Skip to content

Commit

Permalink
CSDK: Update the public key encoding to X509 (#35)
Browse files Browse the repository at this point in the history
* add haveged installation

	Added haveged installation steps.

Signed-off-by: Shrikant Temburwar <shrikant.temburwar@intel.com>

* Update the public key encoding to X509

Signed-off-by: Shrikant Temburwar <shrikant.temburwar@intel.com>

Co-authored-by: Tushar Ranjan Behera <tushar.ranjan.behera@intel.com>
  • Loading branch information
shrikant1407 and trbehera authored Mar 25, 2022
1 parent 1bbdbab commit e0f1516
Showing 1 changed file with 6 additions and 5 deletions.
11 changes: 6 additions & 5 deletions docs/client-sdk/client-sdk-porting-guide.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@

## Porting Guide
This document provides a guide to porting the Client SDK to new platforms.

Expand Down Expand Up @@ -184,7 +185,7 @@ SUPPORTED_AES_MODE = gcm ccm

***NOTE:*** tpm20_ecdsa256 isn’t a separate algorithm, it uses ecdsa256 as Device Attestation, but uses TPM2.0 to generate keys and store data.

***NOTE:*** The Public Key Encoding supported in COSEX509.
***NOTE:*** The Public Key Encoding supported in X509.

* **SUPPORTED_AES_MODE:** This specifies the AES mode of encryption supported by device. The device supports GCM and CCM. The following configurations are supported as per the Device Attestation algorithm: A128GCM, A256GCM, AES-CCM-64-128-128, and AES-CCM-64-128-256.

Expand Down Expand Up @@ -346,14 +347,14 @@ The usage of this define is detailed in `crypto_hal_hmac()`.

#### FDO_CRYPTO_PUB_KEY_ENCODING
```
#define FDO_CRYPTO_PUB_KEY_ENCODING_COSEX509 2
#define FDO_CRYPTO_PUB_KEY_ENCODING_X509 1
```
The usage of this define is detailed in `crypto_hal_sig_verify()`.

#### FDO_CRYPTO_PUB_KEY_ALGO
```
#define FDO_CRYPTO_PUB_KEY_ALGO_ECDSAp256 -7
#define FDO_CRYPTO_PUB_KEY_ALGO_ECDSAp384 -35
#define FDO_CRYPTO_PUB_KEY_ALGO_ECDSAp256 10
#define FDO_CRYPTO_PUB_KEY_ALGO_ECDSAp384 11
```
The usage of this define is detailed in `crypto_hal_sig_verify()`.

Expand Down Expand Up @@ -554,7 +555,7 @@ This function verifies the ECDSA signature pointed by `message_signature` of siz

*Parameters*

`key_encoding:` FDO_CRYPTO_PUB_KEY_ENCODING_COSEX509 encoding is used for ECDSA. Please refer FDO_CRYPTO_PUB_KEY_ENCODING
`key_encoding:` FDO_CRYPTO_PUB_KEY_ENCODING_X509 encoding is used for ECDSA. Please refer FDO_CRYPTO_PUB_KEY_ENCODING

`key_algorithm:` FDO_CRYPTO_PUB_KEY_ALGO_(ECDSAp256/ECDSAp384) is used for ECDSA. Please refer FDO_CRYPTO_PUB_KEY_ALGO

Expand Down

0 comments on commit e0f1516

Please sign in to comment.