Commit Graph

1727 Commits

Author SHA1 Message Date
Ronald Cron 9a10e398fa Simplify footprint.sh
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-09-10 17:12:05 +02:00
Ronald Cron b01be14907 Fix footprint.sh
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-09-10 15:23:32 +02:00
Ronald Cron ab7610c318 Cleanup following the removal of entropy options
Cleanup following the removal in TF-PSA-Crypto of:
- MBEDTLS_NO_PLATFORM_ENTROPY
- MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
- MBEDTLS_ENTROPY_HARDWARE_ALT
- MBEDTLS_ENTROPY_MIN_HARDWARE

Only MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES was still
present in Mbed TLS.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-09-10 15:23:32 +02:00
Ronald Cron eb16a9d9ea Prepare for the removal of MBEDTLS_PLATFORM_GET_ENTROPY_ALT
We cannot remove it completely yet.
It must remain in config.py so that it is not
included in the full configuration.
A temporary exception is required for it in
analyze_outcomes.py.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-09-10 15:23:32 +02:00
Minos Galanakis 906950d8dc config/depends.py: Removed legacy options.
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-08-21 15:57:00 +01:00
Gilles Peskine bb8bafa5e5 Pacify uncrustify
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:23:05 +02:00
Gilles Peskine 4995d4435c Don't incude auxiliary headers that have alternative versions
When compiling with `MBEDTLS_PSA_CRYPTO_PLATFORM_FILE`, we must not include
`<psa/crypto_platform.h`. Same with `MBEDTLS_PSA_CRYPTO_STRUCT_FILE` and
`<psa/crypto_struct.h>`.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:19:32 +02:00
Gilles Peskine 409c688c4b Include mbedtls/platform_time.h conditionally on MBEDTLS_HAVE_TIME
Work around https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/393

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-26 00:17:57 +02:00
Gilles Peskine 8b006ce95f Invoke generate_query_config.pl from the root
Otherwise it can't find headers to include.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-25 19:51:17 +02:00
Gilles Peskine c0a562c895 query_config.fmt: glob headers instead of listing them explicitly
This lets us remove or rename crypto headers without hassle, and means we
don't risk forgetting to add a new header.

Fix #10323

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-25 18:12:37 +02:00
Bence Szépkúti 27125ceacf Update references to tf-psa-crypto/core/common.h
This commit was generated using the following command:

sed -i 's/\(^\|[^_]\)common\.h/\1tf_psa_crypto_common.h/g' \
    $(git ls-files .                                       \
        ':!:programs/fuzz'                                 \
        ':!:tests/psa-client-server'                       \
        ':!:tf-psa-crypto'                                 \
        ':!:framework')                                    \
    $(git grep -l 'tf-psa-crypto/core/common.h')

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-21 20:02:30 +02:00
Ronald Cron b5fd7b9a54 Merge pull request #10295 from gilles-peskine-arm/nv-seed-only-prepare-mbedtls
Allow builds with no RNG but entropy in an NV seed: prepare Mbed TLS
2025-07-18 11:56:41 +00:00
Gilles Peskine 0b49112329 Merge pull request #10212 from bjwtaylor/remove-hkdf
Remove hkdf
2025-07-17 09:57:11 +00:00
Bence Szépkúti 5956d28c0b Restrict CI-specific python requirements to Linux
The dependencies declared in ci.requirements.txt are only used in
scripts that we run on the Linux CI.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-16 14:18:12 +02:00
Bence Szépkúti 9dda0ca195 Don't install cryptography on the FreeBSD CI
Recent versions of cryptography require a Rust toolchain to install on
FreeBSD, which we do not have set up yet.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-16 13:33:17 +02:00
Bence Szépkúti 4561164e7c Freeze cryptography version on the CI at 35.0.0
The version was unspecified because of our use of Python 3.5 on the CI,
whichi has since been eliminated.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2025-07-16 13:29:55 +02:00
Gilles Peskine aeac0b31ac Disable new platform-related option
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-07-10 13:00:36 +02:00
David Horstmann ba2376c580 Merge pull request #10275 from ariwo17/remove-des-core-before-crypto
Remove DES from Mbed TLS core (except references blocked by TF PSA Crypto)
2025-07-09 09:52:31 +00:00
Ben Taylor 08072685bd remove hkdf header file from query_config template
Signed-off-by: Ben Taylor <bentay03@e140121.arm.com>
2025-07-08 14:24:44 +01:00
Anton Matkin 0c10d9b700 Improved the error generating script, so that it is a little more explicit
Signed-off-by: Anton Matkin <anton.matkin@arm.com>
2025-07-08 14:02:15 +02:00
Anton Matkin f94bc63fdb Updated generate_errors.pl to include private directories too: the header is deemed to be private if it is in a private subdirectory
Signed-off-by: Anton Matkin <anton.matkin@arm.com>
2025-07-07 14:15:34 +02:00
Ari Weiler-Ofek 86422e5509 Remove: DES selftest, component_test_psa_crypto_config_accel_des and dead DES mentions prior to TF-PSA-Crypto cleanup
Signed-off-by: Ari Weiler-Ofek <ariwei01@e134794.arm.com>
2025-07-07 11:29:50 +01:00
Ari Weiler-Ofek 2795197ba0 Remove DES handling from error generator
Signed-off-by: Ari Weiler-Ofek <ariwei01@e134794.arm.com>
2025-07-04 11:59:42 +01:00
Valerio Setti 8e8dc11406 scripts: generate_visualc_files: remove temporary Everest path fixes
Remove temporary path fixes for Everest's headers that were introduced
in #10225. Only the new and correct path of the header files is kept.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-23 21:54:58 +02:00
minosgalanakis a3857eb746 Merge pull request #10162 from davidhorstmann-arm/fix-bump-version
Fix bug in `bump_version.sh`
2025-06-20 16:50:35 +00:00