lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-10-31 21:50:31 +03:00
Code Activity
25,743 Commits 176 Branches 276 Tags
08691679b51c3e8e985c3b29056bb85ebdf1e031
Commit Graph

9159 Commits

Author SHA1 Message Date
Dave Rodgman
f33c7e3344 Code style 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 15:34:43 +01:00
Dave Rodgman
9145dc46ed Ensure variables initialised 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 15:00:07 +01:00
Dave Rodgman
c07df36f9e More fixes for big-endian 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 14:54:12 +01:00
Andrzej Kurek
06969fc3a0 Introduce a test for a sw implementation of inet_pton 
Create a bypass define to simulate platforms
without AF_INET6.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2023-04-13 09:20:15 -04:00
Andrzej Kurek
fe050815c8 Introduce an additional test for IPV4 parsing 
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2023-04-13 09:20:05 -04:00
Andrzej Kurek
e404612580 Replace old macro in test_suite_x509parse 
MD_CAN_SHAXXX should be now used.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
 2023-04-13 09:19:58 -04:00
Dave Rodgman
b169671c50 Tidy-up 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 13:46:46 +01:00
Dave Rodgman
df2d5b1ca1 Fix compile error 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 13:41:09 +01:00
Dave Rodgman
0a05e703db Tidy-up 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 13:19:40 +01:00
Dave Rodgman
9dc8b6a6a2 Test fixes for big-endian 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
 2023-04-13 12:53:35 +01:00
Gabor Mezei
00c9c7a81b Remove unneeded limb variables 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2023-04-13 13:13:14 +02:00
Gabor Mezei
b70f5f1881 Add checks to guarantee positive input parameters 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2023-04-13 13:12:00 +02:00
Gabor Mezei
b86ead3cb2 Add generated tests for ecp_mod_p192k1 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2023-04-13 12:47:59 +02:00
Pengyu Lv
7725c1d2a9 cert_audit: Output line/argument number for *.data files 
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-04-13 15:55:30 +08:00
Pengyu Lv
57240958ed cert_audit: Make FILE as positional argument 
Make FILE as positional argument so that we can
pass multiple files to the script. This commit
also contains some help message improvements.

Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-04-13 15:46:14 +08:00
Janos Follath
6d3ec55849 Merge pull request #7329 from minosgalanakis/ecp/unify_test_cases 
ecp: Unify test cases
 2023-04-12 13:23:16 +01:00
Minos Galanakis
6d2ee70e75 test_suite_ecp: Removed MBEDTLS_ECP_DP_SECP_GENERIC_ENABLED dependency. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2023-04-12 09:44:02 +01:00
Mukesh Bharsakle
b17f6a211d Updating makefile to document key generation 
Signed-off-by: Mukesh Bharsakle <bharsaklemukesh975@gmail.com>
 2023-04-12 00:05:45 +01:00
Stephan Koch
25c739baf7 Fix PSA AEAD ChaCha20 test dependency. 
Signed-off-by: Stephan Koch <koch@oberon.ch>
 2023-04-11 17:54:31 +02:00
Valerio Setti
9cea093700 test: resolve remaining disparities in test_suite_ssl 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 16:19:11 +02:00
Glenn Strauss
7bd00e0708 use MBEDTLS_PK_CAN_ECDSA_SOME 
instead of MBEDTLS_ECDSA_C in test data dependencies

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
 2023-04-11 08:29:43 -04:00
Glenn Strauss
700ffa0744 use MBEDTLS_HAS_ALG_SHA_256_VIA_MD_OR_PSA_BASED_ON_USE_PSA 
instead of MBEDTLS_SHA256_C in test data dependencies

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
 2023-04-11 08:29:42 -04:00
Glenn Strauss
6f545acfaf Add mbedtls_x509_crt_parse_cn_inet_pton() tests 
Extended from https://github.com/Mbed-TLS/mbedtls/pull/2906
contributed by Eugene K <eugene.kobyakov@netfoundry.io>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
 2023-04-11 08:29:42 -04:00
Eugene K
3208b0b391 add IP SAN tests changes per mbedTLS standards 
Signed-off-by: Eugene K <eugene.kobyakov@netfoundry.io>
 2023-04-11 08:29:42 -04:00
Valerio Setti
a9aafd4807 test: revert undesired debug change in ssl-opt 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 12:30:45 +02:00
Valerio Setti
0c477d32e2 test: include also test_suite_ecp for the coverage analysis 
Only some test cases are skipped for which ECP_C is mandatory,
but the other ones are included.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 11:33:50 +02:00
Valerio Setti
6c496a1553 solve disparities for ECP_LIGHT between ref/accel 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 11:33:50 +02:00
Valerio Setti
5278986d2d psa: fix ECP guards for key derivation 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 11:33:50 +02:00
Valerio Setti
d49cbc1493 test: fix remaining failures in test due to the ECP_LIGHT symbol 
Changes in test_suite_psa_crypto are to enforce the dependency
on ECP_C which is mandatory for some key's derivation.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 11:33:50 +02:00
Valerio Setti
29b395c854 test: let test_psa_crypto_config_accel_all_ec_algs_use_psa use ECP_LIGHT 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 11:33:50 +02:00
Manuel Pégourié-Gonnard
6a327a5fdc Merge pull request #7393 from valeriosetti/issue7389 
PK tests: use PSA to generate keypairs when USE_PSA is enabled
 2023-04-11 11:27:14 +02:00
Pengyu Lv
3179232211 cert_audit: Disable pylint error for importing cryptography 
This is to make CI happy. The script requires cryptography
>= 35.0.0, which is only available for Python >= 3.6. But
both ubuntu-16.04 and Travis CI are using Python 3.5.x.

Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-04-11 16:30:54 +08:00
Gilles Peskine
02c52a08cd Merge pull request #7287 from yanrayw/7285-followup-of-PR6500 
6500 follow-up: enhancements to the new ssl_helpers test module
 2023-04-11 09:31:37 +02:00
Valerio Setti
7816c24f2d test: fix guards position in test_suite_pk 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 09:16:24 +02:00
Valerio Setti
b3f20da313 test: fix error handling in the new pk_genkey_ec() function 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 09:16:24 +02:00
Valerio Setti
12a063abb7 test: use proper macros for PSA init/done 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 09:16:24 +02:00
Valerio Setti
0b304421d8 ecp: revert changes to ECP module and related tests/programs 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 09:16:24 +02:00
Valerio Setti
b6891b13f6 pk: add alternate function for keypair generation using PSA 
Instead of using the legacy mbedtls_ecp_gen_keypair() which makes
use of ECP's math, when USE_PSA_CRYPTO is enabled then the new
function pk_genkey_ec() is used in test_suite_pk.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-11 09:16:24 +02:00
Manuel Pégourié-Gonnard
b16a50eeab Merge pull request #7392 from valeriosetti/issue7388 
PK: use PSA to complete public key when USE_PSA is enabled
 2023-04-11 09:09:06 +02:00
Pengyu Lv
cb8fc3275a cert_audit: Fill validity dates in AuditData constructor 
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-04-11 15:05:29 +08:00
Jerry Yu
c9c3e62b3e workaround the assert fail with tollerance 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2023-04-11 14:08:23 +08:00
Pengyu Lv
ebf011f43e cert_audit: Introduce not-[before|after] option 
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-04-11 14:07:50 +08:00
Jerry Yu
fce8577f73 try to reproduce random assert fail 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2023-04-11 14:07:38 +08:00
Mukesh Bharsakle
1a4cc5e92c updating test-ca.key to use AES instead of DES 
Signed-off-by: Mukesh Bharsakle <bharsaklemukesh975@gmail.com>
 2023-04-10 14:05:42 +01:00
Pengyu Lv
30f2683d18 cert_audit: Parse more information from test suite data file 
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
 2023-04-07 18:04:07 +08:00
Manuel Pégourié-Gonnard
f740767c00 Merge pull request #7391 from valeriosetti/issue7387 
PK: don't use mbedtls_ecp_check_pub_priv() when USE_PSA is enabled
 2023-04-07 10:17:18 +02:00
Valerio Setti
3fddf250dc test: use proper macros for PSA init/done 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-07 08:45:34 +02:00
Valerio Setti
34f6755b34 pkparse: add new function for deriving public key from private using PSA 
Instead of using the legacy mbedtls_ecp_mul() function which makes use of
ECP's math, this commit adds a new function named pk_derive_public_key()
which implements the same behavior using PSA functions.
The flow is simple:
- import the private key into PSA
- export its public part

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2023-04-07 08:45:34 +02:00
Minos Galanakis
92278dc407 test_suite_ecp: Updated dependency macros for ecp_raw_generic. 
This patch introduces a new local hash define of
`MBEDTLS_ECP_DP_SECP_GENERIC_ENABLED` to replace the
removed curve specific macros, introduced in upstream.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2023-04-06 16:27:44 +01:00
Minos Galanakis
1358648f77 test_suite_ecp: Introduced ecp_mod_p_generic_raw 
This patch replaces similiarly structured test functions
for:

* MBEDTLS_ECP_DP_SECP192R1
* MBEDTLS_ECP_DP_SECP224R1
* MBEDTLS_ECP_DP_SECP256R1
* MBEDTLS_ECP_DP_SECP384R1
* MBEDTLS_ECP_DP_BP512R1R1

with a more generic version, which adjusts the parameters, based on the `curve_id` field,
provided by the testing data.

The python test framework has been updated to provide that extra field.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2023-04-06 16:27:12 +01:00