tree 2b3afe0badd044504fb8ecf19f7886db2747f7c5
parent b70a0fd1a5e3ca1941d27c60e923ae07c9c2691e
author Gilles Peskine <Gilles.Peskine@arm.com> 1546939887 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1547832792 +0100

Improve the rules on key derivation input types

Use separate step types for a KDF secret and for the private key in a
key agreement.

Determine which key type is allowed from the step type, independently
of the KDF.

Forbid raw inputs for certain steps. They definitely should be
forbidden for asymmetric keys, which are structured. Also forbid them
for KDF secrets: the secrets are supposed to be keys, even if they're
unstructured.