E2EESetupResponse0
data class E2EESetupResponse0(val cloudNonce: ByteArray, val serverState: ByteArray) : CloudSecureAreaProtocol.Command
This is sent in response to E2EESetupRequest0.
When the devices receives this message it shall generate deviceNonce
and create EDeviceKey
which shall be a EC key using curve P-256. It is not a requirement to use hardware-backed keystore for EDeviceKey
.
The device then uses DeviceBindingKey
(created at registration time) to create an ECDSA signature over the bytes of the CBOR
DataSignedByDevice = [
COSE_Key, ; EDeviceKey.pub
bstr, ; cloudNonce
bstr ; deviceNonce
]
Content copied to clipboard
The device proceeds to prepare a E2EESetupRequest1 message.