32004 Commits

Author SHA1 Message Date
Ronald Cron
550a18d4d6 Move Mbed TLS crypto headers
Move all the header files (roughly the crypto
and platform ones) necessary to build the
crypto library to
tf-psa-crypto/drivers/builtin/include/mbedtls.

Exceptions:
. some configuration related files that will not
be necessary anymore when the work on the
configuration file(s) is completed.
. build_info.h as TF-PSA-Crypto will have its
own when we had its CMake build system.

For the time being all headers are kept public
but eventually all headers in
tf-psa-crypto/drivers/builtin/include/mbedtls
will be private and the ones that remain
public (e.g. lms.h, pk.h probably ...) will be
moved to tf-psa-crypto/include/tf-psa-crypto/.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2024-07-01 14:59:35 +02:00
Janos Follath
57c6651bfc
Merge pull request #1248 from eleuzi01/issue-1234
Clean up constant-flow memsan testing
2024-07-01 10:42:23 +01:00
Elena Uziunaite
66ea31ccd0 Clean up constant-flow memsan testing
Disable asm in memsan constant-flow testing and adjust
test_suit_bignum_core.function accordingly

Signed-off-by: Elena Uziunaite <elena.uziunaite@arm.com>
2024-06-28 14:54:09 +01:00
Sam Berry
4beeb0ce66 Add TLS: password protected... to ignored_tests list
Signed-off-by: Sam Berry <sam.berry@arm.com>
2024-06-28 14:46:35 +01:00
Gilles Peskine
a9e7ac9811 Improve description of who is affected
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2024-06-27 10:59:55 +02:00
Gilles Peskine
db81d7efb0 More diversified sizes in tests
Test the minimum size that caused an overflow in all configurations,
and also a mostly arbitrary larger size.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2024-06-27 10:47:47 +02:00
Gilles Peskine
6bba0a8355 Fix stack buffer overflow in ECDSA signature format conversions
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2024-06-27 08:55:56 +02:00
Sam Berry
8121879b3a Reverted requires_cipher_enabled AES
Signed-off-by: Sam Berry <sam.berry@arm.com>
2024-06-26 13:53:47 +01:00
Tom Cosgrove
c4dfc08464
Merge pull request #9310 from valeriosetti/psasim_more_aut_tests
psasim: complete support of PSA functions in `psasim` and add basic "smoke test" applications
2024-06-26 11:46:25 +00:00
Gilles Peskine
7b6ddfcd25 psa_cipher_decrypt CCM*: fix rejection of messages shorter than 3 bytes
Credit to Cryptofuzz. Fixes #9314.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2024-06-26 13:16:33 +02:00
Janos Follath
d1615b814a
Merge pull request #1241 from Mbed-TLS/change-mpi-exp-mod-to-constant-time
Change mbedtls_mpi_core_exp_mod() to constant time
2024-06-26 11:54:08 +01:00
Ronald Cron
f0481f562a
Merge pull request #9258 from tom-daubney-arm/drop_padlock_support
Drop support for VIA Padlock
2024-06-26 07:36:04 +00:00
Waleed Elmelegy
e2a6aa5369 Improve comments explaining legacy_methods_compression handling
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2024-06-25 18:16:16 +01:00
Thomas Daubney
e92adafd2d Remove mention of driver from ChangeLog
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
2024-06-25 16:48:04 +01:00
Thomas Daubney
f57a352a9d Remove superfluous brackets
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
2024-06-25 15:23:57 +01:00
Thomas Daubney
4e5d183d78 Correct pluralisation errors in comments
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
2024-06-25 15:21:48 +01:00
Thomas Daubney
197536d13a Improve ChangeLog wording
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
2024-06-25 15:19:40 +01:00
Valerio Setti
4848f9d64f psasim: fix max line length in generated files
Prevent generated files from having lines longer than 100 chars which
would trigger CI failures on code style checks.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:18:01 +02:00
Valerio Setti
9dc928990f psasim: add AUT for asymmetric encryption/decryption
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:17:51 +02:00
Valerio Setti
e9829e59c5 psasim: add AUT for cipher encryption/decryption
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:17:32 +02:00
Valerio Setti
87be9db668 psasim: add AUT for key derivation
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:17:32 +02:00
Valerio Setti
a06b22d709 psasim: add AUT for symmetric encryption/decryption
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:17:13 +02:00
Valerio Setti
bb1502b804 psasim: add AUT for PSA sign and verify
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:16:50 +02:00
Valerio Setti
6d6fe8b2d5 psasim: add AUT for key generation and raw key agreement
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:16:39 +02:00
Valerio Setti
f79e17a3d5 psasim: add AUT for MAC
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:16:25 +02:00
Valerio Setti
25afdc1309 psasim: add AUT for psa_generate_random()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:16:00 +02:00
Valerio Setti
5beb236835 psasim: merge all AUT programs into a single executable
This makes both building and testing much faster.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-25 14:15:30 +02:00
Waleed Elmelegy
7ac7f82053 Change mpi_core_exp_mod() constant time testing to be clearer
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2024-06-25 09:51:37 +00:00
Waleed Elmelegy
7b3024e791 Change mbedtls_mpi_core_exp_mod to constant time
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2024-06-25 09:51:37 +00:00
Waleed Elmelegy
0a9e8a3a18 Correct a small typo in ssl_tls13_parse_client_hello()
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2024-06-25 10:22:49 +01:00
Janos Follath
90b035e823
Merge pull request #1240 from Mbed-TLS/change-mpi-montmul-to-constant-time
Change mbedtls_mpi_core_montmul () to constant time
2024-06-25 09:41:10 +01:00
Thomas Daubney
1d08e2f2bc Change guard implementation
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>
2024-06-25 09:18:20 +01:00
Waleed Elmelegy
80ab4f3886 change montmul constant time testing to be clearer
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2024-06-24 13:31:15 +00:00
Valerio Setti
fc37c10e0b psa: fix parameters' names of psa_key_derivation_verify_bytes()
PSA buffers and their length should follow a pattern for which
the latter is named after the former as <buffer_name>_length,
but this was not the case for psa_key_derivation_verify_bytes().

This makes life of crypto.h parsers (for automatic code generation)
harder. This commit aims at solving this problem.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2024-06-24 15:27:51 +02:00
Tom Cosgrove
dd48f0f23f
Merge pull request #8389 from daantimmer/patch-1
Use CMAKE_C_SIMULATE_ID when available to determine compiler
2024-06-24 11:28:39 +00:00
Paul Elliott
d9392f0fdd
Merge pull request #9250 from eleuzi01/bug-9029
Fix compiler warnings in test_suite_pk.function
2024-06-24 10:41:55 +00:00
Manuel Pégourié-Gonnard
82658eb90c
Merge pull request #9138 from valeriosetti/issue9126
Do not perform adjustments on legacy crypto from PSA, when MBEDTLS_PSA_CRYPTO_CLIENT && !MBEDTLS_PSA_CRYPTO_C
2024-06-24 07:30:32 +00:00
Tom Cosgrove
d32fac276d psasim: have the generator script check for type = "void" rather than name = "(void)"
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:03:01 +02:00
Tom Cosgrove
4d8d5569d8 psasim: add support for psa_reset_key_attributes()
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:10 +02:00
Tom Cosgrove
feb021695a psasim: add support for psa_copy_key()
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:10 +02:00
Tom Cosgrove
05c99e13e6 psasim: add support for psa_{sign,verify}_hash_xxx() and get/set max ops
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:09 +02:00
Tom Cosgrove
9b10cf7e39 psasim: add support for PSA functions that return uint32_t or void
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:08 +02:00
Tom Cosgrove
1a8b805cf5 psasim: add support for key functions that don't need psa_key_attributes_t
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:08 +02:00
Tom Cosgrove
8f1c913e38 psasim: add support for psa_asymmetric_{encrypt,decrypt}() to the simulator
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:07 +02:00
Tom Cosgrove
6add43aac8 psasim: add support for psa_{sign,verify}_{message,hash}() to the simulator
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:06 +02:00
Tom Cosgrove
5d4b9cb2e2 psasim: add support for psa_generate_key*() to the simulator
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:06 +02:00
Tom Cosgrove
c3236b85da psasim: add support for psa_key_derivation_xxx() and psa_raw_key_agreement() to the simulator
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:05 +02:00
Tom Cosgrove
623fcb37d6 psasim: add the ability to serialise psa_key_production_parameters_t
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:04 +02:00
Tom Cosgrove
a2d81c9fb6 psasim: psa_key_derivation_verify_bytes() doesn't follow the naming convention for a buffer, so override
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:04 +02:00
Tom Cosgrove
c6d2e768d6 psasim: use ser_params and ser_result variable names in client; 'params' is needed by some PSA functions
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
2024-06-24 08:02:03 +02:00