tree 0de64b1165d9aecedea59025002d80b8edbddaa7
parent 573bbc1b4e744080fb9735e5e7c30298cd9b31b4
author Gilles Peskine <Gilles.Peskine@arm.com> 1563967831 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1563967831 +0200

SE keys: ensure that functions that lack support properly error out

Introduce a new function psa_get_transparent_key which returns
NOT_SUPPORTED if the key is in a secure element. Use this function in
functions that don't support keys in a secure element.

After this commit, all functions that access a key slot directly via
psa_get_key_slot or psa_get_key_from_slot rather than via
psa_get_transparent_key have at least enough support for secure
elements not to crash or otherwise cause undefined behavior. Lesser
bad behavior such as wrong results or resource leakage is still
possible in error cases.