coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-29 02:17:27 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,796 Commits 183 Branches 286 Tags Multiple Licenses 206 MiB
Commit Graph

132 Commits

Author SHA1 Message Date
Rohan Luchmun
d23fcce12c Removed debugging print 
Signed-off-by: Rohan Luchmun <Rohan.Luchmun@arm.com>
 2026-10-19 14:11:16 +01:00
Rohan Luchmun
662ffe3141 Added pqcp to include path 
Signed-off-by: Rohan Luchmun <Rohan.Luchmun@arm.com>
 2026-10-19 14:11:16 +01:00
Valerio Setti
c0748befd5
Merge pull request #10642 from valeriosetti/replace-legacy-rsa-symbols-followup 
[dev] Replace legacy rsa symbols followup
 2026-09-25 14:53:25 +00:00
Valerio Setti
0282e0f0e9 depends.py: add PSA_WANT_ALG_RSA_PSS to pkalgs domain 
MBEDTLS_X509_RSASSA_PSS_SUPPORT depends on PSA_WANT_ALG_RSA_PSS, so add
the corresponding reverse dependency and include PSA_WANT_ALG_RSA_PSS in
the 'pkalgs' ComplementaryDomain in order to also test builds where
RSA-PSS is disabled.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-09-25 09:10:29 +02:00
Valerio Setti
dd30cc683f scripts: depends-py: fix pylint complains 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-09-17 17:29:58 +02:00
Valerio Setti
00aff9cbb4 scripts: depends-py: add the possibility to provide a fully custom build-and-test command 
This is useful for debugging purposes because, for example, the user
only want to build a specific suite and/or only run it instead of
building and testing everything for all the jobs.
For this scope the custom command can be a bash script that's executed
instead of 'make' + 'make test'.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-09-17 11:24:40 +02:00
Valerio Setti
a201a74b7d tests: depends.py: extend pkalgs including PSA_WANT_ALG_RSA_PKCS1V15_SIGN 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-03-19 17:50:26 +01:00
Valerio Setti
63df2f79a4 tests: depends.py: fix reverse dependency for RSA 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-03-19 17:50:26 +01:00
Ben Taylor
27c22840b4 Re-instate failure when disabling non-existing option 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-12-24 08:20:09 +00:00
Ben Taylor
c8e4fd3f1a Initial removal of DES from mbedtls 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-30 10:36:48 +01:00
Ronald Cron
31f63210ec Deprecate Make 
Move and rename the root Makefile to
scripts/legacy.make. That way running
make from the root fails.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
feb5e26619 Cleanup following the removal of MBEDTLS_ECP_DP_.*_ENABLED options 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ronald Cron
6cfab2880a Cleanup following the removal of MBEDTLS_ECP_C option 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ronald Cron
2ad1e5c1a2 Cleanup following the removal of MBEDTLS_ECJPAKE_C option 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ronald Cron
3c6bbddfd4 Cleanup following the removal of MBEDTLS_ECDSA_C option 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ronald Cron
a19ee2819e Cleanup following the removal of MBEDTLS_ECDH_C option 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ben Taylor
9e360b8f33 Remove MBEDTLS_RSA_C from depends.py 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-11 13:22:40 +01:00
Ben Taylor
15f1d7f812 Remove support for static ECDH cipher suites 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-11 13:22:40 +01:00
Ronald Cron
efcec8cecd Cleanup following the removal of MBEDTLS_ENTROPY_C option 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-10 15:23:32 +02:00
Minos Galanakis
906950d8dc config/depends.py: Removed legacy options. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-08-21 15:57:00 +01:00
Valerio Setti
fa648bacb2 depends.py: keep reverse dependencies for p192 and p224 curves 
These reverse dependencies will be removed once tf-psa-crypto will
remove the corresponding build symbols.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-08-06 11:02:25 +02:00
Valerio Setti
d0d0791aed remove usage of secp192[k|r]1 curves 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-08-06 09:15:35 +02:00
Valerio Setti
70a4a31cb5 remove secp224[k|r]1 curves 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-08-06 09:15:35 +02:00
Ronald Cron
dfd501d3fb depends.py: Adapt to the removal of legacy crypto config options 
Adapt to the removal of the legacy hash, cipher,
cmac, aead and RSA configuration options.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-07-24 08:42:16 +02:00
Ronald Cron
fb03d1391b depends.py: Remove cipher_padding domain 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-07-24 08:42:16 +02:00
Ronald Cron
50f99caf42 depends.py: Add warning log 
Add warning log when disabling a configuration
option that does not exist.

When the removal of the legacy crypto config
options is completed, the warning will be
reverted to an error.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-07-15 10:33:17 +02:00
Ronald Cron
d5da020a63 depends.py: Do not fail when disabling a non-existing option 
To ease the removal of legacy crypto options, do not
fail in depends.py when disabling a non-existing option.
This mimics the behavior of 'config.py unset'.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-07-10 19:16:10 +02:00
Gabor Mezei
ef013a6970
Use PSA macros for the hashes domain 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-06-10 15:40:41 +02:00
Gabor Mezei
4aa974f7c7
Remove MBEDTLS_SHA3_C config option 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-06-03 17:49:23 +02:00
Gabor Mezei
f13fd1e272
Use PSA macros for the pkalgs domain 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-05-09 14:51:54 +02:00
Ben Taylor
1948c94385 added dependencies to test scripts 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-04-29 07:43:37 +01:00
Gabor Mezei
e1e27300a2
Remove MBEDTLS_KEY_EXCHANGE_RSA_ENABLED config option 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-03-20 17:53:01 +01:00
Valerio Setti
8438c637ee tests: remove references to DHE-RSA 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-02-06 10:05:58 +01:00
Gabor Mezei
7554eeaf4c
Disable 224K1 while testing the other curves 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-01-27 15:03:14 +01:00
Gabor Mezei
fe14d85b7c
Remove unused symbol 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-01-27 15:03:14 +01:00
Gabor Mezei
069e3e6fe7
Remove reference for PSA_WANT_ALG_SECP_K1_224 
The `PSA_WANT_ALG_SECP_K1_224` symbol has been removed.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-01-27 15:03:14 +01:00
Gabor Mezei
0a2f257492
Use symbol matching for the curves domain 
Instead of using the `crypto_knowledge.py`, use basic symbol matching for the
`PSA_WANT_ECC_*` macros to search for in the `curves` domain of `depend.py`.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-01-27 15:03:13 +01:00
Gabor Mezei
1c49cff468
Use PSA macros for the curves domain 
Exclude the SECP224K1 curve due it is unstable via the PSA API.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-01-27 15:03:13 +01:00
Gabor Mezei
6763a5546a
Update comments 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
655c487edb
Update dependencies 
Added `MBEDTLS_CIPHER_MODE_XTS` as a dependency for `PSA_WANT_ALG_XTS`.
Otherwise, `MBEDTLS_CIPHER_MODE_XTS` is always enabled which enables a
lot of code we would like to be disabled when testing CFB/CTR... only.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
af198c2ee5
Rename variable 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
242806ad6f
Update dependencies 
All cipher padding methods depend on CBC. To aviod switching it off
add this dependency to all of the methods and handle it as a common dependency.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
a5f35296bd
Update comment 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
95be5fb18b
Add support for common dependencies in exclusive groups 
When elements of an exclusive group have dependencies in common turning them off
breaks the elements build. Support added to handle and ignore these dependencies
when only one of the elements is enabled.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
e191c0358e
Update the dependencies of the cipher algorithms 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
5a61086748
Test all cipher algorithm 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:26:34 +01:00
Gabor Mezei
6f77baff68
Use PSA macros for the chipher_chaining domain 
Exclude the XTS mode because it is not implemented via the PSA API.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-12 18:25:05 +01:00
Ronald Cron
101816b41f
Merge pull request #9612 from gabor-mezei-arm/9141_update_depends.py_cipher_id_domain 
Update the `cipher_id` domain to use PSA macros in `depends.py`
 2024-11-08 15:32:39 +00:00
Gabor Mezei
bd8e81834f
Fix pylint issue 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2024-11-06 11:25:01 +01:00
Gilles Peskine
ac767e5c69 Remove MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED 
Remove the configuration option MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED and all
code guarded by it. This remove support for the RSA-PSK key exchange in TLS
1.2.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-11-05 15:49:01 +01:00