diff --git a/docs/use-psa-crypto.md b/docs/use-psa-crypto.md index 194d96fb4..fc5317af8 100644 --- a/docs/use-psa-crypto.md +++ b/docs/use-psa-crypto.md @@ -95,8 +95,6 @@ Other than the above exceptions, all crypto operations are based on PSA when Current exceptions: -- Verification of RSA-PSS signatures with a salt length that is different from - the hash length. - Restartable operations when `MBEDTLS_ECP_RESTARTABLE` is also enabled (see the documentation of that option). @@ -107,11 +105,11 @@ Other than the above exception, all crypto operations are based on PSA when Current exceptions: -- Verification of RSA-PSS signatures with a salt length that is different from - the hash length, or with an MGF hash that's different from the message hash. +- Verification of RSA-PSS signatures with an MGF hash that's different from + the message hash. - Restartable operations when `MBEDTLS_ECP_RESTARTABLE` is also enabled (see the documentation of that option). -Other than the above exception, all crypto operations are based on PSA when +Other than the above exceptions, all crypto operations are based on PSA when `MBEDTLS_USE_PSA_CRYPTO` is enabled. diff --git a/include/mbedtls/pk.h b/include/mbedtls/pk.h index db0bfacab..386ec4202 100644 --- a/include/mbedtls/pk.h +++ b/include/mbedtls/pk.h @@ -496,7 +496,9 @@ int mbedtls_pk_verify_restartable( mbedtls_pk_context *ctx, * * \note If type is MBEDTLS_PK_RSASSA_PSS, then options must point * to a mbedtls_pk_rsassa_pss_options structure, - * otherwise it must be NULL. + * otherwise it must be NULL. Note that if + * #MBEDTLS_USE_PSA_CRYPTO is defined, the salt length is not + * verified as PSA_ALG_RSA_PSS_ANY_SALT is used. */ int mbedtls_pk_verify_ext( mbedtls_pk_type_t type, const void *options, mbedtls_pk_context *ctx, mbedtls_md_type_t md_alg,