Skip to content

Add support for AES Key Wrap and Unwrap #292

@MarcusJGStreets

Description

@MarcusJGStreets

This was mentioned in the PSA Drivers Workshop.
Implementations are using AES key wrap to deliver keys.

I think that this is going to need two new functions, PSA_wrap_key() and PSA_unwrap_key()

Wrap key will take two keys and fill a buffer.
Unwrap key will take a key and a buffer and a policy - and create a new key.

Any key with Encrypt permission can be used to wrap a key.
Any key that has Export permission can be wrapped
Any key with Decrypt permission can unwrap any key.

Initially we will only support AES Key Wrap, and Key Wrap with Padding.
Therefore, in this release, all the keys must be AES.

In future, we might add definitions for other wrapping formats.

I will draft a pull request

Metadata

Metadata

Assignees

No one assigned

    Labels

    duplicateThis issue or pull request already exists

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions