commit 5e7494ea750ea08915748ccd28ebddc2a442c48a
author Valerio Setti <valerio.setti@nordicsemi.no> Thu Apr 27 10:05:03 2023 +0200
committer Valerio Setti <valerio.setti@nordicsemi.no> Tue May 02 16:06:34 2023 +0200
tree f8fd35bb2aff0ab4eeddd72965055d4b76699077
parent b4468c45ac83444238a845a7f96cafe1101d47b9

pk: fix position for mbedtls_platform_zeroize

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>

library/pk.c

diff --git a/library/pk.c b/library/pk.c
index dcdfd1a..97984f3 100644
--- a/library/pk.c
+++ b/library/pk.c
@@ -646,6 +646,7 @@
     psa_key_type_t key_type;
     size_t bits;
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
+    psa_status_t status;
 
     /* export the private key material in the format PSA wants */
     if (mbedtls_pk_get_type(pk) != MBEDTLS_PK_ECKEY) {
@@ -668,11 +669,11 @@
     psa_set_key_algorithm(&attributes, PSA_ALG_ECDSA(hash_alg));
 
     /* import private key into PSA */
-    if (PSA_SUCCESS != psa_import_key(&attributes, d, d_len, key)) {
-        return MBEDTLS_ERR_PK_HW_ACCEL_FAILED;
-    }
-
+    status = psa_import_key(&attributes, d, d_len, key);
     mbedtls_platform_zeroize(d, sizeof(d));
+    if (status != PSA_SUCCESS) {
+        return PSA_PK_TO_MBEDTLS_ERR(status);
+    }
 
     /* make PK context wrap the key slot */
     mbedtls_pk_free(pk);