lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-12-06 12:00:59 +03:00
Code Activity

Merge pull request #10519 from valeriosetti/issue568-mbedtls

Browse Source 
[mbedtls] Remove support for secp192[k|r]1 curves
This commit is contained in:
David Horstmann
2025-11-24 11:17:18 +00:00
committed by GitHub
parent 3057ea0288 65ec4cc771
commit caaa93884c
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
library/mbedtls_check_config.h
View File

@@ -42,9 +42,7 @@
defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512) || \
defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255) || \
defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448) || \
defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192) || \
defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256) || \
defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192) || \
defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) || \
defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384) || \
defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)

12
tests/scripts/components-configuration-crypto.sh
View File

@@ -92,11 +92,13 @@ component_test_psa_crypto_without_heap() {
scripts/config.py unset-all "^PSA_WANT_ALG_RSA_"
# EC-JPAKE use calloc/free in PSA core
scripts/config.py unset PSA_WANT_ALG_JPAKE
# Enable p192[k|r]1 curves which are disabled by default in tf-psa-crypto.
# This is required to get the proper test coverage otherwise there are
# tests in 'test_suite_psa_crypto_op_fail' that would never be executed.
scripts/config.py set PSA_WANT_ECC_SECP_K1_192
scripts/config.py set PSA_WANT_ECC_SECP_R1_192
# Curves p192[k|r]1 were disabled by default in TF-PSA-Crypto 1.0 so they
# were enabled here in order to get full test coverage. Support for these
# curves has completely been removed, but due to interdependency between
# CIs (mbedtls vs tf-psa-crypto) we still need to keep these lines here for
# a while. They will be removed in #10518
scripts/config.py set PSA_WANT_ECC_SECP_K1_192 || true
scripts/config.py set PSA_WANT_ECC_SECP_R1_192 || true
scripts/config.py set TF_PSA_CRYPTO_ALLOW_REMOVED_MECHANISMS || true
# Accelerate all PSA features (which are still enabled in CRYPTO_CONFIG_H).