- Add a flag ENABLE_LICENSE_PROTOCOL_2_2, when the flag is enabled
- Hash the license request in WB_License_ProcessLicenseResponse, i.e.
the request used for the key derivation, which ensures the key
derivation message to be a string of constant size 64 bytes.
- Hash the license request in WB_License_SignLicenseRequest. Note that
the function takes license request (or hashed) + odk message as
parameter for odk v17 or above.
- Enable the flag just for Chrome and ChromeOS for now.
We may change the implementation to hash inside the white-box in the
future.
Also included a few other misc changes, e.g. updating the DEPS of
boringssl and googletest which are already in the white-box directory,
adding a test main etc.
The two major changes in this code drop are:
1. The introduction of WB_License_QueryKeyStatus(). This function
makes it possible for the White-box to skip keys in the license and
report the usefulness of the key to the CDM.
2. The restructuring of the repo, making it easier to share test
BUILD files and set the foundation for the new code drop structure.
This change brings the partner repo in sync with the internal repo
at commit f3b472a541262ca4d425d2b294de39a99385a3d2.
This is the initial code drop of the reference implementation and
test cases for the Widevine Whitebox API.
In this drop, the full reference implementation for the AEAD
white-box is provided and all test cases verifying the top-level
behave have are enabled. Since the implementations can vary so much
the testing is mostly left to verifying the return codes for specific
parameter conditions.
A full reference implementation for the license white-box is provided,
however not all tests are implemented or enabled. A number of tests
have been disabled as they required a loaded license and test licenses
are still being worked on.
The two license white-box API functions that are the further from
competition are ProcessLicenseResponse() and MaskedDecryt().
ProcessLicenseResponse() is still being worked on and MaskedDecrypt()
is waiting on Decrypt() to be fully functional.
Most tests focus on verifying return code for specific parameter
conditions, but as test licenses are created, tests looking to test
the internal behaviour of license management will be added to
ProcessLicenseResponse(), Decrypt(), and MaskedDecrypt().
