5501         if (operation->ctx.tls12_prf.secret != NULL) {  in psa_key_derivation_abort()
5502             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.secret,  in psa_key_derivation_abort()
5503                                      operation->ctx.tls12_prf.secret_length);  in psa_key_derivation_abort()
5506         if (operation->ctx.tls12_prf.seed != NULL) {  in psa_key_derivation_abort()
5507             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.seed,  in psa_key_derivation_abort()
5508                                      operation->ctx.tls12_prf.seed_length);  in psa_key_derivation_abort()
5511         if (operation->ctx.tls12_prf.label != NULL) {  in psa_key_derivation_abort()
5512             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.label,  in psa_key_derivation_abort()
5513                                      operation->ctx.tls12_prf.label_length);  in psa_key_derivation_abort()
5516         if (operation->ctx.tls12_prf.other_secret != NULL) {  in psa_key_derivation_abort()
5517             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.other_secret,  in psa_key_derivation_abort()
5518                                      operation->ctx.tls12_prf.other_secret_length);  in psa_key_derivation_abort()
5672     psa_tls12_prf_key_derivation_t *tls12_prf,  in psa_key_derivation_tls12_prf_generate_next_block()  argument
5686     if (tls12_prf->block_number == 0xff) {  in psa_key_derivation_tls12_prf_generate_next_block()
5691     ++tls12_prf->block_number;  in psa_key_derivation_tls12_prf_generate_next_block()
5692     tls12_prf->left_in_block = hash_length;  in psa_key_derivation_tls12_prf_generate_next_block()
5713                                            tls12_prf->secret,  in psa_key_derivation_tls12_prf_generate_next_block()
5714                                            tls12_prf->secret_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5720     if (tls12_prf->block_number == 1) {  in psa_key_derivation_tls12_prf_generate_next_block()
5725                                 tls12_prf->label,  in psa_key_derivation_tls12_prf_generate_next_block()
5726                                 tls12_prf->label_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5731                                 tls12_prf->seed,  in psa_key_derivation_tls12_prf_generate_next_block()
5732                                 tls12_prf->seed_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5738         status = psa_mac_update(&hmac, tls12_prf->Ai, hash_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5745                                  tls12_prf->Ai, hash_length,  in psa_key_derivation_tls12_prf_generate_next_block()
5757                                            tls12_prf->secret,  in psa_key_derivation_tls12_prf_generate_next_block()
5758                                            tls12_prf->secret_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5762     status = psa_mac_update(&hmac, tls12_prf->Ai, hash_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5766     status = psa_mac_update(&hmac, tls12_prf->label, tls12_prf->label_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5770     status = psa_mac_update(&hmac, tls12_prf->seed, tls12_prf->seed_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5775                                  tls12_prf->output_block, hash_length,  in psa_key_derivation_tls12_prf_generate_next_block()
5792     psa_tls12_prf_key_derivation_t *tls12_prf,  in psa_key_derivation_tls12_prf_read()  argument
5802     switch (tls12_prf->state) {  in psa_key_derivation_tls12_prf_read()
5804             tls12_prf->state = PSA_TLS12_PRF_STATE_OUTPUT;  in psa_key_derivation_tls12_prf_read()
5814         if (tls12_prf->left_in_block == 0) {  in psa_key_derivation_tls12_prf_read()
5815             status = psa_key_derivation_tls12_prf_generate_next_block(tls12_prf,  in psa_key_derivation_tls12_prf_read()
5824         if (tls12_prf->left_in_block > output_length) {  in psa_key_derivation_tls12_prf_read()
5827             length = tls12_prf->left_in_block;  in psa_key_derivation_tls12_prf_read()
5830         offset = hash_length - tls12_prf->left_in_block;  in psa_key_derivation_tls12_prf_read()
5831         memcpy(output, tls12_prf->output_block + offset, length);  in psa_key_derivation_tls12_prf_read()
5834         tls12_prf->left_in_block -= length;  in psa_key_derivation_tls12_prf_read()
6054         status = psa_key_derivation_tls12_prf_read(&operation->ctx.tls12_prf,  in psa_key_derivation_output_bytes()
7326         status = psa_tls12_prf_input(&operation->ctx.tls12_prf,  in psa_key_derivation_input_internal()
7332         status = psa_tls12_prf_psk_to_ms_input(&operation->ctx.tls12_prf,  in psa_key_derivation_input_internal()