Remove mentions of DSA from Mbed TLS #7990
Labels
api-break
This issue/PR breaks the API and must wait for a new major version
component-crypto
Crypto primitives and low-level interfaces
size-xs
Estimated task size: extra small (a few hours at most)
The PSA headers and tests mention DSA (as in, finite-field DSA — not elliptic curves algorithms like ECDSA and EdDSA). In 2023 I can confidently state that we are not going to support it in Mbed TLS. Furthermore, supporting DSA in the PSA crypto API would require extensions to the API and not just an algorithm encoding, because DSA has unusual characteristics: it has partially independent sizes for the private key and the public key so key generation needs two bit-sizes and not just one; and it requires domain parameters for which we no longer plan to add an API (and in Mbed TLS we are going to remove the partial implementation of domain parameters).
The goal of this task is to remove the definitions of key types and algorithms for DSA as well as related macros and tests. However note these limitations:
crypto_sizes.h
.generate_psa_tests.py
.The text was updated successfully, but these errors were encountered: