David Horstmann
24e3388cf3
Clarify use of CC and friends for file generation
...
Add more detail around how generation of configuration-independent files
chooses a C compiler. Mention that setting HOSTCC or CC is recommended
where there are multiple toolchains.
Mention that the fallback location is the cc executable, which may help
users troubleshooting when the file generation picks up the wrong
toolchain (as in Mbed-TLS/mbedtls#10360 ).
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2025-08-19 16:56:25 +01:00
minosgalanakis
265e98da45
Merge pull request #10355 from valeriosetti/issue10283-fix-test-coverage
...
tests: configuration-crypto: enable p192 curves in test_psa_crypto_without_heap
2025-08-15 11:22:06 +00:00
Bence Szépkúti
e96491c193
Merge pull request #10049 from amtkarm1/iss9321
...
Move the PAKE hash algorithm parameter into the alg id
2025-08-13 10:14:05 +00:00
Valerio Setti
a785eea41f
tests: configuration-crypto: enable p192 curves in test_psa_crypto_without_heap
...
Enable p192[k|r]1 curves which are disabled by default in tf-psa-crypto.
This is required to get the proper test coverage otherwise there are
tests in 'test_suite_psa_crypto_op_fail' that would never be executed.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-13 10:57:46 +02:00
Manuel Pégourié-Gonnard
eca92dcdeb
Update tf-psa-crypto to current development
...
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2025-08-13 09:50:12 +02:00
Anton Matkin
6eb5335ef0
Fixed issues with policy verification, since wildcard JPAKE policy is now disallowed, changed to concrete jpake algorithm (with SHA256 hash)
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com >
2025-08-12 13:50:48 +02:00
Anton Matkin
143d5d8a3a
Deleted the changelog entry as requested
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com >
2025-08-12 13:50:48 +02:00
Anton Matkin
e8be4ee08c
Fixed the changelog entry wording
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com >
2025-08-12 13:50:48 +02:00
Anton Matkin
e2c5ca332f
Fixed the changelog entry, missing trailing newline
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com >
2025-08-12 13:50:48 +02:00
Anton Matkin
e8073180ac
Create a changelog entry
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com >
2025-08-12 13:50:48 +02:00
Anton Matkin
1b70084bd9
TF-PSA-Crypto submodule link fixup
...
Signed-off-by: Anton Matkin <anton.matkin@arm.com >
2025-08-12 13:50:45 +02:00
Manuel Pégourié-Gonnard
c7a10589cf
Merge pull request #10352 from valeriosetti/issue10283-development-prereq
...
[development] Remove 224-bit curves (3/5)
2025-08-12 11:39:20 +00:00
Valerio Setti
981a0c46b2
tests: remove leftover from debug session and extra spaces
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-12 11:31:11 +02:00
Valerio Setti
37a4281710
tests: configuration_crypto: fix selection of EC/DH group to accelerate
...
Some EC/DH group might be disabled in default configuration in
"crypto_config.h" so before running "helper_get_psa_key_type_list" and/or
"helper_get_psa_curve_list" it's better to set/unset what's required
for that test component and only then parse the enabled groups.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-12 09:36:45 +02:00
Manuel Pégourié-Gonnard
5b74c79f00
Merge pull request #10298 from bjwtaylor/remove-deprecated-items
...
Remove deprecated items
2025-08-11 07:13:08 +00:00
Ben Taylor
5a27010fab
Remove group_list_heap_allocated
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-08 08:33:03 +01:00
Gilles Peskine
627d653863
Merge pull request #10282 from bjwtaylor/switch-to-mbedtls_pk_sigalg_t
...
Switch to mbedtls pk sigalg t
2025-08-07 11:06:31 +00:00
Manuel Pégourié-Gonnard
2656eb9121
Merge pull request #10344 from valeriosetti/issue10283-development
...
[development] Remove 224-bit curves & Remove 192-bit curves from TLS & X.509 (2/3)
2025-08-07 10:40:49 +00:00
Ben Taylor
ed0db45b63
Completely remove sig_algs_heap_allocated
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 09:40:42 +01:00
Valerio Setti
602fa5dd99
changelog: add note about EC curves support removal in TLS
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-07 10:30:30 +02:00
Ben Taylor
8dfed9fc15
Remove pointer cast in mbedtls_x509_oid_get_sig_alg
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
8b3b7e5cac
Update further type mismatches
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
6816fd781e
Adjust for change in mbedtls_pk_verify_new function prototype
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
563d360a9b
Fix ChangeLog format
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
df6a6eaced
Add ChangeLog
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
7573321f61
Fix style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
8e832b6594
Add sigalg types to x509_crt.c
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
1c118a564d
reverted enum in pk_verify_new
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
b2eecc621d
switch to mbedtls_pk_sigalg_t
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
500e497c05
Fix code style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
adf5d537b2
Fix code style
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
Ben Taylor
d95ea27e8c
Create new enum mbedtls_pk_sigalg_t
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-07 08:25:52 +01:00
minosgalanakis
4c27020f91
Merge pull request #10292 from minosgalanakis/feature/introduce_crypto_rng_strength
...
crypto_config: Introduce MBEDTLS_PSA_CRYPTO_RNG_STRENGTH
2025-08-06 15:01:44 +00:00
Valerio Setti
a2a1c084ef
mbedtls_check_config: remove reference to MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-06 15:00:08 +02:00
Minos Galanakis
8a43e7cfea
Updated tf-psa-crypto pointer
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2025-08-06 10:50:27 +01:00
Minos Galanakis
2fc59949b2
Added MBEDTLS_PSA_CRYPTO_RNG_STRENGTH to tests.
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2025-08-06 10:50:27 +01:00
Valerio Setti
80a623089d
tests: ssl: allow more groups in conf_group()
...
Previously 3 different groups were allowed, but since the removal of
secp192r1 and secp224r1 only secp256r1 was left. This commit adds
other 2 options.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-06 11:38:45 +02:00
Valerio Setti
fa648bacb2
depends.py: keep reverse dependencies for p192 and p224 curves
...
These reverse dependencies will be removed once tf-psa-crypto will
remove the corresponding build symbols.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-06 11:02:25 +02:00
Ben Taylor
8bd8e91485
Improve ChangeLog
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-06 08:31:13 +01:00
Ben Taylor
6023652711
Remove additional references to sig_algs_heap_allocated
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-06 08:28:43 +01:00
Valerio Setti
d0d0791aed
remove usage of secp192[k|r]1 curves
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-06 09:15:35 +02:00
Valerio Setti
70a4a31cb5
remove secp224[k|r]1 curves
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-06 09:15:35 +02:00
Valerio Setti
db92768497
framework: update reference
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-08-06 09:15:34 +02:00
Ben Taylor
37e1ca9efa
Update tf-psa-crypto submodule pointer
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:32:12 +01:00
Ben Taylor
9f54408c31
Remove sig_algs_heap_allocated=0 as it is always 0
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:28:33 +01:00
Ben Taylor
8b91436903
Remove paragraph in comments as it is no longer required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:22:10 +01:00
Ben Taylor
8b5c5b4daa
Remove mbedtls_ssl_sig_hash_set_t as it is no longer required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:20:32 +01:00
Ben Taylor
9ff2b73636
Change referenc funtion to include/mbedtls/ssl.h in note
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:17:13 +01:00
Ben Taylor
543caa7ec4
Re-add note
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:16:12 +01:00
Ben Taylor
71fcb1c64b
Added more detail to the ChangeLog
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-08-05 08:11:12 +01:00