Page Comparison

Must have:

• CDI as given by BL1 must be used to generate the Device ID key-pair.

• Device ID key-pair should be based on ED25519.

• The device generated Device ID public key should be used when creating the Device ID certificate.

• The Device ID public key should be handed over to BL3.1.

• The Device ID certificate should be handed over to BL3.1.

• CDI and the Device ID private key should never be accessible by BL3.1.

Nice to have:

• Ability to generate CSR for the public Device ID key.

Not in scope:

• Alias key pair generation

• Other extensions, like the Google Open Profile for DICE.