mbedtls/docs/architecture/psa-migration
Manuel Pégourié-Gonnard e459be2ed1 Complete discussion of RSASSA-PSS
Update to latest draft of PSA Crypto 1.1.0: back to strict verification
by default, but ANY_SALT introduced.

Commands used to observe default values of saltlen:

    openssl genpkey -algorithm rsa-pss -out o.key
    openssl req -x509 -new -key o.key -subj "/CN=CA" -sha256 -out o.crt

    certtool --generate-privkey --key-type rsa-pss --outfile g.key
    certtool --generate-self-signed --load-privkey g.key --outfile g.crt

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2022-01-18 09:13:14 +01:00
..
dependencies-tls.md Add study for TLS/X.509 dependencies on crypto 2022-01-18 09:13:00 +01:00
dependencies-x509.md Add study for TLS/X.509 dependencies on crypto 2022-01-18 09:13:00 +01:00
psa-limitations.md Complete discussion of RSASSA-PSS 2022-01-18 09:13:14 +01:00
strategy.md Document the general strategy for PSA migration 2022-01-18 09:13:14 +01:00
syms.sh Add study for TLS/X.509 dependencies on crypto 2022-01-18 09:13:00 +01:00
tasks-g1.md Add temporary list of tasks for G1 and G2 2022-01-18 09:13:14 +01:00
tasks-g2.md Add temporary list of tasks for G1 and G2 2022-01-18 09:13:14 +01:00
testing.md Document test strategy for USE_PSA_CRYPTO 2022-01-18 09:13:14 +01:00