diff options
| author | Matthew Maurer <mmaurer@google.com> | 2019-05-10 13:52:03 -0700 |
|---|---|---|
| committer | Matthew Maurer <mmaurer@google.com> | 2019-05-10 14:27:53 -0700 |
| commit | 41cb84029ae02e5836d20a12de7778d70ea3a3da (patch) | |
| tree | 03e010b92c8155e13e965bcd961b32fd620e9ec8 /identity/support/src/cppbor_parse.cpp | |
| parent | 48f0efb302d486600f6a4b3e3bcc61ac6088df81 (diff) | |
Use SHA_2_256 for importWrappedKey
The spec requires that SHA1 not be allowed for wrapped keys and that
only SHA_2_256 be used. Unfortunately, the previous VTS required SHA1
support. This patch takes the middle ground by requiring SHA_2_256 be
supported for importWrappedKey, but not disallowing it from supporting
SHA1.
This makes it possible for a spec compliant keymaster to pass VTS
while not disqualifying shipped devices.
Bug: 129291873
Test: atest VtsHalKeymasterV4_0TargetTest:ImportWrappedKeyTest, Trusty
Change-Id: I6c3a9182b51f2e7a46173d5bfc34d3c3264d954f
Diffstat (limited to 'identity/support/src/cppbor_parse.cpp')
0 files changed, 0 insertions, 0 deletions