Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PSA crypto API: some cases of overlapping parameters are not supported #3266

Open
gilles-peskine-arm opened this issue Mar 9, 2020 · 0 comments
Labels
bug component-crypto Crypto primitives and low-level interfaces size-l Estimated task size: large (2w+)

Comments

@gilles-peskine-arm
Copy link
Contributor

The PSA Crypto API specifies that functions must support arbitrary overlap between input buffers and output buffers. This is mostly implemented correctly in Mbed Crypto, but there are a few exceptions. We don't systematically test overlapping parameters, so we don't know what the exceptions are.

The goal of this issue is to have systematic tests of overlapping parameters and to fix all failures revealed by these tests.

As a byproduct of analyzing whether overlapping parameters are supported, update the documentation in include/mbedtls/*.h where this information is currently missing.

@gilles-peskine-arm gilles-peskine-arm transferred this issue from ARMmbed/mbed-crypto Apr 27, 2020
@gilles-peskine-arm gilles-peskine-arm added bug component-crypto Crypto primitives and low-level interfaces mbed TLS team labels Apr 27, 2020
@laumor01 laumor01 added the size-l Estimated task size: large (2w+) label Mar 23, 2021
@bensze01 bensze01 modified the milestone: PSA Crypto: Q4 Implement missing v1.0 spec functionality Jul 28, 2021
@bensze01 bensze01 removed this from the PSA Crypto: Q4 Implement missing v1.0 spec functionality milestone Aug 11, 2021
minosgalanakis pushed a commit that referenced this issue Mar 28, 2024
This is the issue that tracks incomplete support for buffer overlap, so
we should refer to it when we discuss partial support whenever
MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS is set.

Signed-off-by: David Horstmann <[email protected]>
minosgalanakis pushed a commit that referenced this issue Mar 28, 2024
This is the issue that tracks incomplete support for buffer overlap, so
we should refer to it when we discuss partial support whenever
MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS is set.

Signed-off-by: David Horstmann <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug component-crypto Crypto primitives and low-level interfaces size-l Estimated task size: large (2w+)
Projects
None yet
Development

No branches or pull requests

4 participants