// whatever TA will return us.
const uint32_t CIPHER_EXTRA_PADDING_SIZE = 16;
+// Maximum size of GCM tag in bytes.
+const size_t MAX_GCM_TAG_SIZE = 16;
+
// Identifier of our TA
const TEEC_UUID KEY_MANAGER_TA_UUID = KM_TA_UUID;
TrustZoneMemory inMemory(m_Context, sIn.GetSize(), TEEC_MEM_INPUT);
sIn.Serialize(inMemory);
- TEEC_Operation op = makeOp(TEEC_VALUE_INPUT, inMemory);
+ TEEC_Operation op = makeOp(TEEC_VALUE_INOUT, inMemory);
op.params[0].value.a = opId;
Execute(CMD_CIPHER_INIT_AAD, &op);
sIn.Serialize(inMemory);
TZSerializer sOut;
- sOut.Push(new TZSerializableBinary(data.size()));
+ sOut.Push(new TZSerializableBinary(MAX_GCM_TAG_SIZE, false));
TrustZoneMemory outMemory(m_Context, sOut.GetSize(), TEEC_MEM_OUTPUT);
TEEC_Operation op = makeOp(TEEC_VALUE_INOUT, inMemory, outMemory);
}
void TrustZoneContext::executeKbkdf(const RawBuffer& secretId,
+ const Pwd& secretPwd,
const RawBuffer& label,
const RawBuffer& context,
const RawBuffer& fixed,
LogDebug("TrustZoneContext::executeKbkdf");
auto sIn = makeSerializer(secretId,
+ secretPwd,
label,
context,
fixed,