From 18f8e8d62c33005f3d42aa3fa492560a4978a94a Mon Sep 17 00:00:00 2001 From: Andrzej Kurek Date: Wed, 14 Sep 2022 08:44:34 -0400 Subject: [PATCH] Document the input size restriction for EC J-PAKE to PMS Signed-off-by: Andrzej Kurek --- include/psa/crypto_values.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/include/psa/crypto_values.h b/include/psa/crypto_values.h index 03438196b..573ff9a16 100644 --- a/include/psa/crypto_values.h +++ b/include/psa/crypto_values.h @@ -2023,7 +2023,8 @@ /* Macro to build a KDF that takes the shared secret K (an EC point in case * of EC J-PAKE) and calculates SHA256(K.X) that the rest of TLS 1.2 will - * use to derive the session secret. Uses PSA_ALG_SHA_256. + * use to derive the session secret. Uses PSA_ALG_SHA_256. Only P-256 is + * supported, so the input has to be exactly 65 bytes. */ #define PSA_ALG_TLS12_ECJPAKE_TO_PMS ((psa_algorithm_t)0x08000600) #define PSA_ALG_IS_TLS12_ECJPAKE_TO_PMS(alg) \