PSA_KEY_USAGE_DERIVE_PUBLIC is not valid in key policies #218

Merged

gilles-peskine-arm merged 1 commit from PSA_KEY_USAGE_DERIVE_PUBLIC-framework into main

2025-09-25 09:25:49 -05:00

gilles-peskine-arm commented

2025-09-25 04:50:50 -05:00

(Migrated from github.com)

We have a new usage flag PSA_KEY_USAGE_DERIVE_PUBLIC which is (so far) only meant for checking a key's capabilities, and not valid in key policies. Exclude this flag from systematic checking of usage flags.

Necessary for https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/455.

PR checklist

TF-PSA-Crypto PR provided https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/455
development PR not required because: crypto only
3.6 PR not required because: new feature in TF-PSA-Crypto 1.0

We have a new usage flag `PSA_KEY_USAGE_DERIVE_PUBLIC` which is (so far) only meant for checking a key's capabilities, and not valid in key policies. Exclude this flag from systematic checking of usage flags. Necessary for https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/455. ## PR checklist - [x] **TF-PSA-Crypto PR** provided https://github.com/Mbed-TLS/TF-PSA-Crypto/pull/455 - [x] **development PR** not required because: crypto only - [x] **3.6 PR** not required because: new feature in TF-PSA-Crypto 1.0

valeriosetti (Migrated from github.com) approved these changes

2025-09-25 07:53:28 -05:00

bjwtaylor (Migrated from github.com) approved these changes

2025-09-25 09:19:58 -05:00