edhoc 1.0.5 → 1.1.1

package/external/libedhoc/tests/src/module_test_x5chain_sign_keys_suite_0.c

@@ -0,0 +1,1135 @@
+/**
+ * \file    module_test_x5chain_sign_keys_suite_0.c
+ * \author  Kamil Kielbasa
+ * \brief   Module tests for EDHOC handshake with:
+ *          - X.509 chain.
+ *          - signature keys.
+ *          - cipher suite 0.
+ * \version 0.6
+ * \date    2024-08-05
+ * 
+ * \copyright Copyright (c) 2024
+ * 
+ */
+
+/* Include files ----------------------------------------------------------- */
+
+/* Test vector header: */
+#include "test_vector_x5chain_sign_keys_suite_0.h"
+
+/* Cipher suite 0 header: */
+#include "cipher_suite_0.h"
+
+/* Standard library headers: */
+#include <stdio.h>
+#include <string.h>
+#include <stdint.h>
+#include <stddef.h>
+#include <stdbool.h>
+
+/* EDHOC header: */
+#define EDHOC_ALLOW_PRIVATE_ACCESS
+#include <edhoc.h>
+
+/* PSA crypto header: */
+#include <psa/crypto.h>
+
+/* Unity headers: */
+#include <unity.h>
+#include <unity_fixture.h>
+
+/* Module defines ---------------------------------------------------------- */
+
+#define OSCORE_MASTER_SECRET_LENGTH (16)
+#define OSCORE_MASTER_SALT_LENGTH (8)
+#define DH_KEY_AGREEMENT_LENGTH (32)
+#define ENTROPY_LENGTH (16)
+
+/* Module types and type definitiones -------------------------------------- */
+/* Module interface variables and constants -------------------------------- */
+/* Static function declarations -------------------------------------------- */
+
+/**
+ * \brief Authentication credentials fetch callback for initiator
+ *        for single certificate.
+ */
+static int auth_cred_fetch_init_single_cert(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred);
+
+/**
+ * \brief Authentication credentials fetch callback for responder
+ *        for single certificate.
+ */
+static int auth_cred_fetch_resp_single_cert(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred);
+
+/**
+ * \brief Authentication credentials verify callback for initiator
+ *        for single certificate.
+ */
+static int auth_cred_verify_init_single_cert(void *user_ctx,
+					     struct edhoc_auth_creds *auth_cred,
+					     const uint8_t **pub_key,
+					     size_t *pub_key_len);
+
+/**
+ * \brief Authentication credentials verify callback for responder
+ *        for single certificate.
+ */
+static int auth_cred_verify_resp_single_cert(void *user_ctx,
+					     struct edhoc_auth_creds *auth_cred,
+					     const uint8_t **pub_key,
+					     size_t *pub_key_len);
+
+/**
+ * \brief Authentication credentials fetch callback for initiator
+ *        for many certificates.
+ */
+static int auth_cred_fetch_init_many_certs(void *user_ctx,
+					   struct edhoc_auth_creds *auth_cred);
+
+/**
+ * \brief Authentication credentials fetch callback for responder
+ *        for many certificates.
+ */
+static int auth_cred_fetch_resp_many_certs(void *user_ctx,
+					   struct edhoc_auth_creds *auth_cred);
+
+/**
+ * \brief Authentication credentials verify callback for initiator
+ *        for single certificate.
+ */
+static int auth_cred_verify_init_many_certs(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred,
+					    const uint8_t **pub_key,
+					    size_t *pub_key_len);
+
+/**
+ * \brief Authentication credentials verify callback for responder
+ *        for single certificate.
+ */
+static int auth_cred_verify_resp_many_certs(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred,
+					    const uint8_t **pub_key,
+					    size_t *pub_key_len);
+
+/**
+ * \brief Helper function for printing arrays.
+ */
+static inline void print_array(void *user_context, const char *name,
+			       const uint8_t *buffer, size_t buffer_length);
+
+/* Static variables and constants ------------------------------------------ */
+
+static int ret = EDHOC_ERROR_GENERIC_ERROR;
+static enum edhoc_error_code error_code_recv =
+	EDHOC_ERROR_CODE_UNSPECIFIED_ERROR;
+
+static struct edhoc_context edhoc_initiator_context = { 0 };
+static struct edhoc_context *init_ctx = &edhoc_initiator_context;
+
+static struct edhoc_context edhoc_responder_context = { 0 };
+static struct edhoc_context *resp_ctx = &edhoc_responder_context;
+
+static const struct edhoc_cipher_suite edhoc_cipher_suite_0 = {
+	.value = 0,
+	.aead_key_length = 16,
+	.aead_tag_length = 8,
+	.aead_iv_length = 13,
+	.hash_length = 32,
+	.mac_length = 32,
+	.ecc_key_length = 32,
+	.ecc_sign_length = 64,
+};
+
+static const struct edhoc_keys edhoc_keys = {
+	.import_key = cipher_suite_0_key_import,
+	.destroy_key = cipher_suite_0_key_destroy,
+};
+
+static const struct edhoc_crypto edhoc_crypto = {
+	.make_key_pair = cipher_suite_0_make_key_pair,
+	.key_agreement = cipher_suite_0_key_agreement,
+	.signature = cipher_suite_0_signature,
+	.verify = cipher_suite_0_verify,
+	.extract = cipher_suite_0_extract,
+	.expand = cipher_suite_0_expand,
+	.encrypt = cipher_suite_0_encrypt,
+	.decrypt = cipher_suite_0_decrypt,
+	.hash = cipher_suite_0_hash,
+};
+
+static const struct edhoc_credentials edhoc_auth_cred_single_cert_mocked_init = {
+	.fetch = auth_cred_fetch_init_single_cert,
+	.verify = auth_cred_verify_init_single_cert,
+};
+
+static const struct edhoc_credentials edhoc_auth_cred_single_cert_mocked_resp = {
+	.fetch = auth_cred_fetch_resp_single_cert,
+	.verify = auth_cred_verify_resp_single_cert,
+};
+
+static const struct edhoc_credentials edhoc_auth_cred_many_certs_mocked_init = {
+	.fetch = auth_cred_fetch_init_many_certs,
+	.verify = auth_cred_verify_init_many_certs,
+};
+
+static const struct edhoc_credentials edhoc_auth_cred_many_certs_mocked_resp = {
+	.fetch = auth_cred_fetch_resp_many_certs,
+	.verify = auth_cred_verify_resp_many_certs,
+};
+
+/* Static function definitions --------------------------------------------- */
+
+static int auth_cred_fetch_init_single_cert(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	auth_cred->label = EDHOC_COSE_HEADER_X509_CHAIN;
+	auth_cred->x509_chain.nr_of_certs = 1;
+	auth_cred->x509_chain.cert[0] = CRED_I;
+	auth_cred->x509_chain.cert_len[0] = ARRAY_SIZE(CRED_I);
+
+	const int ret = cipher_suite_0_key_import(NULL, EDHOC_KT_SIGNATURE,
+						  SK_I, ARRAY_SIZE(SK_I),
+						  auth_cred->priv_key_id);
+
+	if (EDHOC_SUCCESS != ret)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_fetch_resp_single_cert(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	auth_cred->label = EDHOC_COSE_HEADER_X509_CHAIN;
+	auth_cred->x509_chain.nr_of_certs = 1;
+	auth_cred->x509_chain.cert[0] = CRED_R;
+	auth_cred->x509_chain.cert_len[0] = ARRAY_SIZE(CRED_R);
+
+	const int ret = cipher_suite_0_key_import(NULL, EDHOC_KT_SIGNATURE,
+						  SK_R, ARRAY_SIZE(SK_R),
+						  auth_cred->priv_key_id);
+
+	if (EDHOC_SUCCESS != ret)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_verify_init_single_cert(void *user_ctx,
+					     struct edhoc_auth_creds *auth_cred,
+					     const uint8_t **pub_key,
+					     size_t *pub_key_len)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred || NULL == pub_key || NULL == pub_key_len)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	/**
+         * \brief Verify COSE header label value. 
+         */
+	if (EDHOC_COSE_HEADER_X509_CHAIN != auth_cred->label)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received number of certificates. 
+         */
+	if (1 != auth_cred->x509_chain.nr_of_certs)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate length. 
+         */
+	if (auth_cred->x509_chain.cert_len[0] != ARRAY_SIZE(CRED_R))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate. 
+         */
+	if (0 != memcmp(CRED_R, auth_cred->x509_chain.cert[0],
+			auth_cred->x509_chain.cert_len[0]))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief If successful then assign public key. 
+         */
+	*pub_key = PK_R;
+	*pub_key_len = ARRAY_SIZE(PK_R);
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_verify_resp_single_cert(void *user_ctx,
+					     struct edhoc_auth_creds *auth_cred,
+					     const uint8_t **pub_key,
+					     size_t *pub_key_len)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred || NULL == pub_key || NULL == pub_key_len)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	/**
+         * \brief Verify COSE header label value. 
+         */
+	if (EDHOC_COSE_HEADER_X509_CHAIN != auth_cred->label)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received number of certificates. 
+         */
+	if (1 != auth_cred->x509_chain.nr_of_certs)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate length. 
+         */
+	if (auth_cred->x509_chain.cert_len[0] != ARRAY_SIZE(CRED_I))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate. 
+         */
+	if (0 != memcmp(CRED_I, auth_cred->x509_chain.cert[0],
+			auth_cred->x509_chain.cert_len[0]))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief If successful then assign public key. 
+         */
+	*pub_key = PK_I;
+	*pub_key_len = ARRAY_SIZE(PK_I);
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_fetch_init_many_certs(void *user_ctx,
+					   struct edhoc_auth_creds *auth_cred)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	auth_cred->label = EDHOC_COSE_HEADER_X509_CHAIN;
+	auth_cred->x509_chain.nr_of_certs = 2;
+
+	auth_cred->x509_chain.cert[0] = CRED_I;
+	auth_cred->x509_chain.cert_len[0] = ARRAY_SIZE(CRED_I);
+
+	auth_cred->x509_chain.cert[1] = CRED_R;
+	auth_cred->x509_chain.cert_len[1] = ARRAY_SIZE(CRED_R);
+
+	const int ret = cipher_suite_0_key_import(NULL, EDHOC_KT_SIGNATURE,
+						  SK_I, ARRAY_SIZE(SK_I),
+						  auth_cred->priv_key_id);
+
+	if (EDHOC_SUCCESS != ret)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_fetch_resp_many_certs(void *user_ctx,
+					   struct edhoc_auth_creds *auth_cred)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	auth_cred->label = EDHOC_COSE_HEADER_X509_CHAIN;
+	auth_cred->x509_chain.nr_of_certs = 2;
+
+	auth_cred->x509_chain.cert[0] = CRED_R;
+	auth_cred->x509_chain.cert_len[0] = ARRAY_SIZE(CRED_R);
+
+	auth_cred->x509_chain.cert[1] = CRED_I;
+	auth_cred->x509_chain.cert_len[1] = ARRAY_SIZE(CRED_I);
+
+	const int ret = cipher_suite_0_key_import(NULL, EDHOC_KT_SIGNATURE,
+						  SK_R, ARRAY_SIZE(SK_R),
+						  auth_cred->priv_key_id);
+
+	if (EDHOC_SUCCESS != ret)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_verify_init_many_certs(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred,
+					    const uint8_t **pub_key,
+					    size_t *pub_key_len)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred || NULL == pub_key || NULL == pub_key_len)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	/**
+         * \brief Verify COSE header label value. 
+         */
+	if (EDHOC_COSE_HEADER_X509_CHAIN != auth_cred->label)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received number of certificates. 
+         */
+	if (2 != auth_cred->x509_chain.nr_of_certs)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate length. 
+         */
+	if (auth_cred->x509_chain.cert_len[0] != ARRAY_SIZE(CRED_R))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate. 
+         */
+	if (0 != memcmp(CRED_R, auth_cred->x509_chain.cert[0],
+			auth_cred->x509_chain.cert_len[0]))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate length. 
+         */
+	if (auth_cred->x509_chain.cert_len[1] != ARRAY_SIZE(CRED_I))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate. 
+         */
+	if (0 != memcmp(CRED_I, auth_cred->x509_chain.cert[1],
+			auth_cred->x509_chain.cert_len[1]))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief If successful then assign public key. 
+         */
+	*pub_key = PK_R;
+	*pub_key_len = ARRAY_SIZE(PK_R);
+
+	return EDHOC_SUCCESS;
+}
+
+static int auth_cred_verify_resp_many_certs(void *user_ctx,
+					    struct edhoc_auth_creds *auth_cred,
+					    const uint8_t **pub_key,
+					    size_t *pub_key_len)
+{
+	(void)user_ctx;
+
+	if (NULL == auth_cred || NULL == pub_key || NULL == pub_key_len)
+		return EDHOC_ERROR_INVALID_ARGUMENT;
+
+	/**
+         * \brief Verify COSE header label value. 
+         */
+	if (EDHOC_COSE_HEADER_X509_CHAIN != auth_cred->label)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received number of certificates. 
+         */
+	if (2 != auth_cred->x509_chain.nr_of_certs)
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate length. 
+         */
+	if (auth_cred->x509_chain.cert_len[0] != ARRAY_SIZE(CRED_I))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate. 
+         */
+	if (0 != memcmp(CRED_I, auth_cred->x509_chain.cert[0],
+			auth_cred->x509_chain.cert_len[0]))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate length. 
+         */
+	if (auth_cred->x509_chain.cert_len[1] != ARRAY_SIZE(CRED_R))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief Verify received peer certificate. 
+         */
+	if (0 != memcmp(CRED_R, auth_cred->x509_chain.cert[1],
+			auth_cred->x509_chain.cert_len[1]))
+		return EDHOC_ERROR_CREDENTIALS_FAILURE;
+
+	/**
+         * \brief If successful then assign public key. 
+         */
+	*pub_key = PK_I;
+	*pub_key_len = ARRAY_SIZE(PK_I);
+
+	return EDHOC_SUCCESS;
+}
+
+static inline void print_array(void *user_context, const char *name,
+			       const uint8_t *buffer, size_t buffer_length)
+{
+	(void)user_context;
+
+	printf("%s:\tLEN( %zu )\n", name, buffer_length);
+
+	for (size_t i = 0; i < buffer_length; ++i) {
+		if (0 == i % 16 && i > 0) {
+			printf("\n");
+		}
+
+		printf("%02x ", buffer[i]);
+	}
+
+	printf("\n\n");
+}
+
+/* Module interface function definitions ----------------------------------- */
+
+TEST_GROUP(x5chain_sign_keys_suite_0);
+
+TEST_SETUP(x5chain_sign_keys_suite_0)
+{
+	ret = psa_crypto_init();
+	TEST_ASSERT_EQUAL(PSA_SUCCESS, ret);
+
+	const enum edhoc_method methods[] = { METHOD };
+	const struct edhoc_cipher_suite cipher_suites[] = {
+		edhoc_cipher_suite_0,
+	};
+
+	const struct edhoc_connection_id init_cid = {
+		.encode_type = EDHOC_CID_TYPE_ONE_BYTE_INTEGER,
+		.int_value = (int8_t)C_I[0],
+	};
+
+	struct edhoc_connection_id resp_cid = {
+		.encode_type = EDHOC_CID_TYPE_BYTE_STRING,
+		.bstr_length = ARRAY_SIZE(C_R),
+	};
+	memcpy(&resp_cid.bstr_value, C_R, ARRAY_SIZE(C_R));
+
+	ret = edhoc_context_init(init_ctx);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_set_methods(init_ctx, methods, ARRAY_SIZE(methods));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_set_cipher_suites(init_ctx, cipher_suites,
+				      ARRAY_SIZE(cipher_suites));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_set_connection_id(init_ctx, &init_cid);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_bind_keys(init_ctx, &edhoc_keys);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_bind_crypto(init_ctx, &edhoc_crypto);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_context_init(resp_ctx);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_set_methods(resp_ctx, methods, ARRAY_SIZE(methods));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_set_cipher_suites(resp_ctx, cipher_suites,
+				      ARRAY_SIZE(cipher_suites));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_set_connection_id(resp_ctx, &resp_cid);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_bind_keys(resp_ctx, &edhoc_keys);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_bind_crypto(resp_ctx, &edhoc_crypto);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+#if defined(TEST_TRACES)
+	init_ctx->logger = print_array;
+	resp_ctx->logger = print_array;
+#endif
+}
+
+TEST_TEAR_DOWN(x5chain_sign_keys_suite_0)
+{
+	mbedtls_psa_crypto_free();
+
+	ret = edhoc_context_deinit(init_ctx);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_context_deinit(resp_ctx);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+}
+
+TEST(x5chain_sign_keys_suite_0, one_cert_in_chain)
+{
+	uint8_t buffer[1000] = { 0 };
+
+	/* Required missing setup. */
+	ret = edhoc_bind_credentials(init_ctx,
+				     &edhoc_auth_cred_single_cert_mocked_init);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_bind_credentials(resp_ctx,
+				     &edhoc_auth_cred_single_cert_mocked_resp);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_1_len = 0;
+	uint8_t *msg_1 = buffer;
+
+	/* EDHOC message 1 compose. */
+	ret = edhoc_message_1_compose(init_ctx, msg_1, ARRAY_SIZE(buffer),
+				      &msg_1_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_WAIT_M2, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_INVALID, init_ctx->prk_state);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_1, init_ctx->th_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 1 process. */
+	ret = edhoc_message_1_process(resp_ctx, msg_1, msg_1_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_RECEIVED_M1, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_1, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_INVALID, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	TEST_ASSERT_EQUAL(EDHOC_CID_TYPE_ONE_BYTE_INTEGER,
+			  resp_ctx->peer_cid.encode_type);
+	TEST_ASSERT_EQUAL((int8_t)C_I[0], resp_ctx->peer_cid.int_value);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_2_len = 0;
+	uint8_t *msg_2 = buffer;
+
+	/* EDHOC message 2 compose. */
+	ret = edhoc_message_2_compose(resp_ctx, msg_2, ARRAY_SIZE(buffer),
+				      &msg_2_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_WAIT_M3, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_3, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_3E2M, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 2 process. */
+	ret = edhoc_message_2_process(init_ctx, msg_2, msg_2_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_VERIFIED_M2, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_3, init_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_3E2M, init_ctx->prk_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	TEST_ASSERT_EQUAL(EDHOC_CID_TYPE_BYTE_STRING,
+			  init_ctx->peer_cid.encode_type);
+	TEST_ASSERT_EQUAL(ARRAY_SIZE(C_R), init_ctx->peer_cid.bstr_length);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(C_R, init_ctx->peer_cid.bstr_value,
+				      init_ctx->peer_cid.bstr_length);
+
+	TEST_ASSERT_EQUAL(DH_KEY_AGREEMENT_LENGTH, init_ctx->dh_secret_len);
+	TEST_ASSERT_EQUAL(DH_KEY_AGREEMENT_LENGTH, resp_ctx->dh_secret_len);
+	TEST_ASSERT_EQUAL(init_ctx->dh_secret_len, resp_ctx->dh_secret_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_ctx->dh_secret, resp_ctx->dh_secret,
+				      DH_KEY_AGREEMENT_LENGTH);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_3_len = 0;
+	uint8_t *msg_3 = buffer;
+
+	/* EDHOC message 3 compose. */
+	ret = edhoc_message_3_compose(init_ctx, msg_3, ARRAY_SIZE(buffer),
+				      &msg_3_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_COMPLETED, init_ctx->status);
+	TEST_ASSERT_EQUAL(true, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, init_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, init_ctx->prk_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 3 process. */
+	ret = edhoc_message_3_process(resp_ctx, msg_3, msg_3_len);
+
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_COMPLETED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(true, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_4_len = 0;
+	uint8_t *msg_4 = buffer;
+
+	/* EDHOC message 4 compose. */
+	ret = edhoc_message_4_compose(resp_ctx, msg_4, ARRAY_SIZE(buffer),
+				      &msg_4_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(true, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 4 process. */
+	ret = edhoc_message_4_process(init_ctx, msg_4, msg_4_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(true, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, init_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, init_ctx->prk_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* Derive OSCORE master secret and master salt. */
+	uint8_t init_master_secret[OSCORE_MASTER_SECRET_LENGTH] = { 0 };
+	uint8_t init_master_salt[OSCORE_MASTER_SALT_LENGTH] = { 0 };
+	size_t init_sender_id_len = 0;
+	uint8_t init_sender_id[ARRAY_SIZE(C_R)] = { 0 };
+	size_t init_recipient_id_len = 0;
+	uint8_t init_recipient_id[ARRAY_SIZE(C_I)] = { 0 };
+
+	ret = edhoc_export_oscore_session(
+		init_ctx, init_master_secret, ARRAY_SIZE(init_master_secret),
+		init_master_salt, ARRAY_SIZE(init_master_salt), init_sender_id,
+		ARRAY_SIZE(init_sender_id), &init_sender_id_len,
+		init_recipient_id, ARRAY_SIZE(init_recipient_id),
+		&init_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, init_ctx->prk_state);
+
+	/* Derive OSCORE master secret and master salt. */
+	uint8_t resp_master_secret[OSCORE_MASTER_SECRET_LENGTH] = { 0 };
+	uint8_t resp_master_salt[OSCORE_MASTER_SALT_LENGTH] = { 0 };
+	size_t resp_sender_id_len = 0;
+	uint8_t resp_sender_id[ARRAY_SIZE(C_I)] = { 0 };
+	size_t resp_recipient_id_len = 0;
+	uint8_t resp_recipient_id[ARRAY_SIZE(C_R)] = { 0 };
+
+	ret = edhoc_export_oscore_session(
+		resp_ctx, resp_master_secret, ARRAY_SIZE(resp_master_secret),
+		resp_master_salt, ARRAY_SIZE(resp_master_salt), resp_sender_id,
+		ARRAY_SIZE(resp_sender_id), &resp_sender_id_len,
+		resp_recipient_id, ARRAY_SIZE(resp_recipient_id),
+		&resp_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, resp_ctx->prk_state);
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_secret, resp_master_secret,
+				      ARRAY_SIZE(resp_master_secret));
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_salt, resp_master_salt,
+				      ARRAY_SIZE(resp_master_salt));
+
+	TEST_ASSERT_EQUAL(init_sender_id_len, resp_recipient_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_sender_id, resp_recipient_id,
+				      init_sender_id_len);
+	TEST_ASSERT_EQUAL(init_recipient_id_len, resp_sender_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_recipient_id, resp_sender_id,
+				      resp_sender_id_len);
+
+	uint8_t entropy[ENTROPY_LENGTH] = { 0 };
+	ret = psa_generate_random(entropy, sizeof(entropy));
+	TEST_ASSERT_EQUAL(PSA_SUCCESS, ret);
+
+	/* EDHOC key update method. */
+	ret = edhoc_export_key_update(init_ctx, entropy, ARRAY_SIZE(entropy));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(true, init_ctx->is_oscore_export_allowed);
+
+	/* EDHOC key update method. */
+	ret = edhoc_export_key_update(resp_ctx, entropy, ARRAY_SIZE(entropy));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(true, resp_ctx->is_oscore_export_allowed);
+
+	TEST_ASSERT_EQUAL(init_ctx->prk_state, resp_ctx->prk_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, init_ctx->prk_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, resp_ctx->prk_state);
+
+	TEST_ASSERT_EQUAL(init_ctx->prk_len, resp_ctx->prk_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_ctx->prk, resp_ctx->prk,
+				      resp_ctx->prk_len);
+
+	/* Derive OSCORE master secret and master salt. */
+	memset(init_master_secret, 0, sizeof(init_master_secret));
+	memset(init_master_salt, 0, sizeof(init_master_salt));
+	init_sender_id_len = 0;
+	memset(init_sender_id, 0, sizeof(init_sender_id));
+	init_recipient_id_len = 0;
+	memset(init_recipient_id, 0, sizeof(init_recipient_id));
+
+	ret = edhoc_export_oscore_session(
+		init_ctx, init_master_secret, ARRAY_SIZE(init_master_secret),
+		init_master_salt, ARRAY_SIZE(init_master_salt), init_sender_id,
+		ARRAY_SIZE(init_sender_id), &init_sender_id_len,
+		init_recipient_id, ARRAY_SIZE(init_recipient_id),
+		&init_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, init_ctx->prk_state);
+
+	/* Derive OSCORE master secret and master salt. */
+	memset(resp_master_secret, 0, sizeof(resp_master_secret));
+	memset(resp_master_salt, 0, sizeof(resp_master_salt));
+	resp_sender_id_len = 0;
+	memset(resp_sender_id, 0, sizeof(resp_sender_id));
+	resp_recipient_id_len = 0;
+	memset(resp_recipient_id, 0, sizeof(resp_recipient_id));
+
+	ret = edhoc_export_oscore_session(
+		resp_ctx, resp_master_secret, ARRAY_SIZE(resp_master_secret),
+		resp_master_salt, ARRAY_SIZE(resp_master_salt), resp_sender_id,
+		ARRAY_SIZE(resp_sender_id), &resp_sender_id_len,
+		resp_recipient_id, ARRAY_SIZE(resp_recipient_id),
+		&resp_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, resp_ctx->prk_state);
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_secret, resp_master_secret,
+				      ARRAY_SIZE(resp_master_secret));
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_salt, resp_master_salt,
+				      ARRAY_SIZE(resp_master_salt));
+
+	TEST_ASSERT_EQUAL(init_sender_id_len, resp_recipient_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_sender_id, resp_recipient_id,
+				      init_sender_id_len);
+	TEST_ASSERT_EQUAL(init_recipient_id_len, resp_sender_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_recipient_id, resp_sender_id,
+				      resp_sender_id_len);
+}
+
+TEST(x5chain_sign_keys_suite_0, two_certs_in_chain)
+{
+	uint8_t buffer[2000] = { 0 };
+
+	/* Required missing setup. */
+	ret = edhoc_bind_credentials(init_ctx,
+				     &edhoc_auth_cred_many_certs_mocked_init);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	ret = edhoc_bind_credentials(resp_ctx,
+				     &edhoc_auth_cred_many_certs_mocked_resp);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_1_len = 0;
+	uint8_t *msg_1 = buffer;
+
+	/* EDHOC message 1 compose. */
+	ret = edhoc_message_1_compose(init_ctx, msg_1, ARRAY_SIZE(buffer),
+				      &msg_1_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_WAIT_M2, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_INVALID, init_ctx->prk_state);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_1, init_ctx->th_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/**
+         * \brief EDHOC message 1 process.
+         */
+	ret = edhoc_message_1_process(resp_ctx, msg_1, msg_1_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_RECEIVED_M1, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_1, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_INVALID, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	TEST_ASSERT_EQUAL(EDHOC_CID_TYPE_ONE_BYTE_INTEGER,
+			  resp_ctx->peer_cid.encode_type);
+	TEST_ASSERT_EQUAL((int8_t)C_I[0], resp_ctx->peer_cid.int_value);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_2_len = 0;
+	uint8_t *msg_2 = buffer;
+
+	/* EDHOC message 2 compose. */
+	ret = edhoc_message_2_compose(resp_ctx, msg_2, ARRAY_SIZE(buffer),
+				      &msg_2_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_WAIT_M3, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_3, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_3E2M, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 2 process. */
+	ret = edhoc_message_2_process(init_ctx, msg_2, msg_2_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_VERIFIED_M2, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_3, init_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_3E2M, init_ctx->prk_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	TEST_ASSERT_EQUAL(EDHOC_CID_TYPE_BYTE_STRING,
+			  init_ctx->peer_cid.encode_type);
+	TEST_ASSERT_EQUAL(ARRAY_SIZE(C_R), init_ctx->peer_cid.bstr_length);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(C_R, init_ctx->peer_cid.bstr_value,
+				      init_ctx->peer_cid.bstr_length);
+
+	TEST_ASSERT_EQUAL(DH_KEY_AGREEMENT_LENGTH, init_ctx->dh_secret_len);
+	TEST_ASSERT_EQUAL(DH_KEY_AGREEMENT_LENGTH, resp_ctx->dh_secret_len);
+	TEST_ASSERT_EQUAL(init_ctx->dh_secret_len, resp_ctx->dh_secret_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_ctx->dh_secret, resp_ctx->dh_secret,
+				      DH_KEY_AGREEMENT_LENGTH);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_3_len = 0;
+	uint8_t *msg_3 = buffer;
+
+	/* EDHOC message 3 compose. */
+	ret = edhoc_message_3_compose(init_ctx, msg_3, ARRAY_SIZE(buffer),
+				      &msg_3_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_COMPLETED, init_ctx->status);
+	TEST_ASSERT_EQUAL(true, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, init_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, init_ctx->prk_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 3 process. */
+	ret = edhoc_message_3_process(resp_ctx, msg_3, msg_3_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_COMPLETED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(true, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	memset(buffer, 0, sizeof(buffer));
+	size_t msg_4_len = 0;
+	uint8_t *msg_4 = buffer;
+
+	/* EDHOC message 4 compose. */
+	ret = edhoc_message_4_compose(resp_ctx, msg_4, ARRAY_SIZE(buffer),
+				      &msg_4_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(true, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, resp_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, resp_ctx->prk_state);
+
+	ret = edhoc_error_get_code(resp_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* EDHOC message 4 process. */
+	ret = edhoc_message_4_process(init_ctx, msg_4, msg_4_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(true, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_TH_STATE_4, init_ctx->th_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_4E3M, init_ctx->prk_state);
+
+	ret = edhoc_error_get_code(init_ctx, &error_code_recv);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_ERROR_CODE_SUCCESS, error_code_recv);
+
+	/* Derive OSCORE master secret and master salt. */
+	uint8_t init_master_secret[OSCORE_MASTER_SECRET_LENGTH] = { 0 };
+	uint8_t init_master_salt[OSCORE_MASTER_SALT_LENGTH] = { 0 };
+	size_t init_sender_id_len = 0;
+	uint8_t init_sender_id[ARRAY_SIZE(C_R)] = { 0 };
+	size_t init_recipient_id_len = 0;
+	uint8_t init_recipient_id[ARRAY_SIZE(C_I)] = { 0 };
+
+	ret = edhoc_export_oscore_session(
+		init_ctx, init_master_secret, ARRAY_SIZE(init_master_secret),
+		init_master_salt, ARRAY_SIZE(init_master_salt), init_sender_id,
+		ARRAY_SIZE(init_sender_id), &init_sender_id_len,
+		init_recipient_id, ARRAY_SIZE(init_recipient_id),
+		&init_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, init_ctx->prk_state);
+
+	/* Derive OSCORE master secret and master salt. */
+	uint8_t resp_master_secret[OSCORE_MASTER_SECRET_LENGTH] = { 0 };
+	uint8_t resp_master_salt[OSCORE_MASTER_SALT_LENGTH] = { 0 };
+	size_t resp_sender_id_len = 0;
+	uint8_t resp_sender_id[ARRAY_SIZE(C_I)] = { 0 };
+	size_t resp_recipient_id_len = 0;
+	uint8_t resp_recipient_id[ARRAY_SIZE(C_R)] = { 0 };
+
+	ret = edhoc_export_oscore_session(
+		resp_ctx, resp_master_secret, ARRAY_SIZE(resp_master_secret),
+		resp_master_salt, ARRAY_SIZE(resp_master_salt), resp_sender_id,
+		ARRAY_SIZE(resp_sender_id), &resp_sender_id_len,
+		resp_recipient_id, ARRAY_SIZE(resp_recipient_id),
+		&resp_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, resp_ctx->prk_state);
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_secret, resp_master_secret,
+				      ARRAY_SIZE(resp_master_secret));
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_salt, resp_master_salt,
+				      ARRAY_SIZE(resp_master_salt));
+
+	TEST_ASSERT_EQUAL(init_sender_id_len, resp_recipient_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_sender_id, resp_recipient_id,
+				      init_sender_id_len);
+	TEST_ASSERT_EQUAL(init_recipient_id_len, resp_sender_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_recipient_id, resp_sender_id,
+				      resp_sender_id_len);
+
+	uint8_t entropy[ENTROPY_LENGTH] = { 0 };
+	ret = psa_generate_random(entropy, sizeof(entropy));
+	TEST_ASSERT_EQUAL(PSA_SUCCESS, ret);
+
+	/* EDHOC key update method. */
+	ret = edhoc_export_key_update(init_ctx, entropy, ARRAY_SIZE(entropy));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(true, init_ctx->is_oscore_export_allowed);
+
+	/* EDHOC key update method. */
+	ret = edhoc_export_key_update(resp_ctx, entropy, ARRAY_SIZE(entropy));
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(true, resp_ctx->is_oscore_export_allowed);
+
+	TEST_ASSERT_EQUAL(init_ctx->prk_state, resp_ctx->prk_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, init_ctx->prk_state);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, resp_ctx->prk_state);
+
+	TEST_ASSERT_EQUAL(init_ctx->prk_len, resp_ctx->prk_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_ctx->prk, resp_ctx->prk,
+				      resp_ctx->prk_len);
+
+	/* Derive OSCORE master secret and master salt. */
+	memset(init_master_secret, 0, sizeof(init_master_secret));
+	memset(init_master_salt, 0, sizeof(init_master_salt));
+	init_sender_id_len = 0;
+	memset(init_sender_id, 0, sizeof(init_sender_id));
+	init_recipient_id_len = 0;
+	memset(init_recipient_id, 0, sizeof(init_recipient_id));
+
+	ret = edhoc_export_oscore_session(
+		init_ctx, init_master_secret, ARRAY_SIZE(init_master_secret),
+		init_master_salt, ARRAY_SIZE(init_master_salt), init_sender_id,
+		ARRAY_SIZE(init_sender_id), &init_sender_id_len,
+		init_recipient_id, ARRAY_SIZE(init_recipient_id),
+		&init_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, init_ctx->status);
+	TEST_ASSERT_EQUAL(false, init_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, init_ctx->prk_state);
+
+	/* Derive OSCORE master secret and master salt. */
+	memset(resp_master_secret, 0, sizeof(resp_master_secret));
+	memset(resp_master_salt, 0, sizeof(resp_master_salt));
+	resp_sender_id_len = 0;
+	memset(resp_sender_id, 0, sizeof(resp_sender_id));
+	resp_recipient_id_len = 0;
+	memset(resp_recipient_id, 0, sizeof(resp_recipient_id));
+
+	ret = edhoc_export_oscore_session(
+		resp_ctx, resp_master_secret, ARRAY_SIZE(resp_master_secret),
+		resp_master_salt, ARRAY_SIZE(resp_master_salt), resp_sender_id,
+		ARRAY_SIZE(resp_sender_id), &resp_sender_id_len,
+		resp_recipient_id, ARRAY_SIZE(resp_recipient_id),
+		&resp_recipient_id_len);
+	TEST_ASSERT_EQUAL(EDHOC_SUCCESS, ret);
+	TEST_ASSERT_EQUAL(EDHOC_SM_PERSISTED, resp_ctx->status);
+	TEST_ASSERT_EQUAL(false, resp_ctx->is_oscore_export_allowed);
+	TEST_ASSERT_EQUAL(EDHOC_PRK_STATE_OUT, resp_ctx->prk_state);
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_secret, resp_master_secret,
+				      ARRAY_SIZE(resp_master_secret));
+
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_master_salt, resp_master_salt,
+				      ARRAY_SIZE(resp_master_salt));
+
+	TEST_ASSERT_EQUAL(init_sender_id_len, resp_recipient_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_sender_id, resp_recipient_id,
+				      init_sender_id_len);
+	TEST_ASSERT_EQUAL(init_recipient_id_len, resp_sender_id_len);
+	TEST_ASSERT_EQUAL_UINT8_ARRAY(init_recipient_id, resp_sender_id,
+				      resp_sender_id_len);
+}
+
+TEST_GROUP_RUNNER(x5chain_sign_keys_suite_0)
+{
+	RUN_TEST_CASE(x5chain_sign_keys_suite_0, one_cert_in_chain);
+	RUN_TEST_CASE(x5chain_sign_keys_suite_0, two_certs_in_chain);
+}