Hi Roman,

My understanding is that you would like to add features to the Crypto service API, but the features which you would like to add are not cryptographic in nature.

Have you considered creating your own service for those features, instead of modifying the Crypto service? Or is there anything makes this not a viable option?

If you are thinking about adding hardware acceleration for some Crypto features, that’s indeed covered in Shebu’s link.

Greetings,

Fabian Schmidt

From: TF-M <tf-m-bounces@lists.trustedfirmware.org> On Behalf Of Shebu Varghese Kuriakose via TF-M
Sent: Dienstag, 12. Oktober 2021 11:46
To: David Hu <David.Hu@arm.com>; Roman.Mazurak@infineon.com; tf-m@lists.trustedfirmware.org; mbed-tls@lists.trustedfirmware.org
Cc: nd <nd@arm.com>
Subject: [EXT] Re: [TF-M] Adding platform specific functions to Crypto Service.

Caution: EXT Email

Hi Roman,

I also might not have understood the question completely.

As you mention crypto HAL API, here is the specification which defines a standardized mechanism for PSA Crypto implementations to interface with Secure elements and crypto accelerators - https://github.com/ARMmbed/mbedtls/blob/development/docs/proposed/psa-driver-interface.md

Also adding mbed-tls mailing list as the thread is crypto related..

Regards,

Shebu

From: TF-M <tf-m-bounces@lists.trustedfirmware.org> On Behalf Of David Hu via TF-M
Sent: Tuesday, October 12, 2021 4:18 AM
To: Roman.Mazurak@infineon.com; tf-m@lists.trustedfirmware.org
Cc: nd <nd@arm.com>
Subject: Re: [TF-M] Adding platform specific functions to Crypto Service.

Hi Roman,

Are you asking about adding platform specific HAL API to implement PSA Crypto API function?

Please correct me if I misunderstand your question.

Best regards,

Hu Ziji

From: TF-M <tf-m-bounces@lists.trustedfirmware.org> On Behalf Of Roman Mazurak via TF-M
Sent: Monday, October 11, 2021 9:45 PM
To: tf-m@lists.trustedfirmware.org
Subject: [TF-M] Adding platform specific functions to Crypto Service.

Hi all,

We would like to add a number of platform specific functions to Crypto Service API. Is it ok if such functions will not be related to cryptographic service, but such approach allows us to optimize platform design? Is there any initiative to create a Crypto Service HAL API to extend Crypto with custom functions?

Best regards,

Roman.