Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2fc593a6 authored by Seth Moore's avatar Seth Moore Committed by Automerger Merge Worker
Browse files

Replace "UDS_Public" with "UDS_Pub" for consistency am: 95b0e8be 

Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/3272571



Change-Id: Id9eb690650584451e185187d67ae3ff9294517b1
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 2408894b 95b0e8be

security/rkp/aidl/android/hardware/security/keymint/generateCertificateRequestV2.cddl

+2 −2
Original line number Diff line number Diff line
@@ -63,7 +63,7 @@ SignerName = tstr 


UdsCertChain = [

    + X509Certificate       ; Root -> ... -> Leaf. "Root" is the vendor self-signed

                            ; cert, "Leaf" contains UDS_Public. It's recommended to

                            ; cert, "Leaf" contains UDS_Pub. It's recommended to

                            ; have at least 3 certificates in the chain.

                            ; The Root certificate is recommended to be generated in an air-gapped,

                            ; HSM-based secure environment. The intermediate signing keys may be
@@ -77,7 +77,7 @@ X509Certificate = bstr 
; The DICE Chain contains measurements about the device firmware.

; The first entry in the DICE Chain is the UDS_Pub, encoded as a COSE_key. All entries

; after the first describe a link in the boot chain (e.g. bootloaders: BL1, BL2, ... BLN)

; Note that there is no DiceChainEntry for UDS_pub, only a "bare" COSE_key.

; Note that there is no DiceChainEntry for UDS_Pub, only a "bare" COSE_key.

DiceCertChain = [

    PubKeyEd25519 / PubKeyECDSA256 / PubKeyECDSA384,  ; UDS_Pub

    + DiceChainEntry,               ; First CDI_Certificate -> Last CDI_Certificate