search

veraison / ccatoken

A library for Confidential Computing Architecture (CCA) Attestation Token
Apache License 2.0
1 stars 0 forks source link

the binding between realm and platform tokens is not checked #9

Closed thomas-fossati closed 2 years ago

thomas-fossati commented 2 years ago

Currently, we don't check the binding between realm and platform tokens. As part of verification API we should make sure that the nonce in the platform token is the hash of raw public key found in the realm token (using the specified hash algorithm).