Skip to content

Commit

Permalink
Tpm attestation fields clarifications
Browse files Browse the repository at this point in the history
  • Loading branch information
Akshay Kumar committed Feb 8, 2018
1 parent ca4cf0f commit 45caac2
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions index.bs
Expand Up @@ -3203,6 +3203,8 @@ engine.
- Verify that `attested` contains a `TPMS_CERTIFY_INFO` structure, whose `name` field contains a valid Name for |pubArea|,
as computed using the algorithm in the `nameAlg` field of |pubArea| using the procedure specified in [[TPMv2-Part1]]
section 16.
- Note that `qualifiedSigner`, `clockInfo` and `firmwareVersion` are ignored for specific validations.
These MAY be used as an input to risk engines.

If |x5c| is present, this indicates that the attestation type is not [=ECDAA=]. In this case:
- Verify the |sig| is a valid signature over |certInfo| using the attestation public key in |x5c| with the
Expand Down

0 comments on commit 45caac2

Please sign in to comment.