mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-03-29 22:20:30 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Officially deprecate MBEDTLS_PSA_CRYPTO_SE_C

Browse Source 
This was intended as experimental, and we've been saying for a long time
that it's superseded by the "unified driver interface", but we hadn't
documented that inside the Mbed TLS source code. So announce it as
deprecated.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2022-06-20 18:46:22 +02:00
parent 7973399f7b
commit 98473c4523
3 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog.d/psa_crypto_se.txt Normal file
View File

@ -0,0 +1,5 @@
New deprecations
* Secure element drivers enabled by MBEDTLS_PSA_CRYPTO_SE_C are deprecated.
This was intended as an experimental feature, but had not been explicitly
documented as such. Use opaque drivers with the interface enabled by
MBEDTLS_PSA_CRYPTO_DRIVERS instead.

8
include/mbedtls/check_config.h
View File

@ -581,6 +581,14 @@
#error "MBEDTLS_PSA_CRYPTO_SE_C defined, but not all prerequisites" #error "MBEDTLS_PSA_CRYPTO_SE_C defined, but not all prerequisites"
#endif #endif
#if defined(MBEDTLS_PSA_CRYPTO_SE_C)
#if defined(MBEDTLS_DEPRECATED_REMOVED)
#error "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS"
#elif defined(MBEDTLS_DEPRECATED_WARNING)
#warning "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS"
#endif
#endif /* MBEDTLS_PSA_CRYPTO_SE_C */
#if defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \ #if defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \
! defined(MBEDTLS_PSA_CRYPTO_C) ! defined(MBEDTLS_PSA_CRYPTO_C)
#error "MBEDTLS_PSA_CRYPTO_STORAGE_C defined, but not all prerequisites" #error "MBEDTLS_PSA_CRYPTO_STORAGE_C defined, but not all prerequisites"

6
include/mbedtls/mbedtls_config.h
View File

@ -2686,11 +2686,11 @@
/** /**
* \def MBEDTLS_PSA_CRYPTO_SE_C * \def MBEDTLS_PSA_CRYPTO_SE_C
* *
* Enable secure element support in the Platform Security Architecture * Enable dynamic secure element support in the Platform Security Architecture
* cryptography API. * cryptography API.
* *
* \warning This feature is not yet suitable for production. It is provided * \deprecated This feature is deprecated. Please switch to the driver
* for API evaluation and testing purposes only. * interface enabled by #MBEDTLS_PSA_CRYPTO_DRIVERS.
* *
* Module: library/psa_crypto_se.c * Module: library/psa_crypto_se.c
* *