commit 1dfd1224dc0d0fc7bcab93cdb513ef6f5d668184
author Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com> Thu Nov 18 13:35:00 2021 +0100
committer Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com> Tue Feb 22 13:26:46 2022 +0100
tree 3619ab5108430dc62d232d938fd6331e5a0a1699
parent 653481632edb5061345abe1afe8ee1c816449d36

psa_generate_derived_ecc_key_helper: compile only when ECC is supported

Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index bd6c84c..a101e69 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -4849,6 +4849,10 @@
 * - [SP800-56A] §5.6.1.2.2 or FIPS Publication 186-4: Digital Signature
 *   Standard (DSS) [FIPS186-4] §B.4.2 for elliptic curve keys.
 */
+#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR) || \
+    defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY) || \
+    defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR) || \
+    defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
 static psa_status_t psa_generate_derived_ecc_key_helper(
     psa_key_slot_t *slot,
     size_t bits,
@@ -4865,7 +4869,7 @@
     mbedtls_mpi_init( &k );
     mbedtls_mpi_init( &N );
     mbedtls_mpi_init( &diff_N_2 );
-    
+
     psa_ecc_family_t curve = PSA_KEY_TYPE_ECC_GET_FAMILY(
                                 slot->attr.type );
     mbedtls_ecp_group_id grp_id =
@@ -4941,6 +4945,7 @@
     mbedtls_mpi_free( &diff_N_2 );
     return( ret );
 }
+#endif
 
 static psa_status_t psa_generate_derived_key_internal(
     psa_key_slot_t *slot,
@@ -4948,13 +4953,17 @@
     psa_key_derivation_operation_t *operation )
 {
     uint8_t *data = NULL;
-    unsigned key_err = 0;
     size_t bytes = PSA_BITS_TO_BYTES( bits );
     size_t storage_size = bytes;
     psa_status_t status;
 
+#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR) || \
+    defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY) || \
+    defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR) || \
+    defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
     if ( PSA_KEY_TYPE_IS_ECC( slot->attr.type ) )
     {
+        unsigned key_err = 0;
 gen_ecc_key:
         status = psa_generate_derived_ecc_key_helper(slot, bits, operation, &data, &key_err);
         if( status != PSA_SUCCESS )
@@ -4962,7 +4971,9 @@
         /* Key has been created, but it doesn't meet criteria. */
         if (key_err)
             goto gen_ecc_key;
-    } else {
+    } else
+#endif
+    {
         if( ! key_type_is_raw_bytes( slot->attr.type ) )
             return( PSA_ERROR_INVALID_ARGUMENT );
         if( bits % 8 != 0 )