Unreadable storage and invalid data in storage should be different errors #332

New issue

Open

opened 2019-12-08 11:44:06 -06:00 by gilles-peskine-arm · 1 comment

gilles-peskine-arm commented

2019-12-08 11:44:06 -06:00

(Migrated from github.com)

The PSA crypto specification defines a single error code that is applicable when reading storage: PSA_ERROR_STORAGE_FAILURE, which is intended when the storage is unreadable or demonstrably corrupted. Reading invalid data from the storage when the storage subsystem thinks nothing is wrong should be a different error, typically indicating that data was saved with a different version or build of the PSA crypto implementation and cannot be read back with the present build (for example a key type or size that is not supported).

The PSA crypto specification defines a single error code that is applicable when reading storage: `PSA_ERROR_STORAGE_FAILURE`, which is intended when the storage is unreadable or demonstrably corrupted. Reading invalid data from the storage when the storage subsystem thinks nothing is wrong should be a different error, typically indicating that data was saved with a different version or build of the PSA crypto implementation and cannot be read back with the present build (for example a key type or size that is not supported).

ciarmcom commented

2019-12-08 15:33:47 -06:00

(Migrated from github.com)