Skip to content

Enforce unknown_verification_key_id #4787

Description

@jcjones

ietf-wg-ppm/draft-ietf-ppm-dap#784

If AggregationJobInitReq.verification_key_id doesn't identify a key configured for the task, the Helper MUST reject each report with unknown_verification_key_id; the Leader MAY retry with a different key ID.

Today the field is log-only (aggregator/src/aggregator.rs:2268) and AggregatorTask holds a single unkeyed vdaf_verify_key (aggregator_core/src/task.rs:143), so this needs a key-ID --> key mapping on the task.

Probably needs a coordinated divviup-api change.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions