Retrieve the tag length of a specified AEAD algorithm.

Parameters

aead_alg

An AEAD algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_AEAD(aead_alg) is true).

Returns

The tag length specified by the input algorithm.

Unspecified if aead_alg is not a supported AEAD algorithm.

Definition at line 1280 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Macro to build an AEAD minimum-tag-length wildcard algorithm.

A minimum-tag-length AEAD wildcard algorithm permits all AEAD algorithms sharing the same base algorithm, and where the tag length of the specific algorithm is equal to or larger then the minimum tag length specified by the wildcard algorithm.

Note

When setting the minimum required tag length to less than the smallest tag length allowed by the base algorithm, this effectively becomes an 'any-tag-length-allowed' policy for that base algorithm.

Parameters

aead_alg	An AEAD algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_AEAD(aead_alg) is true).
min_tag_length	Desired minimum length of the authentication tag in bytes. This must be at least 1 and at most the largest allowed tag length of the algorithm.

Returns

The corresponding AEAD wildcard algorithm with the specified minimum length.

Unspecified if aead_alg is not a supported AEAD algorithm or if min_tag_length is less than 1 or too large for the specified AEAD algorithm.

Definition at line 1327 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Calculate the corresponding AEAD algorithm with the default tag length.

Parameters

aead_alg

An AEAD algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_AEAD(aead_alg) is true).

Returns

The corresponding AEAD algorithm with the default tag length for that algorithm.

Definition at line 1292 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Calculate the corresponding AEAD algorithm with the default tag length.

Parameters

aead_alg

An AEAD algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_AEAD(alg) is true).

Returns

The corresponding AEAD algorithm with the default tag length for that algorithm.

Definition at line 1086 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Calculate the corresponding AEAD algorithm with the default tag length.

Parameters

aead_alg

An AEAD algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_AEAD(alg) is true).

Returns

The corresponding AEAD algorithm with the default tag length for that algorithm.

Definition at line 1092 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Macro to build a shortened AEAD algorithm.

A shortened AEAD algorithm is similar to the corresponding AEAD algorithm, but has an authentication tag that consists of fewer bytes. Depending on the algorithm, the tag length may affect the calculation of the ciphertext.

Parameters

aead_alg	An AEAD algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_AEAD(aead_alg) is true).
tag_length	Desired length of the authentication tag in bytes.

Returns

The corresponding AEAD algorithm with the specified length.

Unspecified if aead_alg is not a supported AEAD algorithm or if tag_length is not valid for the specified AEAD algorithm.

Definition at line 1264 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Macro to build a shortened AEAD algorithm.

A shortened AEAD algorithm is similar to the corresponding AEAD algorithm, but has an authentication tag that consists of fewer bytes. Depending on the algorithm, the tag length may affect the calculation of the ciphertext.

Parameters

aead_alg	An AEAD algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_AEAD(alg) is true).
tag_length	Desired length of the authentication tag in bytes.

Returns

The corresponding AEAD algorithm with the specified length.

Unspecified if alg is not a supported AEAD algorithm or if tag_length is not valid for the specified AEAD algorithm.

Definition at line 1073 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Macro to build a shortened AEAD algorithm.

A shortened AEAD algorithm is similar to the corresponding AEAD algorithm, but has an authentication tag that consists of fewer bytes. Depending on the algorithm, the tag length may affect the calculation of the ciphertext.

Parameters

aead_alg	An AEAD algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_AEAD(alg) is true).
tag_length	Desired length of the authentication tag in bytes.

Returns

The corresponding AEAD algorithm with the specified length.

Unspecified if alg is not a supported AEAD algorithm or if tag_length is not valid for the specified AEAD algorithm.

Definition at line 1079 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Macro to build a shortened AEAD algorithm.

A shortened AEAD algorithm is similar to the corresponding AEAD algorithm, but has an authentication tag that consists of fewer bytes. Depending on the algorithm, the tag length may affect the calculation of the ciphertext.

Parameters

aead_alg	An AEAD algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_AEAD(alg) is true).
tag_length	Desired length of the authentication tag in bytes.

Returns

The corresponding AEAD algorithm with the specified length.

Unspecified if alg is not a supported AEAD algorithm or if tag_length is not valid for the specified AEAD algorithm.

Definition at line 1241 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

In a hash-and-sign algorithm policy, allow any hash algorithm.

This value may be used to form the algorithm usage field of a policy for a signature algorithm that is parametrized by a hash. The key may then be used to perform operations using the same signature algorithm parametrized with any supported hash.

That is, suppose that PSA_xxx_SIGNATURE is one of the following macros:

• PSA_ALG_RSA_PKCS1V15_SIGN, PSA_ALG_RSA_PSS,
• PSA_ALG_ECDSA, PSA_ALG_DETERMINISTIC_ECDSA. Then you may create and use a key as follows:
• Set the key usage field using PSA_ALG_ANY_HASH, for example:
  1 psa_set_key_usage_flags(&attributes, PSA_KEY_USAGE_SIGN_HASH); // or VERIFY

  2 psa_set_key_algorithm(&attributes, PSA_xxx_SIGNATURE(PSA_ALG_ANY_HASH));
• Import or generate key material.
• Call psa_sign_hash() or psa_verify_hash(), passing an algorithm built from PSA_xxx_SIGNATURE and a specific hash. Each call to sign or verify a message may use a different hash.
  1 psa_sign_hash(handle, PSA_xxx_SIGNATURE(PSA_ALG_SHA_256), ...);

  2 psa_sign_hash(handle, PSA_xxx_SIGNATURE(PSA_ALG_SHA_512), ...);

  3 psa_sign_hash(handle, PSA_xxx_SIGNATURE(PSA_ALG_SHA3_256), ...);

This value may not be used to build other algorithms that are parametrized over a hash. For any valid use of this macro to build an algorithm alg, PSA_ALG_IS_HASH_AND_SIGN(alg) is true.

This value may not be used to build an algorithm specification to perform an operation. It is only valid to build policies.

Definition at line 782 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

In a hash-and-sign algorithm policy, allow any hash algorithm.

This value may be used to form the algorithm usage field of a policy for a signature algorithm that is parametrized by a hash. The key may then be used to perform operations using the same signature algorithm parametrized with any supported hash.

That is, suppose that PSA_xxx_SIGNATURE is one of the following macros:

• PSA_ALG_RSA_PKCS1V15_SIGN, PSA_ALG_RSA_PSS,
• PSA_ALG_ECDSA, PSA_ALG_DETERMINISTIC_ECDSA. Then you may create and use a key as follows:
• Set the key usage field using PSA_ALG_ANY_HASH, for example:
  1 psa_set_key_usage_flags(&attributes, PSA_KEY_USAGE_SIGN_HASH); // or VERIFY

  2 psa_set_key_algorithm(&attributes, PSA_xxx_SIGNATURE(PSA_ALG_ANY_HASH));
• Import or generate key material.
• Call psa_sign_hash() or psa_verify_hash(), passing an algorithm built from PSA_xxx_SIGNATURE and a specific hash. Each call to sign or verify a message may use a different hash.
  1 psa_sign_hash(key, PSA_xxx_SIGNATURE(PSA_ALG_SHA_256), ...);

  2 psa_sign_hash(key, PSA_xxx_SIGNATURE(PSA_ALG_SHA_512), ...);

  3 psa_sign_hash(key, PSA_xxx_SIGNATURE(PSA_ALG_SHA3_256), ...);

This value may not be used to build other algorithms that are parametrized over a hash. For any valid use of this macro to build an algorithm alg, PSA_ALG_IS_HASH_AND_SIGN(alg) is true.

This value may not be used to build an algorithm specification to perform an operation. It is only valid to build policies.

Definition at line 784 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

In a hash-and-sign algorithm policy, allow any hash algorithm.

This value may be used to form the algorithm usage field of a policy for a signature algorithm that is parametrized by a hash. The key may then be used to perform operations using the same signature algorithm parametrized with any supported hash.

That is, suppose that PSA_xxx_SIGNATURE is one of the following macros:

• PSA_ALG_RSA_PKCS1V15_SIGN, PSA_ALG_RSA_PSS,
• PSA_ALG_ECDSA, PSA_ALG_DETERMINISTIC_ECDSA. Then you may create and use a key as follows:
• Set the key usage field using PSA_ALG_ANY_HASH, for example:
  1 psa_set_key_usage_flags(&attributes, PSA_KEY_USAGE_SIGN_HASH); // or VERIFY

  2 psa_set_key_algorithm(&attributes, PSA_xxx_SIGNATURE(PSA_ALG_ANY_HASH));
• Import or generate key material.
• Call psa_sign_hash() or psa_verify_hash(), passing an algorithm built from PSA_xxx_SIGNATURE and a specific hash. Each call to sign or verify a message may use a different hash.
  1 psa_sign_hash(key, PSA_xxx_SIGNATURE(PSA_ALG_SHA_256), ...);

  2 psa_sign_hash(key, PSA_xxx_SIGNATURE(PSA_ALG_SHA_512), ...);

  3 psa_sign_hash(key, PSA_xxx_SIGNATURE(PSA_ALG_SHA3_256), ...);

This value may not be used to build other algorithms that are parametrized over a hash. For any valid use of this macro to build an algorithm alg, PSA_ALG_IS_HASH_AND_SIGN(alg) is true.

This value may not be used to build an algorithm specification to perform an operation. It is only valid to build policies.

Definition at line 907 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The ARC4 stream cipher algorithm.

Definition at line 936 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Macro to build a MAC minimum-MAC-length wildcard algorithm.

A minimum-MAC-length MAC wildcard algorithm permits all MAC algorithms sharing the same base algorithm, and where the (potentially truncated) MAC length of the specific algorithm is equal to or larger then the wildcard algorithm's minimum MAC length.

Note

When setting the minimum required MAC length to less than the smallest MAC length allowed by the base algorithm, this effectively becomes an 'any-MAC-length-allowed' policy for that base algorithm.

Parameters

mac_alg	A MAC algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_MAC(mac_alg) is true).
min_mac_length	Desired minimum length of the message authentication code in bytes. This must be at most the untruncated length of the MAC and must be at least 1.

Returns

The corresponding MAC wildcard algorithm with the specified minimum length.

Unspecified if mac_alg is not a supported MAC algorithm or if min_mac_length is less than 1 or too large for the specified MAC algorithm.

Definition at line 1052 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CBC-MAC construction over a block cipher.

Warning

CBC-MAC is insecure in many cases. A more secure mode, such as PSA_ALG_CMAC, is recommended.

Definition at line 899 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CBC-MAC construction over a block cipher.

Warning

CBC-MAC is insecure in many cases. A more secure mode, such as PSA_ALG_CMAC, is recommended.

Definition at line 901 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CBC-MAC construction over a block cipher.

Warning

CBC-MAC is insecure in many cases. A more secure mode, such as PSA_ALG_CMAC, is recommended.

Definition at line 1062 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CBC block cipher chaining mode, with no padding.

The underlying block cipher is determined by the key type.

This symmetric cipher mode can only be used with messages whose lengths are whole number of blocks for the chosen block cipher.

Definition at line 986 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CBC block cipher chaining mode, with no padding.

The underlying block cipher is determined by the key type.

This symmetric cipher mode can only be used with messages whose lengths are whole number of blocks for the chosen block cipher.

Definition at line 1000 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CBC block cipher chaining mode, with no padding.

The underlying block cipher is determined by the key type.

This symmetric cipher mode can only be used with messages whose lengths are whole number of blocks for the chosen block cipher.

Definition at line 1160 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CBC block cipher chaining mode with PKCS#7 padding.

The underlying block cipher is determined by the key type.

This is the padding method defined by PKCS#7 (RFC 2315) §10.3.

Definition at line 1008 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CBC block cipher chaining mode with PKCS#7 padding.

The underlying block cipher is determined by the key type.

This is the padding method defined by PKCS#7 (RFC 2315) §10.3.

Definition at line 1014 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CBC block cipher chaining mode with PKCS#7 padding.

The underlying block cipher is determined by the key type.

This is the padding method defined by PKCS#7 (RFC 2315) §10.3.

Definition at line 1168 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CCM authenticated encryption algorithm.

The underlying block cipher is determined by the key type.

Definition at line 1029 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CCM authenticated encryption algorithm.

The underlying block cipher is determined by the key type.

Definition at line 1035 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CCM authenticated encryption algorithm.

The underlying block cipher is determined by the key type.

Definition at line 1189 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CFB stream cipher mode.

The underlying block cipher is determined by the key type.

Definition at line 957 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CFB stream cipher mode.

The underlying block cipher is determined by the key type.

Definition at line 963 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CFB stream cipher mode.

The underlying block cipher is determined by the key type.

Definition at line 1117 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The ChaCha20 stream cipher.

ChaCha20 is defined in RFC 7539.

The nonce size for psa_cipher_set_iv() or psa_cipher_generate_iv() must be 12.

The initial block counter is always 0.

Definition at line 948 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The Chacha20-Poly1305 AEAD algorithm.

The ChaCha20_Poly1305 construction is defined in RFC 7539.

Implementations must support 12-byte nonces, may support 8-byte nonces, and should reject other sizes.

Implementations must support 16-byte tags and should reject other sizes.

Definition at line 1046 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The Chacha20-Poly1305 AEAD algorithm.

The ChaCha20_Poly1305 construction is defined in RFC 7539.

Implementations must support 12-byte nonces, may support 8-byte nonces, and should reject other sizes.

Implementations must support 16-byte tags and should reject other sizes.

Definition at line 1052 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The Chacha20-Poly1305 AEAD algorithm.

The ChaCha20_Poly1305 construction is defined in RFC 7539.

Implementations must support 12-byte nonces, may support 8-byte nonces, and should reject other sizes.

Implementations must support 16-byte tags and should reject other sizes.

Definition at line 1206 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CMAC construction over a block cipher.

Definition at line 901 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CMAC construction over a block cipher.

Definition at line 903 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CMAC construction over a block cipher.

Definition at line 1064 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The CTR stream cipher mode.

CTR is a stream cipher which is built from a block cipher. The underlying block cipher is determined by the key type. For example, to use AES-128-CTR, use this algorithm with a key of type PSA_KEY_TYPE_AES and a length of 128 bits (16 bytes).

Definition at line 951 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The CTR stream cipher mode.

CTR is a stream cipher which is built from a block cipher. The underlying block cipher is determined by the key type. For example, to use AES-128-CTR, use this algorithm with a key of type PSA_KEY_TYPE_AES and a length of 128 bits (16 bytes).

Definition at line 957 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The CTR stream cipher mode.

CTR is a stream cipher which is built from a block cipher. The underlying block cipher is determined by the key type. For example, to use AES-128-CTR, use this algorithm with a key of type PSA_KEY_TYPE_AES and a length of 128 bits (16 bytes).

Definition at line 1111 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Deterministic DSA signature with hashing.

This is the deterministic variant defined by RFC 6979 of the signature scheme defined by FIPS 186-4.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding DSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 389 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_extra.h.

Deterministic ECDSA signature with hashing.

This is the deterministic ECDSA signature scheme defined by RFC 6979.

The representation of a signature is the same as with PSA_ALG_ECDSA().

Note that when this algorithm is used for verification, signatures made with randomized ECDSA (PSA_ALG_ECDSA(hash_alg)) with the same private key are accepted. In other words, PSA_ALG_DETERMINISTIC_ECDSA(hash_alg) differs from PSA_ALG_ECDSA(hash_alg) only for signature, not for verification.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding deterministic ECDSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1205 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Deterministic ECDSA signature with hashing.

This is the deterministic ECDSA signature scheme defined by RFC 6979.

The representation of a signature is the same as with PSA_ALG_ECDSA().

Note that when this algorithm is used for verification, signatures made with randomized ECDSA (PSA_ALG_ECDSA(hash_alg)) with the same private key are accepted. In other words, PSA_ALG_DETERMINISTIC_ECDSA(hash_alg) differs from PSA_ALG_ECDSA(hash_alg) only for signature, not for verification.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding deterministic ECDSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1211 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Deterministic ECDSA signature with hashing.

This is the deterministic ECDSA signature scheme defined by RFC 6979.

The representation of a signature is the same as with PSA_ALG_ECDSA().

Note that when this algorithm is used for verification, signatures made with randomized ECDSA (PSA_ALG_ECDSA(hash_alg)) with the same private key are accepted. In other words, PSA_ALG_DETERMINISTIC_ECDSA(hash_alg) differs from PSA_ALG_ECDSA(hash_alg) only for signature, not for verification.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding deterministic ECDSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1439 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

DSA signature with hashing.

This is the signature scheme defined by FIPS 186-4, with a random per-message secret number (k).

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding DSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 371 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_extra.h.

The Electronic Code Book (ECB) mode of a block cipher, with no padding.

Warning

ECB mode does not protect the confidentiality of the encrypted data except in extremely narrow circumstances. It is recommended that applications only use ECB if they need to construct an operating mode that the implementation does not provide. Implementations are encouraged to provide the modes that applications need in preference to supporting direct access to ECB.

The underlying block cipher is determined by the key type.

This symmetric cipher mode can only be used with messages whose lengths are a multiple of the block size of the chosen block cipher.

ECB mode does not accept an initialization vector (IV). When using a multi-part cipher operation with this algorithm, psa_cipher_generate_iv() and psa_cipher_set_iv() must not be called.

Definition at line 991 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The Electronic Code Book (ECB) mode of a block cipher, with no padding.

Warning

ECB mode does not protect the confidentiality of the encrypted data except in extremely narrow circumstances. It is recommended that applications only use ECB if they need to construct an operating mode that the implementation does not provide. Implementations are encouraged to provide the modes that applications need in preference to supporting direct access to ECB.

The underlying block cipher is determined by the key type.

This symmetric cipher mode can only be used with messages whose lengths are a multiple of the block size of the chosen block cipher.

ECB mode does not accept an initialization vector (IV). When using a multi-part cipher operation with this algorithm, psa_cipher_generate_iv() and psa_cipher_set_iv() must not be called.

Definition at line 1006 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The Electronic Code Book (ECB) mode of a block cipher, with no padding.

Warning

ECB mode does not protect the confidentiality of the encrypted data except in extremely narrow circumstances. It is recommended that applications only use ECB if they need to construct an operating mode that the implementation does not provide. Implementations are encouraged to provide the modes that applications need in preference to supporting direct access to ECB.

The underlying block cipher is determined by the key type.

This symmetric cipher mode can only be used with messages whose lengths are a multiple of the block size of the chosen block cipher.

ECB mode does not accept an initialization vector (IV). When using a multi-part cipher operation with this algorithm, psa_cipher_generate_iv() and psa_cipher_set_iv() must not be called.

Definition at line 1151 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The elliptic curve Diffie-Hellman (ECDH) key agreement algorithm.

The shared secret produced by key agreement is the x-coordinate of the shared secret point. It is always ceiling(m / 8) bytes long where m is the bit size associated with the curve, i.e. the bit size of the order of the curve's coordinate field. When m is not a multiple of 8, the byte containing the most significant bit of the shared secret is padded with zero bits. The byte order is either little-endian or big-endian depending on the curve type.

• For Montgomery curves (curve types PSA_ECC_FAMILY_CURVEXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in little-endian byte order. The bit size is 448 for Curve448 and 255 for Curve25519.
• For Weierstrass curves over prime fields (curve types PSA_ECC_FAMILY_SECPXXX and PSA_ECC_FAMILY_BRAINPOOL_PXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in big-endian byte order. The bit size is m = ceiling(log_2(p)) for the field F_p.
• For Weierstrass curves over binary fields (curve types PSA_ECC_FAMILY_SECTXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in big-endian byte order. The bit size is m for the field F_{2^m}.

Definition at line 1511 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The elliptic curve Diffie-Hellman (ECDH) key agreement algorithm.

The shared secret produced by key agreement is the x-coordinate of the shared secret point. It is always ceiling(m / 8) bytes long where m is the bit size associated with the curve, i.e. the bit size of the order of the curve's coordinate field. When m is not a multiple of 8, the byte containing the most significant bit of the shared secret is padded with zero bits. The byte order is either little-endian or big-endian depending on the curve type.

• For Montgomery curves (curve types PSA_ECC_CURVE_CURVEXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in little-endian byte order. The bit size is 448 for Curve448 and 255 for Curve25519.
• For Weierstrass curves over prime fields (curve types PSA_ECC_CURVE_SECPXXX and PSA_ECC_CURVE_BRAINPOOL_PXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in big-endian byte order. The bit size is m = ceiling(log_2(p)) for the field F_p.
• For Weierstrass curves over binary fields (curve types PSA_ECC_CURVE_SECTXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in big-endian byte order. The bit size is m for the field F_{2^m}.

Definition at line 1517 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The elliptic curve Diffie-Hellman (ECDH) key agreement algorithm.

The shared secret produced by key agreement is the x-coordinate of the shared secret point. It is always ceiling(m / 8) bytes long where m is the bit size associated with the curve, i.e. the bit size of the order of the curve's coordinate field. When m is not a multiple of 8, the byte containing the most significant bit of the shared secret is padded with zero bits. The byte order is either little-endian or big-endian depending on the curve type.

• For Montgomery curves (curve types PSA_ECC_FAMILY_CURVEXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in little-endian byte order. The bit size is 448 for Curve448 and 255 for Curve25519.
• For Weierstrass curves over prime fields (curve types PSA_ECC_FAMILY_SECPXXX and PSA_ECC_FAMILY_BRAINPOOL_PXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in big-endian byte order. The bit size is m = ceiling(log_2(p)) for the field F_p.
• For Weierstrass curves over binary fields (curve types PSA_ECC_FAMILY_SECTXXX), the shared secret is the x-coordinate of d_A Q_B = d_B Q_A in big-endian byte order. The bit size is m for the field F_{2^m}.

Definition at line 1909 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

ECDSA signature with hashing.

This is the ECDSA signature scheme defined by ANSI X9.62, with a random per-message secret number (k).

The representation of the signature as a byte string consists of the concatentation of the signature values r and s. Each of r and s is encoded as an N-octet string, where N is the length of the base point of the curve in octets. Each value is represented in big-endian order (most significant octet first).

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding ECDSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1170 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

ECDSA signature with hashing.

This is the ECDSA signature scheme defined by ANSI X9.62, with a random per-message secret number (k).

The representation of the signature as a byte string consists of the concatentation of the signature values r and s. Each of r and s is encoded as an N-octet string, where N is the length of the base point of the curve in octets. Each value is represented in big-endian order (most significant octet first).

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding ECDSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1176 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

ECDSA signature with hashing.

This is the ECDSA signature scheme defined by ANSI X9.62, with a random per-message secret number (k).

The representation of the signature as a byte string consists of the concatentation of the signature values r and s. Each of r and s is encoded as an N-octet string, where N is the length of the base point of the curve in octets. Each value is represented in big-endian order (most significant octet first).

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true). This includes PSA_ALG_ANY_HASH when specifying the algorithm in a usage policy.

Returns

The corresponding ECDSA signature algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1404 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

ECDSA signature without hashing.

This is the same signature scheme as PSA_ALG_ECDSA(), but without specifying a hash algorithm. This algorithm may only be used to sign or verify a sequence of bytes that should be an already-calculated hash. Note that the input is padded with zeros on the left or truncated on the left as required to fit the curve size.

Definition at line 1181 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

ECDSA signature without hashing.

This is the same signature scheme as PSA_ALG_ECDSA(), but without specifying a hash algorithm. This algorithm may only be used to sign or verify a sequence of bytes that should be an already-calculated hash. Note that the input is padded with zeros on the left or truncated on the left as required to fit the curve size.

Definition at line 1187 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

ECDSA signature without hashing.

This is the same signature scheme as PSA_ALG_ECDSA(), but without specifying a hash algorithm. This algorithm may only be used to sign or verify a sequence of bytes that should be an already-calculated hash. Note that the input is padded with zeros on the left or truncated on the left as required to fit the curve size.

Definition at line 1415 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Edwards-curve digital signature algorithm with prehashing (HashEdDSA), using SHA-512 and the Edwards25519 curve.

See PSA_ALG_PURE_EDDSA regarding context support and the signature format.

This algorithm is Ed25519 as specified in RFC 8032. The curve is Edwards25519. The prehash is SHA-512. The hash function used internally is SHA-512.

This is a hash-and-sign algorithm: to calculate a signature, you can either:

• call psa_sign_message() on the message;
• or calculate the SHA-512 hash of the message with psa_hash_compute() or with a multi-part hash operation started with psa_hash_setup(), using the hash algorithm PSA_ALG_SHA_512, then sign the calculated hash with psa_sign_hash(). Verifying a signature is similar, using psa_verify_message() or psa_verify_hash() instead of the signature function.

Definition at line 1507 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Edwards-curve digital signature algorithm with prehashing (HashEdDSA), using SHAKE256 and the Edwards448 curve.

See PSA_ALG_PURE_EDDSA regarding context support and the signature format.

This algorithm is Ed448 as specified in RFC 8032. The curve is Edwards448. The prehash is the first 64 bytes of the SHAKE256 output. The hash function used internally is the first 114 bytes of the SHAKE256 output.

This is a hash-and-sign algorithm: to calculate a signature, you can either:

• call psa_sign_message() on the message;
• or calculate the first 64 bytes of the SHAKE256 output of the message with psa_hash_compute() or with a multi-part hash operation started with psa_hash_setup(), using the hash algorithm PSA_ALG_SHAKE256_512, then sign the calculated hash with psa_sign_hash(). Verifying a signature is similar, using psa_verify_message() or psa_verify_hash() instead of the signature function.

Definition at line 1532 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The finite-field Diffie-Hellman (DH) key agreement algorithm.

The shared secret produced by key agreement is g^{ab} in big-endian format. It is ceiling(m / 8) bytes long where m is the size of the prime p in bits.

Definition at line 1469 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The finite-field Diffie-Hellman (DH) key agreement algorithm.

The shared secret produced by key agreement is g^{ab} in big-endian format. It is ceiling(m / 8) bytes long where m is the size of the prime p in bits.

Definition at line 1475 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The finite-field Diffie-Hellman (DH) key agreement algorithm.

The shared secret produced by key agreement is g^{ab} in big-endian format. It is ceiling(m / 8) bytes long where m is the size of the prime p in bits.

Definition at line 1867 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Macro to build the base MAC algorithm corresponding to a truncated MAC algorithm.

Parameters

mac_alg

A MAC algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_MAC(alg) is true). This may be a truncated or untruncated MAC algorithm.

Returns

The corresponding base MAC algorithm.

Unspecified if alg is not a supported MAC algorithm.

Definition at line 876 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Macro to build the base MAC algorithm corresponding to a truncated MAC algorithm.

Parameters

mac_alg

A MAC algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_MAC(alg) is true). This may be a truncated or untruncated MAC algorithm.

Returns

The corresponding base MAC algorithm.

Unspecified if alg is not a supported MAC algorithm.

Definition at line 878 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Macro to build the base MAC algorithm corresponding to a truncated MAC algorithm.

Parameters

mac_alg

A MAC algorithm identifier (value of type psa_algorithm_t such that PSA_ALG_IS_MAC(mac_alg) is true). This may be a truncated or untruncated MAC algorithm.

Returns

The corresponding base MAC algorithm.

Unspecified if mac_alg is not a supported MAC algorithm.

Definition at line 1010 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

The GCM authenticated encryption algorithm.

The underlying block cipher is determined by the key type.

Definition at line 1035 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

The GCM authenticated encryption algorithm.

The underlying block cipher is determined by the key type.

Definition at line 1041 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

The GCM authenticated encryption algorithm.

The underlying block cipher is determined by the key type.

Definition at line 1195 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Get the hash used by a composite algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

The underlying hash algorithm if alg is a composite algorithm that uses a hash algorithm.

0 if alg is not a composite algorithm that uses a hash.

Definition at line 1959 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Macro to build an HKDF algorithm.

For example, PSA_ALG_HKDF(PSA_ALG_SHA256) is HKDF using HMAC-SHA-256.

This key derivation algorithm uses the following inputs:

• PSA_KEY_DERIVATION_INPUT_SALT is the salt used in the "extract" step. It is optional; if omitted, the derivation uses an empty salt.
• PSA_KEY_DERIVATION_INPUT_SECRET is the secret key used in the "extract" step.
• PSA_KEY_DERIVATION_INPUT_INFO is the info string used in the "expand" step. You must pass PSA_KEY_DERIVATION_INPUT_SALT before PSA_KEY_DERIVATION_INPUT_SECRET. You may pass PSA_KEY_DERIVATION_INPUT_INFO at any time after steup and before starting to generate output.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true).

Returns

The corresponding HKDF algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1308 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Macro to build an HKDF algorithm.

For example, PSA_ALG_HKDF(PSA_ALG_SHA256) is HKDF using HMAC-SHA-256.

This key derivation algorithm uses the following inputs:

• PSA_KEY_DERIVATION_INPUT_SALT is the salt used in the "extract" step. It is optional; if omitted, the derivation uses an empty salt.
• PSA_KEY_DERIVATION_INPUT_SECRET is the secret key used in the "extract" step.
• PSA_KEY_DERIVATION_INPUT_INFO is the info string used in the "expand" step. You must pass PSA_KEY_DERIVATION_INPUT_SALT before PSA_KEY_DERIVATION_INPUT_SECRET. You may pass PSA_KEY_DERIVATION_INPUT_INFO at any time after steup and before starting to generate output.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true).

Returns

The corresponding HKDF algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1314 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Macro to build an HKDF algorithm.

For example, PSA_ALG_HKDF(PSA_ALG_SHA256) is HKDF using HMAC-SHA-256.

This key derivation algorithm uses the following inputs:

• PSA_KEY_DERIVATION_INPUT_SALT is the salt used in the "extract" step. It is optional; if omitted, the derivation uses an empty salt.
• PSA_KEY_DERIVATION_INPUT_SECRET is the secret key used in the "extract" step.
• PSA_KEY_DERIVATION_INPUT_INFO is the info string used in the "expand" step. You must pass PSA_KEY_DERIVATION_INPUT_SALT before PSA_KEY_DERIVATION_INPUT_SECRET. You may pass PSA_KEY_DERIVATION_INPUT_INFO at any time after steup and before starting to generate output.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true).

Returns

The corresponding HKDF algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 1645 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Macro to build an HMAC algorithm.

For example, PSA_ALG_HMAC(PSA_ALG_SHA_256) is HMAC-SHA-256.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true).

Returns

The corresponding HMAC algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 797 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Macro to build an HMAC algorithm.

For example, PSA_ALG_HMAC(PSA_ALG_SHA_256) is HMAC-SHA-256.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true).

Returns

The corresponding HMAC algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 799 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Macro to build an HMAC algorithm.

For example, PSA_ALG_HMAC(PSA_ALG_SHA_256) is HMAC-SHA-256.

Parameters

hash_alg

A hash algorithm (PSA_ALG_XXX value such that PSA_ALG_IS_HASH(hash_alg) is true).

Returns

The corresponding HMAC algorithm.

Unspecified if hash_alg is not a supported hash algorithm.

Definition at line 922 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is an authenticated encryption with associated data (AEAD) algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an AEAD algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 670 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is an authenticated encryption with associated data (AEAD) algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an AEAD algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 670 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is an authenticated encryption with associated data (AEAD) algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an AEAD algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 772 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is an AEAD mode on a block cipher.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an AEAD algorithm which is an AEAD mode based on a block cipher, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1021 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is an AEAD mode on a block cipher.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an AEAD algorithm which is an AEAD mode based on a block cipher, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1027 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is an AEAD mode on a block cipher.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an AEAD algorithm which is an AEAD mode based on a block cipher, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1181 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a public-key encryption algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a public-key encryption algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 692 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is an asymmetric encryption algorithm, also known as public-key encryption algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an asymmetric encryption algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 694 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is an asymmetric encryption algorithm, also known as public-key encryption algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an asymmetric encryption algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 796 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a MAC algorithm based on a block cipher.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a MAC algorithm based on a block cipher, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 911 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a MAC algorithm based on a block cipher.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a MAC algorithm based on a block cipher, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 913 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a MAC algorithm based on a block cipher.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a MAC algorithm based on a block cipher, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1074 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a symmetric cipher algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a symmetric cipher algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 658 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a symmetric cipher algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a symmetric cipher algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 658 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a symmetric cipher algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a symmetric cipher algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 760 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is an elliptic curve Diffie-Hellman algorithm.

This includes the raw elliptic curve Diffie-Hellman algorithm as well as elliptic curve Diffie-Hellman followed by any supporter key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an elliptic curve Diffie-Hellman algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key agreement algorithm identifier.

Definition at line 1527 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is an elliptic curve Diffie-Hellman algorithm.

This includes the raw elliptic curve Diffie-Hellman algorithm as well as elliptic curve Diffie-Hellman followed by any supporter key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an elliptic curve Diffie-Hellman algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key agreement algorithm identifier.

Definition at line 1533 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is an elliptic curve Diffie-Hellman algorithm.

This includes the raw elliptic curve Diffie-Hellman algorithm as well as elliptic curve Diffie-Hellman followed by any supporter key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an elliptic curve Diffie-Hellman algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key agreement algorithm identifier.

Definition at line 1925 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a finite field Diffie-Hellman algorithm.

This includes the raw finite field Diffie-Hellman algorithm as well as finite-field Diffie-Hellman followed by any supporter key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a finite field Diffie-Hellman algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key agreement algorithm identifier.

Definition at line 1483 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a finite field Diffie-Hellman algorithm.

This includes the raw finite field Diffie-Hellman algorithm as well as finite-field Diffie-Hellman followed by any supporter key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a finite field Diffie-Hellman algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key agreement algorithm identifier.

Definition at line 1489 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a finite field Diffie-Hellman algorithm.

This includes the raw finite field Diffie-Hellman algorithm as well as finite-field Diffie-Hellman followed by any supporter key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a finite field Diffie-Hellman algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key agreement algorithm identifier.

Definition at line 1881 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a hash algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a hash algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 636 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a hash algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a hash algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 636 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a hash algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a hash algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 738 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a hash-and-sign algorithm.

Hash-and-sign algorithms are asymmetric (public-key) signature algorithms structured in two parts: first the calculation of a hash in a way that does not depend on the key, then the calculation of a signature from the hash value and the key.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a hash-and-sign algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1231 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a hash-and-sign algorithm.

Hash-and-sign algorithms are public-key signature algorithms structured in two parts: first the calculation of a hash in a way that does not depend on the key, then the calculation of a signature from the hash value and the key.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a hash-and-sign algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1237 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a hash-and-sign algorithm.

Hash-and-sign algorithms are asymmetric (public-key) signature algorithms structured in two parts: first the calculation of a hash in a way that does not depend on the key, then the calculation of a signature from the hash value and the key.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a hash-and-sign algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 1553 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is an HKDF algorithm.

HKDF is a family of key derivation algorithms that are based on a hash function and the HMAC construction.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an HKDF algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key derivation algorithm identifier.

Definition at line 1321 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is an HKDF algorithm.

HKDF is a family of key derivation algorithms that are based on a hash function and the HMAC construction.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an HKDF algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key derivation algorithm identifier.

Definition at line 1327 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is an HKDF algorithm.

HKDF is a family of key derivation algorithms that are based on a hash function and the HMAC construction.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an HKDF algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported key derivation algorithm identifier.

Definition at line 1658 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is an HMAC algorithm.

HMAC is a family of MAC algorithms that are based on a hash function.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an HMAC algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 813 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is an HMAC algorithm.

HMAC is a family of MAC algorithms that are based on a hash function.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an HMAC algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 815 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is an HMAC algorithm.

HMAC is a family of MAC algorithms that are based on a hash function.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is an HMAC algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 938 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a key agreement algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a key agreement algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 703 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a key agreement algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a key agreement algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 705 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a key agreement algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a key agreement algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 807 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a key derivation algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 714 of file TARGET_TFM/TARGET_TFM_V1_0/include/psa/crypto_values.h.

Whether the specified algorithm is a key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a key derivation algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 716 of file TARGET_MBED_PSA_SRV/inc/psa/crypto_values.h.

Whether the specified algorithm is a key derivation algorithm.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).

Returns

1 if alg is a key derivation algorithm, 0 otherwise. This macro may return either 0 or 1 if alg is not a supported algorithm identifier.

Definition at line 818 of file TARGET_TFM/TARGET_TFM_LATEST/include/psa/crypto_values.h.

Whether the specified algorithm is a key stretching / password hashing algorithm.

A key stretching / password hashing algorithm is a key derivation algorithm that is suitable for use with a low-entropy secret such as a password. Equivalently, it's a key derivation algorithm that uses a PSA_KEY_DERIVATION_INPUT_PASSWORD input step.

Parameters

alg	An algorithm identifier (value of type psa_algorithm_t).