wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-08-01 19:54:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7485 from dgarske/pkcs11_async

Browse Source 
Improved the prioritization of crypto callback vs async crypt in ECC …
This commit is contained in:
Sean Parkinson
2024-04-30 08:41:14 +10:00
committed by GitHub
parent bd9a27a39b 5af0b1e83b
commit 5cc05956d5
4 changed files with 21 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
wolfcrypt/src/ecc.c
View File

@@ -6094,20 +6094,11 @@ WOLFSSL_ABI
int wc_ecc_init_ex(ecc_key* key, void* heap, int devId)
{
int ret = 0;
#if defined(HAVE_PKCS11)
int isPkcs11 = 0;
#endif
if (key == NULL) {
return BAD_FUNC_ARG;
}
#if defined(HAVE_PKCS11)
if (key->isPkcs11) {
isPkcs11 = 1;
}
#endif
#ifdef ECC_DUMP_OID
wc_ecc_dump_oids();
#endif
@@ -6161,16 +6152,17 @@ int wc_ecc_init_ex(ecc_key* key, void* heap, int devId)
#endif
#if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
#if defined(HAVE_PKCS11)
if (!isPkcs11)
#ifdef WOLF_CRYPTO_CB
/* prefer crypto callback */
if (key->devId != INVALID_DEVID)
#endif
{
/* handle as async */
ret = wolfAsync_DevCtxInit(&key->asyncDev, WOLFSSL_ASYNC_MARKER_ECC,
key->heap, devId);
}
#elif defined(HAVE_PKCS11)
(void)isPkcs11;
if (ret != 0)
return ret;
#endif
#if defined(WOLFSSL_DSP)
@@ -6222,12 +6214,6 @@ int wc_ecc_init_id(ecc_key* key, unsigned char* id, int len, void* heap,
ret = BAD_FUNC_ARG;
if (ret == 0 && (len < 0 || len > ECC_MAX_ID_LEN))
ret = BUFFER_E;
#if defined(HAVE_PKCS11)
XMEMSET(key, 0, sizeof(ecc_key));
key->isPkcs11 = 1;
#endif
if (ret == 0)
ret = wc_ecc_init_ex(key, heap, devId);
if (ret == 0 && id != NULL && len != 0) {
@@ -6257,12 +6243,6 @@ int wc_ecc_init_label(ecc_key* key, const char* label, void* heap, int devId)
if (labelLen == 0 || labelLen > ECC_MAX_LABEL_LEN)
ret = BUFFER_E;
}
#if defined(HAVE_PKCS11)
XMEMSET(key, 0, sizeof(ecc_key));
key->isPkcs11 = 1;
#endif
if (ret == 0)
ret = wc_ecc_init_ex(key, heap, devId);
if (ret == 0) {

32
wolfcrypt/src/rsa.c
View File

@@ -153,20 +153,11 @@ static void wc_RsaCleanup(RsaKey* key)
int wc_InitRsaKey_ex(RsaKey* key, void* heap, int devId)
{
int ret = 0;
#if defined(HAVE_PKCS11)
int isPkcs11 = 0;
#endif
if (key == NULL) {
return BAD_FUNC_ARG;
}
#if defined(HAVE_PKCS11)
if (key->isPkcs11) {
isPkcs11 = 1;
}
#endif
XMEMSET(key, 0, sizeof(RsaKey));
key->type = RSA_TYPE_UNKNOWN;
@@ -193,8 +184,9 @@ int wc_InitRsaKey_ex(RsaKey* key, void* heap, int devId)
#endif
#ifdef WC_ASYNC_ENABLE_RSA
#if defined(HAVE_PKCS11)
if (!isPkcs11)
#ifdef WOLF_CRYPTO_CB
/* prefer crypto callback */
if (key->devId != INVALID_DEVID)
#endif
{
/* handle as async */
@@ -204,8 +196,6 @@ int wc_InitRsaKey_ex(RsaKey* key, void* heap, int devId)
return ret;
}
#endif /* WC_ASYNC_ENABLE_RSA */
#elif defined(HAVE_PKCS11)
(void)isPkcs11;
#endif /* WOLFSSL_ASYNC_CRYPT */
#ifndef WOLFSSL_RSA_PUBLIC_ONLY
@@ -278,14 +268,6 @@ int wc_InitRsaKey_Id(RsaKey* key, unsigned char* id, int len, void* heap,
ret = BAD_FUNC_ARG;
if (ret == 0 && (len < 0 || len > RSA_MAX_ID_LEN))
ret = BUFFER_E;
#if defined(HAVE_PKCS11)
if (ret == 0) {
XMEMSET(key, 0, sizeof(RsaKey));
key->isPkcs11 = 1;
}
#endif
if (ret == 0)
ret = wc_InitRsaKey_ex(key, heap, devId);
if (ret == 0 && id != NULL && len != 0) {
@@ -315,14 +297,6 @@ int wc_InitRsaKey_Label(RsaKey* key, const char* label, void* heap, int devId)
if (labelLen == 0 || labelLen > RSA_MAX_LABEL_LEN)
ret = BUFFER_E;
}
#if defined(HAVE_PKCS11)
if (ret == 0) {
XMEMSET(key, 0, sizeof(RsaKey));
key->isPkcs11 = 1;
}
#endif
if (ret == 0)
ret = wc_InitRsaKey_ex(key, heap, devId);
if (ret == 0) {

3
wolfssl/wolfcrypt/ecc.h
View File

@@ -519,9 +519,6 @@ struct ecc_key {
void* devCtx;
int devId;
#endif
#if defined(HAVE_PKCS11)
byte isPkcs11 : 1; /* indicate if PKCS11 is preferred */
#endif
#ifdef WOLFSSL_SILABS_SE_ACCEL
sl_se_command_context_t cmd_ctx;
sl_se_key_descriptor_t key;

3
wolfssl/wolfcrypt/rsa.h
View File

@@ -217,9 +217,6 @@ struct RsaKey {
void* devCtx;
int devId;
#endif
#if defined(HAVE_PKCS11)
byte isPkcs11 : 1; /* indicate if PKCS11 is preferred */
#endif
#ifdef WOLFSSL_ASYNC_CRYPT
WC_ASYNC_DEV asyncDev;
#ifdef WOLFSSL_CERT_GEN