in java/remoteprovisioning/EekCertChainSerializer.java [64:82]
public EekCertChainSerializer(
byte[] encodedRootCert,
byte[] encodedIntCert,
ECPrivateKey intSigningKey,
ECPublicKey eek) throws CborException, CryptoException {
eekChain = CBORObject.NewArray();
CBORObject rootCert = CBORObject.DecodeFromBytes(encodedRootCert);
CBORObject intCert = CBORObject.DecodeFromBytes(encodedIntCert);
eekChain.Add(rootCert);
eekChain.Add(intCert);
try {
eekChain.Add(CryptoUtil.createCertificate(new OneKey(null, intSigningKey),
new OneKey(eek, null),
AlgorithmID.ECDSA_256,
AlgorithmID.ECDH_ES_HKDF_256));
} catch (CoseException e) {
throw new CryptoException("Failed to encode key.", e, CryptoException.MALFORMED_KEY);
}
}