commit 3fc4ca727263c070fe629acb94887beafaf3b20b
author Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com> Mon May 08 15:57:41 2023 +0530
committer Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com> Mon May 08 15:57:41 2023 +0530
tree 190e21a3699f5e1188f9d639956628689e74b094
parent d0422f30c586bc197be1dce278ec4cceb7de6450

Limit max input cost to 32bit

Signed-off-by: Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com>

include/psa/crypto_builtin_key_derivation.h

diff --git a/include/psa/crypto_builtin_key_derivation.h b/include/psa/crypto_builtin_key_derivation.h
index d2cf4df..5d01f6c 100644
--- a/include/psa/crypto_builtin_key_derivation.h
+++ b/include/psa/crypto_builtin_key_derivation.h
@@ -116,7 +116,7 @@
 
 typedef struct {
     psa_pbkdf2_key_derivation_state_t MBEDTLS_PRIVATE(state);
-    uint64_t MBEDTLS_PRIVATE(input_cost);
+    size_t MBEDTLS_PRIVATE(input_cost);
     uint8_t *MBEDTLS_PRIVATE(salt);
     size_t MBEDTLS_PRIVATE(salt_length);
     uint8_t *MBEDTLS_PRIVATE(password);

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 59169d5..af4ab65 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -6423,11 +6423,11 @@
     if (pbkdf2->state != PSA_PBKDF2_STATE_INIT) {
         return PSA_ERROR_BAD_STATE;
     }
-#if UINT_MAX > 0xFFFFFFFF
+
     if (data > 0xFFFFFFFF) {
-        return PSA_ERROR_INVALID_ARGUMENT;
+        return PSA_ERROR_NOT_SUPPORTED;
     }
-#endif
+
     if (data == 0) {
         return PSA_ERROR_INVALID_ARGUMENT;
     }