coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-10 07:10:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,167 Commits 183 Branches 286 Tags Multiple Licenses 220 MiB
Commit Graph

34167 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Gilles Peskine
d33eb55cce Macros to indicate the finalization level of the configuration 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-29 09:44:20 +02:00
Gilles Peskine
fef877f51f Belated changelog entry for not including check_config.h 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-29 09:44:20 +02:00
Gilles Peskine
975e74cb1f Document check-config.h and *adjust*.h as internal headers 
Including *adjust*.h directly is likely to cause them to be applied at the
wrong time, resulting in an invalid or unintended configuration.

Including check_config.h at the wrong time is likely to cause spurious
errors.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-29 09:44:20 +02:00
Ronald Cron
680bee45ca Update framework submodule to the merge of PR #15 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-28 18:33:42 +02:00
Bence Szépkúti
e3abb6a148
Merge pull request #9094 from davidhorstmann-arm/move-mbedtls-dev-to-framework 
Move `mbedtls_dev` to framework submodule
 2024-05-28 15:50:47 +00:00
Tom Cosgrove
38f6c86724 Remove unnecessary blank lines at top of functions in psa_ff_server.c 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-05-28 14:31:48 +03:00
Tom Cosgrove
9919543f5c Only print PSA crypto sim server messages when DEBUG defined 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-05-28 14:31:48 +03:00
Tom Cosgrove
f69445ccaf Fix sending a response of more than 184 bytes in psa_ff_server.c:psa_write() 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-05-28 14:31:48 +03:00
Tom Cosgrove
bdc4c2d750 Fix PSA sim test awk script by removing extra $ 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-05-28 14:31:48 +03:00
Tom Cosgrove
0a57a253cc Fix psa_ff_server.c to calculate the amount of data from client correctly 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-05-28 14:31:48 +03:00
Tom Cosgrove
b7e5f31e2a Replace final sprintf() with snprintf() in psa_ff_server.c 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
 2024-05-28 14:31:48 +03:00
Waleed Elmelegy
473dea26a6 Remove unnecessary testing and documentation 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-05-28 11:15:21 +00:00
Ronald Cron
a7ec5c888c Update framework submodule to the merge of #15 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-27 17:48:53 +02:00
Valerio Setti
a37ea269a9 adjust_legacy_crypto: enable CIPHER_C when PSA CMAC is builtin 
psa_crypto_mac.c uses mbedtls_cipher_xxx() functions to perform
CMAC operations. Therefore we need to enable CIPHER_C when
PSA CMAC is builtin.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-05-24 14:37:05 +02:00
Gilles Peskine
c7569a8c4b
Merge pull request #9159 from gilles-peskine-arm/analyze_outcomes-generate_files 
Generate test data before coverage analysis
 2024-05-23 12:08:15 +00:00
Gilles Peskine
39c5207d79 ssl-opt.sh, compat.sh: Error out if not executing any tests 
Alert if all tests are filtered out or skipped: that probably indicates a
test script that set up an unintended configuration or an overly strict
filter. You can pass `--min 0` to bypass this check. You can pass `--min`
with a larger value to require that many test cases to run.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-23 13:38:26 +02:00
Waleed Elmelegy
11a81cd7dd Add comment to mbedtls_mpi_core_mla() to indicate it is costant time 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-05-23 08:01:58 +00:00
Ronald Cron
f5473a0260
Merge pull request #9057 from Ryan-Everett-arm/crypto-config-test_ref_configs 
Update the reference configs to use `MBEDTLS_PSA_CRYPTO_CONFIG`
 2024-05-23 05:58:55 +00:00
Waleed Elmelegy
77bd479825 Change mbedtls_mpi_core_mla() to be constant time 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-05-23 00:22:44 +00:00
Gilles Peskine
2ad2f3207e Pacify pylint 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-22 09:35:11 +02:00
Gilles Peskine
78ae4f6fe1 Generate test data before coverage analysis 
Fixes #8300.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-05-21 20:26:18 +02:00
Waleed Elmelegy
a9fe03ea4e Add comment to mbedtls_mpi_core_sub() to indicate it is costant time 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-05-21 16:17:06 +00:00
Waleed Elmelegy
e27738308c Merge mbedtls_mpi_core_sub() constant time testing and functional testing 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-05-21 16:05:52 +00:00
Minos Galanakis
ad94717070 Update .github/pull_request_template.md 
Removed discrete link referencing and updated text entries.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-05-20 16:57:14 +01:00
Tom Cosgrove
df1bfec990
Merge pull request #9121 from valeriosetti/issue8963 
Add client-server build to all.sh
 2024-05-20 07:14:37 +00:00
Turiiya
27098b458b fix typo 
Signed-off-by: Turiiya <34311583+ttytm@users.noreply.github.com>
 2024-05-18 18:08:12 +02:00
Thomas Daubney
a8004f27b7 Add additional CCM unset 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-05-17 14:48:47 +01:00
Thomas Daubney
8f83ba08e2 Change the way CBC is set 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-05-17 14:44:15 +01:00
Ronald Cron
b30cd3bb8f Improve test-ref-configs.pl 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-17 14:34:11 +02:00
Ronald Cron
ca6b1e9df3 Adjust crypto-config-thread.h 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-17 14:34:11 +02:00
Ronald Cron
b48c8704e6 Fix crypto_adjust_config_dependencies.h documentation 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-17 14:34:11 +02:00
Ronald Cron
c4c8bdf32e Fix PBKDF2_AES_CMAC_PRF_128 dependencies 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-17 14:34:06 +02:00
Ronald Cron
97f0ea7611 Fix the resolution of dependencies on HMAC 
The Mbed TLS implementations of ALG_TLS12_PRF,
ALG_TLS12_PSK_TO_MS, ALG_HKDF, ALG_HKDF_EXTRACT,
ALG_HKDF_EXPAND and ALG_PBKDF2 rely on HMAC
operations through the driver interface. Thus
if one of these algorithms is enabled and not
accelerated, we need ALG_HMAC to be enabled
(PSA_WANT_ALG_HMAC and PSA_WANT_KEY_TYPE_HMAC
defined). As HMAC operations occur through
the driver interface, HMAC operations can be
accelerated even if the caller algorithm
is not.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-17 14:33:44 +02:00
Valerio Setti
1f3c99c774 psa_autogen.py: improve management of output files 
While at this, fix also Makefile so that "make clean" does not
complain if some of the files to be cancelled do not exist.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-05-16 16:13:38 +02:00
Ronald Cron
1f95ede98c Fix "maybe-uninitialized" warning with GCC 11.3 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
a33a824d8a Resolve PBKDF2_AES_CMAC_PRF_128 dependencies 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
b0c96f47e7 Resolve some HMAC dependencies automatically 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
b3a400b9bd config-suite-b: Enable EC with PSA_WANT 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
b16e1c2c2f Remove direct enablement of MBEDTLS_CIPHER/MD_C 
Kept MD in thread config as needed for
HMAC_DRBG.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
4de85396cf Enable MBEDTLS_PSA_CRYPTO_C and MBEDTLS_USE_PSA_CRYPTO 
Enable MBEDTLS_PSA_CRYPTO_C and MBEDTLS_USE_PSA_CRYPTO
is reference configurations as we are working towards
removing (always on) them.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
4dd6631aac test-ref-configs.pl: Detect automatically test with USE_PSA enabled 
Change the way we decide if for a given
configuration we need to run tests with
and without MBEDTLS_USE_PSA_CRYPTO enabled.
That makes the script suitable for 3.6 and
development branch.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ronald Cron
640276268d Fix compat.sh filters 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
21eaa77ba8 Address ccm-psk-tls1_2 comments 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
0855b26a80 Address thread comments 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
2abd658030 Address symmetric-only comments 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
c3051572ca Address suite-b comments 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
44d7ddf82f In suite-b move definition of MBEDTLS_PSA_CRYPTO_CONFIG_FILE 
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
4540cd3429 Add a crypto config file for suite-b 
Also converts legacy symbols into their PSA equivalents.
When PSA is defined this does not change the compiled code

Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
0a0393e8bd Use crypto config for ccm-psk-dtls1_2.h 
Convert legacy symbols to their PSA equivalents.
This does not change code compiled when this config is active with PSA
enabled

Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:03 +02:00
Ryan Everett
ab5ec9d3a4 Add a crypto config file for ccm-psk-tls1_2.h 
Also convert legacy symbols to their PSA equivalents.
This does not change code compiled when this config is active with PSA
enabled

Signed-off-by: Ryan Everett <ryan.everett@arm.com>
 2024-05-16 08:12:02 +02:00