diff options
| author | David Drysdale <drysdale@google.com> | 2021-12-14 14:32:51 +0000 |
|---|---|---|
| committer | David Drysdale <drysdale@google.com> | 2022-01-13 09:13:39 +0000 |
| commit | ab1851e9f2c40942fff243504788795aeaf89961 (patch) | |
| tree | 9237b40dce6ce52116759dbed58a1ad8d55d13bb /identity/support/src/cppbor_parse.cpp | |
| parent | efbebcdf4529bfafc9fc88b2a9ef04a489d475d3 (diff) | |
Alter spec text for RSA-PSS to match reality
The Key{Mint,Master} spec previously said that RSA-PSS mode should use
SHA-1 for the MGF1 digest, separately from whatever Tag::DIGEST gets
specified as the main digest.
However, both the reference implementation and the VTS/CTS tests
use BoringSSL's defaults, which is to re-use the main digest as the MGF1
digest if none is separately specified.
Given that this behaviour is embedded in many implementations over
several years (and given that there isn't a security implication),
change the spec to match this behaviour. Also update the VTS test
code to make this clear/obvious.
Test: VtsAidlKeyMintTargetTest, VtsHalKeymasterV4_0TargetTest
Bug: 210424594
Change-Id: I4303f28d094ef4d4b9dc931d6728b1fa040de20d
Ignore-AOSP-First: target internal master first due to merge conflict
Diffstat (limited to 'identity/support/src/cppbor_parse.cpp')
0 files changed, 0 insertions, 0 deletions