-
Notifications
You must be signed in to change notification settings - Fork 33
Closed
Labels
duplicateThis issue or pull request already existsThis issue or pull request already exists
Description
This was mentioned in the PSA Drivers Workshop.
Implementations are using AES key wrap to deliver keys.
I think that this is going to need two new functions, PSA_wrap_key() and PSA_unwrap_key()
Wrap key will take two keys and fill a buffer.
Unwrap key will take a key and a buffer and a policy - and create a new key.
Any key with Encrypt permission can be used to wrap a key.
Any key that has Export permission can be wrapped
Any key with Decrypt permission can unwrap any key.
Initially we will only support AES Key Wrap, and Key Wrap with Padding.
Therefore, in this release, all the keys must be AES.
In future, we might add definitions for other wrapping formats.
I will draft a pull request
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
duplicateThis issue or pull request already existsThis issue or pull request already exists