Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove explicit RNG arguments when used for blinding #8191

Open
daverodgman opened this issue Sep 12, 2023 · 1 comment
Open

Remove explicit RNG arguments when used for blinding #8191

daverodgman opened this issue Sep 12, 2023 · 1 comment

Comments

@daverodgman
Copy link
Contributor

It is useful in some applications to specify an RNG when it influences the result — though we won't have this in PSA. However, once psa_crypto_init becomes officially mandatory [which will be the case in 4.0], we'll have an RNG available at all times when needed, so we can remove RNG arguments. I propose that we do so when the RNG is only used for blinding.

@gilles-peskine-arm
Copy link
Contributor

gilles-peskine-arm commented Aug 8, 2024

In TF-PSA-Crypto 1.0 and Mbed TLS 4.0, there will be no APIs that take a custom RNG. We will use the PSA RNG throughout.

So this is a MUST for APIs that are staying public, and an internal improvement task for APIs that will be private.

Next step: create reasonably-sized issues for the 4.0 MUST and either keep this issue or create new issues for the internal functions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Mbed TLS 4.0 COULD
Status: Planning needed
Status: No status
Development

No branches or pull requests

2 participants