Add test for building without CTR_DRBG

People who prefer to rely on HMAC_DRBG (for example because they use it for
deterministic ECDSA and don't want a second DRBG for code size reasons) should
be able to build and run the tests suites without CTR_DRBG.

Ideally we should make sure the level of testing (SSL) is the same regardless
of which DRBG modules is enabled, but that's a more significant piece of work.
For now, just ensure everything builds and `make test` passes.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2020-05-28 12:55:10 +02:00
parent f2c6e340de
commit 014ff5b0d6

View file

@ -787,6 +787,20 @@ component_test_rsa_no_crt () {
if_build_succeeded tests/compat.sh -t RSA if_build_succeeded tests/compat.sh -t RSA
} }
component_test_no_ctr_drbg () {
msg "build: Full minus CTR_DRBG"
scripts/config.pl full
scripts/config.pl unset MBEDTLS_CTR_DRBG_C
CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
make
msg "test: no CTR_DRBG"
make test
# no SSL tests as they all depend on CTR_DRBG so far
}
component_test_small_ssl_out_content_len () { component_test_small_ssl_out_content_len () {
msg "build: small SSL_OUT_CONTENT_LEN (ASan build)" msg "build: small SSL_OUT_CONTENT_LEN (ASan build)"
scripts/config.pl set MBEDTLS_SSL_IN_CONTENT_LEN 16384 scripts/config.pl set MBEDTLS_SSL_IN_CONTENT_LEN 16384