1
0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-25 02:02:03 +03:00
Commit Graph

33505 Commits

Author SHA1 Message Date
7c536dab54 Merge pull request #10231 from ronald-cron-arm/mbedtls-build-info
Preparatory work for the resolution of #10022
2025-06-19 14:43:03 +00:00
a9dc998fb9 Merge pull request #10235 from mpg/cleanup-oid
Clean up after crypto hides its OID module
2025-06-19 12:30:07 +00:00
838a114f05 Remove MBEDTLS_OID_C from sample configs
This option no longer exists (and there's a Changelog entry saying so).

After this commit, git grep -l -w MBEDTLS_OID_C shows the only remaining
occurences are in text files (.txt, .md).

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:16:38 +02:00
6a3b877d60 Remove OID from generate_error.pl
There is no longer any associated error code, so this commit does not
change the generated file in any way.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:14:02 +02:00
d9fa0755d9 Update tf-psa-crypto
We need #311

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:11:55 +02:00
4ccde0c8e5 Merge pull request #10225 from valeriosetti/issue229-mbedtls
[development] Move Everest headers to a private subdirectory (1/2)
2025-06-19 06:47:21 +00:00
2d7ded653f scripts: generate_visualc_files: fix include_directories
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-18 10:01:29 +02:00
f5e27fa361 Revert "update further everest paths"
This reverts commit 243b54f386.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 23:06:24 +02:00
26893d99f6 Revert "CMakeLists: prepare for Everest headers relocation"
This reverts commit 653a86dc2a.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 23:04:46 +02:00
d1e4ccf0a0 cmake: Fix library order
A library that depends on another one should come first
in the list of libraries to link against.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-17 09:48:05 +02:00
e4960bc159 framework: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
3150913be7 Revert "update framework submodule to pull in everest changes"
This reverts commit 83e5a7bf75.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
653a86dc2a CMakeLists: prepare for Everest headers relocation
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
a3b562aa17 programs: test: Let zeroize be an Mbed TLS test program
In TF-PSA-Crypto there is the crypto specific one.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-16 15:55:05 +02:00
0815c67ce1 programs: pkey: Use tf-psa-crypto/build_info.h
pkey programs are crypto programs (only linked to
the TF-PSA-Crypto library) thus use the TF-PSA-Crypto
build-time configuration info file
tf-psa-crypto/build_info.h instead of the Mbed TLS one.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-16 15:54:49 +02:00
3de417fce2 scripts: generate_visualc_files.pl: prepare for Everest headers relocation
This change allows the Perl script to manage Everest headers in
tf-psa-crypto repo both before and after psa#235. Once psa#235 will be
merged this commit can be simplified, i.e. it will be returned to its
original state with paths of Everest headers updated.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-16 15:04:27 +02:00
48552b620d Merge pull request #10187 from valeriosetti/ecp-restartable-development
[development] Always enable MBEDTLS_PK_USE_PSA_EC_DATA + use PSA interruptible operations as backend for PK restartable ones
2025-06-16 07:24:50 +00:00
d177e3f5fc Merge pull request #1356 from Mbed-TLS/bugfix_1351_1352_1353_lms_drivers
Bugfix: lms/lmots driver hardening.
2025-06-13 15:48:29 +01:00
3a21cdfa5c Merge pull request #1354 from mpg/fix-asn1-store-named-data-null-deref-dev
Fix asn1 store named data null deref dev
2025-06-13 09:57:24 +02:00
b1d3e2e4e0 Merge pull request #9634 from gabor-mezei-arm/9144_update_depends.py_hashes_domain
Update the `hashes` domain to use PSA macros in `depends.py`
2025-06-13 07:25:04 +00:00
f5a63d1456 Fix invalid test data by aligning with 3.6
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-12 09:42:03 +02:00
dc82fa67c5 Keep only the X.509 part from the Changelog
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-12 09:42:03 +02:00
5f6310b65f Add ChangeLog entry
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-12 09:42:03 +02:00
d2262f2304 Uncomment tests now that crypto is fixed
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-12 09:42:03 +02:00
d1090d70ff Update crypto submodule
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-12 09:42:03 +02:00
d7d0acbeb6 tf-psa-crypto: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:40:35 +02:00
a81d6dfb05 tests|programs: remove usage of mbedtls_ecp_set_max_ops()
PK restartable operations are now implemented using PSA interruptible
ones, so mbedtls_ecp_set_max_ops() can be removed in favor of
psa_interruptible_set_max_ops().

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:39:18 +02:00
eaf578978e library: remove ECDSA_C dependency from ECP_RESTARTABLE
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:37:29 +02:00
c394fd0ebc library: debug: replace MBEDTLS_PK_USE_PSA_EC_DATA with PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY
MBEDTLS_PK_USE_PSA_EC_DATA is a legacy symbol that is used in 3.6 LTS
branch, but now it is assumed to be always true. It's only kept for
legacy reasons so it's better to replace it with
PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY instead.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:35:45 +02:00
ae89dcc4be library: tls12: remove usage of MBEDTLS_PK_USE_PSA_EC_DATA
PK module will now always use PSA storing pattern when working with
EC keys therefore MBEDTLS_PK_USE_PSA_EC_DATA is assumed to be always
enabled.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-12 06:21:30 +02:00
6ee4d9220e Fixed the same typo in ssl-opt.sh
Signed-off-by: Ari Weiler-Ofek <ari.weiler-ofek@arm.com>
2025-06-11 17:40:42 +01:00
c2b7f85747 Merge pull request #10206 from felixc-arm/doxygen-doxyfile-public-only
Doxygen: Only render public files
2025-06-11 16:01:07 +00:00
035247d46f Re-add doxygen/input to INPUT variable
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 11:07:10 +01:00
67f63821a5 Updated tf-psa-crypto pointer
Signed-off-by: Minos Galanakis <minos.galaanakis@arm.com>
2025-06-11 10:38:44 +01:00
1704578f2f Update tf-psa-crypto pointer to bring in doxygen pre-work
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 10:22:55 +01:00
4f94ae8baa Doxygen: only render public files
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 10:22:55 +01:00
c6654fc1b0 Replace MBEDTLS_ERR_ECP_IN_PROGRESS with alias PSA_OPERATION_INCOMPLETE in documentation
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-11 10:22:55 +01:00
96e17e8b36 Merge pull request #10204 from felixc-arm/remove-mbedtlsplatformc-requirements
Remove requirment on MBEDTLS_PLATFORM_C in configs
2025-06-11 08:22:43 +00:00
67aa959ea1 Fixed some minor typos in comments.
Signed-off-by: Ari Weiler-Ofek <ari.weiler-ofek@arm.com>
2025-06-10 16:59:44 +01:00
3795f8ab74 Remove temporary component created for SHA3 testing
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-10 15:40:53 +02:00
ef013a6970 Use PSA macros for the hashes domain
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-10 15:40:41 +02:00
c54da23c76 Update tf-psa-crypto pointer
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-10 13:45:34 +01:00
43c891ae98 Remove requirement on MBEDTLS_PLATFORM_C from configs
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-10 13:45:34 +01:00
cdd91da1af Merge pull request #10145 from gabor-mezei-arm/remove_sha3_config_option
Remove `MBEDTLS_SHA3_C` config option
2025-06-10 09:57:22 +00:00
2649800f7c Do not disable PSA_WANT_SHA3 macros when driver accel is used
The SW implementation is guarded with the `MBEDTLS_PSA_BUILTIN_ALG_SHA3`
macros and not enabled when driver accelaration is set. So disabling
the `PSA_WANT` macros is not needed.

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-05 14:01:30 +02:00
c45f3d6a1d Update PSA repo
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2025-06-05 14:01:25 +02:00
83e5a7bf75 update framework submodule to pull in everest changes
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
de864e7a1c Remove ChangeLog as it is not required
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
40bc348963 corrected ChangeLog
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00
142347383f Add ChangeLog for removal of everest headers
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-06-05 11:26:51 +01:00