-
Notifications
You must be signed in to change notification settings - Fork 3k
Fix Mbed TLS + TF-M integration issues #13337
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
When using TF-M, be sure to specify the length of the key. Fixes: 0961f31 ("Make PSA util compatible with Mbed Crypto 3.0.1")
@Patater, thank you for your changes. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Patater,
I tested it locally and it works as expected.
Thank you!
When using TF-M, use the PSA_KEY_TYPE_ECC_KEY_PAIR() macro from mbedtls_psa_parse_tls_ecc_group(), since that function is supposed to return a psa_key_type_t. This helps to avoid any misencodings when the return value from mbedtls_psa_parse_tls_ecc_group() is used directly as a psa_key_type_t without additional encoding. Fixes: 0961f31 ("Make PSA util compatible with Mbed Crypto 3.0.1")
@moshe-shahar I've modified the code a bit based on review feedback. Could you ensure it still works as intended for you? |
CI started |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
tested again
Test run: SUCCESSSummary: 6 of 6 test jobs passed |
Summary of changes
Ensure PSA key types and key lengths are handled properly when using Mbed TLS with TF-M.
Impact of changes
Migration actions required
Documentation
Pull request type
Test results
Reviewers