Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for using a different MGF1 hash with RSA-OAEP #6779

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Commits on May 23, 2024

  1. core: pass TEE_ATTR_RSA_OAEP_MGF_HASH to RSA-OAEP implementations

    OP-TEE currently doesn't support using a different hash for MGF1
    with RSA-OAEP. However, this is required for AOSP compatibility
    (e.g. in EncryptionOperationsTest.RsaOaepWithMGFDigestSuccess [1]).
    
    Pass the MGF1 attribute to crypto implementations. Note that
    only libtomcrypt supports this feature at the moment, so other
    implementations will either fail or fall back to libtomcrypt when
    passed a different MGF1 hash.
    
    Link: https://android.googlesource.com/platform/hardware/interfaces/+/refs/heads/main/security/keymint/aidl/vts/functional/KeyMintTest.cpp#5552 [1]
    Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
    Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
    samitolvanen committed May 23, 2024
    Configuration menu
    Copy the full SHA
    3095e10 View commit details
    Browse the repository at this point in the history