tree 54ced70be9bddc01f5dc2f619dc6b88f12b299e9
parent 0faf82f20f1e7a1d7ee85f1a9a7c89d57c59a0c5
author Max Bires <jbires@google.com> 1622059414 -0700
committer Max Bires <jbires@google.com> 1622065194 -0700

Fixing up reference impl to match new CDDL

This changes the reference implementation to add the MAC tag from the
MACing operation over the list of public keys to be signed into the AAD
for the signature of the ephemeral MAC key. This prevents a potential
vulnerability that would arise whereby an attacker could get arbitrary
key pairs signed if they compromised the GEEK private key.

Bug: 189018262
Test: atest VtsHalRemotelyProvisionedComponentTargetTest
Change-Id: I31f352667e50d273bd1d545ee786ce8b09d4eb4d