Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request for AES CBC support in mbedtls version 3.1.0 #9953

Open
sandeepacharya2 opened this issue Feb 5, 2025 · 3 comments
Open

Request for AES CBC support in mbedtls version 3.1.0 #9953

sandeepacharya2 opened this issue Feb 5, 2025 · 3 comments
Labels
component-crypto Crypto primitives and low-level interfaces enhancement needs-info An issue or PR which needs further info from the reporter / author

Comments

@sandeepacharya2
Copy link

Suggested enhancement

I am looking at supporting odd block sizes such as 17, for this i would need MBEDTLS to support the CBC mode in functions such as mbedtls_aes_cmac_prf_128

Justification

This is needed to support features such as UWB FiRa STS generation as per the FiRa specification version 2.0

Mbed TLS needs this because it can be thereby used in applications such as UWB for Crypto

@gilles-peskine-arm
Copy link
Contributor

I'm sorry, I don't understand the feature you're requesting. Mbed TLS does support AES-CBC. The AES block size is always 16, and I don't know what number could be called “block size” and could be 17. I'm not familiar with FIRa, can you point to the precise specification?

@gilles-peskine-arm gilles-peskine-arm added enhancement component-crypto Crypto primitives and low-level interfaces needs-info An issue or PR which needs further info from the reporter / author labels Feb 5, 2025
@sandeepacharya2
Copy link
Author

@gilles-peskine-arm AES-CBC for odd block sizes which are not multiples of 16, must support the XOR operation after the first block.
Similar to AES ECB mode, there needs to be a function to handle AES-CBC similar to mbedtls_aes_cmac_prf_128

@gilles-peskine-arm
Copy link
Contributor

I'm sorry, I still don't understand what you're asking for. The block size of AES-CBC is 16, it isn't a configurable parameter. Can you please give us a precise specification? Note that we don't have access to FIRa specifications that are behind a paywall.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component-crypto Crypto primitives and low-level interfaces enhancement needs-info An issue or PR which needs further info from the reporter / author
Projects
None yet
Development

No branches or pull requests

2 participants