AES: skip 192bit and 256bit key in selftest if 128bit_only enabled
This includes:
- aes.c
- cmac.c
- gcm.c
- nist_kw.c
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
diff --git a/library/nist_kw.c b/library/nist_kw.c
index 5817bf4..9d7016e 100644
--- a/library/nist_kw.c
+++ b/library/nist_kw.c
@@ -567,6 +567,13 @@
mbedtls_printf(" KW-AES-%u ", (unsigned int) key_len[i] * 8);
}
+#if defined(MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH)
+ if (key_len[i] > 16) {
+ mbedtls_printf("skipped\n");
+ continue;
+ }
+#endif /* MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH */
+
ret = mbedtls_nist_kw_setkey(&ctx, MBEDTLS_CIPHER_ID_AES,
kw_key[i], key_len[i] * 8, 1);
if (ret != 0) {
@@ -622,6 +629,12 @@
if (verbose != 0) {
mbedtls_printf(" KWP-AES-%u ", (unsigned int) key_len[i] * 8);
}
+#if defined(MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH)
+ if (key_len[i] > 16) {
+ mbedtls_printf("skipped\n");
+ continue;
+ }
+#endif /* MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH */
ret = mbedtls_nist_kw_setkey(&ctx, MBEDTLS_CIPHER_ID_AES, kwp_key[i],
key_len[i] * 8, 1);