Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Study: PSA random generation drivers for 4.0 (replace entropy.h) #8150

Open
daverodgman opened this issue Sep 1, 2023 · 1 comment
Open

Study: PSA random generation drivers for 4.0 (replace entropy.h) #8150

daverodgman opened this issue Sep 1, 2023 · 1 comment
Labels
api-break This issue/PR breaks the API and must wait for a new major version component-crypto Crypto primitives and low-level interfaces enhancement size-l Estimated task size: large (2w+)
Projects
Backlog for Mbed TLS

Comments

@daverodgman
Copy link
Contributor

As per #5156 (comment) - investigate what is required to support PSA entropy drivers. The outcome of this task is to define an epic with the work needed for 4.0.

https://github.com/Mbed-TLS/mbedtls/blob/development/docs/proposed/psa-driver-interface.md#random-generation-entry-points
@daverodgman daverodgman added this to Mbed TLS 4.0 MUST in Backlog for Mbed TLS Sep 1, 2023
@daverodgman daverodgman added component-crypto Crypto primitives and low-level interfaces size-m Estimated task size: medium (~1w) enhancement size-l Estimated task size: large (2w+) and removed size-m Estimated task size: medium (~1w) labels Oct 11, 2023
@gilles-peskine-arm gilles-peskine-arm changed the title Study: investigate entropy work for 4.0 Study: PSA random generation drivers for 4.0 (replace entropy.h) Nov 14, 2023
@daverodgman daverodgman added the api-break This issue/PR breaks the API and must wait for a new major version label Nov 28, 2023
@mpg mpg mentioned this issue Dec 28, 2023
Open
@gilles-peskine-arm
Copy link
Contributor

Mbed TLS has a number of ways to configure the entropy and DRBG modules, which we may or may want to offer in the new random module.

  • MBEDTLS_ENTROPY_FORCE_SHA256: choice of primitive to combine and whiten entropy sources.
  • MBEDTLS_ENTROPY_MIN_HARDWARE: cryptographic strength of the entropy collection.
  • MBEDTLS_ENTROPY_NV_SEED: support for an entropy store in addition to or in combination with entropy peripherals. This needs to stay, but not necessarily in its present form. On PSA platforms, the NV seed should be in the PSA storage. But on hosted platforms such as Linux, users generally don't use the PSA storage but use a named file instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
api-break This issue/PR breaks the API and must wait for a new major version component-crypto Crypto primitives and low-level interfaces enhancement size-l Estimated task size: large (2w+)
Projects
Backlog for Mbed TLS
Mbed TLS 4.0 MUST
Milestone
No milestone
Development

No branches or pull requests
2 participants
@daverodgman @gilles-peskine-arm