Hash OEM Certificate

(This is a merge of wvgerrit/25582)

Provisioning 3.0 devices that do not use SPOIDs have been returning
their full OEM Public Certificate as their device ID. While this is not
a security concern, (it is a PUBLIC cert) the cert is many times larger
than applications are likely expecting. (several kilobytes vs. just a
few bytes) This patch hashes the OEM Public Certificate to produce a
smaller value, but only when it is being provided out of the CDM to a
caller.

Bug: 34716264
Test: run_all_unit_tests.sh
Change-Id: Ib82cf7a174a8bf02ff606edd0394ada13842224c
This commit is contained in:
John W. Bruce
2017-04-11 11:57:57 -07:00
parent c0a7655834
commit 8513b71499
5 changed files with 30 additions and 7 deletions

View File

@@ -540,7 +540,7 @@ CdmResponseType CdmEngine::QueryStatus(SecurityLevel security_level,
std::string deviceId;
bool got_id;
M_TIME(
got_id = crypto_session.GetDeviceUniqueId(
got_id = crypto_session.GetExternalDeviceUniqueId(
&deviceId),
&metrics_,
crypto_session_get_device_unique_id_,