[BUG] Conformance Owner returns tagsize error for AES_CCM_64_128_128/AES_CCM_64_128_256 ciphersuites

[Sai-Anudeep47]

To simplify issue resolution process, please provide network logs, and or test voucher. to2_AES_CCM_64_128_128_tag_error.txt to2_AES_CCM_64_128_256_tag_error.txt

What part of the spec are you testing?

• [ ] Rendezvous Server
• [x] Device Onboarding Service
• [ ] Device Implementation

What protocol are having issue with?

• [ ] TO0
• [ ] TO1
• [x] TO2

Issue description

• Using AES_CCM_64_128_128/AES_CCM_64_128_256 ciphersuites on device side returns following error by conformance owner Type 255 [500, 64, "ProveDevice64: Error encrypting...Error generating new CCM instance. ccm: tagsize must be 4, 6, 8, 10, 12, 14, or 16", 1692811595, -2572133944488837156]

• Observed that

  • in https://github.com/fido-alliance/fdo-fido-conformance-server/blob/main/core/shared/enc.crypto.go#L117 the tag size is provided as 64
  • whereas at https://github.com/fido-alliance/fdo-fido-conformance-server/blob/main/core/shared/ccm/ccm.go#L62 the upper limit for check is 16, hence the error.

[yackermann]

Addressed