6.4.5 Target Machine ECDSA Validation


  How validation works on Target Machine(s)


Validation action usually takes place only the TARGET Machine.


On a TARGET Machine, only the Public Key should be present. SecureDELTA makes use of the Private Key to sign SecureUPDATE files and the Public Key to validate them.


Step 1: Depending on the stored algorithm, an MD5 or a SHA256 is computed on the whole SecureUPDATE diff file.

Step 2: The MD5 or the SHA256 generated is verified using the Public key and the ECDSA algorithm.

Step 3: After validation, sensitive header information is decrypted and SecureUPDATE process starts.


Recommendation: Use a secure channel to 'transport' the Public KEY on TARGET Machine(s)


Steps to accomplish SecureSIGN Validation on TARGET MACHINEs: