mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-02-06 03:40:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

pk: improve documentation of mbedtls_pk_setup_opaque()

Browse Source 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
This commit is contained in:
Valerio Setti 2024-03-18 17:12:49 +01:00
parent 7ab1861163
commit b711a987d3
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
include/mbedtls/pk.h
View File

@ -374,10 +374,19 @@ int mbedtls_pk_setup(mbedtls_pk_context *ctx, const mbedtls_pk_info_t *info);
* operations and, based on the key type, used algorithms will be:
* * EC:
* * verify: #PSA_ALG_ECDSA_ANY;
* * sign: try both deterministic and non-deterministic ECDSA.
* * sign: try #PSA_ALG_DETERMINISTIC_ECDSA() first and, in
* case it fails, try with #PSA_ALG_ECDSA().
* * RSA:
* * sign: #PSA_ALG_RSA_PKCS1V15_SIGN();
* * decrypt: #PSA_ALG_RSA_PKCS1V15_CRYPT.
* * sign_ext: use the algorithm associated with the wrapped
* PSA key;
* * verify: not supported;
* * verify_ext: not supported;
* * decrypt: #PSA_ALG_RSA_PKCS1V15_CRYPT;
* * encrypt: not supported.
* In order to have above mentioned operations to succeed it is
* mandatory that the wrapped PSA key allows the specified
* algorithm in its policy.
*
* \param ctx The context to initialize. It must be empty (type NONE).
* \param key The PSA key to wrap, which must hold an ECC or RSA key