ready-for-use flag fix

Author: miyazakh

src/keys.c

@@ -3554,6 +3554,10 @@ int SetKeysSide(WOLFSSL* ssl, enum encrypt_side side)
     ret = PROTOCOLCB_UNAVAILABLE;
     if (ssl->ctx->EncryptKeysCb) {
         void* ctx = wolfSSL_GetEncryptKeysCtx(ssl);
+        #if defined(WOLFSSL_RENESAS_FSPSM_TLS)
+            FSPSM_ST* cbInfo = (FSPSM_ST*)ctx;
+            cbInfo->side = side;
+        #endif
         ret = ssl->ctx->EncryptKeysCb(ssl, ctx);
     }
     if (!ssl->ctx->EncryptKeysCb ||

wolfcrypt/src/port/Renesas/renesas_common.c

@@ -171,10 +171,6 @@ static int Renesas_cmn_CryptoDevCb(int devIdArg, wc_CryptoInfo* info, void* ctx)
     if (info == NULL || ctx == NULL)
         return BAD_FUNC_ARG;
 
-#if defined(DEBUG_WOLFSSL)
-    printf("CryptoDevCb: Algo Type %d session key set: %d\n",
-                                    info->algo_type, cbInfo->session_key_set);
-#endif
 #if defined(DEBUG_CRYPTOCB)
     wc_CryptoCb_InfoString(info);
 #endif
@@ -830,12 +826,23 @@ static int Renesas_cmn_EncryptKeys(WOLFSSL* ssl, void* ctx)
     if (cbInfo->session_key_set == 1) {
  #elif defined(WOLFSSL_RENESAS_FSPSM_TLS)
     FSPSM_ST* cbInfo = (FSPSM_ST*)ctx;
-
-
+    
     if (cbInfo->keyflgs_tls.bits.session_key_set == 1) {
+        switch(cbInfo->side) {
+            case 1:/* ENCRYPT_SIDE_ONLY */
+                ssl->encrypt.setup = 1;
+                break;
+            case 2:/* DECRYPT_SIDE_ONLY */
+                ssl->decrypt.setup = 1;
+                break;
+            case 3:/* ENCRYPT AND DECRYPT */
+                ssl->decrypt.setup = 1;
+                ssl->encrypt.setup = 1;
+                break;
+            default:break;
+        }
  #endif
         ret = 0;
-
         wolfSSL_CTX_SetTlsFinishedCb(ssl->ctx, Renesas_cmn_TlsFinished);
         wolfSSL_SetTlsFinishedCtx(ssl, cbInfo);
     }

wolfcrypt/src/port/Renesas/renesas_fspsm_util.c

@@ -834,15 +834,13 @@ WOLFSSL_LOCAL int wc_fspsm_generateSessionKey(WOLFSSL *ssl,
             if (enc) {
                 enc->aes->ctx.keySize = ssl->specs.key_size;
                 enc->aes->ctx.setup = 1;
-                /* ready for use */
-                enc->setup = 1;
+                /* ready-for-use flag will be set when SetKeySide() is called */
             }
             /* set up key size and marked ready */
             if (dec) {
                 dec->aes->ctx.keySize = ssl->specs.key_size;
                 dec->aes->ctx.setup = 1;
-                /* ready for use */
-                dec->setup = 1;
+                /* ready-for-use flag will be set when SetKeySide() is called */
             }
 
             if (cbInfo->cipher == SCE_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ||

wolfssl/wolfcrypt/port/Renesas/renesas-fspsm-crypt.h

@@ -66,7 +66,7 @@ typedef struct FSPSM_tag_ST {
     uint8_t     clientRandom[FSPSM_TLS_CLIENTRANDOM_SZ];
     uint8_t     serverRandom[FSPSM_TLS_SERVERRANDOM_SZ];
     uint8_t     cipher;
-
+    uint8_t     side; /* for key set side */
    #endif
 
     /* installed key handling */