mbed-os/features/device_key/TESTS/device_key/functionality/main.cpp

/* mbed Microcontroller Library
 * Copyright (c) 2018 ARM Limited
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include "DeviceKey.h"
#include "mbedtls/config.h"
#include "utest/utest.h"
#include "mbed_error.h"
#include "unity/unity.h"
#include "greentea-client/test_env.h"
#include "KVStore.h"
#include "KVMap.h"
#include "kv_config.h"
#include "TDBStore.h"

using namespace utest::v1;
using namespace mbed;

#if !DEVICEKEY_ENABLED
#error [NOT_SUPPORTED] DeviceKey needs to be enabled for this test
#else

#define MSG_VALUE_DUMMY "0"
#define MSG_VALUE_LEN 32
#define MSG_KEY_LEN 32

#define MSG_KEY_DEVICE_READY "ready"
#define MSG_KEY_DEVICE_FINISH "finish"
#define MSG_KEY_DEVICE_TEST_STEP1 "check_consistency_step1"
#define MSG_KEY_DEVICE_TEST_STEP2 "check_consistency_step2"
#define MSG_KEY_DEVICE_TEST_STEP3 "check_consistency_step3"
#define MSG_KEY_DEVICE_TEST_STEP4 "check_consistency_step4"
#define MSG_KEY_DEVICE_TEST_SUITE_ENDED "Test suite ended"

void generate_derived_key_consistency_16_byte_key_long_consistency_test(char *key);
void generate_derived_key_consistency_32_byte_key_long_consistency_test(char *key);

/*
 * Injection of a dummy key when there is no TRNG
 */
int inject_dummy_rot_key()
{
#if !DEVICE_TRNG && !defined(MBEDTLS_ENTROPY_HARDWARE_ALT)
    uint32_t key[DEVICE_KEY_16BYTE / sizeof(uint32_t)];

    memcpy(key, "1234567812345678", DEVICE_KEY_16BYTE);
    int size = DEVICE_KEY_16BYTE;
    DeviceKey &devkey = DeviceKey::get_instance();
    return devkey.device_inject_root_of_trust(key, size);
#else
    return DEVICEKEY_SUCCESS;
#endif
}

void generate_derived_key_long_consistency_test()
{
    static char key[MSG_KEY_LEN + 1] = { };

    strcpy(key, MSG_KEY_DEVICE_TEST_STEP1);
    generate_derived_key_consistency_16_byte_key_long_consistency_test(key);
    strcpy(key, MSG_KEY_DEVICE_TEST_STEP2);
    generate_derived_key_consistency_16_byte_key_long_consistency_test(key);
#ifndef MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
    strcpy(key, MSG_KEY_DEVICE_TEST_STEP3);
    generate_derived_key_consistency_32_byte_key_long_consistency_test(key);
    strcpy(key, MSG_KEY_DEVICE_TEST_STEP4);
    generate_derived_key_consistency_32_byte_key_long_consistency_test(key);
#endif

}

/*
 * Test the consistency of derived 16 byte key result after device reset.
 */
void generate_derived_key_consistency_16_byte_key_long_consistency_test(char *key)
{
    unsigned char output1[DEVICE_KEY_16BYTE];
    unsigned char output2[DEVICE_KEY_16BYTE];
    unsigned char empty_buffer[DEVICE_KEY_16BYTE];
    unsigned char salt[] = "Once upon a time, I worked for the circus and I lived in Omaha.";
    int key_type = DEVICE_KEY_16BYTE;
    size_t actual_size = 0;
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    size_t salt_size = sizeof(salt);

    if (strcmp(key, MSG_KEY_DEVICE_TEST_STEP1) == 0) {

        //Third step: Clear KVStore, create an ROT key, derive a 16 byte
        //key and store it in KVStore at index 15, At the end reset the device
        int ret = inner_store->reset();
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

        ret = DeviceKey::get_instance().generate_root_of_trust();
        if (ret != DEVICEKEY_SUCCESS) {
            ret = inject_dummy_rot_key();
        }
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

        memset(output1, 0, sizeof(output1));
        memset(empty_buffer, 0, sizeof(empty_buffer));
        ret = devkey.generate_derived_key(salt, salt_size, output1, key_type);
        TEST_ASSERT_EQUAL_INT32(0, ret);
        bool is_empty = !memcmp(empty_buffer, output1, sizeof(output1));
        TEST_ASSERT_FALSE(is_empty);

        ret = inner_store->set("SetForNext", output1, DEVICE_KEY_16BYTE, 0);
        TEST_ASSERT_EQUAL_INT32(0, ret);

    } else if (strcmp(key, MSG_KEY_DEVICE_TEST_STEP2) == 0) {

        //Second step: Read from KVStore at index 15 there should be a derived key there.
        //Now try to derive a key for 100 times and check it is the same key like before the reset.
        //At the end clear KVStore.
        int ret = inner_store->get("SetForNext", output1, DEVICE_KEY_16BYTE, &actual_size);
        TEST_ASSERT_EQUAL_ERROR_CODE(MBED_SUCCESS, ret);
        TEST_ASSERT_EQUAL_INT(DEVICE_KEY_16BYTE, actual_size);

        for (int i = 0; i < 100; i++) {
            memset(output2, 0, sizeof(output2));
            ret = devkey.generate_derived_key(salt, salt_size, output2, key_type);
            TEST_ASSERT_EQUAL_INT32(0, ret);
            TEST_ASSERT_EQUAL_UINT8_ARRAY(output1, output2, DEVICE_KEY_16BYTE);
        }

        ret = inner_store->reset();
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    } else {
        TEST_ASSERT_MESSAGE(false, "Unknown test step received");
    }
}

/*
 * Test the consistency of derived 32 byte key result after device reset.
 */
void generate_derived_key_consistency_32_byte_key_long_consistency_test(char *key)
{
    unsigned char output1[DEVICE_KEY_32BYTE];
    unsigned char output2[DEVICE_KEY_32BYTE];
    unsigned char empty_buffer[DEVICE_KEY_32BYTE];
    unsigned char salt[] = "The quick brown fox jumps over the lazy dog";
    int key_type = DEVICE_KEY_32BYTE;
    size_t actual_size = 0;
    size_t salt_size = sizeof(salt);
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    if (strcmp(key, MSG_KEY_DEVICE_TEST_STEP3) == 0) {

        //Third step: Clear KVStore, create an ROT key, derive a 32 byte
        //key and store it in KVStore at index 15, At the end reset the device
        int ret = inner_store->reset();
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

        ret = DeviceKey::get_instance().generate_root_of_trust();
        if (ret != DEVICEKEY_SUCCESS) {
            ret = inject_dummy_rot_key();
        }
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

        memset(output1, 0, sizeof(output1));
        memset(empty_buffer, 0, sizeof(empty_buffer));
        ret = devkey.generate_derived_key(salt, salt_size, output1, key_type);
        TEST_ASSERT_EQUAL_INT32(0, ret);
        bool is_empty = !memcmp(empty_buffer, output1, sizeof(output1));
        TEST_ASSERT_FALSE(is_empty);

        ret = inner_store->set("SetForNext", output1, DEVICE_KEY_32BYTE, 0);
        TEST_ASSERT_EQUAL_INT32(0, ret);

    } else if (strcmp(key, MSG_KEY_DEVICE_TEST_STEP4) == 0) {

        //Fourth step: Read from KVStore at index 15 there should be a derived key there.
        //Now try to derive a key for 100 times and check it is the same key like before the reset.
        //At the end clear KVStore.
        int ret = inner_store->get("SetForNext", output1, DEVICE_KEY_32BYTE, &actual_size);
        TEST_ASSERT_EQUAL_ERROR_CODE(MBED_SUCCESS, ret);
        TEST_ASSERT_EQUAL_INT(DEVICE_KEY_32BYTE, actual_size);

        for (int i = 0; i < 100; i++) {
            memset(output2, 0, sizeof(output2));
            ret = devkey.generate_derived_key(salt, salt_size, output2, key_type);
            TEST_ASSERT_EQUAL_INT32(0, ret);
            TEST_ASSERT_EQUAL_UINT8_ARRAY(output1, output2, DEVICE_KEY_32BYTE);
        }

        ret = inner_store->reset();
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    } else {
        TEST_ASSERT_MESSAGE(false, "Unknown test step received");
    }
}

/*
 * Test that wrong size of key is rejected when trying to persist a key
 */
void device_inject_root_of_trust_wrong_size_test()
{
    DeviceKey &devkey = DeviceKey::get_instance();
    uint32_t key[DEVICE_KEY_32BYTE / sizeof(uint32_t)];

    memcpy(key, "12345678123456788765432187654321", DEVICE_KEY_32BYTE);

    for (int i = 0; i < 50; i++) {
        if (DEVICE_KEY_16BYTE == i || DEVICE_KEY_32BYTE == i) {
            continue;
        }
        int ret = devkey.device_inject_root_of_trust(key, i);
        TEST_ASSERT_EQUAL_INT(DEVICEKEY_INVALID_KEY_SIZE, ret);
    }
}

/*
 * Test that a 16 byte size key is written to persistent storage
 */
void device_inject_root_of_trust_16_byte_size_test()
{
    DeviceKey &devkey = DeviceKey::get_instance();
    uint32_t rkey[DEVICE_KEY_16BYTE / sizeof(uint32_t)];
    uint32_t key[DEVICE_KEY_16BYTE / sizeof(uint32_t)];
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    memcpy(key, "1234567812345678", sizeof(key));
    ret = devkey.device_inject_root_of_trust(key, DEVICE_KEY_16BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    //Read the key from KVStore.
    memset(rkey, 0, sizeof(rkey));
    ret = ((TDBStore *)inner_store)->reserved_data_get(rkey, DEVICE_KEY_16BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);
    TEST_ASSERT_EQUAL_INT32_ARRAY(key, rkey, DEVICE_KEY_16BYTE / sizeof(uint32_t));
}

/*
 * Test that a 32 byte size key is written to persistent storage
 */
void device_inject_root_of_trust_32_byte_size_test()
{
    DeviceKey &devkey = DeviceKey::get_instance();
    uint32_t rkey[DEVICE_KEY_32BYTE / sizeof(uint32_t)];
    uint32_t key[DEVICE_KEY_32BYTE / sizeof(uint32_t)];
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    memcpy(key, "12345678123456788765432187654321", sizeof(key));
    ret = devkey.device_inject_root_of_trust(key, DEVICE_KEY_32BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    //Read the key from KVStore.
    memset(rkey, 0, sizeof(rkey));
    ret = ((TDBStore *)inner_store)->reserved_data_get(rkey, DEVICE_KEY_32BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);
    TEST_ASSERT_EQUAL_INT32_ARRAY(key, rkey, DEVICE_KEY_32BYTE / sizeof(uint32_t));
}

/*
 * Test that a key can be written to persistent storage only once.
 */
void device_inject_root_of_trust_several_times_test()
{
    DeviceKey &devkey = DeviceKey::get_instance();
    uint32_t key[DEVICE_KEY_32BYTE / sizeof(uint32_t)];
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    memcpy(key, "12345678123456788765432187654321", DEVICE_KEY_32BYTE);
    ret = devkey.device_inject_root_of_trust(key, DEVICE_KEY_32BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    //Trying to use the same key should fail.
    ret = devkey.device_inject_root_of_trust(key, DEVICE_KEY_32BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_ALREADY_EXIST, ret);

    //Trying to use different key should also fail.
    ret = devkey.device_inject_root_of_trust(key, DEVICE_KEY_16BYTE);
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_ALREADY_EXIST, ret);
}

/*
 * Test the consistency of derived 16 byte key result.
 */
void generate_derived_key_consistency_16_byte_key_test()
{
    unsigned char output1[DEVICE_KEY_16BYTE];
    unsigned char output2[DEVICE_KEY_16BYTE];
    unsigned char empty_buffer[DEVICE_KEY_16BYTE];
    unsigned char salt[] = "Once upon a time, I worked for the circus and I lived in Omaha.";
    int key_type = DEVICE_KEY_16BYTE;
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    ret = DeviceKey::get_instance().generate_root_of_trust();
    if (ret != DEVICEKEY_SUCCESS) {
        ret = inject_dummy_rot_key();
    }
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    size_t salt_size = sizeof(salt);
    memset(output1, 0, sizeof(output1));
    memset(empty_buffer, 0, sizeof(empty_buffer));
    ret = devkey.generate_derived_key(salt, salt_size, output1, key_type);
    TEST_ASSERT_EQUAL_INT32(0, ret);
    bool is_empty = !memcmp(empty_buffer, output1, sizeof(output1));
    TEST_ASSERT_FALSE(is_empty);

    for (int i = 0; i < 100; i++) {
        memset(output2, 0, sizeof(output2));
        ret = devkey.generate_derived_key(salt, salt_size, output2, key_type);
        TEST_ASSERT_EQUAL_INT32(0, ret);
        TEST_ASSERT_EQUAL_UINT8_ARRAY(output1, output2, DEVICE_KEY_16BYTE);
    }
}

/*
 * Test the consistency of derived 32 byte key result.
 */
void generate_derived_key_consistency_32_byte_key_test()
{
    unsigned char output1[DEVICE_KEY_32BYTE];
    unsigned char output2[DEVICE_KEY_32BYTE];
    unsigned char empty_buffer[DEVICE_KEY_32BYTE];
    unsigned char salt[] = "The quick brown fox jumps over the lazy dog";
    int key_type = DEVICE_KEY_32BYTE;
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    ret = DeviceKey::get_instance().generate_root_of_trust();
    if (ret != DEVICEKEY_SUCCESS) {
        ret = inject_dummy_rot_key();
    }
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    size_t salt_size = sizeof(salt);
    memset(output1, 0, sizeof(output1));
    memset(empty_buffer, 0, sizeof(empty_buffer));
    ret = devkey.generate_derived_key(salt, salt_size, output1, key_type);
    TEST_ASSERT_EQUAL_INT32(0, ret);
    bool is_empty = !memcmp(empty_buffer, output1, sizeof(output1));
    TEST_ASSERT_FALSE(is_empty);

    for (int i = 0; i < 100; i++) {
        memset(output2, 0, sizeof(output2));
        ret = devkey.generate_derived_key(salt, salt_size, output2, key_type);
        TEST_ASSERT_EQUAL_INT32(0, ret);
        TEST_ASSERT_EQUAL_UINT8_ARRAY(output1, output2, DEVICE_KEY_32BYTE);
    }
}

/*
 * Test request for 16 byte key is returning a correct key size.
 */
void generate_derived_key_key_type_16_test()
{
    unsigned char output[DEVICE_KEY_16BYTE * 2];
    unsigned char salt[] = "The quick brown fox jumps over the lazy dog";
    unsigned char expectedString[] = "Some String";
    int key_type = DEVICE_KEY_16BYTE;
    size_t salt_size = sizeof(salt);
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    ret = DeviceKey::get_instance().generate_root_of_trust();
    if (ret != DEVICEKEY_SUCCESS) {
        ret = inject_dummy_rot_key();
    }
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    memset(output, 0, DEVICE_KEY_16BYTE * 2);
    memcpy(output + DEVICE_KEY_16BYTE - sizeof(expectedString), expectedString, sizeof(expectedString));
    memcpy(output + DEVICE_KEY_16BYTE + 1, expectedString, sizeof(expectedString));

    ret = devkey.generate_derived_key(salt, salt_size, output, key_type);
    TEST_ASSERT_EQUAL_INT32(0, ret);
    //Test that we didn't override the buffer after the 16 byte size
    TEST_ASSERT_EQUAL_UINT8_ARRAY(output + DEVICE_KEY_16BYTE + 1, expectedString, sizeof(expectedString));
    //Test that we did override the buffer all 16 byte
    TEST_ASSERT(memcmp(output + DEVICE_KEY_16BYTE - sizeof(expectedString), expectedString, sizeof(expectedString)) != 0);
}

/*
 * Test request for 32 byte key is returning a correct key size.
 */
void generate_derived_key_key_type_32_test()
{
    unsigned char output[DEVICE_KEY_32BYTE * 2];
    unsigned char salt[] = "The quick brown fox jumps over the lazy dog";
    int key_type = DEVICE_KEY_32BYTE;
    size_t salt_size = sizeof(salt);
    unsigned char expectedString[] = "Some String";
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    ret = DeviceKey::get_instance().generate_root_of_trust();
    if (ret != DEVICEKEY_SUCCESS) {
        ret = inject_dummy_rot_key();
    }
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    memset(output, 0, DEVICE_KEY_32BYTE * 2);
    memcpy(output + DEVICE_KEY_32BYTE - sizeof(expectedString), expectedString, sizeof(expectedString));
    memcpy(output + DEVICE_KEY_32BYTE + 1, expectedString, sizeof(expectedString));

    ret = devkey.generate_derived_key(salt, salt_size, output, key_type);
    TEST_ASSERT_EQUAL_INT32(0, ret);
    //Test that we didn't override the buffer after the 32 byte size
    TEST_ASSERT_EQUAL_UINT8_ARRAY(output + DEVICE_KEY_32BYTE + 1, expectedString, sizeof(expectedString));
    //Test that we did override the buffer all 32 byte
    TEST_ASSERT(memcmp(output + DEVICE_KEY_32BYTE - sizeof(expectedString), expectedString, sizeof(expectedString)) != 0);
}

/*
 * Test request for unknown key size returns an error
 */
void generate_derived_key_wrong_key_type_test()
{
    unsigned char output[DEVICE_KEY_16BYTE];
    unsigned char salt[] = "The quick brown fox jumps over the lazy dog";
    size_t salt_size = sizeof(salt);
    DeviceKey &devkey = DeviceKey::get_instance();
    KVMap &kv_map = KVMap::get_instance();
    KVStore *inner_store = kv_map.get_internal_kv_instance(NULL);
    TEST_ASSERT_NOT_EQUAL(NULL, inner_store);

    int ret = inner_store->reset();
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    ret = DeviceKey::get_instance().generate_root_of_trust();
    if (ret != DEVICEKEY_SUCCESS) {
        ret = inject_dummy_rot_key();
    }
    TEST_ASSERT_EQUAL_INT(DEVICEKEY_SUCCESS, ret);

    memset(output, 0, DEVICE_KEY_16BYTE);
    ret = devkey.generate_derived_key(salt, salt_size, output, 12);//96 bit key type is not supported
    TEST_ASSERT_EQUAL_INT32(DEVICEKEY_INVALID_KEY_TYPE, ret);

}

utest::v1::status_t greentea_failure_handler(const Case *const source, const failure_t reason)
{
    greentea_case_failure_abort_handler(source, reason);
    return STATUS_CONTINUE;
}

//Currently there can be only one test that contains reset and it has to be the first test!
Case cases[] = {
    Case("Device Key - long consistency test",               generate_derived_key_long_consistency_test,        greentea_failure_handler),
    Case("Device Key - inject value wrong size",             device_inject_root_of_trust_wrong_size_test,       greentea_failure_handler),
    Case("Device Key - inject value 16 byte size",           device_inject_root_of_trust_16_byte_size_test,     greentea_failure_handler),
#ifndef MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
    Case("Device Key - inject value 32 byte size",           device_inject_root_of_trust_32_byte_size_test,     greentea_failure_handler),
#endif
    Case("Device Key - inject value several times",          device_inject_root_of_trust_several_times_test,    greentea_failure_handler),
    Case("Device Key - derived key consistency 16 byte key", generate_derived_key_consistency_16_byte_key_test, greentea_failure_handler),
    Case("Device Key - derived key consistency 32 byte key", generate_derived_key_consistency_32_byte_key_test, greentea_failure_handler),
    Case("Device Key - derived key key type 16",             generate_derived_key_key_type_16_test,             greentea_failure_handler),
#ifndef MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
    Case("Device Key - derived key key type 32",             generate_derived_key_key_type_32_test,             greentea_failure_handler),
#endif
    Case("Device Key - derived key wrong key type",          generate_derived_key_wrong_key_type_test,          greentea_failure_handler)
};

utest::v1::status_t greentea_test_setup(const size_t number_of_cases)
{
    GREENTEA_SETUP(45, "default_auto");
    return greentea_test_setup_handler(number_of_cases);
}

Specification specification(greentea_test_setup, cases, greentea_test_teardown_handler);

int main()
{
    bool ret = Harness::run(specification);

    return ret;
}

#endif // !DEVICEKEY_ENABLED