diff options
| author | Darryl Green <darryl.green@arm.com> | 2018-06-15 13:06:04 +0100 |
|---|---|---|
| committer | Darryl Green <darryl.green@arm.com> | 2018-11-20 15:21:22 +0000 |
| commit | db2b8db7150183e15169636027f87c4145e5645c (patch) | |
| tree | 1fa9bc1fe13b1c7be90282e256d8e1f60ffbfdf1 /configs | |
| parent | d9eee3b417c2e8f63dd10d835ab9a9472242c2ed (diff) | |
| download | mbedtls-db2b8db7150183e15169636027f87c4145e5645c.zip mbedtls-db2b8db7150183e15169636027f87c4145e5645c.tar.gz mbedtls-db2b8db7150183e15169636027f87c4145e5645c.tar.bz2 | |
psa: Add storage implementation for files
Add new functions, psa_load_persistent_key(),
psa_free_persistent_key_data(), and psa_save_persistent_key(), for
managing persistent keys. These functions load to or save from our
internal representation of key slots. Serialization is a concern of the
storage backend implementation and doesn't abstraction-leak into the
lifetime management code.
An initial implementation for files is provided. Additional storage
backends can implement this interface for other storage types.
Diffstat (limited to 'configs')
| -rw-r--r-- | configs/config-psa-crypto.h | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/configs/config-psa-crypto.h b/configs/config-psa-crypto.h index 870e335..27e9ef1 100644 --- a/configs/config-psa-crypto.h +++ b/configs/config-psa-crypto.h @@ -1523,6 +1523,31 @@ #define MBEDTLS_PSA_CRYPTO_C /** + * \def MBEDTLS_PSA_CRYPTO_STORAGE_C + * + * Enable the Platform Security Architecture persistent key storage. + * + * Module: library/psa_crypto_storage.c + * + * Requires: MBEDTLS_PSA_CRYPTO_C, MBEDTLS_PSA_CRYPTO_STORAGE_FILE_C + * + */ +#define MBEDTLS_PSA_CRYPTO_STORAGE_C + +/** + * \def MBEDTLS_PSA_CRYPTO_STORAGE_FILE_C + * + * Enable persistent key storage over files for the + * Platform Security Architecture cryptography API. + * + * Module: library/psa_crypto_storage_file.c + * + * Requires: MBEDTLS_PSA_CRYPTO_C, MBEDTLS_FS_IO + * + */ +#define MBEDTLS_PSA_CRYPTO_STORAGE_FILE_C + +/** * \def MBEDTLS_RIPEMD160_C * * Enable the RIPEMD-160 hash algorithm. |