Update provisioning tooling and libraries from release_2.9-1.6

provision/headers/AttestationKey.h

@@ -29,6 +29,15 @@ namespace Provision {
 
 static constexpr uint32_t kCreds_KeyId_Default = 2; //(PSA_KEY_ID_USER_MIN + 1);
 
+// Size of the buffer holding the CSR subject name:
+//   "CN=<cn>, 1.3.6.1.4.1.37244.2.1=VVVV, 1.3.6.1.4.1.37244.2.2=PPPP\0"
+//   - <cn>:       X.509 ub-common-name limit of 64 chars (RFC 5280, Appendix A.1)
+//   - VVVV/PPPP:  Matter VID/PID OID values, 4 uppercase-hex chars each
+//   - literals:   "CN=", ", " separators and the two OID prefixes = 59 chars
+//   - NUL:        1 char
+// Worst case: 64 + 59 + 1 = 124, rounded up to 128.
+static constexpr size_t kSubjectNameLengthMax = 128;
+
 class AttestationKey
 {
 public:

provision/headers/ProvisionStorage.h

@@ -156,7 +156,8 @@ struct Storage : public GenericStorage,
     static constexpr size_t kDeviceAttestationKeySizeMax = 128;
     static constexpr size_t kSetupPayloadSizeMax         = 32;
     static constexpr size_t kCsrLengthMax                = 512;
-    static constexpr size_t kCommonNameMax               = 128;
+    // X.509 (RFC 5280, Appendix A.1): CommonName attribute value is limited to 64 characters
+    static constexpr size_t kCommonNameMax = 64;
     static constexpr size_t kTotalPayloadDataSizeInBits =
         (kVersionFieldLengthInBits + kVendorIDFieldLengthInBits + kProductIDFieldLengthInBits +
          kCommissioningFlowFieldLengthInBits + kRendezvousInfoFieldLengthInBits + kPayloadDiscriminatorFieldLengthInBits +