Gilles Peskine 
							
						 
					 
					
						
						
							
						
						9a9d5eea53 
					 
					
						
						
							
							Fix a build error when MBEDTLS_PSA_INJECT_ENTROPY is enabled  
						
						... 
						
						
						
						Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com > 
						
						
					 
					
						2023-07-20 18:07:47 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Elliott 
							
						 
					 
					
						
						
							
						
						dc1244d135 
					 
					
						
						
							
							Merge pull request  #6974  from davidhorstmann-arm/2.28-cmake-pass-through-config-defines  
						
						... 
						
						
						
						[Backport 2.28] Pass `MBEDTLS_CONFIG_FILE` defines through cmake 
						
						
					 
					
						2023-07-07 17:01:24 +01:00 
						 
				 
			
				
					
						
							
							
								Tom Cosgrove 
							
						 
					 
					
						
						
							
						
						f788a45d47 
					 
					
						
						
							
							Merge pull request  #7213  from sergio-nsk/patch-5  
						
						... 
						
						
						
						mbedtls-2.28: Fix error: comparison of integers of different signs: 'SOCKET' and 'int' 
						
						
					 
					
						2023-07-07 16:46:03 +01:00 
						 
				 
			
				
					
						
							
							
								David Horstmann 
							
						 
					 
					
						
						
							
						
						58dda6713c 
					 
					
						
						
							
							Use emptiness-checks rather than DEFINED checks  
						
						... 
						
						
						
						For the MBEDTLS_CONFIG_FILE and MBEDTLS_USER_CONFIG_FILE variables,
check that they are non-empty and defined. This means they can be
unconditionally created in the cache, simplifying the CMakeLists.txt
Signed-off-by: David Horstmann <david.horstmann@arm.com > 
						
						
					 
					
						2023-07-05 18:12:09 +01:00 
						 
				 
			
				
					
						
							
							
								David Horstmann 
							
						 
					 
					
						
						
							
						
						1a30cf70cc 
					 
					
						
						
							
							Pass config file options to mbedtls_test(_helpers)  
						
						... 
						
						
						
						Signed-off-by: David Horstmann <david.horstmann@arm.com > 
						
						
					 
					
						2023-07-05 14:35:08 +01:00 
						 
				 
			
				
					
						
							
							
								David Horstmann 
							
						 
					 
					
						
						
							
						
						e31e287109 
					 
					
						
						
							
							Pass MBEDTLS_CONFIG_FILE defines through cmake  
						
						... 
						
						
						
						When -DMBEDTLS_CONFIG_FILE or -DMBEDTLS_USER_CONFIG_FILE are passed to
cmake, pass them through as compile definitions. This allows different
mbedtls configs to be passed at configure time without modifying any
cmake files.
Signed-off-by: David Horstmann <david.horstmann@arm.com > 
						
						
					 
					
						2023-07-05 14:33:11 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						08efc3d768 
					 
					
						
						
							
							Merge pull request  #7854  from daverodgman/fix-unused-aes-2.28  
						
						... 
						
						
						
						Fix AES dependencies - build TF-M config cleanly - backport 2.28 
						
						
					 
					
						2023-07-03 16:48:39 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						a3fc295559 
					 
					
						
						
							
							Merge pull request  #7823  from SlugFiller/mbedtls-2.28  
						
						... 
						
						
						
						Support compilation using CLang on Windows 
						
						
					 
					
						2023-07-03 09:52:03 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						f72b8375d0 
					 
					
						
						
							
							Fix order of endif comments  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-29 16:33:03 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						1d0033e1ac 
					 
					
						
						
							
							Improve #endif comments  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-29 12:13:26 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						1ce92e4887 
					 
					
						
						
							
							Correct #endif comments  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-29 12:13:15 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						a4a337360d 
					 
					
						
						
							
							Correct comments on #endif's  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-29 12:13:08 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						94210b13eb 
					 
					
						
						
							
							Compile fixes  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 14:08:07 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						bae79fa16e 
					 
					
						
						
							
							Add missing sha header includes to entropy.c  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:54:53 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						1262315a1a 
					 
					
						
						
							
							Fix warnings re: unused variables in pkparse and pkwrite  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:54:25 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						f488c2ca79 
					 
					
						
						
							
							Add missing include for INT_MAX definition  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:35:25 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						584b62f89e 
					 
					
						
						
							
							code style  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						9d3b63396b 
					 
					
						
						
							
							Fix comment  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						5c047d9672 
					 
					
						
						
							
							More dependency fixes  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						36c8e581d6 
					 
					
						
						
							
							Fix unused variable  
						
						... 
						
						
						
						Fix when MBEDTLS_AES_SETKEY_ENC_ALT, MBEDTLS_AES_DECRYPT_ALT and
MBEDTLS_AES_ROM_TABLE set.
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						dbae184ceb 
					 
					
						
						
							
							Fix unused variable if MBEDTLS_AES_SETKEY_ENC_ALT and MBEDTLS_AES_DECRYPT_ALT set  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						9b20aeaa17 
					 
					
						
						
							
							Fix unused fn when MBEDTLS_AES_SETKEY_DEC_ALT and MBEDTLS_AES_SETKEY_ENC_ALT set  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						1e6f7708f2 
					 
					
						
						
							
							Fix unused function when MBEDTLS_AES_SETKEY_ENC_ALT set  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-06-28 11:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								David Horstmann 
							
						 
					 
					
						
						
							
						
						abaea614d2 
					 
					
						
						
							
							Return an error when no name is parsed  
						
						... 
						
						
						
						When less than 1 RDN is successfully parsed in
mbedtls_x509_string_to_names(), return an error. Previously this
returned success when a string containing neither '=' or ',' was
supplied.
Signed-off-by: David Horstmann <david.horstmann@arm.com > 
						
						
					 
					
						2023-06-27 17:34:58 +01:00 
						 
				 
			
				
					
						
							
							
								SlugFiller 
							
						 
					 
					
						
						
							
						
						e2d0614571 
					 
					
						
						
							
							Support compilation using CLang on Windows  
						
						... 
						
						
						
						Signed-off-by: SlugFiller <5435495+SlugFiller@users.noreply.github.com > 
						
						
					 
					
						2023-06-26 19:19:56 +03:00 
						 
				 
			
				
					
						
							
							
								Gilles Peskine 
							
						 
					 
					
						
						
							
						
						63b50b56cd 
					 
					
						
						
							
							Merge pull request  #7753  from lpy4105/backport-2.28/issue/renew_cert_2024-01-01  
						
						... 
						
						
						
						Backport 2.28: Updating crt/crl files due to expiry before 2024-01-01 
						
						
					 
					
						2023-06-21 12:29:12 +02:00 
						 
				 
			
				
					
						
							
							
								Demi Marie Obenour 
							
						 
					 
					
						
						
							
						
						0e2074133a 
					 
					
						
						
							
							Add a do-while loop around macros  
						
						... 
						
						
						
						This is good practice in C.
Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com > 
						
						
					 
					
						2023-06-20 11:45:26 -04:00 
						 
				 
			
				
					
						
							
							
								Pengyu Lv 
							
						 
					 
					
						
						
							
						
						41bb446d12 
					 
					
						
						
							
							Update TEST_CA_CRT_EC_PEM and TEST_CA_CRT_EC_DER  
						
						... 
						
						
						
						To retain the ABI compatibility, we need the DER
data to be in the exact size of 520 bytes. So,
these data are regenerated by unsetting the
'critical' flag of 'basic_constraints' extension,
though the extension should be critical for this
CA according to RFC5280 section 4.2.1.9.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com > 
						
						
					 
					
						2023-06-15 15:41:30 +08:00 
						 
				 
			
				
					
						
							
							
								Pengyu Lv 
							
						 
					 
					
						
						
							
						
						04da85f0f4 
					 
					
						
						
							
							Update TEST_SRV_CRT_EC_PEM and TEST_SRV_CRT_EC_DER  
						
						... 
						
						
						
						Regenerate server5.crt[.der] until we got the
DER data in the size of 547 bytes to maintain
the ABI compatibility.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com > 
						
						
					 
					
						2023-06-15 13:01:35 +08:00 
						 
				 
			
				
					
						
							
							
								Pengyu Lv 
							
						 
					 
					
						
						
							
						
						14f59bfca8 
					 
					
						
						
							
							Update cert macros in library/certs.c  
						
						... 
						
						
						
						This commit manually updates:
  - TEST_CA_CRT_EC_PEM
  - TEST_CA_CRT_EC_DER
  - TEST_SRV_CRT_EC_PEM
  - TEST_SRV_CRT_EC_DER
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com > 
						
						
					 
					
						2023-06-14 09:55:41 +08:00 
						 
				 
			
				
					
						
							
							
								Sergey 
							
						 
					 
					
						
						
							
						
						20003ca1ab 
					 
					
						
						
							
							Fix error: comparison of integers of different signs: 'SOCKET' and 'int'  
						
						... 
						
						
						
						Signed-off-by: Sergey <sergio_nsk@yahoo.de > 
						
						
					 
					
						2023-06-09 09:25:28 -07:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						247e6f088d 
					 
					
						
						
							
							Merge pull request  #7608  from daverodgman/pr6511-2.28  
						
						... 
						
						
						
						Fix: no newline when debug msg over DEBUG_BUF_SIZE - backport 2.28 
						
						
					 
					
						2023-05-17 17:59:54 +01:00 
						 
				 
			
				
					
						
							
							
								Gilles Peskine 
							
						 
					 
					
						
						
							
						
						2710fe2d5e 
					 
					
						
						
							
							Merge pull request  #7571  from bharsaklemukesh975/update-pkparse-tests-to-use-AES-2.28  
						
						... 
						
						
						
						Backport 2.28: Updating test-ca.key to use AES instead of DES 
						
						
					 
					
						2023-05-16 19:15:11 +02:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						bd77182063 
					 
					
						
						
							
							Make use of MBEDTLS_STATIC_ASSERT  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						001917898f 
					 
					
						
						
							
							Document minimum size for DEBUG_BUF_SIZE  
						
						... 
						
						
						
						Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								valord577 
							
						 
					 
					
						
						
							
						
						0d87d90cea 
					 
					
						
						
							
							simplify code  
						
						... 
						
						
						
						Signed-off-by: valord577 <valord577@gmail.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								valord577 
							
						 
					 
					
						
						
							
						
						de6ea9847d 
					 
					
						
						
							
							code style  
						
						... 
						
						
						
						Signed-off-by: valord577 <valord577@gmail.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								valord577 
							
						 
					 
					
						
						
							
						
						06b0bb55e3 
					 
					
						
						
							
							make code readable and change var name  
						
						... 
						
						
						
						Signed-off-by: valord577 <valord577@gmail.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								valord577 
							
						 
					 
					
						
						
							
						
						e3623920cf 
					 
					
						
						
							
							send debug msg if contains '\n'  
						
						... 
						
						
						
						Signed-off-by: valord577 <valord577@gmail.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						40fe1cd364 
					 
					
						
						
							
							Update library/debug.c  
						
						... 
						
						
						
						Fix trailing white-space
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								valord577 
							
						 
					 
					
						
						
							
						
						afbaac29e8 
					 
					
						
						
							
							Fix: no newline when debug msg over DEBUG_BUF_SIZE  
						
						... 
						
						
						
						Signed-off-by: valord577 <valord577@gmail.com > 
						
						
					 
					
						2023-05-16 16:47:09 +01:00 
						 
				 
			
				
					
						
							
							
								Gilles Peskine 
							
						 
					 
					
						
						
							
						
						e32e447407 
					 
					
						
						
							
							Ignore *.o everywhere  
						
						... 
						
						
						
						We don't commit *.o files anywhere, not even as test data. So ignore them
everywhere.
Also remove a redundant ignore of *.exe in a subdirectory.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com > 
						
						
					 
					
						2023-05-12 13:57:39 +02:00 
						 
				 
			
				
					
						
							
							
								Mukesh Bharsakle 
							
						 
					 
					
						
						
							
						
						2599a71c74 
					 
					
						
						
							
							updating test-ca.key to use AES instead of DES  
						
						
						
						
					 
					
						2023-05-10 12:12:40 +01:00 
						 
				 
			
				
					
						
							
							
								Dave Rodgman 
							
						 
					 
					
						
						
							
						
						2e4541f96f 
					 
					
						
						
							
							Merge pull request  #7545  from tom-cosgrove-arm/use-mbedtls_ct_uint_if-rather-than-mbedtls_ct_cond_select_sign-2.28  
						
						... 
						
						
						
						Backport 2.28: Use mbedtls_ct_uint_if() rather than mbedtls_ct_cond_select_sign() 
						
						
					 
					
						2023-05-04 12:23:36 +01:00 
						 
				 
			
				
					
						
							
							
								Tom Cosgrove 
							
						 
					 
					
						
						
							
						
						735d2c99e7 
					 
					
						
						
							
							Backport 2.28: Use mbedtls_ct_uint_if() rather than mbedtls_ct_cond_select_sign()  
						
						... 
						
						
						
						Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com > 
						
						
					 
					
						2023-05-03 09:50:10 +01:00 
						 
				 
			
				
					
						
							
							
								Valerio Setti 
							
						 
					 
					
						
						
							
						
						0eace4128b 
					 
					
						
						
							
							pk: fixing backport issues  
						
						... 
						
						
						
						Note: RSA is not supported in mbedtls-2.28 for opaque wrapping
so it was removed from test_suite_pkwrite.data.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no > 
						
						
					 
					
						2023-05-02 16:38:57 +02:00 
						 
				 
			
				
					
						
							
							
								Valerio Setti 
							
						 
					 
					
						
						
							
						
						5e7494ea75 
					 
					
						
						
							
							pk: fix position for mbedtls_platform_zeroize  
						
						... 
						
						
						
						Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no > 
						
						
					 
					
						2023-05-02 16:06:34 +02:00 
						 
				 
			
				
					
						
							
							
								Valerio Setti 
							
						 
					 
					
						
						
							
						
						aae96c9060 
					 
					
						
						
							
							pk: fix: clear buffer holding raw EC private key on exit  
						
						... 
						
						
						
						Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no > 
						
						
					 
					
						2023-05-02 16:00:45 +02:00 
						 
				 
			
				
					
						
							
							
								Tom Cosgrove 
							
						 
					 
					
						
						
							
						
						503f487cbe 
					 
					
						
						
							
							Merge pull request  #7469  from xkqian/2.28/bignumber_update_comments  
						
						... 
						
						
						
						Backport 2.28: Update links of references in bignum code 
						
						
					 
					
						2023-04-26 16:22:09 +01:00 
						 
				 
			
				
					
						
							
							
								Xiaokang Qian 
							
						 
					 
					
						
						
							
						
						8738bc46e3 
					 
					
						
						
							
							Update gen_prvkey_mx paras to align with comments and c code  
						
						... 
						
						
						
						Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com > 
						
						
					 
					
						2023-04-21 10:29:17 +00:00