| 394baaf7 | 06-Nov-2025 |
Vladislavas Putys <vputys@witekio.com> |
core: ltc: rsa_verify_hash: fix panic on hash length difference
Fixing coupled conditions in rsa_verify_hash_ex(): inc1 was set to 1 in situations when ftmn_set_check_res_memcmp() was not executed a
core: ltc: rsa_verify_hash: fix panic on hash length difference
Fixing coupled conditions in rsa_verify_hash_ex(): inc1 was set to 1 in situations when ftmn_set_check_res_memcmp() was not executed and leading to a panic in FTMN_CALLEE_DONE_CHECK()
Signed-off-by: Vladislavas Putys <vputys@witekio.com> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 0a54a402 | 05-Feb-2025 |
Valentin Caron <valentin.caron@foss.st.com> |
plat: stm32mp2: make the platform ready to compile with SCP-Fw
STM32MP2 could use SCP-Fw to handle SCMI messages. By default this is disabled, but it could be enable with these config: CFG_SCMI_SC
plat: stm32mp2: make the platform ready to compile with SCP-Fw
STM32MP2 could use SCP-Fw to handle SCMI messages. By default this is disabled, but it could be enable with these config: CFG_SCMI_SCPFW=y CFG_SCP_FIRMWARE=<path_to_SCP-Fw_srcs>
On STM32MP2, OP-TEE use the resources describe in the "scmi" device-tree node to configure SCP-Fw.
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| c9a214b7 | 05-Feb-2025 |
Valentin Caron <valentin.caron@foss.st.com> |
scmi-server: configure reset dom. service from DT
scmi_server_scpfw can now retrieve resets description from DT.
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Acked-by: Jerome Forissie
scmi-server: configure reset dom. service from DT
scmi_server_scpfw can now retrieve resets description from DT.
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| b61cea09 | 05-Feb-2025 |
Valentin Caron <valentin.caron@foss.st.com> |
scmi-server: configure clock service from DT
scmi_server_scpfw can now retrieve clocks description from DT.
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Acked-by: Jerome Forissier <je
scmi-server: configure clock service from DT
scmi_server_scpfw can now retrieve clocks description from DT.
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| ce6ea411 | 05-Feb-2025 |
Valentin Caron <valentin.caron@foss.st.com> |
scmi-server: configure SCP-firmware from DT
Use the node "scmi" in device-tree, to fill a struct scpfw_config. Pass the structure to SCP-fw through scpfw_configure() and clean this structure.
Signe
scmi-server: configure SCP-firmware from DT
Use the node "scmi" in device-tree, to fill a struct scpfw_config. Pass the structure to SCP-fw through scpfw_configure() and clean this structure.
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| acbc889c | 13-Jun-2023 |
Etienne Carriere <etienne.carriere@foss.st.com> |
core: scmi_server: fix alphabetical order
Fixes alphabetical ordering of CFG_SCPFW_MOD_* configuration switches in conf.mk and conf-optee-stm32mp1.mk.
Signed-off-by: Etienne Carriere <etienne.carri
core: scmi_server: fix alphabetical order
Fixes alphabetical ordering of CFG_SCPFW_MOD_* configuration switches in conf.mk and conf-optee-stm32mp1.mk.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com> Signed-off-by: Valentin Caron <valentin.caron@foss.st.com> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| f072a39a | 11-Sep-2024 |
Levi Yun <yeoreum.yun@arm.com> |
core: introduce libefi for StandaloneMm
According to Platform Initialization (PI) Specification [1] and Discussion on edk2 mailing list [2], StandaloneMm shouldn't create Hob but it should be passed
core: introduce libefi for StandaloneMm
According to Platform Initialization (PI) Specification [1] and Discussion on edk2 mailing list [2], StandaloneMm shouldn't create Hob but it should be passed from TF-A. That's why StandaloneMm in Arm wouldn't produce Hob by itself [3] but other software stack should pass boot information via PHIT Hob.
This patch introduces libefi including create Hob to deliver boot information to StandaloneMm and defines related data structures.
Link: https://uefi.org/sites/default/files/resources/PI_Spec_1_6.pdf [1] Link: https://edk2.groups.io/g/devel/topic/103675962#114283 [2] Link: https://github.com/tianocore/edk2/pull/6116 [3]
Tested-by: Ilias Apalodimas <ilias.apalodimas@linaro.org> Acked-by: Ilias Apalodimas <ilias.apalodimas@linaro.org> Acked-by: Jens Wiklander <jens.wiklander@linaro.org> Signed-off-by: Levi Yun <yeoreum.yun@arm.com>
show more ...
|
| 0fc2d294 | 24-Jan-2025 |
Vincent Guittot <vincent.guittot@linaro.org> |
scmi: Fix qemu_v8 configuration
OP-TEE SCMI server on qemu_v8 doesn't boot with latest SCP-firmware when notification is enabled since the addition of clock notification in SCP. This comes from that
scmi: Fix qemu_v8 configuration
OP-TEE SCMI server on qemu_v8 doesn't boot with latest SCP-firmware when notification is enabled since the addition of clock notification in SCP. This comes from that there is no notification channel supported yet for OP-TEE SCMI server. Disable notification until notification support is added.
Signed-off-by: Vincent Guittot <vincent.guittot@linaro.org> Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| d1957bb3 | 24-Jan-2025 |
Jerome Forissier <jerome.forissier@linaro.org> |
ltc: ctr: fix counter increment when LTC_FAST is defined
In CTR mode the counter needs to be incremented upon completion of each block. Unfortunately, if there is no crypto acceleration (accel_ctr_e
ltc: ctr: fix counter increment when LTC_FAST is defined
In CTR mode the counter needs to be incremented upon completion of each block. Unfortunately, if there is no crypto acceleration (accel_ctr_encrypt == NULL) and if LTC_FAST is defined, this does not happen. Add the missing call to fix the issue.
Reported-by: Jork Loeser <jork.loeser@microsoft.com> Closes: https://lists.trustedfirmware.org/archives/list/op-tee@lists.trustedfirmware.org/thread/J4MMZPCM2MNKC2KWAXZUMTVEJP56U6OI/ Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 04e46975 | 16-Dec-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
tree-wide: use ROUNDUP_DIV() where applicable
Use ROUNDUP_DIV() instead of ROUNDUP(..., size) / size where applicable.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com> Reviewed-by: Je
tree-wide: use ROUNDUP_DIV() where applicable
Use ROUNDUP_DIV() instead of ROUNDUP(..., size) / size where applicable.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| eaa924ef | 02-Dec-2024 |
Matej Zachar <zachar.matej@gmail.com> |
core: ltc: Ed25519 sign correctly returns TEE_ERROR_SHORT_BUFFER
Returns TEE_ERROR_SHORT_BUFFER when there is not enough space to hold signature so applications using the API can determine the requi
core: ltc: Ed25519 sign correctly returns TEE_ERROR_SHORT_BUFFER
Returns TEE_ERROR_SHORT_BUFFER when there is not enough space to hold signature so applications using the API can determine the required buffer size when supplying 0 sized signature buffer.
This is happening from PKCS#11 TA when client library uses 1. method from "5.2 Conventions for functions returning output in a variable-length buffer" defined in PKCS#11 v3.0 spec.
Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com> Signed-off-by: Matej Zachar <zachar.matej@gmail.com>
show more ...
|
| a796042a | 08-Oct-2024 |
Yuichi Sugiyama <yuichis@ricsec.co.jp> |
core: lib: qcbor: add build configuration for QCBOR library
Add the necessary build configuration for integrating the QCBOR library. Update to core.mk ensure that the library is included when CFG_QC
core: lib: qcbor: add build configuration for QCBOR library
Add the necessary build configuration for integrating the QCBOR library. Update to core.mk ensure that the library is included when CFG_QCBOR is enabled. A sub.mk file is also added to define the source files and global include directories for QCBOR.
Signed-off-by: Yuichi Sugiyama <yuichis@ricsec.co.jp> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Etienne Carriere <etienne.carriere@foss.st.com> Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| b586599b | 29-Oct-2024 |
Yuichi Sugiyama <yuichis@ricsec.co.jp> |
core: lib: qcbor: add SPDX license identifiers to QCBOR files
Add SPDX license identifiers to QCBOR files as per BSD-3-Clause licensing requirements, ensuring clear license information across both h
core: lib: qcbor: add SPDX license identifiers to QCBOR files
Add SPDX license identifiers to QCBOR files as per BSD-3-Clause licensing requirements, ensuring clear license information across both header and source files.
Signed-off-by: Yuichi Sugiyama <yuichis@ricsec.co.jp> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Etienne Carriere <etienne.carriere@foss.st.com> Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 2e6f5bf1 | 11-Oct-2024 |
Yuichi Sugiyama <yuichis@ricsec.co.jp> |
core: import QCBOR library
Import QCBOR v1.4.1 from https://github.com/laurencelundblade/QCBOR Commit 4487f10e1bf258434fb8a39e4f59c29e31910ad0 (tag v1.4.1)
Certain files will never be needed and ar
core: import QCBOR library
Import QCBOR v1.4.1 from https://github.com/laurencelundblade/QCBOR Commit 4487f10e1bf258434fb8a39e4f59c29e31910ad0 (tag v1.4.1)
Certain files will never be needed and are thus removed (reducing number of lines to almost 60%): rm -f CMakeLists.txt Makefile SECURITY.md rm -f .gitignore rm -f cmd_line_main.c example.c example.h ub-example.c ub-example.h rm -rf QCBOR.xcodeproj doc doxygen test rm -rf .git .github
Signed-off-by: Yuichi Sugiyama <yuichis@ricsec.co.jp> Acked-by: Jens Wiklander <jens.wiklander@linaro.org> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| 578bc4fe | 01-Oct-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
core: dt: cache embedded DTB node information
Optimize OP-TEE boot time regarding parsing of the embedded DTB content when using libfdt. The library functions fdt_parent_offset() and fdt_node_offset
core: dt: cache embedded DTB node information
Optimize OP-TEE boot time regarding parsing of the embedded DTB content when using libfdt. The library functions fdt_parent_offset() and fdt_node_offset_by_phandle() are not very efficient since they parse the DTB from root node to target node to look up for, respectively, the node offset of a node parent and the node offset related to a node phandle. Helper functions fdt_reg_base_address() and fdt_reg_size() are also affected since they are based on fdt_parent_offset() to find the #address-cells and #size-cells properties of a node parent.
Optimize this by parsing the embedded DT once and caching node information (parent node, phandle value, parent node #address-cells and #size-cells values) in a array. Parse the array instead of the DT for find these information.
We made few tests to use bisection or hash tables for look up the information in the cache array. The gain was very small, likely due to the number of DT node involved in the platform is relatively small (only several hundreds or nodes).
This feature is enabled upon configuration switch CFG_DT_CACHED_NODE_INFO.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com> Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| b339ffbd | 08-Jul-2024 |
Abhishek Revadekar <abhishek.rvdkr@yahoo.com> |
core: lib: fix undefined behavior shift_out_of_bounds in libtomcrypt
Replace 'i64' with 'u64' data type for variables requiring bitwise shift operations.
xtest error log - 4007_ed25519: --- $ xtest
core: lib: fix undefined behavior shift_out_of_bounds in libtomcrypt
Replace 'i64' with 'u64' data type for variables requiring bitwise shift operations.
xtest error log - 4007_ed25519: --- $ xtest 4007_ed25519
E/TC:? 0 Undefined behavior shift_out_of_bounds at core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:55 col 12 E/TC:0 0 Panic at core/kernel/ubsan.c:193 <__ubsan_handle_shift_out_of_bounds> E/TC:0 0 TEE load address @ 0x8e100000 E/TC:0 0 Call stack: E/TC:0 0 0x8e10d6c0 print_kernel_stack at optee_os/core/arch/arm/kernel/unwind_arm64.c:89 E/TC:0 0 0x8e130c7c __do_panic at optee_os/core/kernel/panic.c:73 E/TC:0 0 0x8e134c9c __ubsan_handle_shift_out_of_bounds at optee_os/core/kernel/ubsan.c:193 E/TC:0 0 0x8e1cc740 car25519 at optee_os/core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:55 (discriminator 1) E/TC:0 0 0x8e1cccbc M at optee_os/core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:135 E/TC:0 0 0x8e1cced8 add at optee_os/core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:261 E/TC:0 0 0x8e1ce594 scalarmult at optee_os/core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:294 E/TC:0 0 0x8e1ce6ac scalarbase at optee_os/core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:307 E/TC:0 0 0x8e1cf184 tweetnacl_crypto_sk_to_pk at optee_os/core/lib/libtomcrypt/src/pk/ec25519/tweetnacl.c:317 E/TC:0 0 0x8e1c063c ed25519_make_key at optee_os/core/lib/libtomcrypt/src/pk/ed25519/ed25519_make_key.c:25 (discriminator 2) E/TC:0 0 0x8e1bfef8 crypto_acipher_gen_ed25519_key at optee_os/core/lib/libtomcrypt/ed25519.c:64 E/TC:0 0 0x8e16b228 tee_svc_obj_generate_key_ed25519 at optee_os/core/tee/tee_svc_cryp.c:2312 E/TC:0 0 0x8e108110 scall_do_call at optee_os/core/arch/arm/kernel/arch_scall_a64.S:140 E/TC:0 0 0x8e107544 thread_scall_handler at optee_os/core/arch/arm/kernel/thread.c:1138 E/TC:0 0 0x8e1048b4 el0_svc at optee_os/core/arch/arm/kernel/thread_a64.S:850 ---
Signed-off-by: Abhishek Revadekar <abhishek.rvdkr@yahoo.com> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| bf870398 | 22-Mar-2024 |
Vincent Guittot <vincent.guittot@linaro.org> |
core/scmi: export sub.mk files in SCP-firmware
In order to ease the update of makefile when C or Header files of SCP-firmware project changes, we integrate them in the optee subdirectory of SCP-firm
core/scmi: export sub.mk files in SCP-firmware
In order to ease the update of makefile when C or Header files of SCP-firmware project changes, we integrate them in the optee subdirectory of SCP-firmware.
sub-optee-fvp.mk and sub-optee-stm32mp1.mk are moved unchanged in their product directories of SCP-repository.
scmi-server/sub.mk is split: - macro and compilation flags stay in optee-os - srcs and incdirs are moved in product/optee directory
All modules and products related to optee are located in the product/optee directory in the SCP-firmware repository, adding an "optee-" prefix in the product name is useless. Remove it.
the ci will temporary point to the sha1 of the merged MR branch of SCP-firmware. This will be replaced with next SCP-firmware tag v2.15.0 once released.
Signed-off-by: Vincent Guittot <vincent.guittot@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| 822f251d | 16-Apr-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
plat-stm32mp1: fix SCP-firmware config when using OP-TEE share memory
Enable the required SCP-firmware module when using OP-TEE shared memory or a piece of SRAM for SCMI communication which defined
plat-stm32mp1: fix SCP-firmware config when using OP-TEE share memory
Enable the required SCP-firmware module when using OP-TEE shared memory or a piece of SRAM for SCMI communication which defined by the boolean configuration switch CFG_STM32MP1_SCMI_SHM_SYSRAM.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| 29be83da | 25-Jun-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
libtomcrypt: fix calloc() against GCC 14 -Wcalloc-transposed-args
Fix use of XCALLOC() macro against GCC 14 directive -Wcalloc-transposed-args that makes GCC to complain with an warning/error trace
libtomcrypt: fix calloc() against GCC 14 -Wcalloc-transposed-args
Fix use of XCALLOC() macro against GCC 14 directive -Wcalloc-transposed-args that makes GCC to complain with an warning/error trace message like:
warning: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument [-Wcalloc-transposed-args]
This change was proposed and merged in mainline libtomcrypt repository.
No functional change.
Link: https://github.com/libtom/libtomcrypt/pull/647 Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com> Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 86ee543b | 07-Mar-2024 |
Sami Tolvanen <samitolvanen@google.com> |
core: pass TEE_ATTR_RSA_OAEP_MGF_HASH to RSA-OAEP implementations
OP-TEE currently doesn't support using a different hash for MGF1 with RSA-OAEP. However, this is required for AOSP compatibility (e.
core: pass TEE_ATTR_RSA_OAEP_MGF_HASH to RSA-OAEP implementations
OP-TEE currently doesn't support using a different hash for MGF1 with RSA-OAEP. However, this is required for AOSP compatibility (e.g. in EncryptionOperationsTest.RsaOaepWithMGFDigestSuccess [1]).
Pass the MGF1 attribute to crypto implementations. Note that only libtomcrypt supports this feature at the moment, so other implementations will either fail or fall back to libtomcrypt when passed a different MGF1 hash.
Link: https://android.googlesource.com/platform/hardware/interfaces/+/refs/heads/main/security/keymint/aidl/vts/functional/KeyMintTest.cpp#5552 [1] Signed-off-by: Sami Tolvanen <samitolvanen@google.com> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 47d5e6cb | 14-Jun-2024 |
Jerome Forissier <jerome.forissier@linaro.org> |
libutils, zlib: fix Clang warnings
Clang 18.1.6 reports the following warnings:
CC out/arm/ldelf-lib/libutils/isoc/bget_malloc.o In file included from lib/libutils/isoc/bget_malloc.c:127:
libutils, zlib: fix Clang warnings
Clang 18.1.6 reports the following warnings:
CC out/arm/ldelf-lib/libutils/isoc/bget_malloc.o In file included from lib/libutils/isoc/bget_malloc.c:127: lib/libutils/isoc/bget.c:607:7: warning: a function definition without a prototype is deprecated in all versions of C and is not supported in C23 [-Wdeprecated-non-prototype] 607 | void *bget(requested_align, hdr_size, requested_size, poolset) | ^
And same with lib/zlib/{adler32.c,inffast.c,inflate.c,zutil.c}.
In addition, zutil.c causes:
CC out/arm/core/lib/zlib/zutil.o core/lib/zlib/zutil.c:28:33: warning: a function declaration without a prototype is deprecated in all versions of C [-Wstrict-prototypes] 28 | const char * ZEXPORT zlibVersion() | ^ | void
Add -Wno-deprecated-non-prototype to libutils' bget_malloc.c to silence the first series, and simply remove -Wstrict-prototypes (added by default by mk/compile.mk) when building zlib.
Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Joakim Bech <joakim.bech@linaro.org> Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| ecaf032b | 05-Jun-2024 |
Gatien Chevallier <gatien.chevallier@foss.st.com> |
core: lib: scmi-server: drop CFG_CROSS_COMPILE when compiling SCP firmware
No need to specify this build directive as there is no cross-compilation using CMake. This solve the following warning:
CM
core: lib: scmi-server: drop CFG_CROSS_COMPILE when compiling SCP firmware
No need to specify this build directive as there is no cross-compilation using CMake. This solve the following warning:
CMake Warning: Manually-specified variables were not used by the project:
CFG_CROSS_COMPILE
Signed-off-by: Gatien Chevallier <gatien.chevallier@foss.st.com> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| f6be0e13 | 30-May-2024 |
Jacob Kroon <jacobkr@axis.com> |
core: ltc: Fix building with mbedtls
Fix building OP-TEE with:
make PLATFORM=vexpress \ PLATFORM_FLAVOR=juno \ CFG_CRYPTOLIB_NAME=mbedtls \ CFG_CRYPTOLIB_DIR=lib/libmbedtls ... core/
core: ltc: Fix building with mbedtls
Fix building OP-TEE with:
make PLATFORM=vexpress \ PLATFORM_FLAVOR=juno \ CFG_CRYPTOLIB_NAME=mbedtls \ CFG_CRYPTOLIB_DIR=lib/libmbedtls ... core/lib/libtomcrypt/aes_accel.c: In function ‘aes_ctr_encrypt_nblocks’: core/lib/libtomcrypt/aes_accel.c:182:21: error: ‘CTR_COUNTER_LITTLE_ENDIAN’ undeclared (first use in this function) 182 | if (mode == CTR_COUNTER_LITTLE_ENDIAN) {
Signed-off-by: Jacob Kroon <jacobkr@axis.com> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 2a65ecaf | 06-May-2024 |
Jens Wiklander <jens.wiklander@linaro.org> |
Squashed commit upgrading to libtomcrypt-1.18.2-develop-20240412
Squash merging branch import/libtomcrypt-1.18.2-develop-20240412
165e1fe7816a ("core: ltc: update for libtomcrypt changes") ff29487
Squashed commit upgrading to libtomcrypt-1.18.2-develop-20240412
Squash merging branch import/libtomcrypt-1.18.2-develop-20240412
165e1fe7816a ("core: ltc: update for libtomcrypt changes") ff294871020d ("core: ltc: rsa_verify_hash: fix panic on hash mismatch") 43363afc3d5e ("core: ltc: add fault mitigation in crypto_acipher_rsassa_verify()") d3040d8bc691 ("libtomcrypt: Remove prng_state* NULL pointer check from ed25519_make_key()") a1e9686a20cf ("libtomcrypt: ctr_encrypt(): adjust for OP-TEE CE accelerated routines") eba1524a3989 ("libtomcrypt: define LTC_MPI at the same time as LTC_DER") e8f42d80d27f ("core: libtomcrypt: Remove prng_state* NULL pointer check from x25519_make_key()") edb8618bfe6c ("core: ltc: add SM2 curve parameters") 1713825bebd1 ("core: ltc: make key in accel_ecb_encrypt() and accel_ecb_decrypt() const") 53d2509130ce ("core: ltc: fix 'switch case misses default'") 5c7e0de468d1 ("core: ltc: add custom DH key generation function dh_make_key()") cba20f6a156e ("core: ltc: tomcrypt_custom.h: OP-TEE thread support") 7f247add8fd9 ("libtomcrypt: implement zeromem() with memzero_explicit()") 96ac368c5e68 ("LTC: add GHASH acceleration") 79bd5cb8391c ("ltc: make cipher_descriptor a pointer to descriptors") a9f0d677e922 ("ltc: make hash_descriptor a pointer to descriptors") 82feb7ac9709 ("ltc: make prng_descriptor a pointer to descriptors") ae75124e3113 ("libtomcrypt: tomcrypt_private.h: add HASH_PROCESS_NBLOCKS") a4281f43ea65 ("ECC: optimize the pool of temporary variables") b32f84118399 ("Import LibTomCrypt v1.18.2 branch "develop" (Apr 12, 2024)") 035c58eeb602 ("Remove LibTomCrypt")
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (vexpress-qemu_armv8a)
show more ...
|
| 5c4fcb77 | 12-Apr-2024 |
Jens Wiklander <jens.wiklander@linaro.org> |
core: ltc: sub.mk: reorganize and simplify
Reorganize the LTC sub.mk by collecting configuration and files in groups by algorithm or feature.
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.or
core: ltc: sub.mk: reorganize and simplify
Reorganize the LTC sub.mk by collecting configuration and files in groups by algorithm or feature.
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|