mbedtls_gcm_setkey_shadow_key()

int mbedtls_gcm_setkey_shadow_key	(	mbedtls_gcm_context *const	ctx,
		mbedtls_cipher_id_t	cipher,
		uint32_t	slot_id,
		unsigned int	keybits )

#include <crypto/nrf_cc310_mbedcrypto/include/mbedtls/cc3xx_kmu.h>

Function to configure AES GCM to use one or more KMU key slot as encryption key.

Note

A shadow key is not directly accessible, only reference information is stored in the context type

Replaces the API mbedtls_gcm_setkey.

Using this API enforces raw key usage of keys in the KMU slots. If derived key usage is intended, please use the API nrf_cc3xx_platform_kmu_aes_setkey_enc_shadow_key_derived.

Parameters

ctx	AES context to set the key by KMU slot.
cipher	Cipher id to use.
slot_id	Identifier of the key slot (0 - 127).
keybits	Key size in bits.

Returns

0 on success, otherwise a negative number.