commit 06e7920be5fd6a2680fea9f9a8a30c1a4e5c6a9a
author mohammad1603 <mohammad.abomokh@arm.com> Wed Mar 28 13:17:44 2018 +0300
committer itayzafrir <itay.zafrir@arm.com> Wed Sep 05 11:53:26 2018 +0300
tree 785758fba33bb208c265b007d6461f91fd1c60f2
parent 8cc1ceec3e00486e98712f61757c51b563025578

integrate policy key usage in export and asymmetric sign functions

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index d53d6ee..a12b454 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -469,6 +469,9 @@
     if( slot->type == PSA_KEY_TYPE_NONE )
         return( PSA_ERROR_EMPTY_SLOT );
 
+    if( !( slot->policy.usage & PSA_KEY_USAGE_EXPORT ) )
+        return( PSA_ERROR_NOT_PERMITTED );
+
     if( PSA_KEY_TYPE_IS_RAW_BYTES( slot->type ) )
     {
         if( slot->data.raw.bytes > data_size )
@@ -1185,6 +1188,8 @@
         return( PSA_ERROR_EMPTY_SLOT );
     if( ! PSA_KEY_TYPE_IS_KEYPAIR( slot->type ) )
         return( PSA_ERROR_INVALID_ARGUMENT );
+    if( !( slot->policy.usage & PSA_KEY_USAGE_SIGN ) )
+        return( PSA_ERROR_NOT_PERMITTED );
 
 #if defined(MBEDTLS_RSA_C)
     if( slot->type == PSA_KEY_TYPE_RSA_KEYPAIR )