Lines Matching refs:S

293      *     In what follows, T is the IKeymasterDevice instance without storage, S is the
297      *     2. T sends K1_pub to S, signed with T's attestation key.
298      *     3. S validates the signature on K1_pub.
299      *     4. S generates an ephemeral EC P-256 key pair K2.
300      *     5. S sends {K1_pub, K2_pub}, to T, signed with S's attestation key.
303      *     8. T generates a random seed S.
304      *     9. T computes K = KDF(HBK, S), where KDF is some secure key derivation function.
305      *     10. T sends M = AES-GCM-ENCRYPT(Q, {S || K}) to S.
306      *     10. S uses {K2_priv, K1_pub} with ECDH to compute session secret Q.
307      *     11. S computes S || K = AES-GCM-DECRYPT(Q, M) and stores S and K.
309      *     When S receives the getHmacSharingParameters call, it returns the stored S as the seed
311      *     T receives the computeSharedHmac call, it uses the seed provided by S to compute K.  S,