TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / ec3fd75cbc230cb3f82042d42125c1ace978871a / . / docs / architecture / psa-migration / tasks-g1.md
blob: d906bf9ea5ef6dfbe90b250035958d9fdaea657b [file] [log] [blame] [view]
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]1This document is temporary; it lists tasks to achieve G1 as described in
2`strategy.md` while the strategy is being reviewed - once that's done,
3corresponding github issues will be created and this document removed.
4
5For all of the tasks here, no specific testing is expected to be required,
6beyond passing the existing tests in a build with `MBEDTLS_USE_PSA_ENABLED`,
7see `testing.md`.
8
9Symmetric crypto
10================
11
12Hashes
13------
14
15### Use `psa_hash` in all of X.509
16
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]17https://github.com/ARMmbed/mbedtls/issues/5157
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]18
19HMAC
20----
21
22### Variable-time HMAC in TLS record protection
23
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]24https://github.com/ARMmbed/mbedtls/issues/5177
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]25
26### Constant-time HMAC in TLS record protection
27
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]28https://github.com/ARMmbed/mbedtls/issues/5178
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]29
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]30
31Ciphers
32-------
33
34### Use PSA for all cipher operations in TLS
35
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]36https://github.com/ARMmbed/mbedtls/issues/5181
37https://github.com/ARMmbed/mbedtls/issues/5182
38https://github.com/ARMmbed/mbedtls/issues/5203
39https://github.com/ARMmbed/mbedtls/issues/5204
40https://github.com/ARMmbed/mbedtls/issues/5205
41https://github.com/ARMmbed/mbedtls/issues/5206
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]42
43Asymmetric crypto
44=================
45
46ECDSA
47-----
48
49### Make `mbedtls_pk_sign()` use PSA for ECDSA operations
50
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]51https://github.com/ARMmbed/mbedtls/issues/5274
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]52
53RSA signature (and verification)
54--------------------------------
55
56### Make `mbedtls_pk_sign()` use PSA for RSA operations
57
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]58https://github.com/ARMmbed/mbedtls/issues/5162
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]59
60### Make `mbedtls_pk_verify()` use PSA for RSA operations
61
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]62https://github.com/ARMmbed/mbedtls/issues/5159
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]63
64### Make `mbedtls_pk_verify_ext()` use PSA for RSA operations
65
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]66https://github.com/ARMmbed/mbedtls/issues/5333 (partial)
67https://github.com/ARMmbed/mbedtls/issues/5277 (futher)
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]68
69RSA en/decryption
70-----------------
71
72### Make `mbedtls_pk_encrypt()` use PSA for RSA operations
73
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]74
75https://github.com/ARMmbed/mbedtls/issues/5161
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]76
77### Make `mbedtls_pk_decrypt()` use PSA for RSA operations
78
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]79https://github.com/ARMmbed/mbedtls/issues/5160
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]80
81ECDH
82----
83
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]84Additional:
85https://github.com/ARMmbed/mbedtls/issues/5291 (pre clean-up)
86https://github.com/ARMmbed/mbedtls/issues/5321 (TLS 1.3)
87https://github.com/ARMmbed/mbedtls/issues/5322 (post clean-up)
88
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]89### Write remaining utilities for ECDH parsing/writing
90
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]91(not a task on its own, part of other tasks)
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]92
93### Use PSA for ECDHE in ECDHE-ECDSA and ECDHE-RSA server-side
94
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]95https://github.com/ARMmbed/mbedtls/issues/5317
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]96
97### Use PSA for ECDH in ECDHE-PSK (all sides and versions)
98
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]99https://github.com/ARMmbed/mbedtls/issues/5318
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]100
101### Use PSA for ECDH in static-ECDH key exchanges
102
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]103https://github.com/ARMmbed/mbedtls/issues/5319
104https://github.com/ARMmbed/mbedtls/issues/5320
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]105
106FFDH
107----
108
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]109https://github.com/ARMmbed/mbedtls/issues/5287
Manuel Pégourié-Gonnardb9021642021-10-01 13:16:01 +0200[diff] [blame]110
111EC J-PAKE
112---------
113
Manuel Pégourié-Gonnardab1d3082022-01-17 10:47:24 +0100[diff] [blame]114https://github.com/ARMmbed/mbedtls/issues/5275