From b12e66a057b73f15634f5bccf6142d8a4c9490bf Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Sun, 19 Mar 2023 20:00:59 +0100 Subject: [PATCH] Added support for AES 512 bit keys (for XTS). Signed-off-by: Pol Henarejos --- src/crypto_utils.h | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/src/crypto_utils.h b/src/crypto_utils.h index 409666b..0ef36ed 100644 --- a/src/crypto_utils.h +++ b/src/crypto_utils.h @@ -25,12 +25,17 @@ #include "mbedtls/ecp.h" #include "mbedtls/md.h" -#define HSM_KEY_RSA 0x1 -#define HSM_KEY_EC 0x10 -#define HSM_KEY_AES 0x100 -#define HSM_KEY_AES_128 0x300 -#define HSM_KEY_AES_192 0x500 -#define HSM_KEY_AES_256 0x900 +#define HSM_KEY_RSA 0x000f // It is a mask +#define HSM_KEY_RSA_1K 0x0001 +#define HSM_KEY_RSA_2K 0x0002 +#define HSM_KEY_RSA_3K 0x0004 +#define HSM_KEY_RSA_4k 0x0008 +#define HSM_KEY_EC 0x0010 +#define HSM_KEY_AES 0x0f00 // It is a mask +#define HSM_KEY_AES_128 0x0100 +#define HSM_KEY_AES_192 0x0200 +#define HSM_KEY_AES_256 0x0400 +#define HSM_KEY_AES_512 0x0800 /* For AES XTS */ #define HSM_AES_MODE_CBC 1 #define HSM_AES_MODE_CFB 2