tree c8197edb0acea04918bd5335fc234afcc59e012e
parent 9b901a30b78050bcd46048b7c153b51890a28d75
author Darren Krahn <dkrahn@google.com> 1650676987 -0700
committer CQ Bot Account <pigweed-scoped@luci-project-accounts.iam.gserviceaccount.com> 1650982763 +0000

Specification v2.4 with code changes

Changes to the specification include:
* Fixed typos
* Various minor changes for clarity
* Added guidance for asymmetric key derivation
* Updated KDF guidance regarding HKDF extract, and added SP800-108
* Removed omitted CBOR Web Token fields for CBOR certificate; these fields are
  now effectively optional
* In X.509 CDI certificates, changed the custom extension to be marked critical

The only code change is to mark the X.509 custom extension critical.

Change-Id: Iceefbd91aef19904454420724b30986e22823a4b
Reviewed-on: https://pigweed-review.googlesource.com/c/open-dice/+/92280
Reviewed-by: Andrew Scull <ascull@google.com>
Commit-Queue: Darren Krahn <dkrahn@google.com>