commit e66a8ad8d6b502a74a3c97dbf41ec76a62574506
author Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com> Wed May 24 12:30:43 2023 +0530
committer Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com> Wed May 24 12:30:43 2023 +0530
tree 8d77c218ba3e9fa471df2c66df7765ddce082190
parent 52fe517a77090aa3cf361285eb30053c0664871d

Define PSA_VENDOR_PBKDF2_MAX_ITERATIONS

Signed-off-by: Kusumit Ghoderao <Kusumit.Ghoderao@silabs.com>

include/psa/crypto_sizes.h

diff --git a/include/psa/crypto_sizes.h b/include/psa/crypto_sizes.h
index 37f7205..6b8ccbb 100644
--- a/include/psa/crypto_sizes.h
+++ b/include/psa/crypto_sizes.h
@@ -253,6 +253,10 @@
  * curve. */
 #define PSA_TLS12_ECJPAKE_TO_PMS_DATA_SIZE 32
 
+/* The maximum number of iterations for PBKDF2 on this implementation, in bits.
+ * This is a vendor-specific macro. This can be configured if necessary */
+#define PSA_VENDOR_PBKDF2_MAX_ITERATIONS 0xffffffff
+
 /** The maximum size of a block cipher. */
 #define PSA_BLOCK_CIPHER_BLOCK_MAX_SIZE 16
 

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 4615920..a8ccde5 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -6419,13 +6419,14 @@
         return PSA_ERROR_BAD_STATE;
     }
 
-    if (data > 0xFFFFFFFF) {
+    if (data > PSA_VENDOR_PBKDF2_MAX_ITERATIONS) {
         return PSA_ERROR_NOT_SUPPORTED;
     }
 
     if (data == 0) {
         return PSA_ERROR_INVALID_ARGUMENT;
     }
+
     pbkdf2->input_cost = data;
     pbkdf2->state = PSA_PBKDF2_STATE_INPUT_COST_SET;