cracen_psa_kmu.h

Go to the documentation of this file.

/*
 * Copyright (c) 2024 Nordic Semiconductor ASA
 *
 * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
 */
 
#ifndef CRACEN_PSA_KMU_H
#define CRACEN_PSA_KMU_H
 
#include <psa/crypto.h>
 
#ifdef CONFIG_BUILD_WITH_TFM
typedef uint64_t psa_drv_slot_number_t;
#endif
 
#define PSA_KEY_LOCATION_CRACEN_KMU (PSA_KEY_LOCATION_VENDOR_FLAG | ('N' << 8) | 'K')
 
#define PSA_KEY_ID_FROM_CRACEN_KMU_SLOT(scheme, slot_id)                                       \
        (0x7fff0000 | ((scheme) << 12) | ((slot_id)&0xff))
 
#define PSA_KEY_HANDLE_FROM_CRACEN_KMU_SLOT(scheme, slot_id) \
        PSA_KEY_ID_FROM_CRACEN_KMU_SLOT(scheme, slot_id)
 
#define CRACEN_PSA_GET_KEY_USAGE_SCHEME(key_id) (((key_id) >> 12) & 0xf)
 
#define CRACEN_PSA_GET_KMU_SLOT(key_id) ((key_id)&0xff)
 
enum cracen_kmu_metadata_key_usage_scheme {
        CRACEN_KMU_KEY_USAGE_SCHEME_PROTECTED,
 
        CRACEN_KMU_KEY_USAGE_SCHEME_SEED,
 
        CRACEN_KMU_KEY_USAGE_SCHEME_ENCRYPTED,
 
        CRACEN_KMU_KEY_USAGE_SCHEME_RAW
};
 
psa_status_t cracen_kmu_get_key_slot(mbedtls_svc_key_id_t key_id, psa_key_lifetime_t *lifetime,
                                     psa_drv_slot_number_t *slot_number);
 
psa_status_t cracen_kmu_block(const psa_key_attributes_t *key_attr);
 
#endif /* CRACEN_PSA_KMU_H */