yuzu-mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-mirror/mbedtls.git synced 2025-12-06 07:12:32 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
15650 commits 89 branches 205 tags 114 MiB
Commit graph

15650 commits

This branch
This branch
All branches
Author SHA1 Message Date
Manuel Pégourié-Gonnard f5acfbac99 Improve description of migration guide entries 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 11:35:08 +02:00
Manuel Pégourié-Gonnard 2960b2e88c Fix a few typos 
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com>
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 11:35:08 +02:00
Manuel Pégourié-Gonnard b2a1043a4c Add a directory for 3.0 migration guide entries 
Similarly to ChangeLog.d, we want to avoid endless merge conflicts.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 11:35:08 +02:00
Manuel Pégourié-Gonnard 89d4ab0999 Add a "3.0 migration guide document" 
For now the entries are in no particular order. Before the release we
should have a final pass over this document and order them from most
impactful to least impactful. We might even create sections, a table of
contents, etc.

In the meantime, each PR should add an entry about it changes.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 11:35:08 +02:00
Manuel Pégourié-Gonnard 759f551010 Add a missing ChangeLog entry 
Was missed in https://github.com/ARMmbed/mbedtls/pull/4324

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 11:35:08 +02:00
Manuel Pégourié-Gonnard 5b79ee252e Fix typo in doxygen reference 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 10:36:48 +02:00
Manuel Pégourié-Gonnard 71d955a79d Introduce PSA_ALG_NONE 
It is required by the standard definition of PSA_ALG_GET_HASH.

Documentation and definition from:
https://armmbed.github.io/mbed-crypto/html/api/ops/algorithms.html#c.PSA_ALG_NONE

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 10:36:48 +02:00
Manuel Pégourié-Gonnard c149e1de9b Remove duplicated definition of PSA_ALG_GET_HASH() 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 10:25:05 +02:00
Manuel Pégourié-Gonnard 06638ae3e8 Update "key stretching" flag 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 10:19:37 +02:00
Manuel Pégourié-Gonnard 805251b70c Update psa_validate_key_policy() for the new policy 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 09:49:59 +02:00
Manuel Pégourié-Gonnard c7f8dbe837 Update generated files 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-04 09:41:35 +02:00
Manuel Pégourié-Gonnard 40b81bf8f7 Introduce PSA_ALG_GET_HASH() 
No need to introduce a specific macro for PBKDF2-HMAC when the PSA spec
already has a generic one.

Documentation from:
https://armmbed.github.io/mbed-crypto/html/api/ops/algorithms.html#c.PSA_ALG_GET_HASH
Implementation from:
https://armmbed.github.io/mbed-crypto/html/appendix/specdef_values.html

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 11:53:40 +02:00
Manuel Pégourié-Gonnard 6983b4fffc Add identifier for PBKDF2 with AES-CMAC-PRF-128 
This algorithm is used for example by the Thread 1.1.1 specification,
which is not public but can be obtained free of charge at
https://www.threadgroup.org/ThreadSpec

Here it doesn't really make sense to define a parametrised family, as
this really seems to be the only use of PBKDF2 with a CMAC-based PRF (or
with any PRF other than HMAC with SHA1 or SHA2, for that matter).

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 11:42:22 +02:00
Manuel Pégourié-Gonnard aa923b9fed Update generated files 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 11:03:24 +02:00
Manuel Pégourié-Gonnard b12de9ffc1 Add new key types to crypto_knowledge.py 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 11:02:56 +02:00
Manuel Pégourié-Gonnard 2171e421c6 Add new key type PASSWORD_HASH 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 10:49:54 +02:00
Manuel Pégourié-Gonnard 88658becd4 Clarify algorithm constraint for verification 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 10:28:57 +02:00
Manuel Pégourié-Gonnard 9023cacf15 Merge verification policies together 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 10:27:27 +02:00
Manuel Pégourié-Gonnard d307f63597 Rename verify_output_xxx() to verify_xxx() 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-05-03 10:12:06 +02:00
Ronald Cron 3e4d190b4a tests: driver wrappers: Add hash finish tests 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:49:21 +02:00
Ronald Cron 1fb49e6ee7 tests: driver wrappers: Add hash update tests 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:49:21 +02:00
Ronald Cron 6e12b7b50c tests: driver wrappers: Specialize hash multi-part test on setup only 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:49:21 +02:00
Ronald Cron eba3c87100 tests: driver wrappers: Fix hash tests dependencies 
Take into account that the test driver may not support
hash operations.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:49:21 +02:00
Ronald Cron ce1d8d2c4e tests: Revert test_driver.h name change 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:49:15 +02:00
Ronald Cron 63281332b0 tests: Fix test arguments separator 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:38:23 +02:00
Ronald Cron 4607c829d0 tests: psa: Simplify key buffer size calculation 
Move the key buffer size calculation code under
tests to avoid check-names.sh to complain about
"likely macros with typos".

This removes the calculation of key buffer
sizes for the test driver from the wrapper based on
static size data. But the code is still there in test
code to be used when we go back to work on the
generation of the driver wrapper.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:38:20 +02:00
Ronald Cron 7f13fa2454 tests: psa: Add mbedtls/MBEDTLS prefix to test driver symbols 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 18:33:26 +02:00
Ronald Cron b5d59a05b2 tests: psa: cipher: Remove out-dated comment 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 17:39:26 +02:00
Ronald Cron 140043a6b9 tests: driver wrapper: Add hash dispatch testing 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 17:39:26 +02:00
Ronald Cron fa036c8024 tests: Add hash transparent test driver hooks 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2021-05-01 17:37:28 +02:00
Hanno Becker f26cc72e7b Reintroduce comment on state of renegotiation after post HS message 
Signed-off-by: Hanno Becker <hanno.becker@arm.com>
 2021-05-01 06:17:49 +01:00
Hanno Becker fae12cf1ef Use error corruption detection as initial return value 
Signed-off-by: Hanno Becker <hanno.becker@arm.com>
 2021-05-01 06:17:49 +01:00
Hanno Becker cad3dbaf45 Add missing static qualification for post-HS HS message handler 
Signed-off-by: Hanno Becker <hanno.becker@arm.com>
 2021-05-01 06:17:49 +01:00
Hanno Becker b03f88f06c Introduce helper for handling of post-handshake handshake messages 
Handling the receipt of a handshake record after the initial handshake
requires non-trivial logic depending on the protocol version and the
endpoint. This logic is currently embedded in mbedtls_ssl_read().

With the introduction of support for [D]TLS 1.3, the logic will become
even more complex, since [D]TLS 1.3 drops support for renegotiation --
which in [D]TLS 1.2 is the main purpose of post-handshake handshake
messages -- but instead introduces numerous other post-handshake
handshake messages.

In order to pave the way for those changes, this commit improves
readability and maintainability of mbedtls_ssl_read() by moving
the TLS <=1.2 logic for handling post-handshake handshake messages
into a separate helper function ssl_handle_hs_message_post_handshake().

The logic of the code is entirely unchanged.

Signed-off-by: Hanno Becker <hanno.becker@arm.com>
 2021-05-01 06:17:49 +01:00
TRodziewicz 0bc3938551 Removing trailing spaces 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-30 14:18:06 +02:00
TRodziewicz 8223ccee6b Correction of failing ecdsa & pk tests 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-30 13:32:15 +02:00
Manuel Pégourié-Gonnard 3d72267db5 Specify the order of PBKDF2 inputs 
Might make the implementer's life a bit simpler, and is not a big
constraint on applications.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-04-30 12:42:36 +02:00
Manuel Pégourié-Gonnard 421390f52f Fix driver interface for key derivation 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-04-30 12:38:12 +02:00
Manuel Pégourié-Gonnard c16033e0a3 Fix the encodings of the new key types 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-04-30 12:26:41 +02:00
Manuel Pégourié-Gonnard ffc86ce8d6 Improve or expand several descriptions. 
No change of behaviour, encoding or naming intended in this commit: just
describe the same behaviour, but in a way that's hopefully clearer and
more complete.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-04-30 12:26:41 +02:00
Gilles Peskine 59d97a16d6
Merge pull request #4437 from gilles-peskine-arm/aes2crypt-removal-2.x 
Remove the sample program aescrypt2
 2021-04-30 11:15:22 +02:00
Manuel Pégourié-Gonnard dc1b4e42e9 Fix a few typos 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2021-04-30 10:41:07 +02:00
TRodziewicz 7e9422db95 Removing tabs and fixing doxygen formatting 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-30 10:32:58 +02:00
TRodziewicz 85dfc4de20 Applying current changes 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-30 00:07:04 +02:00
TRodziewicz 18efb73743 Remove deprecated functions and constants. 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-29 23:12:19 +02:00
Ronald Cron 1a85d3b122
Merge pull request #4146 from stevew817/allow_skipping_3des_cmac_when_alt 
Allow CMAC self-test to skip tests for unsupported primitives (2)
 2021-04-29 16:04:39 +02:00
Gilles Peskine 85f023b007
Merge pull request #3950 from gilles-peskine-arm/dhm_min_bitlen-bits 
Enforce dhm_min_bitlen exactly
 2021-04-29 14:55:30 +02:00
TRodziewicz 89f98c2556 Removal of wrongly placed unset 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-29 14:08:09 +02:00
Dave Rodgman c86f330aed
Merge pull request #3777 from hanno-arm/x509-info-optimization_rebased 
Reduce ROM usage due to X.509 info
 2021-04-28 17:31:55 +01:00
TRodziewicz 2add5c13ea On second thought changing the way the test is run 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
 2021-04-28 16:50:20 +02:00