mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-02-07 06:40:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Modernize remove_seed_file()

Browse Source 
This function was written before the PSA storage layer switched to the PSA
ITS API as its storage abstraction. Now we can just call PSA ITS functions
unconditionally.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2023-04-28 21:07:07 +02:00
parent 801c4333ad
commit fb4c3fe4ea
1 changed files with 5 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
tests/suites/test_suite_psa_crypto_entropy.function
View File

@ -12,28 +12,16 @@
MBEDTLS_ENTROPY_BLOCK_SIZE) MBEDTLS_ENTROPY_BLOCK_SIZE)
#if defined(MBEDTLS_PSA_INJECT_ENTROPY) #if defined(MBEDTLS_PSA_INJECT_ENTROPY)
#include <psa_crypto_its.h>
#if defined(MBEDTLS_PSA_ITS_FILE_C)
#include <stdio.h>
#else
#include <psa/internal_trusted_storage.h>
#endif
/* Remove the entropy seed file. Since the library does not expose a way /* Remove the entropy seed file.
* to do this (it would be a security risk if such a function was ever *
* accessible in production), implement this functionality in a white-box * See check_random_seed_file() regarding abstraction boundaries.
* manner. */ */
psa_status_t remove_seed_file(void) psa_status_t remove_seed_file(void)
{ {
#if defined(MBEDTLS_PSA_ITS_FILE_C)
if (remove("00000000ffffff52.psa_its") == 0) {
return PSA_SUCCESS;
} else {
return PSA_ERROR_DOES_NOT_EXIST;
}
#else
return psa_its_remove(PSA_CRYPTO_ITS_RANDOM_SEED_UID); return psa_its_remove(PSA_CRYPTO_ITS_RANDOM_SEED_UID);
#endif
} }
#endif /* MBEDTLS_PSA_INJECT_ENTROPY */ #endif /* MBEDTLS_PSA_INJECT_ENTROPY */