DeviceEncryptionKey

  • The JSON representation includes a publicKey, signature, and keyId.

  • publicKey is a base64 encoded ephemeral public key, generated by the device, formatted as an Elliptic Curve Point in Uncompressed format.

  • signature is a base64 encoded signature of the ephemeral public key, signed by the device's identity key.

  • keyId is the identifier for the ephemeral public key generated by the device.

An ephemeral encryption public key, and associated metadata.

JSON representation 
{
  "publicKey": string,
  "signature": string,
  "keyId": string
}
Fields
publicKey

string

The base64 encoded ephemeral public key, generated by the device for this request. The key is Elliptic Curve Point in Uncompressed format, as specified by the HPKE KEM-encoding.
signature

string

The base64 encoded signature of the ephemeral public key, signed by the device's identity key. This will be a COSE_Sign1 object, in the ProofOfOwnership format. The "challenge" in this format will be SHA-256(ephemeral public key).
keyId

string

The key id of the ephemeral public key generated by the device.