cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-15 10:08:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

Clarify the case of direct inputs

Browse Source 
Now use the same description for INPUT_SECRET and INPUT_PASSWORD too.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2021-05-05 10:05:06 +02:00
parent acfde465f0
commit 730f62a80a
1 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
include/psa/crypto_values.h
View File

@ -2267,10 +2267,11 @@ static inline int mbedtls_svc_key_id_is_null( mbedtls_svc_key_id_t key )
* *
* The secret can also be a direct input (passed to * The secret can also be a direct input (passed to
* key_derivation_input_bytes()). In this case, the derivation operation * key_derivation_input_bytes()). In this case, the derivation operation
* may not be used to derive keys: the operation will only allow * may not be used to derive or verify keys: the operation will only allow
* psa_key_derivation_output_bytes() or * psa_key_derivation_output_bytes() or
* psa_key_derivation_verify_xxx() but not * psa_key_derivation_verify_bytes() but not
* psa_key_derivation_output_key(). * psa_key_derivation_output_key() or
* psa_key_derivation_verify_key().
*/ */
#define PSA_KEY_DERIVATION_INPUT_SECRET ((psa_key_derivation_step_t)0x0101) #define PSA_KEY_DERIVATION_INPUT_SECRET ((psa_key_derivation_step_t)0x0101)
@ -2282,9 +2283,13 @@ static inline int mbedtls_svc_key_id_is_null( mbedtls_svc_key_id_t key )
* also be high-entropy secret such as a key of type #PSA_KEY_TYPE_DERIVE or * also be high-entropy secret such as a key of type #PSA_KEY_TYPE_DERIVE or
* the shared secret resulting from a key agreement. * the shared secret resulting from a key agreement.
* *
* If the secret is a direct input, the derivation operation * The secret can also be a direct input (passed to
* may not be used to derive keys: the operation will only allow * key_derivation_input_bytes()). In this case, the derivation operation
* psa_key_derivation_output_bytes(), not psa_key_derivation_output_key(). * may not be used to derive or verify keys: the operation will only allow
* psa_key_derivation_output_bytes() or
* psa_key_derivation_verify_bytes(), not
* psa_key_derivation_output_key() or
* psa_key_derivation_verify_key().
*/ */
#define PSA_KEY_DERIVATION_INPUT_PASSWORD ((psa_key_derivation_step_t)0x0102) #define PSA_KEY_DERIVATION_INPUT_PASSWORD ((psa_key_derivation_step_t)0x0102)