You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently X.509 uses PSA for hashing only in some places. This task is to use it (conditionally on MBEDTLS_USE_PSA_CRYPTO) everywhere.
Provide a PSA version, using psa_hash_compute(), of all remaining calls to mbedtls_md() or mbedtls_sha1_ret(), namely:
mbedtls_md() in x509_crt_verifycrl() in x509_crt.c
mbedtls_md() in mbedtls_x509write_crt_der() in x509write_crt.c
mbedtls_sha1_ret() in mbedtls_x509write_crt_set_subject_key_identifier()inx509write_crt.c`
mbedtls_sha1_ret() in mbedtls_x509write_crt_set_authority_key_identifier()inx509write_crt.c`
Note: a helper function mbedtls_psa_translate_md() is available from mbedtls/psa_util.h.
While at it, in the following functions that already have PSA version, it currently uses the multi-part API (with psa_hash_operation_t) but can be simplified to use the single-part API psa_hash_compute():
x509_crt_check_signature()
mbedtls_x509write_csr_der_internal()
The text was updated successfully, but these errors were encountered:
Currently X.509 uses PSA for hashing only in some places. This task is to use it (conditionally on
MBEDTLS_USE_PSA_CRYPTO
) everywhere.Provide a PSA version, using
psa_hash_compute()
, of all remaining calls tombedtls_md()
ormbedtls_sha1_ret()
, namely:mbedtls_md()
inx509_crt_verifycrl()
inx509_crt.c
mbedtls_md()
inmbedtls_x509write_crt_der()
inx509write_crt.c
mbedtls_sha1_ret() in
mbedtls_x509write_crt_set_subject_key_identifier()in
x509write_crt.c`mbedtls_sha1_ret() in
mbedtls_x509write_crt_set_authority_key_identifier()in
x509write_crt.c`Note: a helper function
mbedtls_psa_translate_md()
is available frommbedtls/psa_util.h
.While at it, in the following functions that already have PSA version, it currently uses the multi-part API (with
psa_hash_operation_t
) but can be simplified to use the single-part APIpsa_hash_compute()
:x509_crt_check_signature()
mbedtls_x509write_csr_der_internal()
The text was updated successfully, but these errors were encountered: