mirror of https://github.com/ARMmbed/mbed-os.git
Updated doxygen comments
parent
c43a3f4dfb
commit
6031bc2fb1
|
@ -72,20 +72,20 @@ public:
|
||||||
|
|
||||||
~DeviceKey();
|
~DeviceKey();
|
||||||
|
|
||||||
/** Derive a new key based on the salt string. key type can be with values 16 bytes and 32 bytes
|
/** Derive a new key based on the salt string.
|
||||||
* @param isalt input buffer used to create the new key. Same input will generate always the same key
|
* @param isalt Input buffer used to create the new key. Same input will always generate the same key
|
||||||
* @param isalt_size size of the data in salt buffer
|
* @param isalt_size Size of the data in salt buffer.
|
||||||
* @param output buffer to receive the derived key. Size must be 16 bytes or 32 bytes
|
* @param output Buffer to receive the derived key. Size must be 16 bytes or 32 bytes
|
||||||
* according to the ikey_type parameter
|
* according to the ikey_type parameter
|
||||||
* @param ikey_type type of the required key. Type must be 16 bytes or 32 bytes.
|
* @param ikey_type Type of the required key. Must be 16 bytes or 32 bytes.
|
||||||
* @return 0 on success, negative error code on failure
|
* @return 0 on success, negative error code on failure
|
||||||
*/
|
*/
|
||||||
int generate_derived_key(const unsigned char *isalt, size_t isalt_size, unsigned char *output, uint16_t ikey_type);
|
int generate_derived_key(const unsigned char *isalt, size_t isalt_size, unsigned char *output, uint16_t ikey_type);
|
||||||
|
|
||||||
/** Set a device key into the NVStore. In case TRNG support is missing, Call this method
|
/** Set a device key into the NVStore. In case TRNG support is missing, Call this method
|
||||||
* before calling device_key_derived_key. This method should be called only once!
|
* before calling device_key_derived_key. This method should be called only once!
|
||||||
* @param value input buffer contain the key.
|
* @param value Input buffer contain the key.
|
||||||
* @param isize size of the supplied key. Must be 16 bytes or 32 bytes.
|
* @param isize Size of the supplied key. Must be 16 bytes or 32 bytes.
|
||||||
* @return 0 on success, negative error code on failure
|
* @return 0 on success, negative error code on failure
|
||||||
*/
|
*/
|
||||||
int device_inject_root_of_trust(uint32_t *value, size_t isize);
|
int device_inject_root_of_trust(uint32_t *value, size_t isize);
|
||||||
|
@ -95,40 +95,40 @@ private:
|
||||||
DeviceKey();
|
DeviceKey();
|
||||||
|
|
||||||
/** Read a device key from the NVStore
|
/** Read a device key from the NVStore
|
||||||
* @param output buffer for the returned key.
|
* @param output Buffer for the returned key.
|
||||||
* @param size input: the size of the output buffer.
|
* @param size Input: The size of the output buffer.
|
||||||
* output: the actual size of the written data
|
* Output: The actual size of the written data
|
||||||
* @return 0 on success, negative error code on failure
|
* @return 0 on success, negative error code on failure
|
||||||
*/
|
*/
|
||||||
int read_key_from_nvstore(uint32_t *output, size_t& size);
|
int read_key_from_nvstore(uint32_t *output, size_t& size);
|
||||||
|
|
||||||
/** Set a device key into the NVStore
|
/** Set a device key into the NVStore
|
||||||
* @param input input buffer contain the key.
|
* @param input Input buffer contain the key.
|
||||||
* @param isize the size of the input buffer.
|
* @param isize The size of the input buffer.
|
||||||
* @return 0 on success, negative error code on failure
|
* @return 0 on success, negative error code on failure
|
||||||
*/
|
*/
|
||||||
int write_key_to_nvstore(uint32_t *input, size_t isize);
|
int write_key_to_nvstore(uint32_t *input, size_t isize);
|
||||||
|
|
||||||
/** Get a derived key base on a salt string. The methods implements
|
/** Get a derived key base on a salt string. The methods implements Section 5.1
|
||||||
* Section 5.1 in NIST SP 800-108, Recommendation for Key Derivation Using Pseudorandom Functions
|
* in NIST SP 800-108, Recommendation for Key Derivation Using Pseudorandom Functions
|
||||||
* @param ikey_buff input buffer holding the ROT key
|
* @param ikey_buff Input buffer holding the ROT key
|
||||||
* @param ikey_size size of the input key. Must be 16 bytes or 32 bytes.
|
* @param ikey_size Size of the input key. Must be 16 bytes or 32 bytes.
|
||||||
* @param isalt input buffer contain some string.
|
* @param isalt Input buffer contain some string.
|
||||||
* @param isalt_size size of the supplied input string.
|
* @param isalt_size Size of the supplied input string.
|
||||||
* @param output buffer for the derived key result.
|
* @param output Buffer for the derived key result.
|
||||||
* @param ikey_type the requested key size. Must be 16 bytes or 32 bytes.
|
* @param ikey_type The requested key size. Must be 16 bytes or 32 bytes.
|
||||||
* @return 0 on success, negative error code on failure
|
* @return 0 on success, negative error code on failure
|
||||||
*/
|
*/
|
||||||
int get_derived_key(uint32_t *ikey_buff, size_t ikey_size, const unsigned char *isalt, size_t isalt_size,
|
int get_derived_key(uint32_t *ikey_buff, size_t ikey_size, const unsigned char *isalt, size_t isalt_size,
|
||||||
unsigned char *output, uint32_t ikey_type);
|
unsigned char *output, uint32_t ikey_type);
|
||||||
|
|
||||||
/** Generate a random ROT key by using TRNG
|
/** Generate a random ROT key by using TRNG
|
||||||
* @param output output buffer for the generated key.
|
* @param output Output buffer for the generated key.
|
||||||
* @param size input: the size of the buffer. if size is less
|
* @param size Input: The size of the buffer. if size is less
|
||||||
* then 16 bytes the method will generate an
|
* then 16 bytes the method will generate an
|
||||||
* error. 16-31 bytes will create a 16 byte key.
|
* error. 16-31 bytes will create a 16 byte key.
|
||||||
* 32 or higher will generate a 32 bytes key
|
* 32 or higher will generate a 32 bytes key
|
||||||
* output: the actual written size to the buffer
|
* Output: The actual written size to the buffer
|
||||||
* @return 0 on success, negative error code on failure
|
* @return 0 on success, negative error code on failure
|
||||||
*/
|
*/
|
||||||
int generate_key_by_trng(uint32_t *output, size_t size);
|
int generate_key_by_trng(uint32_t *output, size_t size);
|
||||||
|
|
Loading…
Reference in New Issue