yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-02-24 07:46:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add key id check when creating a volatile key

Browse source 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron 2020-10-23 17:11:13 +02:00
parent d98059d599
commit 65f38a3c2e
5 changed files with 27 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
library/psa_crypto.c
View file

@ -1777,6 +1777,7 @@ static psa_status_t psa_validate_key_attributes(
{ {
psa_status_t status = PSA_ERROR_INVALID_ARGUMENT; psa_status_t status = PSA_ERROR_INVALID_ARGUMENT;
psa_key_lifetime_t lifetime = psa_get_key_lifetime( attributes ); psa_key_lifetime_t lifetime = psa_get_key_lifetime( attributes );
mbedtls_svc_key_id_t key = psa_get_key_id( attributes );
status = psa_validate_key_location( psa_get_key_lifetime( attributes ), status = psa_validate_key_location( psa_get_key_lifetime( attributes ),
p_drv ); p_drv );
@ -1787,8 +1788,12 @@ static psa_status_t psa_validate_key_attributes(
if( status != PSA_SUCCESS ) if( status != PSA_SUCCESS )
return( status ); return( status );
/* Validate the key identifier only in the case of a persistent key. */ if ( PSA_KEY_LIFETIME_IS_VOLATILE( lifetime ) )
if ( ! PSA_KEY_LIFETIME_IS_VOLATILE( lifetime ) ) {
if( MBEDTLS_SVC_KEY_ID_GET_KEY_ID( key ) != 0 )
return( PSA_ERROR_INVALID_ARGUMENT );
}
else
{ {
status = psa_validate_key_id( status = psa_validate_key_id(
psa_get_key_id( attributes ), psa_get_key_id( attributes ),

5
tests/suites/test_suite_psa_crypto.function
View file

@ -2340,7 +2340,12 @@ void copy_success( int source_usage_arg,
/* Prepare the target attributes. */ /* Prepare the target attributes. */
if( copy_attributes ) if( copy_attributes )
{
target_attributes = source_attributes; target_attributes = source_attributes;
/* Set volatile lifetime to reset the key identifier to 0. */
psa_set_key_lifetime( &target_attributes, PSA_KEY_LIFETIME_VOLATILE );
}
if( target_usage_arg != -1 ) if( target_usage_arg != -1 )
psa_set_key_usage_flags( &target_attributes, target_usage_arg ); psa_set_key_usage_flags( &target_attributes, target_usage_arg );
if( target_alg_arg != -1 ) if( target_alg_arg != -1 )

1
tests/suites/test_suite_psa_crypto_se_driver_hal.function
View file

@ -911,7 +911,6 @@ void key_creation_import_export( int lifetime_arg, int min_slot, int restart )
key_material, sizeof( key_material ), key_material, sizeof( key_material ),
&returned_id ) ); &returned_id ) );
if( PSA_KEY_LIFETIME_IS_VOLATILE( lifetime ) ) if( PSA_KEY_LIFETIME_IS_VOLATILE( lifetime ) )
{ {
/* For volatile keys, check no persistent data was created */ /* For volatile keys, check no persistent data was created */

3
tests/suites/test_suite_psa_crypto_slot_management.data
View file

@ -114,6 +114,9 @@ Create failure: invalid key id (0)
depends_on:MBEDTLS_PSA_CRYPTO_STORAGE_C depends_on:MBEDTLS_PSA_CRYPTO_STORAGE_C
create_fail:PSA_KEY_LIFETIME_PERSISTENT:0:PSA_ERROR_INVALID_HANDLE create_fail:PSA_KEY_LIFETIME_PERSISTENT:0:PSA_ERROR_INVALID_HANDLE
Create failure: invalid key id (1) for a volatile key
create_fail:PSA_KEY_LIFETIME_VOLATILE:1:PSA_ERROR_INVALID_ARGUMENT
Create failure: invalid key id (random seed UID) Create failure: invalid key id (random seed UID)
depends_on:MBEDTLS_PSA_CRYPTO_STORAGE_C depends_on:MBEDTLS_PSA_CRYPTO_STORAGE_C
create_fail:PSA_KEY_LIFETIME_PERSISTENT:PSA_CRYPTO_ITS_RANDOM_SEED_UID:PSA_ERROR_INVALID_HANDLE create_fail:PSA_KEY_LIFETIME_PERSISTENT:PSA_CRYPTO_ITS_RANDOM_SEED_UID:PSA_ERROR_INVALID_HANDLE

13
tests/suites/test_suite_psa_crypto_slot_management.function
View file

@ -476,8 +476,19 @@ void create_fail( int lifetime_arg, int id_arg,
PSA_ASSERT( psa_crypto_init( ) ); PSA_ASSERT( psa_crypto_init( ) );
psa_set_key_id( &attributes, id );
psa_set_key_lifetime( &attributes, lifetime ); psa_set_key_lifetime( &attributes, lifetime );
if( PSA_KEY_LIFETIME_IS_VOLATILE( lifetime ) )
{
/*
* Not possible to set a key identifier different from 0 through
* PSA key attributes APIs thus accessing to the attributes
* directly.
*/
attributes.core.id = id;
}
else
psa_set_key_id( &attributes, id );
psa_set_key_type( &attributes, PSA_KEY_TYPE_RAW_DATA ); psa_set_key_type( &attributes, PSA_KEY_TYPE_RAW_DATA );
TEST_EQUAL( psa_import_key( &attributes, material, sizeof( material ), TEST_EQUAL( psa_import_key( &attributes, material, sizeof( material ),
&returned_id ), &returned_id ),