2349 Commits

Author SHA1 Message Date
Ronald Cron 415201cc36 test_driver.py: Add method to build the test driver tree
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-12-05 14:45:32 +01:00
Ronald Cron 936943b263 Introduce test_driver.py
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-12-05 14:45:32 +01:00
Valerio Setti e3f4268a90 scripts: generate_test_keys: skip secp192 curves in tf-psa-crypto
Their support has been removed from tf-psa-crypto. Keep them only for the
3.6 branch.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2025-12-05 14:12:07 +01:00
Pengyu Lv 8b364c7436 Fix the commands to build library
In `scripts/common.make`, used by `tests/Makefile` and `programs/Makefile`,
we have the following rules to build the library:

  ```
  $(MBEDLIBS):
      $(MAKE) -C ../library
  ```

$(MBEDLIBS) contains three library files but the command is for all
the 3 files instead of single target generation. This would cause a
race when doing parallel build. This commit fixes command so that
the recipe could generate a single library file.

Fix https://github.com/Mbed-TLS/mbedtls/issues/8229

Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
Signed-off-by: Gilles Peskine <gilles.peskine@arm.com>
2025-12-04 17:07:05 +01:00
Ronald Cron 1726775ccc Merge pull request #236 from gilles-peskine-arm/build_info-cleanup-1.0-framework
Clean up after 1.0: generate_config_checks.py, tf-psa-crypto/build_info.h
2025-11-20 17:28:44 +01:00
Gilles Peskine d6f03a4329 Document wildcard matching
The include and exclude lists use different library functions which have
different semantics for wildcards.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-19 19:52:05 +01:00
Gilles Peskine 16236cb8a2 Remove redundant entry in glob list
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-19 19:47:02 +01:00
Gilles Peskine 30bea3d767 Be more robust about exact paths
Don't insist so much on exact directory and file names. In particular, be
tolerant to new subdirectories of `include` directories.

The resulting list of files is almost the same, except that a few more
Everest files are getting parsed, which is harmless (and perhaps technically
a bug fix).

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-17 23:50:13 +01:00
Gilles Peskine 26adfccaaa Log which files get parsed
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-17 23:50:13 +01:00
Gilles Peskine fbb7e52304 Avoid splitting file names across lines in problem reports
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-17 23:50:13 +01:00
Gilles Peskine 203ff5e165 Support new location of crypto_adjust_config_synonyms.h in TF-PSA-Crypto >1.0.0
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-17 23:50:13 +01:00
Gilles Peskine 76fe5edd98 Use scripts/generate_config_checks.py unconditionally
`scripts/generate_config_checks.py` had to be included conditionally so that
consuming branches could transition from it not existing to it existing. Now
that both TF-PSA-Crypto/development and mbedtls/development have this
script, include it unconditionally.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-17 23:50:13 +01:00
Gilles Peskine 7082fdc9c4 Make sure to list paths with / even on Windows
This is necessary when the tool that consumes the path requires
slash-separated paths, notably when it's CMake. I'm not aware of a potential
consumer that would require a path using backslashes.

Fixes Mbed-TLS/mbedtls#10502.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-14 14:59:07 +01:00
Valerio Setti 9232f41572 scripts: ecp.py: do not test secp192 curves in development
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2025-11-06 23:43:25 +01:00
Manuel Pégourié-Gonnard a6e59a955b Merge pull request #10450 from bjwtaylor/move-lcov
Remove lcov.sh as this will be moved to the framework
2025-11-06 11:11:59 +00:00
David Horstmann cdc1ca0056 Merge pull request #233 from gilles-peskine-arm/uncrustify-warnings
Make code_style.py more user-friendly
2025-11-05 09:58:31 +00:00
Gilles Peskine 9707b5c138 Also apply --uncrustify to --fix mode
Before this commit, verify mode still hard-coded "uncrustify" as the command
name.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-03 18:54:09 +01:00
Gilles Peskine eaf2b3e358 Allow specifying a diffent uncrustify command
This makes it easier to run the script on a machine where the
system-installed uncrustify is a different version.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-03 18:51:58 +01:00
Gilles Peskine 3bf133525f Make a wrong uncrustify version a fatal error
We know that using a different version of uncrustify produces different
results. So make that an error rather than a warning.

Also make the error output more helpful if uncrustify is not found.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-11-03 18:50:52 +01:00
Gilles Peskine 5ef7a4c9d8 Merge pull request #228 from ruiliio/psa_aes_xts
AES-XTS: update test generation for double-size key handling
2025-10-31 16:18:07 +01:00
Ben Taylor 9b4f222f4f Update lcov.sh paths in make files
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-31 14:18:05 +00:00
Ben Taylor 284481f7ca Remove lcov.sh as this will be moved to the framework
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-31 14:18:05 +00:00
Minos Galanakis a2cba40df6 prepare_release.sh: modify submodule files recursively
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-30 10:00:22 +00:00
Minos Galanakis bdb1dcbdb6 prepare_release.sh: simplified regex
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-30 10:00:22 +00:00
Minos Galanakis 958d9d97a4 prepare_release.sh: Added documentation
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-30 09:58:17 +00:00
Minos Galanakis c4d4f6b4a1 prepare_release.sh: Removed -r/-u modes
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-22 11:51:39 +01:00
Minos Galanakis 61fdef52a3 prepare_release.sh: Adjusted psed logic.
Fixed double quoting in sed.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-22 11:17:32 +01:00
Ben Taylor 23fe0158c6 Correct to use lowercase crypto in library name
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-21 11:22:12 +01:00
Ben Taylor b39e6ae045 Correct lcov target title
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-21 11:21:02 +01:00
Minos Galanakis 0b7966649f prepare_release.sh:Removed Makefiles modification
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-21 10:55:27 +01:00
Minos Galanakis d995a21b6a prepare_release.sh: Adjusted logic
- Introduced a new -r to explicitely request project
  modification for release
- Changed the default behaviour to print_help when invoked
  without arguments

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-21 10:54:17 +01:00
ruiliio 2f8c92d2a5 AES-XTS: update test generation for double-size key handling
Signed-off-by: ruiliio <ruili3422@gmail.com>
2025-10-20 13:27:09 -07:00
Minos Galanakis 1f95b78310 prepare_release.sh: Limited .gitignore to current project
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-20 16:24:29 +01:00
Minos Galanakis d0881eda4e prepare_release.sh: Added psed helper function
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-20 16:11:05 +01:00
Ben Taylor d6d579a240 Remove debug from lcov script
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-20 09:25:10 +01:00
Ben Taylor 092a5bad38 Add improvements to the lcov script to better handle 3.6
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-20 09:25:10 +01:00
Ben Taylor bce82f78ca Add adapted lcov.sh to the framework
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-20 09:25:10 +01:00
Minos Galanakis 4579964747 Merge remote-tracking branch 'restricted/main-restricted' into framework-common
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-02 15:25:04 +01:00
Bence Szépkúti d80c4f9ec3 Merge pull request #209 from gilles-peskine-arm/compliance-split-framework
Split test_psa_compliance.py
2025-09-30 11:00:51 +02:00
Ronald Cron 6a9be3de1f Merge pull request #10416 from bensze01/abicheck-worktree-submodules
Use submodule work trees during ABI check
2025-09-30 07:32:22 +00:00
Bence Szépkúti 9defedb833 Fix comment too long for pylint
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-09-29 14:25:12 +02:00
David Horstmann ee1991a387 Merge pull request #10408 from ronald-cron-arm/historical-libmbedcryto
Restore historical libmbedcrypto.* libraries
2025-09-29 08:41:06 +00:00
Bence Szépkúti 0f2a4f3d1f Prevent unnecessary submodule fetches
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-09-26 20:27:57 +02:00
Bence Szépkúti 8d95062aeb Eliminate use of git worktree prune
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-09-26 15:44:11 +02:00
Bence Szépkúti dc88f6e1f3 Use f-string literal
This makes path-construction a bit more readable

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-09-26 15:37:42 +02:00
Gilles Peskine 3415d2dd5f Merge pull request #10306 from gilles-peskine-arm/config-error-on-removed-options-mbedtls
Mechanism to error out on removed configuration options
2025-09-25 16:35:51 +00:00
Gilles Peskine ab4d9cee6d Merge pull request #218 from gilles-peskine-arm/PSA_KEY_USAGE_DERIVE_PUBLIC-framework
PSA_KEY_USAGE_DERIVE_PUBLIC is not valid in key policies
2025-09-25 16:25:48 +02:00
Bence Szépkúti effa534e71 Use worktrees instead of fetches for submodules
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-09-25 15:51:07 +02:00
Gilles Peskine 0920bdab56 PSA_KEY_USAGE_DERIVE_PUBLIC is not valid in key policies
We have a new usage flag `PSA_KEY_USAGE_DERIVE_PUBLIC` which is (so far)
only meant for checking a key's capabilities, and not valid in key policies.
Exclude this flag from systematic checking of usage flags.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-09-25 11:44:27 +02:00
Gilles Peskine c45d9ac4c2 Allow setting removed options that are now always on
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-09-24 17:20:35 +02:00