mbedtls_aes_setkey_enc_shadow_key_derived()

int mbedtls_aes_setkey_enc_shadow_key_derived	(	mbedtls_aes_context *const	ctx,
		uint32_t	slot_id,
		unsigned int	keybits,
		uint8_t const *	label,
		size_t	label_size,
		uint8_t const *	context,
		size_t	context_size
	)

#include <crypto/nrf_cc310_mbedcrypto/include/mbedtls/cc3xx_kmu.h>

Function to configure AES to use a key derived from one or more slots in KMU for encryption.

See mbedtls_derive_kmu_key for details on the KDF function.

Note

Replaces the API mbedtls_aes_setkey_dec.

The key derivation is executed before each request to encrypt. This function only configures the context to use a derived key.

When deriving the key from KMU registers, the derived keys exist in SRAM for a brief period of time, before being loaded into the write-only CryptoCell HW registers for AES keys before encryption.

Parameters

ctx	AES context to set the decryption key by KMU slot.
slot_id	Identifier of the key slot (0 - 127).
keybits	Key size in bits.
label	Label to use for KDF.
label_size	Size of the label to use for KDF.
context	Context info to use for KDF.
context_size	Context info size to use for KDF.

Returns

0 on success, otherwise a negative number.