tem_ruby 0.10.1 → 0.10.2

data/lib/tem/definitions/isa.rb

@@ -0,0 +1,188 @@
+module Tem::Isa
+  Tem::Builders::Isa.define_isa self, Tem::Abi,
+                                :opcode_type => :tem_ubyte do |isa|
+    # 2 ST -> 1 ST
+    isa.instruction 0x10, :add
+    # 2 ST -> 1 ST
+    isa.instruction 0x11, :sub
+    # 2 ST -> 1 ST
+    isa.instruction 0x12, :mul
+    # 2 ST -> 1 ST
+    isa.instruction 0x13, :div
+    # 2 ST -> 1 ST
+    isa.instruction 0x14, :mod
+    # 2 ST -> 1 ST 
+    isa.instruction 0x1E, :rnd
+    
+  
+    # 2 ST -> 1 ST
+    isa.instruction 0x3A, :stbv
+    # 2 ST -> 1 ST
+    isa.instruction 0x3B, :stwv
+  
+    # 2 ST -> 1 ST
+    isa.instruction 0x5B, :stk
+    
+  
+    # 1 ST, 1 IM -> 1 ST
+    isa.instruction 0x38, :stb, {:name => :to, :type => :tem_ushort}
+    # 1 ST, 1 IM -> 1 ST
+    isa.instruction 0x39, :stw, {:name => :to, :type => :tem_ushort}
+    
+  
+    # 2 IM -> 1 ST
+    isa.instruction 0x48, :psupfxb, {:name => :addr, :type => :tem_ushort},
+                                    {:name => :from, :type => :tem_ushort}
+    # 2 ST -> 1 ST
+    isa.instruction 0x49, :psupvb
+    # 2 IM -> 1 ST
+    isa.instruction 0x4A, :pswrfxb, {:name => :addr, :type => :tem_ushort},
+                                    {:name => :from, :type => :tem_ushort}
+    # 2 ST -> 1 ST
+    isa.instruction 0x4B, :pswrvb
+    # 2 IM -> 1 ST
+    isa.instruction 0x4C, :psrdfxb, {:name => :addr, :type => :tem_ushort},
+                                    {:name => :to, :type => :tem_ushort}
+    # 2 ST -> 1 ST
+    isa.instruction 0x4D, :psrdvb
+    # 2 IM -> 1 ST
+    isa.instruction 0x4E, :pshkfxb, {:name => :addr, :type => :tem_ushort}
+    # 2 ST -> 1 ST
+    isa.instruction 0x4F, :pshkvb
+    
+    
+    # 3 IM -> 1 ST
+    isa.instruction 0x18, :mdfxb, {:name => :size, :type => :tem_ushort},
+                                  {:name => :from, :type => :tem_ushort},
+                                  {:name => :to, :type => :tem_ushort}
+    # 3 ST -> 1 ST
+    isa.instruction 0x19, :mdvb
+    # 3 IM -> 1 ST
+    isa.instruction 0x1A, :mcmpfxb, {:name => :size, :type => :tem_ushort},
+                                    {:name => :op1, :type => :tem_ushort},
+                                    {:name => :op2, :type => :tem_ushort}
+    # 3 ST -> 1 ST  
+    isa.instruction 0x1B, :mcmpvb
+    # 3 IM -> 1 ST
+    isa.instruction 0x1C, :mcfxb, {:name => :size, :type => :tem_ushort},
+                                  {:name => :from, :type => :tem_ushort},
+                                  {:name => :to, :type => :tem_ushort}
+    # 3 ST -> 1 ST
+    isa.instruction 0x1D, :mcvb
+    
+    # 1 ST, 3 IM -> 1 ST   
+    isa.instruction 0x50, :kefxb, {:name => :size, :type => :tem_ushort},
+                                  {:name => :from, :type => :tem_ushort},
+                                  {:name => :to, :type => :tem_ushort}
+    # 4 ST -> 1 ST
+    isa.instruction 0x51, :kevb
+    # 1 ST, 3 IM -> 1 ST   
+    isa.instruction 0x52, :kdfxb, {:name => :size, :type => :tem_ushort},
+                                  {:name => :from, :type => :tem_ushort},
+                                  {:name => :to, :type => :tem_ushort}
+    # 4 ST -> 1 ST
+    isa.instruction 0x53, :kdvb
+    # 1 ST, 3 IM -> 1 ST   
+    isa.instruction 0x54, :ksfxb, {:name => :size, :type => :tem_ushort},
+                                  {:name => :from, :type => :tem_ushort},
+                                  {:name => :to, :type => :tem_ushort}
+    # 4 ST -> 1 ST
+    isa.instruction 0x55, :ksvb   
+    # 1 ST, 3 IM -> 1 ST   
+    isa.instruction 0x56, :kvsfxb, {:name => :size, :type => :tem_ushort},
+                                   {:name => :from, :type => :tem_ushort},
+                                   {:name => :signature, :type => :tem_ushort}
+    # 4 ST -> 1 ST
+    isa.instruction 0x57, :kvsvb
+      
+  
+    # 0 ST -> 0 ST; IP
+    isa.instruction 0x27, :jmp, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+    # 1 ST -> 0 ST; IP
+    isa.instruction 0x21, :jz, {:name => :to, :type => :tem_ushort,
+                                :reladdr => 2}
+    isa.instruction 0x21, :je, {:name => :to, :type => :tem_ushort,
+                                :reladdr => 2}
+    # 1 ST -> 0 ST; IP
+    isa.instruction 0x26, :jnz, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+    isa.instruction 0x26, :jne, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+    # 1 ST -> 0 ST; IP
+    isa.instruction 0x22, :ja, {:name => :to, :type => :tem_ushort,
+                                :reladdr => 2}
+    isa.instruction 0x22, :jg, {:name => :to, :type => :tem_ushort,
+                                :reladdr => 2}
+    # 1 ST -> 0 ST; IP
+    isa.instruction 0x23, :jae, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+    isa.instruction 0x23, :jge, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+    # 1 ST -> 0 ST; IP
+    isa.instruction 0x24, :jb, {:name => :to, :type => :tem_ushort,
+                                :reladdr => 2}
+    isa.instruction 0x24, :jl, {:name => :to, :type => :tem_ushort,
+                                :reladdr => 2}
+    # 1 ST -> 0 ST; IP
+    isa.instruction 0x25, :jbe, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+    isa.instruction 0x25, :jle, {:name => :to, :type => :tem_ushort,
+                                 :reladdr => 2}
+  
+    # 1 IM_B -> 1 ST
+    isa.instruction 0x30, :ldbc, {:name => :const, :type => :tem_byte}
+    # 1 IM -> 1 ST
+    isa.instruction 0x31, :ldwc, {:name => :const, :type => :tem_short}
+    # 1 ST -> 1 ST
+    isa.instruction 0x32, :ldb, {:name => :from, :type => :tem_ushort}
+    # 1 ST -> 1 ST
+    isa.instruction 0x33, :ldw, {:name => :from, :type => :tem_ushort}
+    # 1 ST -> 1 ST
+    isa.instruction 0x36, :ldbv
+    # 1 ST -> 1 ST
+    isa.instruction 0x37, :ldwv
+  
+    # 1 ST -> 0 ST
+    isa.instruction 0x42, :outnew
+    # 1 ST -> 0 ST
+    isa.instruction 0x44, :outb
+    # 1 ST -> 0 ST
+    isa.instruction 0x45, :outw
+  
+    # 1 ST -> 0 ST
+    isa.instruction 0x34, :pop
+    # 2 ST -> 0 ST
+    isa.instruction 0x35, :pop2
+  
+    # 1 IM, x ST -> 2x ST  
+    isa.instruction 0x3C, :dupn, {:name => :n, :type => :tem_ubyte}
+    # 1 IM, x ST -> x ST
+    isa.instruction 0x3D, :flipn, {:name => :n, :type => :tem_ubyte}
+  
+    # 2 IM -> 0 ST
+    isa.instruction 0x40, :outfxb, {:name => :size, :type => :tem_ushort},
+                                   {:name => :from, :type => :tem_ushort}
+    # 2 ST -> 0 ST
+    isa.instruction 0x41, :outvlb, {:name => :from, :type => :tem_ushort} 
+  
+    
+    # 1 IM, 1 ST -> 0 ST
+    isa.instruction 0x43, :outvb
+    # 0 ST -> 0 ST;;
+    isa.instruction 0x46, :halt
+    # 1 ST -> 0 ST
+    isa.instruction 0x47, :psrm
+    
+    # 1 ST -> 1 ST
+    isa.instruction 0x5A, :rdk     
+    # 1 ST -> 0 ST
+    isa.instruction 0x5C, :relk
+    
+    isa.instruction 0x5D, :ldkl
+    # 1 IM_B -> 2 ST
+    isa.instruction 0x5E, :genkp, {:name => :type, :type => :tem_ubyte }
+    # 1 ST, 1 IM -> 1 ST
+    isa.instruction 0x5F, :authk, {:name => :auth, :type => :tem_ushort }
+  end  
+end

data/lib/tem/ecert.rb

@@ -1,30 +1,30 @@
 require 'openssl'
 
 module Tem::ECert
-  # writes an Endorsement Certificate to the TEM's tag
+  # Writes an Endorsement Certificate to the TEM's tag.
   def set_ecert(ecert)
     set_tag ecert.to_der.unpack('C*')
   end
   
-  # retrieves the TEM's Endorsement Certificate
+  # Retrieves the TEM's Endorsement Certificate.
   def endorsement_cert
     OpenSSL::X509::Certificate.new get_tag[2..-1].pack('C*')
   end
   
-  # retrieves the certificate of the TEM's Manfacturer (CA)
+  # Retrieves the certificate of the TEM's Manfacturer (CA).
   def manufacturer_cert
     Tem::CA.ca_cert
   end
   
-  # retrieves the TEM's Public Endorsement Key
+  # Retrieves the TEM's Public Endorsement Key.
   def pubek
     Tem::Key.new_from_ssl_key endorsement_cert.public_key
   end
   
-  # emits a TEM
+  # Drives a TEM though the emitting process.
   def emit
     emit_sec = assemble do |s|
-      # generate EK, compare with (0, 1)
+      # Generate Endorsement Key pair, should end up in slots (0, 1).
       s.genkp :type => 0
       s.ldbc 1
       s.sub
@@ -33,7 +33,7 @@ module Tem::ECert
       s.sub
       s.jne :to => :not_ok
       
-      # generate and output random authorization for PrivEK
+      # Generate and output random authorization for PrivEK.
       s.ldbc 20
       s.dupn :n => 1
       s.outnew
@@ -41,25 +41,24 @@ module Tem::ECert
       s.dupn :n => 2
       s.rnd
       s.outvb
-      # set authorizations for PrivEK and PubkEK
+      # Set authorizations for PrivEK and PubkEK.
       s.ldbc 0
       s.authk :auth => :privek_auth
-      s.ldbc 1 # PubEK always has its initial authorization be all zeroes
+      s.ldbc 1 # PubEK always has its initial authorization be all zeroes.
       s.authk :auth => :pubek_auth
       s.halt
       
-      # emitting didn't go well, return nothing and leave
+      # Emitting didn't go well, return nothing and leave.
       s.label :not_ok
       s.ldbc 0
       s.outnew
       s.halt
       
       s.label :privek_auth
-      s.filler :ubyte, 20
+      s.zeros :tem_ubyte, 20
       s.label :pubek_auth
-      s.filler :ubyte, 20
-      s.stack
-      s.extra 8
+      s.zeros :tem_ubyte, 20
+      s.stack 4
     end
     
     r = execute emit_sec
@@ -74,5 +73,5 @@ module Tem::ECert
       set_ecert ecert
       return { :privek_auth => privk_auth }
     end
-  end  
-end
+  end
+end

data/lib/tem/sec_exec_error.rb

@@ -1,14 +1,23 @@
 # raised when executing a SEC 
 class Tem::SecExecError < StandardError
+  attr_reader :line_info
   attr_reader :buffer_state, :key_state
   attr_reader :trace
   
-  def initialize(backtrace, tem_trace, buffer_state, key_state)
+  def initialize(line_info, tem_trace, buffer_state, key_state)
     super 'SEC execution failed on the TEM'
-    set_backtrace backtrace
+    @line_info = line_info
+    line_ip, atom, backtrace = *line_info
+    @atom = atom
+    if tem_trace and tem_trace[:ip]
+      @ip_delta = tem_trace[:ip] - line_ip
+    else
+      @ip_delta = 0
+    end
     @trace = tem_trace
     @buffer_state = buffer_state
     @key_state = key_state
+    set_backtrace backtrace
   end
   
   def bstat_str
@@ -36,7 +45,16 @@ class Tem::SecExecError < StandardError
   end
   
   def to_s
-    "SECpack execution generated an exception on the TEM\nTEM Trace: " + trace_str + "\nTEM Buffer Status:\n" + bstat_str + "\nTEM Key Status:\n" + kstat_str
+    string = <<ENDSTRING
+SECpack execution generated an exception on the TEM
+
+TEM Trace: #{trace_str}
+TEM Buffer Status:#{bstat_str}
+TEM Key Status:#{kstat_str}
+
+TEM execution error at #{@atom}+#{@ip_delta}
+ENDSTRING
+    string.strip
   end
   
   def inspect

data/lib/tem/seclosures.rb

@@ -2,8 +2,8 @@ require 'yaml'
 
 module Tem::SeClosures
   module MixedMethods
-    def assemble(&sec_block)
-      return Tem::SecAssembler.new(self).assemble(&sec_block)
+    def assemble(&block)
+      return Tem::Assembler.assemble(&block)
     end
   end
   
@@ -53,9 +53,13 @@ module Tem::SeClosures
         # there is an exception, try to collect the trace
         b_stat = stat_buffers() rescue nil
         k_stat = stat_keys() rescue nil
-        trace = sec_trace()        
-        backtrace = (trace && trace[:ip]) ? secpack.stack_for_ip(trace[:ip]) : Kernel.caller
-        sec_exception = Tem::SecExecError.new backtrace, trace, b_stat, k_stat
+        trace = sec_trace()
+        if trace and trace[:ip]
+          line_info = secpack.line_info_for_ip(trace[:ip])
+        else
+          line_info = [0, :unknown, Kernel.caller]
+        end
+        sec_exception = Tem::SecExecError.new line_info, trace, b_stat, k_stat
         break
       when 4 # persistent store fault
         solve_psfault

data/lib/tem/secpack.rb

@@ -1,12 +1,13 @@
 require 'yaml'
 
 class Tem::SecPack
-  @@serialized_members = [:body, :labels, :ep, :sp, :extra_bytes, :signed_bytes, :encrypted_bytes, :bound, :lines]
-  
+  @@serialized_ivars = [:body, :labels, :ep, :sp, :extra_bytes, :signed_bytes,
+                        :encrypted_bytes, :bound, :lines]    
+ 
   def self.new_from_array(array)
-    arg_hash = { :tem_class => Tem::Session }
-    @@serialized_members.each_index { |i| arg_hash[@@serialized_members[i]] = array[i] }
-    self.new(arg_hash)
+    arg_hash = { }
+    @@serialized_ivars.each_with_index { |name, i| arg_hash[name] = array[i] }
+    self.new arg_hash
   end
   
   def self.new_from_yaml_str(yaml_str)
@@ -15,7 +16,7 @@ class Tem::SecPack
   end
 
   def to_array
-    @@serialized_members.map { |m| self.instance_variable_get('@' + m.to_s) }
+    @@serialized_ivars.map { |m| self.instance_variable_get :"@#{m}" }
   end
   
   def to_yaml_str
@@ -25,32 +26,41 @@ class Tem::SecPack
   attr_reader :body, :bound
   attr_reader :lines
   
+  def trim_extra_bytes
+    @extra_bytes = 0
+    while @extra_bytes < @body.length
+      break if @body[-@extra_bytes - 1] != 0
+      @extra_bytes += 1
+    end
+    @body.slice! @body.length - @extra_bytes, @extra_bytes    
+  end
+  
+  def expand_extra_bytes
+    @body += [0] * @extra_bytes
+    @extra_bytes = 0
+  end
+  
   def initialize(args)
-    @tem_klass = args[:tem_class]
-    @@serialized_members.map { |m| self.instance_variable_set "@#{m}", args[m] }
+    @@serialized_ivars.map { |m| self.instance_variable_set :"@#{m}", args[m] }
     @bound ||= false
+    
+    @extra_bytes ||= 0
+    # trim_extra_bytes if @extra_bytes == 0
   end
   
   def label_address(label_name)
     @labels[label_name.to_sym]
   end
-  
-  def tem_header
-    # TODO: use 0x0100 (no tracing) depending on options
-    hh = [0x0101, @signed_bytes || 0, @encrypted_bytes || 0, @extra_bytes, @sp,
-          @ep].map { |n| @tem_klass.to_tem_ushort n }.flatten
-    hh += Array.new((@tem_klass.tem_hash [0]).length - hh.length, 0)
-    return hh
-  end
-  
+    
   def bind(public_key, encrypt_from = 0, plaintext_from = 0)
-    encrypt_from = @labels[encrypt_from.to_sym] unless encrypt_from.instance_of? Numeric
-    plaintext_from = @labels[plaintext_from.to_sym] unless plaintext_from.instance_of? Numeric
+    expand_extra_bytes
+    encrypt_from = @labels[encrypt_from.to_sym] unless encrypt_from.kind_of? Numeric
+    plaintext_from = @labels[plaintext_from.to_sym] unless plaintext_from.kind_of? Numeric
     
     @signed_bytes = encrypt_from
     @encrypted_bytes = plaintext_from - encrypt_from
     
-    secpack_sig = @tem_klass.tem_hash [tem_header, @body[0...plaintext_from]].flatten
+    secpack_sig = Tem::Abi.tem_hash [tem_header, @body[0...plaintext_from]].flatten
     crypt = public_key.encrypt [@body[encrypt_from...plaintext_from], secpack_sig].flatten
     @body = [@body[0...encrypt_from], crypt, @body[plaintext_from..-1]].flatten
       
@@ -65,23 +75,33 @@ class Tem::SecPack
       end
     }.flatten)]
     
+    #trim_extra_bytes
     @bound = true
   end
   
-  def tem_formatted_body()
-    return [tem_header, @body].flatten 
+  def tem_header
+    # TODO: use 0x0100 (no tracing) depending on options
+    hh = [0x0101, @signed_bytes || 0, @encrypted_bytes || 0, @extra_bytes, @sp,
+          @ep].map { |n| Tem::Abi.to_tem_ushort n }.flatten
+    hh += Array.new((Tem::Abi.tem_hash [0]).length - hh.length, 0)
+    return hh
+  end
+  private :tem_header
+  
+  def tem_formatted_body
+    # HACK: Ideally, we would allocate a bigger buffer, and then only fill part
+    #       of it. Realistically, we'll just send in extra_bytes 0s.
+    [tem_header, @body, [0] * @extra_bytes].flatten
   end
   
-  def stack_for_ip(ip)
+  def line_info_for_ip(ip)
     return nil unless @lines
 
-    max_value = -1
-    st = nil
-    @lines.each do |st_ip, stack|
-      # if something breaks, it's likely to happen after the opcode
-      # of the offending instruction has been read, so assume offending_ip < ip
-      max_value, st = st_ip, stack if st_ip < ip && max_value < st_ip
+    @lines.reverse_each do |info|
+      # If something breaks, it's likely to happen after the opcode of the 
+      # offending instruction has been read, so assume offending_ip < ip.
+      return info if ip >= info[0]
     end
-    return st
+    return info.first
   end
 end

data/lib/tem/toolkit.rb

@@ -24,12 +24,11 @@ module Tem::Toolkit
       s.halt
       s.label :key_auth
       if authz.nil?
-        s.filler :ubyte, 20
+        s.zeros :tem_ubyte, 20
       else
-        s.immed :ubyte, authz
+        s.data :tem_ubyte, authz
       end
-      s.stack
-      s.extra 8
+      s.stack 4
     end
     
     kp_buffer = execute gen_sec
@@ -55,9 +54,8 @@ module Tem::Toolkit
       s.stk
       s.halt
       s.label :key_auth
-      s.immed :ubyte, authz
-      s.stack
-      s.extra 8      
+      s.data :tem_ubyte, authz
+      s.stack 4
     end
     
     key_string = execute read_sec
@@ -75,9 +73,8 @@ module Tem::Toolkit
       s.outb
       s.halt
       s.label :key_auth
-      s.immed :ubyte, authz
-      s.stack
-      s.extra 8
+      s.data :tem_ubyte, authz
+      s.stack 4
     end
     
     execute del_sec
@@ -93,13 +90,12 @@ module Tem::Toolkit
       s.outb
       s.halt
       s.label :key_data
-      s.immed :ubyte, key.to_tem_key
+      s.data :tem_ubyte, key.to_tem_key
       s.label :key_auth
-      s.immed :ubyte, authz
-      s.stack
-      s.extra 8
+      s.data :tem_ubyte, authz
+      s.stack 4
     end
     id_string = execute post_sec
     return read_tem_ubyte(id_string, 0)
   end
-end
+end

data/lib/tem/transport/jcop_remote_protocol.rb

@@ -30,14 +30,22 @@ module JcopRemoteProtocol
   def recv_message(socket)
     header = ''
     while header.length < 4
-      partial = socket.recv 4 - header.length
+      begin
+        partial = socket.recv 4 - header.length
+      rescue  # Abrupt hangups result in exceptions that we catch here.        
+        return nil
+      end
       return false if partial.length == 0
       header += partial
     end
     message_type, node_address, data_length = *header.unpack('CCn')
     raw_data = ''
     while raw_data.length < data_length
-      partial = socket.recv data_length - raw_data.length
+      begin
+        partial = socket.recv data_length - raw_data.length
+      rescue  # Abrupt hangups result in exceptions that we catch here.
+        return nil
+      end
       return false if partial.length == 0
       raw_data += partial
     end

data/lib/tem_ruby.rb

@@ -23,9 +23,13 @@ require 'tem/keys/asymmetric.rb'
 require 'tem/keys/symmetric.rb'
 
 require 'tem/builders/abi.rb'
+require 'tem/builders/assembler.rb'
 require 'tem/builders/crypto.rb'
+require 'tem/builders/isa.rb'
 
 require 'tem/definitions/abi.rb'
+require 'tem/definitions/isa.rb'
+require 'tem/definitions/assembler.rb'
 
 require 'tem/auto_conf.rb'
 require 'tem/apdus/buffers.rb'
@@ -36,8 +40,6 @@ require 'tem/apdus/tag.rb'
 require 'tem/ca.rb'
 require 'tem/ecert.rb'
 require 'tem/hive.rb'
-require 'tem/sec_assembler.rb'
-require 'tem/sec_opcodes.rb'
 require 'tem/sec_exec_error.rb'
 require 'tem/seclosures.rb'
 require 'tem/secpack.rb'

data/tem_ruby.gemspec

@@ -2,23 +2,23 @@
 
 Gem::Specification.new do |s|
   s.name = %q{tem_ruby}
-  s.version = "0.10.1"
+  s.version = "0.10.2"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
   s.authors = ["Victor Costan"]
-  s.date = %q{2009-05-26}
+  s.date = %q{2009-05-31}
   s.description = %q{TEM (Trusted Execution Module) driver, written in and for ruby.}
   s.email = %q{victor@costan.us}
   s.executables = ["tem_bench", "tem_ca", "tem_irb", "tem_proxy", "tem_stat"]
-  s.extra_rdoc_files = ["bin/tem_bench", "bin/tem_ca", "bin/tem_irb", "bin/tem_proxy", "bin/tem_stat", "CHANGELOG", "lib/tem/_cert.rb", "lib/tem/apdus/buffers.rb", "lib/tem/apdus/keys.rb", "lib/tem/apdus/lifecycle.rb", "lib/tem/apdus/tag.rb", "lib/tem/auto_conf.rb", "lib/tem/builders/abi.rb", "lib/tem/builders/crypto.rb", "lib/tem/ca.rb", "lib/tem/definitions/abi.rb", "lib/tem/ecert.rb", "lib/tem/hive.rb", "lib/tem/keys/asymmetric.rb", "lib/tem/keys/key.rb", "lib/tem/keys/symmetric.rb", "lib/tem/sec_assembler.rb", "lib/tem/sec_exec_error.rb", "lib/tem/sec_opcodes.rb", "lib/tem/seclosures.rb", "lib/tem/secpack.rb", "lib/tem/tem.rb", "lib/tem/toolkit.rb", "lib/tem/transport/auto_configurator.rb", "lib/tem/transport/java_card_mixin.rb", "lib/tem/transport/jcop_remote_protocol.rb", "lib/tem/transport/jcop_remote_server.rb", "lib/tem/transport/jcop_remote_transport.rb", "lib/tem/transport/pcsc_transport.rb", "lib/tem/transport/transport.rb", "lib/tem_ruby.rb", "LICENSE", "README"]
-  s.files = ["bin/tem_bench", "bin/tem_ca", "bin/tem_irb", "bin/tem_proxy", "bin/tem_stat", "CHANGELOG", "dev_ca/ca_cert.cer", "dev_ca/ca_cert.pem", "dev_ca/ca_key.pem", "dev_ca/config.yml", "lib/tem/_cert.rb", "lib/tem/apdus/buffers.rb", "lib/tem/apdus/keys.rb", "lib/tem/apdus/lifecycle.rb", "lib/tem/apdus/tag.rb", "lib/tem/auto_conf.rb", "lib/tem/builders/abi.rb", "lib/tem/builders/crypto.rb", "lib/tem/ca.rb", "lib/tem/definitions/abi.rb", "lib/tem/ecert.rb", "lib/tem/hive.rb", "lib/tem/keys/asymmetric.rb", "lib/tem/keys/key.rb", "lib/tem/keys/symmetric.rb", "lib/tem/sec_assembler.rb", "lib/tem/sec_exec_error.rb", "lib/tem/sec_opcodes.rb", "lib/tem/seclosures.rb", "lib/tem/secpack.rb", "lib/tem/tem.rb", "lib/tem/toolkit.rb", "lib/tem/transport/auto_configurator.rb", "lib/tem/transport/java_card_mixin.rb", "lib/tem/transport/jcop_remote_protocol.rb", "lib/tem/transport/jcop_remote_server.rb", "lib/tem/transport/jcop_remote_transport.rb", "lib/tem/transport/pcsc_transport.rb", "lib/tem/transport/transport.rb", "lib/tem_ruby.rb", "LICENSE", "Manifest", "Rakefile", "README", "test/_test_cert.rb", "test/builders/test_abi_builder.rb", "test/tem_test_case.rb", "test/test_driver.rb", "test/test_exceptions.rb", "test/test_tem.rb", "test/transport/test_auto_configurator.rb", "test/transport/test_java_card_mixin.rb", "test/transport/test_jcop_remote.rb", "timings/blank_bound_secpack.rb", "timings/blank_sec.rb", "timings/devchip_decrypt.rb", "timings/post_buffer.rb", "timings/simple_apdu.rb", "timings/timings.rb", "timings/vm_perf.rb", "timings/vm_perf_bound.rb", "tem_ruby.gemspec"]
+  s.extra_rdoc_files = ["bin/tem_bench", "bin/tem_ca", "bin/tem_irb", "bin/tem_proxy", "bin/tem_stat", "CHANGELOG", "lib/tem/_cert.rb", "lib/tem/apdus/buffers.rb", "lib/tem/apdus/keys.rb", "lib/tem/apdus/lifecycle.rb", "lib/tem/apdus/tag.rb", "lib/tem/auto_conf.rb", "lib/tem/builders/abi.rb", "lib/tem/builders/assembler.rb", "lib/tem/builders/crypto.rb", "lib/tem/builders/isa.rb", "lib/tem/ca.rb", "lib/tem/definitions/abi.rb", "lib/tem/definitions/assembler.rb", "lib/tem/definitions/isa.rb", "lib/tem/ecert.rb", "lib/tem/hive.rb", "lib/tem/keys/asymmetric.rb", "lib/tem/keys/key.rb", "lib/tem/keys/symmetric.rb", "lib/tem/sec_exec_error.rb", "lib/tem/seclosures.rb", "lib/tem/secpack.rb", "lib/tem/tem.rb", "lib/tem/toolkit.rb", "lib/tem/transport/auto_configurator.rb", "lib/tem/transport/java_card_mixin.rb", "lib/tem/transport/jcop_remote_protocol.rb", "lib/tem/transport/jcop_remote_server.rb", "lib/tem/transport/jcop_remote_transport.rb", "lib/tem/transport/pcsc_transport.rb", "lib/tem/transport/transport.rb", "lib/tem_ruby.rb", "LICENSE", "README"]
+  s.files = ["bin/tem_bench", "bin/tem_ca", "bin/tem_irb", "bin/tem_proxy", "bin/tem_stat", "CHANGELOG", "dev_ca/ca_cert.cer", "dev_ca/ca_cert.pem", "dev_ca/ca_key.pem", "dev_ca/config.yml", "lib/tem/_cert.rb", "lib/tem/apdus/buffers.rb", "lib/tem/apdus/keys.rb", "lib/tem/apdus/lifecycle.rb", "lib/tem/apdus/tag.rb", "lib/tem/auto_conf.rb", "lib/tem/builders/abi.rb", "lib/tem/builders/assembler.rb", "lib/tem/builders/crypto.rb", "lib/tem/builders/isa.rb", "lib/tem/ca.rb", "lib/tem/definitions/abi.rb", "lib/tem/definitions/assembler.rb", "lib/tem/definitions/isa.rb", "lib/tem/ecert.rb", "lib/tem/hive.rb", "lib/tem/keys/asymmetric.rb", "lib/tem/keys/key.rb", "lib/tem/keys/symmetric.rb", "lib/tem/sec_exec_error.rb", "lib/tem/seclosures.rb", "lib/tem/secpack.rb", "lib/tem/tem.rb", "lib/tem/toolkit.rb", "lib/tem/transport/auto_configurator.rb", "lib/tem/transport/java_card_mixin.rb", "lib/tem/transport/jcop_remote_protocol.rb", "lib/tem/transport/jcop_remote_server.rb", "lib/tem/transport/jcop_remote_transport.rb", "lib/tem/transport/pcsc_transport.rb", "lib/tem/transport/transport.rb", "lib/tem_ruby.rb", "LICENSE", "Manifest", "Rakefile", "README", "tem_ruby.gemspec", "test/_test_cert.rb", "test/builders/test_abi_builder.rb", "test/tem_test_case.rb", "test/tem_unit/test_tem_alu.rb", "test/tem_unit/test_tem_bound_secpack.rb", "test/tem_unit/test_tem_branching.rb", "test/tem_unit/test_tem_crypto_asymmetric.rb", "test/tem_unit/test_tem_crypto_hash.rb", "test/tem_unit/test_tem_crypto_pstore.rb", "test/tem_unit/test_tem_crypto_random.rb", "test/tem_unit/test_tem_emit.rb", "test/tem_unit/test_tem_memory.rb", "test/tem_unit/test_tem_memory_compare.rb", "test/tem_unit/test_tem_output.rb", "test/tem_unit/test_tem_yaml_secpack.rb", "test/test_driver.rb", "test/test_exceptions.rb", "test/transport/test_auto_configurator.rb", "test/transport/test_java_card_mixin.rb", "test/transport/test_jcop_remote.rb", "timings/blank_bound_secpack.rb", "timings/blank_sec.rb", "timings/devchip_decrypt.rb", "timings/post_buffer.rb", "timings/simple_apdu.rb", "timings/timings.rb", "timings/vm_perf.rb", "timings/vm_perf_bound.rb"]
   s.homepage = %q{http://tem.rubyforge.org}
   s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Tem_ruby", "--main", "README"]
   s.require_paths = ["lib"]
   s.rubyforge_project = %q{tem}
   s.rubygems_version = %q{1.3.3}
   s.summary = %q{TEM (Trusted Execution Module) driver, written in and for ruby.}
-  s.test_files = ["test/builders/test_abi_builder.rb", "test/test_driver.rb", "test/test_exceptions.rb", "test/test_tem.rb", "test/transport/test_auto_configurator.rb", "test/transport/test_java_card_mixin.rb", "test/transport/test_jcop_remote.rb"]
+  s.test_files = ["test/builders/test_abi_builder.rb", "test/tem_unit/test_tem_alu.rb", "test/tem_unit/test_tem_bound_secpack.rb", "test/tem_unit/test_tem_branching.rb", "test/tem_unit/test_tem_crypto_asymmetric.rb", "test/tem_unit/test_tem_crypto_hash.rb", "test/tem_unit/test_tem_crypto_pstore.rb", "test/tem_unit/test_tem_crypto_random.rb", "test/tem_unit/test_tem_emit.rb", "test/tem_unit/test_tem_memory.rb", "test/tem_unit/test_tem_memory_compare.rb", "test/tem_unit/test_tem_output.rb", "test/tem_unit/test_tem_yaml_secpack.rb", "test/test_driver.rb", "test/test_exceptions.rb", "test/transport/test_auto_configurator.rb", "test/transport/test_java_card_mixin.rb", "test/transport/test_jcop_remote.rb"]
 
   if s.respond_to? :specification_version then
     current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION

data/test/tem_unit/test_tem_alu.rb

@@ -0,0 +1,33 @@
+require 'test/tem_test_case'
+
+class TemAluTest < TemTestCase
+  def test_alu
+    sec = @tem.assemble { |s|
+      s.ldbc 10
+      s.outnew
+      s.ldwc 0x1234
+      s.ldwc 0x5678
+      s.dupn :n => 2
+      s.add
+      s.outw
+      s.sub
+      s.outw
+      s.ldwc 0x0155
+      s.ldwc 0x02AA
+      s.mul
+      s.outw
+      s.ldwc 0x390C
+      s.ldwc 0x00AA
+      s.dupn :n => 2
+      s.div
+      s.outw
+      s.mod
+      s.outw
+      s.halt
+      s.stack 5
+    }
+    result = @tem.execute sec
+    assert_equal [0x68, 0xAC, 0xBB, 0xBC, 0x8C, 0x72, 0x00, 0x55, 0x00, 0x9A],
+                  result, 'the ALU isn\'t working well'
+  end
+end