Lauren Wehrmeister 8a7505b008 feat(auth): mbedtls psa key id mgmt ...

Currently the psa key is created and destroyed after each usage during
signature verification.

This redesign adds a key_cache to store the key ID, psa algorithm, and
key attributes associated with a particular pk_oid. This allows for the
psa key to be reused by each image that has the associated pk_oid.

The pk_oid of the image being authenticated is stored as the global
current_pk_oid variable, which is used during the psa crypto
verification stage to associate a key_cache entry with a particular
pk_oid.

Since the psa key is no longer destroyed after each usage, the psa keys
are therefore destroyed after all images have been loaded during each
boot phase in the new crypto_mod_finish() function that is registered
by the REGISTER_CRYPTO_LIB and enabled through the build option of
PSA_CRYTPO.

Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com>
Change-Id: Iba330bc659a76493bd958673424efcc621bab1c4

2025-05-05 10:34:10 -05:00

..

mbedtls

feat(auth): mbedtls psa key id mgmt

2025-05-05 10:34:10 -05:00

auth_common.h

Standardise header guards across codebase

2018-11-08 10:20:19 +00:00

auth_mod.h

refactor(mbedtls): avoid including MBEDTLS_CONFIG_FILE

2023-02-21 11:09:47 +00:00

auth_util.h

feat(auth): add util file for current pk_oid

2025-05-05 10:07:53 -05:00

crypto_mod.h

feat(auth): add crypto_mod_finish() function

2025-05-05 10:07:54 -05:00

img_parser_mod.h

Sanitise includes across codebase

2019-01-04 10:43:17 +00:00

tbbr_cot_common.h

refactor(auth): remove HW_CONFIG reference from BL1 CoT file

2024-06-05 10:20:36 +01:00