blob: 978cb71e5dc5603a1169f16d3427cdc5258122fa [file] [log] [blame]
Gilles Peskine62cf2e82020-03-27 16:35:23 +01001#! /usr/bin/env bash
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002
Simon Butcher3ea7f522016-03-07 23:22:10 +00003# all.sh
4#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02006# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
Gilles Peskine192c72f2017-12-21 15:59:21 +010019
20
21
22################################################################
23#### Documentation
24################################################################
25
Simon Butcher3ea7f522016-03-07 23:22:10 +000026# Purpose
Gilles Peskine192c72f2017-12-21 15:59:21 +010027# -------
Simon Butcher3ea7f522016-03-07 23:22:10 +000028#
SimonB2e23c822016-04-16 21:54:39 +010029# To run all tests possible or available on the platform.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +010030#
Gilles Peskine192c72f2017-12-21 15:59:21 +010031# Notes for users
32# ---------------
33#
SimonB2e23c822016-04-16 21:54:39 +010034# Warning: the test is destructive. It includes various build modes and
35# configurations, and can and will arbitrarily change the current CMake
Gilles Peskine192c72f2017-12-21 15:59:21 +010036# configuration. The following files must be committed into git:
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020037# * include/mbedtls/mbedtls_config.h
Gilles Peskine636c26a2020-03-04 20:46:15 +010038# * Makefile, library/Makefile, programs/Makefile, tests/Makefile,
39# programs/fuzz/Makefile
Gilles Peskine192c72f2017-12-21 15:59:21 +010040# After running this script, the CMake cache will be lost and CMake
41# will no longer be initialised.
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +010042#
Gilles Peskine192c72f2017-12-21 15:59:21 +010043# The script assumes the presence of a number of tools:
44# * Basic Unix tools (Windows users note: a Unix-style find must be before
45# the Windows find in the PATH)
46# * Perl
47# * GNU Make
48# * CMake
49# * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind)
Andrzej Kurek05be06c2018-06-28 04:41:50 -040050# * G++
Gilles Peskine192c72f2017-12-21 15:59:21 +010051# * arm-gcc and mingw-gcc
52# * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc
Gilles Peskine192c72f2017-12-21 15:59:21 +010053# * OpenSSL and GnuTLS command line tools, recent enough for the
Mateusz Starzykf5c53512021-04-15 13:28:52 +020054# interoperability tests. If they don't support old features which we want
55# to test, then a legacy version of these tools must be present as well
56# (search for LEGACY below).
Gilles Peskine192c72f2017-12-21 15:59:21 +010057# See the invocation of check_tools below for details.
58#
59# This script must be invoked from the toplevel directory of a git
60# working copy of Mbed TLS.
61#
Gilles Peskinece266c42020-03-28 18:50:43 +010062# The behavior on an error depends on whether --keep-going (alias -k)
63# is in effect.
64# * Without --keep-going: the script stops on the first error without
65# cleaning up. This lets you work in the configuration of the failing
66# component.
67# * With --keep-going: the script runs all requested components and
68# reports failures at the end. In particular the script always cleans
69# up on exit.
70#
Gilles Peskine192c72f2017-12-21 15:59:21 +010071# Note that the output is not saved. You may want to run
72# script -c tests/scripts/all.sh
73# or
74# tests/scripts/all.sh >all.log 2>&1
75#
76# Notes for maintainers
77# ---------------------
78#
Gilles Peskine8f073122018-11-27 15:58:47 +010079# The bulk of the code is organized into functions that follow one of the
80# following naming conventions:
81# * pre_XXX: things to do before running the tests, in order.
82# * component_XXX: independent components. They can be run in any order.
Gilles Peskinec70637a2019-01-09 22:29:17 +010083# * component_check_XXX: quick tests that aren't worth parallelizing.
84# * component_build_XXX: build things but don't run them.
85# * component_test_XXX: build and test.
Gilles Peskine878cf602019-01-06 20:50:38 +000086# * support_XXX: if support_XXX exists and returns false then
87# component_XXX is not run by default.
Gilles Peskine8f073122018-11-27 15:58:47 +010088# * post_XXX: things to do after running the tests.
89# * other: miscellaneous support functions.
90#
Gilles Peskinec70637a2019-01-09 22:29:17 +010091# Each component must start by invoking `msg` with a short informative message.
92#
Gilles Peskinea681c592020-03-28 21:27:40 +010093# Warning: due to the way bash detects errors, the failure of a command
94# inside 'if' or '!' is not detected. Use the 'not' function instead of '!'.
95#
Gilles Peskinece266c42020-03-28 18:50:43 +010096# Each component is executed in a separate shell process. The component
97# fails if any command in it returns a non-zero status.
98#
Gilles Peskinec70637a2019-01-09 22:29:17 +010099# The framework performs some cleanup tasks after each component. This
100# means that components can assume that the working directory is in a
101# cleaned-up state, and don't need to perform the cleanup themselves.
102# * Run `make clean`.
Bence Szépkúti414d6bd2021-06-28 14:11:11 +0100103# * Restore `include/mbedtls/mbedtls_config.h` from a backup made before running
Gilles Peskinec70637a2019-01-09 22:29:17 +0100104# the component.
Gilles Peskine636c26a2020-03-04 20:46:15 +0100105# * Check out `Makefile`, `library/Makefile`, `programs/Makefile`,
106# `tests/Makefile` and `programs/fuzz/Makefile` from git.
107# This cleans up after an in-tree use of CMake.
Gilles Peskinec70637a2019-01-09 22:29:17 +0100108#
Gilles Peskine192c72f2017-12-21 15:59:21 +0100109# The tests are roughly in order from fastest to slowest. This doesn't
110# have to be exact, but in general you should add slower tests towards
111# the end and fast checks near the beginning.
Gilles Peskine192c72f2017-12-21 15:59:21 +0100112
113
114
115################################################################
116#### Initialization and command line parsing
117################################################################
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100118
Gilles Peskine36647802020-03-28 18:50:49 +0100119# Abort on errors (even on the left-hand side of a pipe).
120# Treat uninitialised variables as errors.
121set -e -o pipefail -u
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100122
Gilles Peskine076f7252022-08-30 21:02:44 +0200123# Enable ksh/bash extended file matching patterns
124shopt -s extglob
125
Gilles Peskine8f073122018-11-27 15:58:47 +0100126pre_check_environment () {
Gilles Peskinea16c2b12019-01-06 19:58:02 +0000127 if [ -d library -a -d include -a -d tests ]; then :; else
Gilles Peskine8f073122018-11-27 15:58:47 +0100128 echo "Must be run from mbed TLS root" >&2
129 exit 1
130 fi
131}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100132
Gilles Peskine8f073122018-11-27 15:58:47 +0100133pre_initialize_variables () {
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200134 CONFIG_H='include/mbedtls/mbedtls_config.h'
John Durkopbd069d32020-10-31 22:14:03 -0700135 CRYPTO_CONFIG_H='include/psa/crypto_config.h'
Gilles Peskinef83eb822020-03-30 20:11:39 +0200136
137 # Files that are clobbered by some jobs will be backed up. Use a different
138 # suffix from auxiliary scripts so that all.sh and auxiliary scripts can
139 # independently decide when to remove the backup file.
140 backup_suffix='.all.bak'
141 # Files clobbered by config.py
142 files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H"
Gilles Peskine568f53a2021-07-12 18:16:01 +0200143 # Files clobbered by in-tree cmake
144 files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200145
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200146 append_outcome=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100147 MEMORY=0
148 FORCE=0
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200149 QUIET=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100150 KEEP_GOING=0
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100151
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200152 # Seed value used with the --release-test option.
Manuel Pégourié-Gonnard54304472020-06-22 10:11:47 +0200153 #
154 # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if
155 # both values are kept in sync. If you change the value here because it
156 # breaks some tests, you'll definitely want to change it in
157 # basic-build-test.sh as well.
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200158 RELEASE_SEED=1
159
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200160 : ${MBEDTLS_TEST_OUTCOME_FILE=}
Gilles Peskine9004a172019-09-16 15:20:36 +0200161 : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200162 export MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine9004a172019-09-16 15:20:36 +0200163 export MBEDTLS_TEST_PLATFORM
164
Jaeden Ameroc4cc2512019-01-30 15:35:44 +0000165 # Default commands, can be overridden by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100166 : ${OPENSSL:="openssl"}
167 : ${OPENSSL_LEGACY:="$OPENSSL"}
168 : ${OPENSSL_NEXT:="$OPENSSL"}
169 : ${GNUTLS_CLI:="gnutls-cli"}
170 : ${GNUTLS_SERV:="gnutls-serv"}
171 : ${GNUTLS_LEGACY_CLI:="$GNUTLS_CLI"}
172 : ${GNUTLS_LEGACY_SERV:="$GNUTLS_SERV"}
173 : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build}
174 : ${ARMC5_BIN_DIR:=/usr/bin}
175 : ${ARMC6_BIN_DIR:=/usr/bin}
Gilles Peskine6d061342020-04-30 18:19:32 +0200176 : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-}
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200177 : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-}
Andres AGdc192212016-08-31 17:33:13 +0100178
Gilles Peskine8f073122018-11-27 15:58:47 +0100179 # if MAKEFLAGS is not set add the -j option to speed up invocations of make
Gilles Peskinea1fc4b52019-01-06 20:15:26 +0000180 if [ -z "${MAKEFLAGS+set}" ]; then
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200181 export MAKEFLAGS="-j$(all_sh_nproc)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100182 fi
Gilles Peskine878cf602019-01-06 20:50:38 +0000183
Gilles Peskine396853a2021-09-20 18:57:55 +0200184 # Include more verbose output for failing tests run by CMake or make
Jaeden Amerod48e9c72019-02-07 17:43:39 +0000185 export CTEST_OUTPUT_ON_FAILURE=1
186
Gilles Peskine8fd59422019-10-21 17:11:33 +0200187 # CFLAGS and LDFLAGS for Asan builds that don't use CMake
Manuel Pégourié-Gonnard66f09832022-11-28 13:12:10 +0100188 ASAN_CFLAGS='-O2 -Werror -fsanitize=address,undefined -fno-sanitize-recover=all'
Gilles Peskine8fd59422019-10-21 17:11:33 +0200189
Gilles Peskine878cf602019-01-06 20:50:38 +0000190 # Gather the list of available components. These are the functions
191 # defined in this script whose name starts with "component_".
Gilles Peskine62cf2e82020-03-27 16:35:23 +0100192 # Parse the script with sed. This way we get the functions in the order
193 # they are defined.
Gilles Peskine878cf602019-01-06 20:50:38 +0000194 ALL_COMPONENTS=$(sed -n 's/^ *component_\([0-9A-Z_a-z]*\) *().*/\1/p' <"$0")
195
196 # Exclude components that are not supported on this platform.
197 SUPPORTED_COMPONENTS=
198 for component in $ALL_COMPONENTS; do
199 case $(type "support_$component" 2>&1) in
200 *' function'*)
201 if ! support_$component; then continue; fi;;
202 esac
203 SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component"
204 done
Gilles Peskine8f073122018-11-27 15:58:47 +0100205}
Andres AG38495a32016-07-12 16:54:33 +0100206
Gilles Peskinea28db922019-01-10 00:05:18 +0100207# Test whether the component $1 is included in the command line patterns.
208is_component_included()
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100209{
Gilles Peskine03af6782021-08-06 11:35:17 +0200210 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
211 # only does word splitting.
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100212 set -f
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000213 for pattern in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100214 set +f
215 case ${1#component_} in $pattern) return 0;; esac
216 done
217 set +f
218 return 1
219}
Andres AG7770ea82016-10-10 15:46:20 +0100220
Simon Butcher41eeccf2016-09-07 00:07:09 +0100221usage()
Andres AGd9eba4b2016-08-26 14:42:14 +0100222{
Gilles Peskine709346a2017-12-10 23:43:39 +0100223 cat <<EOF
Gilles Peskine92525112018-11-27 18:15:35 +0100224Usage: $0 [OPTION]... [COMPONENT]...
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100225Run mbedtls release validation tests.
Gilles Peskine92525112018-11-27 18:15:35 +0100226By default, run all tests. With one or more COMPONENT, run only those.
Gilles Peskinea28db922019-01-10 00:05:18 +0100227COMPONENT can be the name of a component or a shell wildcard pattern.
228
229Examples:
230 $0 "check_*"
231 Run all sanity checks.
232 $0 --no-armcc --except test_memsan
233 Run everything except builds that require armcc and MemSan.
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100234
235Special options:
236 -h|--help Print this help and exit.
Gilles Peskine878cf602019-01-06 20:50:38 +0000237 --list-all-components List all available test components and exit.
238 --list-components List components supported on this platform and exit.
Gilles Peskine709346a2017-12-10 23:43:39 +0100239
240General options:
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200241 -q|--quiet Only output component names, and errors if any.
Gilles Peskine709346a2017-12-10 23:43:39 +0100242 -f|--force Force the tests to overwrite any modified files.
Gilles Peskine7c652162017-12-11 00:01:40 +0100243 -k|--keep-going Run all tests and report errors at the end.
Gilles Peskine709346a2017-12-10 23:43:39 +0100244 -m|--memory Additional optional memory tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200245 --append-outcome Append to the outcome file (if used).
Gilles Peskine6d061342020-04-30 18:19:32 +0200246 --arm-none-eabi-gcc-prefix=<string>
247 Prefix for a cross-compiler for arm-none-eabi
248 (default: "${ARM_NONE_EABI_GCC_PREFIX}")
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200249 --arm-linux-gnueabi-gcc-prefix=<string>
250 Prefix for a cross-compiler for arm-linux-gnueabi
251 (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}")
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100252 --armcc Run ARM Compiler builds (on by default).
Gilles Peskine80ddb992021-08-06 11:51:59 +0200253 --restore First clean up the build tree, restoring backed up
254 files. Do not run any components unless they are
255 explicitly specified.
Gilles Peskine5d996822020-03-28 21:09:21 +0100256 --error-test Error test mode: run a failing function in addition
Gilles Peskine86f61292021-08-05 15:11:33 +0200257 to any specified component. May be repeated.
Gilles Peskinea28db922019-01-10 00:05:18 +0100258 --except Exclude the COMPONENTs listed on the command line,
259 instead of running only those.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200260 --no-append-outcome Write a new outcome file and analyze it (default).
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100261 --no-armcc Skip ARM Compiler builds.
Gilles Peskine38d81652018-03-21 08:40:26 +0100262 --no-force Refuse to overwrite modified files (default).
263 --no-keep-going Stop at the first error (default).
264 --no-memory No additional memory tests (default).
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800265 --no-quiet Print full output from components.
Gilles Peskine709346a2017-12-10 23:43:39 +0100266 --out-of-source-dir=<path> Directory used for CMake out-of-source build tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200267 --outcome-file=<path> File where test outcomes are written (not done if
268 empty; default: \$MBEDTLS_TEST_OUTCOME_FILE).
Gilles Peskine38d81652018-03-21 08:40:26 +0100269 --random-seed Use a random seed value for randomized tests (default).
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200270 -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}.
Gilles Peskine709346a2017-12-10 23:43:39 +0100271 -s|--seed Integer seed value to use for this test run.
272
273Tool path options:
274 --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory.
275 --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory.
276 --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests.
277 --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests.
278 --gnutls-legacy-cli=<GnuTLS_cli_path> GnuTLS client executable to use for legacy tests.
279 --gnutls-legacy-serv=<GnuTLS_serv_path> GnuTLS server executable to use for legacy tests.
280 --openssl=<OpenSSL_path> OpenSSL executable to use for most tests.
Mateusz Starzyk06b07fb2021-02-18 13:55:21 +0100281 --openssl-legacy=<OpenSSL_path> OpenSSL executable to use for legacy tests..
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +0100282 --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA
Gilles Peskine709346a2017-12-10 23:43:39 +0100283EOF
SimonB2e23c822016-04-16 21:54:39 +0100284}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100285
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200286# Cleanup before/after running a component.
287# Remove built files as well as the cmake cache/config.
288# Does not remove generated source files.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100289cleanup()
290{
Gilles Peskine7c652162017-12-11 00:01:40 +0100291 command make clean
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200292
Gilles Peskine31b07e22018-03-21 12:15:06 +0100293 # Remove CMake artefacts
Jaeden Amero2d0e00f2018-11-07 18:46:41 +0000294 find . -name .git -prune -o \
Gilles Peskine31b07e22018-03-21 12:15:06 +0100295 -iname CMakeFiles -exec rm -rf {} \+ -o \
296 \( -iname cmake_install.cmake -o \
297 -iname CTestTestfile.cmake -o \
Manuel Pégourié-Gonnardbfe54d72021-09-09 11:11:44 +0200298 -iname CMakeCache.txt -o \
299 -path './cmake/*.cmake' \) -exec rm -f {} \+
Gilles Peskine31b07e22018-03-21 12:15:06 +0100300 # Recover files overwritten by in-tree CMake builds
Gilles Peskine076f7252022-08-30 21:02:44 +0200301 rm -f include/Makefile include/mbedtls/Makefile programs/!(fuzz)/Makefile
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200302
Jaeden Ameroab83fdf2019-06-20 17:38:22 +0100303 # Remove any artifacts from the component_test_cmake_as_subdirectory test.
304 rm -rf programs/test/cmake_subproject/build
305 rm -f programs/test/cmake_subproject/Makefile
306 rm -f programs/test/cmake_subproject/cmake_subproject
307
Chris Kayd259e342021-03-25 16:03:25 +0000308 # Remove any artifacts from the component_test_cmake_as_package test.
309 rm -rf programs/test/cmake_package/build
310 rm -f programs/test/cmake_package/Makefile
311 rm -f programs/test/cmake_package/cmake_package
312
313 # Remove any artifacts from the component_test_cmake_as_installed_package test.
314 rm -rf programs/test/cmake_package_install/build
315 rm -f programs/test/cmake_package_install/Makefile
316 rm -f programs/test/cmake_package_install/cmake_package_install
317
Gilles Peskinef83eb822020-03-30 20:11:39 +0200318 # Restore files that may have been clobbered by the job
319 for x in $files_to_back_up; do
Gilles Peskinedd06efb2022-08-30 21:02:00 +0200320 if [[ -e "$x$backup_suffix" ]]; then
321 cp -p "$x$backup_suffix" "$x"
322 fi
Gilles Peskinef83eb822020-03-30 20:11:39 +0200323 done
324}
John Durkopbd069d32020-10-31 22:14:03 -0700325
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200326# Final cleanup when this script exits (except when exiting on a failure
327# in non-keep-going mode).
Gilles Peskinef83eb822020-03-30 20:11:39 +0200328final_cleanup () {
329 cleanup
330
331 for x in $files_to_back_up; do
332 rm -f "$x$backup_suffix"
333 done
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100334}
335
Gilles Peskine7c652162017-12-11 00:01:40 +0100336# Executed on exit. May be redefined depending on command line options.
337final_report () {
338 :
339}
340
341fatal_signal () {
Gilles Peskinef83eb822020-03-30 20:11:39 +0200342 final_cleanup
Gilles Peskine7c652162017-12-11 00:01:40 +0100343 final_report $1
344 trap - $1
345 kill -$1 $$
346}
347
348trap 'fatal_signal HUP' HUP
349trap 'fatal_signal INT' INT
350trap 'fatal_signal TERM' TERM
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200351
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200352# Number of processors on this machine. Used as the default setting
353# for parallel make.
354all_sh_nproc ()
355{
356 {
357 nproc || # Linux
358 sysctl -n hw.ncpuonline || # NetBSD, OpenBSD
359 sysctl -n hw.ncpu || # FreeBSD
360 echo 1
361 } 2>/dev/null
362}
363
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100364msg()
365{
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100366 if [ -n "${current_component:-}" ]; then
367 current_section="${current_component#component_}: $1"
368 else
369 current_section="$1"
370 fi
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200371
372 if [ $QUIET -eq 1 ]; then
373 return
374 fi
375
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100376 echo ""
377 echo "******************************************************************"
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100378 echo "* $current_section "
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +0000379 printf "* "; date
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100380 echo "******************************************************************"
381}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100382
Gilles Peskine8f073122018-11-27 15:58:47 +0100383armc6_build_test()
384{
385 FLAGS="$1"
Andres AGa5cd9732016-10-17 15:23:10 +0100386
Gilles Peskine18487f62020-04-30 23:11:54 +0200387 msg "build: ARM Compiler 6 ($FLAGS)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100388 ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \
389 WARNING_CFLAGS='-xc -std=c99' make lib
Gilles Peskine18487f62020-04-30 23:11:54 +0200390
391 msg "size: ARM Compiler 6 ($FLAGS)"
392 "$ARMC6_FROMELF" -z library/*.o
393
Gilles Peskine8f073122018-11-27 15:58:47 +0100394 make clean
395}
Andres AGa5cd9732016-10-17 15:23:10 +0100396
Andres AGd9eba4b2016-08-26 14:42:14 +0100397err_msg()
398{
399 echo "$1" >&2
400}
401
402check_tools()
403{
404 for TOOL in "$@"; do
Andres AG98393602017-01-31 17:04:45 +0000405 if ! `type "$TOOL" >/dev/null 2>&1`; then
Andres AGd9eba4b2016-08-26 14:42:14 +0100406 err_msg "$TOOL not found!"
407 exit 1
408 fi
409 done
410}
411
Gilles Peskine8f073122018-11-27 15:58:47 +0100412pre_parse_command_line () {
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000413 COMMAND_LINE_COMPONENTS=
Gilles Peskinea28db922019-01-10 00:05:18 +0100414 all_except=0
Gilles Peskine5d996822020-03-28 21:09:21 +0100415 error_test=0
Gilles Peskine80ddb992021-08-06 11:51:59 +0200416 restore_first=0
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000417 no_armcc=
SimonB2e23c822016-04-16 21:54:39 +0100418
Jaeden Amero9b90f2e2018-11-02 18:34:17 +0000419 # Note that legacy options are ignored instead of being omitted from this
420 # list of options, so invocations that worked with previous version of
421 # all.sh will still run and work properly.
Gilles Peskine8f073122018-11-27 15:58:47 +0100422 while [ $# -gt 0 ]; do
Gilles Peskine55f7c942019-01-09 22:28:21 +0100423 case "$1" in
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200424 --append-outcome) append_outcome=1;;
Gilles Peskine6d061342020-04-30 18:19:32 +0200425 --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";;
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200426 --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000427 --armcc) no_armcc=;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100428 --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";;
429 --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";;
Gilles Peskine5d996822020-03-28 21:09:21 +0100430 --error-test) error_test=$((error_test + 1));;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000431 --except) all_except=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100432 --force|-f) FORCE=1;;
433 --gnutls-cli) shift; GNUTLS_CLI="$1";;
434 --gnutls-legacy-cli) shift; GNUTLS_LEGACY_CLI="$1";;
435 --gnutls-legacy-serv) shift; GNUTLS_LEGACY_SERV="$1";;
436 --gnutls-serv) shift; GNUTLS_SERV="$1";;
437 --help|-h) usage; exit;;
438 --keep-going|-k) KEEP_GOING=1;;
Gilles Peskine878cf602019-01-06 20:50:38 +0000439 --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;;
440 --list-components) printf '%s\n' $SUPPORTED_COMPONENTS; exit;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100441 --memory|-m) MEMORY=1;;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200442 --no-append-outcome) append_outcome=0;;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000443 --no-armcc) no_armcc=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100444 --no-force) FORCE=0;;
445 --no-keep-going) KEEP_GOING=0;;
446 --no-memory) MEMORY=0;;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200447 --no-quiet) QUIET=0;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100448 --openssl) shift; OPENSSL="$1";;
449 --openssl-legacy) shift; OPENSSL_LEGACY="$1";;
450 --openssl-next) shift; OPENSSL_NEXT="$1";;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200451 --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100452 --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200453 --quiet|-q) QUIET=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100454 --random-seed) unset SEED;;
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200455 --release-test|-r) SEED=$RELEASE_SEED;;
Gilles Peskine80ddb992021-08-06 11:51:59 +0200456 --restore) restore_first=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100457 --seed|-s) shift; SEED="$1";;
458 -*)
459 echo >&2 "Unknown option: $1"
460 echo >&2 "Run $0 --help for usage."
461 exit 120
462 ;;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000463 *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100464 esac
465 shift
Gilles Peskine8f073122018-11-27 15:58:47 +0100466 done
SimonB2e23c822016-04-16 21:54:39 +0100467
Gilles Peskinea28db922019-01-10 00:05:18 +0100468 # With no list of components, run everything.
Gilles Peskine80ddb992021-08-06 11:51:59 +0200469 if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000470 all_except=1
Andres AGdc192212016-08-31 17:33:13 +0100471 fi
472
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000473 # --no-armcc is a legacy option. The modern way is --except '*_armcc*'.
474 # Ignore it if components are listed explicitly on the command line.
Gilles Peskinea28db922019-01-10 00:05:18 +0100475 if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000476 COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*"
SimonB2e23c822016-04-16 21:54:39 +0100477 fi
SimonB2e23c822016-04-16 21:54:39 +0100478
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200479 # Error out if an explicitly requested component doesn't exist.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100480 if [ $all_except -eq 0 ]; then
481 unsupported=0
Gilles Peskine03af6782021-08-06 11:35:17 +0200482 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
483 # only does word splitting.
Gilles Peskine1d475b62021-08-03 13:43:36 +0200484 set -f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100485 for component in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine1d475b62021-08-03 13:43:36 +0200486 set +f
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200487 # If the requested name includes a wildcard character, don't
488 # check it. Accept wildcard patterns that don't match anything.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100489 case $component in
490 *[*?\[]*) continue;;
491 esac
492 case " $SUPPORTED_COMPONENTS " in
493 *" $component "*) :;;
494 *)
495 echo >&2 "Component $component was explicitly requested, but is not known or not supported."
496 unsupported=$((unsupported + 1));;
497 esac
498 done
Gilles Peskine1d475b62021-08-03 13:43:36 +0200499 set +f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100500 if [ $unsupported -ne 0 ]; then
501 exit 2
502 fi
503 fi
504
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000505 # Build the list of components to run.
Gilles Peskinea28db922019-01-10 00:05:18 +0100506 RUN_COMPONENTS=
507 for component in $SUPPORTED_COMPONENTS; do
508 if is_component_included "$component"; [ $? -eq $all_except ]; then
509 RUN_COMPONENTS="$RUN_COMPONENTS $component"
510 fi
511 done
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000512
513 unset all_except
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000514 unset no_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +0100515}
SimonB2e23c822016-04-16 21:54:39 +0100516
Gilles Peskine8f073122018-11-27 15:58:47 +0100517pre_check_git () {
518 if [ $FORCE -eq 1 ]; then
Gilles Peskine53190e62019-01-09 23:17:35 +0100519 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +0100520 git checkout-index -f -q $CONFIG_H
521 cleanup
522 else
SimonB2e23c822016-04-16 21:54:39 +0100523
Gilles Peskine8f073122018-11-27 15:58:47 +0100524 if [ -d "$OUT_OF_SOURCE_DIR" ]; then
525 echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2
526 echo "You can either delete this directory manually, or force the test by rerunning"
527 echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR"
528 exit 1
529 fi
530
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200531 if ! git diff --quiet include/mbedtls/mbedtls_config.h; then
532 err_msg "Warning - the configuration file 'include/mbedtls/mbedtls_config.h' has been edited. "
Gilles Peskine8f073122018-11-27 15:58:47 +0100533 echo "You can either delete or preserve your work, or force the test by rerunning the"
534 echo "script as: $0 --force"
535 exit 1
536 fi
SimonB2e23c822016-04-16 21:54:39 +0100537 fi
Andrzej Kurekeb508712019-02-14 07:18:59 -0500538}
539
Gilles Peskine568f53a2021-07-12 18:16:01 +0200540pre_restore_files () {
541 # If the makefiles have been generated by a framework such as cmake,
542 # restore them from git. If the makefiles look like modifications from
543 # the ones checked into git, take care not to modify them. Whatever
544 # this function leaves behind is what the script will restore before
545 # each component.
546 case "$(head -n1 Makefile)" in
547 *[Gg]enerated*)
548 git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
549 git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
550 ;;
551 esac
552}
553
Gilles Peskinef83eb822020-03-30 20:11:39 +0200554pre_back_up () {
555 for x in $files_to_back_up; do
556 cp -p "$x" "$x$backup_suffix"
557 done
558}
559
Gilles Peskine8f073122018-11-27 15:58:47 +0100560pre_setup_keep_going () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100561 failure_count=0 # Number of failed components
562 last_failure_status=0 # Last failure status in this component
563
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100564 # See err_trap
565 previous_failure_status=0
566 previous_failed_command=
567 previous_failure_funcall_depth=0
Gilles Peskinea681c592020-03-28 21:27:40 +0100568 unset report_failed_command
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100569
Gilles Peskine7c652162017-12-11 00:01:40 +0100570 start_red=
571 end_color=
572 if [ -t 1 ]; then
Gilles Peskine9736b9d2018-01-02 21:54:17 +0100573 case "${TERM:-}" in
Gilles Peskine7c652162017-12-11 00:01:40 +0100574 *color*|cygwin|linux|rxvt*|screen|[Eex]term*)
575 start_red=$(printf '\033[31m')
576 end_color=$(printf '\033[0m')
577 ;;
578 esac
579 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100580
581 # Keep a summary of failures in a file. We'll print it out at the end.
582 failure_summary_file=$PWD/all-sh-failures-$$.log
583 : >"$failure_summary_file"
584
585 # Whether it makes sense to keep a component going after the specified
586 # command fails (test command) or not (configure or build).
Gilles Peskine03af6782021-08-06 11:35:17 +0200587 # This function normally receives the failing simple command
588 # ($BASH_COMMAND) as an argument, but if $report_failed_command is set,
589 # this is passed instead.
Gilles Peskinece266c42020-03-28 18:50:43 +0100590 # This doesn't have to be 100% accurate: all failures are recorded anyway.
Gilles Peskinec111e242021-08-02 23:29:53 +0200591 # False positives result in running things that can't be expected to
592 # work. False negatives result in things not running after something else
593 # failed even though they might have given useful feedback.
Gilles Peskinece266c42020-03-28 18:50:43 +0100594 can_keep_going_after_failure () {
595 case "$1" in
596 "msg "*) false;;
Gilles Peskinec111e242021-08-02 23:29:53 +0200597 "cd "*) false;;
598 *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ...
599 *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ...
600 *make*check*) true;;
601 "grep "*) true;;
602 "[ "*) true;;
603 "! "*) true;;
Gilles Peskinece266c42020-03-28 18:50:43 +0100604 *) false;;
Gilles Peskine7c652162017-12-11 00:01:40 +0100605 esac
606 }
Gilles Peskinece266c42020-03-28 18:50:43 +0100607
608 # This function runs if there is any error in a component.
609 # It must either exit with a nonzero status, or set
610 # last_failure_status to a nonzero value.
611 err_trap () {
612 # Save $? (status of the failing command). This must be the very
613 # first thing, before $? is overridden.
614 last_failure_status=$?
Gilles Peskinea681c592020-03-28 21:27:40 +0100615 failed_command=${report_failed_command-$BASH_COMMAND}
Gilles Peskinece266c42020-03-28 18:50:43 +0100616
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100617 if [[ $last_failure_status -eq $previous_failure_status &&
618 "$failed_command" == "$previous_failed_command" &&
619 ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]]
620 then
621 # The same command failed twice in a row, but this time one level
622 # less deep in the function call stack. This happens when the last
623 # command of a function returns a nonzero status, and the function
624 # returns that same status. Ignore the second failure.
625 previous_failure_funcall_depth=${#FUNCNAME[@]}
626 return
627 fi
628 previous_failure_status=$last_failure_status
629 previous_failed_command=$failed_command
630 previous_failure_funcall_depth=${#FUNCNAME[@]}
631
Gilles Peskinece266c42020-03-28 18:50:43 +0100632 text="$current_section: $failed_command -> $last_failure_status"
633 echo "${start_red}^^^^$text^^^^${end_color}" >&2
634 echo "$text" >>"$failure_summary_file"
635
636 # If the command is fatal (configure or build command), stop this
637 # component. Otherwise (test command) keep the component running
638 # (run more tests from the same build).
639 if ! can_keep_going_after_failure "$failed_command"; then
640 exit $last_failure_status
641 fi
642 }
643
Gilles Peskine7c652162017-12-11 00:01:40 +0100644 final_report () {
645 if [ $failure_count -gt 0 ]; then
646 echo
647 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
Gilles Peskinece266c42020-03-28 18:50:43 +0100648 echo "${start_red}FAILED: $failure_count components${end_color}"
649 cat "$failure_summary_file"
Gilles Peskine7c652162017-12-11 00:01:40 +0100650 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
651 elif [ -z "${1-}" ]; then
652 echo "SUCCESS :)"
653 fi
654 if [ -n "${1-}" ]; then
655 echo "Killed by SIG$1."
656 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100657 rm -f "$failure_summary_file"
658 if [ $failure_count -gt 0 ]; then
659 exit 1
660 fi
Gilles Peskine7c652162017-12-11 00:01:40 +0100661 }
Gilles Peskine8f073122018-11-27 15:58:47 +0100662}
663
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200664# record_status() and if_build_succeeded() are kept temporarily for backward
665# compatibility. Don't use them in new components.
Gilles Peskinece266c42020-03-28 18:50:43 +0100666record_status () {
667 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100668}
Gilles Peskine7c652162017-12-11 00:01:40 +0100669if_build_succeeded () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100670 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100671}
672
Gilles Peskinea681c592020-03-28 21:27:40 +0100673# '! true' does not trigger the ERR trap. Arrange to trigger it, with
674# a reasonably informative error message (not just "$@").
675not () {
676 if "$@"; then
677 report_failed_command="! $*"
678 false
679 unset report_failed_command
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200680 fi
681}
682
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200683pre_prepare_outcome_file () {
684 case "$MBEDTLS_TEST_OUTCOME_FILE" in
685 [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";;
686 esac
687 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then
688 rm -f "$MBEDTLS_TEST_OUTCOME_FILE"
689 fi
690}
691
Gilles Peskine8f073122018-11-27 15:58:47 +0100692pre_print_configuration () {
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200693 if [ $QUIET -eq 1 ]; then
694 return
695 fi
696
Gilles Peskine8f073122018-11-27 15:58:47 +0100697 msg "info: $0 configuration"
698 echo "MEMORY: $MEMORY"
699 echo "FORCE: $FORCE"
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200700 echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}"
Gilles Peskine8f073122018-11-27 15:58:47 +0100701 echo "SEED: ${SEED-"UNSET"}"
Gilles Peskine636c26a2020-03-04 20:46:15 +0100702 echo
Gilles Peskine8f073122018-11-27 15:58:47 +0100703 echo "OPENSSL: $OPENSSL"
704 echo "OPENSSL_LEGACY: $OPENSSL_LEGACY"
705 echo "OPENSSL_NEXT: $OPENSSL_NEXT"
706 echo "GNUTLS_CLI: $GNUTLS_CLI"
707 echo "GNUTLS_SERV: $GNUTLS_SERV"
708 echo "GNUTLS_LEGACY_CLI: $GNUTLS_LEGACY_CLI"
709 echo "GNUTLS_LEGACY_SERV: $GNUTLS_LEGACY_SERV"
710 echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR"
711 echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR"
712}
Andres AG7770ea82016-10-10 15:46:20 +0100713
Andres AGd9eba4b2016-08-26 14:42:14 +0100714# Make sure the tools we need are available.
Gilles Peskine8f073122018-11-27 15:58:47 +0100715pre_check_tools () {
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000716 # Build the list of variables to pass to output_env.sh.
717 set env
SimonB2e23c822016-04-16 21:54:39 +0100718
Gilles Peskine87964262019-01-06 22:40:00 +0000719 case " $RUN_COMPONENTS " in
720 # Require OpenSSL and GnuTLS if running any tests (as opposed to
721 # only doing builds). Not all tests run OpenSSL and GnuTLS, but this
722 # is a good enough approximation in practice.
723 *" test_"*)
724 # To avoid setting OpenSSL and GnuTLS for each call to compat.sh
725 # and ssl-opt.sh, we just export the variables they require.
726 export OPENSSL_CMD="$OPENSSL"
727 export GNUTLS_CLI="$GNUTLS_CLI"
728 export GNUTLS_SERV="$GNUTLS_SERV"
729 # Avoid passing --seed flag in every call to ssl-opt.sh
730 if [ -n "${SEED-}" ]; then
731 export SEED
732 fi
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000733 set "$@" OPENSSL="$OPENSSL" OPENSSL_LEGACY="$OPENSSL_LEGACY"
734 set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV"
735 set "$@" GNUTLS_LEGACY_CLI="$GNUTLS_LEGACY_CLI"
736 set "$@" GNUTLS_LEGACY_SERV="$GNUTLS_LEGACY_SERV"
Gilles Peskine87964262019-01-06 22:40:00 +0000737 check_tools "$OPENSSL" "$OPENSSL_LEGACY" "$OPENSSL_NEXT" \
738 "$GNUTLS_CLI" "$GNUTLS_SERV" \
739 "$GNUTLS_LEGACY_CLI" "$GNUTLS_LEGACY_SERV"
740 ;;
741 esac
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200742
Gilles Peskine87964262019-01-06 22:40:00 +0000743 case " $RUN_COMPONENTS " in
744 *_doxygen[_\ ]*) check_tools "doxygen" "dot";;
745 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100746
Gilles Peskine87964262019-01-06 22:40:00 +0000747 case " $RUN_COMPONENTS " in
Gilles Peskine6d061342020-04-30 18:19:32 +0200748 *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";;
Gilles Peskine87964262019-01-06 22:40:00 +0000749 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100750
Gilles Peskine87964262019-01-06 22:40:00 +0000751 case " $RUN_COMPONENTS " in
752 *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";;
753 esac
754
755 case " $RUN_COMPONENTS " in
756 *" test_zeroize "*) check_tools "gdb";;
757 esac
758
759 case " $RUN_COMPONENTS " in
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000760 *_armcc*)
Gilles Peskine87964262019-01-06 22:40:00 +0000761 ARMC5_CC="$ARMC5_BIN_DIR/armcc"
762 ARMC5_AR="$ARMC5_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200763 ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf"
Gilles Peskine87964262019-01-06 22:40:00 +0000764 ARMC6_CC="$ARMC6_BIN_DIR/armclang"
765 ARMC6_AR="$ARMC6_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200766 ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf"
767 check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \
768 "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000769 esac
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000770
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200771 # past this point, no call to check_tool, only printing output
772 if [ $QUIET -eq 1 ]; then
773 return
774 fi
775
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000776 msg "info: output_env.sh"
777 case $RUN_COMPONENTS in
778 *_armcc*)
779 set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;;
780 *) set "$@" RUN_ARMCC=0;;
781 esac
782 "$@" scripts/output_env.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100783}
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100784
Gilles Peskine1570b592021-04-22 01:10:12 +0200785pre_generate_files() {
Manuel Pégourié-Gonnard87db8a22021-06-18 13:30:14 +0200786 # since make doesn't have proper dependencies, remove any possibly outdate
787 # file that might be around before generating fresh ones
788 make neat
Gilles Peskine72385032021-07-08 19:07:07 +0200789 if [ $QUIET -eq 1 ]; then
Gilles Peskine75301632021-08-05 15:10:47 +0200790 make generated_files >/dev/null
Gilles Peskine72385032021-07-08 19:07:07 +0200791 else
792 make generated_files
793 fi
Gilles Peskine1570b592021-04-22 01:10:12 +0200794}
795
Gilles Peskine192c72f2017-12-21 15:59:21 +0100796
797
798################################################################
799#### Basic checks
800################################################################
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100801
802#
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200803# Test Suites to be executed
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100804#
Manuel Pégourié-Gonnard3d404b42015-07-08 21:59:16 +0100805# The test ordering tries to optimize for the following criteria:
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200806# 1. Catch possible problems early, by running first tests that run quickly
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100807# and/or are more likely to fail than others (eg I use Clang most of the
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200808# time, so start with a GCC build).
809# 2. Minimize total running time, by avoiding useless rebuilds
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100810#
Manuel Pégourié-Gonnard259b08a2016-01-08 16:27:41 +0100811# Indicative running times are given for reference.
812
Gilles Peskine8f073122018-11-27 15:58:47 +0100813component_check_recursion () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200814 msg "Check: recursion.pl" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200815 tests/scripts/recursion.pl library/*.c
Gilles Peskine8f073122018-11-27 15:58:47 +0100816}
Janos Follathb72c6782016-07-19 14:54:17 +0100817
Gilles Peskine67debb62021-05-18 16:09:50 +0200818component_check_generated_files () {
819 msg "Check: check-generated-files, files generated with make" # 2s
820 make generated_files
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200821 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200822
823 msg "Check: check-generated-files -u, files present" # 2s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200824 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200825 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200826 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200827
828 msg "Check: check-generated-files -u, files absent" # 2s
829 command make neat
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200830 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200831 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200832 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200833
834 # This component ends with the generated files present in the source tree.
835 # This is necessary for subsequent components!
836}
837
Gilles Peskine8f073122018-11-27 15:58:47 +0100838component_check_doxy_blocks () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200839 msg "Check: doxygen markup outside doxygen blocks" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200840 tests/scripts/check-doxy-blocks.pl
Gilles Peskine8f073122018-11-27 15:58:47 +0100841}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200842
Gilles Peskine8f073122018-11-27 15:58:47 +0100843component_check_files () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200844 msg "Check: file sanity checks (permissions, encodings)" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200845 tests/scripts/check_files.py
Gilles Peskine8f073122018-11-27 15:58:47 +0100846}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200847
Gilles Peskine30e0bb42020-05-10 17:40:49 +0200848component_check_changelog () {
849 msg "Check: changelog entries" # < 1s
850 rm -f ChangeLog.new
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200851 scripts/assemble_changelog.py -o ChangeLog.new
Gilles Peskine30e0bb42020-05-10 17:40:49 +0200852 if [ -e ChangeLog.new ]; then
853 # Show the diff for information. It isn't an error if the diff is
854 # non-empty.
855 diff -u ChangeLog ChangeLog.new || true
856 rm ChangeLog.new
857 fi
858}
859
Gilles Peskine8f073122018-11-27 15:58:47 +0100860component_check_names () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200861 msg "Check: declared and exported names (builds the library)" # < 3s
Yuto Takanoc3a6f632021-09-24 18:02:56 +0100862 tests/scripts/check_names.py -v
Gilles Peskine8f073122018-11-27 15:58:47 +0100863}
Darryl Greena07039c2018-03-13 16:48:16 +0000864
Gilles Peskine895868b2019-09-19 21:30:05 +0200865component_check_test_cases () {
866 msg "Check: test case descriptions" # < 1s
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200867 if [ $QUIET -eq 1 ]; then
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200868 opt='--quiet'
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200869 else
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200870 opt=''
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200871 fi
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200872 tests/scripts/check_test_cases.py $opt
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200873 unset opt
Neil Armstrong882e02e2022-04-22 16:50:29 +0200874
Neil Armstrong98136b12022-04-27 10:00:42 +0200875 # Check that no tests are explicitely disabled when USE_PSA_CRYPTO is set
876 # as a matter of policy to ensure there is no missed testing
877 msg "Check: explicitely disabled test with USE_PSA_CRYPTO" # < 1s
878 not grep -n 'depends_on:.*!MBEDTLS_USE_PSA_CRYPTO' tests/suites/*.function tests/suites/*.data
879 not grep -n '^ *requires_config_disabled.*MBEDTLS_USE_PSA_CRYPTO' tests/ssl-opt.sh tests/opt-testcases/*.sh
Gilles Peskine895868b2019-09-19 21:30:05 +0200880}
881
Gilles Peskine8f073122018-11-27 15:58:47 +0100882component_check_doxygen_warnings () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200883 msg "Check: doxygen warnings (builds the documentation)" # ~ 3s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200884 tests/scripts/doxygen.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100885}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200886
Gilles Peskine192c72f2017-12-21 15:59:21 +0100887
Gilles Peskine636c26a2020-03-04 20:46:15 +0100888
Gilles Peskine192c72f2017-12-21 15:59:21 +0100889################################################################
890#### Build and test many configurations and targets
891################################################################
892
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200893component_test_default_out_of_box () {
894 msg "build: make, default config (out-of-box)" # ~1min
895 make
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200896 # Disable fancy stuff
897 unset MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200898
899 msg "test: main suites make, default config (out-of-box)" # ~10s
900 make test
901
902 msg "selftest: make, default config (out-of-box)" # ~10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200903 programs/test/selftest
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200904}
905
Gilles Peskine8f073122018-11-27 15:58:47 +0100906component_test_default_cmake_gcc_asan () {
907 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Gilles Peskine8f073122018-11-27 15:58:47 +0100908 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
909 make
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200910
Gilles Peskine8f073122018-11-27 15:58:47 +0100911 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
912 make test
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200913
Gilles Peskine97bea012020-04-23 23:37:45 +0200914 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200915 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +0200916
Gilles Peskine8f073122018-11-27 15:58:47 +0100917 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200918 tests/ssl-opt.sh
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200919
Gilles Peskine8f073122018-11-27 15:58:47 +0100920 msg "test: compat.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200921 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +0200922
923 msg "test: context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200924 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100925}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200926
Hanno Becker01635512019-02-26 14:27:09 +0000927component_test_full_cmake_gcc_asan () {
928 msg "build: full config, cmake, gcc, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +0200929 scripts/config.py full
Hanno Becker01635512019-02-26 14:27:09 +0000930 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
931 make
932
933 msg "test: main suites (inc. selftests) (full config, ASan build)"
934 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +0100935
Gilles Peskine97bea012020-04-23 23:37:45 +0200936 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200937 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +0200938
Gilles Peskine636c26a2020-03-04 20:46:15 +0100939 msg "test: ssl-opt.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200940 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100941
942 msg "test: compat.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200943 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +0200944
945 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200946 tests/context-info.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100947}
948
Ronald Cronc3623db2020-10-29 10:51:32 +0100949component_test_psa_crypto_key_id_encodes_owner () {
Andrzej Kurek03e01462022-01-03 12:53:24 +0100950 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
Ronald Cronc3623db2020-10-29 10:51:32 +0100951 scripts/config.py full
Ronald Cronc3623db2020-10-29 10:51:32 +0100952 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
953 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
954 make
955
956 msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
957 make test
958}
959
Gilles Peskinea3548672021-06-17 11:37:52 +0200960# check_renamed_symbols HEADER LIB
961# Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol
962# name is LIB.
963check_renamed_symbols () {
964 ! nm "$2" | sed 's/.* //' |
965 grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")"
966}
967
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200968component_build_psa_crypto_spm () {
Andrzej Kurek03e01462022-01-03 12:53:24 +0100969 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc"
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200970 scripts/config.py full
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200971 scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
972 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
973 scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM
974 # We can only compile, not link, since our test and sample programs
975 # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM
976 # is active.
977 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib
Gilles Peskinea3548672021-06-17 11:37:52 +0200978
979 # Check that if a symbol is renamed by crypto_spe.h, the non-renamed
980 # version is not present.
981 echo "Checking for renamed symbols in the library"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200982 check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200983}
984
Ronald Cron336678b2021-01-28 17:54:24 +0100985component_test_psa_crypto_client () {
986 msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
987 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
988 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
989 scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT
Raef Colesb4568c52022-09-28 17:11:42 +0100990 scripts/config.py unset MBEDTLS_LMS_C
991 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Ronald Cron336678b2021-01-28 17:54:24 +0100992 make
993
994 msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
995 make test
996}
997
Jaeden Amero424fa932021-05-14 08:34:32 +0100998component_test_psa_crypto_rsa_no_genprime() {
999 msg "build: default config minus MBEDTLS_GENPRIME"
1000 scripts/config.py unset MBEDTLS_GENPRIME
1001 make
1002
1003 msg "test: default config minus MBEDTLS_GENPRIME"
1004 make test
1005}
1006
Gilles Peskine782f4112018-11-27 16:11:09 +01001007component_test_ref_configs () {
1008 msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001009 # test-ref-configs works by overwriting mbedtls_config.h; this makes cmake
1010 # want to re-generate generated files that depend on it, quite correctly.
1011 # However this doesn't work as the generation script expects a specific
1012 # format for mbedtls_config.h, which the other files don't follow. Also,
1013 # cmake can't know this, but re-generation is actually not necessary as
David Horstmannd64f4b22021-10-20 12:29:47 +01001014 # the generated files only depend on the list of available options, not
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001015 # whether they're on or off. So, disable cmake's (over-sensitive here)
1016 # dependency resolution for generated files and just rely on them being
David Horstmanna8d14062021-10-20 17:14:23 +01001017 # present (thanks to pre_generate_files) by turning GEN_FILES off.
1018 CC=gcc cmake -D GEN_FILES=Off -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001019 tests/scripts/test-ref-configs.pl
Gilles Peskine782f4112018-11-27 16:11:09 +01001020}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001021
Gilles Peskine8f073122018-11-27 15:58:47 +01001022component_test_no_renegotiation () {
1023 msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001024 scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine8f073122018-11-27 15:58:47 +01001025 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1026 make
Simon Butcher3ea7f522016-03-07 23:22:10 +00001027
Gilles Peskine8f073122018-11-27 15:58:47 +01001028 msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s
1029 make test
Hanno Becker134c2ab2017-10-12 15:29:50 +01001030
Gilles Peskine8f073122018-11-27 15:58:47 +01001031 msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001032 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001033}
Hanno Becker134c2ab2017-10-12 15:29:50 +01001034
Gilles Peskine636c26a2020-03-04 20:46:15 +01001035component_test_no_pem_no_fs () {
1036 msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)"
1037 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1038 scripts/config.py unset MBEDTLS_FS_IO
1039 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem
1040 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS
1041 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1042 make
1043
1044 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s
1045 make test
1046
1047 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001048 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001049}
1050
Gilles Peskine8f073122018-11-27 15:58:47 +01001051component_test_rsa_no_crt () {
1052 msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001053 scripts/config.py set MBEDTLS_RSA_NO_CRT
Gilles Peskine8f073122018-11-27 15:58:47 +01001054 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1055 make
Manuel Pégourié-Gonnard246978d2014-11-20 13:29:53 +01001056
Gilles Peskine8f073122018-11-27 15:58:47 +01001057 msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s
1058 make test
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001059
Gilles Peskine8f073122018-11-27 15:58:47 +01001060 msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001061 tests/ssl-opt.sh -f RSA
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001062
Gilles Peskine8f073122018-11-27 15:58:47 +01001063 msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001064 tests/compat.sh -t RSA
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001065
1066 msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001067 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001068}
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001069
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001070component_test_no_ctr_drbg_classic () {
1071 msg "build: Full minus CTR_DRBG, classic crypto in TLS"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001072 scripts/config.py full
1073 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001074 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001075 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001076
1077 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1078 make
1079
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001080 msg "test: Full minus CTR_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001081 make test
1082
Gilles Peskineba749042021-01-13 20:02:03 +01001083 # In this configuration, the TLS test programs use HMAC_DRBG.
1084 # The SSL tests are slow, so run a small subset, just enough to get
1085 # confidence that the SSL code copes with HMAC_DRBG.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001086 msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001087 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskineba749042021-01-13 20:02:03 +01001088
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001089 msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001090 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001091}
1092
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001093component_test_no_ctr_drbg_use_psa () {
1094 msg "build: Full minus CTR_DRBG, PSA crypto in TLS"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001095 scripts/config.py full
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001096 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1097 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001098
1099 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1100 make
1101
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001102 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites"
1103 make test
1104
1105 # In this configuration, the TLS test programs use HMAC_DRBG.
1106 # The SSL tests are slow, so run a small subset, just enough to get
1107 # confidence that the SSL code copes with HMAC_DRBG.
1108 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001109 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001110
1111 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001112 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001113}
1114
1115component_test_no_hmac_drbg_classic () {
1116 msg "build: Full minus HMAC_DRBG, classic crypto in TLS"
1117 scripts/config.py full
1118 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1119 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1120 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001121 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001122
1123 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1124 make
1125
1126 msg "test: Full minus HMAC_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001127 make test
1128
Gilles Peskinea2224342020-11-19 22:14:34 +01001129 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1130 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1131 # instead.
1132 # Test SSL with non-deterministic ECDSA. Only test features that
1133 # might be affected by how ECDSA signature is performed.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001134 msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001135 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskinea2224342020-11-19 22:14:34 +01001136
1137 # To save time, only test one protocol version, since this part of
1138 # the protocol is identical in (D)TLS up to 1.2.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001139 msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001140 tests/compat.sh -m tls12 -t 'ECDSA'
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001141}
1142
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001143component_test_no_hmac_drbg_use_psa () {
1144 msg "build: Full minus HMAC_DRBG, PSA crypto in TLS"
1145 scripts/config.py full
1146 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1147 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1148 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1149
1150 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1151 make
1152
1153 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites"
1154 make test
1155
1156 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1157 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1158 # instead.
1159 # Test SSL with non-deterministic ECDSA. Only test features that
1160 # might be affected by how ECDSA signature is performed.
1161 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001162 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001163
1164 # To save time, only test one protocol version, since this part of
1165 # the protocol is identical in (D)TLS up to 1.2.
1166 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001167 tests/compat.sh -m tls12 -t 'ECDSA'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001168}
1169
1170component_test_psa_external_rng_no_drbg_classic () {
1171 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS"
1172 scripts/config.py full
1173 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001174 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001175 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001176 scripts/config.py unset MBEDTLS_ENTROPY_C
1177 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1178 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001179 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1180 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1181 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskine8eb29432021-02-03 20:07:11 +01001182 # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG,
1183 # the SSL test programs don't have an RNG and can't work. Explicitly
1184 # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG.
1185 make CFLAGS="$ASAN_CFLAGS -O2 -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001186
1187 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites"
1188 make test
1189
Gilles Peskine8eb29432021-02-03 20:07:11 +01001190 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001191 tests/ssl-opt.sh -f 'Default'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001192}
1193
1194component_test_psa_external_rng_no_drbg_use_psa () {
1195 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001196 scripts/config.py full
1197 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001198 scripts/config.py unset MBEDTLS_ENTROPY_C
1199 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1200 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinec109b372020-11-23 17:39:04 +01001201 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1202 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1203 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskinec109b372020-11-23 17:39:04 +01001204 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1205
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001206 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites"
Gilles Peskinec109b372020-11-23 17:39:04 +01001207 make test
1208
Gilles Peskine8eb29432021-02-03 20:07:11 +01001209 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001210 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001211}
1212
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001213component_test_crypto_full_no_md () {
1214 msg "build: crypto_full minus MD"
1215 scripts/config.py crypto_full
1216 scripts/config.py unset MBEDTLS_MD_C
Przemek Stekield3ba7362022-05-06 11:41:56 +02001217 # Direct dependencies
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001218 scripts/config.py unset MBEDTLS_HKDF_C
1219 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
Nick Child89e82e12022-11-09 10:36:10 -06001220 scripts/config.py unset MBEDTLS_PKCS7_C
Przemek Stekield3ba7362022-05-06 11:41:56 +02001221 # Indirect dependencies
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001222 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001223 make
1224
1225 msg "test: crypto_full minus MD"
1226 make test
1227}
1228
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001229component_test_full_no_cipher () {
1230 msg "build: full minus CIPHER"
1231 scripts/config.py full
1232 scripts/config.py unset MBEDTLS_CIPHER_C
Przemek Stekielda5f4832022-05-12 09:46:29 +02001233 # Direct dependencies
1234 scripts/config.py unset MBEDTLS_CCM_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001235 scripts/config.py unset MBEDTLS_CMAC_C
Przemek Stekielda5f4832022-05-12 09:46:29 +02001236 scripts/config.py unset MBEDTLS_GCM_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001237 scripts/config.py unset MBEDTLS_NIST_KW_C
1238 scripts/config.py unset MBEDTLS_PKCS12_C
1239 scripts/config.py unset MBEDTLS_PKCS5_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001240 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1241 scripts/config.py unset MBEDTLS_SSL_TLS_C
1242 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielda5f4832022-05-12 09:46:29 +02001243 # Indirect dependencies
1244 scripts/config.py unset MBEDTLS_SSL_CLI_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001245 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
1246 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001247 scripts/config.py unset MBEDTLS_SSL_DTLS_ANTI_REPLAY
1248 scripts/config.py unset MBEDTLS_SSL_DTLS_CONNECTION_ID
Przemek Stekielda5f4832022-05-12 09:46:29 +02001249 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1250 scripts/config.py unset MBEDTLS_SSL_SRV_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001251 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Raef Colesa7e03ad2022-09-28 09:32:48 +01001252 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01001253 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001254 make
1255
1256 msg "test: full minus CIPHER"
1257 make test
1258}
1259
Przemek Stekiel179d7482022-05-02 11:03:35 +02001260component_test_crypto_full_no_cipher () {
1261 msg "build: crypto_full minus CIPHER"
1262 scripts/config.py crypto_full
1263 scripts/config.py unset MBEDTLS_CIPHER_C
Przemek Stekielda5f4832022-05-12 09:46:29 +02001264 # Direct dependencies
1265 scripts/config.py unset MBEDTLS_CCM_C
Przemek Stekiel179d7482022-05-02 11:03:35 +02001266 scripts/config.py unset MBEDTLS_CMAC_C
Przemek Stekielda5f4832022-05-12 09:46:29 +02001267 scripts/config.py unset MBEDTLS_GCM_C
Przemek Stekiel179d7482022-05-02 11:03:35 +02001268 scripts/config.py unset MBEDTLS_NIST_KW_C
1269 scripts/config.py unset MBEDTLS_PKCS12_C
1270 scripts/config.py unset MBEDTLS_PKCS5_C
Przemek Stekiel179d7482022-05-02 11:03:35 +02001271 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
Przemek Stekielda5f4832022-05-12 09:46:29 +02001272 # Indirect dependencies
Przemek Stekiel179d7482022-05-02 11:03:35 +02001273 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
1274 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
1275 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Raef Colesa7e03ad2022-09-28 09:32:48 +01001276 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01001277 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Przemek Stekiel179d7482022-05-02 11:03:35 +02001278 make
1279
1280 msg "test: crypto_full minus CIPHER"
1281 make test
1282}
1283
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001284component_test_tls1_2_default_stream_cipher_only () {
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001285 msg "build: default with only stream cipher"
1286
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001287 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001288 scripts/config.py unset MBEDTLS_GCM_C
1289 scripts/config.py unset MBEDTLS_CCM_C
1290 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001291 # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001292 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001293 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001294 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001295 # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
1296 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001297 # Modules that depend on AEAD
Przemek Stekield582a012022-09-28 07:59:01 +02001298 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001299 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001300
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001301 make
1302
1303 msg "test: default with only stream cipher"
1304 make test
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001305
1306 # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite.
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001307}
1308
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001309component_test_tls1_2_default_stream_cipher_only_use_psa () {
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001310 msg "build: default with only stream cipher use psa"
Przemek Stekiel9550c052022-09-28 09:51:55 +02001311
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001312 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001313 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel9550c052022-09-28 09:51:55 +02001314 scripts/config.py unset MBEDTLS_GCM_C
1315 scripts/config.py unset MBEDTLS_CCM_C
1316 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001317 # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
Przemek Stekiel9550c052022-09-28 09:51:55 +02001318 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001319 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekiel9550c052022-09-28 09:51:55 +02001320 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001321 # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
1322 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001323 # Modules that depend on AEAD
Przemek Stekiel9550c052022-09-28 09:51:55 +02001324 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001325 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel9550c052022-09-28 09:51:55 +02001326
Przemek Stekiel9550c052022-09-28 09:51:55 +02001327 make
1328
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001329 msg "test: default with only stream cipher use psa"
Przemek Stekiel9550c052022-09-28 09:51:55 +02001330 make test
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001331
1332 # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite.
Przemek Stekiel9550c052022-09-28 09:51:55 +02001333}
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001334
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001335component_test_tls1_2_default_cbc_legacy_cipher_only () {
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001336 msg "build: default with only CBC-legacy cipher"
1337
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001338 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001339 scripts/config.py unset MBEDTLS_GCM_C
1340 scripts/config.py unset MBEDTLS_CCM_C
1341 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001342 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1343 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1344 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001345 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001346 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001347 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001348 # Modules that depend on AEAD
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001349 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001350 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001351
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001352 make
1353
1354 msg "test: default with only CBC-legacy cipher"
1355 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001356
1357 msg "test: default with only CBC-legacy cipher - ssl-opt.sh (subset)"
1358 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001359}
1360
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001361component_test_tls1_2_deafult_cbc_legacy_cipher_only_use_psa () {
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001362 msg "build: default with only CBC-legacy cipher use psa"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001363
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001364 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001365 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001366 scripts/config.py unset MBEDTLS_GCM_C
1367 scripts/config.py unset MBEDTLS_CCM_C
1368 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001369 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1370 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1371 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001372 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001373 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001374 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001375 # Modules that depend on AEAD
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001376 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001377 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001378
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001379 make
1380
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001381 msg "test: default with only CBC-legacy cipher use psa"
1382 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001383
1384 msg "test: default with only CBC-legacy cipher use psa - ssl-opt.sh (subset)"
1385 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001386}
1387
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001388component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only () {
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001389 msg "build: default with only CBC-legacy and CBC-EtM ciphers"
1390
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001391 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001392 scripts/config.py unset MBEDTLS_GCM_C
1393 scripts/config.py unset MBEDTLS_CCM_C
1394 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001395 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1396 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1397 # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
1398 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1399 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001400 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001401 # Modules that depend on AEAD
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001402 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001403 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001404
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001405 make
1406
1407 msg "test: default with only CBC-legacy and CBC-EtM ciphers"
1408 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001409
1410 msg "test: default with only CBC-legacy and CBC-EtM ciphers - ssl-opt.sh (subset)"
1411 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001412}
1413
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001414component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only_use_psa () {
1415 msg "build: default with only CBC-legacy and CBC-EtM ciphers use psa"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001416
1417 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001418 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001419 scripts/config.py unset MBEDTLS_GCM_C
1420 scripts/config.py unset MBEDTLS_CCM_C
1421 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001422 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1423 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1424 # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
1425 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1426 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001427 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001428 # Modules that depend on AEAD
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001429 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001430 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001431
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001432 make
1433
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001434 msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001435 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001436
1437 msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa - ssl-opt.sh (subset)"
1438 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001439}
1440
Valerio Setti9f0ec532022-11-08 13:03:24 +01001441# We're not aware of any other (open source) implementation of EC J-PAKE in TLS
1442# that we could use for interop testing. However, we now have sort of two
1443# implementations ourselves: one using PSA, the other not. At least test that
1444# these two interoperate with each other.
1445component_test_tls1_2_ecjpake_compatibility() {
1446 msg "build: TLS1.2 server+client w/ EC-JPAKE w/o USE_PSA"
1447 scripts/config.py set MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
1448 make -C programs ssl/ssl_server2 ssl/ssl_client2
1449 cp programs/ssl/ssl_server2 s2_no_use_psa
1450 cp programs/ssl/ssl_client2 c2_no_use_psa
1451
1452 msg "build: TLS1.2 server+client w/ EC-JPAKE w/ USE_PSA"
1453 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1454 make clean
1455 make -C programs ssl/ssl_server2 ssl/ssl_client2
1456 make -C programs test/udp_proxy test/query_compile_time_config
1457
1458 msg "test: server w/o USE_PSA - client w/ USE_PSA"
1459 P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f ECJPAKE
1460 msg "test: client w/o USE_PSA - server w/ USE_PSA"
1461 P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f ECJPAKE
1462
1463 rm s2_no_use_psa c2_no_use_psa
1464}
1465
Gilles Peskinec109b372020-11-23 17:39:04 +01001466component_test_psa_external_rng_use_psa_crypto () {
1467 msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1468 scripts/config.py full
1469 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1470 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1471 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1472 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1473
1474 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1475 make test
1476
Gilles Peskineba749042021-01-13 20:02:03 +01001477 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001478 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001479}
1480
Gilles Peskine636c26a2020-03-04 20:46:15 +01001481component_test_everest () {
1482 msg "build: Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine636c26a2020-03-04 20:46:15 +01001483 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1484 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan .
1485 make
1486
1487 msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
1488 make test
1489
1490 msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001491 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01001492
1493 msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
1494 # Exclude some symmetric ciphers that are redundant here to gain time.
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02001495 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA'
Gilles Peskine636c26a2020-03-04 20:46:15 +01001496}
1497
Gilles Peskined3beca92020-07-03 00:15:37 +02001498component_test_everest_curve25519_only () {
1499 msg "build: Everest ECDH context, only Curve25519" # ~ 6 min
Gilles Peskined3beca92020-07-03 00:15:37 +02001500 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1501 scripts/config.py unset MBEDTLS_ECDSA_C
1502 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1503 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
TRodziewicz7c1d41d2021-04-23 13:33:44 +02001504 scripts/config.py unset MBEDTLS_ECJPAKE_C
Gilles Peskined3beca92020-07-03 00:15:37 +02001505 # Disable all curves
1506 for c in $(sed -n 's/#define \(MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED\).*/\1/p' <"$CONFIG_H"); do
1507 scripts/config.py unset "$c"
1508 done
1509 scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED
1510
1511 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1512
1513 msg "test: Everest ECDH context, only Curve25519" # ~ 50s
1514 make test
1515}
1516
Gilles Peskine8f073122018-11-27 15:58:47 +01001517component_test_small_ssl_out_content_len () {
1518 msg "build: small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001519 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
1520 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Gilles Peskine8f073122018-11-27 15:58:47 +01001521 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1522 make
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001523
Gilles Peskine8f073122018-11-27 15:58:47 +01001524 msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001525 tests/ssl-opt.sh -f "Max fragment\|Large packet"
Gilles Peskine8f073122018-11-27 15:58:47 +01001526}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001527
Gilles Peskine8f073122018-11-27 15:58:47 +01001528component_test_small_ssl_in_content_len () {
1529 msg "build: small SSL_IN_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001530 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096
1531 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384
Gilles Peskine8f073122018-11-27 15:58:47 +01001532 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1533 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001534
Gilles Peskine8f073122018-11-27 15:58:47 +01001535 msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001536 tests/ssl-opt.sh -f "Max fragment"
Gilles Peskine8f073122018-11-27 15:58:47 +01001537}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001538
Gilles Peskine8f073122018-11-27 15:58:47 +01001539component_test_small_ssl_dtls_max_buffering () {
1540 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001541 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000
Gilles Peskine8f073122018-11-27 15:58:47 +01001542 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1543 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001544
Gilles Peskine8f073122018-11-27 15:58:47 +01001545 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001546 tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg"
Gilles Peskine8f073122018-11-27 15:58:47 +01001547}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001548
Gilles Peskine8f073122018-11-27 15:58:47 +01001549component_test_small_mbedtls_ssl_dtls_max_buffering () {
1550 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1"
Gilles Peskine636c26a2020-03-04 20:46:15 +01001551 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190
Gilles Peskine8f073122018-11-27 15:58:47 +01001552 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1553 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001554
Gilles Peskine8f073122018-11-27 15:58:47 +01001555 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001556 tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket"
Gilles Peskine8f073122018-11-27 15:58:47 +01001557}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001558
Gilles Peskine75cc7712019-09-06 19:47:17 +02001559component_test_psa_collect_statuses () {
1560 msg "build+test: psa_collect_statuses" # ~30s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02001561 scripts/config.py full
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001562 tests/scripts/psa_collect_statuses.py
Gilles Peskine75cc7712019-09-06 19:47:17 +02001563 # Check that psa_crypto_init() succeeded at least once
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001564 grep -q '^0:psa_crypto_init:' tests/statuses.log
Gilles Peskine75cc7712019-09-06 19:47:17 +02001565 rm -f tests/statuses.log
1566}
1567
Gilles Peskine8f073122018-11-27 15:58:47 +01001568component_test_full_cmake_clang () {
1569 msg "build: cmake, full config, clang" # ~ 50s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001570 scripts/config.py full
Gilles Peskineda6017c2022-10-30 21:02:40 +01001571 CC=clang CXX=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On -D TEST_CPP=1 .
Gilles Peskine8f073122018-11-27 15:58:47 +01001572 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001573
k-stachowiak0291cb72019-06-26 15:52:12 +02001574 msg "test: main suites (full config, clang)" # ~ 5s
Gilles Peskine8f073122018-11-27 15:58:47 +01001575 make test
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +01001576
Gilles Peskineda6017c2022-10-30 21:02:40 +01001577 msg "test: cpp_dummy_build (full config, clang)" # ~ 1s
1578 programs/test/cpp_dummy_build
1579
k-stachowiak0291cb72019-06-26 15:52:12 +02001580 msg "test: psa_constant_names (full config, clang)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001581 tests/scripts/test_psa_constant_names.py
Gilles Peskine69e8f7f2020-02-26 19:51:43 +01001582
Gilles Peskine8f073122018-11-27 15:58:47 +01001583 msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001584 tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001585
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02001586 msg "test: compat.sh NULL (full config)" # ~ 2 min
1587 env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '^$' -f 'NULL'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001588
Gilles Peskine8f073122018-11-27 15:58:47 +01001589 msg "test: compat.sh ARIA + ChachaPoly"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001590 env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Gilles Peskine8f073122018-11-27 15:58:47 +01001591}
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001592
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001593component_test_memsan_constant_flow () {
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001594 # This tests both (1) accesses to undefined memory, and (2) branches or
1595 # memory access depending on secret values. To distinguish between those:
1596 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
1597 # - or alternatively, change the build type to MemSanDbg, which enables
1598 # origin tracking and nicer stack traces (which are useful for debugging
1599 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01001600 msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
1601 scripts/config.py full
1602 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
1603 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1604 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
1605 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
1606 make
1607
1608 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, Msan + constant flow)"
1609 make test
1610}
1611
1612component_test_memsan_constant_flow_psa () {
1613 # This tests both (1) accesses to undefined memory, and (2) branches or
1614 # memory access depending on secret values. To distinguish between those:
1615 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
1616 # - or alternatively, change the build type to MemSanDbg, which enables
1617 # origin tracking and nicer stack traces (which are useful for debugging
1618 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001619 msg "build: cmake MSan (clang), full config with constant flow testing"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001620 scripts/config.py full
1621 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
1622 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
1623 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
1624 make
1625
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001626 msg "test: main suites (Msan + constant flow)"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001627 make test
1628}
1629
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02001630component_test_valgrind_constant_flow () {
1631 # This tests both (1) everything that valgrind's memcheck usually checks
1632 # (heap buffer overflows, use of uninitialized memory, use-after-free,
1633 # etc.) and (2) branches or memory access depending on secret values,
1634 # which will be reported as uninitialized memory. To distinguish between
1635 # secret and actually uninitialized:
1636 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
1637 # - or alternatively, build with debug info and manually run the offending
1638 # test suite with valgrind --track-origins=yes, then check if the origin
1639 # was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01001640 msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
1641 scripts/config.py full
1642 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
1643 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1644 cmake -D CMAKE_BUILD_TYPE:String=Release .
1645 make
1646
1647 # this only shows a summary of the results (how many of each type)
1648 # details are left in Testing/<date>/DynamicAnalysis.xml
1649 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, valgrind + constant flow)"
1650 make memcheck
1651}
1652
1653component_test_valgrind_constant_flow_psa () {
1654 # This tests both (1) everything that valgrind's memcheck usually checks
1655 # (heap buffer overflows, use of uninitialized memory, use-after-free,
1656 # etc.) and (2) branches or memory access depending on secret values,
1657 # which will be reported as uninitialized memory. To distinguish between
1658 # secret and actually uninitialized:
1659 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
1660 # - or alternatively, build with debug info and manually run the offending
1661 # test suite with valgrind --track-origins=yes, then check if the origin
1662 # was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02001663 msg "build: cmake release GCC, full config with constant flow testing"
1664 scripts/config.py full
1665 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
1666 cmake -D CMAKE_BUILD_TYPE:String=Release .
1667 make
1668
1669 # this only shows a summary of the results (how many of each type)
1670 # details are left in Testing/<date>/DynamicAnalysis.xml
1671 msg "test: main suites (valgrind + constant flow)"
1672 make memcheck
1673}
1674
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001675component_test_default_no_deprecated () {
Gilles Peskine8386ea22020-04-30 09:07:29 +02001676 # Test that removing the deprecated features from the default
1677 # configuration leaves something consistent.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001678 msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s
1679 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
1680 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1681
1682 msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s
1683 make test
1684}
1685
1686component_test_full_no_deprecated () {
Gilles Peskine30de2e82020-04-20 21:39:22 +02001687 msg "build: make, full_no_deprecated config" # ~ 30s
1688 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001689 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1690
Gilles Peskine30de2e82020-04-20 21:39:22 +02001691 msg "test: make, full_no_deprecated config" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001692 make test
1693}
1694
Gilles Peskine8386ea22020-04-30 09:07:29 +02001695component_test_full_no_deprecated_deprecated_warning () {
1696 # Test that there is nothing deprecated in "full_no_deprecated".
1697 # A deprecated feature would trigger a warning (made fatal) from
1698 # MBEDTLS_DEPRECATED_WARNING.
Gilles Peskine30de2e82020-04-20 21:39:22 +02001699 msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s
1700 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001701 scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED
1702 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
1703 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1704
Gilles Peskine30de2e82020-04-20 21:39:22 +02001705 msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001706 make test
1707}
1708
Gilles Peskine8386ea22020-04-30 09:07:29 +02001709component_test_full_deprecated_warning () {
1710 # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes
1711 # with only certain whitelisted types of warnings.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001712 msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001713 scripts/config.py full
1714 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001715 # Expect warnings from '#warning' directives in check_config.h.
1716 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +01001717
Gilles Peskine8386ea22020-04-30 09:07:29 +02001718 msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
1719 # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features.
1720 # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001721 # Expect warnings from '#warning' directives in check_config.h and
1722 # from the use of deprecated functions in test suites.
1723 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests
Gilles Peskine841b14b2019-11-26 17:37:37 +01001724
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001725 msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s
1726 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01001727}
Jaeden Ameroed93bdc2018-11-02 16:57:24 +00001728
Gilles Peskineec541fe2020-01-31 14:24:14 +01001729# Check that the specified libraries exist and are empty.
1730are_empty_libraries () {
1731 nm "$@" >/dev/null 2>/dev/null
1732 ! nm "$@" 2>/dev/null | grep -v ':$' | grep .
1733}
1734
1735component_build_crypto_default () {
1736 msg "build: make, crypto only"
1737 scripts/config.py crypto
Gilles Peskine6bb39152020-02-03 11:59:20 +01001738 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001739 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001740}
1741
1742component_build_crypto_full () {
1743 msg "build: make, crypto only, full config"
1744 scripts/config.py crypto_full
Gilles Peskine6bb39152020-02-03 11:59:20 +01001745 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001746 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001747}
1748
Gilles Peskinefc4f11b2022-10-21 19:34:54 +02001749component_test_crypto_for_psa_service () {
Gilles Peskineaef1ba62022-10-11 21:05:06 +02001750 msg "build: make, config for PSA crypto service"
1751 scripts/config.py crypto
1752 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1753 # Disable things that are not needed for just cryptography, to
1754 # reach a configuration that would be typical for a PSA cryptography
1755 # service providing all implemented PSA algorithms.
1756 # System stuff
1757 scripts/config.py unset MBEDTLS_ERROR_C
1758 scripts/config.py unset MBEDTLS_TIMING_C
Gilles Peskine78bffd12022-10-25 21:02:33 +02001759 scripts/config.py unset MBEDTLS_VERSION_FEATURES
Gilles Peskineaef1ba62022-10-11 21:05:06 +02001760 # Crypto stuff with no PSA interface
1761 scripts/config.py unset MBEDTLS_BASE64_C
Gilles Peskine649e04e2022-10-25 21:05:57 +02001762 # Keep MBEDTLS_CIPHER_C because psa_crypto_cipher, CCM and GCM need it.
Gilles Peskineb06f0712022-10-25 21:06:11 +02001763 scripts/config.py unset MBEDTLS_HKDF_C # PSA's HKDF is independent
Gilles Peskine649e04e2022-10-25 21:05:57 +02001764 # Keep MBEDTLS_MD_C because deterministic ECDSA needs it for HMAC_DRBG.
Gilles Peskineaef1ba62022-10-11 21:05:06 +02001765 scripts/config.py unset MBEDTLS_NIST_KW_C
1766 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1767 scripts/config.py unset MBEDTLS_PEM_WRITE_C
1768 scripts/config.py unset MBEDTLS_PKCS12_C
1769 scripts/config.py unset MBEDTLS_PKCS5_C
Gilles Peskinefcee7402022-10-11 21:15:24 +02001770 # MBEDTLS_PK_PARSE_C and MBEDTLS_PK_WRITE_C are actually currently needed
1771 # in PSA code to work with RSA keys. We don't require users to set those:
1772 # they will be reenabled in build_info.h.
Gilles Peskine1f108072022-10-25 21:02:56 +02001773 scripts/config.py unset MBEDTLS_PK_C
Gilles Peskinefcee7402022-10-11 21:15:24 +02001774 scripts/config.py unset MBEDTLS_PK_PARSE_C
Gilles Peskineaef1ba62022-10-11 21:05:06 +02001775 scripts/config.py unset MBEDTLS_PK_WRITE_C
Gilles Peskineaef1ba62022-10-11 21:05:06 +02001776 make CFLAGS='-O1 -Werror' all test
1777 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
1778}
1779
Gilles Peskineec541fe2020-01-31 14:24:14 +01001780component_build_crypto_baremetal () {
1781 msg "build: make, crypto only, baremetal config"
1782 scripts/config.py crypto_baremetal
David Horstmann61faf662021-11-30 11:40:54 +00001783 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001784 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001785}
Daniel Axtens446af202020-09-02 21:30:13 +10001786support_build_crypto_baremetal () {
Daniel Axtens814c8132020-08-31 14:22:58 +10001787 support_build_baremetal "$@"
1788}
1789
1790component_build_baremetal () {
1791 msg "build: make, baremetal config"
1792 scripts/config.py baremetal
David Horstmann61faf662021-11-30 11:40:54 +00001793 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Daniel Axtens814c8132020-08-31 14:22:58 +10001794}
1795support_build_baremetal () {
Daniel Axtens446af202020-09-02 21:30:13 +10001796 # Older Glibc versions include time.h from other headers such as stdlib.h,
1797 # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this
1798 # problem, Ubuntu 18.04 is ok.
1799 ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h
1800}
Gilles Peskineec541fe2020-01-31 14:24:14 +01001801
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001802# depends.py family of tests
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001803component_test_depends_py_cipher_id () {
1804 msg "test/build: depends.py cipher_id (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001805 tests/scripts/depends.py cipher_id --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01001806}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00001807
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001808component_test_depends_py_cipher_chaining () {
1809 msg "test/build: depends.py cipher_chaining (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001810 tests/scripts/depends.py cipher_chaining --unset-use-psa
John Durkopc14be902020-08-20 06:16:41 -07001811}
1812
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001813component_test_depends_py_cipher_padding () {
1814 msg "test/build: depends.py cipher_padding (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001815 tests/scripts/depends.py cipher_padding --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01001816}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00001817
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001818component_test_depends_py_curves () {
1819 msg "test/build: depends.py curves (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001820 tests/scripts/depends.py curves --unset-use-psa
John Durkop2ec2eaa2020-08-24 18:29:15 -07001821}
1822
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001823component_test_depends_py_hashes () {
1824 msg "test/build: depends.py hashes (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001825 tests/scripts/depends.py hashes --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01001826}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001827
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001828component_test_depends_py_kex () {
1829 msg "test/build: depends.py kex (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001830 tests/scripts/depends.py kex --unset-use-psa
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001831}
1832
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001833component_test_depends_py_pkalgs () {
1834 msg "test/build: depends.py pkalgs (gcc)"
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001835 tests/scripts/depends.py pkalgs --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01001836}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001837
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001838# PSA equivalents of the depends.py tests
1839component_test_depends_py_cipher_id_psa () {
1840 msg "test/build: depends.py cipher_id (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
1841 tests/scripts/depends.py cipher_id
1842}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001843
Andrzej Kurek7cb00772022-10-24 10:49:22 -04001844component_test_depends_py_cipher_chaining_psa () {
1845 msg "test/build: depends.py cipher_chaining (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
1846 tests/scripts/depends.py cipher_chaining
1847}
1848
1849component_test_depends_py_cipher_padding_psa () {
1850 msg "test/build: depends.py cipher_padding (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
1851 tests/scripts/depends.py cipher_padding
1852}
1853
1854component_test_depends_py_curves_psa () {
1855 msg "test/build: depends.py curves (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
1856 tests/scripts/depends.py curves
1857}
1858
1859component_test_depends_py_hashes_psa () {
1860 msg "test/build: depends.py hashes (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
1861 tests/scripts/depends.py hashes
1862}
1863
1864component_test_depends_py_kex_psa () {
1865 msg "test/build: depends.py kex (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
1866 tests/scripts/depends.py kex
1867}
1868
1869component_test_depends_py_pkalgs_psa () {
1870 msg "test/build: depends.py pkalgs (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04001871 tests/scripts/depends.py pkalgs
Gilles Peskine8f073122018-11-27 15:58:47 +01001872}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001873
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001874component_build_module_alt () {
1875 msg "build: MBEDTLS_XXX_ALT" # ~30s
1876 scripts/config.py full
1877 # Disable options that are incompatible with some ALT implementations.
1878 # aesni.c and padlock.c reference mbedtls_aes_context fields directly.
1879 scripts/config.py unset MBEDTLS_AESNI_C
1880 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001881 # You can only have one threading implementation: alt or pthread, not both.
1882 scripts/config.py unset MBEDTLS_THREADING_PTHREAD
Gilles Peskine5c3f18d2021-05-31 21:21:12 +02001883 # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields
1884 # directly and assumes the implementation works with partial groups.
1885 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
Tom Cosgrovef3ebd902022-02-20 22:25:31 +00001886 # MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_A64_CRYPTO_*
1887 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
1888 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00001889 # MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*
1890 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
1891 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001892 # Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable
1893 # MBEDTLS_XXX_YYY_ALT which are for single functions.
1894 scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT'
Gilles Peskine1628a9c2021-05-31 22:09:58 +02001895 scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C
1896 # We can only compile, not link, since we don't have any implementations
1897 # suitable for testing with the dummy alt headers.
1898 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
1899}
1900
1901component_build_dhm_alt () {
1902 msg "build: MBEDTLS_DHM_ALT" # ~30s
1903 scripts/config.py full
1904 scripts/config.py set MBEDTLS_DHM_ALT
1905 # debug.c currently references mbedtls_dhm_context fields directly.
1906 scripts/config.py unset MBEDTLS_DEBUG_C
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001907 # We can only compile, not link, since we don't have any implementations
1908 # suitable for testing with the dummy alt headers.
1909 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
1910}
1911
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001912component_test_no_use_psa_crypto_full_cmake_asan() {
1913 # full minus MBEDTLS_USE_PSA_CRYPTO: run the same set of tests as basic-build-test.sh
Gilles Peskinedc3a1792019-09-03 11:42:04 +02001914 msg "build: cmake, full config minus MBEDTLS_USE_PSA_CRYPTO, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001915 scripts/config.py full
1916 scripts/config.py set MBEDTLS_ECP_RESTARTABLE # not using PSA, so enable restartable ECC
1917 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1918 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cron6f135e12021-12-08 16:57:54 +01001919 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001920 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskinedc6d8382020-04-12 14:21:55 +02001921 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001922 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Raef Colesa7e03ad2022-09-28 09:32:48 +01001923 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01001924 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Manuel Pégourié-Gonnardd8167e82019-02-01 11:12:52 +01001925 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001926 make
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +02001927
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001928 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO)"
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001929 make test
Manuel Pégourié-Gonnard503a5ef2015-10-23 09:04:45 +02001930
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001931 msg "test: ssl-opt.sh (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001932 tests/ssl-opt.sh
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01001933
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001934 msg "test: compat.sh default (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001935 tests/compat.sh
Andrzej Kurek991f9fe2018-07-02 09:08:21 -04001936
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02001937 msg "test: compat.sh NULL (full minus MBEDTLS_USE_PSA_CRYPTO)"
1938 env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -f 'NULL'
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05001939
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001940 msg "test: compat.sh ARIA + ChachaPoly (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001941 env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001942}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05001943
Ronald Cron403c15c2021-09-13 09:38:05 +02001944component_test_psa_crypto_config_accel_ecdsa () {
1945 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
1946
1947 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1948 # partial support for cipher operations in the driver test library.
1949 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1950 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1951
1952 # SHA384 needed for some ECDSA signature tests.
1953 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA384_C
1954 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C
1955
1956 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA KEY_TYPE_ECC_KEY_PAIR KEY_TYPE_ECC_PUBLIC_KEY"
1957 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1958 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1959
1960 # Restore test driver base configuration
1961 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA384_C
1962 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C
1963
John Durkopd8959392020-09-20 23:09:17 -07001964 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
Ronald Cron403c15c2021-09-13 09:38:05 +02001965 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
John Durkopd8959392020-09-20 23:09:17 -07001966 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001967 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron403c15c2021-09-13 09:38:05 +02001968 scripts/config.py unset MBEDTLS_ECDSA_C
1969 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1970 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1971
1972 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Manuel Pégourié-Gonnard79e14672022-09-19 09:27:53 +02001973 make CFLAGS="$ASAN_CFLAGS -O -Werror -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
Ronald Cron403c15c2021-09-13 09:38:05 +02001974
Gilles Peskine827dbd92022-02-04 00:30:54 +01001975 not grep mbedtls_ecdsa_ library/ecdsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02001976
1977 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
1978 make test
1979}
1980
1981component_test_psa_crypto_config_accel_rsa_signature () {
1982 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature"
1983
1984 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1985 # partial support for cipher operations in the driver test library.
1986 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1987 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1988
1989 # It seems it is not possible to remove only the support for RSA signature
1990 # in the library. Thus we have to remove all RSA support (signature and
1991 # encryption/decryption). AS there is no driver support for asymmetric
1992 # encryption/decryption so far remove RSA encryption/decryption from the
1993 # application algorithm list.
1994 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
1995 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
1996
1997 # Make sure both the library and the test library support the SHA hash
1998 # algorithms and only those ones (SHA256 is included by default). That way:
1999 # - the test library can compute the RSA signatures even in the case of a
2000 # composite RSA signature algorithm based on a SHA hash (no other hash
2001 # used in the unit tests).
2002 # - the dependency of RSA signature tests on PSA_WANT_ALG_SHA_xyz is
2003 # fulfilled as the hash SHA algorithm is supported by the library, and
2004 # thus the tests are run, not skipped.
2005 # - when testing a signature key with an algorithm wildcard built from
2006 # PSA_ALG_ANY_HASH as algorithm to test with the key, the chosen hash
2007 # algorithm based on the hashes supported by the library is also
2008 # supported by the test library.
Ronald Cron403c15c2021-09-13 09:38:05 +02002009 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2010 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160_C
2011
2012 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA1_C
2013 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C
Manuel Pégourié-Gonnard7a27e852022-07-27 12:30:34 +02002014 # We need to define either MD_C or all of the PSA_WANT_ALG_SHAxxx.
2015 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_MD_C
Ronald Cron403c15c2021-09-13 09:38:05 +02002016 # We need PEM parsing in the test library as well to support the import
2017 # of PEM encoded RSA keys.
2018 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_PEM_PARSE_C
2019 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_BASE64_C
2020
2021 loc_accel_list="ALG_RSA_PKCS1V15_SIGN ALG_RSA_PSS KEY_TYPE_RSA_KEY_PAIR KEY_TYPE_RSA_PUBLIC_KEY"
2022 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
2023 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
2024
2025 # Restore test driver base configuration
2026 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA1_C
2027 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C
Manuel Pégourié-Gonnard7a27e852022-07-27 12:30:34 +02002028 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_MD_C
Ronald Cron403c15c2021-09-13 09:38:05 +02002029 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_PEM_PARSE_C
2030 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_BASE64_C
2031
2032
2033 # Mbed TLS library build
2034 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2035 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2036
2037 # Remove RSA support and its dependencies
2038 scripts/config.py unset MBEDTLS_PKCS1_V15
2039 scripts/config.py unset MBEDTLS_PKCS1_V21
2040 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
2041 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
2042 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
2043 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
2044 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
2045 scripts/config.py unset MBEDTLS_RSA_C
2046 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
2047
Ronald Cron403c15c2021-09-13 09:38:05 +02002048 scripts/config.py unset MBEDTLS_MD5_C
2049 scripts/config.py unset MBEDTLS_RIPEMD160_C
2050 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1
2051 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1
2052 scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING
2053
2054 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Manuel Pégourié-Gonnard79e14672022-09-19 09:27:53 +02002055 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
Ronald Cron403c15c2021-09-13 09:38:05 +02002056
Gilles Peskine827dbd92022-02-04 00:30:54 +01002057 not grep mbedtls_rsa_rsassa_pkcs1_v15_sign library/rsa.o
2058 not grep mbedtls_rsa_rsassa_pss_sign_ext library/rsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02002059
2060 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature"
2061 make test
2062}
2063
Ronald Cronb2312452021-05-08 14:32:59 +02002064component_test_psa_crypto_config_accel_hash () {
2065 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
2066
2067 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
2068 # partial support for cipher operations in the driver test library.
2069 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
2070 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
2071
Ronald Cron27d47712021-12-07 09:54:36 +01002072 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512"
Ronald Cronb2312452021-05-08 14:32:59 +02002073 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
2074 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
2075
2076 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2077 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
Ronald Cronb2312452021-05-08 14:32:59 +02002078 scripts/config.py unset MBEDTLS_MD5_C
2079 scripts/config.py unset MBEDTLS_RIPEMD160_C
2080 scripts/config.py unset MBEDTLS_SHA1_C
2081 # Don't unset MBEDTLS_SHA256_C as it is needed by PSA crypto core.
2082 scripts/config.py unset MBEDTLS_SHA384_C
2083 scripts/config.py unset MBEDTLS_SHA512_C
Ronald Cronb2312452021-05-08 14:32:59 +02002084 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Manuel Pégourié-Gonnard79e14672022-09-19 09:27:53 +02002085 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
Ronald Cronb2312452021-05-08 14:32:59 +02002086
Gilles Peskine827dbd92022-02-04 00:30:54 +01002087 not grep mbedtls_sha512_init library/sha512.o
2088 not grep mbedtls_sha1_init library/sha1.o
Ronald Cronb2312452021-05-08 14:32:59 +02002089
2090 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
2091 make test
2092}
2093
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002094# Auxiliary function to build config for hashes with and without drivers
2095config_psa_crypto_hash_use_psa () {
2096 DRIVER_ONLY="$1"
2097 # start with config full for maximum coverage (also enables USE_PSA)
2098 scripts/config.py full
Przemek Stekielf3be7cc2022-11-16 12:53:20 +01002099 # enable support for drivers and configuring PSA-only algorithms
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002100 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
Przemek Stekielf3be7cc2022-11-16 12:53:20 +01002101 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002102 if [ "$DRIVER_ONLY" -eq 1 ]; then
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002103 # disable the built-in implementation of hashes
2104 scripts/config.py unset MBEDTLS_MD5_C
2105 scripts/config.py unset MBEDTLS_RIPEMD160_C
2106 scripts/config.py unset MBEDTLS_SHA1_C
2107 scripts/config.py unset MBEDTLS_SHA224_C
2108 scripts/config.py unset MBEDTLS_SHA256_C # see external RNG below
2109 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
2110 scripts/config.py unset MBEDTLS_SHA384_C
2111 scripts/config.py unset MBEDTLS_SHA512_C
2112 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
2113 fi
2114 # Use an external RNG as currently internal RNGs depend on entropy.c
2115 # which in turn hard-depends on SHA256_C (or SHA512_C).
2116 # See component_test_psa_external_rng_no_drbg_use_psa.
2117 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
2118 scripts/config.py unset MBEDTLS_ENTROPY_C
2119 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED # depends on ENTROPY_C
2120 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT # depends on former
2121 # Also unset MD_C and things that depend on it;
2122 # see component_test_crypto_full_no_md.
2123 if [ "$DRIVER_ONLY" -eq 1 ]; then
2124 scripts/config.py unset MBEDTLS_MD_C
2125 fi
2126 scripts/config.py unset MBEDTLS_HKDF_C # has independent PSA implementation
2127 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
Bence Szépkútia17d0382022-11-22 15:54:52 +01002128 scripts/config.py unset MBEDTLS_PKCS7_C
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002129 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC
2130 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_DETERMINISTIC_ECDSA
2131}
2132
Przemek Stekiel120ed8f2022-10-27 10:29:15 +02002133# Note that component_test_psa_crypto_config_reference_hash_use_psa
2134# is related to this component and both components need to be kept in sync.
2135# For details please see comments for component_test_psa_crypto_config_reference_hash_use_psa.
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02002136component_test_psa_crypto_config_accel_hash_use_psa () {
2137 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash and USE_PSA"
2138
2139 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
2140 # partial support for cipher operations in the driver test library.
2141 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
2142 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
2143
2144 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512"
2145 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
2146 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
2147
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002148 config_psa_crypto_hash_use_psa 1
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02002149
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02002150 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Neil Armstrongd86b8ac2022-07-20 16:25:49 +02002151 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" all
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02002152
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02002153 # There's a risk of something getting re-enabled via config_psa.h;
2154 # make sure it did not happen.
2155 not grep mbedtls_md library/md.o
2156 not grep mbedtls_md5 library/md5.o
2157 not grep mbedtls_sha1 library/sha1.o
Manuel Pégourié-Gonnard7b0825d2022-07-11 11:06:09 +02002158 not grep mbedtls_sha256 library/sha256.o
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02002159 not grep mbedtls_sha512 library/sha512.o
2160 not grep mbedtls_ripemd160 library/ripemd160.o
2161
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02002162 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash and USE_PSA"
2163 make test
Andrzej Kurek07e35702022-09-05 15:39:23 -04002164
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01002165 # This is mostly useful so that we can later compare outcome files with
2166 # the reference config in analyze_outcomes.py, to check that the
2167 # dependency declarations in ssl-opt.sh and in TLS code are correct.
Przemek Stekiel5f6f32a2022-10-27 08:24:43 +02002168 msg "test: ssl-opt.sh, MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash and USE_PSA"
2169 tests/ssl-opt.sh
Andrzej Kurek07e35702022-09-05 15:39:23 -04002170
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01002171 # This is to make sure all ciphersuites are exercised, but we don't need
2172 # interop testing (besides, we already got some from ssl-opt.sh).
2173 msg "test: compat.sh, MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash and USE_PSA"
2174 tests/compat.sh -p mbedTLS -V YES
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02002175}
2176
Przemek Stekiel120ed8f2022-10-27 10:29:15 +02002177# This component provides reference configuration for test_psa_crypto_config_accel_hash_use_psa
2178# without accelerated hash. The outcome from both components are used by the analyze_outcomes.py
2179# script to find regression in test coverage when accelerated hash is used (tests and ssl-opt).
2180# Both components need to be kept in sync.
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02002181component_test_psa_crypto_config_reference_hash_use_psa() {
2182 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG without accelerated hash and USE_PSA"
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002183
Przemek Stekiel52d8e962022-11-16 12:55:27 +01002184 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
2185 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
2186
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01002187 config_psa_crypto_hash_use_psa 0
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02002188
Przemek Stekielab0451b2022-10-24 11:29:35 +02002189 make
2190
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02002191 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG without accelerated hash and USE_PSA"
2192 make test
2193
Przemek Stekiel5f6f32a2022-10-27 08:24:43 +02002194 msg "test: ssl-opt.sh, MBEDTLS_PSA_CRYPTO_CONFIG without accelerated hash and USE_PSA"
2195 tests/ssl-opt.sh
Ronald Cron3a8714d2021-10-18 11:26:01 +02002196}
Manuel Pégourié-Gonnard97ab2a32022-07-06 10:46:57 +02002197
John Durkop4377bf72020-10-23 01:26:57 -07002198component_test_psa_crypto_config_accel_cipher () {
2199 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated cipher"
2200
2201 loc_accel_list="ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB ALG_OFB ALG_XTS KEY_TYPE_DES"
2202 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
2203 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
2204
2205 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2206 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2207
Ronald Cronf6606552022-03-15 11:23:25 +01002208 # There is no intended accelerator support for ALG STREAM_CIPHER and
John Durkope7012c72020-10-26 09:55:01 -07002209 # ALG_ECB_NO_PADDING. Therefore, asking for them in the build implies the
John Durkop4377bf72020-10-23 01:26:57 -07002210 # inclusion of the Mbed TLS cipher operations. As we want to test here with
2211 # cipher operations solely supported by accelerators, disabled those
John Durkopd8959392020-09-20 23:09:17 -07002212 # PSA configuration options.
2213 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
2214 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02002215 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CMAC
Przemyslaw Stekiel316c4fa2021-10-15 08:04:53 +02002216
2217 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02002218 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
2219 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
2220 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
2221 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
2222 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
2223 scripts/config.py unset MBEDTLS_DES_C
Przemyslaw Stekiel316c4fa2021-10-15 08:04:53 +02002224
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02002225 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Manuel Pégourié-Gonnard79e14672022-09-19 09:27:53 +02002226 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08002227
2228 not grep mbedtls_des* library/des.o
2229
2230 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated cipher"
2231 make test
2232}
2233
Przemek Stekiele290f2e2022-10-02 20:58:39 +02002234component_test_psa_crypto_config_accel_aead () {
2235 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD"
2236
2237 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
2238 # partial support for cipher operations in the driver test library.
2239 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
2240 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
2241
Przemek Stekielee1bb412022-10-11 11:52:25 +02002242 loc_accel_list="ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 KEY_TYPE_AES KEY_TYPE_CHACHA20 KEY_TYPE_ARIA KEY_TYPE_CAMELLIA"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02002243 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
2244 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
2245
2246 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2247 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2248
Przemek Stekielee1bb412022-10-11 11:52:25 +02002249 scripts/config.py unset MBEDTLS_GCM_C
2250 scripts/config.py unset MBEDTLS_CCM_C
2251 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
2252 # Features that depend on AEAD
2253 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel072fad12022-10-13 09:59:52 +02002254 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiele290f2e2022-10-02 20:58:39 +02002255
2256 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
2257 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
2258
Przemek Stekielee1bb412022-10-11 11:52:25 +02002259 # There's a risk of something getting re-enabled via config_psa.h
2260 # make sure it did not happen.
2261 not grep mbedtls_ccm library/ccm.o
2262 not grep mbedtls_gcm library/gcm.o
2263 not grep mbedtls_chachapoly library/chachapoly.o
2264
Przemek Stekiele290f2e2022-10-02 20:58:39 +02002265 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD"
2266 make test
2267}
2268
John Durkopd0321952020-10-29 21:37:36 -07002269component_test_psa_crypto_config_no_driver() {
2270 # full plus MBEDTLS_PSA_CRYPTO_CONFIG
2271 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS"
2272 scripts/config.py full
2273 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2274 scripts/config.py unset MBEDTLS_PSA_CRYPTO_DRIVERS
2275 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
John Durkopf4c4cb02020-10-28 20:09:55 -07002276 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop6ba40d12020-11-10 08:50:04 -08002277 make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkop9814fa22020-11-04 12:28:15 -08002278
2279 msg "test: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS"
John Durkopf4c4cb02020-10-28 20:09:55 -07002280 make test
2281}
2282
2283component_test_psa_crypto_config_chachapoly_disabled() {
John Durkop9814fa22020-11-04 12:28:15 -08002284 # full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305
John Durkop07cc04a2020-11-16 22:08:34 -08002285 msg "build: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305"
John Durkopf4c4cb02020-10-28 20:09:55 -07002286 scripts/config.py full
John Durkop9814fa22020-11-04 12:28:15 -08002287 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
John Durkopf4c4cb02020-10-28 20:09:55 -07002288 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_GCM
2289 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CHACHA20_POLY1305
2290 make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkop6ba40d12020-11-10 08:50:04 -08002291
John Durkop9814fa22020-11-04 12:28:15 -08002292 msg "test: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305"
2293 make test
John Durkopf4c4cb02020-10-28 20:09:55 -07002294}
2295
John Durkop9814fa22020-11-04 12:28:15 -08002296# This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test.
John Durkopf4c4cb02020-10-28 20:09:55 -07002297component_build_psa_accel_alg_ecdh() {
2298 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDH
John Durkopd0321952020-10-29 21:37:36 -07002299 # without MBEDTLS_ECDH_C
John Durkop6ba40d12020-11-10 08:50:04 -08002300 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C"
John Durkopd0321952020-10-29 21:37:36 -07002301 scripts/config.py full
2302 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2303 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2304 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002305 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07002306 scripts/config.py unset MBEDTLS_ECDH_C
2307 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
2308 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2309 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2310 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
2311 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2312 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop6ba40d12020-11-10 08:50:04 -08002313 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07002314}
2315
2316# This should be renamed to test and updated once the accelerator ECC key pair code is in place and ready to test.
2317component_build_psa_accel_key_type_ecc_key_pair() {
2318 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
2319 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_KEY_PAIR"
2320 scripts/config.py full
2321 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
John Durkopbd069d32020-10-31 22:14:03 -07002322 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2323 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002324 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07002325 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
2326 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
2327 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2328 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08002329}
2330
2331# This should be renamed to test and updated once the accelerator ECC public key code is in place and ready to test.
2332component_build_psa_accel_key_type_ecc_public_key() {
2333 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY
2334 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY"
2335 scripts/config.py full
2336 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2337 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2338 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002339 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002340 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
2341 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
2342 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2343 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2344}
2345
2346# This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test.
2347component_build_psa_accel_alg_hmac() {
2348 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HMAC
2349 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HMAC"
2350 scripts/config.py full
2351 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2352 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2353 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002354 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002355 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2356 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2357}
2358
2359# This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test.
2360component_build_psa_accel_alg_hkdf() {
2361 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HKDF
2362 # without MBEDTLS_HKDF_C
2363 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C"
2364 scripts/config.py full
2365 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2366 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2367 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002368 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002369 scripts/config.py unset MBEDTLS_HKDF_C
Ronald Cron6f135e12021-12-08 16:57:54 +01002370 # Make sure to unset TLS1_3 since it requires HKDF_C and will not build properly without it.
2371 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002372 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2373 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2374}
2375
2376# This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test.
2377component_build_psa_accel_alg_md5() {
2378 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_MD5 without other hashes
2379 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_MD5 - other hashes"
2380 scripts/config.py full
2381 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2382 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2383 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002384 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002385 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2386 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2387 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2388 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2389 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2390 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
Andrzej Kurek4ba0e452022-09-14 12:47:26 -04002391 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02002392 scripts/config.py unset MBEDTLS_LMS_C
2393 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08002394 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2395 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2396}
2397
2398# This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test.
2399component_build_psa_accel_alg_ripemd160() {
2400 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RIPEMD160 without other hashes
2401 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RIPEMD160 - other hashes"
2402 scripts/config.py full
2403 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2404 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2405 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002406 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002407 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2408 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2409 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2410 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2411 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2412 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
Andrzej Kurek4ba0e452022-09-14 12:47:26 -04002413 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02002414 scripts/config.py unset MBEDTLS_LMS_C
2415 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08002416 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2417 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2418}
2419
2420# This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test.
2421component_build_psa_accel_alg_sha1() {
2422 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_1 without other hashes
2423 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_1 - other hashes"
2424 scripts/config.py full
2425 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2426 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2427 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002428 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002429 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2430 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2431 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2432 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2433 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2434 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
Andrzej Kurek4ba0e452022-09-14 12:47:26 -04002435 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02002436 scripts/config.py unset MBEDTLS_LMS_C
2437 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08002438 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2439 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2440}
2441
2442# This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test.
2443component_build_psa_accel_alg_sha224() {
2444 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_224 without other hashes
2445 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_224 - other hashes"
2446 scripts/config.py full
2447 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2448 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2449 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002450 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002451 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2452 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2453 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2454 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2455 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
Andrzej Kurek4ba0e452022-09-14 12:47:26 -04002456 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
John Durkop1b7ee052020-11-27 08:51:22 -08002457 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2458 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2459}
2460
2461# This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test.
2462component_build_psa_accel_alg_sha256() {
2463 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_256 without other hashes
2464 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_256 - other hashes"
2465 scripts/config.py full
2466 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2467 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2468 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002469 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002470 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2471 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2472 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2473 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2474 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2475 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
2476 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2477 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2478}
2479
2480# This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test.
2481component_build_psa_accel_alg_sha384() {
2482 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_384 without other hashes
2483 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_384 - other hashes"
2484 scripts/config.py full
2485 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2486 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2487 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002488 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002489 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2490 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2491 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2492 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2493 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
Andrzej Kurek4ba0e452022-09-14 12:47:26 -04002494 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02002495 scripts/config.py unset MBEDTLS_LMS_C
2496 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08002497 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2498 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2499}
2500
2501# This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test.
2502component_build_psa_accel_alg_sha512() {
2503 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_512 without other hashes
2504 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_512 - other hashes"
2505 scripts/config.py full
2506 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2507 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2508 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002509 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002510 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2511 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2512 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2513 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2514 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2515 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
Andrzej Kurek4ba0e452022-09-14 12:47:26 -04002516 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02002517 scripts/config.py unset MBEDTLS_LMS_C
2518 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08002519 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2520 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2521}
2522
John Durkopd0321952020-10-29 21:37:36 -07002523# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002524component_build_psa_accel_alg_rsa_pkcs1v15_crypt() {
John Durkopbd069d32020-10-31 22:14:03 -07002525 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2526 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopd0321952020-10-29 21:37:36 -07002527 scripts/config.py full
2528 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2529 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2530 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002531 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002532 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002533 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2534 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
2535 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopd0321952020-10-29 21:37:36 -07002536 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkopbd069d32020-10-31 22:14:03 -07002537 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2538}
2539
2540# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002541component_build_psa_accel_alg_rsa_pkcs1v15_sign() {
John Durkopbd069d32020-10-31 22:14:03 -07002542 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_SIGN and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2543 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2544 scripts/config.py full
2545 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2546 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2547 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002548 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002549 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002550 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2551 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
2552 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07002553 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2554 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2555}
2556
2557# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002558component_build_psa_accel_alg_rsa_oaep() {
John Durkopbd069d32020-10-31 22:14:03 -07002559 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_OAEP and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2560 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2561 scripts/config.py full
2562 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2563 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2564 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002565 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002566 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_OAEP 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002567 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2568 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2569 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07002570 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2571 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2572}
2573
2574# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002575component_build_psa_accel_alg_rsa_pss() {
John Durkopbd069d32020-10-31 22:14:03 -07002576 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PSS and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2577 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2578 scripts/config.py full
2579 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2580 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2581 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002582 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002583 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002584 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2585 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2586 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
John Durkopbd069d32020-10-31 22:14:03 -07002587 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2588 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2589}
2590
2591# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002592component_build_psa_accel_key_type_rsa_key_pair() {
John Durkopbd069d32020-10-31 22:14:03 -07002593 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR and PSA_WANT_ALG_RSA_PSS
2594 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR + PSA_WANT_ALG_RSA_PSS"
2595 scripts/config.py full
2596 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2597 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2598 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002599 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002600 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
2601 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
2602 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2603 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2604}
2605
2606# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002607component_build_psa_accel_key_type_rsa_public_key() {
John Durkopbd069d32020-10-31 22:14:03 -07002608 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY and PSA_WANT_ALG_RSA_PSS
2609 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS"
2610 scripts/config.py full
2611 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2612 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2613 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002614 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002615 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
2616 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
2617 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2618 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07002619}
2620
Gilles Peskine8f073122018-11-27 15:58:47 +01002621component_test_no_platform () {
2622 # Full configuration build, without platform support, file IO and net sockets.
2623 # This should catch missing mbedtls_printf definitions, and by disabling file
2624 # IO, it should catch missing '#include <stdio.h>'
2625 msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002626 scripts/config.py full
2627 scripts/config.py unset MBEDTLS_PLATFORM_C
2628 scripts/config.py unset MBEDTLS_NET_C
2629 scripts/config.py unset MBEDTLS_PLATFORM_MEMORY
2630 scripts/config.py unset MBEDTLS_PLATFORM_PRINTF_ALT
2631 scripts/config.py unset MBEDTLS_PLATFORM_FPRINTF_ALT
2632 scripts/config.py unset MBEDTLS_PLATFORM_SNPRINTF_ALT
Gilles Peskineef843f22022-09-18 14:05:23 +02002633 scripts/config.py unset MBEDTLS_PLATFORM_VSNPRINTF_ALT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002634 scripts/config.py unset MBEDTLS_PLATFORM_TIME_ALT
2635 scripts/config.py unset MBEDTLS_PLATFORM_EXIT_ALT
Gilles Peskine6497b5a2022-06-30 17:01:40 +02002636 scripts/config.py unset MBEDTLS_PLATFORM_SETBUF_ALT
Gilles Peskine32e889d2020-04-12 23:43:28 +02002637 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002638 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
2639 scripts/config.py unset MBEDTLS_FS_IO
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002640 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002641 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
2642 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002643 # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19,
2644 # to re-enable platform integration features otherwise disabled in C99 builds
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002645 make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs
2646 make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test
Gilles Peskine8f073122018-11-27 15:58:47 +01002647}
Manuel Pégourié-Gonnarda71780e2015-02-13 13:56:55 +00002648
Gilles Peskine8f073122018-11-27 15:58:47 +01002649component_build_no_std_function () {
2650 # catch compile bugs in _uninit functions
2651 msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002652 scripts/config.py full
2653 scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
2654 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
Gilles Peskine32e889d2020-04-12 23:43:28 +02002655 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinef4d2fd42021-10-08 11:45:47 +02002656 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
Gilles Peskinedbf7b7e2021-10-07 19:34:57 +02002657 make
Gilles Peskine8f073122018-11-27 15:58:47 +01002658}
Manuel Pégourié-Gonnarddccb80b2015-06-03 10:20:33 +01002659
Gilles Peskine8f073122018-11-27 15:58:47 +01002660component_build_no_ssl_srv () {
Ronald Cronde1adee2022-03-07 16:20:30 +01002661 msg "build: full config except SSL server, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002662 scripts/config.py full
2663 scripts/config.py unset MBEDTLS_SSL_SRV_C
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002664 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01002665}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02002666
Gilles Peskine8f073122018-11-27 15:58:47 +01002667component_build_no_ssl_cli () {
Ronald Cronde1adee2022-03-07 16:20:30 +01002668 msg "build: full config except SSL client, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002669 scripts/config.py full
2670 scripts/config.py unset MBEDTLS_SSL_CLI_C
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002671 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01002672}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02002673
Gilles Peskine8f073122018-11-27 15:58:47 +01002674component_build_no_sockets () {
2675 # Note, C99 compliance can also be tested with the sockets support disabled,
2676 # as that requires a POSIX platform (which isn't the same as C99).
2677 msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002678 scripts/config.py full
2679 scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc.
2680 scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002681 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002682}
Manuel Pégourié-Gonnard009a2642015-05-29 10:31:13 +02002683
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04002684component_test_memory_buffer_allocator_backtrace () {
2685 msg "build: default config with memory buffer allocator and backtrace enabled"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002686 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2687 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2688 scripts/config.py set MBEDTLS_MEMORY_BACKTRACE
2689 scripts/config.py set MBEDTLS_MEMORY_DEBUG
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02002690 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04002691 make
2692
2693 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE"
2694 make test
2695}
2696
2697component_test_memory_buffer_allocator () {
2698 msg "build: default config with memory buffer allocator"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002699 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2700 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02002701 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Hanno Becker0fb9ba22019-02-26 14:34:13 +00002702 make
2703
2704 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C"
2705 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002706
2707 msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C"
2708 # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002709 tests/ssl-opt.sh -e '^DTLS proxy'
Hanno Becker0fb9ba22019-02-26 14:34:13 +00002710}
2711
Gilles Peskine8f073122018-11-27 15:58:47 +01002712component_test_no_max_fragment_length () {
2713 # Run max fragment length tests with MFL disabled
2714 msg "build: default config except MFL extension (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002715 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01002716 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2717 make
Hanno Becker5175ac62017-09-18 15:36:25 +01002718
Gilles Peskine8f073122018-11-27 15:58:47 +01002719 msg "test: ssl-opt.sh, MFL-related tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002720 tests/ssl-opt.sh -f "Max fragment length"
Gilles Peskine8f073122018-11-27 15:58:47 +01002721}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002722
Hanno Becker545ced42019-02-19 11:10:48 +00002723component_test_asan_remove_peer_certificate () {
2724 msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002725 scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
Hanno Becker545ced42019-02-19 11:10:48 +00002726 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2727 make
2728
2729 msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
2730 make test
2731
2732 msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002733 tests/ssl-opt.sh
Hanno Becker545ced42019-02-19 11:10:48 +00002734
2735 msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002736 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002737
2738 msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002739 tests/context-info.sh
Hanno Becker545ced42019-02-19 11:10:48 +00002740}
2741
Gilles Peskine8f073122018-11-27 15:58:47 +01002742component_test_no_max_fragment_length_small_ssl_out_content_len () {
2743 msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002744 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2745 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
2746 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Gilles Peskine8f073122018-11-27 15:58:47 +01002747 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2748 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10002749
Gilles Peskine8f073122018-11-27 15:58:47 +01002750 msg "test: MFL tests (disabled MFL extension case) & large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002751 tests/ssl-opt.sh -f "Max fragment length\|Large buffer"
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002752
2753 msg "test: context-info.sh (disabled MFL extension case)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002754 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002755}
Angus Grattonc4dd0732018-04-11 16:28:39 +10002756
Darryl Greenaad82f92019-12-02 10:53:11 +00002757component_test_variable_ssl_in_out_buffer_len () {
2758 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)"
2759 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2760 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2761 make
2762
2763 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
2764 make test
2765
2766 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002767 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002768
2769 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002770 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002771}
2772
2773component_test_variable_ssl_in_out_buffer_len_CID () {
2774 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled (ASan build)"
2775 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2776 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID
2777
2778 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2779 make
2780
2781 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID"
2782 make test
2783
2784 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002785 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002786
2787 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002788 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002789}
2790
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002791component_test_ssl_alloc_buffer_and_mfl () {
2792 msg "build: default config with memory buffer allocator and MFL extension"
2793 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2794 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2795 scripts/config.py set MBEDTLS_MEMORY_DEBUG
2796 scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2797 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02002798 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002799 make
2800
2801 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
2802 make test
2803
2804 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002805 tests/ssl-opt.sh -f "Handshake memory usage"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002806}
2807
Gilles Peskine636c26a2020-03-04 20:46:15 +01002808component_test_when_no_ciphersuites_have_mac () {
2809 msg "build: when no ciphersuites have MAC"
2810 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Gilles Peskine636c26a2020-03-04 20:46:15 +01002811 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
TRodziewicz2add5c12021-04-28 16:50:20 +02002812 scripts/config.py unset MBEDTLS_CMAC_C
Gilles Peskine636c26a2020-03-04 20:46:15 +01002813 make
2814
2815 msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
2816 make test
2817
2818 msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002819 tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM'
Gilles Peskine636c26a2020-03-04 20:46:15 +01002820}
2821
Raoul Strackxa4e86142020-06-15 17:03:13 +02002822component_test_no_date_time () {
2823 msg "build: default config without MBEDTLS_HAVE_TIME_DATE"
2824 scripts/config.py unset MBEDTLS_HAVE_TIME_DATE
Gilles Peskinef4d2fd42021-10-08 11:45:47 +02002825 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
Raoul Strackxa4e86142020-06-15 17:03:13 +02002826 make
2827
2828 msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites"
2829 make test
2830}
2831
Gilles Peskine8f073122018-11-27 15:58:47 +01002832component_test_platform_calloc_macro () {
2833 msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002834 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2835 scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc
2836 scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free
Gilles Peskine8f073122018-11-27 15:58:47 +01002837 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2838 make
Hanno Beckere5fecec2018-10-11 11:02:52 +01002839
Gilles Peskine8f073122018-11-27 15:58:47 +01002840 msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
2841 make test
2842}
Hanno Beckere5fecec2018-10-11 11:02:52 +01002843
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002844component_test_malloc_0_null () {
2845 msg "build: malloc(0) returns NULL (ASan+UBSan build)"
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002846 scripts/config.py full
Gilles Peskine004206c2019-10-21 17:11:33 +02002847 make CC=gcc CFLAGS="'-DMBEDTLS_CONFIG_FILE=\"$PWD/tests/configs/config-wrapper-malloc-0-null.h\"' $ASAN_CFLAGS -O" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002848
2849 msg "test: malloc(0) returns NULL (ASan+UBSan build)"
2850 make test
2851
2852 msg "selftest: malloc(0) returns NULL (ASan+UBSan build)"
2853 # Just the calloc selftest. "make test" ran the others as part of the
2854 # test suites.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002855 programs/test/selftest calloc
Gilles Peskine765d2402020-02-11 18:26:34 +01002856
2857 msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)"
2858 # Run a subset of the tests. The choice is a balance between coverage
2859 # and time (including time indirectly wasted due to flaky tests).
2860 # The current choice is to skip tests whose description includes
2861 # "proxy", which is an approximation of skipping tests that use the
2862 # UDP proxy, which tend to be slower and flakier.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002863 tests/ssl-opt.sh -e 'proxy'
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002864}
2865
Gilles Peskine8f073122018-11-27 15:58:47 +01002866component_test_aes_fewer_tables () {
2867 msg "build: default config with AES_FEWER_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002868 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002869 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002870
Gilles Peskine8f073122018-11-27 15:58:47 +01002871 msg "test: AES_FEWER_TABLES"
2872 make test
2873}
Hanno Becker83ebf782017-07-07 12:29:15 +01002874
Gilles Peskine8f073122018-11-27 15:58:47 +01002875component_test_aes_rom_tables () {
2876 msg "build: default config with AES_ROM_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002877 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002878 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002879
Gilles Peskine8f073122018-11-27 15:58:47 +01002880 msg "test: AES_ROM_TABLES"
2881 make test
2882}
Hanno Becker83ebf782017-07-07 12:29:15 +01002883
Gilles Peskine8f073122018-11-27 15:58:47 +01002884component_test_aes_fewer_tables_and_rom_tables () {
2885 msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002886 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
2887 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002888 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002889
Gilles Peskine8f073122018-11-27 15:58:47 +01002890 msg "test: AES_FEWER_TABLES + AES_ROM_TABLES"
2891 make test
2892}
2893
Gilles Peskine592f5912019-10-07 18:49:32 +02002894component_test_ctr_drbg_aes_256_sha_256 () {
2895 msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002896 scripts/config.py full
2897 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2898 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Gilles Peskine592f5912019-10-07 18:49:32 +02002899 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2900 make
2901
2902 msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
2903 make test
2904}
2905
2906component_test_ctr_drbg_aes_128_sha_512 () {
2907 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002908 scripts/config.py full
2909 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2910 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
Gilles Peskine592f5912019-10-07 18:49:32 +02002911 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2912 make
2913
2914 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
2915 make test
2916}
2917
2918component_test_ctr_drbg_aes_128_sha_256 () {
2919 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002920 scripts/config.py full
2921 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2922 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
2923 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Gilles Peskine592f5912019-10-07 18:49:32 +02002924 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2925 make
2926
2927 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
2928 make test
2929}
2930
Gilles Peskinef96aefe2019-07-24 14:58:38 +02002931component_test_se_default () {
2932 msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002933 scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine004206c2019-10-21 17:11:33 +02002934 make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinef96aefe2019-07-24 14:58:38 +02002935
2936 msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C"
2937 make test
2938}
2939
Steven Cooremand57203d2020-07-16 20:28:59 +02002940component_test_psa_crypto_drivers () {
Steven Cooreman55ae2172020-07-17 19:46:15 +02002941 msg "build: MBEDTLS_PSA_CRYPTO_DRIVERS w/ driver hooks"
Steven Cooreman753f9732021-03-15 11:38:44 +01002942 scripts/config.py full
Steven Cooremand57203d2020-07-16 20:28:59 +02002943 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
Steven Cooreman6801f082021-02-19 17:21:22 +01002944 scripts/config.py set MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
Gilles Peskine3587dfd2021-09-20 19:20:04 +02002945 loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL"
2946 loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'"
Ronald Cron17b3afc2020-12-10 18:17:09 +01002947 loc_cflags="${loc_cflags} -I../tests/include -O2"
2948
2949 make CC=gcc CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS"
Steven Cooremand57203d2020-07-16 20:28:59 +02002950
Steven Cooreman753f9732021-03-15 11:38:44 +01002951 msg "test: full + MBEDTLS_PSA_CRYPTO_DRIVERS"
Steven Cooremand57203d2020-07-16 20:28:59 +02002952 make test
2953}
2954
Gilles Peskine8f073122018-11-27 15:58:47 +01002955component_test_make_shared () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002956 msg "build/test: make shared" # ~ 40s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002957 make SHARED=1 all check
Gilles Peskine56c01612019-07-03 20:43:32 +02002958 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskineca144592021-11-04 12:52:14 +01002959 programs/test/dlopen_demo.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002960}
Manuel Pégourié-Gonnard9b06abe2015-06-25 09:56:07 +02002961
Gilles Peskinecf740502019-07-03 20:43:05 +02002962component_test_cmake_shared () {
2963 msg "build/test: cmake shared" # ~ 2min
2964 cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On .
2965 make
Gilles Peskine56c01612019-07-03 20:43:32 +02002966 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskinecf740502019-07-03 20:43:05 +02002967 make test
Gilles Peskineca144592021-11-04 12:52:14 +01002968 programs/test/dlopen_demo.sh
Gilles Peskinecf740502019-07-03 20:43:05 +02002969}
2970
Gilles Peskineec10bf12019-09-20 19:56:06 +02002971test_build_opt () {
2972 info=$1 cc=$2; shift 2
2973 for opt in "$@"; do
2974 msg "build/test: $cc $opt, $info" # ~ 30s
Gilles Peskinee094a182020-04-14 20:08:41 +02002975 make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror"
Gilles Peskineec10bf12019-09-20 19:56:06 +02002976 # We're confident enough in compilers to not run _all_ the tests,
2977 # but at least run the unit tests. In particular, runs with
2978 # optimizations use inline assembly whereas runs with -O0
2979 # skip inline assembly.
2980 make test # ~30s
2981 make clean
2982 done
2983}
2984
2985component_test_clang_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002986 scripts/config.py full
Gilles Peskineec10bf12019-09-20 19:56:06 +02002987 test_build_opt 'full config' clang -O0 -Os -O2
2988}
2989
2990component_test_gcc_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002991 scripts/config.py full
Gilles Peskineec10bf12019-09-20 19:56:06 +02002992 test_build_opt 'full config' gcc -O0 -Os -O2
2993}
2994
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02002995component_build_mbedtls_config_file () {
2996 msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s
Gilles Peskine2003c2f2022-04-07 20:55:57 +02002997 scripts/config.py -w full_config.h full
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02002998 echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H"
2999 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'"
Gilles Peskine45e680e2022-04-13 23:23:21 +02003000 # Make sure this feature is enabled. We'll disable it in the next phase.
Gilles Peskinee10df772022-04-07 21:06:41 +02003001 programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
3002 make clean
3003
3004 msg "build: make with MBEDTLS_CONFIG_FILE + MBEDTLS_USER_CONFIG_FILE"
3005 # In the user config, disable one feature (for simplicity, pick a feature
3006 # that nothing else depends on).
3007 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
3008 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"' -DMBEDTLS_USER_CONFIG_FILE='\"user_config.h\"'"
3009 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
3010
3011 rm -f user_config.h full_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00003012}
3013
Gilles Peskine7d904e72022-04-07 21:59:14 +02003014component_build_psa_config_file () {
3015 msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE" # ~40s
3016 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
3017 cp "$CRYPTO_CONFIG_H" psa_test_config.h
3018 echo '#error "MBEDTLS_PSA_CRYPTO_CONFIG_FILE is not working"' >"$CRYPTO_CONFIG_H"
3019 make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"'"
Gilles Peskine45e680e2022-04-13 23:23:21 +02003020 # Make sure this feature is enabled. We'll disable it in the next phase.
Gilles Peskine7d904e72022-04-07 21:59:14 +02003021 programs/test/query_compile_time_config MBEDTLS_CMAC_C
3022 make clean
3023
3024 msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE + MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE" # ~40s
3025 # In the user config, disable one feature, which will reflect on the
3026 # mbedtls configuration so we can query it with query_compile_time_config.
3027 echo '#undef PSA_WANT_ALG_CMAC' >psa_user_config.h
3028 scripts/config.py unset MBEDTLS_CMAC_C
3029 make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"' -DMBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE='\"psa_user_config.h\"'"
3030 not programs/test/query_compile_time_config MBEDTLS_CMAC_C
3031
3032 rm -f psa_test_config.h psa_user_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00003033}
3034
Gilles Peskine8f073122018-11-27 15:58:47 +01003035component_test_m32_o0 () {
Gilles Peskine77f05352021-10-07 19:27:16 +02003036 # Build without optimization, so as to use portable C code (in a 32-bit
3037 # build) and not the i386-specific inline assembly.
Simon Butcher8e6a22a2018-07-20 21:27:33 +01003038 msg "build: i386, make, gcc -O0 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003039 scripts/config.py full
Gilles Peskine8fd59422019-10-21 17:11:33 +02003040 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O0" LDFLAGS="-m32 $ASAN_CFLAGS"
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01003041
Simon Butcher8e6a22a2018-07-20 21:27:33 +01003042 msg "test: i386, make, gcc -O0 (ASan build)"
3043 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01003044}
Gilles Peskine878cf602019-01-06 20:50:38 +00003045support_test_m32_o0 () {
3046 case $(uname -m) in
3047 *64*) true;;
3048 *) false;;
3049 esac
3050}
Simon Butcher8e6a22a2018-07-20 21:27:33 +01003051
Gilles Peskineff0aee02021-10-05 09:36:03 +02003052component_test_m32_o2 () {
3053 # Build with optimization, to use the i386 specific inline assembly
3054 # and go faster for tests.
3055 msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003056 scripts/config.py full
Gilles Peskineff0aee02021-10-05 09:36:03 +02003057 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01003058
Gilles Peskineff0aee02021-10-05 09:36:03 +02003059 msg "test: i386, make, gcc -O2 (ASan build)"
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01003060 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01003061
Gilles Peskineff0aee02021-10-05 09:36:03 +02003062 msg "test ssl-opt.sh, i386, make, gcc-O2"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003063 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01003064}
Gilles Peskinecf522222021-10-07 19:25:29 +02003065support_test_m32_o2 () {
Gilles Peskine878cf602019-01-06 20:50:38 +00003066 support_test_m32_o0 "$@"
3067}
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01003068
Gilles Peskine0c6b7992019-04-12 20:29:48 +02003069component_test_m32_everest () {
3070 msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003071 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
Gilles Peskine8fd59422019-10-21 17:11:33 +02003072 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02003073
3074 msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
3075 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01003076
3077 msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003078 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01003079
3080 msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
3081 # Exclude some symmetric ciphers that are redundant here to gain time.
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02003082 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA'
Gilles Peskine0c6b7992019-04-12 20:29:48 +02003083}
3084support_test_m32_everest () {
3085 support_test_m32_o0 "$@"
3086}
3087
Gilles Peskine8f073122018-11-27 15:58:47 +01003088component_test_mx32 () {
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01003089 msg "build: 64-bit ILP32, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003090 scripts/config.py full
Gilles Peskine5d26e7c2019-06-07 14:50:09 +02003091 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mx32' LDFLAGS='-mx32'
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01003092
3093 msg "test: 64-bit ILP32, make, gcc"
3094 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01003095}
Gilles Peskine878cf602019-01-06 20:50:38 +00003096support_test_mx32 () {
3097 case $(uname -m) in
3098 amd64|x86_64) true;;
3099 *) false;;
3100 esac
3101}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00003102
Peter Kolbus60c6da22018-12-27 06:59:04 -06003103component_test_min_mpi_window_size () {
3104 msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003105 scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1
Peter Kolbus60c6da22018-12-27 06:59:04 -06003106 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
3107 make
3108
3109 msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s
3110 make test
3111}
3112
Gilles Peskine8f073122018-11-27 15:58:47 +01003113component_test_have_int32 () {
3114 msg "build: gcc, force 32-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003115 scripts/config.py unset MBEDTLS_HAVE_ASM
3116 scripts/config.py unset MBEDTLS_AESNI_C
3117 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskine8f073122018-11-27 15:58:47 +01003118 make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01003119
Gilles Peskine8f073122018-11-27 15:58:47 +01003120 msg "test: gcc, force 32-bit bignum limbs"
3121 make test
3122}
Andres Amaya Garciafe843a32017-07-20 13:21:34 +01003123
Gilles Peskine8f073122018-11-27 15:58:47 +01003124component_test_have_int64 () {
3125 msg "build: gcc, force 64-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003126 scripts/config.py unset MBEDTLS_HAVE_ASM
3127 scripts/config.py unset MBEDTLS_AESNI_C
3128 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskine8f073122018-11-27 15:58:47 +01003129 make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64'
Gilles Peskine14c3c062018-01-29 21:25:12 +01003130
Gilles Peskine8f073122018-11-27 15:58:47 +01003131 msg "test: gcc, force 64-bit bignum limbs"
3132 make test
3133}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00003134
Gilles Peskine8f073122018-11-27 15:58:47 +01003135component_test_no_udbl_division () {
3136 msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003137 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003138 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskine8f073122018-11-27 15:58:47 +01003139 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003140
Gilles Peskine8f073122018-11-27 15:58:47 +01003141 msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
3142 make test
3143}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003144
Gilles Peskine8f073122018-11-27 15:58:47 +01003145component_test_no_64bit_multiplication () {
3146 msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003147 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02003148 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskine8f073122018-11-27 15:58:47 +01003149 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003150
Gilles Peskine8f073122018-11-27 15:58:47 +01003151 msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
3152 make test
3153}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003154
Gilles Peskine3809f5f2020-11-09 15:40:05 +01003155component_test_no_strings () {
3156 msg "build: no strings" # ~10s
3157 scripts/config.py full
3158 # Disable options that activate a large amount of string constants.
3159 scripts/config.py unset MBEDTLS_DEBUG_C
3160 scripts/config.py unset MBEDTLS_ERROR_C
3161 scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY
3162 scripts/config.py unset MBEDTLS_VERSION_FEATURES
3163 make CFLAGS='-Werror -Os'
3164
3165 msg "test: no strings" # ~ 10s
3166 make test
3167}
3168
Hanno Beckerc5722d12020-10-09 11:10:42 +01003169component_test_no_x509_info () {
3170 msg "build: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
3171 scripts/config.pl full
3172 scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests
3173 scripts/config.pl set MBEDTLS_X509_REMOVE_INFO
Gilles Peskineff0aee02021-10-05 09:36:03 +02003174 make CFLAGS='-Werror -O2'
Hanno Beckerc5722d12020-10-09 11:10:42 +01003175
3176 msg "test: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
3177 make test
3178
3179 msg "test: ssl-opt.sh, full + MBEDTLS_X509_REMOVE_INFO" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003180 tests/ssl-opt.sh
Hanno Beckerc5722d12020-10-09 11:10:42 +01003181}
3182
Gilles Peskine8f073122018-11-27 15:58:47 +01003183component_build_arm_none_eabi_gcc () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02003184 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003185 scripts/config.py baremetal
Gilles Peskineaeedd742020-09-02 11:03:04 +02003186 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02003187
Gilles Peskinee36fe812021-09-01 20:00:33 +02003188 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug"
Gilles Peskine18487f62020-04-30 23:11:54 +02003189 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01003190}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003191
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02003192component_build_arm_linux_gnueabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02003193 msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003194 scripts/config.py baremetal
Gilles Peskine2c897d72019-08-09 16:05:05 +02003195 # Build for a target platform that's close to what Debian uses
3196 # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort).
Dave Rodgman017a1992022-03-31 14:07:01 +01003197 # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments.
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02003198 # Build everything including programs, see for example
Dave Rodgman017a1992022-03-31 14:07:01 +01003199 # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02003200 make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te'
3201
Gilles Peskinee36fe812021-09-01 20:00:33 +02003202 msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02003203 ${ARM_LINUX_GNUEABI_GCC_PREFIX}size library/*.o
3204}
3205support_build_arm_linux_gnueabi_gcc_arm5vte () {
3206 type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1
3207}
3208
3209component_build_arm_none_eabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02003210 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02003211 scripts/config.py baremetal
3212 # This is an imperfect substitute for
3213 # component_build_arm_linux_gnueabi_gcc_arm5vte
Manuel Pégourié-Gonnardae505ee2021-07-06 09:44:59 +02003214 # in case the gcc-arm-linux-gnueabi toolchain is not available
Gilles Peskineaeedd742020-09-02 11:03:04 +02003215 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02003216
Gilles Peskinee36fe812021-09-01 20:00:33 +02003217 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Gilles Peskine18487f62020-04-30 23:11:54 +02003218 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine93e4e032019-08-05 11:34:25 +02003219}
3220
Gilles Peskine6e2fb862020-04-30 23:00:53 +02003221component_build_arm_none_eabi_gcc_m0plus () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02003222 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s
3223 scripts/config.py baremetal_size
Gilles Peskineaeedd742020-09-02 11:03:04 +02003224 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02003225
Gilles Peskinee36fe812021-09-01 20:00:33 +02003226 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size"
Gilles Peskine18487f62020-04-30 23:11:54 +02003227 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine6e2fb862020-04-30 23:00:53 +02003228}
3229
Gilles Peskine8f073122018-11-27 15:58:47 +01003230component_build_arm_none_eabi_gcc_no_udbl_division () {
Gilles Peskine6d061342020-04-30 18:19:32 +02003231 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003232 scripts/config.py baremetal
3233 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskineaeedd742020-09-02 11:03:04 +02003234 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01003235 echo "Checking that software 64-bit division is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003236 not grep __aeabi_uldiv library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01003237}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003238
Gilles Peskine8f073122018-11-27 15:58:47 +01003239component_build_arm_none_eabi_gcc_no_64bit_multiplication () {
Gilles Peskine6d061342020-04-30 18:19:32 +02003240 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003241 scripts/config.py baremetal
3242 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskineaeedd742020-09-02 11:03:04 +02003243 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01003244 echo "Checking that software 64-bit multiplication is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003245 not grep __aeabi_lmul library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01003246}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02003247
Gilles Peskine8f073122018-11-27 15:58:47 +01003248component_build_armcc () {
Gilles Peskine18487f62020-04-30 23:11:54 +02003249 msg "build: ARM Compiler 5"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003250 scripts/config.py baremetal
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00003251 # armc[56] don't support SHA-512 intrinsics
3252 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
Hanno Beckerf0762e92022-07-15 12:08:19 +01003253 scripts/config.py set MBEDTLS_HAVE_ASM
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00003254
Gilles Peskinebca6ab92017-12-19 18:24:31 +01003255 make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02003256
3257 msg "size: ARM Compiler 5"
3258 "$ARMC5_FROMELF" -z library/*.o
3259
Gilles Peskinebca6ab92017-12-19 18:24:31 +01003260 make clean
Andres AG87bb5772016-09-27 15:05:15 +01003261
Hanno Beckerf0762e92022-07-15 12:08:19 +01003262 # Compile with -O1 since some Arm inline assembly is disabled for -O0.
3263
Gilles Peskinebca6ab92017-12-19 18:24:31 +01003264 # ARM Compiler 6 - Target ARMv7-A
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01003265 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-a"
Simon Butcher940737f2017-07-23 13:42:36 +02003266
Gilles Peskinebca6ab92017-12-19 18:24:31 +01003267 # ARM Compiler 6 - Target ARMv7-M
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01003268 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m"
3269
3270 # ARM Compiler 6 - Target ARMv7-M+DSP
3271 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m+dsp"
Simon Butcher940737f2017-07-23 13:42:36 +02003272
Gilles Peskinebca6ab92017-12-19 18:24:31 +01003273 # ARM Compiler 6 - Target ARMv8-A - AArch32
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01003274 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8.2-a"
Simon Butcher940737f2017-07-23 13:42:36 +02003275
Gilles Peskinebca6ab92017-12-19 18:24:31 +01003276 # ARM Compiler 6 - Target ARMv8-M
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01003277 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8-m.main"
Simon Butcher940737f2017-07-23 13:42:36 +02003278
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00003279 # ARM Compiler 6 - Target ARMv8.2-A - AArch64
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01003280 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8.2-a+crypto"
Gilles Peskine8f073122018-11-27 15:58:47 +01003281}
Manuel Pégourié-Gonnardc5c59392015-02-10 17:38:54 +01003282
Jerry Yu81d5e1f2022-01-27 13:01:01 +08003283component_test_tls13_only () {
3284 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3, without MBEDTLS_SSL_PROTO_TLS1_2"
Ronald Cronc2e110f2022-11-22 09:01:46 +01003285 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Jerry Yuda5af222021-12-24 18:45:45 +08003286 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
3287
Gilles Peskine4bb369c2022-10-29 17:44:19 +02003288 msg "test: TLS 1.3 only, all key exchange modes enabled"
3289 make test
Jerry Yubaa49342022-02-15 10:26:40 +08003290
Ronald Cronc3f43b62022-10-17 17:35:32 +02003291 msg "ssl-opt.sh: TLS 1.3 only, all key exchange modes enabled"
3292 tests/ssl-opt.sh
Jerry Yuda5af222021-12-24 18:45:45 +08003293}
3294
Ronald Cronc3f43b62022-10-17 17:35:32 +02003295component_test_tls13_only_psk () {
3296 msg "build: TLS 1.3 only from default, only PSK key exchange mode"
3297 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3298 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
3299 scripts/config.py unset MBEDTLS_ECDH_C
3300 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
3301 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3302 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
3303 scripts/config.py unset MBEDTLS_ECDSA_C
3304 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00003305 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01003306 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Crone3dac4a2022-06-10 17:21:51 +02003307 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
3308
Ronald Cronc3f43b62022-10-17 17:35:32 +02003309 msg "test_suite_ssl: TLS 1.3 only, only PSK key exchange mode enabled"
3310 cd tests; ./test_suite_ssl; cd ..
Ronald Crone3dac4a2022-06-10 17:21:51 +02003311
Ronald Cronc3f43b62022-10-17 17:35:32 +02003312 msg "ssl-opt.sh: TLS 1.3 only, only PSK key exchange mode enabled"
3313 tests/ssl-opt.sh
3314}
3315
3316component_test_tls13_only_ephemeral () {
3317 msg "build: TLS 1.3 only from default, only ephemeral key exchange mode"
3318 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
3319 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian2dbfeda2022-11-15 10:52:57 +00003320 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02003321 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
3322
3323 msg "test_suite_ssl: TLS 1.3 only, only ephemeral key exchange mode"
3324 cd tests; ./test_suite_ssl; cd ..
3325
3326 msg "ssl-opt.sh: TLS 1.3 only, only ephemeral key exchange mode"
3327 tests/ssl-opt.sh
3328}
3329
3330component_test_tls13_only_psk_ephemeral () {
3331 msg "build: TLS 1.3 only from default, only PSK ephemeral key exchange mode"
3332 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
3333 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3334 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
3335 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3336 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
3337 scripts/config.py unset MBEDTLS_ECDSA_C
3338 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00003339 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01003340 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02003341 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
3342
3343 msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral key exchange mode"
3344 cd tests; ./test_suite_ssl; cd ..
3345
3346 msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral key exchange mode"
3347 tests/ssl-opt.sh
3348}
3349
3350component_test_tls13_only_psk_all () {
3351 msg "build: TLS 1.3 only from default, without ephemeral key exchange mode"
3352 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3353 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
3354 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3355 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
3356 scripts/config.py unset MBEDTLS_ECDSA_C
3357 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00003358 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01003359 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02003360 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
3361
3362 msg "test_suite_ssl: TLS 1.3 only, PSK and PSK ephemeral key exchange modes"
3363 cd tests; ./test_suite_ssl; cd ..
3364
3365 msg "ssl-opt.sh: TLS 1.3 only, PSK and PSK ephemeral key exchange modes"
3366 tests/ssl-opt.sh
3367}
3368
3369component_test_tls13_only_ephemeral_all () {
3370 msg "build: TLS 1.3 only from default, without PSK key exchange mode"
3371 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Ronald Cronc2e110f2022-11-22 09:01:46 +01003372 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02003373 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
3374
3375 msg "test_suite_ssl: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes"
3376 cd tests; ./test_suite_ssl; cd ..
3377
3378 msg "ssl-opt.sh: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes"
3379 tests/ssl-opt.sh
Ronald Crone3dac4a2022-06-10 17:21:51 +02003380}
3381
Ronald Cron6f135e12021-12-08 16:57:54 +01003382component_test_tls13 () {
3383 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
3384 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01003385 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3386 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Ronald Cronc2e110f2022-11-22 09:01:46 +01003387 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01003388 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
3389 make
Ronald Cron6f135e12021-12-08 16:57:54 +01003390 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01003391 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01003392 msg "ssl-opt.sh (TLS 1.3)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01003393 tests/ssl-opt.sh
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01003394}
3395
Ronald Cron6f135e12021-12-08 16:57:54 +01003396component_test_tls13_no_compatibility_mode () {
3397 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
3398 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01003399 scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3400 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Ronald Cronc2e110f2022-11-22 09:01:46 +01003401 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Hanno Beckera711f6e2020-05-04 12:03:51 +01003402 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
3403 make
Ronald Cron6f135e12021-12-08 16:57:54 +01003404 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Hanno Becker6c53ecc2021-08-01 19:20:10 +01003405 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01003406 msg "ssl-opt.sh (TLS 1.3 no compatibility mode)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01003407 tests/ssl-opt.sh
Hanno Becker6c53ecc2021-08-01 19:20:10 +01003408}
3409
Gilles Peskine8f073122018-11-27 15:58:47 +01003410component_build_mingw () {
3411 msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04003412 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib programs
Hanno Beckere963efa2018-01-03 10:03:43 +00003413
Gilles Peskine8f073122018-11-27 15:58:47 +01003414 # note Make tests only builds the tests, but doesn't run them
Andrzej Kurek232e8f92019-10-03 03:18:01 -04003415 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror' WINDOWS_BUILD=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01003416 make WINDOWS_BUILD=1 clean
Gilles Peskine2a458da2017-05-12 15:26:58 +02003417
Gilles Peskine8f073122018-11-27 15:58:47 +01003418 msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04003419 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 lib programs
3420 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01003421 make WINDOWS_BUILD=1 clean
3422}
Jaeden Amero117b8a42019-04-17 15:19:26 +01003423support_build_mingw() {
3424 case $(i686-w64-mingw32-gcc -dumpversion) in
3425 [0-5]*) false;;
3426 *) true;;
3427 esac
3428}
Simon Butcher91aef332016-11-17 09:20:50 +00003429
Gilles Peskine8f073122018-11-27 15:58:47 +01003430component_test_memsan () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003431 msg "build: MSan (clang)" # ~ 1 min 20s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02003432 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003433 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
3434 make
Manuel Pégourié-Gonnard4a9dc2a2014-05-09 13:46:59 +02003435
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003436 msg "test: main suites (MSan)" # ~ 10s
3437 make test
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01003438
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003439 msg "test: ssl-opt.sh (MSan)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003440 tests/ssl-opt.sh
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01003441
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003442 # Optional part(s)
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01003443
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003444 if [ "$MEMORY" -gt 0 ]; then
3445 msg "test: compat.sh (MSan)" # ~ 6 min 20s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003446 tests/compat.sh
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003447 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01003448}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003449
Gilles Peskine69f190e2019-01-10 00:11:42 +01003450component_test_valgrind () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003451 msg "build: Release (clang)"
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003452 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
3453 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00003454
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003455 msg "test: main suites valgrind (Release)"
3456 make memcheck
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00003457
Gilles Peskine636c26a2020-03-04 20:46:15 +01003458 # Optional parts (slow; currently broken on OS X because programs don't
3459 # seem to receive signals under valgrind on OS X).
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003460 if [ "$MEMORY" -gt 0 ]; then
3461 msg "test: ssl-opt.sh --memcheck (Release)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003462 tests/ssl-opt.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003463 fi
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00003464
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003465 if [ "$MEMORY" -gt 1 ]; then
3466 msg "test: compat.sh --memcheck (Release)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003467 tests/compat.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01003468 fi
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02003469
3470 if [ "$MEMORY" -gt 0 ]; then
3471 msg "test: context-info.sh --memcheck (Release)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003472 tests/context-info.sh --memcheck
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02003473 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01003474}
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00003475
Paul Elliott62dc3922021-11-25 17:29:40 +00003476support_test_cmake_out_of_source () {
3477 distrib_id=""
3478 distrib_ver=""
3479 distrib_ver_minor=""
3480 distrib_ver_major=""
3481
3482 # Attempt to parse lsb-release to find out distribution and version. If not
3483 # found this should fail safe (test is supported).
3484 if [[ -f /etc/lsb-release ]]; then
3485
3486 while read -r lsb_line; do
3487 case "$lsb_line" in
3488 "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};;
3489 "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};;
3490 esac
3491 done < /etc/lsb-release
3492
3493 distrib_ver_major="${distrib_ver%%.*}"
3494 distrib_ver="${distrib_ver#*.}"
3495 distrib_ver_minor="${distrib_ver%%.*}"
3496 fi
3497
3498 # Running the out of source CMake test on Ubuntu 16.04 using more than one
3499 # processor (as the CI does) can create a race condition whereby the build
3500 # fails to see a generated file, despite that file actually having been
3501 # generated. This problem appears to go away with 18.04 or newer, so make
3502 # the out of source tests unsupported on Ubuntu 16.04.
3503 [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ]
3504}
3505
Gilles Peskine8f073122018-11-27 15:58:47 +01003506component_test_cmake_out_of_source () {
3507 msg "build: cmake 'out-of-source' build"
Gilles Peskine8f073122018-11-27 15:58:47 +01003508 MBEDTLS_ROOT_DIR="$PWD"
3509 mkdir "$OUT_OF_SOURCE_DIR"
3510 cd "$OUT_OF_SOURCE_DIR"
Gilles Peskinedbf7b7e2021-10-07 19:34:57 +02003511 cmake -D CMAKE_BUILD_TYPE:String=Check "$MBEDTLS_ROOT_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01003512 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00003513
Gilles Peskine8f073122018-11-27 15:58:47 +01003514 msg "test: cmake 'out-of-source' build"
3515 make test
Gilles Peskinea841c2a2022-04-16 11:31:25 +02003516 # Check that ssl-opt.sh can find the test programs.
Gilles Peskine8f073122018-11-27 15:58:47 +01003517 # Also ensure that there are no error messages such as
3518 # "No such file or directory", which would indicate that some required
3519 # file is missing (ssl-opt.sh tolerates the absence of some files so
3520 # may exit with status 0 but emit errors).
Gilles Peskinea841c2a2022-04-16 11:31:25 +02003521 ./tests/ssl-opt.sh -f 'Default' >ssl-opt.out 2>ssl-opt.err
Gilles Peskine7393ec52022-04-15 22:43:38 +02003522 grep PASS ssl-opt.out
Gilles Peskinef7e956c2020-03-28 18:56:09 +01003523 cat ssl-opt.err >&2
3524 # If ssl-opt.err is non-empty, record an error and keep going.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003525 [ ! -s ssl-opt.err ]
Gilles Peskine7393ec52022-04-15 22:43:38 +02003526 rm ssl-opt.out ssl-opt.err
Gilles Peskine8f073122018-11-27 15:58:47 +01003527 cd "$MBEDTLS_ROOT_DIR"
3528 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01003529}
Andres AGdc192212016-08-31 17:33:13 +01003530
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003531component_test_cmake_as_subdirectory () {
3532 msg "build: cmake 'as-subdirectory' build"
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003533 cd programs/test/cmake_subproject
3534 cmake .
3535 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003536 ./cmake_subproject
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003537}
Gilles Peskinea3000992022-02-04 00:21:12 +01003538support_test_cmake_as_subdirectory () {
3539 support_test_cmake_out_of_source
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003540}
3541
Chris Kayd259e342021-03-25 16:03:25 +00003542component_test_cmake_as_package () {
3543 msg "build: cmake 'as-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00003544 cd programs/test/cmake_package
3545 cmake .
3546 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003547 ./cmake_package
Chris Kayd259e342021-03-25 16:03:25 +00003548}
Gilles Peskinea3000992022-02-04 00:21:12 +01003549support_test_cmake_as_package () {
3550 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00003551}
3552
3553component_test_cmake_as_package_install () {
3554 msg "build: cmake 'as-installed-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00003555 cd programs/test/cmake_package_install
3556 cmake .
3557 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003558 ./cmake_package_install
Chris Kayd259e342021-03-25 16:03:25 +00003559}
Gilles Peskinea3000992022-02-04 00:21:12 +01003560support_test_cmake_as_package_install () {
3561 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00003562}
3563
Gilles Peskine8f073122018-11-27 15:58:47 +01003564component_test_zeroize () {
3565 # Test that the function mbedtls_platform_zeroize() is not optimized away by
3566 # different combinations of compilers and optimization flags by using an
3567 # auxiliary GDB script. Unfortunately, GDB does not return error values to the
3568 # system in all cases that the script fails, so we must manually search the
3569 # output to check whether the pass string is present and no failure strings
3570 # were printed.
Andres AGdc192212016-08-31 17:33:13 +01003571
Gilles Peskine4976e822019-01-06 19:52:22 +00003572 # Don't try to disable ASLR. We don't care about ASLR here. We do care
3573 # about a spurious message if Gdb tries and fails, so suppress that.
3574 gdb_disable_aslr=
3575 if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then
3576 gdb_disable_aslr='set disable-randomization off'
3577 fi
3578
Gilles Peskine8f073122018-11-27 15:58:47 +01003579 for optimization_flag in -O2 -O3 -Ofast -Os; do
Gilles Peskine55f7c942019-01-09 22:28:21 +01003580 for compiler in clang gcc; do
3581 msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()"
3582 make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003583 gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log
3584 grep "The buffer was correctly zeroized" test_zeroize.log
3585 not grep -i "error" test_zeroize.log
Gilles Peskine55f7c942019-01-09 22:28:21 +01003586 rm -f test_zeroize.log
3587 make clean
3588 done
Andres Amaya Garcia29673812017-10-25 10:35:51 +01003589 done
Gilles Peskine8f073122018-11-27 15:58:47 +01003590}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003591
Bence Szépkúti80b31c52021-10-19 15:05:36 +02003592component_test_psa_compliance () {
3593 msg "build: make, default config (out-of-box), libmbedcrypto.a only"
Bence Szépkútica9236b2021-10-25 19:29:07 +02003594 make -C library libmbedcrypto.a
Bence Szépkúti80b31c52021-10-19 15:05:36 +02003595
3596 msg "unit test: test_psa_compliance.py"
3597 ./tests/scripts/test_psa_compliance.py
3598}
3599
3600support_test_psa_compliance () {
Bence Szépkútief0d02e2021-11-03 11:36:09 +01003601 # psa-compliance-tests only supports CMake >= 3.10.0
Bence Szépkútica9236b2021-10-25 19:29:07 +02003602 ver="$(cmake --version)"
3603 ver="${ver#cmake version }"
3604 ver_major="${ver%%.*}"
3605
3606 ver="${ver#*.}"
3607 ver_minor="${ver%%.*}"
3608
3609 [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ]
Bence Szépkúti80b31c52021-10-19 15:05:36 +02003610}
3611
Gilles Peskine8f073122018-11-27 15:58:47 +01003612component_check_python_files () {
3613 msg "Lint: Python scripts"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003614 tests/scripts/check-python-files.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01003615}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003616
Joe Subbianid614c0b2021-07-29 11:18:29 +01003617component_check_test_helpers () {
3618 msg "unit test: generate_test_code.py"
Manuel Pégourié-Gonnarddfb114a2020-06-02 11:40:08 +02003619 # unittest writes out mundane stuff like number or tests run on stderr.
3620 # Our convention is to reserve stderr for actual errors, and write
3621 # harmless info on stdout so it can be suppress with --quiet.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003622 ./tests/scripts/test_generate_test_code.py 2>&1
Joe Subbianid614c0b2021-07-29 11:18:29 +01003623
Joe Subbiania25ffab2021-08-06 09:41:27 +01003624 msg "unit test: translate_ciphers.py"
3625 python3 -m unittest tests/scripts/translate_ciphers.py 2>&1
Gilles Peskine8f073122018-11-27 15:58:47 +01003626}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003627
3628################################################################
3629#### Termination
3630################################################################
3631
Gilles Peskine8f073122018-11-27 15:58:47 +01003632post_report () {
3633 msg "Done, cleaning up"
Gilles Peskinef83eb822020-03-30 20:11:39 +02003634 final_cleanup
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003635
Gilles Peskine8f073122018-11-27 15:58:47 +01003636 final_report
3637}
3638
3639
3640
3641################################################################
3642#### Run all the things
3643################################################################
3644
Gilles Peskine5d996822020-03-28 21:09:21 +01003645# Function invoked by --error-test to test error reporting.
3646pseudo_component_error_test () {
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003647 msg "Testing error reporting $error_test_i"
Gilles Peskine5d996822020-03-28 21:09:21 +01003648 if [ $KEEP_GOING -ne 0 ]; then
3649 echo "Expect three failing commands."
3650 fi
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003651 # If the component doesn't run in a subshell, changing error_test_i to an
3652 # invalid integer will cause an error in the loop that runs this function.
3653 error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell
Gilles Peskineec135542021-08-02 23:14:03 +02003654 # Expected error: 'grep non_existent /dev/null -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01003655 grep non_existent /dev/null
Gilles Peskineec135542021-08-02 23:14:03 +02003656 # Expected error: '! grep -q . tests/scripts/all.sh -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01003657 not grep -q . "$0"
Gilles Peskineec135542021-08-02 23:14:03 +02003658 # Expected error: 'make unknown_target -> 2'
Gilles Peskine5d996822020-03-28 21:09:21 +01003659 make unknown_target
3660 false "this should not be executed"
3661}
3662
Gilles Peskinee48351a2018-11-27 16:06:30 +01003663# Run one component and clean up afterwards.
Gilles Peskine8f073122018-11-27 15:58:47 +01003664run_component () {
Gilles Peskineffcdeff2018-12-04 12:49:28 +01003665 current_component="$1"
Gilles Peskine9004a172019-09-16 15:20:36 +02003666 export MBEDTLS_TEST_CONFIGURATION="$current_component"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003667
3668 # Unconditionally create a seedfile that's sufficiently long.
3669 # Do this before each component, because a previous component may
3670 # have messed it up or shortened it.
Gilles Peskine88a07452021-07-08 19:03:50 +02003671 local dd_cmd
3672 dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1)
3673 case $OSTYPE in
Tom Cosgrove226aca12022-03-16 14:11:07 +00003674 linux*|freebsd*|openbsd*) dd_cmd+=(status=none)
Gilles Peskine88a07452021-07-08 19:03:50 +02003675 esac
3676 "${dd_cmd[@]}"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003677
Gilles Peskineec135542021-08-02 23:14:03 +02003678 # Run the component in a subshell, with error trapping and output
3679 # redirection set up based on the relevant options.
Gilles Peskinece266c42020-03-28 18:50:43 +01003680 if [ $KEEP_GOING -eq 1 ]; then
Gilles Peskineec135542021-08-02 23:14:03 +02003681 # We want to keep running if the subshell fails, so 'set -e' must
3682 # be off when the subshell runs.
Gilles Peskinece266c42020-03-28 18:50:43 +01003683 set +e
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +02003684 fi
Gilles Peskinece266c42020-03-28 18:50:43 +01003685 (
3686 if [ $QUIET -eq 1 ]; then
3687 # msg() will be silenced, so just print the component name here.
3688 echo "${current_component#component_}"
3689 exec >/dev/null
3690 fi
3691 if [ $KEEP_GOING -eq 1 ]; then
3692 # Keep "set -e" off, and run an ERR trap instead to record failures.
3693 set -E
3694 trap err_trap ERR
3695 fi
3696 # The next line is what runs the component
3697 "$@"
3698 if [ $KEEP_GOING -eq 1 ]; then
3699 trap - ERR
3700 exit $last_failure_status
3701 fi
3702 )
3703 component_status=$?
3704 if [ $KEEP_GOING -eq 1 ]; then
3705 set -e
3706 if [ $component_status -ne 0 ]; then
3707 failure_count=$((failure_count + 1))
3708 fi
3709 fi
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003710
3711 # Restore the build tree to a clean state.
Gilles Peskinee48351a2018-11-27 16:06:30 +01003712 cleanup
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02003713 unset current_component
Gilles Peskine8f073122018-11-27 15:58:47 +01003714}
3715
3716# Preliminary setup
3717pre_check_environment
3718pre_initialize_variables
3719pre_parse_command_line "$@"
Gilles Peskine348fb9a2018-11-27 17:04:29 +01003720
Gilles Peskine878cf602019-01-06 20:50:38 +00003721pre_check_git
Gilles Peskine568f53a2021-07-12 18:16:01 +02003722pre_restore_files
Gilles Peskinef83eb822020-03-30 20:11:39 +02003723pre_back_up
Andrzej Kurekeb508712019-02-14 07:18:59 -05003724
Gilles Peskine878cf602019-01-06 20:50:38 +00003725build_status=0
3726if [ $KEEP_GOING -eq 1 ]; then
3727 pre_setup_keep_going
Gilles Peskine8f073122018-11-27 15:58:47 +01003728fi
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02003729pre_prepare_outcome_file
Gilles Peskine878cf602019-01-06 20:50:38 +00003730pre_print_configuration
3731pre_check_tools
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003732cleanup
Gilles Peskine1570b592021-04-22 01:10:12 +02003733pre_generate_files
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003734
Gilles Peskinebeb3a812019-01-06 22:11:25 +00003735# Run the requested tests.
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003736for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do
Gilles Peskine5d996822020-03-28 21:09:21 +01003737 run_component pseudo_component_error_test
Gilles Peskine5d996822020-03-28 21:09:21 +01003738done
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003739unset error_test_i
Gilles Peskinebeb3a812019-01-06 22:11:25 +00003740for component in $RUN_COMPONENTS; do
3741 run_component "component_$component"
3742done
Gilles Peskine8f073122018-11-27 15:58:47 +01003743
3744# We're done.
Gilles Peskine878cf602019-01-06 20:50:38 +00003745post_report