-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Tweak documentation about lifetimes #3576
Tweak documentation about lifetimes #3576
Conversation
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
In the documentation of lifetimes, replace language meant for the PSA specification by language that is specifically about Mbed TLS. Reduce the discussion of what could happen in other implementation, and discuss what can and cannot happen in integrations of Mbed TLS. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have a few questions.
Added the "needs: work" label as I have pending questions. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm mostly happy with this PR, except for a couple of small things already pointed by Ronald.
Also, I noticed that looking for [Ii]mplementations
finds many occurrences, which should probably be changed too, but perhaps that's out of scope of this PR if you want to keep it focused on lifetimes.
It's about who has access to the key material in plaintext, not directly where the operation is performed. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
Some of the material was originally the PSA specification, and discusses how different implementations might behave. Replace such statements by a description of how Mbed TLS behaves. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks almost good to me. I've just spotted a typo.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
The CI failure in the pr-merge job on Windows is an unrelated issue with the infrastructure and can be ignored for the purposed of merging this PR. |
Follow-up to #3302. No behavior change, just documentation improvements.