mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-03-29 04:20:12 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
30,307 Commits 172 Branches 267 Tags
Commit Graph

30307 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Valerio Setti
23e637a7c7 test_suite_pk: initialize all PSA key IDs and attributes 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-27 13:56:57 +01:00
Valerio Setti
a9de9445b1 ssl_helpers: minor fix in mbedtls_test_ssl_endpoint_certificate_init() 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-27 13:56:09 +01:00
Valerio Setti
88ae0ef286 pk: completely remove mbedtls_pk_wrap_as_opaque 
Remove instead of deprecating it.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-27 13:49:42 +01:00
Manuel Pégourié-Gonnard
5b5faf0898
Merge pull request #8844 from davidhorstmann-arm/restore-x509-functions-to-public 
Restore some X509 functions to public headers
 2024-02-27 10:55:16 +00:00
Dave Rodgman
6a3da2d5ed Add missing casts 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-27 10:41:53 +00:00
Tom Cosgrove
ca21b241bd
Merge pull request #8840 from gilles-peskine-arm/domain_parameters-remove 
Remove domain parameters
 2024-02-27 10:36:51 +00:00
Valerio Setti
4c6cea549c pk: deprecate mbedtls_pk_wrap_as_opaque() 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-27 10:51:03 +01:00
Valerio Setti
7541ebea52 programs: remove usage of mbedtls_pk_wrap_as_opaque() from tests 
This is replaced with: mbedtls_pk_get_psa_attributes() +
mbedtls_pk_import_into_psa() + mbedtls_pk_setup_opaque().

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-27 10:44:33 +01:00
Valerio Setti
1fa2f6e9af test: remove usage of mbedtls_pk_wrap_as_opaque() from tests 
This is replaced with: mbedtls_pk_get_psa_attributes() +
mbedtls_pk_import_into_psa() + mbedtls_pk_setup_opaque().

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-27 09:23:35 +01:00
David Horstmann
1ff95e61d7
Merge pull request #1149 from tom-daubney-arm/mac_buffer_protection 
Implement safe buffer copying in MAC API
 2024-02-26 19:06:42 +00:00
Dave Rodgman
40c837dc40 Simplify pi rolled-up variant 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 18:43:22 +00:00
Dave Rodgman
08b81bf1e8 Test all unroll variations 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 18:43:22 +00:00
Dave Rodgman
2f94766a61 Send printed command to stderr 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:30:56 +00:00
Dave Rodgman
67126bbcea remove trailing space from printed command 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:30:37 +00:00
Dave Rodgman
dbc2e8d4cc Improve simplified quoting 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:29:31 +00:00
Dave Rodgman
bdf0a6d431 remove shebang from quiet 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:29:10 +00:00
Dave Rodgman
d0e3827ea2 Improve docs 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:28:56 +00:00
Dave Rodgman
c7f05490bb Quote directory name from cmake wrapper 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:28:42 +00:00
Dave Rodgman
30483dccc0 Undo not-needed change 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:28:13 +00:00
Dave Rodgman
a9e8dbed14
Allow wrappers to be missing; quote directory name from make 
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com>
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 17:27:18 +00:00
David Horstmann
075c5fb76f Generate test wrappers for psa_generate_random() 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-02-26 17:12:34 +00:00
David Horstmann
6e99bb203f Add buffer copying to psa_generate_random() 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-02-26 17:12:34 +00:00
Gilles Peskine
e22f6a9610 Finish cleaning up override that's no longer needed 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 16:57:31 +01:00
Gilles Peskine
97c0b2f393 Remove domain parameters from psa_key_attributes_t 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 16:57:30 +01:00
David Horstmann
ef950ccb1d Un-unrestore mbedtls_x509_string_to_names() 
Re-restore mbedtls_x509_string_to_names() to public as our example
programs use it, and it is the reverse of mbedtls_x509_dn_gets().

Add a docstring, so that it is a properly documented public function.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2024-02-26 13:59:43 +00:00
Thomas Daubney
4a46d73bb0 Suppress pylint 
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
 2024-02-26 13:49:26 +00:00
Dave Rodgman
e03088b29e Avoid infinite loop 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 12:48:49 +00:00
Dave Rodgman
98a79cdb23 Extract common parts of quiet wrapper 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 12:38:45 +00:00
Valerio Setti
061d4e4655 psa: simplify management of mbedtls_psa_drbg_context_t 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-26 12:52:44 +01:00
Dave Rodgman
00bc790d79 Tidy up quiet wrappers 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 11:43:11 +00:00
Dave Rodgman
219006329d Move quiet wrapper setup 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2024-02-26 11:41:19 +00:00
Tom Cosgrove
f4a200f106
Merge pull request #8838 from paul-elliott-arm/improve_test_data_accessors 
Improve test info data accessors
 2024-02-26 11:22:20 +00:00
Valerio Setti
a53e7a5cb5 psa: let mbedtls_psa_get_random() always use psa_generate_random() 
It means that mbedtls_psa_get_random() goes through the PSA interface
all the times. Fallbacks to CTR_DRBG or HMAC_DRBG are still possible,
but that depends on how the crypto provider is built.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-26 12:03:59 +01:00
Gilles Peskine
ae5eb64705 Remove domain parameters from the public API 
Only leave deprecated, minimal non-linkable functions.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 08:50:53 +01:00
Gilles Peskine
bb6f3ff394 Rename variables 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 08:50:53 +01:00
Gilles Peskine
4c32b69f37 Ignore domain parameters in RSA key generation 
Remove the ability to select a custom public exponent via domain parameters
in RSA key generation. The only way to select a custom public exponent is
now to pass custom production parameters to psa_generate_key_ext().

A subsequent commit will remove domain parameters altogether from the API,
thus this commit does not bother to update the documentation.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 08:50:38 +01:00
Valerio Setti
bb91bcda0e psa: move mbedtls_psa_get_random() to psa_util.c 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2024-02-26 08:41:33 +01:00
Gilles Peskine
6a2c400b8c typo 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-26 08:34:06 +01:00
Gilles Peskine
0f63028809
Merge pull request #8815 from gilles-peskine-arm/psa_generate_key_ext-prototype 
Introduce psa_generate_key_ext
 2024-02-26 07:16:49 +00:00
Paul Elliott
9011dae0c1 Improve documentation / comments 
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
 2024-02-24 10:57:22 +00:00
Paul Elliott
665cf928d9
Merge pull request #8856 from Ryan-Everett-arm/threadsafe-openkey 
Make psa_open_key threadsafe
 2024-02-24 10:29:57 +00:00
Paul Elliott
5a4a6e44ef
Merge pull request #8833 from Ryan-Everett-arm/threadsafe-multiparts 
Make multi-part operations thread-safe
 2024-02-24 10:29:20 +00:00
Tom Cosgrove
817772a6ca
Merge pull request #8716 from mschulz-at-hilscher/feature/gcm_largetable 
Use large GCM tables
 2024-02-23 16:25:38 +00:00
Manuel Pégourié-Gonnard
81c322329e
Merge pull request #8855 from gilles-peskine-arm/benchmark-ecdh-no-legacy 
Remove most uses of MBEDTLS_ALLOW_PRIVATE_ACCESS in test programs
 2024-02-23 09:16:46 +00:00
Gilles Peskine
7f72a06e02 Remove cruft 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-22 18:41:25 +01:00
Gilles Peskine
f6eb0b8ab0 Changelog entry for benchmark improvement 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-22 18:40:10 +01:00
Janos Follath
bd0a683e78 Improve changelog 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-02-22 15:48:01 +00:00
tom-daubney-arm
5cd611d144
Merge branch 'development-restricted' into mac_buffer_protection 
Signed-off-by: tom-daubney-arm <74920390+tom-daubney-arm@users.noreply.github.com>
 2024-02-22 15:26:06 +00:00
Gilles Peskine
673461c389 Improve validation in mpi_exp_mod_min_RR 
Check that the test case is hitting what it's supposed to hit, and that the
library takes the expected defensive measure.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-02-22 15:22:10 +00:00
Janos Follath
fdab786852 Use TEST_EQUAL instead of TEST_ASSERT in new code 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-02-22 15:19:13 +00:00