ietf-wg-ppm/draft-ietf-ppm-dap#784
If AggregationJobInitReq.verification_key_id doesn't identify a key configured for the task, the Helper MUST reject each report with unknown_verification_key_id; the Leader MAY retry with a different key ID.
Today the field is log-only (aggregator/src/aggregator.rs:2268) and AggregatorTask holds a single unkeyed vdaf_verify_key (aggregator_core/src/task.rs:143), so this needs a key-ID --> key mapping on the task.
Probably needs a coordinated divviup-api change.
ietf-wg-ppm/draft-ietf-ppm-dap#784
If
AggregationJobInitReq.verification_key_iddoesn't identify a key configured for the task, the Helper MUST reject each report withunknown_verification_key_id; the Leader MAY retry with a different key ID.Today the field is log-only (
aggregator/src/aggregator.rs:2268) andAggregatorTaskholds a single unkeyedvdaf_verify_key(aggregator_core/src/task.rs:143), so this needs a key-ID --> key mapping on the task.Probably needs a coordinated divviup-api change.