96 See “[Cipher key management](#cipher-key-management)”, “[MAC key management](#mac-key-management)”,…
119 | `cmac.h` | `mbedtls_cipher_cmac_` | [Hashes and MAC](#hashes-and-mac), [MAC calculation](#mac-cal…
138 | `md.h` | `mbedtls_md_` | [Hashes and MAC](#hashes-and-mac) |
139 | `md5.h` | `mbedtls_md5_` | [Hashes and MAC](#hashes-and-mac) |
155 | `ripemd160.h` | `mbedtls_ripemd160_` | [Hashes and MAC](#hashes-and-mac) |
157 | `sha1.h` | `mbedtls_sha1_` | [Hashes and MAC](#hashes-and-mac) |
158 | `sha3.h` | `mbedtls_sha3_` | [Hashes and MAC](#hashes-and-mac) |
159 | `sha256.h` | `mbedtls_sha256_` | [Hashes and MAC](#hashes-and-mac) |
160 | `sha512.h` | `mbedtls_sha512_` | [Hashes and MAC](#hashes-and-mac) |
262 …MAC with a reference value, use `psa_mac_verify` rather than `psa_mac_compute` followed by `mbedtl…
422 ## Hashes and MAC
424 The PSA API groups functions by purpose rather than by underlying primitive: there is a MAC API (eq…
426 …s_aes_cmac_prf_128` at the time of writing. You can implement it using the MAC interface with an A…
450 ### MAC mechanism selection  argument
452 PSA Crypto has a generic API with the same functions for all MAC mechanisms. The mechanism is deter…
463 ### Hash and MAC mechanism availability  argument
525 ### MAC key management  argument
539 …MAC or [`PSA_KEY_USAGE_VERIFY_MESSAGE`](https://mbed-tls.readthedocs.io/projects/api/en/developmen…
547 ### MAC calculation  argument
554 4. Call `mbedtls_md_hmac_finish`. If verifying the MAC against an expected value, compare the resul…
562 4. Call `mbedtls_cipher_cmac_finish`. If verifying the MAC against an expected value, compare the r…
565 The process in the PSA API to calculate a MAC is as follows:
568 …c3e3c0b7e55b20d2a238e418d46cd) to specify the algorithm and the key. See “[MAC key management](#ma…
570 4. To obtain the MAC, call [`psa_mac_sign_finish`](https://mbed-tls.readthedocs.io/projects/api/en/…
572 To verify a MAC against an expected value, use the following process instead:
575 …e327fcbc5f8e201172fe11e536984) to specify the algorithm and the key. See “[MAC key management](#ma…
577 4. To verify the MAC against an expected value, call [`psa_mac_verify_finish`](https://mbed-tls.rea…
581 The PSA API also offers functions for a one-shot MAC calculation, similar to `mbedtls_cipher_cmac` …
583 …m_a_c/#group___m_a_c_1gabf02ebd3595ea15436967092b5d52878) to calculate the MAC of a buffer in memo…
584 …___m_a_c/#group___m_a_c_1gaf6988545df5d5e2466c34d753443b15a) to verify the MAC of a buffer in memo…
586 In both cases, see “[MAC key management](#mac-key-management)” for how to obtain a key identifier.
588 ### Miscellaneous hash or MAC operation management  argument
590 …t you must call a setup function to specify the algorithm and the key (for MAC) again, and they ca…
592 …group/group__hash/#group__hash_1ga39673348f3302b4646bd780034a5aeda). A PSA MAC operation cannot be…