Hi,

 

I am currently working on PSA driver for our SoC’s security crypto-processor. This processor needs to do some handling when a key is destroyed.  

In the current implementation in mbedTLS,  I don’t see a driver wrapper function available in psa_destroy_key(). Is there a specific reason for not having wrapper for driver function available for psa_destroy_key() ?

 

Another query pertaining to the tests in the testsuite in mbedTLS. I was exploring if I could reuse the tests for the crypto-processor implementation.  Have these been written with this kind of reuse in mind ?

Basically I would like the ability to add driver location to the cases. The few cases I have looked at for psa seem to be very specific. Any pointers/suggestions if anyone is reusing this test suite to test their specific PSA drivers?

• Getting the tests to call the secure element. I think we'd accept a patch for that if it isn't too invasive, but I'm not sure what could work and would be “not too invasive”. A workaround could be to define accelerator driver wrappers that import the key into the secure element each time it's used.
• A few test cases might run into legitimate differences. For example, in some error cases, the PSA specification allows multiple error codes, but our tests insist on the particular error code that our implementation returns. Generally we'd be ok with either making these test cases less constraining, or moving them to a separate test suite that driver implementers can skip.
• The test coverage for the PSA API mostly focuses on the kind of mistake that might happen in a software implementation. It assumes that the underlying software implementation is itself mostly correct. For example, PSA cipher tests don't particularly try to check that the AES permutation is implemented correctly for a lot of different inputs, but they check things like buffer sizes, use of the intended algorithm, rejecting bad inputs, etc. Conversely, our tests do not try to look for the kind of mistakes that might happen in a hardware implementation, for example data leakage between operations if an accelerator is not reset properly between calls.
  

 

Regards,

Ruchika