diff options
-rw-r--r-- | secure_fw/partitions/initial_attestation/attest_token.c | 4 | ||||
-rw-r--r-- | test/suites/attestation/attest_symmetric_iat_decode.c | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/secure_fw/partitions/initial_attestation/attest_token.c b/secure_fw/partitions/initial_attestation/attest_token.c index 43547e6a29..31b8db53f7 100644 --- a/secure_fw/partitions/initial_attestation/attest_token.c +++ b/secure_fw/partitions/initial_attestation/attest_token.c @@ -111,6 +111,10 @@ enum attest_token_err_t attest_token_start(struct attest_token_ctx *me, me->opt_flags = opt_flags; me->key_select = key_select; + if (opt_flags & TOKEN_OPT_SHORT_CIRCUIT_SIGN) { + t_cose_options |= T_COSE_OPT_SHORT_CIRCUIT_TAG; + } + t_cose_mac0_sign_init(&(me->mac_ctx), t_cose_options, cose_alg_id); attest_ret = attest_get_signing_key_handle(&key_handle); diff --git a/test/suites/attestation/attest_symmetric_iat_decode.c b/test/suites/attestation/attest_symmetric_iat_decode.c index 69c32b0f7d..77312a30ed 100644 --- a/test/suites/attestation/attest_symmetric_iat_decode.c +++ b/test/suites/attestation/attest_symmetric_iat_decode.c @@ -138,6 +138,10 @@ attest_token_decode_validate_token(struct attest_token_decode_context *me, return return_value; } + if (me->options & TOKEN_OPT_SHORT_CIRCUIT_SIGN) { + t_cose_options |= T_COSE_OPT_ALLOW_SHORT_CIRCUIT; + } + t_cose_mac0_verify_init(&verify_ctx, t_cose_options); attest_key.crypto_lib = T_COSE_CRYPTO_LIB_PSA; |