From 5ac511b45a06e64c241518a079652b002ddf22b5 Mon Sep 17 00:00:00 2001 From: Valerio Setti Date: Wed, 14 Feb 2024 10:17:08 +0100 Subject: [PATCH] pk: let psa_export_key() check if the key is exportable or not Signed-off-by: Valerio Setti --- library/pk.c | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/library/pk.c b/library/pk.c index 580fa0e34b..56f8bb10b9 100644 --- a/library/pk.c +++ b/library/pk.c @@ -1400,14 +1400,9 @@ int mbedtls_pk_copy_from_psa(mbedtls_svc_key_id_t key_id, mbedtls_pk_context *pk return MBEDTLS_ERR_PK_BAD_INPUT_DATA; } - if ((psa_get_key_usage_flags(&key_attr) & PSA_KEY_USAGE_EXPORT) != PSA_KEY_USAGE_EXPORT) { - ret = MBEDTLS_ERR_PK_BAD_INPUT_DATA; - goto exit; - } - status = psa_export_key(key_id, exp_key, sizeof(exp_key), &exp_key_len); if (status != PSA_SUCCESS) { - ret = psa_generic_status_to_mbedtls(status); + ret = MBEDTLS_ERR_PK_BAD_INPUT_DATA; goto exit; }