gh-Mbed-TLS/TF-PSA-Crypto
Watch
1
0
Fork
You've already forked TF-PSA-Crypto
 0
Code Issues 167 Pull requests 92 Releases 5 Activity

SPAKE2+: Prover key pair import and export #819

Open
sigvartmh wants to merge 9 commits from sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342 into development
pull from: sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342
merge into: gh-Mbed-TLS:development
Conversation 1 Commits 9 Files changed 19 +970 -60
sigvartmh commented 2026-06-21 16:49:04 -05:00 (Migrated from github.com)

Description

Extend psa_import_key/psa_export_key() to handle PSA_KEY_TYPE_SPAKE2P_KEY_PAIR on top of the public-key support from https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/817 which should be merged first.

This addresses Mbed-TLS issue https://github.com/Mbed-TLS/mbedtls/issues/9343

PR checklist

Please remove the segment/s on either side of the | symbol as appropriate, and add any relevant link/s to the end of the line.
If the provided content is part of the present PR remove the # symbol.

  • changelog provided | not required because:
  • framework PR provided Mbed-TLS/mbedtls-framework# | not required
  • TF-PSA-Crypto development PR provided # | not required because:
  • mbedtls development PR provided Mbed-TLS/mbedtls# | not required because:
  • tests provided
## Description Extend `psa_import_key/psa_export_key()` to handle `PSA_KEY_TYPE_SPAKE2P_KEY_PAIR` on top of the public-key support from https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/817 which should be merged first. This addresses Mbed-TLS issue https://github.com/Mbed-TLS/mbedtls/issues/9343 ## PR checklist Please remove the segment/s on either side of the | symbol as appropriate, and add any relevant link/s to the end of the line. If the provided content is part of the present PR remove the # symbol. - [X] **changelog** provided | not required because: - [X] **framework PR** provided Mbed-TLS/mbedtls-framework# | not required - [X] **TF-PSA-Crypto development PR** provided # | not required because: - [X] **mbedtls development PR** provided Mbed-TLS/mbedtls# | not required because: - [X] **tests** provided
sigvartmh (Migrated from github.com) reviewed 2026-06-21 16:51:10 -05:00
core/check_crypto_config.h
@ -108,4 +108,11 @@
#error "PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS defined, but not all prerequisites"
sigvartmh (Migrated from github.com) commented 2026-06-21 16:51:10 -05:00

Eventually we will strip this config out as in SPAKE2+ keys are password derived so generating a key-pair does not make sense for this use-case.

Eventually we will strip this config out as in SPAKE2+ keys are password derived so generating a key-pair does not make sense for this use-case.
This pull request has changes conflicting with the target branch.
  • include/psa/crypto_extra.h
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342:sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git switch 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch 'development'
git merge --no-ff 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git switch 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git rebase 'development'
git switch 'development'
git merge --ff-only 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git switch 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git rebase 'development'
git switch 'development'
git merge --no-ff 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git switch 'development'
git merge --squash 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git switch 'development'
git merge --ff-only 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git switch 'development'
git merge 'sigvartmh/pr/spake2p-9343-key-pair-import-export-depends-on-9342'
git push origin 'development'
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
api-break
This issue/PR breaks the API and must wait for a new major version

  
approved
Design and code approved - may be waiting for CI or backports

  
bug
Something isn't working

  
component-docs
Docs / website issues filed here for tracking

  
component-platform
Portability layer and build scripts

  
component-test
Test framework and CI scripts

  
dependencies
Pull requests that update a dependency file

  
deprecation
needs deprecation announcement

  
DO-NOT-MERGE

   
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
This issue is not being actively worked on, but PRs welcome.

  
needs-adoption
stalled PR that someone should pick up and complete

  
needs-backports
Backports are missing or are pending review and approval.

  
needs-ci
Needs to pass CI tests

  
needs-design-approval
Needs design discussion / approval

  
needs-info
An issue or PR which needs further info from the reporter / author

  
needs-preceding-pr
Requires another PR to be merged first

  
needs-review
Every commit must be reviewed by at least two team members

  
needs-reviewer
This PR needs someone to pick it up for review

  
needs-work

   
priority-high
High priority - will be reviewed soon

  
priority-low
Low priority - this may not receive review soon

  
priority-medium
Medium priority - this can be reviewed as time permits

  
priority-scheduled
This PR is big - it will require time to be scheduled for review

  
priority-very-high
Highest priority - prioritise this over other review work

  
resolved-after-1.1
The issue is resolved in development, but still present in 1.1 LTS.

  
single-reviewer
This PR qualifies for having only one reviewer

  
size-l
Estimated task size: large (2w+)

  
size-m
Estimated task size: medium (~1w)

  
size-optimisation

   
size-s
Estimated task size: small (~2d)

  
size-xs
Estimated task size: extra small (a few hours at most)

No labels
api-break
approved
bug
component-docs
component-platform
component-test
dependencies
deprecation
DO-NOT-MERGE
enhancement
good first issue
help wanted
needs-adoption
needs-backports
needs-ci
needs-design-approval
needs-info
needs-preceding-pr
needs-review
needs-reviewer
needs-work
priority-high
priority-low
priority-medium
priority-scheduled
priority-very-high
resolved-after-1.1
single-reviewer
size-l
size-m
size-optimisation
size-s
size-xs
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
gh-Mbed-TLS/TF-PSA-Crypto!819
No description provided.