Parsec Operations Coverage

These tables define the current level of coverage in Parsec for the operations and their parameters. Only the operations specified and that have a dedicated page are put in the following table.

Not all parameters (key types, algorithms) of the operation might be supported. See the following sections for details.

Operation \ Provider	Core	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
Ping	✅	❎	❎	❎	❎	❎
ListProviders	✅	❎	❎	❎	❎	❎
ListOpcodes	✅	❎	❎	❎	❎	❎
ListAuthenticators	✅	❎	❎	❎	❎	❎
ListKeys	✅	❎	❎	❎	❎	❎
DeleteClient	✅	❎	❎	❎	❎	❎
ListClients	✅	❎	❎	❎	❎	❎
PsaImportKey	❎	✅	✅	✅	✅	❌
PsaGenerateKey	❎	✅	✅	✅	✅	✅
PsaDestroyKey	❎	✅	✅	✅	✅	✅
PsaExportKey	❎	✅	❌	❌	❌	❌
PsaExportPublicKey	❎	✅	✅	✅	✅	❌
PsaHashCompute	❎	✅	❌	❌	❌	✅
PsaHashCompare	❎	✅	❌	❌	❌	✅
PsaMacCompute	❎	❌	❌	❌	❌	❌
PsaMacVerify	❎	❌	❌	❌	❌	❌
PsaCipherEncrypt	❎	❌	❌	❌	❌	❌
PsaCipherDecrypt	❎	❌	❌	❌	❌	❌
PsaAeadEncrypt	❎	✅	❌	❌	❌	❌
PsaAeadDecrypt	❎	✅	❌	❌	❌	❌
PsaSignMessage	❎	❌	❌	❌	❌	❌
PsaVerifyMessage	❎	❌	❌	❌	❌	❌
PsaSignHash	❎	✅	✅	✅	✅	❌
PsaVerifyHash	❎	✅	✅	✅	✅	❌
PsaAsymmetricEncrypt	❎	✅	✅	✅	❌	❌
PsaAsymmetricDecrypt	❎	✅	✅	✅	❌	❌
PsaRawKeyAgreement	❎	✅	❌	❌	❌	❌
PsaGenerateRandom	❎	✅	❌	❌	❌	✅

✅: The provider supports the operation (maybe not all of its parameters, check below).
❎: The operation is not meant to be implemented on this provider (core operation on a crypto provider or opposite).
❌: The provider does not currently support the operation.

Key types support

This table describe if the following key types are supported for key management operations.

Key type \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
RawData	✅	❌	❌	❌	✅
Hmac	❌	❌	❌	❌	❌
Derive	❌	❌	❌	❌	❌
Aes	✅	❌	❌	❌	✅
Des	❌	❌	❌	❌	❌
Camellia	✅	❌	❌	❌	❌
Arc4	❌	❌	❌	❌	❌
Chacha20	✅	❌	❌	❌	❌
RsaPublicKey	✅	✅	✅	✅	❌
RsaKeyPair	✅	✅	✅	✅	❌
EccKeyPair	✅	❌	✅	✅	✅
EccPublicKey	✅	❌	✅	✅	✅
DhKeyPair	✅	❌	❌	❌	❌
DhPublicKey	✅	❌	❌	❌	❌

Elliptic curve families

This table describes if the following elliptic curve families are supported. Not all curves from those families might be supported.

ECC Curve Family \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
SECP-K1	✅	❌	❌	✅	❌
SECP-R1	✅	❌	✅	✅	✅
SECP-R2	✅	❌	❌	✅	❌
SECT-K1	✅	❌	❌	✅	❌
SECT-R1	✅	❌	❌	✅	❌
SECT-R2	✅	❌	❌	✅	❌
Brainpool P R1	✅	❌	❌	✅	❌
FRP	✅	❌	❌	✅	❌
Montgomery	✅	❌	❌	✅	❌

Algorithm support

These tables describe if the following algorithms are supported in all cryptographic operations they could be used in.

Hash algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
MD2	✅	❌	❌	✅	❌
MD4	✅	❌	❌	✅	❌
MD5	✅	❌	❌	✅	❌
RIPEMD-160	✅	❌	❌	✅	❌
SHA-1	✅	✅	✅	✅	❌
SHA-224	✅	❌	❌	✅	❌
SHA-256	✅	✅	✅	✅	✅
SHA-384	✅	✅	✅	✅	❌
SHA-512	✅	✅	✅	✅	❌
SHA-512/224	✅	❌	❌	✅	❌
SHA-512/256	✅	❌	❌	✅	❌
SHA3-224	✅	❌	❌	✅	❌
SHA3-256	✅	❌	✅	✅	❌
SHA3-384	✅	❌	✅	✅	❌
SHA3-512	✅	❌	✅	✅	❌

MAC algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
HMAC	❌	❌	❌	❌	❌
CBC-MAC	❌	❌	❌	❌	❌
CMAC	❌	❌	❌	❌	❌

Cipher algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
Stream Cipher	❌	❌	❌	❌	❌
CTR	❌	❌	❌	❌	❌
CFB	❌	❌	❌	❌	❌
OFB	❌	❌	❌	❌	❌
XTS	❌	❌	❌	❌	❌
ECB with no padding	❌	❌	❌	❌	❌
CBC with no padding	❌	❌	❌	❌	❌
CBCP with PKCS#7 padding	❌	❌	❌	❌	❌

AEAD algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
CCM	✅	❌	❌	❌	❌
GCM	✅	❌	❌	❌	❌
ChaCha20-Poly1305	✅	❌	❌	❌	❌

Asymmetric signature algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
RSA PKCS#1 v1.5 signature with hashing	✅	✅	✅	✅	❌
Raw PKCS#1 v1.5 signature	❌	❌	❌	❌	❌
RSA PSS signature with hashing	❌	✅	❌	❌	❌
ECDSA signature with hashing	❌	❌	✅	❌	❌
ECDSA signature without hashing	❌	❌	❌	❌	❌
Deterministic ECDSA signature with hashing	❌	❌	❌	❌	❌

Asymmetric encryption algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
RSA PKCS#1 v1.5 encryption	✅	✅	✅	❌	❌
RSA OAEP encryption	✅	✅	✅	❌	❌

Key agreement algorithms

Algorithm \ Provider	Mbed Crypto	PKCS 11	TPM 2.0	Trusted Service	CryptoAuth library
FFDH	✅	❌	❌	❌	❌
ECDH	✅	❌	❌	❌	❌

Increasing PSA API coverage

You can help increase the coverage of the PSA Crypto API! See here on how you can contribute.

The Parsec Book