Don't use key derivation multipart inputs for key agreement

It isn't a good fit. It's overly complex for what the API can do now,
which is Diffie-Hellman. Consider it again later for more complex use
cases such as authenticated key exchanges.
This commit is contained in:
Gilles Peskine 2019-01-09 16:13:42 +01:00
parent 6cdfdb75a9
commit 41ac513de8

View file

@ -1454,21 +1454,6 @@
*/ */
#define PSA_KDF_STEP_INFO ((psa_key_derivation_step_t)0x0203) #define PSA_KDF_STEP_INFO ((psa_key_derivation_step_t)0x0203)
/** The private key in a key agreement.
*
* This must be a key pair of the appropriate type for the key agreement
* algorithm.
*/
#define PSA_KDF_STEP_OUR_KEY ((psa_key_derivation_step_t)0x0301)
/** A label for key derivation.
*
* This may be a key pair of the appropriate type for the key agreement
* algorithm, or a direct input which is parsed as a public key in the
* same format as psa_import_key().
*/
#define PSA_KDF_STEP_PEER_KEY ((psa_key_derivation_step_t)0x0302)
/**@}*/ /**@}*/
#endif /* PSA_CRYPTO_VALUES_H */ #endif /* PSA_CRYPTO_VALUES_H */