289 	TRY_EXPECT(tc_aes128_set_encrypt_key(&sched, key->ptr), 1);  in aead()
290 	TRY_EXPECT(tc_ccm_config(&c, &sched, nonce->ptr, nonce->len, tag->len),  in aead()
294 		TRY_EXPECT(tc_ccm_decryption_verification(out->ptr, out->len,  in aead()
300 		TRY_EXPECT(tc_ccm_generation_encryption(  in aead()
342 	TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in aead()
397 		TRY_EXPECT(tc_sha256_init(&ctx_sha256), 1);  in sign()
398 		TRY_EXPECT(tc_sha256_update(&ctx_sha256, msg->ptr, msg->len),  in sign()
400 		TRY_EXPECT(tc_sha256_final(hash, &ctx_sha256), 1);  in sign()
402 		TRY_EXPECT(uECC_sign(sk->ptr, hash, NUM_ECC_BYTES, out, p256),  in sign()
443 		TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in sign()
499 		TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in verify()
505 		TRY_EXPECT(tc_sha256_init(&ctx_sha256), 1);  in verify()
506 		TRY_EXPECT(tc_sha256_update(&ctx_sha256, msg->ptr, msg->len),  in verify()
508 		TRY_EXPECT(tc_sha256_final(hash, &ctx_sha256), 1);  in verify()
514 		TRY_EXPECT(uECC_verify(pk_ptr, hash, NUM_ECC_BYTES, sgn->ptr,  in verify()
542 		TRY_EXPECT(tc_hmac_set_key(&h, zero_salt, 32), 1);  in hkdf_extract()
544 		TRY_EXPECT(tc_hmac_set_key(&h, salt->ptr, salt->len), 1);  in hkdf_extract()
546 	TRY_EXPECT(tc_hmac_init(&h), 1);  in hkdf_extract()
547 	TRY_EXPECT(tc_hmac_update(&h, ikm->ptr, ikm->len), 1);  in hkdf_extract()
548 	TRY_EXPECT(tc_hmac_final(out, TC_SHA256_DIGEST_SIZE, &h), 1);  in hkdf_extract()
579 	TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in hkdf_extract()
602 		TRY_EXPECT(tc_hmac_set_key(&h, prk->ptr, prk->len), 1);  in hkdf_expand()
605 			TRY_EXPECT(tc_hmac_update(&h, t, 32), 1);  in hkdf_expand()
607 		TRY_EXPECT(tc_hmac_update(&h, info->ptr, info->len), 1);  in hkdf_expand()
608 		TRY_EXPECT(tc_hmac_update(&h, &i, 1), 1);  in hkdf_expand()
609 		TRY_EXPECT(tc_hmac_final(t, TC_SHA256_DIGEST_SIZE, &h), 1);  in hkdf_expand()
662 	TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in hkdf_expand()
701 		TRY_EXPECT(uECC_shared_secret(pk_decompressed, sk->ptr,  in shared_secret_derive()
773 			TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in shared_secret_derive()
790 		TRY_EXPECT(tc_sha256_init(&s), 1);  in ephemeral_dh_key_gen()
791 		TRY_EXPECT(tc_sha256_update(&s, (uint8_t *)&seed, sizeof(seed)),  in ephemeral_dh_key_gen()
793 		TRY_EXPECT(tc_sha256_final(extended_seed, &s),  in ephemeral_dh_key_gen()
797 		TRY_EXPECT(psa_hash_compute(PSA_ALG_SHA_256, (uint8_t *)&seed,  in ephemeral_dh_key_gen()
816 		TRY_EXPECT(uECC_make_key(pk_decompressed, sk->ptr, p256),  in ephemeral_dh_key_gen()
869 		TRY_EXPECT(psa_destroy_key(key_id), PSA_SUCCESS);  in ephemeral_dh_key_gen()
884 		TRY_EXPECT(tc_sha256_init(&s), 1);  in hash()
885 		TRY_EXPECT(tc_sha256_update(&s, in->ptr, in->len), 1);  in hash()
886 		TRY_EXPECT(tc_sha256_final(out->ptr, &s), 1);  in hash()
892 		TRY_EXPECT(psa_hash_compute(PSA_ALG_SHA_256, in->ptr, in->len,  in hash()