7294fc1c1a
Merge pull request #10567 from yanesca/add_clarifications_4.x
...
Add miscellaneous clarifications
2026-01-20 16:38:53 +00:00
2b9f62a1be
programs/README.md clarify security remark
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2026-01-20 10:39:40 +00:00
a852e72746
SECURITY.md: make x509 data section more readable
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2026-01-20 10:38:16 +00:00
7a9eceb53c
Clarify purpose and suitability of sample programs
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2026-01-19 14:46:44 +00:00
b712065a2e
Clarify CRL security guarantees
...
Signed-off-by: Janos Follath <janos.follath@arm.com >
2026-01-19 14:42:11 +00:00
069cfbd43c
Merge pull request #10564 from valeriosetti/issue10380-mbedtls
...
Remove unused script `set_psa_test_dependencies.py`
2026-01-16 15:11:14 +00:00
d49372176f
Merge pull request #10551 from bjwtaylor/remove-drbg-modules
...
Remove use of DRBG modules from sample programs
2026-01-15 12:14:24 +00:00
fe3f378eec
Restore mbedtls_memory_buffer_alloc_free_and_self_test, as it is still required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-15 08:38:06 +00:00
4569547e59
Add fixes for defines in selftest
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-15 07:56:29 +00:00
842d2d948c
Re-add mbedtls_entropy_self_test_wrapper
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:18:33 +00:00
b300692011
Remove some headers from ssl_test_lib.h, as they are no longer required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:09:15 +00:00
dcf7670825
Add further rng removals highlighted by the ci
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:23 +00:00
7d71244dc3
Remove rng_context_t, as it is no longer useful
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:23 +00:00
767a3655e5
Remove f_rng p_rng, as these are no longer used
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:23 +00:00
b6cccdf8b5
Replace mbedtls_psa_get_random
...
Replace mbedtls_psa_get_random with psa_generate_random, as this is a backwards
compatibility layer that is now longer required
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:23 +00:00
552f31410c
Re-add the HMAC_DRBG and CTR_DRBG are cryptographic modules as they are still required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:22 +00:00
79002cc990
Remove rng_get from sample programs, as it is no longer required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:22 +00:00
99ec289535
Remove duplicated reproducable
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:22 +00:00
eace7ca23f
Remove double initialisation of psa
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:22 +00:00
fe978ac1f3
Remove Deprecated Items From Sample Programs
...
Remove the drbg module and entropy functions from the sample programs as these are
now handled by their PSA equivalents
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-14 13:01:22 +00:00
4e2584d681
tests: scripts: remove set_psa_test_dependencies.py
...
This script was used in the past, but it has since been replaced with
other scripts and nowadays it's no more used anywhere.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2026-01-14 13:34:32 +01:00
6370f1c59c
Merge pull request #10507 from minosgalanakis/rework/component-configuration-crypto-cmake
...
Migrate configuration-crypto components to cmake
2026-01-14 07:33:06 +00:00
69e117fee0
Merge pull request #10562 from mpg/fix-not-grep
...
all.sh: fix file paths for "not grep"
2026-01-13 22:08:18 +00:00
21fa4896b1
all.sh: fix file paths for "not grep"
...
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2026-01-13 11:24:14 +01:00
1919ee4bb4
Merge pull request #10533 from bjwtaylor/remove-pk_get_name
...
Replace mbedtls_pk_get_name with pk_key_type_to_string
2026-01-13 10:11:51 +00:00
2ad6e5ba6c
component-configuration-crypto: Adjusted test_crypto_full_md_light_only
...
Adjusted component to utilise the CMAKE_BUILTIN_BUILD_DIR
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
0c297de53c
component-configuration-crypto: Changed cleanup order.
...
Adjusted helper_block_cipher_no_decrypt_build_test to
cleanup the directory after all the tests have been
executed.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
67a9123b23
component-configuration-crypto: Changed location of psa-alt-header
...
build_psa_alt_headers will now generate the headers at
./tests/include/alt-dummy instead of
./framework/tests/include/alt-extra.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
69545a87af
component-configuration-crypto: Added consistent cmake commands.
...
Update the previously modified component to use
consistent syntax:
* make -> cmake --build .
* make test -> ctest
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
8cdccdecd2
component-configuration-crypto: Migrated build_psa_alt_headers
...
The original make -C tests, contains a perl inliner
to generate the alt-headers. Replicated that logic in
sed regex.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
486b6c8252
components-configuration-crypto: Migrated components with custom LDFLAGS to cmake
...
Certain testing components require building with a specific subset of LDFLAGS,
such as `-O1`. This patch moves them to the default cmake invokation of `cmake .`
which is the equivalent of `cmake -D CMAKE_BUILD_TYPE:String=None .`
Also remove flags such as `-Werror` which are present in all configs.
Improve compilation flag granularity by disabling CMAKE_BUILD_TYPE defaults
and asserting test-specific flags manually.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
1fcca1f255
component-configuration-crypto: Migrated component_test_crypto_full_md_light_only to cmake
...
Use compilation directory for object discovery in out-of-source CMake builds.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
5e99591870
components-configuration-crypto: Migrated include dir dependant Release components to cmake
...
Moved the following components to CMAKE_BUILD_TYPE:String=Release
and adjusted the include paths for cmake:
* component_build_psa_crypto_spm
* component_test_tfm_config_no_p256m
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
6db68f929b
components-configuration-crypto: Migrated straightforwad Release components to cmake
...
- By default all unspecified build-type components should be release
- CMAKE_BUILD_TYPE:String=Release enables the following
CFLAGS: "-O2 -Werror -Wall -Wextra"
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
279c016d87
components-configuration-crypto: Migrated test_tfm_config_p256m_driver_accel_ec to cmake
...
Compilation flags, and spe include directories have been adjusted
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
3baeee8647
components-configuration-crypto: Migrated test_full_static_keystore to cmake
...
Optimization for size (-Os) is required.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
d1307a1d40
components-configuration-crypto: Migrated simple ASAN components.
...
Migrate all straightfoward components from using $ASAN_CFLAGS
to CMAKE_BUILD_TYPE:String=Asan
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2026-01-12 16:30:33 +00:00
fef622c2d0
Merge pull request #10559 from valeriosetti/fix-not-grep
...
tests: scripts: configuration-crypto: fix paths for "not grep"
2026-01-12 14:48:35 +00:00
c58c20d4fa
tests: scripts: fix grep paths in test_tfm_config_p256m_driver_accel_ec
...
Paths for "not grep" should have been updated when the build system
switched from Makefile to CMake.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2026-01-12 13:29:14 +01:00
095fe073c3
Update tf-psa-crypto and framework modules to resolve merge conflict and config_macros import error
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
c23592d7ee
Add improvements to code comments and docs
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
085aef59ca
Change function name from mbedtls_pk_key_type_to_string to mbedtls_x509_pk_type_as_string
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
f77d749127
Further updates to ssl-opt tests as wrapped keys now expose the underlying type
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
98e958c91e
Update ssl-opt tests as wrapped keys now expose the underlying type
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
81deeb8a5a
Update ssl-opt to remove Opaque key types
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
837a3cec40
rename function
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
f9b95cedaa
Fix style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
2481daa309
Replace mbedtls_pk_get_name with pk_key_type_to_string
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2026-01-12 08:19:07 +00:00
5aba22b3df
tests: scripts: configuration-crypto: fix paths for "not grep"
...
A switch has recently been made from make to cmake to build these tests
but paths for "not grep" were not properly updated.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2026-01-09 22:52:45 +01:00
f7173e4389
Merge pull request #10517 from valeriosetti/issue10460
...
Remove use of pk_debug()
2026-01-09 15:22:13 +00:00
David Horstmann