From 4c760cbbfb7816516e2a782336ceb311d87a78c2 Mon Sep 17 00:00:00 2001
From: Shubham Patil <shubham.patil@espressif.com>
Date: Fri, 20 Dec 2024 16:59:43 +0530
Subject: [PATCH] credentials: sample delegated crl signer certs and CRLs

re-using the existing revoked PAI and DACs, and generated the indirect
CRL by revoking the same ones.
---
 ...est-PAA-FFF1-Delegated-CRL-Signer-Cert.der | Bin 0 -> 482 bytes
 ...est-PAA-FFF1-Delegated-CRL-Signer-Cert.pem |  13 ++++
 ...Test-PAA-FFF1-Delegated-CRL-Signer-Key.der | Bin 0 -> 121 bytes
 ...Test-PAA-FFF1-Delegated-CRL-Signer-Key.pem |   5 ++
 .../Chip-Test-PAA-FFF1-Delegated-CRL.der      | Bin 0 -> 294 bytes
 .../Chip-Test-PAA-FFF1-Delegated-CRL.pem      |   9 +++
 ...ent-PAI-FFF1-Delegated-CRL-Signer-Cert.der | Bin 0 -> 516 bytes
 ...ent-PAI-FFF1-Delegated-CRL-Signer-Cert.pem |  13 ++++
 ...ment-PAI-FFF1-Delegated-CRL-Signer-Key.der | Bin 0 -> 121 bytes
 ...ment-PAI-FFF1-Delegated-CRL-Signer-Key.pem |   5 ++
 ...velopment-PAI-FFF1-noPID-Delegated-CRL.der | Bin 0 -> 371 bytes
 ...velopment-PAI-FFF1-noPID-Delegated-CRL.pem |  10 +++
 .../README.md                                 |  60 ++++++++++++++++++
 13 files changed, 115 insertions(+)
 create mode 100644 credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.der
 create mode 100644 credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.pem
 create mode 100644 credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.der
 create mode 100644 credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.pem
 create mode 100644 credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.der
 create mode 100644 credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.pem
 create mode 100644 credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.der
 create mode 100644 credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.pem
 create mode 100644 credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.der
 create mode 100644 credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.pem
 create mode 100644 credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.der
 create mode 100644 credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.pem
 create mode 100644 credentials/test/revoked-attestation-certificates/README.md

diff --git a/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.der b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.der
new file mode 100644
index 0000000000000000000000000000000000000000..9446797a8f58c1b390f9badd7814addb8f834668
GIT binary patch
literal 482
zcmXqLV!UV2#MrWcnTe5!NyOaMW!9`$?<Ot_^H`i?ooN>@a(S%*7aNCGo5wj@7G@>`
z149V|F*fE<7G@rP-^7xV)FOqD)Z!9_07pkd5d$GME^RhO7RIJUHB5{=EN*UYh6W1a
zyhbL5Mn(n(7N!QqW>FISMutEELnAY&fPt4GP!eLMCYqTFE~z=G>4_z&DGJU(J_^B^
z>3KjKLFS^_#ssx3(m<Gv9qd{rMyRuy8QGbg7+5m04bHnc@!o6wG~wX#2YPBJgj{8|
z>u@m0t#f^reD#67kYuH}4cGtg>wRX6mUe#Yn0_*x`9#~1c`na?a=OgQ-@Q1&AkKgX
z=uBB*M#ldvOa=@Fd>|e_hzATB#wG(<5TB1lj75Z7+~%4nYgLa&=(Xb)=Y;QaQDyQr
zkOxUCvj79IK_u(1Qn`Gf{G0t^j?>cx?%Xk4SXhS~(99kT2ChsB#p0hlEBBvn|5jkC
z8P@H3Z28Wk{!6PuD(n`@?fs|s<_D7^!*BJ)A`e9KbyxqiG%#n|FB#G2Z?#F~mPl;K
K>&TGSG7bRGWRXe$

literal 0
HcmV?d00001

diff --git a/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.pem b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.pem
new file mode 100644
index 00000000000000..e74d12cbafd8ba
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.der b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.der
new file mode 100644
index 0000000000000000000000000000000000000000..d4a4571f1543070821135a08f7d6c7610d4c5ec3
GIT binary patch
literal 121
zcmV-<0EYiCcLD(c1R&E%X~9#8E*V4zBpeptDK5#zJL{!ko$C#^DY3EZ*Ug{`1_&yK
zNX|V20SBQ(13~}<XlpRfMnVnVh4PTWr{FFo$Pz^yw=4(%9<D{^W7Xh45*c|HJPQB!
buS}a2b&2+fm&sQH$cDt8MCbVlM4E5A`86^>

literal 0
HcmV?d00001

diff --git a/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.pem b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.pem
new file mode 100644
index 00000000000000..ae81a1028730f2
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg00lpwVOJLhlEByQc
+FuApLsnGO+ulYZ3rDbcpsbHr182hRANCAARoazDPRkIN3oXykMGn4C4myBJFHLcs
+CAAerkXmY9XgPxIZeRc8Cv/3r0ybFXWJ9oiXyVcDyIbEnkTn+QlEmm+7
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.der b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.der
new file mode 100644
index 0000000000000000000000000000000000000000..bbe43405c6bb0c74908affa650643db44c66c275
GIT binary patch
literal 294
zcmXqLVpK9{Jjuk!Xu!qBq1EPb&X$Fl$-v9d$iRS&Ih2K&N7Fa4q$IUSAtbf9L?OV@
zQNblOCpA5>BsE3BImkyLI5RyDDC_3tW@sp4AjHO{&Bn;W*tDpIiHU~=Br48pWMXJ!
zWMF7uVrgt1CBbiG2o^Ae3K&QmNHTF4sHIqHciC$pt2Qu>TA**BYakDFh^#V;gn?Lt
z2)DS+HBr{89*@v#$1lza-{qpp<PCH=P=N^0-Hc4gzF_uXFmPp3@Z(c`9`PrfKYEE{
zom;&(|KxW|R=cH^ZBoxzlHK;}(gP+%hF$AVcBwGgSTMGj7x+s~Fibr*xnSw-MZ$ZS
LG{5jWRB!_T_?%8m

literal 0
HcmV?d00001

diff --git a/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.pem b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.pem
new file mode 100644
index 00000000000000..fce0da33e1fe09
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/Chip-Test-PAA-FFF1-Delegated-CRL.pem
@@ -0,0 +1,9 @@
+-----BEGIN X509 CRL-----
+MIIBIjCByQIBATAKBggqhkjOPQQDAjBKMTIwMAYDVQQDDClNYXR0ZXIgVGVzdCBQ
+QUEgRGVsZWdhdGVkIENSTCBTaWduZXIgRkZGMTEUMBIGCisGAQQBgqJ8AgIMBEZG
+RjEXDTI0MTIyMDEwNDkzN1oYDzIxMjQxMjIxMTA0OTM3WjAbMBkCCDAmZDkrij8q
+Fw0yNDEyMjAxMDQ5MDNaoC8wLTAfBgNVHSMEGDAWgBQLFzzWFQV6jEhV1sfRnFe6
+RCUCSzAKBgNVHRQEAwIBAjAKBggqhkjOPQQDAgNIADBFAiBODiXnWPxXD1ukQX5G
+f0sPk+6kq0ZldrInaKRrhvrS4AIhALqvyYokAjw4AYQ3cE8ZkDFlxpNwpduiE7wC
+KfQPQHgL
+-----END X509 CRL-----
diff --git a/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.der b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.der
new file mode 100644
index 0000000000000000000000000000000000000000..d70f5deb4e7f7ace107bbfea2e951a09ec7011c5
GIT binary patch
literal 516
zcmXqLVq!38VqCU>nTe5!NhF*%zUbW|&V;P1SC2^@S~K<DG7&KYE;bIWHji_*EX+&>
zwuY((%52P`EX+JIzKJCzsYMDdsbvZQj-Cnz6>e^Bh6;K43IU!jh9U++Y+TxGj4X^z
zi)xq{d00S_1`6W5Mka<vMg|6!#%3m#Q4;({hCl&BBQvOgLA;@%fj-0n4Kxc}Qgc$%
z6H8K46r6*66oNC;^MJO4j777I31S(hsD*)np+Tg9FdIAAKTM2Jk1;c{GdnS`+}g<U
zL22@pm}hfeFt6VK%DFu_#KF-xVJCA=*KEJP{$kB0Y3HTh-C4FE^8h>7_s25K=d|V=
z6<wyZ%PVnh%Js^|#R&#+20TEw%L+3x{%2t_U@+hV@%TYJVBj$}8OVb8d@N!tB4=mn
zJu6f&`PaSmu#4*bU3>es%<D9e2T3clNEnDUh$M&bxqtJPvAAf_vLxwZj$~~AZyV&O
zVD?}zaAi{P@pxyJRo(pGx1#J@!GipJGftMZ2WDtXxAwf^UF{(0!=%V?a;Anr)Keda
dq5>wqZyLAaDi><hbiV4I92sphz2WsWRR9H?n!Nx3

literal 0
HcmV?d00001

diff --git a/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.pem b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.pem
new file mode 100644
index 00000000000000..c381b617bbeb12
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----
+MIICADCCAaagAwIBAgIUVw1fcu6iCWBq1dXGGsKsld6mFBYwCgYIKoZIzj0EAwIw
+PTElMCMGA1UEAwwcTWF0dGVyIERldiBQQUkgMHhGRkYxIG5vIFBJRDEUMBIGCisG
+AQQBgqJ8AgEMBEZGRjEwIBcNMjQxMjIwMDkzNjQ5WhgPMjEyNDExMjYwOTM2NDla
+MF8xMTAvBgNVBAMMKE1hdHRlciBEZXYgUEFJIERlbGVnYXRlZCBDUkwgU2lnbmVy
+IEZGRjExFDASBgorBgEEAYKifAICDARGRkYxMRQwEgYKKwYBBAGConwCAgwEODAw
+MTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABNqxBPAik9Rc5p3oA6u/6kOHU1RA
+QTNguQNsiptO/U8WgzRmzxru3KagacAHCvfjHAPOKpzFFaYiukphrWTXeYGjYDBe
+MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgGCMB0GA1UdDgQWBBTNmS7mcSA0
+/ou1w0Ql37q9jrSeiTAfBgNVHSMEGDAWgBRjVA5H9kscONE4hKRi0WwZXY/7PDAK
+BggqhkjOPQQDAgNIADBFAiBMSO42anuD/014dvZwoG9vNgkErcCYKxuFjOoNq0AZ
+TAIhAMmZKBBa5UxAcnACDvYo2l55oSh8ieqLk1lbPJeA69Yl
+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.der b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.der
new file mode 100644
index 0000000000000000000000000000000000000000..f7d9584ce498fa7b949c5d5aed0f8a99ab4c1add
GIT binary patch
literal 121
zcmV-<0EYiCcLD(c1R%*;`twIRUHGeDp(Tf%Y4h&MQ~vGiLWgwL|I~y`-)^7^1_&yK
zNX|V20SBQ(13~}<+OY)iB9qiy=AGyRtH0_)hf`EQK{H^v18j<$PW?|7gEVH(8t&Yt
bplQGd3isn21I{X(#TBL^x=LZKWY>9tQ%^Wd

literal 0
HcmV?d00001

diff --git a/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.pem b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.pem
new file mode 100644
index 00000000000000..c7261dc2a12680
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgyVr680c6XfirYKEl
+h51p8+7JU/7t60KHdNb/1IRM326hRANCAATasQTwIpPUXOad6AOrv+pDh1NUQEEz
+YLkDbIqbTv1PFoM0Zs8a7tymoGnABwr34xwDziqcxRWmIrpKYa1k13mB
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.der b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.der
new file mode 100644
index 0000000000000000000000000000000000000000..e6ca9a4ad9ac166d8f4c931139cc1f844a6e662d
GIT binary patch
literal 371
zcmXqLV$3&aViaLwWHjJn<IrmJIA_bk%w!O6XlS6%#vIDR%%kC(SW=Q&q~MZTrV!xh
z38ZsU(-TWlQxu$od=!E+)AN9mZf<Udh9U++Y+TxGj4X^zi)xsdcv!HDS{N7@it`$o
z7#bNF7#f%wnV3aM@EaL|1%TFq1q=cWB$+t4HaK}YEB^~YQEd_hl9Dv5o!+-5*a}(7
z*cdFOnrUIHvfJzxij-y40(}Er19_mIWR+PY48$5l&d$_(R;Xa|uY2oZ7uEZ__V#U=
z*9i;+paKzK5HPYJ2MDt#gMk~9BE!*H$0Le)a|GsxXZBBd@GJ7`fvoe=i<}i+?>i9U
s%6i@esAMI_PkToG<x|A2*8A<_Jbst;ytAX%R1=90N00OMY4PU(0H@Yt!2kdN

literal 0
HcmV?d00001

diff --git a/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.pem b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.pem
new file mode 100644
index 00000000000000..488ed951a2e5d3
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/Matter-Development-PAI-FFF1-noPID-Delegated-CRL.pem
@@ -0,0 +1,10 @@
+-----BEGIN X509 CRL-----
+MIIBbzCCARQCAQEwCgYIKoZIzj0EAwIwXzExMC8GA1UEAwwoTWF0dGVyIERldiBQ
+QUkgRGVsZWdhdGVkIENSTCBTaWduZXIgRkZGMTEUMBIGCisGAQQBgqJ8AgIMBEZG
+RjExFDASBgorBgEEAYKifAICDAQ4MDAxFw0yNDEyMjAxMDUyNDZaGA8yMTI0MTIy
+MTEwNTI0NlowUTAZAggKsEJJQyP+VBcNMjQxMjIwMTA1MjQ0WjAZAggZNn2XjqxT
+OhcNMjQxMjIwMTA1MjMzWjAZAgglaTg9JLs26hcNMjQxMjIwMTA1MjM5WqAvMC0w
+HwYDVR0jBBgwFoAUzZku5nEgNP6LtcNEJd+6vY60nokwCgYDVR0UBAMCAQQwCgYI
+KoZIzj0EAwIDSQAwRgIhAMWax1hzDWwQn1dpj5Tg+ln1wGrPG6JDIOu+wFRFBc80
+AiEAqQj5PwEPp5QW1X9OvgnH3QXPQ0FKlTQY8MXHDo4qD2w=
+-----END X509 CRL-----
diff --git a/credentials/test/revoked-attestation-certificates/README.md b/credentials/test/revoked-attestation-certificates/README.md
new file mode 100644
index 00000000000000..9bc64f03b97b44
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/README.md
@@ -0,0 +1,60 @@
+# Revoked Attestation Certificates
+
+This directory contains test certificates, keys, and CRLs for device attestation revocation testing scenarios.
+The test certificates and keys are intended to be used for testing purposes only and should not be used in production environments.
+
+## Direct CRL Signing
+In this approach, the CA directly signs the Certificate Revocation List (CRL).
+
+### PAA Signed CRL
+Process:
+1. PAA issues the PAI
+2. PAI issues the DAC
+3. PAA revokes the PAI and updates the CRL
+
+- PAA: `Chip-Test-PAA-FFF1-Cert.[pem|der]`
+- CRL: `Chip-Test-PAA-FFF1-CRL.[der|pem]`
+- PAI(revoked): `Chip-Test-PAI-FFF1-noPID-Revoked-Cert.[pem|der]`
+- DAC(signed by revoked PAI): `Chip-Test-DAC-FFF1-8001-Signed-By-Revoked-PAI-Cert.[pem|der]`
+
+### PAI Signed CRL
+Process:
+1. PAI issues the 3 DACs
+2. PAI issues the DAC and updates the CRL
+
+- PAI: `Matter-Development-PAI-FFF1-noPID-Cert.[pem|der]`
+- CRL: `Matter-Development-PAI-FFF1-noPID-CRL.[pem|der]`
+- DACs(revoked):
+    - `Matter-Development-DAC-FFF1-8001-Revoked-01-Cert.[pem|der]`
+    - `Matter-Development-DAC-FFF1-8002-Revoked-02-Cert.[pem|der]`
+    - `Matter-Development-DAC-FFF1-8003-Revoked-03-Cert.[pem|der]`
+
+## Indirect CRL Signing (delegated CRL signing)
+In this approach, the CA delegates the CRL signing responsibility to a separate entity.
+
+### PAA Delegated CRL Signing
+Process:
+1. PAA issues the PAI
+2. PAA issues the Delegated CRL Signer
+3. PAI issues the DAC
+4. Delegated CRL Signer revokes the PAI and updates the CRL
+
+- PAA: `Chip-Test-PAA-FFF1-Cert.[pem|der]`
+- CRL: `Chip-Test-PAA-FFF1-Delegated-CRL.[der|pem]`
+- PAA delegated CRL Signer: `Chip-Test-PAA-FFF1-Delegated-CRL-Signer-Cert.[pem|der]`
+- PAI(revoked by PAA delegated CRL Signer): `Chip-Test-PAI-FFF1-noPID-Revoked-Cert.[pem|der]`
+- DAC(signed by revoked PAI): `Chip-Test-DAC-FFF1-8001-Signed-By-Revoked-PAI-Cert.[pem|der]`
+
+### PAI Delegated CRL Signing
+Process:
+1. PAI issues the 3 DACs
+2. PAI issues the Delegated CRL Signer
+3. Delegated CRL Signer revokes the DACs and updates the CRL
+
+- PAI: `Matter-Development-PAI-FFF1-noPID-Cert.[pem|der]`
+- CRL: `Matter-Development-PAI-FFF1-noPID-Delegated-CRL.[pem|der]`
+- PAI delegated CRL Signer: `Matter-Development-PAI-FFF1-Delegated-CRL-Signer-Cert.[pem|der]`
+- DACs(revoked):
+    - `Matter-Development-DAC-FFF1-8001-Revoked-01-Cert.[pem|der]`
+    - `Matter-Development-DAC-FFF1-8002-Revoked-02-Cert.[pem|der]`
+    - `Matter-Development-DAC-FFF1-8003-Revoked-03-Cert.[pem|der]`
\ No newline at end of file