docs/design/auth-framework.rst

170 #. Statically allocating memory for each parameter in each image which is
488 -  ``_get_param``: extract authentication parameter function pointer.
498 The ``get_auth_param()`` function is passed a parameter descriptor containing
499 information about the parameter (``type_desc`` and ``cookie``) to identify and
500 extract the data corresponding to that parameter from an image. This data will
522 The AM defines the type of each parameter used by an authentication method. It
526    parameter should be extracted from an image.
547 The AM defines the following structure to identify an authentication parameter
558 which enables it to uniquely identify the parameter that should be extracted
611 A parameter described by ``auth_param_type_desc_t`` to verify an image could be
619 authentication parameter.
745    authenticated. Each method consists of a type and a list of parameter
746    descriptors. A parameter descriptor consists of a type and a cookie which
747    will point to specific information required to extract that parameter from
748    the image (i.e. if the parameter is stored in an x509v3 extension, the
755       from the parent image. The following parameter descriptors must be
763       the platform if the parent is NULL). The following parameter descriptors
773    Each parameter consists of a parameter descriptor and the buffer
774    address/size to store the parameter. The CoT is responsible for allocating
783 Next in that file, the parameter descriptors are defined. These descriptors will
784 be used to extract the parameter data from the corresponding image.
926 four parameter descriptors must be specified with the authentication method:
928 -  ``subject_pk``: parameter descriptor of type ``AUTH_PARAM_PUB_KEY``. This type
934 -  ``sig``: parameter descriptor of type ``AUTH_PARAM_SIG``. It is used to extract
936 -  ``sig_alg``: parameter descriptor of type ``AUTH_PARAM_SIG``. It is used to
938 -  ``raw_data``: parameter descriptor of type ``AUTH_PARAM_RAW_DATA``. It is used
944 the corresponding parameter descriptor must be specified along with the buffer
945 address to store the parameter value. In this case, the ``trusted_world_pk``
948 parameter in the signature authentication method. The key is stored in the