33432 Commits

Author SHA1 Message Date
Ronald Cron
a3e1e95617
Merge pull request #10286 from davidhorstmann-arm/update-4.x-lts-timeline
Update note about the first 4.x LTS
2025-07-09 08:10:13 +00:00
David Horstmann
b5e283679f Update note about the first 4.x LTS
The release date is yet to be determined, to allow time for 4.x to
stabilise.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
2025-07-08 15:09:08 +01:00
Minos Galanakis
04c4d9cabd Updated tf-psa-crypto pointer to tf-psa-crypto1.0.0-beta_mergeback
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-07-07 18:42:50 +03:00
Minos Galanakis
4716308835 Bring forward ChangeLog changes.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-07-07 17:41:18 +03:00
Minos Galanakis
83bef5b66a Merge tag 'mbedtls-4.0.0-beta' into mbedtls-4.0.0-beta-mergeback
Mbed TLS 4.0.0-beta
2025-07-07 17:40:18 +03:00
David Horstmann
a9ff1c4089
Merge pull request #10262 from ariwo17/remove-des-from-error-generation
Remove DES from error generation
2025-07-04 17:50:23 +00:00
Ari Weiler-Ofek
2795197ba0 Remove DES handling from error generator
Signed-off-by: Ari Weiler-Ofek <ariwei01@e134794.arm.com>
2025-07-04 11:59:42 +01:00
Ari Weiler-Ofek
5341e3c3b3 Update tf-psa-crypto submodule to include DES error macro changes
Signed-off-by: Ari Weiler-Ofek <ariwei01@e134794.arm.com>
2025-07-04 11:59:42 +01:00
Manuel Pégourié-Gonnard
64e80ddf89
Merge pull request #10255 from gilles-peskine-arm/migration-guide-20250624-mbedtls
Migration guide for API changes in 2025Q2 in mbedtls
2025-06-30 18:33:36 +00:00
Gilles Peskine
159a652096 Minor clarifications
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
0b44f56d8d Typos
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
5acb3a5969 Copyediting
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
ac18d0c0db Fix spelling of mbedtls_low_level_strerr
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
9b69972589 Remove crypto error codes, refer to the crypto guide instead
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
bf92bae959 Copy error-codes.md from tf-psa-crypto
Much of it also applies to Mbed TLS.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
d3a6cbb6bb Subsection for the removal of explicit RNG contexts
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
9000633f0e Move some crypto changelog files to TF-PSA-Crypto
These files had gone on the wrong side during the repo split.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
2649aa283b TLS key exchange removals
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
2ee5c55c79 Fix spelling of psa_generate_random()
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
fbab8c1df1 General notes about the transition to PSA
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
72968cca33 Generalize the section on function prototype changes
Not everything will be about PSA.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
f6c03d1b7f typo
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
826225fe31 Migration guide entries for removed deprecated functions
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
a0e06dd6d3 Don't mention changes to fields that were already private
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
15037deab3 Consolidate changes to mbedtls_ssl_ticket_setup()
Describe the change to the cipher mechanism specification. Consolidate that
with the removal of the RNG arguments.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
663b6df522 Generalize section to other function prototype changes
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
6f035a854b Explain why the programs have been removed
Also fix the indentation of `*`.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
617ee75e98 Copyediting and wording improvements
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
cd5abfe7b4 Move the X.509 and SSL content from the crypto migration guide
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
2607918066 Move PSA transition document to TF-PSA-Crypto
It went with Mbed TLS in the repository split, but belongs in TF-PSA-Crypto.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
1c2d9a3d74 Migration guide for OID
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
8ba67aef0d Rendered documentation: info about private elements in public headers
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:23 +02:00
Gilles Peskine
0204470f38 Slight improvement to the Doxygen entry point
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-30 13:17:16 +02:00
Manuel Pégourié-Gonnard
921331867d
Merge pull request #10197 from gilles-peskine-arm/ssl_helpers-split_perform_handshake-dev
Break down mbedtls_test_ssl_perform_handshake
2025-06-30 09:39:29 +00:00
Minos Galanakis
71157fd574 Update BRANCHES.md
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-06-27 13:01:26 +01:00
Minos Galanakis
8bccf16218 Assemble ChangeLog
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-06-27 13:01:26 +01:00
Minos Galanakis
09dc57d323 Version Bump
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-06-27 12:17:28 +01:00
Minos Galanakis
42bfc164a2 Updated tf-psa-crypto pointer (tf-psa-crypto-1.0.0-beta)
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-06-27 12:17:28 +01:00
Gilles Peskine
0038408f55 Properly initialize SSL endpoint objects
In some cases, we were calling `mbedtls_test_ssl_endpoint_free()` on an
uninitialized `mbedtls_test_ssl_endpoint` object if the test case failed
early, e.g. due to `psa_crypto_init()` failing. This was largely harmless,
but could have caused weird test results in case of failure, and was flagged
by Coverity.

Use a more systematic style for initializing the stack object as soon as
it's declared.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-27 11:12:55 +01:00
Gilles Peskine
042ee3b318 Fix accidentally skipped test assertion
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-27 11:12:55 +01:00
Minos Galanakis
ed87da7ad7 Merge remote-tracking branch 'restricted/development-restricted' into future_rc
As set by process the tf-psa-crypto submodule is set
to point to tf-psa-crypto-release-sync input.
2025-06-27 10:50:33 +01:00
Manuel Pégourié-Gonnard
42c4bddc07
Merge pull request #10245 from felixc-arm/gcc-15-remove-wnoerror-dev
[Dev] Turn Wunterminated-string-initialization back into an error
2025-06-26 07:08:33 +00:00
Gilles Peskine
f68f45c827
Merge pull request #10213 from valeriosetti/issue298-development
[development] PK: try storing all private RSA keys in PSA (2/3)
2025-06-25 15:23:27 +00:00
Gilles Peskine
c10c233676 Migration guide: more info about private elements in public headers
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-25 15:39:35 +02:00
Gilles Peskine
2c77014bc0 Copy of text about private identifiers from crypto
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-25 15:39:10 +02:00
minosgalanakis
247ad6e303
Merge pull request #10251 from gilles-peskine-arm/tls-exporter-coverity-202505-dev
Fix SSL exporter tests
2025-06-25 10:19:32 +00:00
Valerio Setti
abfa8acb39 framework: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:03 +02:00
Valerio Setti
e0fb40e6fb library: debug: add error log message in mbedtls_debug_print_psa_rsa()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:03 +02:00
Valerio Setti
069617fdce library: debug: improve input param check in mbedtls_debug_print_psa_rsa()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
0c92466bb0 library: debug: rename len as bitlen in mbedtls_debug_print_integer()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00