4 commits

Author	SHA1	Message	Date
Janos Follath	d4ac4e037b	Merge pull request #736 from mpg/cf-varpos-copy-dev-restricted ... Constant-flow copy of HMAC from variable position	2020-08-25 14:35:55 +01:00
Dan Handley	50118144c6	Update remaining copyright notices to use Linux Foundation guidance ... Update copyright notices to newly added files since merge of original PR #3546 "Update copyright notices to use Linux Foundation guidance". Generated using the same script. Signed-off-by: Dan Handley <dan.handley@arm.com>	2020-08-20 11:20:12 +01:00
Manuel Pégourié-Gonnard	73afa37507	Add option to test constant-flow with valgrind ... Currently the new component in all.sh fails because mbedtls_ssl_cf_memcpy_offset() is not actually constant flow - this is on purpose to be able to verify that the new test works. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2020-08-20 10:22:41 +02:00
Manuel Pégourié-Gonnard	6240defd17	Add MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN ... This option allows to test the constant-flow nature of selected code, using MemSan and the fundamental observation behind ctgrind that the set of operations allowed on undefined memory by dynamic analysers is the same as the set of operations allowed on secret data to avoid leaking it to a local attacker via side channels, namely, any operation except branching and dereferencing. (This isn't the full story, as on some CPUs some instructions have variable execution depending on the inputs, most notably division and on some cores multiplication. However, testing that no branch or memory access depends on secret data is already a good start.) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2020-07-15 12:26:22 +02:00