diff options
author | Yicheng Li <yichengli@chromium.org> | 2020-08-17 11:08:45 -0700 |
---|---|---|
committer | Commit Bot <commit-bot@chromium.org> | 2020-08-26 02:21:43 +0000 |
commit | 1e0753b2ad142d1de9a03b1b667cadcdc13b9d13 (patch) | |
tree | 6788f552898e8dc9b3ae36daed26db036d3e1be5 /include | |
parent | 4b4bbc8d761225b260625584dadbc6d4e623ef2d (diff) | |
download | chrome-ec-1e0753b2ad142d1de9a03b1b667cadcdc13b9d13.tar.gz |
u2f: Remove legacy KH support
U2f key handles generated before January 2019 do not mix in user
secrets. These legacy key handles should no longer be in use since
it's been > 10 releases.
Another change will remove this concept on u2fd side.
BUG=b:165018526
TEST=build cr50
Signed-off-by: Yicheng Li <yichengli@chromium.org>
Change-Id: I57a6a77e512591f14ef8c818ec6027a6ae21189d
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/2358425
Reviewed-by: Vadim Sukhomlinov <sukhomlinov@chromium.org>
Diffstat (limited to 'include')
-rw-r--r-- | include/u2f_impl.h | 24 |
1 files changed, 0 insertions, 24 deletions
diff --git a/include/u2f_impl.h b/include/u2f_impl.h index 2c63d11d87..fd2cc05ba1 100644 --- a/include/u2f_impl.h +++ b/include/u2f_impl.h @@ -30,30 +30,6 @@ enum touch_state pop_check_presence(int consume); /* ---- platform cryptography hooks ---- */ /** - * Generate an origin-specific ECDSA keypair. - * - * Calculates a diversified chip-unique 256b value. - * - * @param seed ptr to store 32-byte seed to regenerate this key on this chip - * @param d pointer to ECDSA private key - * @param pk_x pointer to public key point - * @param pk_y pointer to public key point - * - * @return EC_SUCCESS if a valid keypair was created. - */ -int u2f_origin_keypair(uint8_t *seed, p256_int *d, - p256_int *pk_x, p256_int *pk_y); - -/** - * Reconstitute the origin ECDSA private key from its seed. - * - * @param seed value returned by origin_keypair. - * @param d ptr to store the retrieved private key. - * @return EC_SUCCESS if we retrieved the key. - */ -int u2f_origin_key(const uint8_t *seed, p256_int *d); - -/** * Pack the specified origin, user secret and origin-specific seed * into a key handle. * |