Ben Taylor
4766a23f9c
change MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED to MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
c8823a262d
Remove MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED as it appears to be causing issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
7b14d8228e
Reverting TLS_VERSION derivation improvement, as it appear to be causing issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
a7b3f26864
reverted change to MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED, as it appears it could be causing issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
677994af64
Change ecdh to ecdhe on everest test
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
59213b66df
Re-add everest test, as it was mislabelled
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
6f0eb79111
Use get_tls_version to determine TLS_VERSION instead of statically assigning it
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
b191c02f6b
Correct style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
e16798ec67
Re-add reference to PSA_WANT_ALG_ECDH as this will be mantained
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
0fe02bb1bf
Removed TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT as it is no longer used
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
844a264317
Remove stray MBEDTLS_PKCS1_V15 and MBEDTLS_PKCS1_V21
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
b2f6a69d85
Replace MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED with MBEDTLS_KEY_EXCHANGE_SOME_ECDH_OR_ECDHE_1_2_ENABLED
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
013f8aee4e
Replace MBEDTLS_KEY_EXCHANGE_PSK_ENABLED with MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
1d651cc8a1
Remove additional occurances of static ECDH symbols
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
a1914ef453
further removals of ssh tests from ssl-opt
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
fbd806ae95
Remove everest ECDH test as it is no longer required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
5802394451
Remove further ECDH testd from ssl-opt.sh
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
0a7c5588db
Remove further ECDH tests
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
dbf3977107
Remove tests from ssl-opt.sh that are depedendent the removed ECDH algorithm's
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
39280a4110
Remove ECDH from ssl-opt
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
3116f2febe
Remove further symbols
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
4d7f715c07
Remove further symbols that are not required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
50b45a98ce
Reverted changes to config-split
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
558766d814
Remove additional ifdef's
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
15f1d7f812
Remove support for static ECDH cipher suites
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
David Horstmann
414878aa7f
Merge pull request #10393 from ronald-cron-arm/entropy-rng-clean-up
...
Cleanup following the simplification of entropy and RNG options
2025-09-10 17:12:40 +00:00
Ronald Cron
9a10e398fa
Simplify footprint.sh
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-10 17:12:05 +02:00
Ronald Cron
b01be14907
Fix footprint.sh
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-10 15:23:32 +02:00
Ronald Cron
ab7610c318
Cleanup following the removal of entropy options
...
Cleanup following the removal in TF-PSA-Crypto of:
- MBEDTLS_NO_PLATFORM_ENTROPY
- MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
- MBEDTLS_ENTROPY_HARDWARE_ALT
- MBEDTLS_ENTROPY_MIN_HARDWARE
Only MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES was still
present in Mbed TLS.
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-10 15:23:32 +02:00
Ronald Cron
eb16a9d9ea
Prepare for the removal of MBEDTLS_PLATFORM_GET_ENTROPY_ALT
...
We cannot remove it completely yet.
It must remain in config.py so that it is not
included in the full configuration.
A temporary exception is required for it in
analyze_outcomes.py.
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-10 15:23:32 +02:00
Ronald Cron
3b30643143
Adapt configurations to stricter compile-time checks
...
Adapt configurations to stricter compile-time checks
for entropy enablement and MBEDTLS_ENTROPY_NV_SEED
option.
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-10 15:23:32 +02:00
Ronald Cron
efcec8cecd
Cleanup following the removal of MBEDTLS_ENTROPY_C option
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-10 15:23:32 +02:00
Ronald Cron
7e8ca26c81
Merge pull request #10396 from valeriosetti/update-tfpsacrypto
...
tf-psa-crypto: update reference
2025-09-10 10:32:26 +00:00
Valerio Setti
82bf414d25
framework: update reference
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-10 10:54:37 +02:00
Valerio Setti
1ce0ad089d
tf-psa-crypto: update reference
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-10 10:07:38 +02:00
Ronald Cron
e5210e0968
Merge pull request #10371 from ronald-cron-arm/remove-legacy-ecc-crypto-options
...
Prepare for the removal of legacy ECC crypto options
2025-09-09 13:26:27 +00:00
David Horstmann
008326f08b
Merge pull request #10386 from davidhorstmann-arm/upgrade-python-packages
...
Upgrade packages in requirements.txt
2025-09-08 15:32:12 +00:00
Ronald Cron
5df9d9d53e
ssl-opt.sh: Fix dependency on ECDSA
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-08 15:40:12 +02:00
Ronald Cron
a450affbca
Fix MBEDTLS_SSL_TLS1_2_SOME_ECC definition
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-08 15:40:12 +02:00
Gilles Peskine
85cf16dd96
Merge pull request #10388 from gilles-peskine-arm/threading-1.0-mutex-init-mbedtls-preliminary
...
mbedtls prerequisite: Return int from platform mutex_init
2025-09-08 09:49:43 +00:00
Gilles Peskine
f0b8364cff
Allow metatest.c to use crypto internal headers
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2025-09-06 18:39:39 +02:00
David Horstmann
6c30c0040e
Upgrade packages in requirements.txt
...
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2025-09-05 09:34:15 +01:00
Ben Taylor
a2aa7daaca
Change unset of MBEDTLS config to more standard method
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-04 11:22:52 +01:00
Ben Taylor
ecde0aaa41
replace undef with deletion in p256m test
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-02 11:13:05 +01:00
Ben Taylor
dfdac46163
Update header guard use in p256m test
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-02 11:13:05 +01:00
David Horstmann
f790fb84fc
Merge pull request #10367 from davidhorstmann-arm/configuration-crypto-sh-legacy-ecdsa-deterministic
...
Remove component uses of `MBEDTLS_ECDSA_DETERMINISTIC`
2025-09-02 09:36:46 +00:00
Manuel Pégourié-Gonnard
d84023152b
Merge pull request #10351 from bjwtaylor/move-pk-interfaces
...
Move private pk interfaces to mbedtls/private/pk.h
2025-09-01 10:35:33 +00:00
Ben Taylor
a8a9beccc2
Remove MBEDTLS_DECLARE_PRIVATE_IDENTIFIERS from ssl_test_lib.h as it is not required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-01 08:21:24 +01:00
Ben Taylor
69aa8d08e0
Remove MBEDTLS_DECLARE_PRIVATE_IDENTIFIERS from ssl_clinet.c as it it not required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-01 08:21:24 +01:00
Ben Taylor
f19a900ed5
Temporarily include private symbols in sample programs
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-01 08:21:24 +01:00