Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Basic capability and algorithm checks are missing #2947

Open
steven-bellock opened this issue Jan 7, 2025 · 2 comments
Open

Basic capability and algorithm checks are missing #2947

steven-bellock opened this issue Jan 7, 2025 · 2 comments
Assignees
@steven-bellock
Labels
enhancement New feature or request

Comments

@steven-bellock
Copy link
Contributor

From DMTF/SPDM-Responder-Validator#138.

libspdm needs to check for basic illegal combinations of an endpoint's capabilities and algorithms. For example a Requester's MUT_AUTH_CAP and ReqBaseAsymAlg, or KEY_EX_CAP and DHE.
@steven-bellock steven-bellock added the enhancement New feature or request label Jan 7, 2025
@steven-bellock
Copy link
Contributor Author

@jyao1 this can be implemented after the upcoming release.

@steven-bellock
Copy link
Contributor Author

Requester capabilities and algorithms that need to be checked by Responder.

Capability Required Algorithm
MUT_AUTH_CAP ReqBaseAsymAlg
ENCRYPT_CAP / MAC_CAP AEADCipherSuite
KEY_EX_CAP DHE
KEY_EX_CAP / PSK_CAP KeySchedule

@steven-bellock steven-bellock self-assigned this Jan 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@steven-bellock steven-bellock

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@steven-bellock