cc3xx_kmu.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Nordic Semiconductor ASA
 *
 * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
 */
 
#ifndef CC3XX_KMU_H__
#define CC3XX_KMU_H__
 
#include <stdint.h>
 
#if !defined(MBEDTLS_CONFIG_FILE)
#include "mbedtls/config.h"
#else
#include MBEDTLS_CONFIG_FILE
#endif
 
#include "nrf_cc3xx_platform_defines.h"
 
 
#define MBEDTLS_SHADOW_KEY_KDF_MAX_LABEL_SIZE_IN_BYTES      (64)    
#define MBEDTLS_SHADOW_KEY_KDF_MAX_CONTEXT_SIZE_IN_BYTES    (64)    
#define MBEDTLS_SHADOW_KEY_KDF_MAX_DERIVED_SIZE_IN_BYTES    (4080)  
 
 
#define MBEDTLS_ERR_SHADOW_KEY_KEY_OK               (0)     
#define MBEDTLS_ERR_SHADOW_KEY_INVALID_SLOT         (-1)    
#define MBEDTLS_ERR_SHADOW_KEY_INVALID_SIZE         (-2)    
#define MBEDTLS_ERR_SHADOW_KEY_KDF_INVALID_LABEL    (-3)    
#define MBEDTLS_ERR_SHADOW_KEY_KDF_INVALID_CONTEXT  (-4)    
#define MBEDTLS_ERR_SHADOW_KEY_KDF_INVALID_INPUT    (-5)    
#define MBEDTLS_ERR_SHADOW_KEY_INTERNAL_ERROR       (-6)    
 
#if defined(MBEDTLS_AES_C)
 
#include "mbedtls/aes.h"
 
#ifdef __cplusplus
extern "C"
{
#endif
 
int mbedtls_aes_setkey_enc_shadow_key(
    mbedtls_aes_context * const ctx,
    uint32_t slot_id,
    unsigned int keybits);
 
 
int mbedtls_aes_setkey_dec_shadow_key(
    mbedtls_aes_context * const ctx,
    uint32_t slot_id,
    unsigned int keybits);
 
 
int mbedtls_aes_setkey_enc_shadow_key_derived(
    mbedtls_aes_context * const ctx,
    uint32_t slot_id,
    unsigned int keybits,
    uint8_t const * label,
    size_t label_size,
    uint8_t const * context,
    size_t context_size);
 
 
int mbedtls_aes_setkey_dec_shadow_key_derived(
    mbedtls_aes_context * const ctx,
    uint32_t slot_id,
    unsigned int keybits,
    uint8_t const * label,
    size_t label_size,
    uint8_t const * context,
    size_t context_size);
 
#ifdef __cplusplus
}
#endif
 
#endif /* defined(MBEDTLS_AES_C) */
 
 
#if defined(MBEDTLS_CCM_C)
 
#include "mbedtls/ccm.h"
 
#ifdef __cplusplus
extern "C"
{
#endif
 
int mbedtls_ccm_setkey_shadow_key(
    mbedtls_ccm_context * const ctx,
    mbedtls_cipher_id_t cipher,
    uint32_t slot_id,
    unsigned int keybits
);
 
int mbedtls_ccm_setkey_shadow_key_derived(
    mbedtls_ccm_context * const ctx,
    mbedtls_cipher_id_t cipher,
    uint32_t slot_id,
    unsigned int keybits,
    uint8_t const * label,
    size_t label_size,
    uint8_t const * context,
    size_t context_size
);
 
#ifdef __cplusplus
}
#endif
 
#endif /* defined(MBEDTLS_CCM_C) */
 
#if defined(MBEDTLS_GCM_C)
 
#include "mbedtls/gcm.h"
 
#ifdef __cplusplus
extern "C"
{
#endif
 
int mbedtls_gcm_setkey_shadow_key(
    mbedtls_gcm_context * const ctx,
    mbedtls_cipher_id_t cipher,
    uint32_t slot_id,
    unsigned int keybits
);
 
int mbedtls_gcm_setkey_shadow_key_derived(
    mbedtls_gcm_context * const ctx,
    mbedtls_cipher_id_t cipher,
    uint32_t slot_id,
    unsigned int keybits,
    uint8_t const * label,
    size_t label_size,
    uint8_t const * context,
    size_t context_size
);
 
#ifdef __cplusplus
}
#endif
 
#endif // defined(MBEDTLS_GCM_C)
 
#if defined(MBEDTLS_AES_C)
 
#include "mbedtls/aes.h"
 
#ifdef __cplusplus
extern "C"
{
#endif
 
 
int mbedtls_shadow_key_derive(uint32_t slot_id,
                             unsigned int keybits,
                             uint8_t const * label,
                             size_t label_size,
                             uint8_t const * context,
                             size_t context_size,
                             uint8_t * output,
                             size_t output_size);
 
#ifdef __cplusplus
}
#endif
 
#endif // defined(MBEDTLS_AES_C)
 
#endif /* CC3XX_KMU_H__ */