Support key derivation with non-predefined capacity
psa_key_derivation requires the caller to specify a maximum capacity.
This commit adds a special value that indicates that the maximum
capacity should be the maximum supported by the algorithm. This is
currently meant only for selection algorithms used on the shared
secret produced by a key agreement.
diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 2025523..3c1cec9 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -3539,6 +3539,8 @@
if( capacity <= max_capacity )
generator->capacity = capacity;
+ else if( capacity == PSA_GENERATOR_UNBRIDLED_CAPACITY )
+ generator->capacity = max_capacity;
else
return( PSA_ERROR_INVALID_ARGUMENT );