summaryrefslogtreecommitdiff
path: root/doc/pkcs11-coverage.txt
blob: 692af76c560af63ddb0389c469511e7e43f14969 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55


PKCS#11 COVERAGE

This is the test coverage of the p11-tests tool of the PKCS#11 interface.
We're anxious to complete this, if you have patches please do contribute.


C_Finalize
- Normal call
- Double finalize in a row

C_GetFunctionList
- See if returns same data as library entry point

C_GetInfo
- NULL argument
- Normal call
- Cryptoki version matches that in library entry point data
- Space padded strings in CK_INFO
- No flags set

C_GetSlotInfo
- NULL argument
- Normal call
- Space padded CK_SLOT_INFO fields
- CK_SLOT_INFO flags are from valid set
- Track CKF_TOKEN_PRESENT flag and compare to C_GetSlotList(TRUE)

C_GetSlotList
- NULL arguments
- Retrieving the count
- Passing buffer space along with zero count.
- Passing buffer space along with low count.
- Passing too much buffer space.

C_GetTokenInfo
- Null arguments
- Normal call
- Space padded CK_TOKEN_INFO fields
- CK_TOKEN_INFO flags are from valid set
- Validate token time when CKF_CLOCK_ON_TOKEN
- Calling on slot without token

C_Initialize
- Normal call
- Locking: no threads
- Locking: os locking
- Locking: app locking
- Locking: either locking
- Calls without initializing
- NULL argument
- Multiple initialize with C_Finalize between
- Double initialize in a row