aa92d0e676
- M0: libghostty SSH 终端（渲染/输入/连接）+ 白屏修复(OutputGate) + 会话状态机/自动重连 - M1: tsnet 用户态组网 + SSH-over-tsnet(fd 桥)，shell 级真机验证；R5(Go+gvisor+C+++Swift 同进程) retire - M1.5: tmux -CC 原生 tab（MVP） - 结构: packages/(TXCore·TXTransport), apps/TerminalX, vendor/(libghostty-spm/libssh2/mbedtls/tsnet-bridge), artifacts/ - 文档: CLAUDE.md + docs/HANDOFF.md（新会话入口） - 环境: 认证代理→依赖 vendor 本地化；Go 在 ~/.local/go；仅模拟器/未签名 - 待续: M2 mosh, tmux 多 pane, M4 安全(host key/SE) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
220 lines
9.7 KiB
C
220 lines
9.7 KiB
C
/*
|
|
* Driver entry points for p256-m
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*/
|
|
|
|
#ifndef P256M_DRIVER_ENTRYPOINTS_H
|
|
#define P256M_DRIVER_ENTRYPOINTS_H
|
|
|
|
#if defined(MBEDTLS_PSA_P256M_DRIVER_ENABLED)
|
|
#ifndef PSA_CRYPTO_ACCELERATOR_DRIVER_PRESENT
|
|
#define PSA_CRYPTO_ACCELERATOR_DRIVER_PRESENT
|
|
#endif /* PSA_CRYPTO_ACCELERATOR_DRIVER_PRESENT */
|
|
#endif /* MBEDTLS_PSA_P256M_DRIVER_ENABLED */
|
|
|
|
#include "psa/crypto_types.h"
|
|
|
|
/** Import SECP256R1 key.
|
|
*
|
|
* \param[in] attributes The attributes of the key to use for the
|
|
* operation.
|
|
* \param[in] data The raw key material. For private keys
|
|
* this must be a big-endian integer of 32
|
|
* bytes; for public key this must be an
|
|
* uncompressed ECPoint (65 bytes).
|
|
* \param[in] data_length The size of the raw key material.
|
|
* \param[out] key_buffer The buffer to contain the key data in
|
|
* output format upon successful return.
|
|
* \param[in] key_buffer_size Size of the \p key_buffer buffer in bytes.
|
|
* \param[out] key_buffer_length The length of the data written in \p
|
|
* key_buffer in bytes.
|
|
* \param[out] bits The bitsize of the key.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* Success. Keypair generated and stored in buffer.
|
|
* \retval #PSA_ERROR_NOT_SUPPORTED
|
|
* The input is not supported by this driver (not SECP256R1).
|
|
* \retval #PSA_ERROR_INVALID_ARGUMENT
|
|
* The input is invalid.
|
|
* \retval #PSA_ERROR_BUFFER_TOO_SMALL
|
|
* \p key_buffer_size is too small.
|
|
*/
|
|
psa_status_t p256_transparent_import_key(const psa_key_attributes_t *attributes,
|
|
const uint8_t *data,
|
|
size_t data_length,
|
|
uint8_t *key_buffer,
|
|
size_t key_buffer_size,
|
|
size_t *key_buffer_length,
|
|
size_t *bits);
|
|
|
|
/** Export SECP256R1 public key, from the private key.
|
|
*
|
|
* \param[in] attributes The attributes of the key to use for the
|
|
* operation.
|
|
* \param[in] key_buffer The private key in the export format.
|
|
* \param[in] key_buffer_size The size of the private key in bytes.
|
|
* \param[out] data The buffer to contain the public key in
|
|
* the export format upon successful return.
|
|
* \param[in] data_size The size of the \p data buffer in bytes.
|
|
* \param[out] data_length The length written to \p data in bytes.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* Success. Keypair generated and stored in buffer.
|
|
* \retval #PSA_ERROR_NOT_SUPPORTED
|
|
* The input is not supported by this driver (not SECP256R1).
|
|
* \retval #PSA_ERROR_INVALID_ARGUMENT
|
|
* The input is invalid.
|
|
* \retval #PSA_ERROR_BUFFER_TOO_SMALL
|
|
* \p key_buffer_size is too small.
|
|
*/
|
|
psa_status_t p256_transparent_export_public_key(const psa_key_attributes_t *attributes,
|
|
const uint8_t *key_buffer,
|
|
size_t key_buffer_size,
|
|
uint8_t *data,
|
|
size_t data_size,
|
|
size_t *data_length);
|
|
|
|
/** Generate SECP256R1 ECC Key Pair.
|
|
* Interface function which calls the p256-m key generation function and
|
|
* places it in the key buffer provided by the caller (Mbed TLS) in the
|
|
* correct format. For a SECP256R1 curve this is the 32 bit private key.
|
|
*
|
|
* \param[in] attributes The attributes of the key to use for the
|
|
* operation.
|
|
* \param[out] key_buffer The buffer to contain the key data in
|
|
* output format upon successful return.
|
|
* \param[in] key_buffer_size Size of the \p key_buffer buffer in bytes.
|
|
* \param[out] key_buffer_length The length of the data written in \p
|
|
* key_buffer in bytes.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* Success. Keypair generated and stored in buffer.
|
|
* \retval #PSA_ERROR_BUFFER_TOO_SMALL
|
|
* \p key_buffer_size is too small.
|
|
* \retval #PSA_ERROR_GENERIC_ERROR
|
|
* The internal RNG failed.
|
|
*/
|
|
psa_status_t p256_transparent_generate_key(
|
|
const psa_key_attributes_t *attributes,
|
|
uint8_t *key_buffer,
|
|
size_t key_buffer_size,
|
|
size_t *key_buffer_length);
|
|
|
|
/** Perform raw key agreement using p256-m's ECDH implementation
|
|
* \param[in] attributes The attributes of the key to use for the
|
|
* operation.
|
|
* \param[in] key_buffer The buffer containing the private key
|
|
* in the format specified by PSA.
|
|
* \param[in] key_buffer_size Size of the \p key_buffer buffer in bytes.
|
|
* \param[in] alg A key agreement algorithm that is
|
|
* compatible with the type of the key.
|
|
* \param[in] peer_key The buffer containing the peer's public
|
|
* key in format specified by PSA.
|
|
* \param[in] peer_key_length Size of the \p peer_key buffer in
|
|
* bytes.
|
|
* \param[out] shared_secret The buffer to which the shared secret
|
|
* is to be written.
|
|
* \param[in] shared_secret_size Size of the \p shared_secret buffer in
|
|
* bytes.
|
|
* \param[out] shared_secret_length On success, the number of bytes that
|
|
* make up the returned shared secret.
|
|
* \retval #PSA_SUCCESS
|
|
* Success. Shared secret successfully calculated.
|
|
* \retval #PSA_ERROR_INVALID_ARGUMENT
|
|
* The input is invalid.
|
|
* \retval #PSA_ERROR_BUFFER_TOO_SMALL
|
|
* \p shared_secret_size is too small.
|
|
*/
|
|
psa_status_t p256_transparent_key_agreement(
|
|
const psa_key_attributes_t *attributes,
|
|
const uint8_t *key_buffer,
|
|
size_t key_buffer_size,
|
|
psa_algorithm_t alg,
|
|
const uint8_t *peer_key,
|
|
size_t peer_key_length,
|
|
uint8_t *shared_secret,
|
|
size_t shared_secret_size,
|
|
size_t *shared_secret_length);
|
|
|
|
/** Sign an already-calculated hash with a private key using p256-m's ECDSA
|
|
* implementation
|
|
* \param[in] attributes The attributes of the key to use for the
|
|
* operation.
|
|
* \param[in] key_buffer The buffer containing the private key
|
|
* in the format specified by PSA.
|
|
* \param[in] key_buffer_size Size of the \p key_buffer buffer in bytes.
|
|
* \param[in] alg A signature algorithm that is compatible
|
|
* with the type of the key.
|
|
* \param[in] hash The hash to sign.
|
|
* \param[in] hash_length Size of the \p hash buffer in bytes.
|
|
* \param[out] signature Buffer where signature is to be written.
|
|
* \param[in] signature_size Size of the \p signature buffer in bytes.
|
|
* \param[out] signature_length On success, the number of bytes
|
|
* that make up the returned signature value.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* Success. Hash was signed successfully.
|
|
* \retval #PSA_ERROR_INVALID_ARGUMENT
|
|
* The input is invalid.
|
|
* \retval #PSA_ERROR_BUFFER_TOO_SMALL
|
|
* \p signature_size is too small.
|
|
* \retval #PSA_ERROR_GENERIC_ERROR
|
|
* The internal RNG failed.
|
|
*/
|
|
psa_status_t p256_transparent_sign_hash(
|
|
const psa_key_attributes_t *attributes,
|
|
const uint8_t *key_buffer,
|
|
size_t key_buffer_size,
|
|
psa_algorithm_t alg,
|
|
const uint8_t *hash,
|
|
size_t hash_length,
|
|
uint8_t *signature,
|
|
size_t signature_size,
|
|
size_t *signature_length);
|
|
|
|
/** Verify the signature of a hash using a SECP256R1 public key using p256-m's
|
|
* ECDSA implementation.
|
|
*
|
|
* \note p256-m expects a 64 byte public key, but the contents of the key
|
|
buffer may be the 32 byte keypair representation or the 65 byte
|
|
public key representation. As a result, this function calls
|
|
psa_driver_wrapper_export_public_key() to ensure the public key
|
|
can be passed to p256-m.
|
|
*
|
|
* \param[in] attributes The attributes of the key to use for the
|
|
* operation.
|
|
*
|
|
* \param[in] key_buffer The buffer containing the key
|
|
* in the format specified by PSA.
|
|
* \param[in] key_buffer_size Size of the \p key_buffer buffer in bytes.
|
|
* \param[in] alg A signature algorithm that is compatible with
|
|
* the type of the key.
|
|
* \param[in] hash The hash whose signature is to be
|
|
* verified.
|
|
* \param[in] hash_length Size of the \p hash buffer in bytes.
|
|
* \param[in] signature Buffer containing the signature to verify.
|
|
* \param[in] signature_length Size of the \p signature buffer in bytes.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* The signature is valid.
|
|
* \retval #PSA_ERROR_INVALID_SIGNATURE
|
|
* The calculation was performed successfully, but the passed
|
|
* signature is not a valid signature.
|
|
* \retval #PSA_ERROR_INVALID_ARGUMENT
|
|
* The input is invalid.
|
|
*/
|
|
psa_status_t p256_transparent_verify_hash(
|
|
const psa_key_attributes_t *attributes,
|
|
const uint8_t *key_buffer,
|
|
size_t key_buffer_size,
|
|
psa_algorithm_t alg,
|
|
const uint8_t *hash,
|
|
size_t hash_length,
|
|
const uint8_t *signature,
|
|
size_t signature_length);
|
|
|
|
#endif /* P256M_DRIVER_ENTRYPOINTS_H */
|