coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

update comments to reflect implemented functions

Browse Source 
Signed-off-by: Cal Abel <crabel@mac.com>
This commit is contained in:
Cal Abel 2026-07-03 20:12:33 -04:00
parent ce9965be55
commit 8ed5a11402
3 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
library/ssl_msg.c
View File

@ -83,9 +83,12 @@ static void mbedtls_async_hardware_ssl_aead_callback(int success, void *context)
/**
* @brief Return whether the transform has explicit async hardware AEAD metadata.
*
* @todo Extend the provider dispatch behind this metadata for AES-256-GCM,
* AES-CCM, AES-CCM-8, and ChaCha20-Poly1305. Until then those algorithms are
* intentional fail-closed stubs instead of PSA/software fallbacks.
* AES-GCM and ChaCha20-Poly1305 transforms are represented through the
* generic async AEAD boundary. Providers that do not implement a classified
* algorithm fail closed instead of falling back to PSA/software.
*
* @todo Extend this direct transform configuration path for AES-CCM and
* AES-CCM-8 once those suites are wired through this helper.
*/
static int mbedtls_async_hardware_ssl_transform_has_aead(
const mbedtls_ssl_transform *transform)

8
library/ssl_tls.c
View File

@ -7761,10 +7761,10 @@ static mbedtls_tls_prf_types tls_prf_get_type(mbedtls_ssl_tls_prf_cb *tls_prf)
/**
* @brief Map Mbed TLS/PSA record parameters to async hardware TLS AEAD capabilities.
*
* @todo Wire AES-256-GCM, AES-CCM, AES-CCM-8, and ChaCha20-Poly1305 to
* hardware-backed provider operations. They are classified here so production
* hardware builds fail closed through the generic AEAD boundary instead of
* silently falling back to PSA/software.
* TLS 1.2 AEAD transforms are classified into the generic async hardware
* provider algorithm IDs. Providers that do not implement a classified
* algorithm fail closed through the generic AEAD boundary instead of silently
* falling back to PSA/software.
*/
static int mbedtls_async_hardware_tls_aead_from_transform(psa_key_type_t key_type,
size_t keylen,

2
tf-psa-crypto

@ -1 +1 @@
Subproject commit 0d37f227257545bca1dc9cceacbd65a79688aded
Subproject commit 2a327c5e75f1c87d205370fc967732e674a22a69