrade-ED448: $(EXPVER) FORCE
@make test-74-forward-update-no-downgrade-ED448 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-881-no-asm-smallstack-forward-update-no-downgrade-ED25519-SHA3: $(EXPVER) FORCE
@make test-81-forward-update-no-downgrade-ED25519-SHA3 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-891-no-asm-smallstack-forward-update-no-downgrade-ECC256-SHA3: $(EXPVER) FORCE
@make test-91-forward-update-no-downgrade-ECC256-SHA3 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-901-no-asm-smallstack-forward-update-no-downgrade-RSA2048-SHA3: $(EXPVER) FORCE
@make test-101-forward-update-no-downgrade-RSA2048-SHA3 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-911-no-asm-smallstack-forward-update-no-downgrade-RSA4096-SHA3: $(EXPVER) FORCE
@make test-111-forward-update-no-downgrade-RSA4096-SHA3 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-912-no-asm-smallstack-forward-update-no-downgrade-ED448-SHA3: $(EXPVER) FORCE
@make test-112-forward-update-no-downgrade-ED448-SHA3 NO_ASM=1 WOLFBOOT_SMALL_STACK=1
test-971-no-asm-smallstack-forward-update-no-downgrade-NOSIGN: $(EXPVER) FORCE
@make test-171-forward-update-no-downgrade-NOSIGN NO_ASM=1 WOLFBOOT_SMALL_STACK=1
# Groups 100:111,117: Combinations of previous tests with USE_FAST_MATH
#
#
test-1001-fastmath-smallstack-forward-update-no-downgrade: $(EXPVER) FORCE
@make test-01-forward-update-no-downgrade SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1011-fastmath-smallstack-forward-update-no-downgrade-ECC: $(EXPVER) FORCE
@make test-11-forward-update-no-downgrade-ECC SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1021-fastmath-smallstack-forward-update-no-downgrade-SPI: $(EXPVER) FORCE
@make test-21-forward-update-no-downgrade-SPI SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1051-fastmath-smallstack-forward-update-no-downgrade-RSA: $(EXPVER) FORCE
@make test-51-forward-update-no-downgrade-RSA SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1071-fastmath-smallstack-forward-update-no-downgrade-RSA4096: $(EXPVER) FORCE
@make test-71-forward-update-no-downgrade-RSA-4096 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1074-fastmath-smallstack-forward-update-no-downgrade-ED448: $(EXPVER) FORCE
@make test-74-forward-update-no-downgrade-ED448 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1081-fastmath-smallstack-forward-update-no-downgrade-ED25519-SHA3: $(EXPVER) FORCE
@make test-81-forward-update-no-downgrade-ED25519-SHA3 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1091-fastmath-smallstack-forward-update-no-downgrade-ECC256-SHA3: $(EXPVER) FORCE
@make test-91-forward-update-no-downgrade-ECC256-SHA3 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1101-fastmath-smallstack-forward-update-no-downgrade-RSA2048-SHA3: $(EXPVER) FORCE
@make test-101-forward-update-no-downgrade-RSA2048-SHA3 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1111-fastmath-smallstack-forward-update-no-downgrade-RSA4096-SHA3: $(EXPVER) FORCE
@make test-111-forward-update-no-downgrade-RSA4096-SHA3 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1112-fastmath-smallstack-forward-update-no-downgrade-ED448-SHA3: $(EXPVER) FORCE
@make test-112-forward-update-no-downgrade-ED448-SHA3 SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-1171-fastmath-smallstack-forward-update-no-downgrade-NOSIGN: $(EXPVER) FORCE
@make test-171-forward-update-no-downgrade-NOSIGN SPMATH=0 WOLFBOOT_SMALL_STACK=1
test-base: clean
@echo BASE Tests
@echo ==========
@echo
@echo
@make keysclean
make test-01-forward-update-no-downgrade
make test-02-forward-update-allow-downgrade test-03-rollback
@make keysclean
make test-11-forward-update-no-downgrade-ECC test-13-rollback-ECC
@make keysclean
make test-21-forward-update-no-downgrade-SPI test-23-rollback-SPI
make test-34-forward-self-update
@make keysclean
make test-44-forward-self-update-ECC
@make keysclean
make test-51-forward-update-no-downgrade-RSA
make test-53-rollback-RSA
@make keysclean
make test-61-forward-update-no-downgrade-TPM
make test-63-rollback-TPM
@make keysclean
make test-71-forward-update-no-downgrade-RSA-4096
make test-73-rollback-RSA-4096
@make keysclean
make test-74-forward-update-no-downgrade-ED448
make test-75-rollback-ED448
@make keysclean
make test-76-forward-update-no-downgrade-RSA3072
make test-77-rollback-RSA3072
test-sha3: clean
@echo SHA3 Tests
@echo ==========
@echo
@echo
@make keysclean
make test-81-forward-update-no-downgrade-ED25519-SHA3
@make keysclean
make test-91-forward-update-no-downgrade-ECC256-SHA3
@make keysclean
make test-101-forward-update-no-downgrade-RSA2048-SHA3
@make keysclean
make test-111-forward-update-no-downgrade-RSA4096-SHA3
@make keysclean
make test-112-forward-update-no-downgrade-ED448-SHA3
@make keysclean
make test-113-forward-update-no-downgrade-RSA3072-SHA3
test-tpm: clean
@echo TPM Tests
@echo ==========
@echo
@echo
@make keysclean
make test-161-forward-update-no-downgrade-TPM-RSA
make test-163-rollback-TPM-RSA
test-nosign: clean
@echo SIGN=NONE Tests
@echo ==========
@echo
@echo
@make keysclean
make test-171-forward-update-no-downgrade-NOSIGN
make test-173-rollback-NOSIGN
test-smallstack: clean
@echo WOLFBOOT_SMALL_STACK Tests
@echo ==========
@echo
@echo
@make keysclean
make test-201-smallstack-forward-update-no-downgrade
@make keysclean
make test-211-smallstack-forward-update-no-downgrade-ECC
@make keysclean
make test-221-smallstack-forward-update-no-downgrade-SPI
@make keysclean
make test-251-smallstack-forward-update-no-downgrade-RSA
@make keysclean
make test-271-smallstack-forward-update-no-downgrade-RSA4096
@make keysclean
make test-274-smallstack-forward-update-no-downgrade-ED448
@make keysclean
make test-281-smallstack-forward-update-no-downgrade-ED25519-SHA3
@make keysclean
make test-291-smallstack-forward-update-no-downgrade-ECC256-SHA3
@make keysclean
make test-301-smallstack-forward-update-no-downgrade-RSA2048-SHA3
@make keysclean
make test-311-smallstack-forward-update-no-downgrade-RSA4096-SHA3
@make keysclean
make test-312-smallstack-forward-update-no-downgrade-ED448-SHA3
@make keysclean
make test-371-smallstack-forward-update-no-downgrade-NOSIGN
test-fastmath: clean
@echo USE_FAST_MATH Tests
@echo ==========
@echo
@echo
@make keysclean
make test-401-fastmath-forward-update-no-downgrade
@make keysclean
make test-411-fastmath-forward-update-no-downgrade-ECC
@make keysclean
make test-421-fastmath-forward-update-no-downgrade-SPI
@make keysclean
make test-451-fastmath-forward-update-no-downgrade-RSA
@make keysclean
true || make test-471-fastmath-forward-update-no-downgrade-RSA4096 #Not enough RAM
@make keysclean
make test-474-fastmath-forward-update-no-downgrade-ED448
@make keysclean
make test-481-fastmath-forward-update-no-downgrade-ED25519-SHA3
@make keysclean
make test-491-fastmath-forward-update-no-downgrade-ECC256-SHA3
@make keysclean
make test-501-fastmath-forward-update-no-downgrade-RSA2048-SHA3
@make keysclean
true || make test-511-fastmath-forward-update-no-downgrade-RSA4096-SHA3 #Not enough RAM
@make keysclean
make test-512-fastmath-forward-update-no-downgrade-ED448-SHA3
@make keysclean
make test-571-fastmath-forward-update-no-downgrade-NOSIGN
test-no-asm: clean
@echo NO_ASM Tests
@echo ==========
@echo
@echo
@make keysclean
make test-601-no-asm-forward-update-no-downgrade
@make keysclean
make test-611-no-asm-forward-update-no-downgrade-ECC
@make keysclean
make test-621-no-asm-forward-update-no-downgrade-SPI
@make keysclean
make test-651-no-asm-forward-update-no-downgrade-RSA
@make keysclean
make test-671-no-asm-forward-update-no-downgrade-RSA4096
@make keysclean
make test-674-no-asm-forward-update-no-downgrade-ED448
@make keysclean
make test-681-no-asm-forward-update-no-downgrade-ED25519-SHA3
@make keysclean
make test-691-no-asm-forward-update-no-downgrade-ECC256-SHA3
@make keysclean
make test-701-no-asm-forward-update-no-downgrade-RSA2048-SHA3
@make keysclean
make test-711-no-asm-forward-update-no-downgrade-RSA4096-SHA3
@make keysclean
make test-712-no-asm-forward-update-no-downgrade-ED448-SHA3
@make keysclean
make test-771-no-asm-forward-update-no-downgrade-NOSIGN
test-no-asm-smallstack: clean
@echo NO_ASM+SMALLSTACK Tests
@echo ==========
@echo
@echo
@make keysclean
make test-801-no-asm-smallstack-forward-update-no-downgrade
@make keysclean
make test-811-no-asm-smallstack-forward-update-no-downgrade-ECC
@make keysclean
make test-821-no-asm-smallstack-forward-update-no-downgrade-SPI
@make keysclean
make test-851-no-asm-smallstack-forward-update-no-downgrade-RSA
@make keysclean
make test-871-no-asm-smallstack-forward-update-no-downgrade-RSA4096
@make keysclean
make test-874-no-asm-smallstack-forward-update-no-downgrade-ED448
@make keysclean
make test-881-no-asm-smallstack-forward-update-no-downgrade-ED25519-SHA3
@make keysclean
make test-891-no-asm-smallstack-forward-update-no-downgrade-ECC256-SHA3
@make keysclean
make test-901-no-asm-smallstack-forward-update-no-downgrade-RSA2048-SHA3
@make keysclean
make test-911-no-asm-smallstack-forward-update-no-downgrade-RSA4096-SHA3
@make keysclean
make test-912-no-asm-smallstack-forward-update-no-downgrade-ED448-SHA3
@make keysclean
make test-971-no-asm-smallstack-forward-update-no-downgrade-NOSIGN
test-fastmath-smallstack: clean
@echo USE_FAST_MATH + WOLFBOOT_SMALL_STACK Tests
@echo ==========
@echo
@echo
@make keysclean
make test-1001-fastmath-smallstack-forward-update-no-downgrade
@make keysclean
make test-1011-fastmath-smallstack-forward-update-no-downgrade-ECC
@make keysclean
make test-1021-fastmath-smallstack-forward-update-no-downgrade-SPI
@make keysclean
make test-1051-fastmath-smallstack-forward-update-no-downgrade-RSA
@make keysclean
make test-1071-fastmath-smallstack-forward-update-no-downgrade-RSA4096
@make keysclean
make test-1074-fastmath-smallstack-forward-update-no-downgrade-ED448
@make keysclean
make test-1081-fastmath-smallstack-forward-update-no-downgrade-ED25519-SHA3
@make keysclean
make test-1091-fastmath-smallstack-forward-update-no-downgrade-ECC256-SHA3
@make keysclean
make test-1101-fastmath-smallstack-forward-update-no-downgrade-RSA2048-SHA3
@make keysclean
make test-1111-fastmath-smallstack-forward-update-no-downgrade-RSA4096-SHA3
@make keysclean
make test-1112-fastmath-smallstack-forward-update-no-downgrade-ED448-SHA3
@make keysclean
make test-1171-fastmath-smallstack-forward-update-no-downgrade-NOSIGN
test-all: clean
make test-base
make test-sha3
make test-tpm
make test-nosign
make test-smallstack
make test-fastmath
make test-no-asm
make test-no-asm-smallstack
make test-fastmath-smallstack
make test-delta-update
test-size-all:
# Several limits below are raised relative to upstream. This branch bumps
# lib/wolfssl to the ti_c25 merge for CHAR_BIT!=8 wide-byte support, which
# costs 4-48 bytes depending on configuration (most of it in the no-ASM
# SP-math and ML-DSA paths). On top of that, every entry here is an
# STM32F407 build, so each one also carries the flat 48 bytes of
# hal_cache_invalidate() and its call from hal_flash_lock(). Each value
# is the measured size, matching upstream's convention.
# Measured with the CI container (ghcr.io/wolfssl/wolfboot-ci-arm).
make test-size SIGN=NONE LIMIT=5164 NO_ARM_ASM=1
make keysclean
make test-size SIGN=ED25519 LIMIT=12276 NO_ARM_ASM=1
make keysclean
make test-size SIGN=ECC256 LIMIT=18972 NO_ARM_ASM=1
make clean
make test-size SIGN=ECC256 NO_ASM=1 LIMIT=14016 NO_ARM_ASM=1
make keysclean
make test-size SIGN=RSA2048 LIMIT=11864 NO_ARM_ASM=1
make clean
make test-size SIGN=RSA2048 NO_ASM=1 LIMIT=12412 NO_ARM_ASM=1
make keysclean
make test-size SIGN=RSA4096 LIMIT=12164 NO_ARM_ASM=1
make clean
make test-size SIGN=RSA4096 NO_ASM=1 LIMIT=12708 NO_ARM_ASM=1
make keysclean
make test-size SIGN=ECC384 LIMIT=19656 NO_ARM_ASM=1
make clean
make test-size SIGN=ECC384 NO_ASM=1 LIMIT=15376 NO_ARM_ASM=1
make keysclean
make test-size SIGN=ED448 LIMIT=14288 NO_ARM_ASM=1
make keysclean
make test-size SIGN=RSA3072 LIMIT=12004 NO_ARM_ASM=1
make clean
make test-size SIGN=RSA3072 NO_ASM=1 LIMIT=12528 NO_ARM_ASM=1
make keysclean
make test-size SIGN=RSAPSS2048 LIMIT=13796 NO_ARM_ASM=1
make clean
make test-size SIGN=RSAPSS2048 NO_ASM=1 LIMIT=14344 NO_ARM_ASM=1
make keysclean
make test-size SIGN=RSAPSS3072 LIMIT=13964 NO_ARM_ASM=1
make clean
make test-size SIGN=RSAPSS3072 NO_ASM=1 LIMIT=14484 NO_ARM_ASM=1
make keysclean
make test-size SIGN=RSAPSS4096 LIMIT=14136 NO_ARM_ASM=1
make clean
make test-size SIGN=RSAPSS4096 NO_ASM=1 LIMIT=14676 NO_ARM_ASM=1
make keysclean
make test-size SIGN=LMS LMS_LEVELS=2 LMS_HEIGHT=5 LMS_WINTERNITZ=8 \
WOLFBOOT_SMALL_STACK=0 IMAGE_SIGNATURE_SIZE=2644 \
IMAGE_HEADER_SIZE?=5288 LIMIT=8168 NO_ARM_ASM=1
make keysclean
make test-size SIGN=XMSS XMSS_PARAMS='XMSS-SHA2_10_256' \
IMAGE_SIGNATURE_SIZE=2500 IMAGE_HEADER_SIZE?=4096 \
LIMIT=8820 NO_ARM_ASM=1
make keysclean
make clean
make test-size SIGN=ML_DSA ML_DSA_LEVEL=2 LIMIT=19678 \
IMAGE_SIGNATURE_SIZE=2420 IMAGE_HEADER_SIZE?=8192
Reference in New Issue View Git Blame Copy Permalink