ARM-software / psa-api

Documentation source and development of the PSA Certified API

https://arm-software.github.io/psa-api/

ARM-software/psa-api Issues

Dragonfly PAKE for WPA3 use cases
Updated 14 days ago1
Importing and exporting keys that are in non-default formats
Updated 17 days ago10
Added flexibility for RSA PSS salt length
Updated 24 days ago
ECC key size for secp224k1 is not consistent with key size specification
Updated a month ago1
Support for interruptible key agreement/exchange
Updated a month ago8
Custom methods for key generation and key derivation
Updated 3 months ago8
crypto: MAX_SIZE constant for public key or key pair
Closed 3 months ago1
Integrate the PAKE Extension into the Crypto API specification
Closed 3 months ago
Crypto API 1.2.1 : Review of Release Candidate
Closed 4 months ago1
crypto: problematic specification of IV for PSA_ALG_CTR
Closed 4 months ago6
Mistaken assumption in HMAC key definition and export format
Closed 4 months ago2
Add support for the SRP-6/6a PAKE protocol
Updated 5 months ago1
Problems combining PBKDF2 with a key agreement
Closed 5 months ago
Crypto PAKE Extension : Review of Release Candidate
Closed 6 months ago5
Crypto API 1.2 : Review of Release Candidate
Closed 6 months ago1
Secure Storage API 1.0.3 : Review of Release Candidate
Closed 6 months ago
Update to the PAKE API - should this remain a Beta?
Closed 6 months ago2
Crypto 1.2 RC1 has not updated its description of the PAKE API
Closed 6 months ago
Ordering requirements/flexibility in PAKE operations
Closed 6 months ago4
Define the export format for a SPAKE2+ key pair
Closed 6 months ago1
Minor issues in the PAKE Extension Beta.2 release candidate 1
Closed 6 months ago
API support for DRBG
Updated 7 months ago3
Document date on title page of Crypto API v1.1.2 is incorrect
Closed 7 months ago
Crypto: soften the requirement for concurrency
Closed 7 months ago1
Missing support for ‘out of band’ setup calculations in PAKE API
Closed 7 months ago3
Overview of updates to the PAKE API
Closed 7 months ago1
Use case review for Attestation API
Updated 8 months ago
Security Risk Assessment (SRA) for Attestation API
Updated 8 months ago
Compatible reworking of asymmetric key type encoding
Updated 8 months ago4
Add support for CMAC based KDF algorithms
Closed 8 months ago25
Key agreement interface may present the shared key material out of the secured space.
Closed 8 months ago10
Return type for psa_pake_cs_get_hash() is wrong in Crypto API 1.1 PAKE Extension beta.1
Closed 8 months ago1
It is impossible to derive multiple keys from the common secret in the PAKE API
Closed 8 months ago1
APIs for extracting the shared secret from PAKE operations
Closed 8 months ago10
PAKE SIZE macros need more arguments
Closed 8 months ago3
The PAKE interface does not work easily with the Mbed TLS driver design
Closed 9 months ago7
Should psa_key_derivation_verify_bytes be allowed with a USAGE_DERIVE secret?
Closed 9 months ago4
Should a key derivation continue working after a verify failure?
Closed 9 months ago4
ShangMi signature and asymmetric encryption algorithms (SM9)
Updated 9 months ago2
Define API for Module-Lattice-based Key-Encapsulation Mechanism (ML-KEM aka Crystals-KYBER)
Updated 10 months ago4
Use psa_key_derivation multipart operation for TLS 1.3 key
Updated 10 months ago1
Add API for RNG re-seeding
Closed 10 months ago2
Define API for Stateless Hash-Based Digital Signature (SLH-DSA aka SPHINCS+)
Updated a year ago1
Define API for Module-Lattice-Based Digital Signature (ML-DSA aka CRYSTALS-Dilithium)
Updated a year ago1
Provide better description of multi-component updates
Updated a year ago
The limitation of a single active installation process is 'hidden' in the API reference
Updated a year ago
Confusing description of bootloader behavior when FAILED state is volatile
Updated a year ago
Release Candidate *2* for Firmware Update API 1.0.0
Closed a year ago4
Use Explicit Context in the Crypto API.
Updated a year ago1
Provide example definitions for some of the implementation-defined macros
Updated a year ago