lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-08-05 19:35:48 +03:00
Code Activity

Merge pull request #8937 from valeriosetti/issue8712

Browse Source 
Clarify the documentation of mbedtls_pk_setup_opaque
This commit is contained in:
Bence Szépkúti
2024-04-04 13:40:57 +00:00
committed by GitHub
parent 387aafff5b 1c7f5dea8b
commit a376f84eb1
4 changed files with 53 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docs/use-psa-crypto.md
View File

@@ -75,13 +75,8 @@ operations and its public part can be exported.
**Benefits:** isolation of long-term secrets, use of PSA Crypto drivers.
**Limitations:** can only wrap a key pair, can only use it for private key
operations. (That is, signature generation, and for RSA decryption too.)
Note: for ECDSA, currently this uses randomized ECDSA while Mbed TLS uses
deterministic ECDSA by default. The following operations are not supported
with a context set this way, while they would be available with a normal
context: `mbedtls_pk_check_pair()`, `mbedtls_pk_debug()`, all public key
operations.
**Limitations:** please refer to the documentation of `mbedtls_pk_setup_opaque()`
for a full list of supported operations and limitations.
**Use in X.509 and TLS:** opt-in. The application needs to construct the PK context
using the new API in order to get the benefits; it can then pass the