Skip to content

1.4 Add opaque to FINISH/PSK_FINISH #3150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Aug 15, 2025
Merged

1.4 Add opaque to FINISH/PSK_FINISH #3150

merged 5 commits into from
Aug 15, 2025

Conversation

jyao1
Copy link
Member

@jyao1 jyao1 commented Jul 18, 2025

Fix #3130

NOTE: This PR is based on #3129.

@jyao1 jyao1 requested a review from steven-bellock as a code owner July 18, 2025 05:31
@jyao1 jyao1 force-pushed the finish_opaque branch 4 times, most recently from 7a2deec to c0876d4 Compare July 18, 2025 05:53
@steven-bellock
Copy link
Contributor

NOTE: This PR is based on #3129.

Why does this need PQC? Opaque data should be completely independent of that.

@@ -603,8 +674,15 @@ libspdm_return_t libspdm_get_response_finish(libspdm_context_t *spdm_context, si
spdm_response->header.param1 = 0;
spdm_response->header.param2 = 0;

ptr = (uint8_t *)spdm_response + sizeof(spdm_finish_response_t);
if (libspdm_get_connection_version(spdm_context) >= SPDM_MESSAGE_VERSION_14) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why doesn't the Responder generate opaque data?

Copy link
Member Author

@jyao1 jyao1 Jul 21, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No OpaqueData is required in FINISH by SPDM spec. It is same as today. No additional device specific OpaqueData is required in KEY_EXCHANGE.
This is for future Auth Spec.

The new OpaqueData handling will be addressed in #2936

@jyao1
Copy link
Member Author

jyao1 commented Jul 21, 2025

NOTE: This PR is based on #3129.

Why does this need PQC? Opaque data should be completely independent of that.

This does not need PQC, but this does need SPDM 1.4.
Opaque is only present in 1.4+

@jyao1 jyao1 force-pushed the finish_opaque branch 2 times, most recently from b109570 to 56977b2 Compare August 5, 2025 02:23
@jyao1 jyao1 requested a review from steven-bellock August 5, 2025 02:24
@jyao1 jyao1 merged commit 6f83128 into DMTF:main Aug 15, 2025
97 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1.4 Add OpaqueData for FINISH and PSK_FINISH
2 participants