veraison / services

Attestation verification services based on Veraison components
Apache License 2.0
25 stars 14 forks source link

scheme/cca-ssd-platform: zero-pad session nonce #201

Closed setrofim closed 1 year ago

setrofim commented 1 year ago

Ensure that if the session nonce is less than 64 bytes, it gets zero-padded to that size, as this will be done to cca-realm-challenge inside the attestation token.

See https://developer.arm.com/documentation/den0137/latest, p 92

Thanks to @thomas-fossati for spotting this.