tree bb83c466a76dd53134f5d235be9a682f684f165c
parent 4a23c98506658d73b04053a892b92b0266737241
author Gilles Peskine <Gilles.Peskine@arm.com> 1612356922 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1612356922 +0100

Refuse reproducible mode with MBEDTLS_USE_PSA_CRYPTO

With MBEDTLS_USE_PSA_CRYPTO, some of the randomness for the TLS
connection is generated inside the PSA crypto subsystem, which has no
reproducible mode. Whether there is a nonzero amount of randomness
coming from inside the PSA subsystem rather than from the random
generator set by mbedtls_ssl_conf_rng() depends on the choice of
cipher suite and other connection parameters as well as the level of
support for MBEDTLS_USE_PSA_CRYPTO. Rather than give unreliable
results, conservatively abort with a clear error message.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>