PK migration guide #478

Merged
gilles-peskine-arm merged 3 commits from migration-guide-pk into development 2025-09-29 07:21:35 -05:00
gilles-peskine-arm commented 2025-09-25 09:42:50 -05:00 (Migrated from github.com)

Based on comparing pk.h in 3.6 and
https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/468.

Together with https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/468 and https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/472, resolves https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/209.

I'll remove the stub in md-pk.md in a separate PR.

PR checklist

  • changelog not required because: doc only
  • framework PR not required
  • mbedtls development PR not required because: crypto only
  • mbedtls 3.6 PR not required because: new stuff
  • tests provided | not required because:
Based on comparing pk.h in 3.6 and https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/468. Together with https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/468 and https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/472, resolves https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/209. I'll remove the stub in `md-pk.md` in a separate PR. ## PR checklist - [x] **changelog** not required because: doc only - [x] **framework PR** not required - [x] **mbedtls development PR** not required because: crypto only - [x] **mbedtls 3.6 PR** not required because: new stuff - **tests** provided | not required because:
bjwtaylor (Migrated from github.com) reviewed 2025-09-26 03:48:34 -05:00
@ -0,0 +1,85 @@
## PK module
bjwtaylor (Migrated from github.com) commented 2025-09-26 03:48:34 -05:00

Should this be mbedtls_pk_get_type() not ``mbedtls_pk_get_type()`?

Should this be `mbedtls_pk_get_type()` not ``mbedtls_pk_get_type()`?
bjwtaylor (Migrated from github.com) reviewed 2025-09-26 04:03:56 -05:00
@ -0,0 +1,85 @@
## PK module
bjwtaylor (Migrated from github.com) commented 2025-09-26 04:03:57 -05:00

Intended, not inteded?

Intended, not inteded?
bjwtaylor (Migrated from github.com) reviewed 2025-09-26 04:07:46 -05:00
@ -0,0 +71,4 @@
Historically, at least in the default configuration, a PK context stored all the key material in a heap-allocated object. In TF-PSA-Crypto 1.0, a PK context now contains:
* the public key, in a fixed-size buffer that is directly in the `mbedtls_pk_context` structure;
bjwtaylor (Migrated from github.com) commented 2025-09-26 04:07:46 -05:00

Minor: though probably should use a capital The.

Minor: though probably should use a capital The.
bjwtaylor (Migrated from github.com) reviewed 2025-09-26 04:08:29 -05:00
@ -0,0 +1,85 @@
## PK module
bjwtaylor (Migrated from github.com) commented 2025-09-26 04:08:29 -05:00

Have been removed instead of has been removed?

Have been removed instead of has been removed?
bjwtaylor (Migrated from github.com) reviewed 2025-09-26 04:09:00 -05:00
@ -0,0 +1,85 @@
## PK module
bjwtaylor (Migrated from github.com) commented 2025-09-26 04:09:00 -05:00

the legacy representation of keys?

the legacy representation of keys?
bjwtaylor (Migrated from github.com) requested changes 2025-09-26 04:10:02 -05:00
bjwtaylor (Migrated from github.com) left a comment

A few formatting things, though otherwise looks good.

A few formatting things, though otherwise looks good.
mpg (Migrated from github.com) reviewed 2025-09-26 04:16:59 -05:00
mpg (Migrated from github.com) left a comment
No description provided.
LGTM, only minor suggestions!
gilles-peskine-arm (Migrated from github.com) reviewed 2025-09-26 05:31:55 -05:00
@ -0,0 +71,4 @@
Historically, at least in the default configuration, a PK context stored all the key material in a heap-allocated object. In TF-PSA-Crypto 1.0, a PK context now contains:
* the public key, in a fixed-size buffer that is directly in the `mbedtls_pk_context` structure;
gilles-peskine-arm (Migrated from github.com) commented 2025-09-26 05:31:55 -05:00

Traditionally, no, since the bullet points are part of a full sentence. In modern typesetting, a capital letter is more common than it used to be, but not mandatory.

Traditionally, no, since the bullet points are part of a full sentence. In modern typesetting, a capital letter is more common than it used to be, but not mandatory.
mpg (Migrated from github.com) approved these changes 2025-09-26 11:25:20 -05:00
mpg (Migrated from github.com) left a comment

LGTM, thanks!

LGTM, thanks!
bjwtaylor (Migrated from github.com) approved these changes 2025-09-29 02:15:49 -05:00
mpg commented 2025-09-29 02:19:47 -05:00 (Migrated from github.com)

@gilles-peskine-arm I guess this needs rebasing on recent development in order to make the CI happy.

@gilles-peskine-arm I guess this needs rebasing on recent development in order to make the CI happy.
mpg commented 2025-09-29 05:26:29 -05:00 (Migrated from github.com)

Aw, the CI passed here but failed in the merge queue :(

Aw, the CI passed here but failed in the merge queue :(
mpg commented 2025-09-29 05:29:17 -05:00 (Migrated from github.com)

Looks like a random network failure: ConnectionResetError: [Errno 104] Connection reset by peer while running pip. Re-enqueing then.

Looks like a random network failure: `ConnectionResetError: [Errno 104] Connection reset by peer` while running pip. Re-enqueing then.
Sign in to join this conversation.
No reviewers
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
gh-Mbed-TLS/TF-PSA-Crypto!478
No description provided.