Mbed-TLS / TF-PSA-Crypto

Reference implementation of the PSA Cryptography API
Apache License 2.0
7 stars 7 forks source link

How to implement a custom RSA-based mechanism #104

Open gilles-peskine-arm opened 1 month ago

gilles-peskine-arm commented 1 month ago

TF-PSA-Crypto 1.0 and Mbed TLS 4.0 will no longer expose the RSA module, only specific algorithms (PKCS#1 v1.5 encryption, PKCS#1 v1.5 signature, PSS, OAEP). Users who need a diffferent RSA-based mechanism (e.g. full-domain encryption) must contribute an implementation and wait for the next release.

Should TF-PSA-Crypto offer a way to access the private-key and public-key RSA primitives (in Mbed TLS ≤3.x: mbedtls_rsa_public, mbedtls_rsa_private)?

Mailing list thread: https://lists.trustedfirmware.org/archives/list/mbed-tls@lists.trustedfirmware.org/thread/EKDLYVDR6HZPM55HF4ZKNWX7LDEFRCRG/