2021-10-01 13:16:01 +02:00
|
|
|
This document is temporary; it lists tasks to achieve G1 as described in
|
|
|
|
`strategy.md` while the strategy is being reviewed - once that's done,
|
|
|
|
corresponding github issues will be created and this document removed.
|
|
|
|
|
|
|
|
For all of the tasks here, no specific testing is expected to be required,
|
|
|
|
beyond passing the existing tests in a build with `MBEDTLS_USE_PSA_ENABLED`,
|
|
|
|
see `testing.md`.
|
|
|
|
|
|
|
|
Symmetric crypto
|
|
|
|
================
|
|
|
|
|
|
|
|
Hashes
|
|
|
|
------
|
|
|
|
|
|
|
|
### Use `psa_hash` in all of X.509
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5157
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
HMAC
|
|
|
|
----
|
|
|
|
|
|
|
|
### Variable-time HMAC in TLS record protection
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5177
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Constant-time HMAC in TLS record protection
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5178
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
|
|
|
|
Ciphers
|
|
|
|
-------
|
|
|
|
|
|
|
|
### Use PSA for all cipher operations in TLS
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5181
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5182
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5203
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5204
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5205
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5206
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
Asymmetric crypto
|
|
|
|
=================
|
|
|
|
|
|
|
|
ECDSA
|
|
|
|
-----
|
|
|
|
|
|
|
|
### Make `mbedtls_pk_sign()` use PSA for ECDSA operations
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5274
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
RSA signature (and verification)
|
|
|
|
--------------------------------
|
|
|
|
|
|
|
|
### Make `mbedtls_pk_sign()` use PSA for RSA operations
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5162
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Make `mbedtls_pk_verify()` use PSA for RSA operations
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5159
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Make `mbedtls_pk_verify_ext()` use PSA for RSA operations
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5333 (partial)
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5277 (futher)
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
RSA en/decryption
|
|
|
|
-----------------
|
|
|
|
|
|
|
|
### Make `mbedtls_pk_encrypt()` use PSA for RSA operations
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5161
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Make `mbedtls_pk_decrypt()` use PSA for RSA operations
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5160
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
ECDH
|
|
|
|
----
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
Additional:
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5291 (pre clean-up)
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5321 (TLS 1.3)
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5322 (post clean-up)
|
2021-10-01 13:16:01 +02:00
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
### Write remaining utilities for ECDH parsing/writing
|
2021-10-01 13:16:01 +02:00
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
(not a task on its own, part of other tasks)
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Use PSA for ECDHE in ECDHE-ECDSA and ECDHE-RSA server-side
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5317
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Use PSA for ECDH in ECDHE-PSK (all sides and versions)
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5318
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
### Use PSA for ECDH in static-ECDH key exchanges
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5319
|
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5320
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
FFDH
|
|
|
|
----
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5287
|
2021-10-01 13:16:01 +02:00
|
|
|
|
|
|
|
EC J-PAKE
|
|
|
|
---------
|
|
|
|
|
2022-01-17 10:47:24 +01:00
|
|
|
https://github.com/ARMmbed/mbedtls/issues/5275
|