lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-29 11:41:15 +03:00
Code Activity

PSA PAKE: improve documentation

Browse Source 
Signed-off-by: Janos Follath <janos.follath@arm.com>
This commit is contained in:
Janos Follath
2021-06-03 13:17:09 +01:00
parent 38d29db75f
commit b4db90fb27
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
include/psa/crypto_extra.h
View File

@ -1606,9 +1606,10 @@ psa_status_t psa_pake_input(psa_pake_operation_t *operation,
* party who used the same password is able to compute the key. But there is no * party who used the same password is able to compute the key. But there is no
* guarantee that the peer is the party it claims to be and was able to do so. * guarantee that the peer is the party it claims to be and was able to do so.
* *
* That is, the authentication is only implicit (the peer is not authenticated * That is, the authentication is only implicit. Since the peer is not
* at this point, and no action should be taken that assume that they are - like * authenticated yet, no action should be taken yet that assumes that the peer
* for example accessing restricted files). * is who it claims to be. For example, do not access restricted files on the
* peer's behalf until an explicit authentication has succeeded.
* *
* This function can be called after the key exchange phase of the operation * This function can be called after the key exchange phase of the operation
* has completed. It imports the shared secret output of the PAKE into the * has completed. It imports the shared secret output of the PAKE into the
@ -1683,8 +1684,9 @@ psa_status_t psa_pake_get_implicit_key(psa_pake_operation_t *operation,
/** A sufficient input buffer size for psa_pake_input(). /** A sufficient input buffer size for psa_pake_input().
* *
* If the size of the input is larger than this, it is guaranteed * The value returned by this macro is guaranteed to be large enough for any
* that psa_pake_input() will fail with #PSA_ERROR_INVALID_ARGUMENT. * valid input to psa_pake_input() in an operation with the specified
* parameters.
* *
* See also #PSA_PAKE_INPUT_MAX_SIZE * See also #PSA_PAKE_INPUT_MAX_SIZE
* *