AuroraMiddleware/mbedtls
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add missing error case to psa_aead_verify

Browse Source
This commit is contained in:
Andrew Thoelke 2019-09-12 09:44:33 +01:00
parent d93c965d6e
commit 5ae24ec7af
1 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
include/psa/crypto.h
View File

@ -2695,13 +2695,25 @@ psa_status_t psa_aead_finish(psa_aead_operation_t *operation,
* *
* The operation must have been set up with psa_aead_decrypt_setup(). * The operation must have been set up with psa_aead_decrypt_setup().
* *
* This function finishes the authentication of the additional data * This function finishes the authenticated decryption of the message
* formed by concatenating the inputs passed to preceding calls to * components:
* psa_aead_update_ad() with the ciphertext formed by concatenating the *
* inputs passed to preceding calls to psa_aead_update(). * - The additional data consisting of the concatenation of the inputs
* passed to preceding calls to psa_aead_update_ad().
* - The ciphertext consisting of the concatenation of the inputs passed to
* preceding calls to psa_aead_update().
* - The tag passed to this function call.
*
* If the authentication tag is correct, this function outputs any remaining
* plaintext and reports success. If the authentication tag is not correct,
* this function returns #PSA_ERROR_INVALID_SIGNATURE.
* *
* When this function returns, the operation becomes inactive. * When this function returns, the operation becomes inactive.
* *
* \note Implementations shall make the best effort to ensure that the
* comparison between the actual tag and the expected tag is performed
* in constant time.
*
* \param[in,out] operation Active AEAD operation. * \param[in,out] operation Active AEAD operation.
* \param[out] plaintext Buffer where the last part of the plaintext * \param[out] plaintext Buffer where the last part of the plaintext
* is to be written. This is the remaining data * is to be written. This is the remaining data
@ -2720,6 +2732,9 @@ psa_status_t psa_aead_finish(psa_aead_operation_t *operation,
* *
* \retval #PSA_SUCCESS * \retval #PSA_SUCCESS
* Success. * Success.
* \retval #PSA_ERROR_INVALID_SIGNATURE
* The calculations were successful, but the authentication tag is
* not correct.
* \retval #PSA_ERROR_BAD_STATE * \retval #PSA_ERROR_BAD_STATE
* The operation state is not valid (not set up, nonce not set, * The operation state is not valid (not set up, nonce not set,
* encryption, or already completed). * encryption, or already completed).