ra8-firmware/ra8__nsc__key__vault_8c_source.html

#include "key_vault.h"

#include "ra8_check.h"

#include "ra8_err.h"

#include "ra8_nsc.h"

#include "ra8_nsc_veneer.h"


static const char* s_tag = "NSCKV";


RA8_NSC_VENEER ra8_err_t ra8_nsc_key_vault_challenge(uint16_t       slot,

                                                     const uint8_t* ns_chal,

                                                     uint8_t*       ns_digest)

{

  RA8_CHECK_NULL_PTR(ns_chal, s_tag, "challenge: ns_chal");

  RA8_CHECK_NULL_PTR(ns_digest, s_tag, "challenge: ns_digest");

  RA8_NSC_CHECK_NS_RANGE_R(ns_chal, (uint32_t)k_ra8_key_vault_chal_bytes);

  RA8_NSC_CHECK_NS_RANGE_RW(ns_digest, (uint32_t)k_ra8_key_vault_digest_bytes);

  return ra8_key_vault_sha256_xor_challenge(slot, ns_chal, ns_digest);

}


key_vault.h
Secure-only symmetric key store.

ra8_key_vault_sha256_xor_challenge
ra8_err_t ra8_key_vault_sha256_xor_challenge(uint16_t slot, const uint8_t *challenge, uint8_t *out)
Compute SHA-256(key XOR challenge) for slot.
Definition key_vault.c:574

k_ra8_key_vault_chal_bytes
@ k_ra8_key_vault_chal_bytes
Challenge length.
Definition key_vault.h:59

k_ra8_key_vault_digest_bytes
@ k_ra8_key_vault_digest_bytes
SHA-256 output size.
Definition key_vault.h:60

s_tag
static const char * s_tag
Logging / check tag.
Definition ra8_app.c:17

RA8_NSC_VENEER
#define RA8_NSC_VENEER
Mark a TrustZone Secure-to-Non-Secure entry-point veneer.
Definition ra8_attributes.h:296

ra8_check.h
Validation and Error-Checking Macros for ra8-firmware.

RA8_CHECK_NULL_PTR
#define RA8_CHECK_NULL_PTR(ptr, tag, message)
Reject nullptr pointer, returning k_ra8_err_null_ptr.
Definition ra8_check.h:243

ra8_err.h
Error Code Definitions for ra8-firmware.

ra8_err_t
ra8_err_codes_t ra8_err_t
Canonical error-return type used by every ra8-firmware API.
Definition ra8_err.h:546

ra8_nsc.h
Non-Secure Callable veneers – the only NS->S gateway.

ra8_nsc_key_vault_challenge
ra8_err_t ra8_nsc_key_vault_challenge(uint16_t slot, const uint8_t *ns_chal, uint8_t *ns_digest)
NSC veneer: SHA-256(slot_key XOR challenge) for a stored slot.
Definition ra8_nsc_key_vault.c:65

ra8_nsc_veneer.h
Macros for declaring Non-Secure Callable veneer functions.

RA8_NSC_CHECK_NS_RANGE_R
#define RA8_NSC_CHECK_NS_RANGE_R(ptr, len)
RA8 NSC CHECK NS RANGE r.
Definition ra8_nsc_veneer.h:123

RA8_NSC_CHECK_NS_RANGE_RW
#define RA8_NSC_CHECK_NS_RANGE_RW(ptr, len)
RA8 NSC CHECK NS RANGE RW.
Definition ra8_nsc_veneer.h:125