5727         if (operation->ctx.tls12_prf.secret != NULL) {  in psa_key_derivation_abort()
5728             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.secret,  in psa_key_derivation_abort()
5729                                      operation->ctx.tls12_prf.secret_length);  in psa_key_derivation_abort()
5732         if (operation->ctx.tls12_prf.seed != NULL) {  in psa_key_derivation_abort()
5733             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.seed,  in psa_key_derivation_abort()
5734                                      operation->ctx.tls12_prf.seed_length);  in psa_key_derivation_abort()
5737         if (operation->ctx.tls12_prf.label != NULL) {  in psa_key_derivation_abort()
5738             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.label,  in psa_key_derivation_abort()
5739                                      operation->ctx.tls12_prf.label_length);  in psa_key_derivation_abort()
5742         if (operation->ctx.tls12_prf.other_secret != NULL) {  in psa_key_derivation_abort()
5743             mbedtls_zeroize_and_free(operation->ctx.tls12_prf.other_secret,  in psa_key_derivation_abort()
5744                                      operation->ctx.tls12_prf.other_secret_length);  in psa_key_derivation_abort()
5898     psa_tls12_prf_key_derivation_t *tls12_prf,  in psa_key_derivation_tls12_prf_generate_next_block()  argument
5912     if (tls12_prf->block_number == 0xff) {  in psa_key_derivation_tls12_prf_generate_next_block()
5917     ++tls12_prf->block_number;  in psa_key_derivation_tls12_prf_generate_next_block()
5918     tls12_prf->left_in_block = hash_length;  in psa_key_derivation_tls12_prf_generate_next_block()
5939                                            tls12_prf->secret,  in psa_key_derivation_tls12_prf_generate_next_block()
5940                                            tls12_prf->secret_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5946     if (tls12_prf->block_number == 1) {  in psa_key_derivation_tls12_prf_generate_next_block()
5951                                 tls12_prf->label,  in psa_key_derivation_tls12_prf_generate_next_block()
5952                                 tls12_prf->label_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5957                                 tls12_prf->seed,  in psa_key_derivation_tls12_prf_generate_next_block()
5958                                 tls12_prf->seed_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5964         status = psa_mac_update(&hmac, tls12_prf->Ai, hash_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5971                                  tls12_prf->Ai, hash_length,  in psa_key_derivation_tls12_prf_generate_next_block()
5983                                            tls12_prf->secret,  in psa_key_derivation_tls12_prf_generate_next_block()
5984                                            tls12_prf->secret_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5988     status = psa_mac_update(&hmac, tls12_prf->Ai, hash_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5992     status = psa_mac_update(&hmac, tls12_prf->label, tls12_prf->label_length);  in psa_key_derivation_tls12_prf_generate_next_block()
5996     status = psa_mac_update(&hmac, tls12_prf->seed, tls12_prf->seed_length);  in psa_key_derivation_tls12_prf_generate_next_block()
6001                                  tls12_prf->output_block, hash_length,  in psa_key_derivation_tls12_prf_generate_next_block()
6018     psa_tls12_prf_key_derivation_t *tls12_prf,  in psa_key_derivation_tls12_prf_read()  argument
6028     switch (tls12_prf->state) {  in psa_key_derivation_tls12_prf_read()
6030             tls12_prf->state = PSA_TLS12_PRF_STATE_OUTPUT;  in psa_key_derivation_tls12_prf_read()
6040         if (tls12_prf->left_in_block == 0) {  in psa_key_derivation_tls12_prf_read()
6041             status = psa_key_derivation_tls12_prf_generate_next_block(tls12_prf,  in psa_key_derivation_tls12_prf_read()
6050         if (tls12_prf->left_in_block > output_length) {  in psa_key_derivation_tls12_prf_read()
6053             length = tls12_prf->left_in_block;  in psa_key_derivation_tls12_prf_read()
6056         offset = hash_length - tls12_prf->left_in_block;  in psa_key_derivation_tls12_prf_read()
6057         memcpy(output, tls12_prf->output_block + offset, length);  in psa_key_derivation_tls12_prf_read()
6060         tls12_prf->left_in_block -= length;  in psa_key_derivation_tls12_prf_read()
6287         status = psa_key_derivation_tls12_prf_read(&operation->ctx.tls12_prf,  in psa_key_derivation_output_bytes()
7582         status = psa_tls12_prf_input(&operation->ctx.tls12_prf,  in psa_key_derivation_input_internal()
7588         status = psa_tls12_prf_psk_to_ms_input(&operation->ctx.tls12_prf,  in psa_key_derivation_input_internal()