[SPDM 1.3] The SlotID fields shall not specify this certificate slot when the corresponding Key Usage is not set.

[Zhiqiang520]

The SlotID fields shall not specify this certificate slot when the corresponding MULTI_KEY_CONN_REQ or MULTI_KEY_CONN_RSP is true and the corresponding Key Usage is not set, for CHALLENGE, MEASUREMENTS, KEY_EXCHANGE and so on.

1. Refer to the paragraph 373 Table 37 — Key usage bit mask In DSP0274_1.3.0.pdf.
   

2. For example, slot_id received from CHALLENGE request message at line 94 was directly set to auth_attribute without checking its corresponding Key Usage at line 141.
   

   libspdm/library/spdm_responder_lib/libspdm_rsp_challenge_auth.c

   Line 94 in 159ecd1

   slot_id = spdm_request->header.param1;

   
   

   libspdm/library/spdm_responder_lib/libspdm_rsp_challenge_auth.c

   Lines 139 to 141 in 159ecd1

   	spdm_response->header.spdm_version = spdm_request->header.spdm_version;
   	spdm_response->header.request_response_code = SPDM_CHALLENGE_AUTH;
   	auth_attribute = (uint8_t)(slot_id & 0xF);

[jyao1]

@Zhiqiang520 please create a test for that.

[Zhiqiang520]

@jyao1 We have created test cases to catch this issue.
#2518