Gabor Mezei
b74ac66c8b
Update test wrapper functions for ciper buffer protection
...
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com >
2024-02-28 15:17:18 +00:00
Gabor Mezei
b8f97a1f3f
Add test wrapper functions for cipher buffer protection
...
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com >
2024-02-28 15:17:17 +00:00
Gilles Peskine
c0f7a8680f
mbedtls_ecp_write_key(): deprecate the old function
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-28 13:19:42 +01:00
Gilles Peskine
84b9f1b039
mbedtls_ecp_write_key_ext(): migrate internally
...
Stop using mbedtls_ecp_write_key() except to test it.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-28 13:19:42 +01:00
Gilles Peskine
e3fb4ccabf
mbedtls_ecp_write_key_ext(): new function
...
Same as mbedtls_ecp_write_key(), but doesn't require the caller to figure out
the length of the output and possibly distinguish between Weierstrass and
Montgomery curves.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-28 13:19:42 +01:00
Manuel Pégourié-Gonnard
7f523bf9eb
Merge pull request #8845 from gilles-peskine-arm/ecp-write-doc-3.6
...
Document ECP write functions
2024-02-28 11:04:38 +00:00
Valerio Setti
b484e37d91
pk: fix alg selection in mbedtls_pk_sign_ext() for opaque keys
...
This commit also fixes pk_psa_wrap_sign_ext() setting the RSA padding
mode so that mbedtls_pk_get_psa_attributes() correctly guesses
the PSA alg to be used.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-02-28 09:44:35 +01:00
Gilles Peskine
2f107ae000
Don't access psa_key_attributes_t.core
...
Access the fields of `psa_key_attributes_t` directly rather than through the
`core` field. This makes the `core` field obsolete.
This commit is fully automated:
```
git ls-files '*.h' '*.c' '*.function' '*.jinja' | xargs perl -l -i -pe '$core = qr/\b(core\b|MBEDTLS_PRIVATE\(core\))/; s/->$core\./->/g; s/&(\w+)\.$core\./&$1./g; s/(\w+)\.$core/$1/g'
```
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-28 01:30:24 +01:00
Valerio Setti
23e637a7c7
test_suite_pk: initialize all PSA key IDs and attributes
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-02-27 13:56:57 +01:00
Valerio Setti
a9de9445b1
ssl_helpers: minor fix in mbedtls_test_ssl_endpoint_certificate_init()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-02-27 13:56:09 +01:00
Tom Cosgrove
ca21b241bd
Merge pull request #8840 from gilles-peskine-arm/domain_parameters-remove
...
Remove domain parameters
2024-02-27 10:36:51 +00:00
Valerio Setti
1fa2f6e9af
test: remove usage of mbedtls_pk_wrap_as_opaque() from tests
...
This is replaced with: mbedtls_pk_get_psa_attributes() +
mbedtls_pk_import_into_psa() + mbedtls_pk_setup_opaque().
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-02-27 09:23:35 +01:00
Dave Rodgman
08b81bf1e8
Test all unroll variations
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 18:43:22 +00:00
Dave Rodgman
2f94766a61
Send printed command to stderr
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:30:56 +00:00
Dave Rodgman
67126bbcea
remove trailing space from printed command
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:30:37 +00:00
Dave Rodgman
dbc2e8d4cc
Improve simplified quoting
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:29:31 +00:00
Dave Rodgman
bdf0a6d431
remove shebang from quiet
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:29:10 +00:00
Dave Rodgman
d0e3827ea2
Improve docs
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:28:56 +00:00
Dave Rodgman
c7f05490bb
Quote directory name from cmake wrapper
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:28:42 +00:00
Dave Rodgman
30483dccc0
Undo not-needed change
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:28:13 +00:00
Dave Rodgman
a9e8dbed14
Allow wrappers to be missing; quote directory name from make
...
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com >
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 17:27:18 +00:00
David Horstmann
075c5fb76f
Generate test wrappers for psa_generate_random()
...
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2024-02-26 17:12:34 +00:00
Thomas Daubney
4a46d73bb0
Suppress pylint
...
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com >
2024-02-26 13:49:26 +00:00
Dave Rodgman
e03088b29e
Avoid infinite loop
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 12:48:49 +00:00
Dave Rodgman
98a79cdb23
Extract common parts of quiet wrapper
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 12:38:45 +00:00
Dave Rodgman
00bc790d79
Tidy up quiet wrappers
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 11:43:11 +00:00
Dave Rodgman
219006329d
Move quiet wrapper setup
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-26 11:41:19 +00:00
Tom Cosgrove
f4a200f106
Merge pull request #8838 from paul-elliott-arm/improve_test_data_accessors
...
Improve test info data accessors
2024-02-26 11:22:20 +00:00
Gilles Peskine
4c32b69f37
Ignore domain parameters in RSA key generation
...
Remove the ability to select a custom public exponent via domain parameters
in RSA key generation. The only way to select a custom public exponent is
now to pass custom production parameters to psa_generate_key_ext().
A subsequent commit will remove domain parameters altogether from the API,
thus this commit does not bother to update the documentation.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-26 08:50:38 +01:00
Gilles Peskine
0f63028809
Merge pull request #8815 from gilles-peskine-arm/psa_generate_key_ext-prototype
...
Introduce psa_generate_key_ext
2024-02-26 07:16:49 +00:00
Paul Elliott
9011dae0c1
Improve documentation / comments
...
Signed-off-by: Paul Elliott <paul.elliott@arm.com >
2024-02-24 10:57:22 +00:00
Tom Cosgrove
817772a6ca
Merge pull request #8716 from mschulz-at-hilscher/feature/gcm_largetable
...
Use large GCM tables
2024-02-23 16:25:38 +00:00
tom-daubney-arm
5cd611d144
Merge branch 'development-restricted' into mac_buffer_protection
...
Signed-off-by: tom-daubney-arm <74920390+tom-daubney-arm@users.noreply.github.com >
2024-02-22 15:26:06 +00:00
Gilles Peskine
673461c389
Improve validation in mpi_exp_mod_min_RR
...
Check that the test case is hitting what it's supposed to hit, and that the
library takes the expected defensive measure.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-22 15:22:10 +00:00
Janos Follath
fdab786852
Use TEST_EQUAL instead of TEST_ASSERT in new code
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2024-02-22 15:19:13 +00:00
Ronald Cron
dcb09ca6df
tests: write early data: Improve get_early_data_status testing
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-22 12:22:59 +01:00
Ronald Cron
7d158f41ca
tests: read early data: Use write API to send early data
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-22 11:46:08 +01:00
Ronald Cron
110303fbe5
tests: read early data: Add no early data indication sent scenario
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-22 11:46:02 +01:00
Ronald Cron
86d288c0d4
tests: ssl: Rename tls13_early_data to tls13_read_early_data
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-22 11:28:29 +01:00
Ronald Cron
9f2c3c09df
tls13: cli: Add mbedtls_ssl_get_early_data_status() API
...
Add mbedtls_ssl_get_early_data_status() API and its
testing.
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-21 17:44:51 +01:00
Ronald Cron
0004600702
tests: write early data: Inverse loop over state logic
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-21 17:44:45 +01:00
Ronald Cron
bf5e909467
tests: write early data: Check we can complete handshake after writing
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-21 17:42:59 +01:00
Ronald Cron
d4069247b8
Improve comments/documentation
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-02-21 17:37:26 +01:00
Gilles Peskine
0aab69d2eb
Merge pull request #8807 from gilles-peskine-arm/pk_import_into_psa-implement_import
...
Implement mbedtls_pk_import_into_psa
2024-02-21 15:45:17 +00:00
Janos Follath
0902572aa4
Fix style
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2024-02-21 11:50:25 +00:00
Janos Follath
86258f51b5
Exp mod: handle negative zero
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2024-02-21 11:25:41 +00:00
Gilles Peskine
dd49c739f0
Merge remote-tracking branch 'development' into pk_import_into_psa-implement_import
...
Conflicts:
* tests/suites/test_suite_pk.function: consecutive changes to the
depends_on line of pk_sign_verify and its argument list.
2024-02-21 12:10:40 +01:00
Manuel Pégourié-Gonnard
0ecb5fd6f5
Merge pull request #8574 from ronald-cron-arm/ssl-tickets
...
Fix and align ticket age check in ssl_ticket.c for TLS 1.2 and TLS 1.3
2024-02-21 09:38:46 +00:00
Gilles Peskine
23605d19d9
More renaming: method -> production parameters
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-02-20 17:10:56 +01:00
David Horstmann
cf3457ef26
Merge pull request #1132 from davidhorstmann-arm/copying-aead
...
Copy buffers in AEAD
2024-02-20 16:07:30 +00:00