mbedtls_aes_setkey_dec_shadow_key()

int mbedtls_aes_setkey_dec_shadow_key	(	mbedtls_aes_context *const	ctx,
		uint32_t	slot_id,
		unsigned int	keybits
	)

#include <crypto/nrf_cc310_mbedcrypto/include/mbedtls/cc3xx_kmu.h>

Function to configure AES to use one or more KMU key slot for decryption.

Note

A shadow key is not directly accessible, only reference information is stored in the context type

Replaces the API mbedtls_aes_setkey_dec.

Using this API enforces raw key usage of keys in the KMU slots. If derived key usage is intended, please use the API nrf_cc3xx_platform_kmu_aes_setkey_dec_shadow_key_derived.

Parameters

ctx	AES context to set the key by KMU slot.
slot_id	Identifier of the key slot (0 - 127).
keybits	Key size in bits.

Returns

0 on success, otherwise a negative number.