cose: add tinycrypt HKDF support

HKDF support in tinycrypt is not integrated into the master branch
so intel/tinycrypt#43 must be included.

Author: fjmolinas

include/cose/crypto/selectors.h

@@ -55,6 +55,10 @@
  */
 #if defined(CRYPTO_SODIUM)
 #define CRYPTO_SODIUM_INCLUDE_HKDFSHA256
+#elif defined(CRYPTO_TINYCRYPT)
+#if __has_include (<tinycrypt/hkdf.h>)
+#define CRYPTO_TINYCRYPT_INCLUDE_HKDFSHA256
+#endif
 #endif
 
 #endif /* COSE_CRYPTO_SELECTORS_H */

include/cose/crypto/tinycrypt.h

@@ -37,6 +37,9 @@ extern "C" {
 #define HAVE_CURVE_P256     /**< EC NIST p256 curve support */
 
 #define HAVE_ALGO_AESCCM
+#if __has_include (<tinycrypt/hkdf.h>)
+#define HAVE_ALGO_HMAC256
+#endif
 
 #define HAVE_ALGO_AESCCM_16_64_128 /**< AES CCM mode support with 16 bit length, 64 bit tag 128 bit key */
 #define HAVE_ALGO_AESCCM_16_128_128 /**< AES CCM mode support with 16 bit length, 128 bit tag 128 bit key */

src/crypt/tinycrypt.c

@@ -20,6 +20,9 @@
 #include <tinycrypt/ecc_dh.h>
 #include <tinycrypt/ecc_dsa.h>
 #include <tinycrypt/sha256.h>
+#if __has_include (<tinycrypt/hkdf.h>)
+#include <tinycrypt/hkdf.h>
+#endif
 
 extern cose_crypt_rng cose_crypt_get_random;
 extern void *cose_crypt_rng_arg;
@@ -188,3 +191,26 @@ int cose_crypto_verify_ecdsa(const cose_key_t *key, const uint8_t *sign, size_t
     int res = uECC_verify(pubkey, hash, sizeof(hash), (uint8_t*)sign, uECC_secp256r1());
     return res ? COSE_OK : COSE_ERR_CRYPTO;
 }
+
+#ifdef CRYPTO_TINYCRYPT_INCLUDE_HKDFSHA256
+int cose_crypto_hkdf_derive_sha256(const uint8_t *salt, size_t salt_len,
+                                   const uint8_t *ikm, size_t ikm_length,
+                                   const uint8_t *info, size_t info_length,
+                                   uint8_t *out, size_t out_length)
+{
+    uint8_t prk[TC_SHA256_DIGEST_SIZE];
+
+    int ret = tc_hkdf_extract(ikm, ikm_length, salt, salt_len, prk);
+
+    if (ret != TC_CRYPTO_SUCCESS) {
+        return COSE_ERR_CRYPTO;
+    }
+
+    ret = tc_hkdf_expand(prk, info, info_length, out_length, out);
+
+    if (ret != TC_CRYPTO_SUCCESS) {
+        return COSE_ERR_CRYPTO;
+    }
+    return COSE_OK;
+}
+#endif /* CRYPTO_TINYCRYPT_INCLUDE_HKDFSHA256 */