6.4.5 Target Machine ECDSA Validation
6.4.5 Target Machine ECDSA Validation
How validation works on Target Machine(s)
Validation action usually takes place only the TARGET Machine.
On a TARGET Machine, only the Public Key should be present. SecureDELTA makes use of the Private Key to sign SecureUPDATE files and the Public Key to validate them.
Step 1: Depending on the stored algorithm, an MD5 or a SHA256 is computed on the whole SecureUPDATE diff file.
Step 2: The MD5 or the SHA256 generated is verified using the Public key and the ECDSA algorithm.
Step 3: After validation, sensitive header information is decrypted and SecureUPDATE process starts.
Recommendation: Use a secure channel to 'transport' the Public KEY on TARGET Machine(s)
Steps to accomplish SecureSIGN Validation on TARGET MACHINEs: