Security-Industry-Association / libosdp-conformance

Apache License 2.0
27 stars 14 forks source link

drop out of secure channel if (invalid) checksum command #41

Open rsgmodelworks opened 2 years ago

rsgmodelworks commented 2 years ago

As a PD, the code should report a test fail and also drop out of secure channel if it receives checksum commands. In addition CHLNG and SCRYPT command processing should fail if they are checksum commands. Per the profile conventions secure channel requires CRC (it's a security issue, checksums can be in theory hacked.)

rsgmodelworks commented 1 week ago

partially implemented.