lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-08-08 17:42:09 +03:00
Code Activity

Relax psa_wipe_key_slot to allow states other than SLOT_PENDING_DELETION

Browse Source 
psa_wipe_key_slot can now be called on a slot in any state, if the slot's state
is PSA_SLOT_FULL or PSA_SLOT_PENDING_DELETION then there must be exactly 1 registered
reader.

Remove the state changing calls that are no longer necessary.

Signed-off-by: Ryan Everett <ryan.everett@arm.com>
This commit is contained in:
Ryan Everett
2024-01-12 16:35:59 +00:00
parent 6a9c14b918
commit 4755e6bda4
4 changed files with 12 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
library/psa_crypto_core.h
View File

@@ -70,8 +70,6 @@ typedef struct {
* Number of functions registered as reading the material in the key slot.
*
* Library functions must not write directly to registered_readers
* (unless the slot's state is PSA_SLOT_FILLING and the slot needs to be
* wiped following a failed key creation).
*
* A function must call psa_register_read(slot) before reading the current
* contents of the slot for an operation.
@@ -191,9 +189,8 @@ static inline psa_key_slot_number_t psa_key_slot_get_slot_number(
* \retval #PSA_SUCCESS
* The slot has been successfully wiped.
* \retval #PSA_ERROR_CORRUPTION_DETECTED
* The amount of registered readers was not equal to 1.
* \retval #PSA_ERROR_BAD_STATE
* The slot's state was not PSA_SLOT_PENDING_DELETION.
* The slot's state was PSA_SLOT_FULL or PSA_SLOT_PENDING_DELETION, and
* the amount of registered readers was not equal to 1.
*/
psa_status_t psa_wipe_key_slot(psa_key_slot_t *slot);