psa_verify_rng.c

Go to the documentation of this file.

 
#include <stddef.h>
#include <stdint.h>
 
#include "mbedtls/platform_util.h"
#include "psa/crypto.h"

psa_status_t mbedtls_psa_external_get_random(mbedtls_psa_external_random_context_t* context,
                                             uint8_t*                               output,
                                             size_t                                 output_size,
                                             size_t*                                output_length)
{
  (void)context;
  (void)output;
  (void)output_size;
  /* Verify-only boot: no operation on the boot path draws randomness. A request
   * here is an unexpected path -- fail closed rather than emit predictable
   * bytes. The gate treats a crypto failure as default-deny (no BLXNS). */
  if (output_length != nullptr) {
    *output_length = 0U;
  }
  return PSA_ERROR_INSUFFICIENT_ENTROPY;
}
 
#if defined(MBEDTLS_HAVE_TIME) && defined(MBEDTLS_PLATFORM_MS_TIME_ALT)
mbedtls_ms_time_t mbedtls_ms_time(void)
{
  return 0;
}
#endif