History

Alice Wang 1bf3d781d9 [apkverify] Merge idsig into apkverify package This CL merges idsig into apkverify package as apkverify is supposed to cover apk signature verification v3 and v4. Bug: 248999133 Test: libapkverify.test apkdmverity.test microdroid_manager_test Change-Id: Ieef2dcf93496164f8bb72cd4ee819ebb822f6142		2022-09-28 08:04:51 +00:00
..
README.md	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
create.sh	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.1M	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.1M.descriptor	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.1M.hash	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.4K	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.4K.descriptor	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.4K.hash	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.512	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.512.descriptor	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.512.hash	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.10000000	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.10000000.descriptor	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.10000000.hash	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.272629760	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.272629760.descriptor	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
input.272629760.hash	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
test.apex	…
test.apex.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
test.apex.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v2-only-truncated-cd.apk	…
v2-only-two-signers.apk	…
v3-only-cert-and-public-key-mismatch.apk	…
v3-only-empty.apk	…
v3-only-no-certs-in-sig.apk	…
v3-only-no-supported-sig-algs.apk	…
v3-only-signatures-and-digests-block-mismatch.apk	…
v3-only-unknown-additional-attr.apk	…
v3-only-unknown-additional-attr.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-unknown-additional-attr.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-unknown-pair-in-apk-sig-block.apk	…
v3-only-unknown-pair-in-apk-sig-block.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-unknown-pair-in-apk-sig-block.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-dsa-sha256-1024.apk	…
v3-only-with-dsa-sha256-2048-sig-does-not-verify.apk	…
v3-only-with-dsa-sha256-2048.apk	…
v3-only-with-dsa-sha256-3072-digest-mismatch.apk	…
v3-only-with-dsa-sha256-3072.apk	…
v3-only-with-ecdsa-sha256-p256.apk	…
v3-only-with-ecdsa-sha256-p256.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ecdsa-sha256-p256.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-ecdsa-sha256-p384.apk	…
v3-only-with-ecdsa-sha256-p384.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ecdsa-sha256-p384.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-ecdsa-sha256-p521.apk	…
v3-only-with-ecdsa-sha256-p521.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ecdsa-sha256-p521.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-ecdsa-sha512-p256.apk	…
v3-only-with-ecdsa-sha512-p256.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ecdsa-sha512-p256.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-ecdsa-sha512-p384-wrong-apk-sig-block-magic.apk	…
v3-only-with-ecdsa-sha512-p384.apk	…
v3-only-with-ecdsa-sha512-p384.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ecdsa-sha512-p384.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-ecdsa-sha512-p521-sig-does-not-verify.apk	…
v3-only-with-ecdsa-sha512-p521.apk	…
v3-only-with-ecdsa-sha512-p521.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ecdsa-sha512-p521.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-ignorable-unsupported-sig-algs.apk	…
v3-only-with-ignorable-unsupported-sig-algs.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-ignorable-unsupported-sig-algs.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha256-1024.apk	…
v3-only-with-rsa-pkcs1-sha256-1024.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha256-1024.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha256-2048.apk	…
v3-only-with-rsa-pkcs1-sha256-2048.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha256-2048.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha256-3072-sig-does-not-verify.apk	…
v3-only-with-rsa-pkcs1-sha256-3072.apk	…
v3-only-with-rsa-pkcs1-sha256-3072.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha256-3072.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha256-4096.apk	…
v3-only-with-rsa-pkcs1-sha256-4096.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha256-4096.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha256-8192.apk	…
v3-only-with-rsa-pkcs1-sha256-8192.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha256-8192.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha256-16384.apk	…
v3-only-with-rsa-pkcs1-sha256-16384.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha256-16384.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha512-1024.apk	…
v3-only-with-rsa-pkcs1-sha512-1024.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha512-1024.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha512-2048.apk	…
v3-only-with-rsa-pkcs1-sha512-2048.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha512-2048.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha512-3072.apk	…
v3-only-with-rsa-pkcs1-sha512-3072.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha512-3072.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha512-4096-apk-sig-block-size-mismatch.apk	…
v3-only-with-rsa-pkcs1-sha512-4096.apk	…
v3-only-with-rsa-pkcs1-sha512-4096.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha512-4096.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha512-8192-digest-mismatch.apk	…
v3-only-with-rsa-pkcs1-sha512-8192.apk	…
v3-only-with-rsa-pkcs1-sha512-8192.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha512-8192.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-rsa-pkcs1-sha512-16384.apk	…
v3-only-with-rsa-pkcs1-sha512-16384.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-rsa-pkcs1-sha512-16384.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v3-only-with-stamp.apk	…
v3-only-with-stamp.apk.apk_digest	[apk_digest][test] Check v4 apk_digest is valid	2022-09-20 07:27:53 +00:00
v3-only-with-stamp.apk.der	[apkverify][test] Verify public key in apk verification tests	2022-09-19 07:13:02 +00:00
v4-digest-v3-Sha256withEC.apk	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00
v4-digest-v3-Sha256withEC.apk.idsig	[apkverify] Merge idsig into apkverify package	2022-09-28 08:04:51 +00:00

README.md

About test data

.apk

test.apex is copied from ADBD apex built in AOSP.

$ apksigner verify -v test.apex
Verifies
Verified using v1 scheme (JAR signing): false
Verified using v2 scheme (APK Signature Scheme v2): false
Verified using v3 scheme (APK Signature Scheme v3): true
Verified using v4 scheme (APK Signature Scheme v4): false
Verified for SourceStamp: false
Number of signers: 1

APK files are copied from tools/apksig/src/test/resources/com/android/apksig/.

.der

.der files contain the expected public keys. When validating the public keys in tests, if the corresponding .der file is missing, there will be some text as follows in the failure message:

$ echo -en \\x30\\x59\\x30\\x13\\x06\\x07\\x2a\\x86\\x48\\xce\\x3d\\x02\\x01\\x06\\x08\\x2a\\x86\\x48\\xce\\x3d\\x03\\x01\\x07\\x03\\x42\\x00\\x04\\xa6\\x5f\\x11\\x3d\\x22\\xcb\\x49\\x13\\x90\\x83\\x07\\xac\\x31\\xee\\x2b\\xa0\\xe9\\x13\\x8b\\x78\\x5f\\xac\\x65\\x36\\xd1\\x4e\\xa2\\xce\\x90\\xd2\\xb4\\xbf\\xe1\\x94\\xb5\\x0c\\xdc\\x8e\\x16\\x9f\\x54\\xa7\\x3a\\x99\\x1e\\xf0\\xfa\\x76\\x32\\x98\\x25\\xbe\\x07\\x8c\\xc7\\x82\\x74\\x07\\x03\\xda\\x44\\xb4\\xd7\\xeb > tests/data/v3-only-with-stamp.apk.der

You just need to execute this command in the folder libs/apkverify to generate the corresponding .der file. After it, you can run the test again, and the test will pass.

Otherwise, you can also use the command apksigner verify --min-sdk-version 24 --print-certs-pem tests/data/v3-only-with-stamp.apk to get the public key in .pem format and then convert it to .der with openssl.

.apk_digest

.apk_digest files contain the expected apk_digest. They are generated the same way as .der when validating the apk_digest.