IAT claim in cose sign

[maxtropets]

As per https://www.rfc-editor.org/rfc/rfc8392.html#section-3.1.6

Currently using time() directly.

@achamayou I think we can use it in SNP, can't we? Or shall we keep using ccf::enclavetime?

[achamayou]

@maxtropets let's continue to use enclavetime, because it's useful to be able to control the clock centrally for test purposes.

[achamayou]

"iat" needs to be nested in a "CWT_Claims" map (15): https://datatracker.ietf.org/doc/rfc9597/

[maxtropets]

"iat" needs to be nested in a "CWT_Claims" map (15): https://datatracker.ietf.org/doc/rfc9597/

Done, please review

[achamayou]

I suggest setting up a test that uses the cddl tool to check the schema here, because it's stricter than the Python cbor2 library, which is quite liberal in its type mapping.

[achamayou]

@maxtropets also needs a changelog entry, but maybe that's better done once it can contain a link to a schema

[maxtropets]

I suggest setting up a test that uses the cddl tool to check the schema here, because it's stricter than the Python cbor2 library, which is quite liberal in its type mapping.

#6561