Simon Butcher
e372d5fb8f
Merge remote-tracking branch 'origin/pr/558' into baremetal
2019-05-09 17:03:18 +01:00
Simon Butcher
999ac174cc
Merge remote-tracking branch 'origin/pr/566' into baremetal
2019-05-09 16:59:02 +01:00
Simon Butcher
ec998c6426
Merge remote-tracking branch 'origin/pr/564' into baremetal
2019-05-09 16:56:42 +01:00
Jarno Lamsa
8751e35751
Remove baremetal from build component names
2019-05-02 13:04:08 +03:00
Jarno Lamsa
4498de57b8
Address review comments about all.sh
2019-05-02 11:45:57 +03:00
Jarno Lamsa
0668b8f59e
Description of MBEDTLS_USE_UECC
2019-05-02 09:39:09 +03:00
Jarno Lamsa
d91f7fa26b
Add native build targets for uecc baremetal config
2019-04-30 14:29:23 +03:00
Jarno Lamsa
65ea285759
Fix typo
2019-04-30 13:00:41 +03:00
Jarno Lamsa
f6371ff923
Add armcc5 build for uecc and baremetal config
2019-04-30 10:10:03 +03:00
Jarno Lamsa
46132207f8
Make compiler happy when MBEDTLS_USE_UECC disabled
2019-04-29 14:29:52 +03:00
Jarno Lamsa
00c0aa01b4
Exclude MBEDTLS_USE_UECC from the full config
2019-04-29 12:59:10 +03:00
Jarno Lamsa
ce3cb64aeb
Fix check-names.sh
2019-04-29 12:07:43 +03:00
Jarno Lamsa
5b871285f5
MBEDTLS_USE_UECC and MBEDTLS_NO_64BIT_MULTIPLICATION conflicting
2019-04-29 10:29:06 +03:00
Jarno Lamsa
55427964b1
Guard tinycrypt files with MBEDTLS_USE_UECC
2019-04-29 10:25:23 +03:00
Jarno Lamsa
8557fc9220
Add whitelist for uECC files for check-names.sh
...
Whitelist currently includes the unmatching symbols from uECC files.
This is now specific for the baremetal branch.
2019-04-26 16:22:10 +03:00
Jarno Lamsa
95de220ade
Ignore tinycrypt headers from doxygen input
2019-04-25 15:11:29 +03:00
Jarno Lamsa
02493afe6c
Ignore tinycrypt files from check-files.py
2019-04-25 14:56:17 +03:00
Jarno Lamsa
6fe99be972
Fix check-generated-files after creating a flag
2019-04-25 13:54:32 +03:00
Jarno Lamsa
6f519a3b22
Fix typo in CMakeLists.txt
2019-04-25 13:51:54 +03:00
Jarno Lamsa
337dad98f6
Tinycrypt support for makefile builds
2019-04-25 11:00:41 +03:00
Jarno Lamsa
187fbb1334
Use mbedtls_platform_zeroize in uecc code
...
ecc_dh.c used memset and gcc-specific asm-commands, changed those
to use mbedtls_platform_zeroize to allow compilation with different
compilers.
2019-04-25 09:03:19 +03:00
Simon Butcher
2e7c7cd756
Merge remote-tracking branch 'public/mbedtls-2.16' into baremetal
...
* public/mbedtls-2.16: (40 commits)
Clarify comment mangled by an earlier refactoring
Add an "out-of-box" component
Run ssl-opt.sh on 32-bit runtime
Fix typo in data_file generator code
Give credit to OSS-Fuzz for #2404
Remove ssl_cert_test sample app
Fix the proxy seed in Travis runs
Update library version to 2.16.1
Fix errors in AEAD test function
x509.c: Fix potential memory leak in X.509 self test
Remove Circle CI script
Fix ChangeLog entry ordering
Fix typo
Add non-regression test for buffer overflow
Improve documentation of mbedtls_mpi_write_string()
Adapt ChangeLog
Fix 1-byte buffer overflow in mbedtls_mpi_write_string()
Change Perl to Python in test builds
Fix default port number information
Silence pylint
...
2019-04-24 14:51:33 +01:00
Jarno Lamsa
9454dfaed4
Add a new flag for the micro-ecc
2019-04-24 16:28:59 +03:00
Jarno Lamsa
d50fd6b373
Remove unused headers from uecc sources
2019-04-24 16:19:50 +03:00
Jarno Lamsa
79e3b946db
Add CMake support for uecc
2019-04-24 16:17:10 +03:00
Jarno Lamsa
18987a420b
Add micro-ecc based ecc-files to mbedtls
...
The files are from https://github.com/intel/tinycrypt
Using commit 6e0eb53fc8403988f97345e94081b0453f47231d as a base.
2019-04-24 15:40:43 +03:00
Hanno Becker
ba8cd67467
Guard CID implementations by MBEDTLS_SSL_CID
2019-04-23 12:31:42 +01:00
Hanno Becker
b60c85c67c
Indicate ssl-opt.sh CID tests only test the stub CID code
2019-04-23 12:02:34 +01:00
Hanno Becker
8d0893d0b0
Add warnings about status of implementation of CID API
2019-04-23 12:01:20 +01:00
Hanno Becker
963cb35a24
Fix use of requires_config_enabled in ssl-opt.sh
...
requires_config_enabled doesn't support multiple config options.
Tests having multiple configuration dependencies must be prefixed
with multiple invocations of requires_config_enabled instead.
2019-04-23 11:52:44 +01:00
Hanno Becker
4f98b6ad17
Fix typo in CID test in ssl-opt.sh
2019-04-23 11:52:14 +01:00
Hanno Becker
6dde3dd8ec
Print peer CID from ssl_client2
2019-04-23 11:51:47 +01:00
Hanno Becker
8be8a95dea
Print peer CID from ssl_server2
2019-04-23 11:51:40 +01:00
Hanno Becker
14751aa966
Improve wording of CID debug msg in ssl_server2 example application
2019-04-23 11:39:53 +01:00
Hanno Becker
b9b7e29536
Clarify that mbedtls_ssl_set_cid() applies to all subsequent HSs
2019-04-23 11:38:47 +01:00
Hanno Becker
d928c06d01
Document that the use of CID is disabled by default.
...
(Even if MBEDTLS_SSL_CID is set in config.h)
2019-04-23 11:37:38 +01:00
Hanno Becker
efde5b2e96
Reference CID Draft in Connection ID documentation in config.h
2019-04-23 11:36:56 +01:00
Jaeden Amero
20d707dd3e
Merge remote-tracking branch 'origin/pr/2571' into mbedtls-2.16
...
* origin/pr/2571:
Clarify comment mangled by an earlier refactoring
Add an "out-of-box" component
Run ssl-opt.sh on 32-bit runtime
2019-04-16 15:10:18 +01:00
Jaeden Amero
69bc50a9a9
Merge remote-tracking branch 'origin/pr/2557' into mbedtls-2.16
...
* origin/pr/2557:
Give credit to OSS-Fuzz for #2404
2019-04-16 15:08:08 +01:00
Jaeden Amero
d17b5e9abc
Merge remote-tracking branch 'origin/pr/2553' into mbedtls-2.16
...
* origin/pr/2553:
Remove ssl_cert_test sample app
2019-04-16 15:07:25 +01:00
Jaeden Amero
cc9b400271
Merge remote-tracking branch 'origin/pr/2568' into mbedtls-2.16
...
* origin/pr/2568:
Fix typo in data_file generator code
2019-04-16 14:40:36 +01:00
Jaeden Amero
544fe92221
Merge remote-tracking branch 'origin/pr/2550' into mbedtls-2.16
...
* origin/pr/2550:
Fix the proxy seed in Travis runs
2019-04-16 14:38:18 +01:00
Simon Butcher
7326bc8577
Merge pull request #2524 from hanno-arm/baremetal_config
...
[Baremetal] Introduce baremetal config and scripts to measure memory usage
2019-04-12 17:19:40 +01:00
Gilles Peskine
0a47c4ffbb
Clarify comment mangled by an earlier refactoring
2019-04-10 18:47:51 +02:00
Gilles Peskine
99a3310fba
Add an "out-of-box" component
...
Just run `make` and `make test`. And `selftest` for good measure.
2019-04-10 18:47:51 +02:00
Gilles Peskine
7dd44b28f1
Run ssl-opt.sh on 32-bit runtime
...
Run ssl-opt.sh on x86_32 with ASan. This may detect bugs that only
show up on 32-bit platforms, for example due to size_t overflow.
For this component, turn off some memory management features that are
not useful, potentially slow, and may reduce ASan's effectiveness at
catching buffer overflows.
2019-04-10 18:47:50 +02:00
Hanno Becker
224eb0c53b
Use AES-128 instead of AES-256 in baremetal ciphersuite
2019-04-10 12:24:10 +01:00
Jaeden Amero
e59c4193fb
Fix typo in data_file generator code
...
The file to generate is `server10_int3-bs.pem`, not
`server10-bs_int3-bs.pem`.
2019-04-10 11:50:36 +01:00
Hanno Becker
2dcdc926b6
Add basic Connection ID tests to ssl-opt.sh
2019-04-09 18:27:04 +01:00
Hanno Becker
1029acee1d
ssl_server2: Add cmd line options to configure use of CID extension
2019-04-09 18:27:04 +01:00