docs/design/auth-framework.rst

327    description provided by the platform in the CoT descriptor.
414 The authentication framework will use the image descriptor to extract all the
498 The ``get_auth_param()`` function is passed a parameter descriptor containing
504 will be used by the IPM to find the right parser descriptor for the image.
595      * Authentication method descriptor
724 Each image descriptor must specify:
738 -  ``parent``: pointer to the parent image descriptor. The parent will contain
746    descriptors. A parameter descriptor consists of a type and a cookie which
773    Each parameter consists of a parameter descriptor and the buffer
920 extensions. This must be specified in the image descriptor using the
928 -  ``subject_pk``: parameter descriptor of type ``AUTH_PARAM_PUB_KEY``. This type
934 -  ``sig``: parameter descriptor of type ``AUTH_PARAM_SIG``. It is used to extract
936 -  ``sig_alg``: parameter descriptor of type ``AUTH_PARAM_SIG``. It is used to
938 -  ``raw_data``: parameter descriptor of type ``AUTH_PARAM_RAW_DATA``. It is used
944 the corresponding parameter descriptor must be specified along with the buffer
946 descriptor is used to extract the public key from an x509v3 extension with OID
947 ``TRUSTED_WORLD_PK_OID``. The BL31 key certificate will use this descriptor as
953 certificate. In the image descriptor, we specify a single authentication method
967 with the hash obtained from the BL31 certificate. The image descriptor contains