Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Key derivation: export secret key from secure element #5482

Open
gilles-peskine-arm opened this issue Jan 31, 2022 · 0 comments
Open

Key derivation: export secret key from secure element #5482

gilles-peskine-arm opened this issue Jan 31, 2022 · 0 comments
Labels
component-psa PSA keystore/dispatch layer (storage, drivers, …) enhancement size-s Estimated task size: small (~2d)

Comments

@gilles-peskine-arm
Copy link
Contributor

gilles-peskine-arm commented Jan 31, 2022

This a step towards the implementation of the interface for key derivation drivers introduced in #5451. The goal of this issue is to implement the simple case of key derivation with a secret in a secure element, by exporting the key from the secure element.

  • Change psa_key_derivation_input_key to export the key, if it's in a secure element.
  • Add a unit test with a key derivation where the SECRET input step is a key in a secure element. Note that the secure element driver does not need to have any key derivation entry point, only an export_key entry point.

(Deriving a key in a secure element without exporting it will be implemented later in #5486.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component-psa PSA keystore/dispatch layer (storage, drivers, …) enhancement size-s Estimated task size: small (~2d)
Projects
None yet
Development

No branches or pull requests

3 participants