veraison / ccatoken

A library for Confidential Computing Architecture (CCA) Attestation Token
Apache License 2.0
1 stars 0 forks source link

Realm public key is not checked when setting #8

Closed thomas-fossati closed 2 years ago

thomas-fossati commented 2 years ago

We only check that the length of the supplied buffer is 97 bytes. We should also make sure that it contains a valid P-384 public key.