Skip to content

msg3_create is nor verifying MAC or Signature #29

Open
@fjmolinas

Description

See

EDHOC-C/src/process.c

Lines 493 to 495 in 8ef379d

if (ctx->method == EDHOC_AUTH_SIGN_SIGN || ctx->method == EDHOC_AUTH_SIGN_STATIC) {
// TODO: verify certificate
}
at least signature is definitely not verified, but I'm also under the impression that the MAC is not verified either.

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions