commit c829816fb629377e6778b7c5503eff025694da3a
author Przemek Stekiel <przemyslaw.stekiel@mobica.com> Mon Dec 05 15:11:49 2022 +0100
committer Przemek Stekiel <przemyslaw.stekiel@mobica.com> Wed Apr 26 09:07:20 2023 +0200
tree 0d7f3ae475496ba9c0c63057d6bc30d9e7900720
parent a9ca13136c6591d492ecc5f015478275d817e3b7

psa_export_public_key_internal: add missing check for FFDH key type

Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 98dad9d..c7d1b76 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -1457,15 +1457,16 @@
         }
 #if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_FFDH_KEY_PAIR) || \
         defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_FFDH_PUBLIC_KEY)
-        else {
+        else if (PSA_KEY_TYPE_IS_DH(type)) {
             return mbedtls_psa_export_ffdh_public_key(attributes,
                                                       key_buffer,
                                                       key_buffer_size,
                                                       data, data_size,
                                                       data_length);
+        } else {
+            return PSA_ERROR_NOT_SUPPORTED;
         }
 #else
-        /* We don't know how to convert a private FFDH key to public */
         return PSA_ERROR_NOT_SUPPORTED;
 #endif /* defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_FFDH_KEY_PAIR) ||
         * defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_FFDH_PUBLIC_KEY) */