Gilles Peskine 3a1101a122 Define algorithms for EdDSA ... Define algorithms for PureEdDSA and for HashEdDSA, the EdDSA variants defined by RFC 8032. The encoding for HashEdDSA needs to encode the hash algorithm so that the hash can be calculated by passing PSA_ALG_SIGN_GET_HASH(sig_alg) to psa_hash_compute() or psa_hash_setup(). As a consequence, Ed25519ph (using SHA-512) and Ed448ph (using SHAKE256) need to have different algorithm encodings (the key is enough to tell them apart, but it is not known while hashing). Another consequence is that the API needs to recognize the Ed448 prehash (64 bytes of SHAKE256 output) as a hash algorithm. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>		2021-03-29 14:55:44 +02:00
..
crypto.h	New elliptic curve family: twisted Edwards	2021-03-29 14:55:44 +02:00
crypto_builtin_hash.h	Simplify compilation guards around hash driver testing	2021-03-16 11:07:55 +01:00
crypto_compat.h	Documentation: fix \p names that diverged from the code	2021-03-08 17:26:31 +01:00
crypto_config.h	psa: config: Add CBC-MAC	2021-03-25 16:02:26 +01:00
crypto_driver_common.h	Remove old-style accelerator and entropy driver interfaces	2020-11-30 17:37:14 +01:00
crypto_driver_contexts.h	Rename and retype hash test driver context structure	2021-03-15 12:14:40 +01:00
crypto_extra.h	Don't duplicate the definition of PSA_ALG_IS_HASH_AND_SIGN	2021-03-29 14:55:44 +02:00
crypto_platform.h	Minor documentation improvements	2021-01-04 21:00:53 +01:00
crypto_se_driver.h	Documentation: fix \p names that diverged from the code	2021-03-08 17:26:31 +01:00
crypto_sizes.h	Merge pull request #4210 from gilles-peskine-arm/crypto_values-param-names	2021-03-17 10:17:18 +01:00
crypto_struct.h	Restructure the way driver contexts are declared	2021-03-15 12:14:32 +01:00
crypto_types.h	psa: Make sure MBEDTLS_PSA_CRYPTO_CLIENT is defined	2021-02-09 15:36:08 +01:00
crypto_values.h	Define algorithms for EdDSA	2021-03-29 14:55:44 +02:00