Valerio Setti
cd1b7ffa70
tests: x509write: replace MBEDTLS_ECDSA_DETERMINISTIC with PSA_WANT one
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-07-29 10:40:12 +02:00
minosgalanakis
d103046a59
Merge pull request #10324 from gilles-peskine-arm/query_config-glob-headers
...
query_config.fmt: glob headers instead of listing them explicitly
2025-07-28 13:25:51 +00:00
Gilles Peskine
bb8bafa5e5
Pacify uncrustify
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:23:05 +02:00
Gilles Peskine
4995d4435c
Don't incude auxiliary headers that have alternative versions
...
When compiling with `MBEDTLS_PSA_CRYPTO_PLATFORM_FILE`, we must not include
`<psa/crypto_platform.h`. Same with `MBEDTLS_PSA_CRYPTO_STRUCT_FILE` and
`<psa/crypto_struct.h>`.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:19:32 +02:00
Gilles Peskine
409c688c4b
Include mbedtls/platform_time.h conditionally on MBEDTLS_HAVE_TIME
...
Work around https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/393
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:17:57 +02:00
Gilles Peskine
1b4bfdf554
Add missing include
...
Fix compilation error when `mbedtls/oid.h` is included without having first
included `mbedtls/asn1.h`. Fix #10326
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:07:50 +02:00
Gilles Peskine
8b006ce95f
Invoke generate_query_config.pl from the root
...
Otherwise it can't find headers to include.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-25 19:51:17 +02:00
Gilles Peskine
c0a562c895
query_config.fmt: glob headers instead of listing them explicitly
...
This lets us remove or rename crypto headers without hassle, and means we
don't risk forgetting to add a new header.
Fix #10323
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-25 18:12:37 +02:00
Ronald Cron
b23424cc61
Merge pull request #10317 from ronald-cron-arm/legacy-crypto-options-cleanup
...
Clean-up following the removal of crypto config options but ECC ones
2025-07-25 15:11:34 +00:00
Gilles Peskine
3bb528d47d
Merge pull request #10205 from bjwtaylor/move-fuzz-progs-2
...
Tidy Up Dependencies and Paths
2025-07-25 13:21:09 +00:00
Gilles Peskine
a4bd67f3e7
Merge pull request #10274 from bjwtaylor/rename-mbedtls_pk_setup_opaque
...
Rename mbedtls_pk_setup_opaque to mbedtls_pk_wrap_psa
2025-07-25 13:20:42 +00:00
Ben Taylor
02c76ebb21
Add minor corrections to the fuzz Makefile
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 11:13:23 +01:00
Ben Taylor
361ce2b484
Rename mbedtls_pk_setup_opaque to mbedtls_pk_wrap_psa
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 08:25:28 +01:00
Ben Taylor
250e8b8b6d
Update submodule pointer
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 07:55:43 +01:00
Ben Taylor
4e85cbd227
update submodules to pull in previous PR's
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 07:51:35 +01:00
Ben Taylor
8beeed0462
Add further updates to paths
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 07:51:35 +01:00
Ben Taylor
60a5b32198
Correct onefile name
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 07:51:35 +01:00
Ben Taylor
52510b27fc
Update header names
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 07:51:35 +01:00
Ben Taylor
c7c480a95f
Revert temporary merge changes
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-24 07:51:35 +01:00
Ronald Cron
5eb9aba358
mbedtls_config.h: Update "requires" comments
...
Following the removal of the legacy hash, cipher,
CMAC, AEAD, and RSA configuration options in
TF-PSA-Crypto, update the "requires" comments that
referred to the removed options.
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
dfd501d3fb
depends.py: Adapt to the removal of legacy crypto config options
...
Adapt to the removal of the legacy hash, cipher,
cmac, aead and RSA configuration options.
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
fb03d1391b
depends.py: Remove cipher_padding domain
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
0668036ada
Replace MBEDTLS_AES_C
...
Replace the remaining instances of MBEDTLS_AES_C
as a configuration option.
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
e13c7015ea
all.sh: Remove unset of now removed legacy symmetric crypto options
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
892bb61294
all.sh: Remove unset of now removed legacy RSA config options
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
8719c2f00b
ssl_misc.h: Update PKCS1 dependencies
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Ronald Cron
772a8ad219
all.sh: Remove unset of now removed legacy hash config options
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-07-24 08:42:16 +02:00
Bence Szépkúti
722d982ab7
Merge pull request #10309 from bensze01/rename-tf-psa-crypto-common.h
...
Rename tf-psa-crypto/core/common.h
2025-07-23 14:27:00 +00:00
Bence Szépkúti
89becc987f
Update framework submodule
...
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-23 00:34:08 +02:00
Bence Szépkúti
e6167e7a51
Update tf-psa-crypto submodule
...
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-23 00:34:01 +02:00
Bence Szépkúti
27125ceacf
Update references to tf-psa-crypto/core/common.h
...
This commit was generated using the following command:
sed -i 's/\(^\|[^_]\)common\.h/\1tf_psa_crypto_common.h/g' \
$(git ls-files . \
':!:programs/fuzz' \
':!:tests/psa-client-server' \
':!:tf-psa-crypto' \
':!:framework') \
$(git grep -l 'tf-psa-crypto/core/common.h')
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-21 20:02:30 +02:00
Gilles Peskine
f2d4cbbb0e
Merge pull request #10276 from bjwtaylor/switch-to-mbedtls_pk_verify_new
...
Switch to mbedtls_pk_verify_new
2025-07-21 14:57:05 +00:00
Ben Taylor
5be8511151
Fix too many arguments in mbedtls_pk_verify_new
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-21 07:53:15 +01:00
Ben Taylor
0c787e3de8
Remove additional calls to mbedtls_pk_verify_ext
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-21 07:53:15 +01:00
Ben Taylor
0de87611bb
Remove additional calls to mbedtls_pk_verify_ext
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-21 07:53:15 +01:00
Ben Taylor
306ffd3a36
Switch to mbedtls_pk_verify_new
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-21 07:53:15 +01:00
Ronald Cron
b5fd7b9a54
Merge pull request #10295 from gilles-peskine-arm/nv-seed-only-prepare-mbedtls
...
Allow builds with no RNG but entropy in an NV seed: prepare Mbed TLS
2025-07-18 11:56:41 +00:00
Gilles Peskine
4e9d91005f
Merge pull request #10272 from bjwtaylor/include-private-pk
...
include private pk.h internally
2025-07-18 05:20:27 +00:00
Bence Szépkúti
bdc0901f01
Merge pull request #10307 from amtkarm1/private-access-err-fix
...
Added a fix for the CI failure due to private access error
2025-07-17 21:49:04 +00:00
Ben Taylor
1030f80a0b
Add private include to additional files
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-17 15:22:08 +01:00
Ben Taylor
c801d3293e
include private pk.h internally
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-07-17 15:18:53 +01:00
Anton Matkin
375fab7c73
Added a fix for the CI failure due to private access error
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com>
2025-07-17 13:48:36 +02:00
Gilles Peskine
0b49112329
Merge pull request #10212 from bjwtaylor/remove-hkdf
...
Remove hkdf
2025-07-17 09:57:11 +00:00
Manuel Pégourié-Gonnard
d2c293bd0a
Merge pull request #10115 from bjwtaylor/move-fuzz-progs
...
remove fuzz_privkey.c and fuzz_pubkey.c
2025-07-17 09:36:02 +00:00
Gilles Peskine
6582237209
Merge pull request #10304 from davidhorstmann-arm/disambiguate-doxygen-filename
...
Disambiguate `version.h` in doxygen comment
2025-07-16 23:39:19 +00:00
Bence Szépkúti
05ffb5e817
Merge pull request #10302 from bensze01/freebsd
...
Clean up ci.requirements.txt
2025-07-16 18:48:41 +00:00
David Horstmann
901cca7bc3
Disambiguate version.h in doxygen comment
...
Specify mbedtls/version.h, since we are about to add
include/tf-psa-crypto/version.h.
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2025-07-16 15:35:00 +01:00
Ronald Cron
abafe32c79
Merge pull request #10297 from ronald-cron-arm/remove-legacy-crypto-options-preparation-1
...
Remove legacy crypto options preparation-1
2025-07-16 14:06:30 +00:00
Bence Szépkúti
5956d28c0b
Restrict CI-specific python requirements to Linux
...
The dependencies declared in ci.requirements.txt are only used in
scripts that we run on the Linux CI.
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-16 14:18:12 +02:00
Bence Szépkúti
9dda0ca195
Don't install cryptography on the FreeBSD CI
...
Recent versions of cryptography require a Rust toolchain to install on
FreeBSD, which we do not have set up yet.
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-16 13:33:17 +02:00