Andrzej Kurek
b91a393a31
ECDSA: Add mbedtls_raw_ecdsa_signature_to_asn1 without MPI usage
...
Refactor mbedtls_ecdsa_signature_to_raw to allow overlapping buffers
2018-03-01 09:09:55 -05:00
Andrzej Kurek
dfedd825c8
ECDSA: Refactor mbedtls_ecdsa_signature_to_raw
...
Change mbedtls_ecdsa_signature_to_raw so that it does not use MPI.
Add documentation changes.
2018-02-27 09:23:22 -05:00
Andrzej Kurek
9982e07a92
PKCS11: Refactor mpi_to_ck
...
Refactor mpi_to_ck to return zero on success, and
propagate mbedtls_mpi_write_binary error on fail
2018-02-19 04:07:31 -05:00
Andrzej Kurek
12603548fd
PKCS11: Rename mbedtls_pk_xxx functions
...
Rename mbedtls_pk_setup_pkcs11 and mbedtls_pk_import_to_pkcs11
to reflect the proper namespace they are in.
2018-02-19 04:06:05 -05:00
Andrzej Kurek
33f566541c
PKCS11: Parametrize buffers
...
Change magic numbers to more descriptive names
2018-02-19 04:03:11 -05:00
Andrzej Kurek
7e19f77745
PKCS11: Rename flags to reflect the proper namespace
...
Rename all MBEDTLS_PK_FLAG_XX to MBEDTLS_PKCS11_FLAG_XX
2018-02-19 04:00:27 -05:00
Andrzej Kurek
e1f26b8759
Documentation fix
...
Add relevant comments and explanations.
Fix indentation.
Add copyright notes.
2018-02-19 03:57:07 -05:00
Andrzej Kurek
18f5389525
Change key type when getting CKA_EC_PARAMS
2018-01-23 06:30:09 -05:00
Andrzej Kurek
b03bc43f22
pkcs11_client tests - hardcoded signature verification
...
Add review fixes - naming changes, importing a signature instead of
generating it.
2018-01-23 06:25:32 -05:00
Andrzej Kurek
c289bf1a30
Add ECDSA verify
...
Add tests for external verification when signing is done both internally and externally
2018-01-23 06:10:53 -05:00
Andrzej Kurek
c53dee302d
New module: pkcs11_client
...
New module pkcs11_client.c, defining an opaque pk engine whose backend
is a PKCS#11 token (cryptographic module using the Cryptoki API).
New config option PKCS11_CLIENT_C. Requires pkcs11.h to compile and a
pkcs11 library to link.
Test setup meant to be used with the SoftHSM v2 library (libsofthsm2).
The test setup is not yet integrated with the Mbed TLS test framework.
Before running tests involving PKCS#11, you need to run
cd tests && scripts/pkcs11-client-test.sh init
2018-01-23 05:44:20 -05:00
