33311 Commits

Author SHA1 Message Date
Felix Conway
5b84ae14e9 Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING
This macro applies __attribute__((nonstring)) when using a compiler that supports it

Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-20 11:48:16 +01:00
Felix Conway
79b513894a Add __attribute__ ((nonstring)) to remove unterminated-string-initialization warning
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-20 11:48:16 +01:00
Ronald Cron
7c536dab54
Merge pull request #10231 from ronald-cron-arm/mbedtls-build-info
Preparatory work for the resolution of #10022
2025-06-19 14:43:03 +00:00
Manuel Pégourié-Gonnard
a9dc998fb9
Merge pull request #10235 from mpg/cleanup-oid
Clean up after crypto hides its OID module
2025-06-19 12:30:07 +00:00
Manuel Pégourié-Gonnard
838a114f05 Remove MBEDTLS_OID_C from sample configs
This option no longer exists (and there's a Changelog entry saying so).

After this commit, git grep -l -w MBEDTLS_OID_C shows the only remaining
occurences are in text files (.txt, .md).

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:16:38 +02:00
Manuel Pégourié-Gonnard
6a3b877d60 Remove OID from generate_error.pl
There is no longer any associated error code, so this commit does not
change the generated file in any way.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:14:02 +02:00
Manuel Pégourié-Gonnard
d9fa0755d9 Update tf-psa-crypto
We need #311

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:11:55 +02:00
Manuel Pégourié-Gonnard
4ccde0c8e5
Merge pull request #10225 from valeriosetti/issue229-mbedtls
[development] Move Everest headers to a private subdirectory (1/2)
2025-06-19 06:47:21 +00:00
Valerio Setti
2d7ded653f scripts: generate_visualc_files: fix include_directories
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-18 10:01:29 +02:00
Valerio Setti
f5e27fa361 Revert "update further everest paths"
This reverts commit 243b54f3869953a674ff6730685a623a98a1d9cd.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 23:06:24 +02:00
Valerio Setti
26893d99f6 Revert "CMakeLists: prepare for Everest headers relocation"
This reverts commit 653a86dc2a36d6fa6b37ada91d9ca01a7ee63ff8.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 23:04:46 +02:00
Ronald Cron
d1e4ccf0a0 cmake: Fix library order
A library that depends on another one should come first
in the list of libraries to link against.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-17 09:48:05 +02:00
Valerio Setti
e4960bc159 framework: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
Valerio Setti
3150913be7 Revert "update framework submodule to pull in everest changes"
This reverts commit 83e5a7bf75ba8a24392ecdc93fe68f48fd56557a.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
Valerio Setti
653a86dc2a CMakeLists: prepare for Everest headers relocation
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
Ronald Cron
a3b562aa17 programs: test: Let zeroize be an Mbed TLS test program
In TF-PSA-Crypto there is the crypto specific one.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-16 15:55:05 +02:00
Ronald Cron
0815c67ce1 programs: pkey: Use tf-psa-crypto/build_info.h
pkey programs are crypto programs (only linked to
the TF-PSA-Crypto library) thus use the TF-PSA-Crypto
build-time configuration info file
tf-psa-crypto/build_info.h instead of the Mbed TLS one.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-16 15:54:49 +02:00
Valerio Setti
3de417fce2 scripts: generate_visualc_files.pl: prepare for Everest headers relocation
This change allows the Perl script to manage Everest headers in
tf-psa-crypto repo both before and after psa#235. Once psa#235 will be
merged this commit can be simplified, i.e. it will be returned to its
original state with paths of Everest headers updated.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-16 15:04:27 +02:00
Manuel Pégourié-Gonnard
48552b620d
Merge pull request #10187 from valeriosetti/ecp-restartable-development
[development] Always enable MBEDTLS_PK_USE_PSA_EC_DATA + use PSA interruptible operations as backend for PK restartable ones
2025-06-16 07:24:50 +00:00
Ronald Cron
b1d3e2e4e0
Merge pull request #9634 from gabor-mezei-arm/9144_update_depends.py_hashes_domain
Update the `hashes` domain to use PSA macros in `depends.py`
2025-06-13 07:25:04 +00:00
Valerio Setti
d7d0acbeb6 tf-psa-crypto: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:40:35 +02:00
Valerio Setti
a81d6dfb05 tests|programs: remove usage of mbedtls_ecp_set_max_ops()
PK restartable operations are now implemented using PSA interruptible
ones, so mbedtls_ecp_set_max_ops() can be removed in favor of
psa_interruptible_set_max_ops().

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:39:18 +02:00
Valerio Setti
eaf578978e library: remove ECDSA_C dependency from ECP_RESTARTABLE
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:37:29 +02:00
Valerio Setti
c394fd0ebc library: debug: replace MBEDTLS_PK_USE_PSA_EC_DATA with PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY
MBEDTLS_PK_USE_PSA_EC_DATA is a legacy symbol that is used in 3.6 LTS
branch, but now it is assumed to be always true. It's only kept for
legacy reasons so it's better to replace it with
PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY instead.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:35:45 +02:00
Valerio Setti
ae89dcc4be library: tls12: remove usage of MBEDTLS_PK_USE_PSA_EC_DATA
PK module will now always use PSA storing pattern when working with
EC keys therefore MBEDTLS_PK_USE_PSA_EC_DATA is assumed to be always
enabled.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:21:30 +02:00
Gilles Peskine
c2b7f85747
Merge pull request #10206 from felixc-arm/doxygen-doxyfile-public-only
Doxygen: Only render public files
2025-06-11 16:01:07 +00:00
Felix Conway
035247d46f Re-add doxygen/input to INPUT variable
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 11:07:10 +01:00
Felix Conway
1704578f2f Update tf-psa-crypto pointer to bring in doxygen pre-work
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 10:22:55 +01:00
Felix Conway
4f94ae8baa Doxygen: only render public files
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 10:22:55 +01:00
Felix Conway
c6654fc1b0 Replace MBEDTLS_ERR_ECP_IN_PROGRESS with alias PSA_OPERATION_INCOMPLETE in documentation
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 10:22:55 +01:00
Gilles Peskine
96e17e8b36
Merge pull request #10204 from felixc-arm/remove-mbedtlsplatformc-requirements
Remove requirment on MBEDTLS_PLATFORM_C in configs
2025-06-11 08:22:43 +00:00
Gabor Mezei
3795f8ab74
Remove temporary component created for SHA3 testing
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-10 15:40:53 +02:00
Gabor Mezei
ef013a6970
Use PSA macros for the hashes domain
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-10 15:40:41 +02:00
Felix Conway
c54da23c76 Update tf-psa-crypto pointer
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-10 13:45:34 +01:00
Felix Conway
43c891ae98 Remove requirement on MBEDTLS_PLATFORM_C from configs
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-10 13:45:34 +01:00
Manuel Pégourié-Gonnard
cdd91da1af
Merge pull request #10145 from gabor-mezei-arm/remove_sha3_config_option
Remove `MBEDTLS_SHA3_C` config option
2025-06-10 09:57:22 +00:00
Gabor Mezei
2649800f7c
Do not disable PSA_WANT_SHA3 macros when driver accel is used
The SW implementation is guarded with the `MBEDTLS_PSA_BUILTIN_ALG_SHA3`
macros and not enabled when driver accelaration is set. So disabling
the `PSA_WANT` macros is not needed.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-05 14:01:30 +02:00
Gabor Mezei
c45f3d6a1d
Update PSA repo
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-05 14:01:25 +02:00
Ben Taylor
83e5a7bf75 update framework submodule to pull in everest changes
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
Ben Taylor
de864e7a1c Remove ChangeLog as it is not required
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
Ben Taylor
40bc348963 corrected ChangeLog
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
Ben Taylor
142347383f Add ChangeLog for removal of everest headers
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
Ben Taylor
243b54f386 update further everest paths
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
Ben Taylor
2d6374a0f9 adjust everest header paths in generate_visualc_files.pl
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
Gilles Peskine
b4cbc156ef
Merge pull request #10192 from valeriosetti/fixes-for-ecp-restartable-part2
[development] Some pre-requisites for psa#299
2025-06-05 07:50:53 +00:00
Manuel Pégourié-Gonnard
e8061342a2
Merge pull request #10173 from gilles-peskine-arm/oid-split-x509
OID: make X.509 independent from crypto
2025-06-04 08:26:59 +00:00
Gabor Mezei
72cc7bb706
Start the generation at the beginning of the line
The markers for the generated code need to indented due to the code style check.
During the replacement remove the spaces along with the markers.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-03 17:49:23 +02:00
Gabor Mezei
588769cc65
Update error generation
Adapt the `generate_errors.pl` to handle `PSA_WANT` macros and
update to handle SHA3 macros.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-03 17:49:23 +02:00
Gabor Mezei
4aa974f7c7
Remove MBEDTLS_SHA3_C config option
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-03 17:49:23 +02:00
Gilles Peskine
7e7dc6fdda Align endif comments with auxiliary macros
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-03 15:51:34 +02:00