In spec only S3 old key dropped before verify new key operation

Signed-off-by: OuyangHang33 <[email protected]>
ccc-spdm-tools · Apr 26, 2024 · 90dc8da · 90dc8da
1 parent fae2ec6
commit 90dc8da
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/spdmlib/src/responder/key_update_rsp.rs b/spdmlib/src/responder/key_update_rsp.rs
@@ -70,7 +70,7 @@ impl ResponderContext {
             }
             SpdmKeyUpdateOperation::SpdmUpdateAllKeys => {
                 let _ = session.create_data_secret_update(spdm_version_sel, true, true);
-                let _ = session.activate_data_secret_update(spdm_version_sel, true, true, true);
+                let _ = session.activate_data_secret_update(spdm_version_sel, false, true, true);
             }
             SpdmKeyUpdateOperation::SpdmVerifyNewKey => {
                 let _ = session.activate_data_secret_update(spdm_version_sel, true, false, true);