Skip to content

boot: zephyr: kconfig: add choice for RSA crypto library#140

Draft
valeriosetti wants to merge 3 commits intozephyrproject-rtos:mainfrom
valeriosetti:move-to-psa-api
Draft

boot: zephyr: kconfig: add choice for RSA crypto library#140
valeriosetti wants to merge 3 commits intozephyrproject-rtos:mainfrom
valeriosetti:move-to-psa-api

Conversation

@valeriosetti
Copy link

Allow to select either Mbed TLS legacy crypto or PSA API as crypto library to be used for RSA operations.

Note
I know that no PR should be opened on this repo, but I would like to ensure that zephyrproject-rtos/zephyr#104031 is OK from CI point of view before opening the official PR. That's why I'm opening this in draft mode.

Intead of keeping Mbed TLS 2.x like calls to SHA functions and then
include "compat-2.x.h" to get that compatibility, simply use Mbed TLS 3.x
functions.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
"bootutil_rsa_parse_public_key" is already setting up N, E and len
parameters in the RSA context so calling "mbedtls_rsa_import" is
useless since it would redo the same operations.
Moreover "mbedtls_rsa_import" is removed from TF-PSA-Crypto.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
Allow to select either Mbed TLS legacy crypto or PSA API as crypto for
RSA operations.
By default legacy crypto is used because PSA API cause a flash footprint
increase and this is not OK for all the targets.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant