5762         if (operation->ctx.pbkdf2.salt != NULL) {  in psa_key_derivation_abort()
5763             mbedtls_zeroize_and_free(operation->ctx.pbkdf2.salt,  in psa_key_derivation_abort()
5764                                      operation->ctx.pbkdf2.salt_length);  in psa_key_derivation_abort()
6098     psa_pbkdf2_key_derivation_t *pbkdf2,  in psa_key_derivation_pbkdf2_generate_block()  argument
6114     uint8_t *U_accumulator = pbkdf2->output_block;  in psa_key_derivation_pbkdf2_generate_block()
6120     MBEDTLS_PUT_UINT32_BE(pbkdf2->block_number, block_counter, 0);  in psa_key_derivation_pbkdf2_generate_block()
6124                                                pbkdf2->password,  in psa_key_derivation_pbkdf2_generate_block()
6125                                                pbkdf2->password_length,  in psa_key_derivation_pbkdf2_generate_block()
6130     status = psa_mac_update(&mac_operation, pbkdf2->salt, pbkdf2->salt_length);  in psa_key_derivation_pbkdf2_generate_block()
6151     for (i = 1; i < pbkdf2->input_cost; i++) {  in psa_key_derivation_pbkdf2_generate_block()
6156                                                 pbkdf2->password,  in psa_key_derivation_pbkdf2_generate_block()
6157                                                 pbkdf2->password_length,  in psa_key_derivation_pbkdf2_generate_block()
6175     psa_pbkdf2_key_derivation_t *pbkdf2,  in psa_key_derivation_pbkdf2_read()  argument
6184     psa_set_key_bits(&attributes, PSA_BYTES_TO_BITS(pbkdf2->password_length));  in psa_key_derivation_pbkdf2_read()
6199     switch (pbkdf2->state) {  in psa_key_derivation_pbkdf2_read()
6202             pbkdf2->bytes_used = prf_output_length;  in psa_key_derivation_pbkdf2_read()
6203             pbkdf2->state = PSA_PBKDF2_STATE_OUTPUT;  in psa_key_derivation_pbkdf2_read()
6212         uint8_t n = prf_output_length - pbkdf2->bytes_used;  in psa_key_derivation_pbkdf2_read()
6216         memcpy(output, pbkdf2->output_block + pbkdf2->bytes_used, n);  in psa_key_derivation_pbkdf2_read()
6219         pbkdf2->bytes_used += n;  in psa_key_derivation_pbkdf2_read()
6226         pbkdf2->bytes_used = 0;  in psa_key_derivation_pbkdf2_read()
6227         pbkdf2->block_number++;  in psa_key_derivation_pbkdf2_read()
6229         status = psa_key_derivation_pbkdf2_generate_block(pbkdf2, prf_alg,  in psa_key_derivation_pbkdf2_read()
6301         status = psa_key_derivation_pbkdf2_read(&operation->ctx.pbkdf2, kdf_alg,  in psa_key_derivation_output_bytes()
7336     psa_pbkdf2_key_derivation_t *pbkdf2,  in psa_pbkdf2_set_input_cost()  argument
7344     if (pbkdf2->state != PSA_PBKDF2_STATE_INIT) {  in psa_pbkdf2_set_input_cost()
7356     pbkdf2->input_cost = data;  in psa_pbkdf2_set_input_cost()
7357     pbkdf2->state = PSA_PBKDF2_STATE_INPUT_COST_SET;  in psa_pbkdf2_set_input_cost()
7362 static psa_status_t psa_pbkdf2_set_salt(psa_pbkdf2_key_derivation_t *pbkdf2,  in psa_pbkdf2_set_salt()  argument
7366     if (pbkdf2->state == PSA_PBKDF2_STATE_INPUT_COST_SET) {  in psa_pbkdf2_set_salt()
7367         pbkdf2->state = PSA_PBKDF2_STATE_SALT_SET;  in psa_pbkdf2_set_salt()
7368     } else if (pbkdf2->state == PSA_PBKDF2_STATE_SALT_SET) {  in psa_pbkdf2_set_salt()
7379         next_salt = mbedtls_calloc(1, data_length + pbkdf2->salt_length);  in psa_pbkdf2_set_salt()
7384         if (pbkdf2->salt_length != 0) {  in psa_pbkdf2_set_salt()
7385             memcpy(next_salt, pbkdf2->salt, pbkdf2->salt_length);  in psa_pbkdf2_set_salt()
7387         memcpy(next_salt + pbkdf2->salt_length, data, data_length);  in psa_pbkdf2_set_salt()
7388         pbkdf2->salt_length += data_length;  in psa_pbkdf2_set_salt()
7389         mbedtls_free(pbkdf2->salt);  in psa_pbkdf2_set_salt()
7390         pbkdf2->salt = next_salt;  in psa_pbkdf2_set_salt()
7446 static psa_status_t psa_pbkdf2_set_password(psa_pbkdf2_key_derivation_t *pbkdf2,  in psa_pbkdf2_set_password()  argument
7452     if (pbkdf2->state != PSA_PBKDF2_STATE_SALT_SET) {  in psa_pbkdf2_set_password()
7460                                               pbkdf2->password,  in psa_pbkdf2_set_password()
7461                                               &pbkdf2->password_length);  in psa_pbkdf2_set_password()
7467                                               pbkdf2->password,  in psa_pbkdf2_set_password()
7468                                               &pbkdf2->password_length);  in psa_pbkdf2_set_password()
7475     pbkdf2->state = PSA_PBKDF2_STATE_PASSWORD_SET;  in psa_pbkdf2_set_password()
7480 static psa_status_t psa_pbkdf2_input(psa_pbkdf2_key_derivation_t *pbkdf2,  in psa_pbkdf2_input()  argument
7488             return psa_pbkdf2_set_salt(pbkdf2, data, data_length);  in psa_pbkdf2_input()
7490             return psa_pbkdf2_set_password(pbkdf2, kdf_alg, data, data_length);  in psa_pbkdf2_input()
7600         status = psa_pbkdf2_input(&operation->ctx.pbkdf2, kdf_alg,  in psa_key_derivation_input_internal()
7636             &operation->ctx.pbkdf2, step, value);  in psa_key_derivation_input_integer_internal()