|author||Darren Krahn <email@example.com>||Wed Mar 27 09:10:49 2019 -0700|
|committer||android-build-merger <firstname.lastname@example.org>||Wed Mar 27 09:10:49 2019 -0700|
Update epid_sdk to use Intel IPP crypto library version 2019 update 1, per CVE-2018-12155. am: 10cdf58422 am: 07de51c7e8 am: 732e2109f1 Change-Id: I4390b3ee2d3083255edb29f4a29eee0b375056aa
The Intel(R) Enhanced Privacy ID Software Development Kit
Intel(R) EPID SDK enables adding Intel(R) EPID support to applications and platforms.
Intel(R) EPID is a cryptographic protocol which enables the remote authentication of a trusted platform whilst preserving the user's privacy.
For a given public key there are many (e.g., millions) of private keys. The key holders form a group.
Any key holder may sign against the one public key.
No one can tell which private key signed the data. This is the privacy property.
You can use Intel(R) EPID as a foundational building block for a multitude of security solutions.
See doc/index.html to browse the html documentation.
The source code used for math primitives in the Intel(R) EPID SDK is a subset of the Intel(R) IPP Cryptography library (version 2017 Update 2) written in pure C and not optimized for performance. For higher performance, you can use the commercial version of the IPP Cryptography library, which is available at https://software.intel.com/articles/download-ipp-cryptography-libraries.
More information on the optimized versions of Intel(R) IPP Cryptography library, including mitigations for a potential side-channel issue are available at https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr.