Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 95b0e8be authored by Seth Moore's avatar Seth Moore
Browse files

Replace "UDS_Public" with "UDS_Pub" for consistency 

Change-Id: I0d331abb7e538ac4c7e8cc966653aac38c0190d6
parent dc578038

security/rkp/aidl/android/hardware/security/keymint/generateCertificateRequestV2.cddl

+2 −2
Original line number Diff line number Diff line
@@ -63,7 +63,7 @@ SignerName = tstr 


UdsCertChain = [

    + X509Certificate       ; Root -> ... -> Leaf. "Root" is the vendor self-signed

                            ; cert, "Leaf" contains UDS_Public. It's recommended to

                            ; cert, "Leaf" contains UDS_Pub. It's recommended to

                            ; have at least 3 certificates in the chain.

                            ; The Root certificate is recommended to be generated in an air-gapped,

                            ; HSM-based secure environment. The intermediate signing keys may be
@@ -77,7 +77,7 @@ X509Certificate = bstr 
; The DICE Chain contains measurements about the device firmware.

; The first entry in the DICE Chain is the UDS_Pub, encoded as a COSE_key. All entries

; after the first describe a link in the boot chain (e.g. bootloaders: BL1, BL2, ... BLN)

; Note that there is no DiceChainEntry for UDS_pub, only a "bare" COSE_key.

; Note that there is no DiceChainEntry for UDS_Pub, only a "bare" COSE_key.

DiceCertChain = [

    PubKeyEd25519 / PubKeyECDSA256 / PubKeyECDSA384,  ; UDS_Pub

    + DiceChainEntry,               ; First CDI_Certificate -> Last CDI_Certificate