Lines Matching refs:a
5 Key storage was originally introduced in a product called Mbed Crypto, which was re-distributed via…
11 …ation from this document unless it has always been incorrect or it is about a version that you are…
28 * [Persistent transparent keys](#key-file-format-for-0.1.0) designated by a [slot number](#key-name…
31 This is a beta release, and we do not promise backward compatibility, with one exception:
33 > On Mbed OS, if a device has a nonvolatile random seed file produced with Mbed OS 5.11.x and is up…
39 Information about each key is stored in a dedicated file whose name is constructed from the key ide…
41 The valid values for a key identifier are the range from 1 to 0xfffeffff. This limitation on the ra…
47 There is a shared namespace for all callers.
53 The layout of a key file is:
66 The nonvolatile random seed file contains a seed for the random generator. If present, it is rewrit…
68 The file format is just the seed as a byte string with no metadata or encoding of any kind.
72 Assumption: ITS provides a 32-bit file identifier namespace. The Crypto service can use arbitrary f…
83 …a directory other than the current directory. This value is simply prepended to the file name (so …
85 * `CRYPTO_STORAGE_FILE_LOCATION "psa_key_slot_0"`: used as a temporary file. Must be writable. May …
99 * [PSA platform](#file-namespace-on-a-psa-platform-for-1.0.0)
100 * [library using PSA ITS](#file-namespace-on-its-as-a-library-for-1.0.0)
105 * [Persistent transparent keys](#key-file-format-for-1.0.0) designated by a [key identifier and own…
112 …a dedicated file designated by the key identifier. In integrations where there is no concept of ke…
116 …name is just the key identifier as defined in the PSA crypto specification. This is a 32-bit value.
117 …lling partition identifier provided to the server by the partition manager. This is a 64-bit value.
125 The nonvolatile random seed file contains a seed for the random generator. If present, it is rewrit…
127 The file format is just the seed as a byte string with no metadata or encoding of any kind.
131 ### File namespace on a PSA platform for 1.0.0
133 Assumption: ITS provides a 64-bit file identifier namespace. The Crypto service can use arbitrary f…
135 Assumption: the owner identifier is a nonzero value of type `int32_t`.
141 ### File namespace on ITS as a library for 1.0.0
143 Assumption: ITS provides a 64-bit file identifier namespace. The entity using the crypto library ca…
145 This is a library integration, so there is no owner. The key file identifier is identical to the ke…
154 This is a library integration, so there is no owner. The key file identifier is identical to the ke…
160 * Delete files 1 through 0xfffeffff, which contain keys in a format that is no longer supported.
164 …m in different ranges (0 through 0xffffffff on a PSA platform, 0xffff0000 through 0xffffffffffffff…
166 It would simplify things to always have a 32-bit owner, with a nonzero value, and thus reserve the …
185 …a directory other than the current directory. This value is simply prepended to the file name (so …
187 * `PSA_ITS_STORAGE_PREFIX "tempfile.psa_its"`: used as a temporary file. Must be writable. May be o…
188 …a key or non-key file. The `key_id` in the name is the 64-bit file identifier, which is the [key i…
203 The layout of a key file is:
225 * The layout of a key file now has a lifetime field before the type field.
226 * Key files can store references to keys in a secure element. In such key files, the key material c…
228 ### File namespace on a PSA platform on TBD
230 Assumption: ITS provides a 64-bit file identifier namespace. The Crypto service can use arbitrary f…
232 Assumption: the owner identifier is a nonzero value of type `int32_t`.
238 ### File namespace on ITS as a library on TBD
240 Assumption: ITS provides a 64-bit file identifier namespace. The entity using the crypto library ca…
242 This is a library integration, so there is no owner. The key file identifier is identical to the ke…
262 The layout of a key file is:
273 * For a transparent key: output of `psa_export_key`.
275 * For an opaque key (key in a secure element): slot number (8 bytes), in platform endianness.
284 All currently existing transactions concern a key in a secure element.
286 The layout of a transaction file is:
290 * lifetime (4 bytes): `psa_key_lifetime_t` value that corresponds to a key in a secure element.
292 …a library integration, 8 bytes on a PSA platform): the internal representation of the key identifi…
315 * The type field has been split into a type and a bits field of 2 bytes each.
321 The layout of a key file is:
333 * For a transparent key: output of `psa_export_key`.
335 * For an opaque key (key in a secure element): slot number (8 bytes), in platform endianness.
351 * [PSA platform](#file-namespace-on-a-psa-platform-on-mbed-tls-2.25.0)
352 * [library using PSA ITS](#file-namespace-on-its-as-a-library-on-mbed-tls-2.25.0)
357 * [Persistent keys](#key-file-format-for-mbed-tls-2.25.0) designated by a [key identifier and owner…
360 …ynamically registered drivers (`MBEDTLS_PSA_CRYPTO_SE_C`). The driver picks a slot number which is…
367 ### File namespace on a PSA platform on Mbed TLS 2.25.0
369 Assumption: ITS provides a 64-bit file identifier namespace. The Crypto service can use arbitrary f…
371 Assumption: the owner identifier is a nonzero value of type `int32_t`.
377 ### File namespace on ITS as a library on Mbed TLS 2.25.0
379 Assumption: ITS provides a 64-bit file identifier namespace. The entity using the crypto library ca…
381 This is a library integration, so there is no owner. The key file identifier is identical to the ke…
392 …a directory other than the current directory. This value is simply prepended to the file name (so …
394 * `PSA_ITS_STORAGE_PREFIX "tempfile.psa_its"`: used as a temporary file. Must be writable. May be o…
395 …a key or non-key file. The `key_id` in the name is the 64-bit file identifier, which is the [key i…
401 …a dedicated file designated by the key identifier. In integrations where there is no concept of ke…
405 …just the key identifier as defined in the PSA crypto specification. This is a 32-bit value which m…
406 …lling partition identifier provided to the server by the partition manager. This is a 64-bit value.
412 The layout of a key file is:
424 * For a transparent key: output of `psa_export_key`.
426 …* For an opaque key (key in a dynamic secure element): slot number (8 bytes), in platform endianne…
448 All currently existing transactions concern a key in a dynamic secure element.
450 The layout of a transaction file is:
454 * lifetime (4 bytes): `psa_key_lifetime_t` value that corresponds to a key in a secure element.
456 …a library integration, 8 bytes on a PSA platform): the internal representation of the key identifi…