Crypto - Platform#

otCryptoKeyType#

otCryptoKeyType

This enumeration defines the key types.

otCryptoKeyAlgorithm#

otCryptoKeyAlgorithm

This enumeration defines the key algorithms.

@12#

@12

This enumeration defines the key usage flags.

otCryptoKeyStorage#

otCryptoKeyStorage

This enumeration defines the key storage types.

otCryptoKeyRef#

typedef uint32_t otCryptoKeyRef

This datatype represents the key reference.

otCryptoKey#

typedef struct otCryptoKey otCryptoKey

otCryptoContext#

typedef struct otCryptoContext otCryptoContext

otPlatCryptoSha256Hash#

typedef struct otPlatCryptoSha256Hash otPlatCryptoSha256Hash

This structure represents a SHA-256 hash.

otPlatCryptoEcdsaKeyPair#

typedef struct otPlatCryptoEcdsaKeyPair otPlatCryptoEcdsaKeyPair

otPlatCryptoEcdsaPublicKey#

typedef struct otPlatCryptoEcdsaPublicKey otPlatCryptoEcdsaPublicKey

otPlatCryptoEcdsaSignature#

typedef struct otPlatCryptoEcdsaSignature otPlatCryptoEcdsaSignature

OT_TOOL_PACKED_END#

OT_TOOL_PACKED_BEGIN struct otPlatCryptoEcdsaSignature OT_TOOL_PACKED_END

otPlatCryptoInit#

void otPlatCryptoInit (void )

Initialize the Crypto module.

otPlatCryptoImportKey#

otError otPlatCryptoImportKey (otCryptoKeyRef * aKeyRef, otCryptoKeyType aKeyType, otCryptoKeyAlgorithm aKeyAlgorithm, int aKeyUsage, otCryptoKeyStorage aKeyPersistence, const uint8_t * aKey, size_t aKeyLen)

Import a key into PSA ITS.

Note

• If OT_CRYPTO_KEY_STORAGE_PERSISTENT is passed for aKeyPersistence then aKeyRef is input and platform should use the given aKeyRef and MUST not change it.

If OT_CRYPTO_KEY_STORAGE_VOLATILE is passed for aKeyPersistence then aKeyRef is output, the initial value does not matter and platform API MUST update it to return the new key ref.

This API is only used by OT core when OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE is enabled.

otPlatCryptoExportKey#

otError otPlatCryptoExportKey (otCryptoKeyRef aKeyRef, uint8_t * aBuffer, size_t aBufferLen, size_t * aKeyLen)

Export a key stored in PSA ITS.

Note

• This API is only used by OT core when OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE is enabled.

otPlatCryptoDestroyKey#

otError otPlatCryptoDestroyKey (otCryptoKeyRef aKeyRef)

Destroy a key stored in PSA ITS.

Note

• This API is only used by OT core when OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE is enabled.

otPlatCryptoHasKey#

bool otPlatCryptoHasKey (otCryptoKeyRef aKeyRef)

Check if the key ref passed has an associated key in PSA ITS.

Note

• This API is only used by OT core when OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE is enabled.

otPlatCryptoHmacSha256Init#

otError otPlatCryptoHmacSha256Init (otCryptoContext * aContext)

Initialize the HMAC operation.

Note

• The platform driver shall point the context to the correct object such as psa_mac_operation_t or mbedtls_md_context_t.

otPlatCryptoHmacSha256Deinit#

otError otPlatCryptoHmacSha256Deinit (otCryptoContext * aContext)

Uninitialize the HMAC operation.

otPlatCryptoHmacSha256Start#

otError otPlatCryptoHmacSha256Start (otCryptoContext * aContext, const otCryptoKey * aKey)

Start HMAC operation.

otPlatCryptoHmacSha256Update#

otError otPlatCryptoHmacSha256Update (otCryptoContext * aContext, const void * aBuf, uint16_t aBufLength)

Update the HMAC operation with new input.

otPlatCryptoHmacSha256Finish#

otError otPlatCryptoHmacSha256Finish (otCryptoContext * aContext, uint8_t * aBuf, size_t aBufLength)

Complete the HMAC operation.

otPlatCryptoAesInit#

otError otPlatCryptoAesInit (otCryptoContext * aContext)

Initialise the AES operation.

Note

• The platform driver shall point the context to the correct object such as psa_key_id or mbedtls_aes_context_t.

otPlatCryptoAesSetKey#

otError otPlatCryptoAesSetKey (otCryptoContext * aContext, const otCryptoKey * aKey)

Set the key for AES operation.

otPlatCryptoAesEncrypt#

otError otPlatCryptoAesEncrypt (otCryptoContext * aContext, const uint8_t * aInput, uint8_t * aOutput)

Encrypt the given data.

otPlatCryptoAesFree#

otError otPlatCryptoAesFree (otCryptoContext * aContext)

Free the AES context.

otPlatCryptoHkdfInit#

otError otPlatCryptoHkdfInit (otCryptoContext * aContext)

Initialise the HKDF context.

Note

• The platform driver shall point the context to the correct object such as psa_key_derivation_operation_t or HmacSha256::Hash

otPlatCryptoHkdfExpand#

otError otPlatCryptoHkdfExpand (otCryptoContext * aContext, const uint8_t * aInfo, uint16_t aInfoLength, uint8_t * aOutputKey, uint16_t aOutputKeyLength)

Perform HKDF Expand step.

otPlatCryptoHkdfExtract#

otError otPlatCryptoHkdfExtract (otCryptoContext * aContext, const uint8_t * aSalt, uint16_t aSaltLength, const otCryptoKey * aInputKey)

Perform HKDF Extract step.