Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support COSE_Mac0 #226

Open
nodh opened this issue Jan 10, 2025 · 1 comment
Open

Support COSE_Mac0 #226

nodh opened this issue Jan 10, 2025 · 1 comment
Labels
enhancement New feature or request

Comments

@nodh
Copy link
Collaborator

nodh commented Jan 10, 2025

ISO/IEC 18013-5 defines the usage of COSE_Sign1 and COSE_Mac0 objects for device authentication. It defines HMAC 256/256 as the only required algorithm, defines a null payload (i.e. it is detached), and empty external AAD. The MAC key is derived using ECKA-DH (Elliptic Curve Key Agreement Algorithm - Diffie-Hellman) from BSI TR-03111, and Z_AB is used as the ephemeral MAC key. The final MAC Key is derived using HKDF from RFC 5869 with SHA-256.

While we did implement the signature object, we're lacking the support for the MAC object.

@nodh nodh added the enhancement New feature or request label Jan 10, 2025
@JesusMcCloud
Copy link
Collaborator

Timeline:

  1. AES (because it introduces MAC)
  2. Fix RsaOrHmac Mess
  3. ???
  4. COSE_Mac0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants