Hanno Becker 884f6af590 Always configure PSA-based keys for encryption and decryption ...

Mbed TLS cipher layer allows usage of keys for other purposes
than indicated in the `operation` parameter of `mbedtls_cipher_setkey()`.
The semantics of the PSA Crypto API, in contrast, checks key
usage against the key policy.

As a remedy, this commit modifies the PSA key slot setup to
always allow both encryption and decryption.

2018-11-22 14:03:39 +00:00

..

.gitignore

…

aes.c

Merge remote-tracking branch 'public/pr/2054' into development-proposed

2018-11-09 19:57:53 +00:00

aesni.c

…

arc4.c

…

aria.c

Use mbedtls_printf instead of printf

2018-08-13 13:49:52 +03:00

asn1parse.c

…

asn1write.c

Merge branch 'iotssl-1770' into development_thomas_dee

2018-11-02 10:52:49 +00:00

base64.c

…

bignum.c

Fix bias in random number generation in Miller-Rabin test

2018-10-09 16:36:53 +01:00

blowfish.c

…

camellia.c

…

ccm.c

enforce input and output of ccm selftest on stack

2018-07-30 11:29:26 +03:00

certs.c

Update hardcoded certificates in library/certs.c

2018-11-02 10:52:38 +00:00

chacha20.c

…

chachapoly.c

…

cipher_wrap.c

Fix style in NUM_CIPHERS definition in cipher_wrap.c

2018-11-22 14:03:39 +00:00

cipher.c

Always configure PSA-based keys for encryption and decryption

2018-11-22 14:03:39 +00:00

cmac.c

…

CMakeLists.txt

crypto: Add mbedtls-psa as a submodule

2018-11-21 12:54:57 +00:00

ctr_drbg.c

ctr_drbg: add comments relating the code with the NIST specification

2018-08-21 17:55:46 +03:00

debug.c

…

des.c

…

dhm.c

…

ecdh.c

Change to positive flow for all cases

2018-11-05 18:08:46 +02:00

ecdsa.c

Avoid using restartable and alternative ECP imp.

2018-11-05 14:04:26 +02:00

ecjpake.c

…

ecp_curves.c

…

ecp.c

Detect unsigned integer overflow in mbedtls_ecp_check_budget()

2018-10-26 15:09:35 +01:00

entropy_poll.c

Merge remote-tracking branch 'public/pr/1198' into development

2018-07-24 17:20:17 +01:00

entropy.c

…

error.c

Add common feature unavailable error

2018-11-09 13:57:37 +00:00

gcm.c

Deprecate hardware acceleration errors

2018-11-09 15:01:07 +00:00

havege.c

…

hkdf.c

…

hmac_drbg.c

…

Makefile

crypto: Add mbedtls-psa as a submodule

2018-11-21 12:54:57 +00:00

md2.c

…

md4.c

…

md5.c

…

md_wrap.c

…

md.c

…

memory_buffer_alloc.c

…

net_sockets.c

Merge remote-tracking branch 'public/pr/1198' into development

2018-07-24 17:20:17 +01:00

nist_kw.c

Add selftests

2018-07-24 16:43:20 +01:00

oid.c

…

padlock.c

…

pem.c

…

pk_wrap.c

Fix or improve some comments (and whitespace)

2018-10-15 15:27:49 +02:00

pk.c

Fix function name to fit conventions

2018-10-16 10:41:31 +02:00

pkcs5.c

…

pkcs11.c

…

pkcs12.c

…

pkparse.c

Reinitialize PK ctx in mbedtls_pk_parse_key before reuse are free

2018-10-11 11:31:15 +01:00

pkwrite.c

…

platform_util.c

Don't declare and define gmtime()-mutex on Windows platforms

2018-09-06 12:09:56 +01:00

platform.c

Omit runtime configuration of calloc/free if macro config enabled

2018-10-11 11:04:20 +01:00

poly1305.c

…

ripemd160.c

…

rsa_internal.c

Bignum: Deprecate mbedtls_mpi_is_prime()

2018-10-09 16:36:53 +01:00

rsa.c

Merge remote-tracking branch 'restricted/pr/510' into development-restricted-proposed

2018-11-12 14:29:14 +00:00

sha1.c

…

sha256.c

…

sha512.c

…

ssl_cache.c

…

ssl_ciphersuites.c

Merge remote-tracking branch 'upstream-public/pr/1378' into development

2018-08-10 10:59:53 +01:00

ssl_cli.c

Merge remote-tracking branch 'restricted/pr/520' into development-restricted-proposed

2018-11-12 14:30:16 +00:00

ssl_cookie.c

…

ssl_srv.c

Style: Add numerous comments indicating condition guarded by #endif

2018-08-28 10:13:29 +01:00

ssl_ticket.c

Fix bug in SSL ticket implementation removing keys of age < 1s

2018-08-21 17:48:52 +01:00

ssl_tls.c

Merge remote-tracking branch 'public/pr/2095' into development-proposed

2018-11-04 18:48:04 +00:00

threading.c

Don't declare and define gmtime()-mutex on Windows platforms

2018-09-06 12:09:56 +01:00

timing.c

Merge remote-tracking branch 'public/pr/1777' into development-proposed

2018-11-04 18:51:36 +00:00

version_features.c

Add config option for X.509/TLS to use PSA

2018-11-21 21:03:14 +00:00

version.c

…

x509_create.c

Break overly long line in library/x509_create.c

2018-11-02 10:52:38 +00:00

x509_crl.c

…

x509_crt.c

Merge remote-tracking branch 'public/pr/2052' into development-restricted-proposed

2018-11-07 12:59:14 +00:00

x509_csr.c

…

x509.c

Rename mbedtls_platform_gmtime() to mbedtls_platform_gmtime_r()

2018-09-05 15:06:19 +01:00

x509write_crt.c

…

x509write_csr.c

…

xtea.c

…