Files
OpenCellular/common
Vincent Palatin e9a007d0e1 g: use deterministic k for individual attestation certificate ECDSA
Implement the RFC 6979 to get a deterministic integer k when doing the
ECDSA signing of the x.509 certificates used by U2F and particularly
individual attestation mechanism, rather than using the random generator
as per the original ECDSA algorithm.
So the generated certs have bit-for-bit identical signatures when the
content is identical.

Signed-off-by: Vincent Palatin <vpalatin@chromium.org>

BRANCH=cr50
BUG=b:35545754
TEST=pass U2FTest and manually dump several individual attestation certs,
run the "rfc6779" console command when enabled.

Change-Id: I7b73eee6d5a863aae9a7eec49db884151bad5ab4
Reviewed-on: https://chromium-review.googlesource.com/558073
Commit-Ready: Vadim Bendebury <vbendeb@chromium.org>
Tested-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-by: Marius Schilder <mschilder@chromium.org>
Reviewed-by: Vadim Bendebury <vbendeb@chromium.org>
2017-08-03 19:23:22 -07:00
..
2017-07-14 04:01:45 -07:00
2016-11-08 17:11:28 -08:00
2017-06-28 23:23:41 -07:00
2015-05-19 02:46:27 +00:00
2017-07-28 17:45:13 -07:00
2016-11-15 17:41:53 -08:00
2015-09-25 09:13:34 -07:00
2016-03-02 13:39:47 -08:00
2017-08-02 17:26:42 -07:00
2017-06-02 10:38:57 -07:00
2014-05-17 20:14:17 +00:00
2016-03-21 16:35:33 -07:00
2017-05-09 23:20:07 -07:00
2017-07-28 17:45:13 -07:00
2017-02-23 16:02:02 -08:00