yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-29 23:14:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

Specialize some wording from the specification

Browse Source 
Some of the material was originally the PSA specification, and
discusses how different implementations might behave. Replace such
statements by a description of how Mbed TLS behaves.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2020-12-11 18:47:55 +01:00
parent 9b3e5a7b3e
commit e39bdaa0ed
1 changed files with 13 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
include/psa/crypto_types.h
View File

@ -131,11 +131,10 @@ typedef uint32_t psa_algorithm_t;
* The application can call psa_open_key() to open a persistent key that * The application can call psa_open_key() to open a persistent key that
* it created previously. * it created previously.
* *
* This specification defines two basic lifetime values: * The default lifetime of a key is #PSA_KEY_LIFETIME_VOLATILE. The lifetime
* - Keys with the lifetime #PSA_KEY_LIFETIME_VOLATILE are volatile. * #PSA_KEY_LIFETIME_PERSISTENT is supported if persistent storage is
* This lifetime is always supported. * available. Other lifetime values may be supported depending on the
* - Keys with the lifetime #PSA_KEY_LIFETIME_PERSISTENT are persistent. * library configuration.
* This lifetime is always supported if persistent storage is available.
*/ */
typedef uint32_t psa_key_lifetime_t; typedef uint32_t psa_key_lifetime_t;
@ -180,9 +179,10 @@ typedef uint8_t psa_key_persistence_t;
* in wrapped (encrypted) form alongside the key metadata in the * in wrapped (encrypted) form alongside the key metadata in the
* primary local storage. * primary local storage.
* *
* This specification defines the following values of location indicators: * The PSA Cryptography API specification defines the following values of
* location indicators:
* - \c 0: primary local storage. * - \c 0: primary local storage.
* All implementations should support this value. * This location is always available.
* The primary local storage is typically the same storage area that * The primary local storage is typically the same storage area that
* contains the key metadata. * contains the key metadata.
* - \c 1: primary secure element. * - \c 1: primary secure element.
@ -209,7 +209,7 @@ typedef uint32_t psa_key_location_t;
* *
* - Applications may freely choose key identifiers in the range * - Applications may freely choose key identifiers in the range
* #PSA_KEY_ID_USER_MIN to #PSA_KEY_ID_USER_MAX. * #PSA_KEY_ID_USER_MIN to #PSA_KEY_ID_USER_MAX.
* - Implementations may define additional key identifiers in the range * - The implementation may define additional key identifiers in the range
* #PSA_KEY_ID_VENDOR_MIN to #PSA_KEY_ID_VENDOR_MAX. * #PSA_KEY_ID_VENDOR_MIN to #PSA_KEY_ID_VENDOR_MAX.
* - 0 is reserved as an invalid key identifier. * - 0 is reserved as an invalid key identifier.
* - Key identifiers outside these ranges are reserved for future use. * - Key identifiers outside these ranges are reserved for future use.
@ -248,23 +248,18 @@ typedef uint32_t psa_key_usage_t;
* - The key's policy, comprising usage flags and a specification of * - The key's policy, comprising usage flags and a specification of
* the permitted algorithm(s). * the permitted algorithm(s).
* - Information about the key itself: the key type and its size. * - Information about the key itself: the key type and its size.
* - Implementations may define additional attributes. * - Additional implementation-defined attributes.
* *
* The actual key material is not considered an attribute of a key. * The actual key material is not considered an attribute of a key.
* Key attributes do not contain information that is generally considered * Key attributes do not contain information that is generally considered
* highly confidential. * highly confidential.
* *
* An attribute structure can be a simple data structure where each function * An attribute structure works like a simple data structure where each function
* `psa_set_key_xxx` sets a field and the corresponding function * `psa_set_key_xxx` sets a field and the corresponding function
* `psa_get_key_xxx` retrieves the value of the corresponding field. * `psa_get_key_xxx` retrieves the value of the corresponding field.
* However, implementations may report values that are equivalent to the * However, a future version of the library may report values that are
* original one, but have a different encoding. For example, an * equivalent to the original one, but have a different encoding. Invalid
* implementation may use a more compact representation for types where * values may be mapped to different, also invalid values.
* many bit-patterns are invalid or not supported, and store all values
* that it does not support as a special marker value. In such an
* implementation, after setting an invalid value, the corresponding
* get function returns an invalid value which may not be the one that
* was originally stored.
* *
* An attribute structure may contain references to auxiliary resources, * An attribute structure may contain references to auxiliary resources,
* for example pointers to allocated memory or indirect references to * for example pointers to allocated memory or indirect references to