Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Basic capability and algorithm checks are missing #2947

Open
steven-bellock opened this issue Jan 7, 2025 · 2 comments
Open

Basic capability and algorithm checks are missing #2947

steven-bellock opened this issue Jan 7, 2025 · 2 comments
Assignees
Labels
enhancement New feature or request

Comments

@steven-bellock
Copy link
Contributor

From DMTF/SPDM-Responder-Validator#138.

libspdm needs to check for basic illegal combinations of an endpoint's capabilities and algorithms. For example a Requester's MUT_AUTH_CAP and ReqBaseAsymAlg, or KEY_EX_CAP and DHE.

@steven-bellock steven-bellock added the enhancement New feature or request label Jan 7, 2025
@steven-bellock
Copy link
Contributor Author

@jyao1 this can be implemented after the upcoming release.

@steven-bellock
Copy link
Contributor Author

Requester capabilities and algorithms that need to be checked by Responder.

Capability Required Algorithm
MUT_AUTH_CAP ReqBaseAsymAlg
ENCRYPT_CAP / MAC_CAP AEADCipherSuite
KEY_EX_CAP DHE
KEY_EX_CAP / PSK_CAP KeySchedule

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant