From 93036fbfe957e1f9f9d46a128350855c9c0aeaf9 Mon Sep 17 00:00:00 2001 From: Vishal Mhatre Date: Fri, 23 Aug 2024 12:35:19 -0700 Subject: [PATCH] Addressing CR feedback: Iteration 2 --- auth-manifest/README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/auth-manifest/README.md b/auth-manifest/README.md index 0422c7f754..57ad7feeb5 100644 --- a/auth-manifest/README.md +++ b/auth-manifest/README.md @@ -14,13 +14,13 @@ The Caliptra SOC manifest has two main components: | Version | 4 | Manifest version | | Flags | 4 | Feature flags.
**Bit0:** - Vendor Signature Required. If set, verify the vendor IMC signature(s)
**Bit1-Bit31:** Reserved | | Vendor ECC Public Key | 96 | ECC P-384 public key used to verify the IMC Signature.
**X-Coordinate:** Public Key X-Coordinate (48 bytes)
**Y-Coordinate:** Public Key Y-Coordinate (48 bytes) | -| Vendor LMS Public Key | 48 | LMS public key used to verify the IMC Signature.
**tree_type:** LMS Algorithm Type (4 bytes)
**otstype:** LMS Ots Algorithm Type (4 bytes)
**id:** (16 bytes)
**digest:** (24 bytes) | +| Vendor LMS Public Key | 48 | LMS public key used to verify the IMC Signature.
**tree_type:** LMS Algorithm Type (4 bytes)
**otstype:** LMS Ots Algorithm Type (4 bytes)
**id:** (16 bytes)
**digest:** (24 bytes)
Note: If LMS validation is not required, this should field should be zeroed out.| | Vendor ECC Signature | 96 | Vendor ECDSA P-384 signature of the Version, Flags, Vendor ECC and LMS public keys, hashed using SHA2-384.
**R-Coordinate:** Random Point (48 bytes)
**S-Coordinate:** Proof (48 bytes) | -| Vendor LMS Signature | 1620 | Vendor LMS signature of the Version, Flags, Vendor ECC and LMS public keys, hashed using SHA2-384.
**q:** Leaf of the Merkle tree where the OTS public key appears (4 bytes)
**ots:** Lmots Signature (1252 bytes)
**tree_type:** Lms Algorithm Type (4 bytes)
**tree_path:** Path through the tree from the leaf associated with the LM-OTS signature to the root. (360 bytes) | +| Vendor LMS Signature | 1620 | Vendor LMS signature of the Version, Flags, Vendor ECC and LMS public keys, hashed using SHA2-384.
**q:** Leaf of the Merkle tree where the OTS public key appears (4 bytes)
**ots:** Lmots Signature (1252 bytes)
**tree_type:** Lms Algorithm Type (4 bytes)
**tree_path:** Path through the tree from the leaf associated with the LM-OTS signature to the root. (360 bytes)
Note: If LMS validation is not required, this should field should be zeroed out.| | Owner ECC Public Key | 96 | ECC P-384 public key used to verify the IMC Signature.
**X-Coordinate:** Public Key X-Coordinate (48 bytes)
**Y-Coordinate:** Public Key Y-Coordinate (48 bytes) | -| Owner LMS Public Key | 48 | LMS public key used to verify the IMC Signature.
**tree_type:** LMS Algorithm Type (4 bytes)
**otstype:** LMS Ots Algorithm Type (4 bytes)
**id:** (16 bytes)
**digest:** (24 bytes) | +| Owner LMS Public Key | 48 | LMS public key used to verify the IMC Signature.
**tree_type:** LMS Algorithm Type (4 bytes)
**otstype:** LMS Ots Algorithm Type (4 bytes)
**id:** (16 bytes)
**digest:** (24 bytes)
Note: If LMS validation is not required, this should field should be zeroed out.| | Owner ECC Signature | 96 | Owner ECDSA P-384 signature of the Version, Flags, Owner ECC and LMS public keys, hashed using SHA2-384.
**R-Coordinate:** Random Point (48 bytes)
**S-Coordinate:** Proof (48 bytes) | -| Owner LMS Signature | 1620 | Owner LMS signature of the Version, Flags, Owner ECC and LMS public keys, hashed using SHA2-384.
**q:** Leaf of the Merkle tree where the OTS public key appears (4 bytes)
**ots:** Lmots Signature (1252 bytes)
**tree_type:** Lms Algorithm Type (4 bytes)
**tree_path:** Path through the tree from the leaf associated with the LM-OTS signature to the root. (360 bytes) | +| Owner LMS Signature | 1620 | Owner LMS signature of the Version, Flags, Owner ECC and LMS public keys, hashed using SHA2-384.
**q:** Leaf of the Merkle tree where the OTS public key appears (4 bytes)
**ots:** Lmots Signature (1252 bytes)
**tree_type:** Lms Algorithm Type (4 bytes)
**tree_path:** Path through the tree from the leaf associated with the LM-OTS signature to the root. (360 bytes)
Note: If LMS validation is not required, this should field should be zeroed out.| - ### **Image Metadata Entry** | Field | Size (bytes) | Description|