4 Commits

Author	SHA1	Message	Date
Andrzej Kurek	c470b6b021	Merge development commit 8e76332 into development-psa ... Additional changes to temporarily enable running tests: ssl_srv.c and test_suite_ecdh use mbedtls_ecp_group_load instead of mbedtls_ecdh_setup test_suite_ctr_drbg uses mbedtls_ctr_drbg_update instead of mbedtls_ctr_drbg_update_ret	2019-01-31 08:20:20 -05:00
Janos Follath	08a4aebc46	HKDF: Add warning to partial functions ... The standard HKDF security guarantees only hold if `mbedtls_hkdf()` is used or if `mbedtls_hkdf_extract()` and `mbedtls_hkdf_expand()` are called in succession carefully and an equivalent way. Making `mbedtls_hkdf_extract()` and `mbedtls_hkdf_expand()` static would prevent any misuse, but doing so would require the TLS 1.3 stack to break abstraction and bypass the module API. To reduce the risk of misuse we add warnings to the function descriptions.	2018-08-14 16:08:38 +01:00
Janos Follath	d0a78e91b3	HKDF: Fix style issue	2018-08-14 16:08:37 +01:00
Thomas Fossati	656864b360	Add an HKDF (RFC 5869) implementation	2018-06-11 13:10:14 +01:00