131 lines
5.3 KiB
C
131 lines
5.3 KiB
C
/*
|
|
* Context structure declaration of the Mbed TLS software-based PSA drivers
|
|
* called through the PSA Crypto driver dispatch layer.
|
|
* This file contains the context structures of key derivation algorithms
|
|
* which need to rely on other algorithms.
|
|
*
|
|
* \note This file may not be included directly. Applications must
|
|
* include psa/crypto.h.
|
|
*
|
|
* \note This header and its content are not part of the Mbed TLS API and
|
|
* applications must not depend on it. Its main purpose is to define the
|
|
* multi-part state objects of the Mbed TLS software-based PSA drivers. The
|
|
* definitions of these objects are then used by crypto_struct.h to define the
|
|
* implementation-defined types of PSA multi-part state objects.
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
* not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef PSA_CRYPTO_BUILTIN_KEY_DERIVATION_H
|
|
#define PSA_CRYPTO_BUILTIN_KEY_DERIVATION_H
|
|
#include "mbedtls/private_access.h"
|
|
|
|
#include <psa/crypto_driver_common.h>
|
|
|
|
#if defined(MBEDTLS_PSA_BUILTIN_ALG_HKDF) || \
|
|
defined(MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT) || \
|
|
defined(MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND)
|
|
typedef struct {
|
|
uint8_t *MBEDTLS_PRIVATE(info);
|
|
size_t MBEDTLS_PRIVATE(info_length);
|
|
#if PSA_HASH_MAX_SIZE > 0xff
|
|
#error "PSA_HASH_MAX_SIZE does not fit in uint8_t"
|
|
#endif
|
|
uint8_t MBEDTLS_PRIVATE(offset_in_block);
|
|
uint8_t MBEDTLS_PRIVATE(block_number);
|
|
unsigned int MBEDTLS_PRIVATE(state) : 2;
|
|
unsigned int MBEDTLS_PRIVATE(info_set) : 1;
|
|
uint8_t MBEDTLS_PRIVATE(output_block)[PSA_HASH_MAX_SIZE];
|
|
uint8_t MBEDTLS_PRIVATE(prk)[PSA_HASH_MAX_SIZE];
|
|
struct psa_mac_operation_s MBEDTLS_PRIVATE(hmac);
|
|
} psa_hkdf_key_derivation_t;
|
|
#endif /* MBEDTLS_PSA_BUILTIN_ALG_HKDF ||
|
|
MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT ||
|
|
MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND */
|
|
#if defined(MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS)
|
|
typedef struct {
|
|
uint8_t MBEDTLS_PRIVATE(data)[PSA_TLS12_ECJPAKE_TO_PMS_DATA_SIZE];
|
|
} psa_tls12_ecjpake_to_pms_t;
|
|
#endif /* MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS */
|
|
|
|
#if defined(MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF) || \
|
|
defined(MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS)
|
|
typedef enum {
|
|
PSA_TLS12_PRF_STATE_INIT, /* no input provided */
|
|
PSA_TLS12_PRF_STATE_SEED_SET, /* seed has been set */
|
|
PSA_TLS12_PRF_STATE_OTHER_KEY_SET, /* other key has been set - optional */
|
|
PSA_TLS12_PRF_STATE_KEY_SET, /* key has been set */
|
|
PSA_TLS12_PRF_STATE_LABEL_SET, /* label has been set */
|
|
PSA_TLS12_PRF_STATE_OUTPUT /* output has been started */
|
|
} psa_tls12_prf_key_derivation_state_t;
|
|
|
|
typedef struct psa_tls12_prf_key_derivation_s {
|
|
#if PSA_HASH_MAX_SIZE > 0xff
|
|
#error "PSA_HASH_MAX_SIZE does not fit in uint8_t"
|
|
#endif
|
|
|
|
/* Indicates how many bytes in the current HMAC block have
|
|
* not yet been read by the user. */
|
|
uint8_t MBEDTLS_PRIVATE(left_in_block);
|
|
|
|
/* The 1-based number of the block. */
|
|
uint8_t MBEDTLS_PRIVATE(block_number);
|
|
|
|
psa_tls12_prf_key_derivation_state_t MBEDTLS_PRIVATE(state);
|
|
|
|
uint8_t *MBEDTLS_PRIVATE(secret);
|
|
size_t MBEDTLS_PRIVATE(secret_length);
|
|
uint8_t *MBEDTLS_PRIVATE(seed);
|
|
size_t MBEDTLS_PRIVATE(seed_length);
|
|
uint8_t *MBEDTLS_PRIVATE(label);
|
|
size_t MBEDTLS_PRIVATE(label_length);
|
|
#if defined(MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS)
|
|
uint8_t *MBEDTLS_PRIVATE(other_secret);
|
|
size_t MBEDTLS_PRIVATE(other_secret_length);
|
|
#endif /* MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS */
|
|
|
|
uint8_t MBEDTLS_PRIVATE(Ai)[PSA_HASH_MAX_SIZE];
|
|
|
|
/* `HMAC_hash( prk, A( i ) + seed )` in the notation of RFC 5246, Sect. 5. */
|
|
uint8_t MBEDTLS_PRIVATE(output_block)[PSA_HASH_MAX_SIZE];
|
|
} psa_tls12_prf_key_derivation_t;
|
|
#endif /* MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF) ||
|
|
* MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS */
|
|
#if defined(PSA_HAVE_SOFT_PBKDF2)
|
|
typedef enum {
|
|
PSA_PBKDF2_STATE_INIT, /* no input provided */
|
|
PSA_PBKDF2_STATE_INPUT_COST_SET, /* input cost has been set */
|
|
PSA_PBKDF2_STATE_SALT_SET, /* salt has been set */
|
|
PSA_PBKDF2_STATE_PASSWORD_SET, /* password has been set */
|
|
PSA_PBKDF2_STATE_OUTPUT /* output has been started */
|
|
} psa_pbkdf2_key_derivation_state_t;
|
|
|
|
typedef struct {
|
|
psa_pbkdf2_key_derivation_state_t MBEDTLS_PRIVATE(state);
|
|
uint64_t MBEDTLS_PRIVATE(input_cost);
|
|
uint8_t *MBEDTLS_PRIVATE(salt);
|
|
size_t MBEDTLS_PRIVATE(salt_length);
|
|
uint8_t MBEDTLS_PRIVATE(password)[PSA_HMAC_MAX_HASH_BLOCK_SIZE];
|
|
size_t MBEDTLS_PRIVATE(password_length);
|
|
uint8_t MBEDTLS_PRIVATE(output_block)[PSA_HASH_MAX_SIZE];
|
|
uint8_t MBEDTLS_PRIVATE(bytes_used);
|
|
uint32_t MBEDTLS_PRIVATE(block_number);
|
|
} psa_pbkdf2_key_derivation_t;
|
|
#endif /* PSA_HAVE_SOFT_PBKDF2 */
|
|
|
|
#endif /* PSA_CRYPTO_BUILTIN_KEY_DERIVATION_H */
|