yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-04-28 12:36:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Do key usage policy extension when loading keys

Browse source 
Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>
This commit is contained in:
gabor-mezei-arm 2021-06-23 16:48:08 +02:00
parent 3e5f6cd58f
commit 6439e85094
2 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
include/psa/crypto_struct.h
View file

@ -391,15 +391,19 @@ static inline psa_key_lifetime_t psa_get_key_lifetime(
return( attributes->core.lifetime ); return( attributes->core.lifetime );
} }
static inline void psa_extend_key_usage_flags( psa_key_usage_t *usage_flags )
{
if( *usage_flags & PSA_KEY_USAGE_SIGN_HASH )
*usage_flags |= PSA_KEY_USAGE_SIGN_MESSAGE;
if( *usage_flags & PSA_KEY_USAGE_VERIFY_HASH )
*usage_flags |= PSA_KEY_USAGE_VERIFY_MESSAGE;
}
static inline void psa_set_key_usage_flags(psa_key_attributes_t *attributes, static inline void psa_set_key_usage_flags(psa_key_attributes_t *attributes,
psa_key_usage_t usage_flags) psa_key_usage_t usage_flags)
{ {
if( usage_flags & PSA_KEY_USAGE_SIGN_HASH ) psa_extend_key_usage_flags( &usage_flags );
usage_flags |= PSA_KEY_USAGE_SIGN_MESSAGE;
if( usage_flags & PSA_KEY_USAGE_VERIFY_HASH )
usage_flags |= PSA_KEY_USAGE_VERIFY_MESSAGE;
attributes->core.policy.usage = usage_flags; attributes->core.policy.usage = usage_flags;
} }

4
library/psa_crypto_slot_management.c
View file

@ -392,6 +392,10 @@ psa_status_t psa_get_and_lock_key_slot( mbedtls_svc_key_id_t key,
if( status == PSA_ERROR_DOES_NOT_EXIST ) if( status == PSA_ERROR_DOES_NOT_EXIST )
status = PSA_ERROR_INVALID_HANDLE; status = PSA_ERROR_INVALID_HANDLE;
} }
else
/* Do the key usage policy extension. */
psa_extend_key_usage_flags( &(*p_slot)->attr.policy.usage );
return( status ); return( status );
#else /* MBEDTLS_PSA_CRYPTO_STORAGE_C || MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS */ #else /* MBEDTLS_PSA_CRYPTO_STORAGE_C || MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS */
return( PSA_ERROR_INVALID_HANDLE ); return( PSA_ERROR_INVALID_HANDLE );