lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-11-15 15:21:08 +03:00
Code Activity
33,971 Commits 176 Branches 276 Tags
a2cba40df64847f68fe9276734dba3220df7d7bc
Commit Graph

1759 Commits

Author SHA1 Message Date
Minos Galanakis
a2cba40df6 prepare_release.sh: modify submodule files recursively 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-30 10:00:22 +00:00
Minos Galanakis
bdb1dcbdb6 prepare_release.sh: simplified regex 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-30 10:00:22 +00:00
Minos Galanakis
958d9d97a4 prepare_release.sh: Added documentation 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-30 09:58:17 +00:00
Minos Galanakis
c4d4f6b4a1 prepare_release.sh: Removed -r/-u modes 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-22 11:51:39 +01:00
Minos Galanakis
61fdef52a3 prepare_release.sh: Adjusted psed logic. 
Fixed double quoting in sed.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-22 11:17:32 +01:00
Minos Galanakis
0b7966649f prepare_release.sh:Removed Makefiles modification 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-21 10:55:27 +01:00
Minos Galanakis
d995a21b6a prepare_release.sh: Adjusted logic 
- Introduced a new -r to explicitely request project
  modification for release
- Changed the default behaviour to print_help when invoked
  without arguments

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-21 10:54:17 +01:00
Minos Galanakis
1f95b78310 prepare_release.sh: Limited .gitignore to current project 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-20 16:24:29 +01:00
Minos Galanakis
d0881eda4e prepare_release.sh: Added psed helper function 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-20 16:11:05 +01:00
Ronald Cron
6a9be3de1f Merge pull request #10416 from bensze01/abicheck-worktree-submodules 
Use submodule work trees during ABI check
 2025-09-30 07:32:22 +00:00
Bence Szépkúti
9defedb833 Fix comment too long for pylint 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-29 14:25:12 +02:00
David Horstmann
ee1991a387 Merge pull request #10408 from ronald-cron-arm/historical-libmbedcryto 
Restore historical libmbedcrypto.* libraries
 2025-09-29 08:41:06 +00:00
Bence Szépkúti
0f2a4f3d1f Prevent unnecessary submodule fetches 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-26 20:27:57 +02:00
Bence Szépkúti
8d95062aeb Eliminate use of git worktree prune 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-26 15:44:11 +02:00
Bence Szépkúti
dc88f6e1f3 Use f-string literal 
This makes path-construction a bit more readable

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-26 15:37:42 +02:00
Gilles Peskine
3415d2dd5f Merge pull request #10306 from gilles-peskine-arm/config-error-on-removed-options-mbedtls 
Mechanism to error out on removed configuration options
 2025-09-25 16:35:51 +00:00
Bence Szépkúti
effa534e71 Use worktrees instead of fetches for submodules 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-25 15:51:07 +02:00
Gilles Peskine
c45d9ac4c2 Allow setting removed options that are now always on 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
8e44a94d39 Automatically generate checkers for removed options 
Read the list of historical config options in 3.6, compare that to 1.0/4.0
and emit the appropriate checkers.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
24273c06db Checks for crypto options or internal macros set in mbedtls 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Ronald Cron
3a252dda0c Adapt code_size_compare.py to make deprecation and submodules 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 16:31:12 +02:00
Ronald Cron
37148d0fe3 Adapt memory.sh to make deprecation 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 12:39:29 +02:00
Ronald Cron
15cd8b0a63 Adapt footprint.sh to make deprecation 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 12:38:35 +02:00
Gilles Peskine
caaf52d6d0 Merge pull request #10391 from bjwtaylor/remove-deprecated-compilation-options-2 
Remove deprecated compilation options 2
 2025-09-23 08:40:11 +00:00
Ronald Cron
e7bac84a22 Remove the generation of MS visual studio files 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
31f63210ec Deprecate Make 
Move and rename the root Makefile to
scripts/legacy.make. That way running
make from the root fails.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
bb02ec121e Prepare abi_check.py to scripts/legacy.make 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
879cba1a67 cmake: Introduce version and soversion variables 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 14:34:55 +02:00
Ben Taylor
62491a9327 Revert changes to config.py after dependencies have been merged 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-22 09:07:12 +01:00
Gilles Peskine
3374f6e90b Generate checks for bad options in the config file 
Just a proof-of-concept for now. Interesting checks will come later.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-19 13:36:24 +02:00
Ronald Cron
919a1e4e22 Cleanup following the removal of RSA legacy options 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ronald Cron
2b7f59535f Remove completely MBEDTLS_PLATFORM_GET_ENTROPY_ALT 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ronald Cron
9a10e398fa Simplify footprint.sh 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-10 17:12:05 +02:00
Ronald Cron
b01be14907 Fix footprint.sh 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-10 15:23:32 +02:00
Ronald Cron
ab7610c318 Cleanup following the removal of entropy options 
Cleanup following the removal in TF-PSA-Crypto of:
- MBEDTLS_NO_PLATFORM_ENTROPY
- MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
- MBEDTLS_ENTROPY_HARDWARE_ALT
- MBEDTLS_ENTROPY_MIN_HARDWARE

Only MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES was still
present in Mbed TLS.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-10 15:23:32 +02:00
Ronald Cron
eb16a9d9ea Prepare for the removal of MBEDTLS_PLATFORM_GET_ENTROPY_ALT 
We cannot remove it completely yet.
It must remain in config.py so that it is not
included in the full configuration.
A temporary exception is required for it in
analyze_outcomes.py.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-10 15:23:32 +02:00
Minos Galanakis
906950d8dc config/depends.py: Removed legacy options. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-08-21 15:57:00 +01:00
Gilles Peskine
bb8bafa5e5 Pacify uncrustify 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-26 00:23:05 +02:00
Gilles Peskine
4995d4435c Don't incude auxiliary headers that have alternative versions 
When compiling with `MBEDTLS_PSA_CRYPTO_PLATFORM_FILE`, we must not include
`<psa/crypto_platform.h`. Same with `MBEDTLS_PSA_CRYPTO_STRUCT_FILE` and
`<psa/crypto_struct.h>`.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-26 00:19:32 +02:00
Gilles Peskine
409c688c4b Include mbedtls/platform_time.h conditionally on MBEDTLS_HAVE_TIME 
Work around https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/393

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-26 00:17:57 +02:00
Gilles Peskine
8b006ce95f Invoke generate_query_config.pl from the root 
Otherwise it can't find headers to include.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-25 19:51:17 +02:00
Gilles Peskine
c0a562c895 query_config.fmt: glob headers instead of listing them explicitly 
This lets us remove or rename crypto headers without hassle, and means we
don't risk forgetting to add a new header.

Fix #10323

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-25 18:12:37 +02:00
Bence Szépkúti
27125ceacf Update references to tf-psa-crypto/core/common.h 
This commit was generated using the following command:

sed -i 's/\(^\|[^_]\)common\.h/\1tf_psa_crypto_common.h/g' \
    $(git ls-files .                                       \
        ':!:programs/fuzz'                                 \
        ':!:tests/psa-client-server'                       \
        ':!:tf-psa-crypto'                                 \
        ':!:framework')                                    \
    $(git grep -l 'tf-psa-crypto/core/common.h')

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-07-21 20:02:30 +02:00
Ronald Cron
b5fd7b9a54 Merge pull request #10295 from gilles-peskine-arm/nv-seed-only-prepare-mbedtls 
Allow builds with no RNG but entropy in an NV seed: prepare Mbed TLS
 2025-07-18 11:56:41 +00:00
Gilles Peskine
0b49112329 Merge pull request #10212 from bjwtaylor/remove-hkdf 
Remove hkdf
 2025-07-17 09:57:11 +00:00
Bence Szépkúti
5956d28c0b Restrict CI-specific python requirements to Linux 
The dependencies declared in ci.requirements.txt are only used in
scripts that we run on the Linux CI.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-07-16 14:18:12 +02:00
Bence Szépkúti
9dda0ca195 Don't install cryptography on the FreeBSD CI 
Recent versions of cryptography require a Rust toolchain to install on
FreeBSD, which we do not have set up yet.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-07-16 13:33:17 +02:00
Bence Szépkúti
4561164e7c Freeze cryptography version on the CI at 35.0.0 
The version was unspecified because of our use of Python 3.5 on the CI,
whichi has since been eliminated.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-07-16 13:29:55 +02:00
Gilles Peskine
aeac0b31ac Disable new platform-related option 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-10 13:00:36 +02:00
David Horstmann
ba2376c580 Merge pull request #10275 from ariwo17/remove-des-core-before-crypto 
Remove DES from Mbed TLS core (except references blocked by TF PSA Crypto)
 2025-07-09 09:52:31 +00:00