Make sure software fallback isn't tried on opaque keys

Signed-off-by: Steven Cooreman <[email protected]>
This commit is contained in:
Steven Cooreman
2020-09-04 14:22:28 +02:00
parent 15f58d2877
commit 8d2bde77a1
+4 -2
View File
@@ -3664,7 +3664,8 @@ psa_status_t psa_sign_hash( psa_key_handle_t handle,
signature,
signature_size,
signature_length );
if( status != PSA_ERROR_NOT_SUPPORTED )
if( status != PSA_ERROR_NOT_SUPPORTED ||
psa_key_lifetime_is_external( slot->attr.lifetime ) )
goto exit;
/* If the operation was not supported by any accelerator, try fallback. */
@@ -3766,7 +3767,8 @@ psa_status_t psa_verify_hash( psa_key_handle_t handle,
hash_length,
signature,
signature_length );
if( status != PSA_ERROR_NOT_SUPPORTED )
if( status != PSA_ERROR_NOT_SUPPORTED ||
psa_key_lifetime_is_external( slot->attr.lifetime ) )
return status;
#if defined(MBEDTLS_RSA_C)