Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Device Attestation helpers #3

Closed
wants to merge 8 commits into from
Closed

Conversation

mleisner
Copy link
Owner

@mleisner mleisner commented Aug 20, 2021

Problem

Support for Device Attestation PR

Change overview

May want to remove P256Keypair::ECDSA_sign_attestation_data since it may be redundant from Tennessee's examples/

  • Construct Attestation Elements TLV
  • Deconstruct Attestation Elements TLV
  • Sign and Validate Attestation Info
  • Extract Authority Key Id from x509 Certificate
  • Extract Vendor ID from Attestation x509 Certificate
  • Added new unit tests to support testing of new methods

I also want to squash the commits.

Testing

Matter unit tests

Marty Leisner added 3 commits August 19, 2021 17:55
	TestAKID_x509Extraction
	TestVID_x509Extraction
	TestAttestationElements_Construction
@@ -169,6 +169,43 @@ CHIP_ERROR GetTestCertPubkey(uint8_t certType, const uint8_t ** certPubkey, uint
return err;
}

CHIP_ERROR GetTestCertAKID(uint8_t certType, ByteSpan & akid)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This really seems like it would be much more scalable to have a utility to obtain the AKID/SKID. Not for this PR, but to be considered...

@mleisner mleisner closed this Sep 8, 2021
@mleisner mleisner deleted the feature/new-da-helpers branch October 13, 2021 00:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants