Test remote attestation in UEFI app

experimental/uefi/app/Cargo.toml

@@ -9,7 +9,8 @@ license = "Apache-2.0"
 uefi = { version = "*", features = ["exts"] }
 uefi-services = "*"
 log = { version = "*" }
-oak_remote_attestation = { path = "../../../remote_attestation/rust" }
+ring = { path = "../../../third_party/ring" }
+anyhow = { version = "*", default-features = false }
 
 [dev-dependencies]
 uefi-services = { version = "*", features = ["qemu"] }

experimental/uefi/app/src/main.rs

@@ -26,6 +26,8 @@
 
 #[macro_use]
 extern crate log;
+extern crate alloc;
+extern crate anyhow;
 
 use uefi::{
     prelude::*,
@@ -36,6 +38,9 @@ use uefi::{
     },
 };
 
+#[cfg(test)]
+use ring::rand::SecureRandom;
+
 // The main entry point of the UEFI application.
 //
 // The choice of name (`_start`) is entirely arbitrary; what matters is that
@@ -130,3 +135,11 @@ fn test_simple() {
     let x = 1;
     assert_eq!(x, 1);
 }
+
+// Simple test source of randomness, for more straightforward debugging
+#[test_case]
+fn random_test() {
+    let rng = ring::rand::SystemRandom::new();
+    let mut buf = alloc::vec::Vec::with_capacity(8);
+    assert_eq!(rng.fill(&mut buf).is_err(), false);
+}

third_party/ring/Cargo.toml

@@ -33,6 +33,8 @@ include = [
     "benches/*.rs",
     "build.rs",
 
+    "stubs.c",
+
     "crypto/chacha/asm/chacha-armv4.pl",
     "crypto/chacha/asm/chacha-armv8.pl",
     "crypto/chacha/asm/chacha-x86.pl",

third_party/ring/build.rs

@@ -55,6 +55,7 @@ const RING_SRCS: &[(&[&str], &str)] = &[
     (&[X86], "crypto/chacha/asm/chacha-x86.pl"),
     (&[X86], "crypto/fipsmodule/modes/asm/ghash-x86.pl"),
 
+    (&[X86_64], "stubs.c"),
     (&[X86_64], "crypto/chacha/asm/chacha-x86_64.pl"),
     (&[X86_64], "crypto/fipsmodule/aes/asm/aesni-x86_64.pl"),
     (&[X86_64], "crypto/fipsmodule/aes/asm/vpaes-x86_64.pl"),

third_party/ring/stubs.c

@@ -0,0 +1,28 @@
+#include <stddef.h>
+
+/**
+ *
+  Stub function for win64 error handler API call inserted by nasm.
+  Stubbed as it is unavailable in UEFI.
+  Ref: https://github.com/openssl/openssl/issues/12712.
+  Inspired by: https://github.com/tianocore/edk2/blob/7c0ad2c33810ead45b7919f8f8d0e282dae52e71/CryptoPkg/Library/OpensslLib/X64/ApiHooks.c
+**/
+void *
+__imp_RtlVirtualUnwind (
+  void  *Args
+  )
+{
+  return NULL;
+}
+
+/**
+  Stub function for win64 routine used for exceedingly large variables.
+  Inserted Mby inGW, stubbed as it is unavailable in UEFI.
+  Ref 1: https://metricpanda.com/rival-fortress-update-45-dealing-with-__chkstk-__chkstk_ms-when-cross-compiling-for-windows/
+  Ref 2: https://github.com/golang/go/issues/6305
+  Inspired by: https://android.googlesource.com/platform/external/compiler-rt/+/ccaafe6%5E%21/#F1
+**/
+void ___chkstk_ms(void)
+{
+}
+