blob: 736d9448ad18be3c63ee9fd3380f2a0aaf895bf6 [file] [log] [blame]
Gilles Peskine62cf2e82020-03-27 16:35:23 +01001#! /usr/bin/env bash
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002
Simon Butcher3ea7f522016-03-07 23:22:10 +00003# all.sh
4#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +00006# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Gilles Peskine192c72f2017-12-21 15:59:21 +01007
8
9
10################################################################
11#### Documentation
12################################################################
13
Simon Butcher3ea7f522016-03-07 23:22:10 +000014# Purpose
Gilles Peskine192c72f2017-12-21 15:59:21 +010015# -------
Simon Butcher3ea7f522016-03-07 23:22:10 +000016#
SimonB2e23c822016-04-16 21:54:39 +010017# To run all tests possible or available on the platform.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +010018#
Gilles Peskine192c72f2017-12-21 15:59:21 +010019# Notes for users
20# ---------------
21#
SimonB2e23c822016-04-16 21:54:39 +010022# Warning: the test is destructive. It includes various build modes and
23# configurations, and can and will arbitrarily change the current CMake
Gilles Peskine192c72f2017-12-21 15:59:21 +010024# configuration. The following files must be committed into git:
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020025# * include/mbedtls/mbedtls_config.h
Gilles Peskine636c26a2020-03-04 20:46:15 +010026# * Makefile, library/Makefile, programs/Makefile, tests/Makefile,
27# programs/fuzz/Makefile
Gilles Peskine192c72f2017-12-21 15:59:21 +010028# After running this script, the CMake cache will be lost and CMake
29# will no longer be initialised.
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +010030#
Gilles Peskine192c72f2017-12-21 15:59:21 +010031# The script assumes the presence of a number of tools:
32# * Basic Unix tools (Windows users note: a Unix-style find must be before
33# the Windows find in the PATH)
34# * Perl
35# * GNU Make
36# * CMake
37# * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind)
Andrzej Kurek05be06c2018-06-28 04:41:50 -040038# * G++
Gilles Peskine192c72f2017-12-21 15:59:21 +010039# * arm-gcc and mingw-gcc
40# * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc
Gilles Peskine7be571a2023-08-27 21:39:21 +020041# * OpenSSL and GnuTLS command line tools, in suitable versions for the
42# interoperability tests. The following are the official versions at the
43# time of writing:
44# * GNUTLS_{CLI,SERV} = 3.4.10
45# * GNUTLS_NEXT_{CLI,SERV} = 3.7.2
46# * OPENSSL = 1.0.2g (without Debian/Ubuntu patches)
47# * OPENSSL_NEXT = 1.1.1a
Gilles Peskine192c72f2017-12-21 15:59:21 +010048# See the invocation of check_tools below for details.
49#
50# This script must be invoked from the toplevel directory of a git
51# working copy of Mbed TLS.
52#
Gilles Peskinece266c42020-03-28 18:50:43 +010053# The behavior on an error depends on whether --keep-going (alias -k)
54# is in effect.
55# * Without --keep-going: the script stops on the first error without
56# cleaning up. This lets you work in the configuration of the failing
57# component.
58# * With --keep-going: the script runs all requested components and
59# reports failures at the end. In particular the script always cleans
60# up on exit.
61#
Gilles Peskine192c72f2017-12-21 15:59:21 +010062# Note that the output is not saved. You may want to run
63# script -c tests/scripts/all.sh
64# or
65# tests/scripts/all.sh >all.log 2>&1
66#
67# Notes for maintainers
68# ---------------------
69#
Gilles Peskine8f073122018-11-27 15:58:47 +010070# The bulk of the code is organized into functions that follow one of the
71# following naming conventions:
72# * pre_XXX: things to do before running the tests, in order.
73# * component_XXX: independent components. They can be run in any order.
Gilles Peskinec70637a2019-01-09 22:29:17 +010074# * component_check_XXX: quick tests that aren't worth parallelizing.
75# * component_build_XXX: build things but don't run them.
76# * component_test_XXX: build and test.
Bence Szépkúti89dd5c02023-12-15 17:05:15 +010077# * component_release_XXX: tests that the CI should skip during PR testing.
Gilles Peskine878cf602019-01-06 20:50:38 +000078# * support_XXX: if support_XXX exists and returns false then
79# component_XXX is not run by default.
Gilles Peskine8f073122018-11-27 15:58:47 +010080# * post_XXX: things to do after running the tests.
81# * other: miscellaneous support functions.
82#
Gilles Peskinec70637a2019-01-09 22:29:17 +010083# Each component must start by invoking `msg` with a short informative message.
84#
Gilles Peskinea681c592020-03-28 21:27:40 +010085# Warning: due to the way bash detects errors, the failure of a command
86# inside 'if' or '!' is not detected. Use the 'not' function instead of '!'.
87#
Gilles Peskinece266c42020-03-28 18:50:43 +010088# Each component is executed in a separate shell process. The component
89# fails if any command in it returns a non-zero status.
90#
Gilles Peskinec70637a2019-01-09 22:29:17 +010091# The framework performs some cleanup tasks after each component. This
92# means that components can assume that the working directory is in a
93# cleaned-up state, and don't need to perform the cleanup themselves.
94# * Run `make clean`.
Bence Szépkúti414d6bd2021-06-28 14:11:11 +010095# * Restore `include/mbedtls/mbedtls_config.h` from a backup made before running
Gilles Peskinec70637a2019-01-09 22:29:17 +010096# the component.
Gilles Peskine636c26a2020-03-04 20:46:15 +010097# * Check out `Makefile`, `library/Makefile`, `programs/Makefile`,
98# `tests/Makefile` and `programs/fuzz/Makefile` from git.
99# This cleans up after an in-tree use of CMake.
Gilles Peskinec70637a2019-01-09 22:29:17 +0100100#
Gilles Peskine192c72f2017-12-21 15:59:21 +0100101# The tests are roughly in order from fastest to slowest. This doesn't
102# have to be exact, but in general you should add slower tests towards
103# the end and fast checks near the beginning.
Gilles Peskine192c72f2017-12-21 15:59:21 +0100104
105
106
107################################################################
108#### Initialization and command line parsing
109################################################################
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100110
Gilles Peskine36647802020-03-28 18:50:49 +0100111# Abort on errors (even on the left-hand side of a pipe).
112# Treat uninitialised variables as errors.
113set -e -o pipefail -u
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100114
Gilles Peskine076f7252022-08-30 21:02:44 +0200115# Enable ksh/bash extended file matching patterns
116shopt -s extglob
117
David Horstmann76a77382023-08-17 17:32:26 +0100118in_mbedtls_repo () {
David Horstmannd02b5f82023-08-29 09:53:52 +0100119 test -d include -a -d library -a -d programs -a -d tests
120}
121
Ronald Cron070e8652023-10-09 10:25:45 +0200122in_tf_psa_crypto_repo () {
David Horstmannd02b5f82023-08-29 09:53:52 +0100123 test -d include -a -d core -a -d drivers -a -d programs -a -d tests
David Horstmann9a6c45b2023-07-14 12:30:00 +0100124}
125
Gilles Peskine8f073122018-11-27 15:58:47 +0100126pre_check_environment () {
Ronald Cron070e8652023-10-09 10:25:45 +0200127 if in_mbedtls_repo || in_tf_psa_crypto_repo; then :; else
128 echo "Must be run from Mbed TLS / TF-PSA-Crypto root" >&2
Gilles Peskine8f073122018-11-27 15:58:47 +0100129 exit 1
130 fi
131}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100132
Gilles Peskine8f073122018-11-27 15:58:47 +0100133pre_initialize_variables () {
David Horstmann76a77382023-08-17 17:32:26 +0100134 if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100135 CONFIG_H='include/mbedtls/mbedtls_config.h'
David Horstmann76a77382023-08-17 17:32:26 +0100136 else
137 CONFIG_H='drivers/builtin/include/mbedtls/mbedtls_config.h'
David Horstmann9a6c45b2023-07-14 12:30:00 +0100138 fi
John Durkopbd069d32020-10-31 22:14:03 -0700139 CRYPTO_CONFIG_H='include/psa/crypto_config.h'
Manuel Pégourié-Gonnard462e3a92022-12-27 12:35:11 +0100140 CONFIG_TEST_DRIVER_H='tests/include/test/drivers/config_test_driver.h'
Gilles Peskinef83eb822020-03-30 20:11:39 +0200141
142 # Files that are clobbered by some jobs will be backed up. Use a different
143 # suffix from auxiliary scripts so that all.sh and auxiliary scripts can
144 # independently decide when to remove the backup file.
145 backup_suffix='.all.bak'
146 # Files clobbered by config.py
Janos Follath2f045822023-07-31 10:57:16 +0100147 files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H $CONFIG_TEST_DRIVER_H"
David Horstmann76a77382023-08-17 17:32:26 +0100148 if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100149 # Files clobbered by in-tree cmake
150 files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile"
151 fi
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200152
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200153 append_outcome=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100154 MEMORY=0
155 FORCE=0
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200156 QUIET=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100157 KEEP_GOING=0
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100158
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200159 # Seed value used with the --release-test option.
Manuel Pégourié-Gonnard54304472020-06-22 10:11:47 +0200160 #
161 # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if
162 # both values are kept in sync. If you change the value here because it
163 # breaks some tests, you'll definitely want to change it in
164 # basic-build-test.sh as well.
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200165 RELEASE_SEED=1
166
Yanray Wang18040ed2023-11-23 21:29:56 +0800167 # Specify character collation for regular expressions and sorting with C locale
168 export LC_COLLATE=C
169
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200170 : ${MBEDTLS_TEST_OUTCOME_FILE=}
Gilles Peskine9004a172019-09-16 15:20:36 +0200171 : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200172 export MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine9004a172019-09-16 15:20:36 +0200173 export MBEDTLS_TEST_PLATFORM
174
Jaeden Ameroc4cc2512019-01-30 15:35:44 +0000175 # Default commands, can be overridden by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100176 : ${OPENSSL:="openssl"}
Gilles Peskine8f073122018-11-27 15:58:47 +0100177 : ${OPENSSL_NEXT:="$OPENSSL"}
178 : ${GNUTLS_CLI:="gnutls-cli"}
179 : ${GNUTLS_SERV:="gnutls-serv"}
Gilles Peskine8f073122018-11-27 15:58:47 +0100180 : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build}
181 : ${ARMC5_BIN_DIR:=/usr/bin}
182 : ${ARMC6_BIN_DIR:=/usr/bin}
Gilles Peskine6d061342020-04-30 18:19:32 +0200183 : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-}
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200184 : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-}
Gowtham Suresh Kumar9da40b82023-07-31 16:38:10 +0100185 : ${CLANG_LATEST:="clang-latest"}
186 : ${CLANG_EARLIEST:="clang-earliest"}
187 : ${GCC_LATEST:="gcc-latest"}
188 : ${GCC_EARLIEST:="gcc-earliest"}
Gilles Peskine8f073122018-11-27 15:58:47 +0100189 # if MAKEFLAGS is not set add the -j option to speed up invocations of make
Gilles Peskinea1fc4b52019-01-06 20:15:26 +0000190 if [ -z "${MAKEFLAGS+set}" ]; then
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200191 export MAKEFLAGS="-j$(all_sh_nproc)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100192 fi
Dave Rodgman0c5bfe82023-12-18 19:53:25 +0000193 # if CC is not set, use clang by default (if present) to improve build times
194 if [ -z "${CC+set}" ] && (type clang > /dev/null 2>&1); then
Dave Rodgmanfc5b9552023-12-19 16:08:19 +0000195 export CC="clang"
Dave Rodgman66cbc832023-12-18 18:34:50 +0000196 fi
Gilles Peskine878cf602019-01-06 20:50:38 +0000197
Gilles Peskine396853a2021-09-20 18:57:55 +0200198 # Include more verbose output for failing tests run by CMake or make
Jaeden Amerod48e9c72019-02-07 17:43:39 +0000199 export CTEST_OUTPUT_ON_FAILURE=1
200
Gilles Peskine8fd59422019-10-21 17:11:33 +0200201 # CFLAGS and LDFLAGS for Asan builds that don't use CMake
Manuel Pégourié-Gonnardfe549a72022-11-30 10:42:03 +0100202 # default to -O2, use -Ox _after_ this if you want another level
Przemek Stekiel6efa6082023-05-31 09:38:21 +0200203 ASAN_CFLAGS='-O2 -Werror -fsanitize=address,undefined -fno-sanitize-recover=all'
Dave Rodgman17127e92023-12-14 16:42:48 +0000204 # Normally, tests should use this compiler for ASAN testing
205 ASAN_CC=clang
Gilles Peskine8fd59422019-10-21 17:11:33 +0200206
Andrzej Kurek04bfe572023-06-27 10:02:09 -0400207 # Platform tests have an allocation that returns null
208 export ASAN_OPTIONS="allocator_may_return_null=1"
Andrzej Kurek026235c2023-07-05 08:32:43 -0400209 export MSAN_OPTIONS="allocator_may_return_null=1"
Andrzej Kurek04bfe572023-06-27 10:02:09 -0400210
Gilles Peskine878cf602019-01-06 20:50:38 +0000211 # Gather the list of available components. These are the functions
212 # defined in this script whose name starts with "component_".
Gowtham Suresh Kumar1e829a42023-07-28 16:41:21 +0100213 ALL_COMPONENTS=$(compgen -A function component_ | sed 's/component_//')
Gilles Peskine878cf602019-01-06 20:50:38 +0000214
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100215 # Delay determinig SUPPORTED_COMPONENTS until the command line options have a chance to override
216 # the commands set by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100217}
Andres AG38495a32016-07-12 16:54:33 +0100218
Gilles Peskinea28db922019-01-10 00:05:18 +0100219# Test whether the component $1 is included in the command line patterns.
220is_component_included()
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100221{
Gilles Peskine03af6782021-08-06 11:35:17 +0200222 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
223 # only does word splitting.
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100224 set -f
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000225 for pattern in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100226 set +f
227 case ${1#component_} in $pattern) return 0;; esac
228 done
229 set +f
230 return 1
231}
Andres AG7770ea82016-10-10 15:46:20 +0100232
Simon Butcher41eeccf2016-09-07 00:07:09 +0100233usage()
Andres AGd9eba4b2016-08-26 14:42:14 +0100234{
Gilles Peskine709346a2017-12-10 23:43:39 +0100235 cat <<EOF
Gilles Peskine92525112018-11-27 18:15:35 +0100236Usage: $0 [OPTION]... [COMPONENT]...
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100237Run mbedtls release validation tests.
Gilles Peskine92525112018-11-27 18:15:35 +0100238By default, run all tests. With one or more COMPONENT, run only those.
Gilles Peskinea28db922019-01-10 00:05:18 +0100239COMPONENT can be the name of a component or a shell wildcard pattern.
240
241Examples:
242 $0 "check_*"
243 Run all sanity checks.
244 $0 --no-armcc --except test_memsan
245 Run everything except builds that require armcc and MemSan.
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100246
247Special options:
248 -h|--help Print this help and exit.
Gilles Peskine878cf602019-01-06 20:50:38 +0000249 --list-all-components List all available test components and exit.
250 --list-components List components supported on this platform and exit.
Gilles Peskine709346a2017-12-10 23:43:39 +0100251
252General options:
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200253 -q|--quiet Only output component names, and errors if any.
Gilles Peskine709346a2017-12-10 23:43:39 +0100254 -f|--force Force the tests to overwrite any modified files.
Gilles Peskine7c652162017-12-11 00:01:40 +0100255 -k|--keep-going Run all tests and report errors at the end.
Gilles Peskine709346a2017-12-10 23:43:39 +0100256 -m|--memory Additional optional memory tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200257 --append-outcome Append to the outcome file (if used).
Gilles Peskine6d061342020-04-30 18:19:32 +0200258 --arm-none-eabi-gcc-prefix=<string>
259 Prefix for a cross-compiler for arm-none-eabi
260 (default: "${ARM_NONE_EABI_GCC_PREFIX}")
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200261 --arm-linux-gnueabi-gcc-prefix=<string>
262 Prefix for a cross-compiler for arm-linux-gnueabi
263 (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}")
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100264 --armcc Run ARM Compiler builds (on by default).
Gilles Peskine80ddb992021-08-06 11:51:59 +0200265 --restore First clean up the build tree, restoring backed up
266 files. Do not run any components unless they are
267 explicitly specified.
Gilles Peskine5d996822020-03-28 21:09:21 +0100268 --error-test Error test mode: run a failing function in addition
Gilles Peskine86f61292021-08-05 15:11:33 +0200269 to any specified component. May be repeated.
Gilles Peskinea28db922019-01-10 00:05:18 +0100270 --except Exclude the COMPONENTs listed on the command line,
271 instead of running only those.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200272 --no-append-outcome Write a new outcome file and analyze it (default).
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100273 --no-armcc Skip ARM Compiler builds.
Gilles Peskine38d81652018-03-21 08:40:26 +0100274 --no-force Refuse to overwrite modified files (default).
275 --no-keep-going Stop at the first error (default).
276 --no-memory No additional memory tests (default).
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800277 --no-quiet Print full output from components.
Gilles Peskine709346a2017-12-10 23:43:39 +0100278 --out-of-source-dir=<path> Directory used for CMake out-of-source build tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200279 --outcome-file=<path> File where test outcomes are written (not done if
280 empty; default: \$MBEDTLS_TEST_OUTCOME_FILE).
Gilles Peskine38d81652018-03-21 08:40:26 +0100281 --random-seed Use a random seed value for randomized tests (default).
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200282 -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}.
Gilles Peskine709346a2017-12-10 23:43:39 +0100283 -s|--seed Integer seed value to use for this test run.
284
285Tool path options:
286 --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory.
287 --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory.
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +0100288 --clang-earliest=<Clang_earliest_path> Earliest version of clang available
289 --clang-latest=<Clang_latest_path> Latest version of clang available
290 --gcc-earliest=<GCC_earliest_path> Earliest version of GCC available
291 --gcc-latest=<GCC_latest_path> Latest version of GCC available
Gilles Peskine709346a2017-12-10 23:43:39 +0100292 --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests.
293 --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests.
Gilles Peskine709346a2017-12-10 23:43:39 +0100294 --openssl=<OpenSSL_path> OpenSSL executable to use for most tests.
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +0100295 --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA
Gilles Peskine709346a2017-12-10 23:43:39 +0100296EOF
SimonB2e23c822016-04-16 21:54:39 +0100297}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100298
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200299# Cleanup before/after running a component.
300# Remove built files as well as the cmake cache/config.
301# Does not remove generated source files.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100302cleanup()
303{
David Horstmann76a77382023-08-17 17:32:26 +0100304 if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100305 command make clean
306 fi
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200307
Gilles Peskine31b07e22018-03-21 12:15:06 +0100308 # Remove CMake artefacts
Jaeden Amero2d0e00f2018-11-07 18:46:41 +0000309 find . -name .git -prune -o \
Gilles Peskine31b07e22018-03-21 12:15:06 +0100310 -iname CMakeFiles -exec rm -rf {} \+ -o \
311 \( -iname cmake_install.cmake -o \
312 -iname CTestTestfile.cmake -o \
Manuel Pégourié-Gonnardbfe54d72021-09-09 11:11:44 +0200313 -iname CMakeCache.txt -o \
314 -path './cmake/*.cmake' \) -exec rm -f {} \+
Gilles Peskine31b07e22018-03-21 12:15:06 +0100315 # Recover files overwritten by in-tree CMake builds
Gilles Peskine076f7252022-08-30 21:02:44 +0200316 rm -f include/Makefile include/mbedtls/Makefile programs/!(fuzz)/Makefile
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200317
Jaeden Ameroab83fdf2019-06-20 17:38:22 +0100318 # Remove any artifacts from the component_test_cmake_as_subdirectory test.
319 rm -rf programs/test/cmake_subproject/build
320 rm -f programs/test/cmake_subproject/Makefile
321 rm -f programs/test/cmake_subproject/cmake_subproject
322
Chris Kayd259e342021-03-25 16:03:25 +0000323 # Remove any artifacts from the component_test_cmake_as_package test.
324 rm -rf programs/test/cmake_package/build
325 rm -f programs/test/cmake_package/Makefile
326 rm -f programs/test/cmake_package/cmake_package
327
328 # Remove any artifacts from the component_test_cmake_as_installed_package test.
329 rm -rf programs/test/cmake_package_install/build
330 rm -f programs/test/cmake_package_install/Makefile
331 rm -f programs/test/cmake_package_install/cmake_package_install
332
Gilles Peskinef83eb822020-03-30 20:11:39 +0200333 # Restore files that may have been clobbered by the job
334 for x in $files_to_back_up; do
Gilles Peskinedd06efb2022-08-30 21:02:00 +0200335 if [[ -e "$x$backup_suffix" ]]; then
336 cp -p "$x$backup_suffix" "$x"
337 fi
Gilles Peskinef83eb822020-03-30 20:11:39 +0200338 done
339}
John Durkopbd069d32020-10-31 22:14:03 -0700340
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200341# Final cleanup when this script exits (except when exiting on a failure
342# in non-keep-going mode).
Gilles Peskinef83eb822020-03-30 20:11:39 +0200343final_cleanup () {
344 cleanup
345
346 for x in $files_to_back_up; do
347 rm -f "$x$backup_suffix"
348 done
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100349}
350
Gilles Peskine7c652162017-12-11 00:01:40 +0100351# Executed on exit. May be redefined depending on command line options.
352final_report () {
353 :
354}
355
356fatal_signal () {
Gilles Peskinef83eb822020-03-30 20:11:39 +0200357 final_cleanup
Gilles Peskine7c652162017-12-11 00:01:40 +0100358 final_report $1
359 trap - $1
360 kill -$1 $$
361}
362
363trap 'fatal_signal HUP' HUP
364trap 'fatal_signal INT' INT
365trap 'fatal_signal TERM' TERM
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200366
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200367# Number of processors on this machine. Used as the default setting
368# for parallel make.
369all_sh_nproc ()
370{
371 {
372 nproc || # Linux
373 sysctl -n hw.ncpuonline || # NetBSD, OpenBSD
374 sysctl -n hw.ncpu || # FreeBSD
375 echo 1
376 } 2>/dev/null
377}
378
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100379msg()
380{
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100381 if [ -n "${current_component:-}" ]; then
382 current_section="${current_component#component_}: $1"
383 else
384 current_section="$1"
385 fi
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200386
387 if [ $QUIET -eq 1 ]; then
388 return
389 fi
390
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100391 echo ""
392 echo "******************************************************************"
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100393 echo "* $current_section "
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +0000394 printf "* "; date
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100395 echo "******************************************************************"
396}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100397
Gilles Peskine8f073122018-11-27 15:58:47 +0100398armc6_build_test()
399{
400 FLAGS="$1"
Andres AGa5cd9732016-10-17 15:23:10 +0100401
Gilles Peskine18487f62020-04-30 23:11:54 +0200402 msg "build: ARM Compiler 6 ($FLAGS)"
Yanray Wangbc7716c2023-09-08 11:20:59 +0800403 make clean
Gilles Peskine8f073122018-11-27 15:58:47 +0100404 ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \
Dave Rodgman1c232a82023-03-02 13:39:04 +0000405 WARNING_CFLAGS='-Werror -xc -std=c99' make lib
Gilles Peskine18487f62020-04-30 23:11:54 +0200406
407 msg "size: ARM Compiler 6 ($FLAGS)"
408 "$ARMC6_FROMELF" -z library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +0100409}
Andres AGa5cd9732016-10-17 15:23:10 +0100410
Andres AGd9eba4b2016-08-26 14:42:14 +0100411err_msg()
412{
413 echo "$1" >&2
414}
415
416check_tools()
417{
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200418 for tool in "$@"; do
419 if ! `type "$tool" >/dev/null 2>&1`; then
420 err_msg "$tool not found!"
Andres AGd9eba4b2016-08-26 14:42:14 +0100421 exit 1
422 fi
423 done
424}
425
Gilles Peskine8f073122018-11-27 15:58:47 +0100426pre_parse_command_line () {
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000427 COMMAND_LINE_COMPONENTS=
Gilles Peskinea28db922019-01-10 00:05:18 +0100428 all_except=0
Gilles Peskine5d996822020-03-28 21:09:21 +0100429 error_test=0
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100430 list_components=0
Gilles Peskine80ddb992021-08-06 11:51:59 +0200431 restore_first=0
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000432 no_armcc=
SimonB2e23c822016-04-16 21:54:39 +0100433
Jaeden Amero9b90f2e2018-11-02 18:34:17 +0000434 # Note that legacy options are ignored instead of being omitted from this
435 # list of options, so invocations that worked with previous version of
436 # all.sh will still run and work properly.
Gilles Peskine8f073122018-11-27 15:58:47 +0100437 while [ $# -gt 0 ]; do
Gilles Peskine55f7c942019-01-09 22:28:21 +0100438 case "$1" in
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200439 --append-outcome) append_outcome=1;;
Gilles Peskine6d061342020-04-30 18:19:32 +0200440 --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";;
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200441 --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000442 --armcc) no_armcc=;;
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100443 --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";;
444 --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";;
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +0100445 --clang-earliest) shift; CLANG_EARLIEST="$1";;
446 --clang-latest) shift; CLANG_LATEST="$1";;
Gilles Peskine5d996822020-03-28 21:09:21 +0100447 --error-test) error_test=$((error_test + 1));;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000448 --except) all_except=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100449 --force|-f) FORCE=1;;
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +0100450 --gcc-earliest) shift; GCC_EARLIEST="$1";;
451 --gcc-latest) shift; GCC_LATEST="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100452 --gnutls-cli) shift; GNUTLS_CLI="$1";;
Gilles Peskine7be571a2023-08-27 21:39:21 +0200453 --gnutls-legacy-cli) shift;; # ignored for backward compatibility
454 --gnutls-legacy-serv) shift;; # ignored for backward compatibility
Gilles Peskine55f7c942019-01-09 22:28:21 +0100455 --gnutls-serv) shift; GNUTLS_SERV="$1";;
456 --help|-h) usage; exit;;
457 --keep-going|-k) KEEP_GOING=1;;
Gilles Peskine878cf602019-01-06 20:50:38 +0000458 --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;;
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100459 --list-components) list_components=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100460 --memory|-m) MEMORY=1;;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200461 --no-append-outcome) append_outcome=0;;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000462 --no-armcc) no_armcc=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100463 --no-force) FORCE=0;;
464 --no-keep-going) KEEP_GOING=0;;
465 --no-memory) MEMORY=0;;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200466 --no-quiet) QUIET=0;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100467 --openssl) shift; OPENSSL="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100468 --openssl-next) shift; OPENSSL_NEXT="$1";;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200469 --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100470 --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200471 --quiet|-q) QUIET=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100472 --random-seed) unset SEED;;
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200473 --release-test|-r) SEED=$RELEASE_SEED;;
Gilles Peskine80ddb992021-08-06 11:51:59 +0200474 --restore) restore_first=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100475 --seed|-s) shift; SEED="$1";;
476 -*)
477 echo >&2 "Unknown option: $1"
478 echo >&2 "Run $0 --help for usage."
479 exit 120
480 ;;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000481 *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100482 esac
483 shift
Gilles Peskine8f073122018-11-27 15:58:47 +0100484 done
SimonB2e23c822016-04-16 21:54:39 +0100485
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100486 # Exclude components that are not supported on this platform.
487 SUPPORTED_COMPONENTS=
488 for component in $ALL_COMPONENTS; do
489 case $(type "support_$component" 2>&1) in
490 *' function'*)
491 if ! support_$component; then continue; fi;;
492 esac
493 SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component"
494 done
495
496 if [ $list_components -eq 1 ]; then
497 printf '%s\n' $SUPPORTED_COMPONENTS
498 exit
499 fi
500
Gilles Peskinea28db922019-01-10 00:05:18 +0100501 # With no list of components, run everything.
Gilles Peskine80ddb992021-08-06 11:51:59 +0200502 if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000503 all_except=1
Andres AGdc192212016-08-31 17:33:13 +0100504 fi
505
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000506 # --no-armcc is a legacy option. The modern way is --except '*_armcc*'.
507 # Ignore it if components are listed explicitly on the command line.
Gilles Peskinea28db922019-01-10 00:05:18 +0100508 if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000509 COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*"
SimonB2e23c822016-04-16 21:54:39 +0100510 fi
SimonB2e23c822016-04-16 21:54:39 +0100511
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200512 # Error out if an explicitly requested component doesn't exist.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100513 if [ $all_except -eq 0 ]; then
514 unsupported=0
Gilles Peskine03af6782021-08-06 11:35:17 +0200515 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
516 # only does word splitting.
Gilles Peskine1d475b62021-08-03 13:43:36 +0200517 set -f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100518 for component in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine1d475b62021-08-03 13:43:36 +0200519 set +f
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200520 # If the requested name includes a wildcard character, don't
521 # check it. Accept wildcard patterns that don't match anything.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100522 case $component in
523 *[*?\[]*) continue;;
524 esac
525 case " $SUPPORTED_COMPONENTS " in
526 *" $component "*) :;;
527 *)
528 echo >&2 "Component $component was explicitly requested, but is not known or not supported."
529 unsupported=$((unsupported + 1));;
530 esac
531 done
Gilles Peskine1d475b62021-08-03 13:43:36 +0200532 set +f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100533 if [ $unsupported -ne 0 ]; then
534 exit 2
535 fi
536 fi
537
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000538 # Build the list of components to run.
Gilles Peskinea28db922019-01-10 00:05:18 +0100539 RUN_COMPONENTS=
540 for component in $SUPPORTED_COMPONENTS; do
541 if is_component_included "$component"; [ $? -eq $all_except ]; then
542 RUN_COMPONENTS="$RUN_COMPONENTS $component"
543 fi
544 done
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000545
546 unset all_except
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000547 unset no_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +0100548}
SimonB2e23c822016-04-16 21:54:39 +0100549
Gilles Peskine8f073122018-11-27 15:58:47 +0100550pre_check_git () {
551 if [ $FORCE -eq 1 ]; then
Gilles Peskine53190e62019-01-09 23:17:35 +0100552 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +0100553 git checkout-index -f -q $CONFIG_H
554 cleanup
555 else
SimonB2e23c822016-04-16 21:54:39 +0100556
Gilles Peskine8f073122018-11-27 15:58:47 +0100557 if [ -d "$OUT_OF_SOURCE_DIR" ]; then
558 echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2
559 echo "You can either delete this directory manually, or force the test by rerunning"
560 echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR"
561 exit 1
562 fi
563
Ronald Cron7a93ac52023-07-20 09:49:12 +0200564 if ! git diff --quiet "$CONFIG_H"; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100565 err_msg "Warning - the configuration file '$CONFIG_H' has been edited. "
Gilles Peskine8f073122018-11-27 15:58:47 +0100566 echo "You can either delete or preserve your work, or force the test by rerunning the"
567 echo "script as: $0 --force"
568 exit 1
569 fi
SimonB2e23c822016-04-16 21:54:39 +0100570 fi
Andrzej Kurekeb508712019-02-14 07:18:59 -0500571}
572
Gilles Peskine568f53a2021-07-12 18:16:01 +0200573pre_restore_files () {
574 # If the makefiles have been generated by a framework such as cmake,
575 # restore them from git. If the makefiles look like modifications from
576 # the ones checked into git, take care not to modify them. Whatever
577 # this function leaves behind is what the script will restore before
578 # each component.
579 case "$(head -n1 Makefile)" in
580 *[Gg]enerated*)
581 git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
582 git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
583 ;;
584 esac
585}
586
Gilles Peskinef83eb822020-03-30 20:11:39 +0200587pre_back_up () {
588 for x in $files_to_back_up; do
589 cp -p "$x" "$x$backup_suffix"
590 done
591}
592
Gilles Peskine8f073122018-11-27 15:58:47 +0100593pre_setup_keep_going () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100594 failure_count=0 # Number of failed components
595 last_failure_status=0 # Last failure status in this component
596
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100597 # See err_trap
598 previous_failure_status=0
599 previous_failed_command=
600 previous_failure_funcall_depth=0
Gilles Peskinea681c592020-03-28 21:27:40 +0100601 unset report_failed_command
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100602
Gilles Peskine7c652162017-12-11 00:01:40 +0100603 start_red=
604 end_color=
605 if [ -t 1 ]; then
Gilles Peskine9736b9d2018-01-02 21:54:17 +0100606 case "${TERM:-}" in
Gilles Peskine7c652162017-12-11 00:01:40 +0100607 *color*|cygwin|linux|rxvt*|screen|[Eex]term*)
608 start_red=$(printf '\033[31m')
609 end_color=$(printf '\033[0m')
610 ;;
611 esac
612 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100613
614 # Keep a summary of failures in a file. We'll print it out at the end.
615 failure_summary_file=$PWD/all-sh-failures-$$.log
616 : >"$failure_summary_file"
617
618 # Whether it makes sense to keep a component going after the specified
619 # command fails (test command) or not (configure or build).
Gilles Peskine03af6782021-08-06 11:35:17 +0200620 # This function normally receives the failing simple command
621 # ($BASH_COMMAND) as an argument, but if $report_failed_command is set,
622 # this is passed instead.
Gilles Peskinece266c42020-03-28 18:50:43 +0100623 # This doesn't have to be 100% accurate: all failures are recorded anyway.
Gilles Peskinec111e242021-08-02 23:29:53 +0200624 # False positives result in running things that can't be expected to
625 # work. False negatives result in things not running after something else
626 # failed even though they might have given useful feedback.
Gilles Peskinece266c42020-03-28 18:50:43 +0100627 can_keep_going_after_failure () {
628 case "$1" in
629 "msg "*) false;;
Gilles Peskinec111e242021-08-02 23:29:53 +0200630 "cd "*) false;;
Manuel Pégourié-Gonnarda7423372023-11-10 09:58:31 +0100631 "diff "*) true;;
Gilles Peskinec111e242021-08-02 23:29:53 +0200632 *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ...
633 *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ...
634 *make*check*) true;;
635 "grep "*) true;;
636 "[ "*) true;;
637 "! "*) true;;
Gilles Peskinece266c42020-03-28 18:50:43 +0100638 *) false;;
Gilles Peskine7c652162017-12-11 00:01:40 +0100639 esac
640 }
Gilles Peskinece266c42020-03-28 18:50:43 +0100641
642 # This function runs if there is any error in a component.
643 # It must either exit with a nonzero status, or set
644 # last_failure_status to a nonzero value.
645 err_trap () {
646 # Save $? (status of the failing command). This must be the very
647 # first thing, before $? is overridden.
648 last_failure_status=$?
Gilles Peskinea681c592020-03-28 21:27:40 +0100649 failed_command=${report_failed_command-$BASH_COMMAND}
Gilles Peskinece266c42020-03-28 18:50:43 +0100650
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100651 if [[ $last_failure_status -eq $previous_failure_status &&
652 "$failed_command" == "$previous_failed_command" &&
653 ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]]
654 then
655 # The same command failed twice in a row, but this time one level
656 # less deep in the function call stack. This happens when the last
657 # command of a function returns a nonzero status, and the function
658 # returns that same status. Ignore the second failure.
659 previous_failure_funcall_depth=${#FUNCNAME[@]}
660 return
661 fi
662 previous_failure_status=$last_failure_status
663 previous_failed_command=$failed_command
664 previous_failure_funcall_depth=${#FUNCNAME[@]}
665
Gilles Peskinece266c42020-03-28 18:50:43 +0100666 text="$current_section: $failed_command -> $last_failure_status"
667 echo "${start_red}^^^^$text^^^^${end_color}" >&2
668 echo "$text" >>"$failure_summary_file"
669
670 # If the command is fatal (configure or build command), stop this
671 # component. Otherwise (test command) keep the component running
672 # (run more tests from the same build).
673 if ! can_keep_going_after_failure "$failed_command"; then
674 exit $last_failure_status
675 fi
676 }
677
Gilles Peskine7c652162017-12-11 00:01:40 +0100678 final_report () {
679 if [ $failure_count -gt 0 ]; then
680 echo
681 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
Gilles Peskinece266c42020-03-28 18:50:43 +0100682 echo "${start_red}FAILED: $failure_count components${end_color}"
683 cat "$failure_summary_file"
Gilles Peskine7c652162017-12-11 00:01:40 +0100684 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
685 elif [ -z "${1-}" ]; then
686 echo "SUCCESS :)"
687 fi
688 if [ -n "${1-}" ]; then
689 echo "Killed by SIG$1."
690 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100691 rm -f "$failure_summary_file"
692 if [ $failure_count -gt 0 ]; then
693 exit 1
694 fi
Gilles Peskine7c652162017-12-11 00:01:40 +0100695 }
Gilles Peskine8f073122018-11-27 15:58:47 +0100696}
697
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200698# record_status() and if_build_succeeded() are kept temporarily for backward
699# compatibility. Don't use them in new components.
Gilles Peskinece266c42020-03-28 18:50:43 +0100700record_status () {
701 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100702}
Gilles Peskine7c652162017-12-11 00:01:40 +0100703if_build_succeeded () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100704 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100705}
706
Gilles Peskinea681c592020-03-28 21:27:40 +0100707# '! true' does not trigger the ERR trap. Arrange to trigger it, with
708# a reasonably informative error message (not just "$@").
709not () {
710 if "$@"; then
711 report_failed_command="! $*"
712 false
713 unset report_failed_command
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200714 fi
715}
716
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200717pre_prepare_outcome_file () {
718 case "$MBEDTLS_TEST_OUTCOME_FILE" in
719 [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";;
720 esac
721 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then
722 rm -f "$MBEDTLS_TEST_OUTCOME_FILE"
723 fi
724}
725
Gilles Peskine8f073122018-11-27 15:58:47 +0100726pre_print_configuration () {
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200727 if [ $QUIET -eq 1 ]; then
728 return
729 fi
730
Gilles Peskine8f073122018-11-27 15:58:47 +0100731 msg "info: $0 configuration"
732 echo "MEMORY: $MEMORY"
733 echo "FORCE: $FORCE"
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200734 echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}"
Gilles Peskine8f073122018-11-27 15:58:47 +0100735 echo "SEED: ${SEED-"UNSET"}"
Gilles Peskine636c26a2020-03-04 20:46:15 +0100736 echo
Gilles Peskine8f073122018-11-27 15:58:47 +0100737 echo "OPENSSL: $OPENSSL"
Gilles Peskine8f073122018-11-27 15:58:47 +0100738 echo "OPENSSL_NEXT: $OPENSSL_NEXT"
739 echo "GNUTLS_CLI: $GNUTLS_CLI"
740 echo "GNUTLS_SERV: $GNUTLS_SERV"
Gilles Peskine8f073122018-11-27 15:58:47 +0100741 echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR"
742 echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR"
743}
Andres AG7770ea82016-10-10 15:46:20 +0100744
Andres AGd9eba4b2016-08-26 14:42:14 +0100745# Make sure the tools we need are available.
Gilles Peskine8f073122018-11-27 15:58:47 +0100746pre_check_tools () {
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000747 # Build the list of variables to pass to output_env.sh.
748 set env
SimonB2e23c822016-04-16 21:54:39 +0100749
Gilles Peskine87964262019-01-06 22:40:00 +0000750 case " $RUN_COMPONENTS " in
751 # Require OpenSSL and GnuTLS if running any tests (as opposed to
752 # only doing builds). Not all tests run OpenSSL and GnuTLS, but this
753 # is a good enough approximation in practice.
Bence Szépkútibbb5af92023-12-15 20:58:15 +0100754 *" test_"* | *" release_test_"*)
Gilles Peskine87964262019-01-06 22:40:00 +0000755 # To avoid setting OpenSSL and GnuTLS for each call to compat.sh
756 # and ssl-opt.sh, we just export the variables they require.
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +0100757 export OPENSSL="$OPENSSL"
Gilles Peskine87964262019-01-06 22:40:00 +0000758 export GNUTLS_CLI="$GNUTLS_CLI"
759 export GNUTLS_SERV="$GNUTLS_SERV"
760 # Avoid passing --seed flag in every call to ssl-opt.sh
761 if [ -n "${SEED-}" ]; then
762 export SEED
763 fi
Gilles Peskine7be571a2023-08-27 21:39:21 +0200764 set "$@" OPENSSL="$OPENSSL"
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000765 set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV"
Gilles Peskine7be571a2023-08-27 21:39:21 +0200766 check_tools "$OPENSSL" "$OPENSSL_NEXT" \
767 "$GNUTLS_CLI" "$GNUTLS_SERV"
Gilles Peskine87964262019-01-06 22:40:00 +0000768 ;;
769 esac
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200770
Gilles Peskine87964262019-01-06 22:40:00 +0000771 case " $RUN_COMPONENTS " in
772 *_doxygen[_\ ]*) check_tools "doxygen" "dot";;
773 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100774
Gilles Peskine87964262019-01-06 22:40:00 +0000775 case " $RUN_COMPONENTS " in
Gilles Peskine6d061342020-04-30 18:19:32 +0200776 *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";;
Gilles Peskine87964262019-01-06 22:40:00 +0000777 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100778
Gilles Peskine87964262019-01-06 22:40:00 +0000779 case " $RUN_COMPONENTS " in
780 *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";;
781 esac
782
783 case " $RUN_COMPONENTS " in
784 *" test_zeroize "*) check_tools "gdb";;
785 esac
786
787 case " $RUN_COMPONENTS " in
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000788 *_armcc*)
Gilles Peskine87964262019-01-06 22:40:00 +0000789 ARMC5_CC="$ARMC5_BIN_DIR/armcc"
790 ARMC5_AR="$ARMC5_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200791 ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf"
Gilles Peskine87964262019-01-06 22:40:00 +0000792 ARMC6_CC="$ARMC6_BIN_DIR/armclang"
793 ARMC6_AR="$ARMC6_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200794 ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf"
795 check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \
796 "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000797 esac
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000798
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200799 # past this point, no call to check_tool, only printing output
800 if [ $QUIET -eq 1 ]; then
801 return
802 fi
803
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000804 msg "info: output_env.sh"
805 case $RUN_COMPONENTS in
806 *_armcc*)
807 set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;;
808 *) set "$@" RUN_ARMCC=0;;
809 esac
810 "$@" scripts/output_env.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100811}
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100812
Gilles Peskine1570b592021-04-22 01:10:12 +0200813pre_generate_files() {
Manuel Pégourié-Gonnard87db8a22021-06-18 13:30:14 +0200814 # since make doesn't have proper dependencies, remove any possibly outdate
815 # file that might be around before generating fresh ones
816 make neat
Gilles Peskine72385032021-07-08 19:07:07 +0200817 if [ $QUIET -eq 1 ]; then
Gilles Peskine75301632021-08-05 15:10:47 +0200818 make generated_files >/dev/null
Gilles Peskine72385032021-07-08 19:07:07 +0200819 else
820 make generated_files
821 fi
Gilles Peskine1570b592021-04-22 01:10:12 +0200822}
823
Tom Cosgroved4c373a2024-01-30 13:56:38 +0000824clang_version() {
825 if command -v clang > /dev/null ; then
826 clang --version|grep version|sed -E 's#.*version ([0-9]+).*#\1#'
827 else
828 echo 0 # report version 0 for "no clang"
829 fi
830}
831
Manuel Pégourié-Gonnard27e17672023-05-25 09:39:08 +0200832################################################################
833#### Helpers for components using libtestdriver1
834################################################################
Gilles Peskine192c72f2017-12-21 15:59:21 +0100835
Manuel Pégourié-Gonnardf5c5d972023-06-06 11:14:57 +0200836# How to use libtestdriver1
837# -------------------------
838#
839# 1. Define the list algorithms and key types to accelerate,
840# designated the same way as PSA_WANT_ macros but without PSA_WANT_.
841# Examples:
842# - loc_accel_list="ALG_JPAKE"
843# - loc_accel_list="ALG_FFDH KEY_TYPE_DH_KEY_PAIR KEY_TYPE_DH_PUBLIC_KEY"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200844# 2. Make configurations changes for the driver and/or main libraries.
845# 2a. Call helper_libtestdriver1_adjust_config <base>, where the argument
846# can be either "default" to start with the default config, or a name
847# supported by scripts/config.py (for example, "full"). This selects
Manuel Pégourié-Gonnard2336c8e2023-06-12 17:17:54 +0200848# the base to use, and makes common adjustments.
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200849# 2b. If desired, adjust the PSA_WANT symbols in psa/crypto_config.h.
850# These changes affect both the driver and the main libraries.
851# (Note: they need to have the same set of PSA_WANT symbols, as that
852# determines the ABI between them.)
853# 2c. Adjust MBEDTLS_ symbols in mbedtls_config.h. This only affects the
854# main libraries. Typically, you want to disable the module(s) that are
855# being accelerated. You may need to also disable modules that depend
856# on them or options that are not supported with drivers.
857# 2d. On top of psa/crypto_config.h, the driver library uses its own config
858# file: tests/include/test/drivers/config_test_driver.h. You usually
859# don't need to edit it: using loc_extra_list (see below) is preferred.
860# However, when there's no PSA symbol for what you want to enable,
861# calling scripts/config.py on this file remains the only option.
862# 3. Build the driver library, then the main libraries, test, and programs.
863# 3a. Call helper_libtestdriver1_make_drivers "$loc_accel_list". You may
864# need to enable more algorithms here, typically hash algorithms when
865# accelerating some signature algorithms (ECDSA, RSAv2). This is done
866# by passing a 2nd argument listing the extra algorithms.
867# Example:
868# loc_extra_list="ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512"
869# helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
Yanray Wang0df6d962023-10-11 13:27:25 +0800870# 3b. Call helper_libtestdriver1_make_main "$loc_accel_list". Any
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200871# additional arguments will be passed to make: this can be useful if
872# you don't want to build everything when iterating during development.
873# Example:
874# helper_libtestdriver1_make_main "$loc_accel_list" -C tests test_suite_foo
875# 4. Run the tests you want.
Manuel Pégourié-Gonnardf5c5d972023-06-06 11:14:57 +0200876
Manuel Pégourié-Gonnard27e17672023-05-25 09:39:08 +0200877# Adjust the configuration - for both libtestdriver1 and main library,
878# as they should have the same PSA_WANT macros.
879helper_libtestdriver1_adjust_config() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200880 base_config=$1
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200881 # Select the base configuration
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200882 if [ "$base_config" != "default" ]; then
883 scripts/config.py "$base_config"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200884 fi
885
886 # Enable PSA-based config (necessary to use drivers)
887 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
888
Manuel Pégourié-Gonnard2336c8e2023-06-12 17:17:54 +0200889 # Dynamic secure element support is a deprecated feature and needs to be disabled here.
890 # This is done to have the same form of psa_key_attributes_s for libdriver and library.
891 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Manuel Pégourié-Gonnard27e17672023-05-25 09:39:08 +0200892}
Gilles Peskine192c72f2017-12-21 15:59:21 +0100893
Valerio Settib2fd6732023-08-15 17:10:47 +0200894# When called with no parameter this function disables all builtin curves.
Valerio Setti4ca250b2023-09-04 14:01:41 +0200895# The function optionally accepts 1 parameter: a space-separated list of the
896# curves that should be kept enabled.
Valerio Settib2fd6732023-08-15 17:10:47 +0200897helper_disable_builtin_curves() {
898 allowed_list="${1:-}"
899 scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED"
900
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200901 for curve in $allowed_list; do
902 scripts/config.py set $curve
Valerio Settib2fd6732023-08-15 17:10:47 +0200903 done
904}
905
906# Helper returning the list of supported elliptic curves from CRYPTO_CONFIG_H,
907# without the "PSA_WANT_" prefix. This becomes handy for accelerating curves
908# in the following helpers.
909helper_get_psa_curve_list () {
910 loc_list=""
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200911 for item in $(sed -n 's/^#define PSA_WANT_\(ECC_[0-9A-Z_a-z]*\).*/\1/p' <"$CRYPTO_CONFIG_H"); do
912 loc_list="$loc_list $item"
Valerio Settib2fd6732023-08-15 17:10:47 +0200913 done
914
915 echo "$loc_list"
916}
917
918# Get the list of uncommented PSA_WANT_KEY_TYPE_xxx_ from CRYPTO_CONFIG_H. This
Valerio Setti0a342c92023-09-01 09:12:31 +0200919# is useful to easily get a list of key type symbols to accelerate.
Valerio Settib2fd6732023-08-15 17:10:47 +0200920# The function accepts a single argument which is the key type: ECC, DH, RSA.
Valerio Setti0a342c92023-09-01 09:12:31 +0200921helper_get_psa_key_type_list() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200922 key_type="$1"
Valerio Settib2fd6732023-08-15 17:10:47 +0200923 loc_list=""
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200924 for item in $(sed -n "s/^#define PSA_WANT_\(KEY_TYPE_${key_type}_[0-9A-Z_a-z]*\).*/\1/p" <"$CRYPTO_CONFIG_H"); do
Valerio Settib2fd6732023-08-15 17:10:47 +0200925 # Skip DERIVE for elliptic keys since there is no driver dispatch for
926 # it so it cannot be accelerated.
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200927 if [ "$item" != "KEY_TYPE_ECC_KEY_PAIR_DERIVE" ]; then
928 loc_list="$loc_list $item"
Valerio Settib2fd6732023-08-15 17:10:47 +0200929 fi
930 done
931
932 echo "$loc_list"
933}
934
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +0200935# Build the drivers library libtestdriver1.a (with ASan).
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +0200936#
937# Parameters:
938# 1. a space-separated list of things to accelerate;
939# 2. optional: a space-separate list of things to also support.
940# Here "things" are PSA_WANT_ symbols but with PSA_WANT_ removed.
941helper_libtestdriver1_make_drivers() {
942 loc_accel_flags=$( echo "$1 ${2-}" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
Gilles Peskine21570cf2023-12-22 11:49:50 +0100943 make CC=$ASAN_CC -C tests libtestdriver1.a CFLAGS=" $ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +0200944}
945
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +0200946# Build the main libraries, programs and tests,
947# linking to the drivers library (with ASan).
948#
949# Parameters:
950# 1. a space-separated list of things to accelerate;
951# *. remaining arguments if any are passed directly to make
952# (examples: lib, -C tests test_suite_xxx, etc.)
953# Here "things" are PSA_WANT_ symbols but with PSA_WANT_ removed.
954helper_libtestdriver1_make_main() {
955 loc_accel_list=$1
956 shift
957
958 # we need flags both with and without the LIBTESTDRIVER1_ prefix
959 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
960 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Gilles Peskine21570cf2023-12-22 11:49:50 +0100961 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" "$@"
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +0200962}
Gilles Peskine192c72f2017-12-21 15:59:21 +0100963
964################################################################
965#### Basic checks
966################################################################
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100967
968#
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200969# Test Suites to be executed
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100970#
Manuel Pégourié-Gonnard3d404b42015-07-08 21:59:16 +0100971# The test ordering tries to optimize for the following criteria:
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200972# 1. Catch possible problems early, by running first tests that run quickly
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100973# and/or are more likely to fail than others (eg I use Clang most of the
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200974# time, so start with a GCC build).
975# 2. Minimize total running time, by avoiding useless rebuilds
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100976#
Manuel Pégourié-Gonnard259b08a2016-01-08 16:27:41 +0100977# Indicative running times are given for reference.
978
Gilles Peskine8f073122018-11-27 15:58:47 +0100979component_check_recursion () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200980 msg "Check: recursion.pl" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200981 tests/scripts/recursion.pl library/*.c
Gilles Peskine8f073122018-11-27 15:58:47 +0100982}
Janos Follathb72c6782016-07-19 14:54:17 +0100983
Gilles Peskine67debb62021-05-18 16:09:50 +0200984component_check_generated_files () {
985 msg "Check: check-generated-files, files generated with make" # 2s
986 make generated_files
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200987 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200988
989 msg "Check: check-generated-files -u, files present" # 2s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200990 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200991 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200992 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200993
994 msg "Check: check-generated-files -u, files absent" # 2s
995 command make neat
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200996 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200997 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200998 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200999
1000 # This component ends with the generated files present in the source tree.
1001 # This is necessary for subsequent components!
1002}
1003
Gilles Peskine8f073122018-11-27 15:58:47 +01001004component_check_doxy_blocks () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001005 msg "Check: doxygen markup outside doxygen blocks" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001006 tests/scripts/check-doxy-blocks.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001007}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001008
Gilles Peskine8f073122018-11-27 15:58:47 +01001009component_check_files () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001010 msg "Check: file sanity checks (permissions, encodings)" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001011 tests/scripts/check_files.py
Gilles Peskine8f073122018-11-27 15:58:47 +01001012}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001013
Gilles Peskine30e0bb42020-05-10 17:40:49 +02001014component_check_changelog () {
1015 msg "Check: changelog entries" # < 1s
1016 rm -f ChangeLog.new
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001017 scripts/assemble_changelog.py -o ChangeLog.new
Gilles Peskine30e0bb42020-05-10 17:40:49 +02001018 if [ -e ChangeLog.new ]; then
1019 # Show the diff for information. It isn't an error if the diff is
1020 # non-empty.
1021 diff -u ChangeLog ChangeLog.new || true
1022 rm ChangeLog.new
1023 fi
1024}
1025
Gilles Peskine8f073122018-11-27 15:58:47 +01001026component_check_names () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001027 msg "Check: declared and exported names (builds the library)" # < 3s
Yuto Takanoc3a6f632021-09-24 18:02:56 +01001028 tests/scripts/check_names.py -v
Gilles Peskine8f073122018-11-27 15:58:47 +01001029}
Darryl Greena07039c2018-03-13 16:48:16 +00001030
Gilles Peskine895868b2019-09-19 21:30:05 +02001031component_check_test_cases () {
1032 msg "Check: test case descriptions" # < 1s
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +02001033 if [ $QUIET -eq 1 ]; then
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02001034 opt='--quiet'
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +02001035 else
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02001036 opt=''
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +02001037 fi
Gilles Peskine031114d2022-12-15 14:46:31 +01001038 tests/scripts/check_test_cases.py -q $opt
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02001039 unset opt
Gilles Peskine895868b2019-09-19 21:30:05 +02001040}
1041
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001042component_check_test_dependencies () {
1043 msg "Check: test case dependencies: legacy vs PSA" # < 1s
Manuel Pégourié-Gonnard9f164f02023-11-10 10:16:06 +01001044 # The purpose of this component is to catch unjustified dependencies on
1045 # legacy feature macros (MBEDTLS_xxx) in PSA tests. Generally speaking,
1046 # PSA test should use PSA feature macros (PSA_WANT_xxx, more rarely
1047 # MBEDTLS_PSA_xxx).
1048 #
1049 # Most of the time, use of legacy MBEDTLS_xxx macros are mistakes, which
1050 # this component is meant to catch. However a few of them are justified,
1051 # mostly by the absence of a PSA equivalent, so this component includes a
1052 # list of expected exceptions.
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001053
1054 found="check-test-deps-found-$$"
1055 expected="check-test-deps-expected-$$"
1056
1057 # Find legacy dependencies in PSA tests
Manuel Pégourié-Gonnard5c6f7872023-11-10 10:04:22 +01001058 grep 'depends_on' \
1059 tests/suites/test_suite_psa*.data tests/suites/test_suite_psa*.function |
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001060 grep -Eo '!?MBEDTLS_[^: ]*' |
1061 grep -v MBEDTLS_PSA_ |
Yanray Wang18040ed2023-11-23 21:29:56 +08001062 sort -u > $found
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001063
Yanray Wang18040ed2023-11-23 21:29:56 +08001064 # Expected ones with justification - keep in sorted order by ASCII table!
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001065 rm -f $expected
1066 # No PSA equivalent - WANT_KEY_TYPE_AES means all sizes
1067 echo "!MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH" >> $expected
Yanray Wang18040ed2023-11-23 21:29:56 +08001068 # No PSA equivalent - used to skip decryption tests in PSA-ECB, CBC/XTS/NIST_KW/DES
1069 echo "!MBEDTLS_BLOCK_CIPHER_NO_DECRYPT" >> $expected
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001070 # This is used by import_rsa_made_up() in test_suite_psa_crypto in order
1071 # to build a fake RSA key of the wanted size based on
1072 # PSA_VENDOR_RSA_MAX_KEY_BITS. The legacy module is only used by
1073 # the test code and that's probably the most convenient way of achieving
1074 # the test's goal.
1075 echo "MBEDTLS_ASN1_WRITE_C" >> $expected
1076 # No PSA equivalent - we should probably have one in the future.
1077 echo "MBEDTLS_ECP_RESTARTABLE" >> $expected
1078 # No PSA equivalent - needed by some init tests
1079 echo "MBEDTLS_ENTROPY_NV_SEED" >> $expected
1080 # Used by two tests that are about an extension to the PSA standard;
1081 # as such, no PSA equivalent.
1082 echo "MBEDTLS_PEM_PARSE_C" >> $expected
1083
1084 # Compare reality with expectation.
1085 # We want an exact match, to ensure the above list remains up-to-date.
Manuel Pégourié-Gonnard9f164f02023-11-10 10:16:06 +01001086 #
1087 # The output should be empty. When it's not:
1088 # - Each '+' line is a macro that was found but not expected. You want to
1089 # find where that macro occurs, and either replace it with PSA macros, or
1090 # add it to the exceptions list above with a justification.
1091 # - Each '-' line is a macro that was expected but not found; it means the
1092 # exceptions list above should be updated by removing that macro.
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001093 diff -U0 $expected $found
1094
1095 rm $found $expected
1096}
1097
Gilles Peskine8f073122018-11-27 15:58:47 +01001098component_check_doxygen_warnings () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001099 msg "Check: doxygen warnings (builds the documentation)" # ~ 3s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001100 tests/scripts/doxygen.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001101}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001102
Gilles Peskine192c72f2017-12-21 15:59:21 +01001103
Gilles Peskine636c26a2020-03-04 20:46:15 +01001104
Gilles Peskine192c72f2017-12-21 15:59:21 +01001105################################################################
1106#### Build and test many configurations and targets
1107################################################################
1108
Gilles Peskine7832c9f2019-04-08 17:00:15 +02001109component_test_default_out_of_box () {
1110 msg "build: make, default config (out-of-box)" # ~1min
1111 make
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02001112 # Disable fancy stuff
1113 unset MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine7832c9f2019-04-08 17:00:15 +02001114
1115 msg "test: main suites make, default config (out-of-box)" # ~10s
1116 make test
1117
1118 msg "selftest: make, default config (out-of-box)" # ~10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001119 programs/test/selftest
Gilles Peskine82b27272019-06-14 18:27:03 +02001120
1121 msg "program demos: make, default config (out-of-box)" # ~10s
1122 tests/scripts/run_demos.py
Gilles Peskine7832c9f2019-04-08 17:00:15 +02001123}
1124
Gilles Peskine8f073122018-11-27 15:58:47 +01001125component_test_default_cmake_gcc_asan () {
1126 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Gilles Peskine8f073122018-11-27 15:58:47 +01001127 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1128 make
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001129
Gilles Peskine8f073122018-11-27 15:58:47 +01001130 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
1131 make test
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001132
Gilles Peskine82b27272019-06-14 18:27:03 +02001133 msg "program demos (ASan build)" # ~10s
1134 tests/scripts/run_demos.py
1135
Gilles Peskine97bea012020-04-23 23:37:45 +02001136 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001137 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +02001138
Gilles Peskine6848d172023-11-02 19:58:03 +01001139 msg "test: metatests (GCC, ASan build)"
1140 tests/scripts/run-metatests.sh any asan
1141
Gilles Peskine8f073122018-11-27 15:58:47 +01001142 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001143 tests/ssl-opt.sh
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001144
Gilles Peskine8f073122018-11-27 15:58:47 +01001145 msg "test: compat.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001146 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001147
1148 msg "test: context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001149 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001150}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001151
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001152component_test_default_cmake_gcc_asan_new_bignum () {
1153 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Janos Follath2f045822023-07-31 10:57:16 +01001154 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001155 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Janos Follath82823b22023-07-27 12:25:05 +01001156 make
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001157
1158 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
1159 make test
1160
1161 msg "test: selftest (ASan build)" # ~ 10s
1162 programs/test/selftest
1163
1164 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
1165 tests/ssl-opt.sh
1166
1167 msg "test: compat.sh (ASan build)" # ~ 6 min
1168 tests/compat.sh
1169
1170 msg "test: context-info.sh (ASan build)" # ~ 15 sec
1171 tests/context-info.sh
1172}
1173
Hanno Becker01635512019-02-26 14:27:09 +00001174component_test_full_cmake_gcc_asan () {
1175 msg "build: full config, cmake, gcc, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001176 scripts/config.py full
Hanno Becker01635512019-02-26 14:27:09 +00001177 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1178 make
1179
1180 msg "test: main suites (inc. selftests) (full config, ASan build)"
1181 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01001182
Gilles Peskine97bea012020-04-23 23:37:45 +02001183 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001184 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +02001185
Gilles Peskine636c26a2020-03-04 20:46:15 +01001186 msg "test: ssl-opt.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001187 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001188
1189 msg "test: compat.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001190 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001191
1192 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001193 tests/context-info.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001194}
1195
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001196
1197component_test_full_cmake_gcc_asan_new_bignum () {
1198 msg "build: full config, cmake, gcc, ASan"
1199 scripts/config.py full
Janos Follath2f045822023-07-31 10:57:16 +01001200 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001201 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Janos Follath82823b22023-07-27 12:25:05 +01001202 make
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001203
1204 msg "test: main suites (inc. selftests) (full config, ASan build)"
1205 make test
1206
1207 msg "test: selftest (ASan build)" # ~ 10s
1208 programs/test/selftest
1209
1210 msg "test: ssl-opt.sh (full config, ASan build)"
1211 tests/ssl-opt.sh
1212
1213 msg "test: compat.sh (full config, ASan build)"
1214 tests/compat.sh
1215
1216 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
1217 tests/context-info.sh
Gabor Mezei6db60472023-07-05 16:38:42 +02001218}
1219
Ronald Cronc3623db2020-10-29 10:51:32 +01001220component_test_psa_crypto_key_id_encodes_owner () {
Andrzej Kurek03e01462022-01-03 12:53:24 +01001221 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
Ronald Cronc3623db2020-10-29 10:51:32 +01001222 scripts/config.py full
Ronald Cronc3623db2020-10-29 10:51:32 +01001223 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1224 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1225 make
1226
1227 msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
1228 make test
1229}
1230
Gilles Peskinea3548672021-06-17 11:37:52 +02001231# check_renamed_symbols HEADER LIB
1232# Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol
1233# name is LIB.
1234check_renamed_symbols () {
1235 ! nm "$2" | sed 's/.* //' |
1236 grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")"
1237}
1238
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001239component_build_psa_crypto_spm () {
Andrzej Kurek03e01462022-01-03 12:53:24 +01001240 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc"
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001241 scripts/config.py full
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001242 scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
1243 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1244 scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM
1245 # We can only compile, not link, since our test and sample programs
1246 # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM
1247 # is active.
1248 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib
Gilles Peskinea3548672021-06-17 11:37:52 +02001249
1250 # Check that if a symbol is renamed by crypto_spe.h, the non-renamed
1251 # version is not present.
1252 echo "Checking for renamed symbols in the library"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001253 check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001254}
1255
Ronald Cron336678b2021-01-28 17:54:24 +01001256component_test_psa_crypto_client () {
1257 msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
1258 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1259 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
1260 scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT
Raef Colesb4568c52022-09-28 17:11:42 +01001261 scripts/config.py unset MBEDTLS_LMS_C
1262 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Ronald Cron336678b2021-01-28 17:54:24 +01001263 make
1264
1265 msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
1266 make test
1267}
1268
Jaeden Amero424fa932021-05-14 08:34:32 +01001269component_test_psa_crypto_rsa_no_genprime() {
1270 msg "build: default config minus MBEDTLS_GENPRIME"
1271 scripts/config.py unset MBEDTLS_GENPRIME
1272 make
1273
1274 msg "test: default config minus MBEDTLS_GENPRIME"
1275 make test
1276}
1277
Gilles Peskine782f4112018-11-27 16:11:09 +01001278component_test_ref_configs () {
1279 msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001280 # test-ref-configs works by overwriting mbedtls_config.h; this makes cmake
1281 # want to re-generate generated files that depend on it, quite correctly.
1282 # However this doesn't work as the generation script expects a specific
1283 # format for mbedtls_config.h, which the other files don't follow. Also,
1284 # cmake can't know this, but re-generation is actually not necessary as
David Horstmannd64f4b22021-10-20 12:29:47 +01001285 # the generated files only depend on the list of available options, not
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001286 # whether they're on or off. So, disable cmake's (over-sensitive here)
1287 # dependency resolution for generated files and just rely on them being
David Horstmanna8d14062021-10-20 17:14:23 +01001288 # present (thanks to pre_generate_files) by turning GEN_FILES off.
Dave Rodgman17127e92023-12-14 16:42:48 +00001289 CC=$ASAN_CC cmake -D GEN_FILES=Off -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001290 tests/scripts/test-ref-configs.pl
Gilles Peskine782f4112018-11-27 16:11:09 +01001291}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001292
Gilles Peskine8f073122018-11-27 15:58:47 +01001293component_test_no_renegotiation () {
1294 msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001295 scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION
Dave Rodgman17127e92023-12-14 16:42:48 +00001296 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001297 make
Simon Butcher3ea7f522016-03-07 23:22:10 +00001298
Gilles Peskine8f073122018-11-27 15:58:47 +01001299 msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s
1300 make test
Hanno Becker134c2ab2017-10-12 15:29:50 +01001301
Gilles Peskine8f073122018-11-27 15:58:47 +01001302 msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001303 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001304}
Hanno Becker134c2ab2017-10-12 15:29:50 +01001305
Gilles Peskine636c26a2020-03-04 20:46:15 +01001306component_test_no_pem_no_fs () {
1307 msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)"
1308 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1309 scripts/config.py unset MBEDTLS_FS_IO
1310 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem
1311 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS
Dave Rodgman17127e92023-12-14 16:42:48 +00001312 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine636c26a2020-03-04 20:46:15 +01001313 make
1314
1315 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s
1316 make test
1317
1318 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001319 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001320}
1321
Gilles Peskine8f073122018-11-27 15:58:47 +01001322component_test_rsa_no_crt () {
1323 msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001324 scripts/config.py set MBEDTLS_RSA_NO_CRT
Dave Rodgman17127e92023-12-14 16:42:48 +00001325 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001326 make
Manuel Pégourié-Gonnard246978d2014-11-20 13:29:53 +01001327
Gilles Peskine8f073122018-11-27 15:58:47 +01001328 msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s
1329 make test
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001330
Gilles Peskine8f073122018-11-27 15:58:47 +01001331 msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001332 tests/ssl-opt.sh -f RSA
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001333
Gilles Peskine8f073122018-11-27 15:58:47 +01001334 msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001335 tests/compat.sh -t RSA
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001336
1337 msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001338 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001339}
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001340
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001341component_test_no_ctr_drbg_classic () {
1342 msg "build: Full minus CTR_DRBG, classic crypto in TLS"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001343 scripts/config.py full
1344 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001345 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001346 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001347
Dave Rodgman17127e92023-12-14 16:42:48 +00001348 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001349 make
1350
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001351 msg "test: Full minus CTR_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001352 make test
1353
Gilles Peskineba749042021-01-13 20:02:03 +01001354 # In this configuration, the TLS test programs use HMAC_DRBG.
1355 # The SSL tests are slow, so run a small subset, just enough to get
1356 # confidence that the SSL code copes with HMAC_DRBG.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001357 msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001358 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskineba749042021-01-13 20:02:03 +01001359
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001360 msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001361 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001362}
1363
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001364component_test_no_ctr_drbg_use_psa () {
1365 msg "build: Full minus CTR_DRBG, PSA crypto in TLS"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001366 scripts/config.py full
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001367 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1368 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001369
Dave Rodgman17127e92023-12-14 16:42:48 +00001370 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001371 make
1372
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001373 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites"
1374 make test
1375
1376 # In this configuration, the TLS test programs use HMAC_DRBG.
1377 # The SSL tests are slow, so run a small subset, just enough to get
1378 # confidence that the SSL code copes with HMAC_DRBG.
1379 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001380 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001381
1382 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001383 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001384}
1385
1386component_test_no_hmac_drbg_classic () {
1387 msg "build: Full minus HMAC_DRBG, classic crypto in TLS"
1388 scripts/config.py full
1389 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1390 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1391 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001392 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001393
Dave Rodgman17127e92023-12-14 16:42:48 +00001394 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001395 make
1396
1397 msg "test: Full minus HMAC_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001398 make test
1399
Gilles Peskinea2224342020-11-19 22:14:34 +01001400 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1401 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1402 # instead.
1403 # Test SSL with non-deterministic ECDSA. Only test features that
1404 # might be affected by how ECDSA signature is performed.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001405 msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001406 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskinea2224342020-11-19 22:14:34 +01001407
1408 # To save time, only test one protocol version, since this part of
1409 # the protocol is identical in (D)TLS up to 1.2.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001410 msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001411 tests/compat.sh -m tls12 -t 'ECDSA'
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001412}
1413
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001414component_test_no_hmac_drbg_use_psa () {
1415 msg "build: Full minus HMAC_DRBG, PSA crypto in TLS"
1416 scripts/config.py full
1417 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1418 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1419 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1420
Dave Rodgman17127e92023-12-14 16:42:48 +00001421 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001422 make
1423
1424 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites"
1425 make test
1426
1427 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1428 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1429 # instead.
1430 # Test SSL with non-deterministic ECDSA. Only test features that
1431 # might be affected by how ECDSA signature is performed.
1432 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001433 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001434
1435 # To save time, only test one protocol version, since this part of
1436 # the protocol is identical in (D)TLS up to 1.2.
1437 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001438 tests/compat.sh -m tls12 -t 'ECDSA'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001439}
1440
1441component_test_psa_external_rng_no_drbg_classic () {
1442 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS"
1443 scripts/config.py full
1444 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001445 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001446 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001447 scripts/config.py unset MBEDTLS_ENTROPY_C
1448 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1449 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001450 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1451 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1452 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskine8eb29432021-02-03 20:07:11 +01001453 # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG,
1454 # the SSL test programs don't have an RNG and can't work. Explicitly
1455 # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG.
Gilles Peskine21570cf2023-12-22 11:49:50 +01001456 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001457
1458 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites"
1459 make test
1460
Gilles Peskine8eb29432021-02-03 20:07:11 +01001461 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001462 tests/ssl-opt.sh -f 'Default'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001463}
1464
1465component_test_psa_external_rng_no_drbg_use_psa () {
1466 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001467 scripts/config.py full
1468 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001469 scripts/config.py unset MBEDTLS_ENTROPY_C
1470 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1471 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinec109b372020-11-23 17:39:04 +01001472 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1473 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1474 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskine21570cf2023-12-22 11:49:50 +01001475 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001476
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001477 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites"
Gilles Peskinec109b372020-11-23 17:39:04 +01001478 make test
1479
Gilles Peskine8eb29432021-02-03 20:07:11 +01001480 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001481 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001482}
1483
Gilles Peskine4bdb2542023-04-28 19:25:25 +02001484component_test_psa_external_rng_use_psa_crypto () {
1485 msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1486 scripts/config.py full
1487 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1488 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1489 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine21570cf2023-12-22 11:49:50 +01001490 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine4bdb2542023-04-28 19:25:25 +02001491
1492 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1493 make test
1494
1495 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1496 tests/ssl-opt.sh -f 'Default\|opaque'
1497}
1498
Gilles Peskine801c4332023-04-28 21:04:28 +02001499component_test_psa_inject_entropy () {
1500 msg "build: full + MBEDTLS_PSA_INJECT_ENTROPY"
1501 scripts/config.py full
1502 scripts/config.py set MBEDTLS_PSA_INJECT_ENTROPY
1503 scripts/config.py set MBEDTLS_ENTROPY_NV_SEED
1504 scripts/config.py set MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
1505 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
1506 scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_READ
1507 scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_WRITE
Gilles Peskine21570cf2023-12-22 11:49:50 +01001508 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine801c4332023-04-28 21:04:28 +02001509
1510 msg "test: full + MBEDTLS_PSA_INJECT_ENTROPY"
1511 make test
1512}
1513
Andrzej Kurek06969fc2023-04-12 10:34:50 -04001514component_test_sw_inet_pton () {
1515 msg "build: default plus MBEDTLS_TEST_SW_INET_PTON"
1516
1517 # MBEDTLS_TEST_HOOKS required for x509_crt_parse_cn_inet_pton
1518 scripts/config.py set MBEDTLS_TEST_HOOKS
1519 make CFLAGS="-DMBEDTLS_TEST_SW_INET_PTON"
1520
1521 msg "test: default plus MBEDTLS_TEST_SW_INET_PTON"
1522 make test
1523}
1524
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001525component_test_crypto_full_md_light_only () {
1526 msg "build: crypto_full with only the light subset of MD"
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001527 scripts/config.py crypto_full
Gilles Peskine884b4622023-07-20 20:11:51 +02001528 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001529 # Disable MD
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001530 scripts/config.py unset MBEDTLS_MD_C
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01001531 # Disable direct dependencies of MD_C
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001532 scripts/config.py unset MBEDTLS_HKDF_C
1533 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
Nick Child89e82e12022-11-09 10:36:10 -06001534 scripts/config.py unset MBEDTLS_PKCS7_C
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01001535 # Disable indirect dependencies of MD_C
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001536 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # needs HMAC_DRBG
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01001537 # Disable things that would auto-enable MD_C
1538 scripts/config.py unset MBEDTLS_PKCS5_C
1539
Manuel Pégourié-Gonnard1b5ffc62023-03-14 10:11:20 +01001540 # Note: MD-light is auto-enabled in build_info.h by modules that need it,
1541 # which we haven't disabled, so no need to explicitly enable it.
Gilles Peskine21570cf2023-12-22 11:49:50 +01001542 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001543
Manuel Pégourié-Gonnard0d415212023-02-23 13:02:13 +01001544 # Make sure we don't have the HMAC functions, but the hashing functions
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001545 not grep mbedtls_md_hmac library/md.o
Manuel Pégourié-Gonnard0d415212023-02-23 13:02:13 +01001546 grep mbedtls_md library/md.o
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001547
1548 msg "test: crypto_full with only the light subset of MD"
Gilles Peskine21570cf2023-12-22 11:49:50 +01001549 make test
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001550}
1551
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001552component_test_full_no_cipher_no_psa_crypto () {
Valerio Settidf17a102023-10-23 14:14:19 +02001553 msg "build: full no CIPHER no PSA_CRYPTO_C"
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001554 scripts/config.py full
1555 scripts/config.py unset MBEDTLS_CIPHER_C
Gilles Peskine9b8dead2023-08-09 19:48:42 +02001556 # Don't pull in cipher via PSA mechanisms
1557 # (currently ignored anyway because we completely disable PSA)
1558 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Valerio Setti4529d652023-10-24 11:51:58 +02001559 # Disable features that depend on CIPHER_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001560 scripts/config.py unset MBEDTLS_CMAC_C
1561 scripts/config.py unset MBEDTLS_NIST_KW_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001562 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
Gilles Peskine64996c32024-01-23 20:25:47 +01001563 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CLIENT
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001564 scripts/config.py unset MBEDTLS_SSL_TLS_C
1565 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Valerio Setti4529d652023-10-24 11:51:58 +02001566 # Disable features that depend on PSA_CRYPTO_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001567 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
1568 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001569 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Raef Colesa7e03ad2022-09-28 09:32:48 +01001570 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01001571 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001572
Valerio Settidf17a102023-10-23 14:14:19 +02001573 msg "test: full no CIPHER no PSA_CRYPTO_C"
Gilles Peskine21570cf2023-12-22 11:49:50 +01001574 make test
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001575}
1576
Valerio Setti7e710e82023-08-25 09:14:15 +02001577# This is a common configurator and test function that is used in:
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001578# - component_test_full_no_cipher_with_psa_crypto
1579# - component_test_full_no_cipher_with_psa_crypto_config
Valerio Setti7e710e82023-08-25 09:14:15 +02001580# It accepts 2 input parameters:
1581# - $1: boolean value which basically reflects status of MBEDTLS_PSA_CRYPTO_CONFIG
1582# - $2: a text string which describes the test component
Valerio Setti5b4039f2023-10-24 13:41:44 +02001583common_test_full_no_cipher_with_psa_crypto () {
Valerio Setti7e710e82023-08-25 09:14:15 +02001584 USE_CRYPTO_CONFIG="$1"
1585 COMPONENT_DESCRIPTION="$2"
1586
1587 msg "build: $COMPONENT_DESCRIPTION"
1588
1589 scripts/config.py full
1590 scripts/config.py unset MBEDTLS_CIPHER_C
1591
1592 if [ "$USE_CRYPTO_CONFIG" -eq 1 ]; then
Valerio Setti862021a2023-10-24 13:52:06 +02001593 # The built-in implementation of the following algs/key-types depends
1594 # on CIPHER_C so we disable them.
1595 # This does not hold for KEY_TYPE_CHACHA20 and ALG_CHACHA20_POLY1305
1596 # so we keep them enabled.
Valerio Setti7e710e82023-08-25 09:14:15 +02001597 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CCM_STAR_NO_TAG
Valerio Setti7e710e82023-08-25 09:14:15 +02001598 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CMAC
1599 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_NO_PADDING
1600 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_PKCS7
1601 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CFB
1602 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CTR
1603 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_ECB_NO_PADDING
1604 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_OFB
1605 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_STREAM_CIPHER
Valerio Setti7e710e82023-08-25 09:14:15 +02001606 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_KEY_TYPE_DES
Valerio Setti7e710e82023-08-25 09:14:15 +02001607 else
1608 # Don't pull in cipher via PSA mechanisms
1609 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Valerio Setti287f6d12023-10-24 14:12:59 +02001610 # Disable cipher modes/keys that make PSA depend on CIPHER_C.
1611 # Keep CHACHA20 and CHACHAPOLY enabled since they do not depend on CIPHER_C.
1612 scripts/config.py unset-all MBEDTLS_CIPHER_MODE
Valerio Setti7e710e82023-08-25 09:14:15 +02001613 fi
Valerio Settic84d9402023-10-23 14:58:25 +02001614 # The following modules directly depends on CIPHER_C
Valerio Setti7e710e82023-08-25 09:14:15 +02001615 scripts/config.py unset MBEDTLS_CMAC_C
Valerio Setti7e710e82023-08-25 09:14:15 +02001616 scripts/config.py unset MBEDTLS_NIST_KW_C
Valerio Settifb0b0ff2023-10-23 14:58:55 +02001617
Gilles Peskine21570cf2023-12-22 11:49:50 +01001618 make
Gilles Peskine636c26a2020-03-04 20:46:15 +01001619
Valerio Setti7e710e82023-08-25 09:14:15 +02001620 # Ensure that CIPHER_C was not re-enabled
1621 not grep mbedtls_cipher_init library/cipher.o
1622
1623 msg "test: $COMPONENT_DESCRIPTION"
1624 make test
1625}
1626
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001627component_test_full_no_cipher_with_psa_crypto() {
Valerio Setti5b4039f2023-10-24 13:41:44 +02001628 common_test_full_no_cipher_with_psa_crypto 0 "full no CIPHER no CRYPTO_CONFIG"
Valerio Setti7e710e82023-08-25 09:14:15 +02001629}
1630
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001631component_test_full_no_cipher_with_psa_crypto_config() {
Valerio Setti5b4039f2023-10-24 13:41:44 +02001632 common_test_full_no_cipher_with_psa_crypto 1 "full no CIPHER"
Valerio Setti7e710e82023-08-25 09:14:15 +02001633}
1634
Valerio Settibdfecb62023-11-07 15:37:20 +01001635component_test_full_no_ccm() {
1636 msg "build: full no PSA_WANT_ALG_CCM"
1637
1638 # Full config enables:
1639 # - USE_PSA_CRYPTO so that TLS code dispatches cipher/AEAD to PSA
1640 # - CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated
1641 scripts/config.py full
1642
1643 # Disable PSA_WANT_ALG_CCM so that CCM is not supported in PSA. CCM_C is still
1644 # enabled, but not used from TLS since USE_PSA is set.
1645 # This is helpful to ensure that TLS tests below have proper dependencies.
1646 #
1647 # Note: also PSA_WANT_ALG_CCM_STAR_NO_TAG is enabled, but it does not cause
1648 # PSA_WANT_ALG_CCM to be re-enabled.
1649 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM
1650
Gilles Peskine21570cf2023-12-22 11:49:50 +01001651 make
Valerio Settibdfecb62023-11-07 15:37:20 +01001652
1653 msg "test: full no PSA_WANT_ALG_CCM"
Valerio Settiff2b06a2023-11-08 12:35:36 +01001654 make test
Valerio Settibdfecb62023-11-07 15:37:20 +01001655}
1656
1657component_test_full_no_ccm_star_no_tag() {
1658 msg "build: full no PSA_WANT_ALG_CCM_STAR_NO_TAG"
1659
1660 # Full config enables CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated
1661 scripts/config.py full
1662
1663 # Disable CCM_STAR_NO_TAG, which is the target of this test, as well as all
1664 # other components that enable MBEDTLS_PSA_BUILTIN_CIPHER internal symbol.
1665 # This basically disables all unauthenticated ciphers on the PSA side, while
1666 # keeping AEADs enabled.
1667 #
1668 # Note: PSA_WANT_ALG_CCM is enabled, but it does not cause
1669 # PSA_WANT_ALG_CCM_STAR_NO_TAG to be re-enabled.
1670 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
1671 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_STREAM_CIPHER
1672 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR
1673 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB
1674 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB
1675 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING
1676 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
1677 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
1678
Gilles Peskine21570cf2023-12-22 11:49:50 +01001679 make
Valerio Settibdfecb62023-11-07 15:37:20 +01001680
1681 # Ensure MBEDTLS_PSA_BUILTIN_CIPHER was not enabled
Valerio Settibdfecb62023-11-07 15:37:20 +01001682 not grep mbedtls_psa_cipher library/psa_crypto_cipher.o
Valerio Settiff2b06a2023-11-08 12:35:36 +01001683
1684 msg "test: full no PSA_WANT_ALG_CCM_STAR_NO_TAG"
Gilles Peskine636c26a2020-03-04 20:46:15 +01001685 make test
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001686}
Gilles Peskine636c26a2020-03-04 20:46:15 +01001687
Valerio Settie1655b82023-01-03 15:35:25 +01001688component_test_full_no_bignum () {
1689 msg "build: full minus bignum"
1690 scripts/config.py full
1691 scripts/config.py unset MBEDTLS_BIGNUM_C
1692 # Direct dependencies of bignum
1693 scripts/config.py unset MBEDTLS_ECP_C
1694 scripts/config.py unset MBEDTLS_RSA_C
1695 scripts/config.py unset MBEDTLS_DHM_C
1696 # Direct dependencies of ECP
1697 scripts/config.py unset MBEDTLS_ECDH_C
1698 scripts/config.py unset MBEDTLS_ECDSA_C
1699 scripts/config.py unset MBEDTLS_ECJPAKE_C
1700 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Valerio Setti22d0a792023-06-14 17:23:19 +02001701 # Disable what auto-enables ECP_LIGHT
1702 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
1703 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
Valerio Settie1655b82023-01-03 15:35:25 +01001704 # Indirect dependencies of ECP
1705 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1706 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1707 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1708 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1709 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1710 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
1711 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1712 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
1713 # Direct dependencies of DHM
1714 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
1715 # Direct dependencies of RSA
1716 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
1717 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
1718 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1719 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
1720 # PK and its dependencies
1721 scripts/config.py unset MBEDTLS_PK_C
1722 scripts/config.py unset MBEDTLS_PK_PARSE_C
1723 scripts/config.py unset MBEDTLS_PK_WRITE_C
1724 scripts/config.py unset MBEDTLS_X509_USE_C
1725 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
1726 scripts/config.py unset MBEDTLS_X509_CRL_PARSE_C
1727 scripts/config.py unset MBEDTLS_X509_CSR_PARSE_C
1728 scripts/config.py unset MBEDTLS_X509_CREATE_C
1729 scripts/config.py unset MBEDTLS_X509_CRT_WRITE_C
1730 scripts/config.py unset MBEDTLS_X509_CSR_WRITE_C
1731 scripts/config.py unset MBEDTLS_PKCS7_C
1732 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
1733 scripts/config.py unset MBEDTLS_SSL_ASYNC_PRIVATE
1734 scripts/config.py unset MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1735
Gilles Peskine21570cf2023-12-22 11:49:50 +01001736 make
Valerio Settie1655b82023-01-03 15:35:25 +01001737
1738 msg "test: full minus bignum"
1739 make test
1740}
1741
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001742component_test_tls1_2_default_stream_cipher_only () {
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001743 msg "build: default with only stream cipher"
1744
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001745 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001746 scripts/config.py unset MBEDTLS_GCM_C
1747 scripts/config.py unset MBEDTLS_CCM_C
1748 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001749 # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001750 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001751 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001752 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001753 # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
1754 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001755 # Modules that depend on AEAD
Przemek Stekield582a012022-09-28 07:59:01 +02001756 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001757 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001758
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001759 make
1760
1761 msg "test: default with only stream cipher"
1762 make test
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001763
1764 # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite.
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001765}
1766
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001767component_test_tls1_2_default_stream_cipher_only_use_psa () {
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001768 msg "build: default with only stream cipher use psa"
Przemek Stekiel9550c052022-09-28 09:51:55 +02001769
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001770 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001771 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel9550c052022-09-28 09:51:55 +02001772 scripts/config.py unset MBEDTLS_GCM_C
1773 scripts/config.py unset MBEDTLS_CCM_C
1774 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001775 # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
Przemek Stekiel9550c052022-09-28 09:51:55 +02001776 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001777 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekiel9550c052022-09-28 09:51:55 +02001778 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001779 # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
1780 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001781 # Modules that depend on AEAD
Przemek Stekiel9550c052022-09-28 09:51:55 +02001782 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001783 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel9550c052022-09-28 09:51:55 +02001784
Przemek Stekiel9550c052022-09-28 09:51:55 +02001785 make
1786
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001787 msg "test: default with only stream cipher use psa"
Przemek Stekiel9550c052022-09-28 09:51:55 +02001788 make test
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001789
1790 # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite.
Przemek Stekiel9550c052022-09-28 09:51:55 +02001791}
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001792
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001793component_test_tls1_2_default_cbc_legacy_cipher_only () {
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001794 msg "build: default with only CBC-legacy cipher"
1795
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001796 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001797 scripts/config.py unset MBEDTLS_GCM_C
1798 scripts/config.py unset MBEDTLS_CCM_C
1799 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001800 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1801 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1802 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001803 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001804 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001805 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001806 # Modules that depend on AEAD
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001807 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001808 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001809
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001810 make
1811
1812 msg "test: default with only CBC-legacy cipher"
1813 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001814
1815 msg "test: default with only CBC-legacy cipher - ssl-opt.sh (subset)"
1816 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001817}
1818
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001819component_test_tls1_2_deafult_cbc_legacy_cipher_only_use_psa () {
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001820 msg "build: default with only CBC-legacy cipher use psa"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001821
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001822 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001823 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001824 scripts/config.py unset MBEDTLS_GCM_C
1825 scripts/config.py unset MBEDTLS_CCM_C
1826 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001827 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1828 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1829 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001830 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001831 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001832 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001833 # Modules that depend on AEAD
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001834 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001835 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001836
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001837 make
1838
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001839 msg "test: default with only CBC-legacy cipher use psa"
1840 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001841
1842 msg "test: default with only CBC-legacy cipher use psa - ssl-opt.sh (subset)"
1843 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001844}
1845
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001846component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only () {
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001847 msg "build: default with only CBC-legacy and CBC-EtM ciphers"
1848
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001849 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001850 scripts/config.py unset MBEDTLS_GCM_C
1851 scripts/config.py unset MBEDTLS_CCM_C
1852 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001853 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1854 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1855 # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
1856 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1857 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001858 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001859 # Modules that depend on AEAD
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001860 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001861 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001862
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001863 make
1864
1865 msg "test: default with only CBC-legacy and CBC-EtM ciphers"
1866 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001867
1868 msg "test: default with only CBC-legacy and CBC-EtM ciphers - ssl-opt.sh (subset)"
1869 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001870}
1871
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001872component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only_use_psa () {
1873 msg "build: default with only CBC-legacy and CBC-EtM ciphers use psa"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001874
1875 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001876 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001877 scripts/config.py unset MBEDTLS_GCM_C
1878 scripts/config.py unset MBEDTLS_CCM_C
1879 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001880 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1881 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1882 # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
1883 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1884 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001885 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001886 # Modules that depend on AEAD
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001887 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001888 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001889
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001890 make
1891
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001892 msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001893 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001894
1895 msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa - ssl-opt.sh (subset)"
1896 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001897}
1898
Valerio Setti9f0ec532022-11-08 13:03:24 +01001899# We're not aware of any other (open source) implementation of EC J-PAKE in TLS
1900# that we could use for interop testing. However, we now have sort of two
1901# implementations ourselves: one using PSA, the other not. At least test that
1902# these two interoperate with each other.
1903component_test_tls1_2_ecjpake_compatibility() {
1904 msg "build: TLS1.2 server+client w/ EC-JPAKE w/o USE_PSA"
1905 scripts/config.py set MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Gilles Peskineedc84562023-09-20 15:03:18 +02001906 # Explicitly make lib first to avoid a race condition:
1907 # https://github.com/Mbed-TLS/mbedtls/issues/8229
1908 make lib
Valerio Setti9f0ec532022-11-08 13:03:24 +01001909 make -C programs ssl/ssl_server2 ssl/ssl_client2
1910 cp programs/ssl/ssl_server2 s2_no_use_psa
1911 cp programs/ssl/ssl_client2 c2_no_use_psa
1912
1913 msg "build: TLS1.2 server+client w/ EC-JPAKE w/ USE_PSA"
1914 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1915 make clean
Gilles Peskineedc84562023-09-20 15:03:18 +02001916 make lib
Valerio Setti9f0ec532022-11-08 13:03:24 +01001917 make -C programs ssl/ssl_server2 ssl/ssl_client2
1918 make -C programs test/udp_proxy test/query_compile_time_config
1919
Valerio Setti70e02902022-12-02 16:21:56 +01001920 msg "test: server w/o USE_PSA - client w/ USE_PSA, text password"
1921 P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: working, TLS"
1922 msg "test: server w/o USE_PSA - client w/ USE_PSA, opaque password"
1923 P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: opaque password client only, working, TLS"
1924 msg "test: client w/o USE_PSA - server w/ USE_PSA, text password"
1925 P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: working, TLS"
1926 msg "test: client w/o USE_PSA - server w/ USE_PSA, opaque password"
1927 P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: opaque password server only, working, TLS"
Valerio Setti9f0ec532022-11-08 13:03:24 +01001928
1929 rm s2_no_use_psa c2_no_use_psa
1930}
1931
Gilles Peskine636c26a2020-03-04 20:46:15 +01001932component_test_everest () {
1933 msg "build: Everest ECDH context (ASan build)" # ~ 6 min
1934 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1935 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan .
1936 make
1937
1938 msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
1939 make test
1940
Gilles Peskine6848d172023-11-02 19:58:03 +01001941 msg "test: metatests (clang, ASan)"
1942 tests/scripts/run-metatests.sh any asan
1943
Gilles Peskine636c26a2020-03-04 20:46:15 +01001944 msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
1945 tests/ssl-opt.sh -f ECDH
1946
1947 msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
1948 # Exclude some symmetric ciphers that are redundant here to gain time.
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02001949 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA'
Gilles Peskine636c26a2020-03-04 20:46:15 +01001950}
1951
Gilles Peskined3beca92020-07-03 00:15:37 +02001952component_test_everest_curve25519_only () {
1953 msg "build: Everest ECDH context, only Curve25519" # ~ 6 min
Gilles Peskined3beca92020-07-03 00:15:37 +02001954 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1955 scripts/config.py unset MBEDTLS_ECDSA_C
1956 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1957 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
TRodziewicz7c1d41d2021-04-23 13:33:44 +02001958 scripts/config.py unset MBEDTLS_ECJPAKE_C
Gilles Peskined3beca92020-07-03 00:15:37 +02001959 # Disable all curves
Valerio Setti2e0275d2023-07-28 16:33:13 +02001960 scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED"
Gilles Peskined3beca92020-07-03 00:15:37 +02001961 scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED
1962
Dave Rodgman17127e92023-12-14 16:42:48 +00001963 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskined3beca92020-07-03 00:15:37 +02001964
1965 msg "test: Everest ECDH context, only Curve25519" # ~ 50s
1966 make test
1967}
1968
Gilles Peskine8f073122018-11-27 15:58:47 +01001969component_test_small_ssl_out_content_len () {
1970 msg "build: small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001971 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
1972 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Dave Rodgman17127e92023-12-14 16:42:48 +00001973 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001974 make
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001975
Gilles Peskine8f073122018-11-27 15:58:47 +01001976 msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001977 tests/ssl-opt.sh -f "Max fragment\|Large packet"
Gilles Peskine8f073122018-11-27 15:58:47 +01001978}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001979
Gilles Peskine8f073122018-11-27 15:58:47 +01001980component_test_small_ssl_in_content_len () {
1981 msg "build: small SSL_IN_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001982 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096
1983 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384
Dave Rodgman17127e92023-12-14 16:42:48 +00001984 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001985 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001986
Gilles Peskine8f073122018-11-27 15:58:47 +01001987 msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001988 tests/ssl-opt.sh -f "Max fragment"
Gilles Peskine8f073122018-11-27 15:58:47 +01001989}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001990
Gilles Peskine8f073122018-11-27 15:58:47 +01001991component_test_small_ssl_dtls_max_buffering () {
1992 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001993 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000
Dave Rodgman17127e92023-12-14 16:42:48 +00001994 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001995 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001996
Gilles Peskine8f073122018-11-27 15:58:47 +01001997 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001998 tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg"
Gilles Peskine8f073122018-11-27 15:58:47 +01001999}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002000
Gilles Peskine8f073122018-11-27 15:58:47 +01002001component_test_small_mbedtls_ssl_dtls_max_buffering () {
2002 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1"
Gilles Peskine636c26a2020-03-04 20:46:15 +01002003 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190
Dave Rodgman17127e92023-12-14 16:42:48 +00002004 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01002005 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002006
Gilles Peskine8f073122018-11-27 15:58:47 +01002007 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002008 tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket"
Gilles Peskine8f073122018-11-27 15:58:47 +01002009}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002010
Gilles Peskine75cc7712019-09-06 19:47:17 +02002011component_test_psa_collect_statuses () {
2012 msg "build+test: psa_collect_statuses" # ~30s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002013 scripts/config.py full
Gilles Peskine21570cf2023-12-22 11:49:50 +01002014 tests/scripts/psa_collect_statuses.py
Gilles Peskine75cc7712019-09-06 19:47:17 +02002015 # Check that psa_crypto_init() succeeded at least once
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002016 grep -q '^0:psa_crypto_init:' tests/statuses.log
Gilles Peskine75cc7712019-09-06 19:47:17 +02002017 rm -f tests/statuses.log
2018}
2019
Gilles Peskine8f073122018-11-27 15:58:47 +01002020component_test_full_cmake_clang () {
2021 msg "build: cmake, full config, clang" # ~ 50s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002022 scripts/config.py full
Gilles Peskineda6017c2022-10-30 21:02:40 +01002023 CC=clang CXX=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On -D TEST_CPP=1 .
Gilles Peskine8f073122018-11-27 15:58:47 +01002024 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002025
k-stachowiak0291cb72019-06-26 15:52:12 +02002026 msg "test: main suites (full config, clang)" # ~ 5s
Gilles Peskine8f073122018-11-27 15:58:47 +01002027 make test
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +01002028
Gilles Peskineda6017c2022-10-30 21:02:40 +01002029 msg "test: cpp_dummy_build (full config, clang)" # ~ 1s
2030 programs/test/cpp_dummy_build
2031
Gilles Peskine6848d172023-11-02 19:58:03 +01002032 msg "test: metatests (clang)"
Gilles Peskine102aea22023-11-03 18:05:38 +01002033 tests/scripts/run-metatests.sh any pthread
Gilles Peskine6848d172023-11-02 19:58:03 +01002034
Gilles Peskine82b27272019-06-14 18:27:03 +02002035 msg "program demos (full config, clang)" # ~10s
2036 tests/scripts/run_demos.py
2037
k-stachowiak0291cb72019-06-26 15:52:12 +02002038 msg "test: psa_constant_names (full config, clang)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002039 tests/scripts/test_psa_constant_names.py
Gilles Peskine69e8f7f2020-02-26 19:51:43 +01002040
Gilles Peskine8f073122018-11-27 15:58:47 +01002041 msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002042 tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002043
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02002044 msg "test: compat.sh NULL (full config)" # ~ 2 min
Gilles Peskinee29203b2023-08-27 21:43:00 +02002045 tests/compat.sh -e '^$' -f 'NULL'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002046
Gilles Peskine8f073122018-11-27 15:58:47 +01002047 msg "test: compat.sh ARIA + ChachaPoly"
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +01002048 env OPENSSL="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Gilles Peskine8f073122018-11-27 15:58:47 +01002049}
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002050
Gilles Peskine0c671602022-11-29 16:01:41 +01002051skip_suites_without_constant_flow () {
2052 # Skip the test suites that don't have any constant-flow annotations.
2053 # This will need to be adjusted if we ever start declaring things as
2054 # secret from macros or functions inside tests/include or tests/src.
2055 SKIP_TEST_SUITES=$(
2056 git -C tests/suites grep -L TEST_CF_ 'test_suite_*.function' |
2057 sed 's/test_suite_//; s/\.function$//' |
2058 tr '\n' ,)
2059 export SKIP_TEST_SUITES
2060}
2061
Dave Rodgman246210e2023-07-31 18:07:44 +01002062skip_all_except_given_suite () {
2063 # Skip all but the given test suite
2064 SKIP_TEST_SUITES=$(
2065 ls -1 tests/suites/test_suite_*.function |
2066 grep -v $1.function |
2067 sed 's/tests.suites.test_suite_//; s/\.function$//' |
2068 tr '\n' ,)
2069 export SKIP_TEST_SUITES
2070}
2071
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02002072component_test_memsan_constant_flow () {
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02002073 # This tests both (1) accesses to undefined memory, and (2) branches or
2074 # memory access depending on secret values. To distinguish between those:
2075 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
2076 # - or alternatively, change the build type to MemSanDbg, which enables
2077 # origin tracking and nicer stack traces (which are useful for debugging
2078 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002079 msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
2080 scripts/config.py full
2081 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
2082 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2083 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
2084 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
2085 make
2086
2087 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, Msan + constant flow)"
2088 make test
2089}
2090
2091component_test_memsan_constant_flow_psa () {
2092 # This tests both (1) accesses to undefined memory, and (2) branches or
2093 # memory access depending on secret values. To distinguish between those:
2094 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
2095 # - or alternatively, change the build type to MemSanDbg, which enables
2096 # origin tracking and nicer stack traces (which are useful for debugging
2097 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02002098 msg "build: cmake MSan (clang), full config with constant flow testing"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02002099 scripts/config.py full
2100 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
2101 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
2102 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
2103 make
2104
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02002105 msg "test: main suites (Msan + constant flow)"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02002106 make test
2107}
2108
Bence Szépkúti0354d042023-12-06 16:14:37 +01002109component_release_test_valgrind_constant_flow () {
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002110 # This tests both (1) everything that valgrind's memcheck usually checks
2111 # (heap buffer overflows, use of uninitialized memory, use-after-free,
2112 # etc.) and (2) branches or memory access depending on secret values,
2113 # which will be reported as uninitialized memory. To distinguish between
2114 # secret and actually uninitialized:
2115 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
2116 # - or alternatively, build with debug info and manually run the offending
2117 # test suite with valgrind --track-origins=yes, then check if the origin
2118 # was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002119 msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
2120 scripts/config.py full
2121 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
2122 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine0c671602022-11-29 16:01:41 +01002123 skip_suites_without_constant_flow
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002124 cmake -D CMAKE_BUILD_TYPE:String=Release .
2125 make
2126
2127 # this only shows a summary of the results (how many of each type)
2128 # details are left in Testing/<date>/DynamicAnalysis.xml
Gilles Peskine0c671602022-11-29 16:01:41 +01002129 msg "test: some suites (full minus MBEDTLS_USE_PSA_CRYPTO, valgrind + constant flow)"
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002130 make memcheck
Dave Rodgman246210e2023-07-31 18:07:44 +01002131
2132 # Test asm path in constant time module - by default, it will test the plain C
2133 # path under Valgrind or Memsan. Running only the constant_time tests is fast (<1s)
2134 msg "test: valgrind asm constant_time"
2135 scripts/config.py --force set MBEDTLS_TEST_CONSTANT_FLOW_ASM
2136 skip_all_except_given_suite test_suite_constant_time
2137 cmake -D CMAKE_BUILD_TYPE:String=Release .
2138 make clean
2139 make
2140 make memcheck
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002141}
2142
Bence Szépkúti0354d042023-12-06 16:14:37 +01002143component_release_test_valgrind_constant_flow_psa () {
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002144 # This tests both (1) everything that valgrind's memcheck usually checks
2145 # (heap buffer overflows, use of uninitialized memory, use-after-free,
2146 # etc.) and (2) branches or memory access depending on secret values,
2147 # which will be reported as uninitialized memory. To distinguish between
2148 # secret and actually uninitialized:
2149 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
2150 # - or alternatively, build with debug info and manually run the offending
2151 # test suite with valgrind --track-origins=yes, then check if the origin
2152 # was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002153 msg "build: cmake release GCC, full config with constant flow testing"
2154 scripts/config.py full
2155 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
Gilles Peskine0c671602022-11-29 16:01:41 +01002156 skip_suites_without_constant_flow
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002157 cmake -D CMAKE_BUILD_TYPE:String=Release .
2158 make
2159
2160 # this only shows a summary of the results (how many of each type)
2161 # details are left in Testing/<date>/DynamicAnalysis.xml
Gilles Peskine0c671602022-11-29 16:01:41 +01002162 msg "test: some suites (valgrind + constant flow)"
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002163 make memcheck
2164}
2165
Janos Follath9338cac2023-10-04 18:55:39 +01002166component_test_tsan () {
2167 msg "build: TSan (clang)"
Paul Elliott356597f2023-12-01 18:09:41 +00002168 scripts/config.py full
Janos Follath9338cac2023-10-04 18:55:39 +01002169 scripts/config.py set MBEDTLS_THREADING_C
2170 scripts/config.py set MBEDTLS_THREADING_PTHREAD
2171
2172 CC=clang cmake -D CMAKE_BUILD_TYPE:String=TSan .
2173 make
2174
2175 msg "test: main suites (TSan)"
2176 make test
2177}
2178
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002179component_test_default_no_deprecated () {
Gilles Peskine8386ea22020-04-30 09:07:29 +02002180 # Test that removing the deprecated features from the default
2181 # configuration leaves something consistent.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002182 msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s
2183 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
Dave Rodgmanea03ef92023-12-19 12:19:59 +00002184 make CFLAGS='-O -Werror -Wall -Wextra'
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002185
2186 msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s
2187 make test
2188}
2189
2190component_test_full_no_deprecated () {
Gilles Peskine30de2e82020-04-20 21:39:22 +02002191 msg "build: make, full_no_deprecated config" # ~ 30s
2192 scripts/config.py full_no_deprecated
Dave Rodgman84125a12024-01-02 11:42:38 +00002193 make CFLAGS='-O -Werror -Wall -Wextra'
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002194
Gilles Peskine30de2e82020-04-20 21:39:22 +02002195 msg "test: make, full_no_deprecated config" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002196 make test
Valerio Setti41b5fb62023-01-09 12:20:45 +01002197
2198 msg "test: ensure that X509 has no direct dependency on BIGNUM_C"
2199 not grep mbedtls_mpi library/libmbedx509.a
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002200}
2201
Gilles Peskine8386ea22020-04-30 09:07:29 +02002202component_test_full_no_deprecated_deprecated_warning () {
2203 # Test that there is nothing deprecated in "full_no_deprecated".
2204 # A deprecated feature would trigger a warning (made fatal) from
2205 # MBEDTLS_DEPRECATED_WARNING.
Gilles Peskine30de2e82020-04-20 21:39:22 +02002206 msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s
2207 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002208 scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED
2209 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Dave Rodgman84125a12024-01-02 11:42:38 +00002210 make CFLAGS='-O -Werror -Wall -Wextra'
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002211
Gilles Peskine30de2e82020-04-20 21:39:22 +02002212 msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002213 make test
2214}
2215
Gilles Peskine8386ea22020-04-30 09:07:29 +02002216component_test_full_deprecated_warning () {
2217 # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes
2218 # with only certain whitelisted types of warnings.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002219 msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002220 scripts/config.py full
2221 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002222 # Expect warnings from '#warning' directives in check_config.h.
Dave Rodgmanbc8e61d2023-12-19 14:07:15 +00002223 # Note that gcc is required to allow the use of -Wno-error=cpp, which allows us to
2224 # display #warning messages without them being treated as errors.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002225 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +01002226
Gilles Peskine8386ea22020-04-30 09:07:29 +02002227 msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
2228 # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features.
2229 # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002230 # Expect warnings from '#warning' directives in check_config.h and
2231 # from the use of deprecated functions in test suites.
Gilles Peskine21570cf2023-12-22 11:49:50 +01002232 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests
Gilles Peskine841b14b2019-11-26 17:37:37 +01002233
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002234 msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s
2235 make test
Gilles Peskine82b27272019-06-14 18:27:03 +02002236
2237 msg "program demos: full config + MBEDTLS_TEST_DEPRECATED" # ~10s
2238 tests/scripts/run_demos.py
Gilles Peskine8f073122018-11-27 15:58:47 +01002239}
Jaeden Ameroed93bdc2018-11-02 16:57:24 +00002240
Gilles Peskineec541fe2020-01-31 14:24:14 +01002241# Check that the specified libraries exist and are empty.
2242are_empty_libraries () {
2243 nm "$@" >/dev/null 2>/dev/null
2244 ! nm "$@" 2>/dev/null | grep -v ':$' | grep .
2245}
2246
2247component_build_crypto_default () {
2248 msg "build: make, crypto only"
2249 scripts/config.py crypto
Gilles Peskine6bb39152020-02-03 11:59:20 +01002250 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002251 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01002252}
2253
2254component_build_crypto_full () {
2255 msg "build: make, crypto only, full config"
2256 scripts/config.py crypto_full
Gilles Peskine21570cf2023-12-22 11:49:50 +01002257 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002258 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01002259}
2260
Gilles Peskinefc4f11b2022-10-21 19:34:54 +02002261component_test_crypto_for_psa_service () {
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002262 msg "build: make, config for PSA crypto service"
2263 scripts/config.py crypto
2264 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
2265 # Disable things that are not needed for just cryptography, to
2266 # reach a configuration that would be typical for a PSA cryptography
2267 # service providing all implemented PSA algorithms.
2268 # System stuff
2269 scripts/config.py unset MBEDTLS_ERROR_C
2270 scripts/config.py unset MBEDTLS_TIMING_C
Gilles Peskine78bffd12022-10-25 21:02:33 +02002271 scripts/config.py unset MBEDTLS_VERSION_FEATURES
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002272 # Crypto stuff with no PSA interface
2273 scripts/config.py unset MBEDTLS_BASE64_C
Gilles Peskine649e04e2022-10-25 21:05:57 +02002274 # Keep MBEDTLS_CIPHER_C because psa_crypto_cipher, CCM and GCM need it.
Gilles Peskineb06f0712022-10-25 21:06:11 +02002275 scripts/config.py unset MBEDTLS_HKDF_C # PSA's HKDF is independent
Gilles Peskine649e04e2022-10-25 21:05:57 +02002276 # Keep MBEDTLS_MD_C because deterministic ECDSA needs it for HMAC_DRBG.
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002277 scripts/config.py unset MBEDTLS_NIST_KW_C
2278 scripts/config.py unset MBEDTLS_PEM_PARSE_C
2279 scripts/config.py unset MBEDTLS_PEM_WRITE_C
2280 scripts/config.py unset MBEDTLS_PKCS12_C
2281 scripts/config.py unset MBEDTLS_PKCS5_C
Gilles Peskinefcee7402022-10-11 21:15:24 +02002282 # MBEDTLS_PK_PARSE_C and MBEDTLS_PK_WRITE_C are actually currently needed
2283 # in PSA code to work with RSA keys. We don't require users to set those:
2284 # they will be reenabled in build_info.h.
Gilles Peskine1f108072022-10-25 21:02:56 +02002285 scripts/config.py unset MBEDTLS_PK_C
Gilles Peskinefcee7402022-10-11 21:15:24 +02002286 scripts/config.py unset MBEDTLS_PK_PARSE_C
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002287 scripts/config.py unset MBEDTLS_PK_WRITE_C
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002288 make CFLAGS='-O1 -Werror' all test
2289 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
2290}
2291
Gilles Peskineec541fe2020-01-31 14:24:14 +01002292component_build_crypto_baremetal () {
2293 msg "build: make, crypto only, baremetal config"
2294 scripts/config.py crypto_baremetal
David Horstmann61faf662021-11-30 11:40:54 +00002295 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002296 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01002297}
Daniel Axtens446af202020-09-02 21:30:13 +10002298support_build_crypto_baremetal () {
Daniel Axtens814c8132020-08-31 14:22:58 +10002299 support_build_baremetal "$@"
2300}
2301
2302component_build_baremetal () {
2303 msg "build: make, baremetal config"
2304 scripts/config.py baremetal
David Horstmann61faf662021-11-30 11:40:54 +00002305 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Daniel Axtens814c8132020-08-31 14:22:58 +10002306}
2307support_build_baremetal () {
Daniel Axtens446af202020-09-02 21:30:13 +10002308 # Older Glibc versions include time.h from other headers such as stdlib.h,
2309 # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this
2310 # problem, Ubuntu 18.04 is ok.
2311 ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h
2312}
Gilles Peskineec541fe2020-01-31 14:24:14 +01002313
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002314# depends.py family of tests
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002315component_test_depends_py_cipher_id () {
2316 msg "test/build: depends.py cipher_id (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002317 tests/scripts/depends.py cipher_id --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002318}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00002319
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002320component_test_depends_py_cipher_chaining () {
2321 msg "test/build: depends.py cipher_chaining (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002322 tests/scripts/depends.py cipher_chaining --unset-use-psa
John Durkopc14be902020-08-20 06:16:41 -07002323}
2324
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002325component_test_depends_py_cipher_padding () {
2326 msg "test/build: depends.py cipher_padding (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002327 tests/scripts/depends.py cipher_padding --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002328}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00002329
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002330component_test_depends_py_curves () {
2331 msg "test/build: depends.py curves (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002332 tests/scripts/depends.py curves --unset-use-psa
John Durkop2ec2eaa2020-08-24 18:29:15 -07002333}
2334
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002335component_test_depends_py_hashes () {
2336 msg "test/build: depends.py hashes (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002337 tests/scripts/depends.py hashes --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002338}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002339
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002340component_test_depends_py_kex () {
2341 msg "test/build: depends.py kex (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002342 tests/scripts/depends.py kex --unset-use-psa
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002343}
2344
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002345component_test_depends_py_pkalgs () {
2346 msg "test/build: depends.py pkalgs (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002347 tests/scripts/depends.py pkalgs --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002348}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002349
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002350# PSA equivalents of the depends.py tests
2351component_test_depends_py_cipher_id_psa () {
2352 msg "test/build: depends.py cipher_id (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002353 tests/scripts/depends.py cipher_id
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002354}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002355
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002356component_test_depends_py_cipher_chaining_psa () {
2357 msg "test/build: depends.py cipher_chaining (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002358 tests/scripts/depends.py cipher_chaining
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002359}
2360
2361component_test_depends_py_cipher_padding_psa () {
2362 msg "test/build: depends.py cipher_padding (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002363 tests/scripts/depends.py cipher_padding
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002364}
2365
2366component_test_depends_py_curves_psa () {
2367 msg "test/build: depends.py curves (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002368 tests/scripts/depends.py curves
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002369}
2370
2371component_test_depends_py_hashes_psa () {
2372 msg "test/build: depends.py hashes (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002373 tests/scripts/depends.py hashes
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002374}
2375
2376component_test_depends_py_kex_psa () {
2377 msg "test/build: depends.py kex (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002378 tests/scripts/depends.py kex
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002379}
2380
2381component_test_depends_py_pkalgs_psa () {
2382 msg "test/build: depends.py pkalgs (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002383 tests/scripts/depends.py pkalgs
Gilles Peskine8f073122018-11-27 15:58:47 +01002384}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002385
Dave Rodgman1a034dc2023-01-20 13:18:05 +00002386component_build_no_pk_rsa_alt_support () {
2387 msg "build: !MBEDTLS_PK_RSA_ALT_SUPPORT" # ~30s
2388
2389 scripts/config.py full
2390 scripts/config.py unset MBEDTLS_PK_RSA_ALT_SUPPORT
2391 scripts/config.py set MBEDTLS_RSA_C
2392 scripts/config.py set MBEDTLS_X509_CRT_WRITE_C
2393
2394 # Only compile - this is primarily to test for compile issues
Dave Rodgman84125a12024-01-02 11:42:38 +00002395 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy'
Dave Rodgman1a034dc2023-01-20 13:18:05 +00002396}
2397
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002398component_build_module_alt () {
2399 msg "build: MBEDTLS_XXX_ALT" # ~30s
2400 scripts/config.py full
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002401
2402 # Disable options that are incompatible with some ALT implementations:
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002403 # aesni.c and padlock.c reference mbedtls_aes_context fields directly.
2404 scripts/config.py unset MBEDTLS_AESNI_C
2405 scripts/config.py unset MBEDTLS_PADLOCK_C
Jerry Yue51eddc2023-01-11 14:16:08 +08002406 scripts/config.py unset MBEDTLS_AESCE_C
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002407 # MBEDTLS_ECP_RESTARTABLE is documented as incompatible.
2408 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002409 # You can only have one threading implementation: alt or pthread, not both.
2410 scripts/config.py unset MBEDTLS_THREADING_PTHREAD
Gilles Peskine5c3f18d2021-05-31 21:21:12 +02002411 # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields
2412 # directly and assumes the implementation works with partial groups.
2413 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
Dave Rodgman5b89c552023-10-10 14:59:02 +01002414 # MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*
2415 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
2416 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00002417 # MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*
2418 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
2419 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002420
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002421 # Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable
2422 # MBEDTLS_XXX_YYY_ALT which are for single functions.
2423 scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT'
Gilles Peskine1628a9c2021-05-31 22:09:58 +02002424 scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002425
Gilles Peskine1628a9c2021-05-31 22:09:58 +02002426 # We can only compile, not link, since we don't have any implementations
2427 # suitable for testing with the dummy alt headers.
Dave Rodgmanea03ef92023-12-19 12:19:59 +00002428 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
Gilles Peskine1628a9c2021-05-31 22:09:58 +02002429}
2430
2431component_build_dhm_alt () {
2432 msg "build: MBEDTLS_DHM_ALT" # ~30s
2433 scripts/config.py full
2434 scripts/config.py set MBEDTLS_DHM_ALT
2435 # debug.c currently references mbedtls_dhm_context fields directly.
2436 scripts/config.py unset MBEDTLS_DEBUG_C
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002437 # We can only compile, not link, since we don't have any implementations
2438 # suitable for testing with the dummy alt headers.
Dave Rodgmanea03ef92023-12-19 12:19:59 +00002439 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002440}
2441
Gilles Peskine64996c32024-01-23 20:25:47 +01002442component_test_no_psa_crypto_full_cmake_asan() {
2443 # full minus MBEDTLS_PSA_CRYPTO_C: run the same set of tests as basic-build-test.sh
2444 msg "build: cmake, full config minus PSA crypto, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002445 scripts/config.py full
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002446 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
Gilles Peskine64996c32024-01-23 20:25:47 +01002447 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CLIENT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002448 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cron6f135e12021-12-08 16:57:54 +01002449 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002450 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskinedc6d8382020-04-12 14:21:55 +02002451 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002452 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Raef Colesa7e03ad2022-09-28 09:32:48 +01002453 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01002454 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Dave Rodgman17127e92023-12-14 16:42:48 +00002455 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Andrzej Kurekde5a0072019-02-01 07:03:03 -05002456 make
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +02002457
Gilles Peskine64996c32024-01-23 20:25:47 +01002458 msg "test: main suites (full minus PSA crypto)"
Andrzej Kurekde5a0072019-02-01 07:03:03 -05002459 make test
Manuel Pégourié-Gonnard503a5ef2015-10-23 09:04:45 +02002460
Manuel Pégourié-Gonnard182a23b2022-12-07 10:38:43 +01002461 # Note: ssl-opt.sh has some test cases that depend on
2462 # MBEDTLS_ECP_RESTARTABLE && !MBEDTLS_USE_PSA_CRYPTO
2463 # This is the only component where those tests are not skipped.
Gilles Peskinee0c13cf2024-01-30 10:17:49 +01002464 msg "test: ssl-opt.sh (full minus PSA crypto)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002465 tests/ssl-opt.sh
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002466
Gilles Peskinee0c13cf2024-01-30 10:17:49 +01002467 msg "test: compat.sh default (full minus PSA crypto)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002468 tests/compat.sh
Andrzej Kurek991f9fe2018-07-02 09:08:21 -04002469
Gilles Peskinee0c13cf2024-01-30 10:17:49 +01002470 msg "test: compat.sh NULL (full minus PSA crypto)"
Gilles Peskinee29203b2023-08-27 21:43:00 +02002471 tests/compat.sh -f 'NULL'
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05002472
Gilles Peskinee0c13cf2024-01-30 10:17:49 +01002473 msg "test: compat.sh ARIA + ChachaPoly (full minus PSA crypto)"
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +01002474 env OPENSSL="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Andrzej Kurekde5a0072019-02-01 07:03:03 -05002475}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05002476
Ronald Cron403c15c2021-09-13 09:38:05 +02002477component_test_psa_crypto_config_accel_ecdsa () {
Valerio Setti5aab43f2023-03-29 10:42:07 +02002478 msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
Ronald Cron403c15c2021-09-13 09:38:05 +02002479
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002480 # Algorithms and key types to accelerate
Valerio Settic0d2f842023-06-28 10:48:08 +02002481 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002482 $(helper_get_psa_key_type_list "ECC") \
2483 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002484
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002485 # Configure
2486 # ---------
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002487
Manuel Pégourié-Gonnard8d645dc2023-06-15 09:07:10 +02002488 # Start from default config (no USE_PSA) + TLS 1.3
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002489 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard6d7db932022-12-28 09:48:01 +01002490 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002491
2492 # Disable the module that's accelerated
Ronald Cron403c15c2021-09-13 09:38:05 +02002493 scripts/config.py unset MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002494
2495 # Disable things that depend on it
Ronald Cron403c15c2021-09-13 09:38:05 +02002496 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2497 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2498
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002499 # Build
2500 # -----
2501
2502 # These hashes are needed for some ECDSA signature tests.
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02002503 loc_extra_list="ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2504 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002505
2506 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2507
Valerio Setti3fe105b2023-10-30 11:08:12 +01002508 helper_libtestdriver1_make_main "$loc_accel_list"
Ronald Cron403c15c2021-09-13 09:38:05 +02002509
Manuel Pégourié-Gonnarde3095e72022-12-28 10:09:53 +01002510 # Make sure this was not re-enabled by accident (additive config)
Gilles Peskine827dbd92022-02-04 00:30:54 +01002511 not grep mbedtls_ecdsa_ library/ecdsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02002512
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002513 # Run the tests
2514 # -------------
2515
Ronald Cron403c15c2021-09-13 09:38:05 +02002516 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
2517 make test
2518}
2519
Valerio Setti44b178c2023-03-22 14:02:57 +01002520component_test_psa_crypto_config_accel_ecdh () {
Valerio Setti5aab43f2023-03-29 10:42:07 +02002521 msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDH"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002522
2523 # Algorithms and key types to accelerate
Valerio Settic0d2f842023-06-28 10:48:08 +02002524 loc_accel_list="ALG_ECDH \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002525 $(helper_get_psa_key_type_list "ECC") \
2526 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002527
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002528 # Configure
2529 # ---------
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002530
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002531 # Start from default config (no TLS 1.3, no USE_PSA)
2532 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002533
Valerio Setti44b178c2023-03-22 14:02:57 +01002534 # Disable the module that's accelerated
2535 scripts/config.py unset MBEDTLS_ECDH_C
2536
2537 # Disable things that depend on it
2538 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
2539 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2540 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2541 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
2542 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2543
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002544 # Build
2545 # -----
2546
2547 helper_libtestdriver1_make_drivers "$loc_accel_list"
2548
Valerio Setti3fe105b2023-10-30 11:08:12 +01002549 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002550
Valerio Setti44b178c2023-03-22 14:02:57 +01002551 # Make sure this was not re-enabled by accident (additive config)
2552 not grep mbedtls_ecdh_ library/ecdh.o
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002553
2554 # Run the tests
2555 # -------------
2556
Valerio Setti44b178c2023-03-22 14:02:57 +01002557 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDH"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002558 make test
Manuel Pégourié-Gonnard10e39632022-12-29 12:29:09 +01002559}
2560
Przemek Stekieldccb2022023-05-11 10:48:50 +02002561component_test_psa_crypto_config_accel_ffdh () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002562 msg "build: full with accelerated FFDH"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002563
2564 # Algorithms and key types to accelerate
Valerio Setti27602c32023-07-10 16:38:59 +02002565 loc_accel_list="ALG_FFDH \
Valerio Setti0a342c92023-09-01 09:12:31 +02002566 $(helper_get_psa_key_type_list "DH")"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002567
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002568 # Configure
2569 # ---------
Przemek Stekieldccb2022023-05-11 10:48:50 +02002570
Przemek Stekiel565353e2023-07-05 11:07:07 +02002571 # start with full (USE_PSA and TLS 1.3)
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002572 helper_libtestdriver1_adjust_config "full"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002573
2574 # Disable the module that's accelerated
2575 scripts/config.py unset MBEDTLS_DHM_C
2576
2577 # Disable things that depend on it
2578 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
2579 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
2580
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002581 # Build
2582 # -----
2583
2584 helper_libtestdriver1_make_drivers "$loc_accel_list"
2585
Manuel Pégourié-Gonnard981732e2023-06-08 09:15:59 +02002586 helper_libtestdriver1_make_main "$loc_accel_list"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002587
2588 # Make sure this was not re-enabled by accident (additive config)
2589 not grep mbedtls_dhm_ library/dhm.o
2590
2591 # Run the tests
2592 # -------------
2593
Gilles Peskine14302ed2023-07-19 19:30:04 +02002594 msg "test: full with accelerated FFDH"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002595 make test
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002596
Gilles Peskine14302ed2023-07-19 19:30:04 +02002597 msg "ssl-opt: full with accelerated FFDH alg"
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002598 tests/ssl-opt.sh -f "ffdh"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002599}
2600
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002601component_test_psa_crypto_config_reference_ffdh () {
Gilles Peskineb7d577e2023-08-09 19:48:58 +02002602 msg "build: full with non-accelerated FFDH"
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002603
2604 # Start with full (USE_PSA and TLS 1.3)
Przemek Stekiel565353e2023-07-05 11:07:07 +02002605 helper_libtestdriver1_adjust_config "full"
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002606
2607 # Disable things that are not supported
2608 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
2609 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
Gilles Peskine21570cf2023-12-22 11:49:50 +01002610 make
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002611
Gilles Peskine14302ed2023-07-19 19:30:04 +02002612 msg "test suites: full with non-accelerated FFDH alg"
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002613 make test
2614
Gilles Peskine14302ed2023-07-19 19:30:04 +02002615 msg "ssl-opt: full with non-accelerated FFDH alg"
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002616 tests/ssl-opt.sh -f "ffdh"
Valerio Setti42d5f192023-03-20 13:54:41 +01002617}
2618
Valerio Setti44b178c2023-03-22 14:02:57 +01002619component_test_psa_crypto_config_accel_pake() {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002620 msg "build: full with accelerated PAKE"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002621
Manuel Pégourié-Gonnard5a7523e2023-09-20 12:45:01 +02002622 loc_accel_list="ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002623 $(helper_get_psa_key_type_list "ECC") \
2624 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002625
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002626 # Configure
2627 # ---------
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002628
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002629 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002630
2631 # Make built-in fallback not available
2632 scripts/config.py unset MBEDTLS_ECJPAKE_C
2633 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
2634
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002635 # Build
2636 # -----
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002637
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002638 helper_libtestdriver1_make_drivers "$loc_accel_list"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002639
Valerio Setti3fe105b2023-10-30 11:08:12 +01002640 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002641
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02002642 # Make sure this was not re-enabled by accident (additive config)
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002643 not grep mbedtls_ecjpake_init library/ecjpake.o
2644
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02002645 # Run the tests
2646 # -------------
2647
Gilles Peskine14302ed2023-07-19 19:30:04 +02002648 msg "test: full with accelerated PAKE"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002649 make test
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002650}
2651
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002652component_test_psa_crypto_config_accel_ecc_some_key_types () {
2653 msg "build: full with accelerated EC algs and some key types"
2654
2655 # Algorithms and key types to accelerate
2656 # For key types, use an explicitly list to omit GENERATE (and DERIVE)
2657 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2658 ALG_ECDH \
2659 ALG_JPAKE \
2660 KEY_TYPE_ECC_PUBLIC_KEY \
2661 KEY_TYPE_ECC_KEY_PAIR_BASIC \
2662 KEY_TYPE_ECC_KEY_PAIR_IMPORT \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002663 KEY_TYPE_ECC_KEY_PAIR_EXPORT \
2664 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002665
2666 # Configure
2667 # ---------
2668
2669 # start with config full for maximum coverage (also enables USE_PSA)
2670 helper_libtestdriver1_adjust_config "full"
2671
2672 # Disable modules that are accelerated - some will be re-enabled
2673 scripts/config.py unset MBEDTLS_ECDSA_C
2674 scripts/config.py unset MBEDTLS_ECDH_C
2675 scripts/config.py unset MBEDTLS_ECJPAKE_C
2676 scripts/config.py unset MBEDTLS_ECP_C
2677
2678 # Disable all curves - those that aren't accelerated should be re-enabled
2679 helper_disable_builtin_curves
2680
2681 # Restartable feature is not yet supported by PSA. Once it will in
2682 # the future, the following line could be removed (see issues
2683 # 6061, 6332 and following ones)
2684 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2685
2686 # this is not supported by the driver API yet
2687 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
2688
2689 # Build
2690 # -----
2691
2692 # These hashes are needed for some ECDSA signature tests.
2693 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2694 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
2695 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2696
Valerio Setti3fe105b2023-10-30 11:08:12 +01002697 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002698
2699 # ECP should be re-enabled but not the others
2700 not grep mbedtls_ecdh_ library/ecdh.o
2701 not grep mbedtls_ecdsa library/ecdsa.o
2702 not grep mbedtls_ecjpake library/ecjpake.o
2703 grep mbedtls_ecp library/ecp.o
2704
2705 # Run the tests
2706 # -------------
2707
2708 msg "test suites: full with accelerated EC algs and some key types"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002709 make test
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002710}
2711
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002712# Run tests with only (non-)Weierstrass accelerated
2713# Common code used in:
Manuel Pégourié-Gonnardfaea9192023-09-28 09:10:01 +02002714# - component_test_psa_crypto_config_accel_ecc_weierstrass_curves
2715# - component_test_psa_crypto_config_accel_ecc_non_weierstrass_curves
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002716common_test_psa_crypto_config_accel_ecc_some_curves () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002717 weierstrass=$1
2718 if [ $weierstrass -eq 1 ]; then
2719 desc="Weierstrass"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002720 else
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002721 desc="non-Weierstrass"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002722 fi
2723
Manuel Pégourié-Gonnardc0c9b232023-09-28 10:05:57 +02002724 msg "build: crypto_full minus PK with accelerated EC algs and $desc curves"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002725
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002726 # Note: Curves are handled in a special way by the libtestdriver machinery,
2727 # so we only want to include them in the accel list when building the main
2728 # libraries, hence the use of a separate variable.
2729 # Note: the following loop is a modified version of
2730 # helper_get_psa_curve_list that only keeps Weierstrass families.
2731 loc_weierstrass_list=""
2732 loc_non_weierstrass_list=""
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002733 for item in $(sed -n 's/^#define PSA_WANT_\(ECC_[0-9A-Z_a-z]*\).*/\1/p' <"$CRYPTO_CONFIG_H"); do
2734 case $item in
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002735 ECC_BRAINPOOL*|ECC_SECP*)
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002736 loc_weierstrass_list="$loc_weierstrass_list $item"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002737 ;;
2738 *)
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002739 loc_non_weierstrass_list="$loc_non_weierstrass_list $item"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002740 ;;
2741 esac
2742 done
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002743 if [ $weierstrass -eq 1 ]; then
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002744 loc_curve_list=$loc_weierstrass_list
2745 else
2746 loc_curve_list=$loc_non_weierstrass_list
2747 fi
2748
Valerio Setti3fe105b2023-10-30 11:08:12 +01002749 # Algorithms and key types to accelerate
2750 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2751 ALG_ECDH \
2752 ALG_JPAKE \
2753 $(helper_get_psa_key_type_list "ECC") \
2754 $loc_curve_list"
2755
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002756 # Configure
2757 # ---------
2758
Manuel Pégourié-Gonnardc0c9b232023-09-28 10:05:57 +02002759 # Start with config crypto_full and remove PK_C:
2760 # that's what's supported now, see docs/driver-only-builds.md.
2761 helper_libtestdriver1_adjust_config "crypto_full"
2762 scripts/config.py unset MBEDTLS_PK_C
2763 scripts/config.py unset MBEDTLS_PK_PARSE_C
2764 scripts/config.py unset MBEDTLS_PK_WRITE_C
2765 # We need to disable RSA too or PK will be re-enabled.
2766 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*"
2767 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*"
2768 scripts/config.py unset MBEDTLS_RSA_C
2769 scripts/config.py unset MBEDTLS_PKCS1_V15
2770 scripts/config.py unset MBEDTLS_PKCS1_V21
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002771
2772 # Disable modules that are accelerated - some will be re-enabled
2773 scripts/config.py unset MBEDTLS_ECDSA_C
2774 scripts/config.py unset MBEDTLS_ECDH_C
2775 scripts/config.py unset MBEDTLS_ECJPAKE_C
2776 scripts/config.py unset MBEDTLS_ECP_C
2777
2778 # Disable all curves - those that aren't accelerated should be re-enabled
2779 helper_disable_builtin_curves
2780
2781 # Restartable feature is not yet supported by PSA. Once it will in
2782 # the future, the following line could be removed (see issues
2783 # 6061, 6332 and following ones)
2784 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2785
2786 # this is not supported by the driver API yet
2787 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
2788
2789 # Build
2790 # -----
2791
2792 # These hashes are needed for some ECDSA signature tests.
2793 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2794 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
2795 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2796
Valerio Settiac7a8092023-10-31 12:23:44 +01002797 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002798
2799 # We expect ECDH to be re-enabled for the missing curves
2800 grep mbedtls_ecdh_ library/ecdh.o
2801 # We expect ECP to be re-enabled, however the parts specific to the
2802 # families of curves that are accelerated should be ommited.
2803 # - functions with mxz in the name are specific to Montgomery curves
2804 # - ecp_muladd is specific to Weierstrass curves
2805 ##nm library/ecp.o | tee ecp.syms
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002806 if [ $weierstrass -eq 1 ]; then
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002807 not grep mbedtls_ecp_muladd library/ecp.o
2808 grep mxz library/ecp.o
2809 else
2810 grep mbedtls_ecp_muladd library/ecp.o
2811 not grep mxz library/ecp.o
2812 fi
2813 # We expect ECDSA and ECJPAKE to be re-enabled only when
2814 # Weierstrass curves are not accelerated
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002815 if [ $weierstrass -eq 1 ]; then
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002816 not grep mbedtls_ecdsa library/ecdsa.o
2817 not grep mbedtls_ecjpake library/ecjpake.o
2818 else
2819 grep mbedtls_ecdsa library/ecdsa.o
2820 grep mbedtls_ecjpake library/ecjpake.o
2821 fi
2822
2823 # Run the tests
2824 # -------------
2825
Manuel Pégourié-Gonnardc0c9b232023-09-28 10:05:57 +02002826 msg "test suites: crypto_full minus PK with accelerated EC algs and $desc curves"
2827 make test
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002828}
2829
Manuel Pégourié-Gonnardfaea9192023-09-28 09:10:01 +02002830component_test_psa_crypto_config_accel_ecc_weierstrass_curves () {
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002831 common_test_psa_crypto_config_accel_ecc_some_curves 1
2832}
2833
Manuel Pégourié-Gonnardfaea9192023-09-28 09:10:01 +02002834component_test_psa_crypto_config_accel_ecc_non_weierstrass_curves () {
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002835 common_test_psa_crypto_config_accel_ecc_some_curves 0
2836}
2837
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002838# Auxiliary function to build config for all EC based algorithms (EC-JPAKE,
2839# ECDH, ECDSA) with and without drivers.
2840# The input parameter is a boolean value which indicates:
2841# - 0 keep built-in EC algs,
2842# - 1 exclude built-in EC algs (driver only).
2843#
2844# This is used by the two following components to ensure they always use the
2845# same config, except for the use of driver or built-in EC algorithms:
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002846# - component_test_psa_crypto_config_accel_ecc_ecp_light_only;
2847# - component_test_psa_crypto_config_reference_ecc_ecp_light_only.
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002848# This supports comparing their test coverage with analyze_outcomes.py.
Gilles Peskine8dbdf2f2023-07-19 19:16:37 +02002849config_psa_crypto_config_ecp_light_only () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002850 driver_only="$1"
Valerio Setti42d5f192023-03-20 13:54:41 +01002851 # start with config full for maximum coverage (also enables USE_PSA)
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002852 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002853 if [ "$driver_only" -eq 1 ]; then
Valerio Setti42d5f192023-03-20 13:54:41 +01002854 # Disable modules that are accelerated
2855 scripts/config.py unset MBEDTLS_ECDSA_C
2856 scripts/config.py unset MBEDTLS_ECDH_C
2857 scripts/config.py unset MBEDTLS_ECJPAKE_C
Valerio Setti29b395c2023-04-05 18:20:30 +02002858 scripts/config.py unset MBEDTLS_ECP_C
Valerio Setti42d5f192023-03-20 13:54:41 +01002859 fi
2860
2861 # Restartable feature is not yet supported by PSA. Once it will in
2862 # the future, the following line could be removed (see issues
2863 # 6061, 6332 and following ones)
2864 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Valerio Setti42d5f192023-03-20 13:54:41 +01002865}
2866
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002867# Keep in sync with component_test_psa_crypto_config_reference_ecc_ecp_light_only
2868component_test_psa_crypto_config_accel_ecc_ecp_light_only () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002869 msg "build: full with accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002870
2871 # Algorithms and key types to accelerate
2872 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2873 ALG_ECDH \
2874 ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002875 $(helper_get_psa_key_type_list "ECC") \
2876 $(helper_get_psa_curve_list)"
Valerio Setti42d5f192023-03-20 13:54:41 +01002877
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002878 # Configure
2879 # ---------
Valerio Setti42d5f192023-03-20 13:54:41 +01002880
2881 # Use the same config as reference, only without built-in EC algs
Gilles Peskine8dbdf2f2023-07-19 19:16:37 +02002882 config_psa_crypto_config_ecp_light_only 1
Valerio Setti42d5f192023-03-20 13:54:41 +01002883
Valerio Setti0a342c92023-09-01 09:12:31 +02002884 # Do not disable builtin curves because that support is required for:
Valerio Settib2fd6732023-08-15 17:10:47 +02002885 # - MBEDTLS_PK_PARSE_EC_EXTENDED
2886 # - MBEDTLS_PK_PARSE_EC_COMPRESSED
Valerio Setti42d5f192023-03-20 13:54:41 +01002887
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002888 # Build
2889 # -----
2890
2891 # These hashes are needed for some ECDSA signature tests.
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02002892 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2893 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002894 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2895
Valerio Setti3fe105b2023-10-30 11:08:12 +01002896 helper_libtestdriver1_make_main "$loc_accel_list"
Valerio Setti42d5f192023-03-20 13:54:41 +01002897
2898 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
2899 not grep mbedtls_ecdsa_ library/ecdsa.o
2900 not grep mbedtls_ecdh_ library/ecdh.o
2901 not grep mbedtls_ecjpake_ library/ecjpake.o
Valerio Setti29b395c2023-04-05 18:20:30 +02002902 not grep mbedtls_ecp_mul library/ecp.o
Valerio Setti42d5f192023-03-20 13:54:41 +01002903
2904 # Run the tests
2905 # -------------
2906
Gilles Peskine14302ed2023-07-19 19:30:04 +02002907 msg "test suites: full with accelerated EC algs"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002908 make test
Valerio Setti42d5f192023-03-20 13:54:41 +01002909
Gilles Peskine14302ed2023-07-19 19:30:04 +02002910 msg "ssl-opt: full with accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002911 tests/ssl-opt.sh
2912}
2913
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002914# Keep in sync with component_test_psa_crypto_config_accel_ecc_ecp_light_only
2915component_test_psa_crypto_config_reference_ecc_ecp_light_only () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002916 msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with non-accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002917
Gilles Peskine8dbdf2f2023-07-19 19:16:37 +02002918 config_psa_crypto_config_ecp_light_only 0
Valerio Setti42d5f192023-03-20 13:54:41 +01002919
Gilles Peskine21570cf2023-12-22 11:49:50 +01002920 make
Valerio Setti42d5f192023-03-20 13:54:41 +01002921
Gilles Peskine14302ed2023-07-19 19:30:04 +02002922 msg "test suites: full with non-accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002923 make test
2924
Gilles Peskine14302ed2023-07-19 19:30:04 +02002925 msg "ssl-opt: full with non-accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002926 tests/ssl-opt.sh
2927}
2928
Valerio Settie618cb02023-04-12 14:59:16 +02002929# This helper function is used by:
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002930# - component_test_psa_crypto_config_accel_ecc_no_ecp_at_all()
2931# - component_test_psa_crypto_config_reference_ecc_no_ecp_at_all()
Valerio Settie618cb02023-04-12 14:59:16 +02002932# to ensure that both tests use the same underlying configuration when testing
2933# driver's coverage with analyze_outcomes.py.
2934#
2935# This functions accepts 1 boolean parameter as follows:
2936# - 1: building with accelerated EC algorithms (ECDSA, ECDH, ECJPAKE), therefore
2937# excluding their built-in implementation as well as ECP_C & ECP_LIGHT
2938# - 0: include built-in implementation of EC algorithms.
2939#
2940# PK_C and RSA_C are always disabled to ensure there is no remaining dependency
2941# on the ECP module.
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002942config_psa_crypto_no_ecp_at_all () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002943 driver_only="$1"
Valerio Settiaafe9002023-06-26 15:23:44 +02002944 # start with full config for maximum coverage (also enables USE_PSA)
2945 helper_libtestdriver1_adjust_config "full"
2946
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002947 if [ "$driver_only" -eq 1 ]; then
Valerio Settie618cb02023-04-12 14:59:16 +02002948 # Disable modules that are accelerated
2949 scripts/config.py unset MBEDTLS_ECDSA_C
2950 scripts/config.py unset MBEDTLS_ECDH_C
2951 scripts/config.py unset MBEDTLS_ECJPAKE_C
2952 # Disable ECP module (entirely)
2953 scripts/config.py unset MBEDTLS_ECP_C
Valerio Settie618cb02023-04-12 14:59:16 +02002954 fi
2955
Valerio Settiaecd32c2023-06-14 10:42:31 +02002956 # Disable all the features that auto-enable ECP_LIGHT (see build_info.h)
2957 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
Valerio Settiaddeee42023-06-14 10:46:55 +02002958 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
Ronald Cron6b49b552023-07-20 09:57:54 +02002959 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
Valerio Settiaecd32c2023-06-14 10:42:31 +02002960
Valerio Settie618cb02023-04-12 14:59:16 +02002961 # Restartable feature is not yet supported by PSA. Once it will in
2962 # the future, the following line could be removed (see issues
2963 # 6061, 6332 and following ones)
2964 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Valerio Settie618cb02023-04-12 14:59:16 +02002965}
2966
2967# Build and test a configuration where driver accelerates all EC algs while
2968# all support and dependencies from ECP and ECP_LIGHT are removed on the library
2969# side.
2970#
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002971# Keep in sync with component_test_psa_crypto_config_reference_ecc_no_ecp_at_all()
2972component_test_psa_crypto_config_accel_ecc_no_ecp_at_all () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002973 msg "build: full + accelerated EC algs - ECP"
Valerio Settie618cb02023-04-12 14:59:16 +02002974
2975 # Algorithms and key types to accelerate
2976 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2977 ALG_ECDH \
2978 ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002979 $(helper_get_psa_key_type_list "ECC") \
2980 $(helper_get_psa_curve_list)"
Valerio Settie618cb02023-04-12 14:59:16 +02002981
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002982 # Configure
2983 # ---------
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02002984
Valerio Settie618cb02023-04-12 14:59:16 +02002985 # Set common configurations between library's and driver's builds
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002986 config_psa_crypto_no_ecp_at_all 1
Valerio Settib2fd6732023-08-15 17:10:47 +02002987 # Disable all the builtin curves. All the required algs are accelerated.
2988 helper_disable_builtin_curves
Valerio Settie618cb02023-04-12 14:59:16 +02002989
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002990 # Build
2991 # -----
Valerio Settie618cb02023-04-12 14:59:16 +02002992
2993 # Things we wanted supported in libtestdriver1, but not accelerated in the main library:
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02002994 # SHA-1 and all SHA-2/3 variants, as they are used by ECDSA deterministic.
2995 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2996 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Valerio Settie618cb02023-04-12 14:59:16 +02002997
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +02002998 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
Valerio Settie618cb02023-04-12 14:59:16 +02002999
Valerio Setti3fe105b2023-10-30 11:08:12 +01003000 helper_libtestdriver1_make_main "$loc_accel_list"
Valerio Settie618cb02023-04-12 14:59:16 +02003001
3002 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3003 not grep mbedtls_ecdsa_ library/ecdsa.o
3004 not grep mbedtls_ecdh_ library/ecdh.o
3005 not grep mbedtls_ecjpake_ library/ecjpake.o
Valerio Settib2fd6732023-08-15 17:10:47 +02003006 # Also ensure that ECP module was not re-enabled
Valerio Settie618cb02023-04-12 14:59:16 +02003007 not grep mbedtls_ecp_ library/ecp.o
Valerio Settie618cb02023-04-12 14:59:16 +02003008
3009 # Run the tests
3010 # -------------
3011
Gilles Peskine14302ed2023-07-19 19:30:04 +02003012 msg "test: full + accelerated EC algs - ECP"
Gilles Peskine21570cf2023-12-22 11:49:50 +01003013 make test
Valerio Setti16b70f22023-06-27 17:45:49 +02003014
Gilles Peskine14302ed2023-07-19 19:30:04 +02003015 msg "ssl-opt: full + accelerated EC algs - ECP"
Valerio Setti16b70f22023-06-27 17:45:49 +02003016 tests/ssl-opt.sh
Valerio Settie618cb02023-04-12 14:59:16 +02003017}
3018
3019# Reference function used for driver's coverage analysis in analyze_outcomes.py
Valerio Setti4d25a8d2023-06-14 10:33:10 +02003020# in conjunction with component_test_psa_crypto_config_accel_ecc_no_ecp_at_all().
Valerio Settie618cb02023-04-12 14:59:16 +02003021# Keep in sync with its accelerated counterpart.
Valerio Setti4d25a8d2023-06-14 10:33:10 +02003022component_test_psa_crypto_config_reference_ecc_no_ecp_at_all () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02003023 msg "build: full + non accelerated EC algs"
Valerio Settie618cb02023-04-12 14:59:16 +02003024
Valerio Setti4d25a8d2023-06-14 10:33:10 +02003025 config_psa_crypto_no_ecp_at_all 0
Valerio Settie618cb02023-04-12 14:59:16 +02003026
Gilles Peskine21570cf2023-12-22 11:49:50 +01003027 make
Valerio Settie618cb02023-04-12 14:59:16 +02003028
Gilles Peskine14302ed2023-07-19 19:30:04 +02003029 msg "test: full + non accelerated EC algs"
Valerio Settie618cb02023-04-12 14:59:16 +02003030 make test
Valerio Setti16b70f22023-06-27 17:45:49 +02003031
Gilles Peskine14302ed2023-07-19 19:30:04 +02003032 msg "ssl-opt: full + non accelerated EC algs"
Valerio Setti16b70f22023-06-27 17:45:49 +02003033 tests/ssl-opt.sh
Valerio Settie618cb02023-04-12 14:59:16 +02003034}
3035
Valerio Setti4e2f2442023-08-15 10:10:26 +02003036# This is a common configuration helper used directly from:
3037# - common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum
3038# - common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum
3039# and indirectly from:
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003040# - component_test_psa_crypto_config_accel_ecc_no_bignum
Valerio Setti4e2f2442023-08-15 10:10:26 +02003041# - accelerate all EC algs, disable RSA and FFDH
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003042# - component_test_psa_crypto_config_reference_ecc_no_bignum
Valerio Setti4e2f2442023-08-15 10:10:26 +02003043# - this is the reference component of the above
3044# - it still disables RSA and FFDH, but it uses builtin EC algs
3045# - component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum
3046# - accelerate all EC and FFDH algs, disable only RSA
3047# - component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum
3048# - this is the reference component of the above
3049# - it still disables RSA, but it uses builtin EC and FFDH algs
3050#
3051# This function accepts 2 parameters:
Valerio Setti5dfaca42023-09-05 08:48:51 +02003052# $1: a boolean value which states if we are testing an accelerated scenario
3053# or not.
3054# $2: a string value which states which components are tested. Allowed values
3055# are "ECC" or "ECC_DH".
Valerio Setti4e2f2442023-08-15 10:10:26 +02003056config_psa_crypto_config_accel_ecc_ffdh_no_bignum() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003057 driver_only="$1"
3058 test_target="$2"
Valerio Setti18535c32023-07-31 11:27:17 +02003059 # start with full config for maximum coverage (also enables USE_PSA)
Valerio Setti29c1b4d2023-07-27 10:08:45 +02003060 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003061
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003062 if [ "$driver_only" -eq 1 ]; then
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003063 # Disable modules that are accelerated
3064 scripts/config.py unset MBEDTLS_ECDSA_C
3065 scripts/config.py unset MBEDTLS_ECDH_C
3066 scripts/config.py unset MBEDTLS_ECJPAKE_C
3067 # Disable ECP module (entirely)
3068 scripts/config.py unset MBEDTLS_ECP_C
Manuel Pégourié-Gonnard660bbf22023-06-12 18:42:40 +02003069 # Also disable bignum
3070 scripts/config.py unset MBEDTLS_BIGNUM_C
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003071 fi
3072
3073 # Disable all the features that auto-enable ECP_LIGHT (see build_info.h)
3074 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
3075 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
3076 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
3077
Manuel Pégourié-Gonnard7dccb662023-06-12 18:28:42 +02003078 # RSA support is intentionally disabled on this test because RSA_C depends
3079 # on BIGNUM_C.
Valerio Setti2e0275d2023-07-28 16:33:13 +02003080 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*"
3081 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*"
Manuel Pégourié-Gonnard7dccb662023-06-12 18:28:42 +02003082 scripts/config.py unset MBEDTLS_RSA_C
3083 scripts/config.py unset MBEDTLS_PKCS1_V15
3084 scripts/config.py unset MBEDTLS_PKCS1_V21
3085 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3086 # Also disable key exchanges that depend on RSA
3087 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
3088 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
3089 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3090 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3091 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3092
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003093 if [ "$test_target" = "ECC" ]; then
Valerio Setti4e2f2442023-08-15 10:10:26 +02003094 # When testing ECC only, we disable FFDH support, both from builtin and
3095 # PSA sides, and also disable the key exchanges that depend on DHM.
3096 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_FFDH
3097 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_DH_[0-9A-Z_a-z]*"
3098 scripts/config.py unset MBEDTLS_DHM_C
3099 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
3100 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3101 else
3102 # When testing ECC and DH instead, we disable DHM and depending key
3103 # exchanges only in the accelerated build
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003104 if [ "$driver_only" -eq 1 ]; then
Valerio Setti4e2f2442023-08-15 10:10:26 +02003105 scripts/config.py unset MBEDTLS_DHM_C
3106 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
3107 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3108 fi
3109 fi
Manuel Pégourié-Gonnard7dccb662023-06-12 18:28:42 +02003110
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003111 # Restartable feature is not yet supported by PSA. Once it will in
3112 # the future, the following line could be removed (see issues
3113 # 6061, 6332 and following ones)
3114 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
3115}
3116
Valerio Setti4e2f2442023-08-15 10:10:26 +02003117# Common helper used by:
3118# - component_test_psa_crypto_config_accel_ecc_no_bignum
3119# - component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003120#
Valerio Setti4e2f2442023-08-15 10:10:26 +02003121# The goal is to build and test accelerating either:
3122# - ECC only or
3123# - both ECC and FFDH
3124#
3125# It is meant to be used in conjunction with
Valerio Setti5dfaca42023-09-05 08:48:51 +02003126# common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum() for drivers
3127# coverage analysis in the "analyze_outcomes.py" script.
Valerio Setti4e2f2442023-08-15 10:10:26 +02003128common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003129 test_target="$1"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003130
Valerio Setti5dfaca42023-09-05 08:48:51 +02003131 # This is an internal helper to simplify text message handling
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003132 if [ "$test_target" = "ECC_DH" ]; then
3133 accel_text="ECC/FFDH"
3134 removed_text="ECP - DH"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003135 else
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003136 accel_text="ECC"
3137 removed_text="ECP"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003138 fi
3139
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003140 msg "build: full + accelerated $accel_text algs + USE_PSA - $removed_text - BIGNUM"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003141
3142 # By default we accelerate all EC keys/algs
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003143 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
3144 ALG_ECDH \
3145 ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01003146 $(helper_get_psa_key_type_list "ECC") \
3147 $(helper_get_psa_curve_list)"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003148 # Optionally we can also add DH to the list of accelerated items
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003149 if [ "$test_target" = "ECC_DH" ]; then
Valerio Setti4e2f2442023-08-15 10:10:26 +02003150 loc_accel_list="$loc_accel_list \
3151 ALG_FFDH \
Manuel Pégourié-Gonnard85ff5e62023-09-22 09:05:48 +02003152 $(helper_get_psa_key_type_list "DH")"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003153 fi
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003154
3155 # Configure
3156 # ---------
3157
3158 # Set common configurations between library's and driver's builds
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003159 config_psa_crypto_config_accel_ecc_ffdh_no_bignum 1 "$test_target"
Valerio Settib2fd6732023-08-15 17:10:47 +02003160 # Disable all the builtin curves. All the required algs are accelerated.
3161 helper_disable_builtin_curves
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003162
3163 # Build
3164 # -----
3165
3166 # Things we wanted supported in libtestdriver1, but not accelerated in the main library:
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02003167 # SHA-1 and all SHA-2/3 variants, as they are used by ECDSA deterministic.
3168 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3169 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003170
3171 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
3172
Valerio Setti3fe105b2023-10-30 11:08:12 +01003173 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003174
3175 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3176 not grep mbedtls_ecdsa_ library/ecdsa.o
3177 not grep mbedtls_ecdh_ library/ecdh.o
3178 not grep mbedtls_ecjpake_ library/ecjpake.o
Valerio Setti4e2f2442023-08-15 10:10:26 +02003179 # Also ensure that ECP, RSA, [DHM] or BIGNUM modules were not re-enabled
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003180 not grep mbedtls_ecp_ library/ecp.o
Manuel Pégourié-Gonnard06aebe42023-06-12 18:33:34 +02003181 not grep mbedtls_rsa_ library/rsa.o
Manuel Pégourié-Gonnard660bbf22023-06-12 18:42:40 +02003182 not grep mbedtls_mpi_ library/bignum.o
Valerio Setti4e2f2442023-08-15 10:10:26 +02003183 not grep mbedtls_dhm_ library/dhm.o
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003184
3185 # Run the tests
3186 # -------------
3187
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003188 msg "test suites: full + accelerated $accel_text algs + USE_PSA - $removed_text - DHM - BIGNUM"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003189
Gilles Peskine21570cf2023-12-22 11:49:50 +01003190 make test
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003191
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003192 msg "ssl-opt: full + accelerated $accel_text algs + USE_PSA - $removed_text - BIGNUM"
Valerio Setti18535c32023-07-31 11:27:17 +02003193 tests/ssl-opt.sh
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003194}
3195
Valerio Setti4e2f2442023-08-15 10:10:26 +02003196# Common helper used by:
3197# - component_test_psa_crypto_config_reference_ecc_no_bignum
3198# - component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum
3199#
3200# The goal is to build and test a reference scenario (i.e. with builtin
3201# components) compared to the ones used in
3202# common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum() above.
3203#
3204# It is meant to be used in conjunction with
3205# common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum() for drivers'
3206# coverage analysis in "analyze_outcomes.py" script.
3207common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003208 test_target="$1"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003209
Valerio Setti5dfaca42023-09-05 08:48:51 +02003210 # This is an internal helper to simplify text message handling
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003211 if [ "$test_target" = "ECC_DH" ]; then
3212 accel_text="ECC/FFDH"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003213 else
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003214 accel_text="ECC"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003215 fi
3216
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003217 msg "build: full + non accelerated $accel_text algs + USE_PSA"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003218
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003219 config_psa_crypto_config_accel_ecc_ffdh_no_bignum 0 "$test_target"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003220
Gilles Peskine21570cf2023-12-22 11:49:50 +01003221 make
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003222
Valerio Setti29c1b4d2023-07-27 10:08:45 +02003223 msg "test suites: full + non accelerated EC algs + USE_PSA"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003224 make test
3225
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003226 msg "ssl-opt: full + non accelerated $accel_text algs + USE_PSA"
Valerio Setti18535c32023-07-31 11:27:17 +02003227 tests/ssl-opt.sh
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003228}
3229
Valerio Setti4e2f2442023-08-15 10:10:26 +02003230component_test_psa_crypto_config_accel_ecc_no_bignum () {
3231 common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum "ECC"
3232}
3233
3234component_test_psa_crypto_config_reference_ecc_no_bignum () {
3235 common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum "ECC"
3236}
3237
3238component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum () {
3239 common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum "ECC_DH"
3240}
3241
3242component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum () {
3243 common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum "ECC_DH"
3244}
3245
Valerio Settiac6d35f2023-08-04 12:49:11 +02003246# Helper for setting common configurations between:
3247# - component_test_tfm_config_p256m_driver_accel_ec()
3248# - component_test_tfm_config()
Valerio Setti52ba0e32023-08-04 12:43:03 +02003249common_tfm_config () {
3250 # Enable TF-M config
Yanray Wang70505042023-09-21 17:11:40 +08003251 cp configs/config-tfm.h "$CONFIG_H"
3252 echo "#undef MBEDTLS_PSA_CRYPTO_CONFIG_FILE" >> "$CONFIG_H"
3253 cp configs/ext/crypto_config_profile_medium.h "$CRYPTO_CONFIG_H"
Valerio Settic5c4bd22023-08-03 14:28:20 +02003254
Yanray Wang73bb2312023-09-25 11:21:15 +08003255 # Other config adjustment to make the tests pass.
3256 # This should probably be adopted upstream.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003257 #
Manuel Pégourié-Gonnard96839e72023-08-08 13:01:29 +02003258 # - USE_PSA_CRYPTO for PK_HAVE_ECC_KEYS
3259 echo "#define MBEDTLS_USE_PSA_CRYPTO" >> "$CONFIG_H"
Valerio Setti52ba0e32023-08-04 12:43:03 +02003260
Yanray Wang73bb2312023-09-25 11:21:15 +08003261 # Config adjustment for better test coverage in our environment.
3262 # This is not needed just to build and pass tests.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003263 #
3264 # Enable filesystem I/O for the benefit of PK parse/write tests.
3265 echo "#define MBEDTLS_FS_IO" >> "$CONFIG_H"
3266}
3267
Valerio Settiac6d35f2023-08-04 12:49:11 +02003268# Keep this in sync with component_test_tfm_config() as they are both meant
3269# to be used in analyze_outcomes.py for driver's coverage analysis.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003270component_test_tfm_config_p256m_driver_accel_ec () {
3271 msg "build: TF-M config + p256m driver + accel ECDH(E)/ECDSA"
3272
3273 common_tfm_config
Valerio Settic5c4bd22023-08-03 14:28:20 +02003274
Dave Rodgman897bb772023-11-15 16:34:20 +00003275 # Build crypto library
Dave Rodgman17127e92023-12-14 16:42:48 +00003276 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -I../tests/include/spe" LDFLAGS="$ASAN_CFLAGS"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003277
Manuel Pégourié-Gonnardf8930e22023-06-13 09:51:32 +02003278 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3279 not grep mbedtls_ecdsa_ library/ecdsa.o
Valerio Settib7e95442023-03-21 11:52:33 +01003280 not grep mbedtls_ecdh_ library/ecdh.o
3281 not grep mbedtls_ecjpake_ library/ecjpake.o
3282 # Also ensure that ECP, RSA, DHM or BIGNUM modules were not re-enabled
3283 not grep mbedtls_ecp_ library/ecp.o
3284 not grep mbedtls_rsa_ library/rsa.o
Valerio Settie4758aa2023-03-24 16:51:17 +01003285 not grep mbedtls_dhm_ library/dhm.o
Valerio Settiee97a1e2023-03-27 12:44:15 +02003286 not grep mbedtls_mpi_ library/bignum.o
Dave Rodgman897bb772023-11-15 16:34:20 +00003287 # Check that p256m was built
Dave Rodgmanbe5489a2023-11-27 10:30:03 +00003288 grep -q p256_ecdsa_ library/libmbedcrypto.a
Valerio Settib7e95442023-03-21 11:52:33 +01003289
Valerio Setti5e18b902023-12-04 12:07:30 +01003290 # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration
3291 # files, so we want to ensure that it has not be re-enabled accidentally.
3292 not grep mbedtls_cipher library/cipher.o
3293
Valerio Settib7e95442023-03-21 11:52:33 +01003294 # Run the tests
Valerio Setti52ba0e32023-08-04 12:43:03 +02003295 msg "test: TF-M config + p256m driver + accel ECDH(E)/ECDSA"
Valerio Settib7e95442023-03-21 11:52:33 +01003296 make test
Valerio Settie4758aa2023-03-24 16:51:17 +01003297}
Valerio Settiee97a1e2023-03-27 12:44:15 +02003298
Valerio Settiac6d35f2023-08-04 12:49:11 +02003299# Keep this in sync with component_test_tfm_config_p256m_driver_accel_ec() as
3300# they are both meant to be used in analyze_outcomes.py for driver's coverage
3301# analysis.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003302component_test_tfm_config() {
3303 common_tfm_config
Valerio Settiee97a1e2023-03-27 12:44:15 +02003304
Dave Rodgman897bb772023-11-15 16:34:20 +00003305 # Disable P256M driver, which is on by default, so that analyze_outcomes
3306 # can compare this test with test_tfm_config_p256m_driver_accel_ec
3307 echo "#undef MBEDTLS_PSA_P256M_DRIVER_ENABLED" >> "$CONFIG_H"
3308
Valerio Setti52ba0e32023-08-04 12:43:03 +02003309 msg "build: TF-M config"
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02003310 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' tests
Valerio Setti52ba0e32023-08-04 12:43:03 +02003311
Dave Rodgman897bb772023-11-15 16:34:20 +00003312 # Check that p256m was not built
Dave Rodgmanbe5489a2023-11-27 10:30:03 +00003313 not grep p256_ecdsa_ library/libmbedcrypto.a
Dave Rodgman897bb772023-11-15 16:34:20 +00003314
Valerio Setti5e18b902023-12-04 12:07:30 +01003315 # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration
3316 # files, so we want to ensure that it has not be re-enabled accidentally.
3317 not grep mbedtls_cipher library/cipher.o
3318
Valerio Setti52ba0e32023-08-04 12:43:03 +02003319 msg "test: TF-M config"
3320 make test
Valerio Settic5c4bd22023-08-03 14:28:20 +02003321}
3322
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003323# Common helper for component_full_without_ecdhe_ecdsa() and
3324# component_full_without_ecdhe_ecdsa_and_tls13() which:
3325# - starts from the "full" configuration minus the list of symbols passed in
3326# as 1st parameter
3327# - build
3328# - test only TLS (i.e. test_suite_tls and ssl-opt)
3329build_full_minus_something_and_test_tls () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003330 symbols_to_disable="$1"
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003331
3332 msg "build: full minus something, test TLS"
3333
3334 scripts/config.py full
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003335 for sym in $symbols_to_disable; do
3336 echo "Disabling $sym"
3337 scripts/config.py unset $sym
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003338 done
Valerio Settie4758aa2023-03-24 16:51:17 +01003339
Gilles Peskine21570cf2023-12-22 11:49:50 +01003340 make
Valerio Settiee97a1e2023-03-27 12:44:15 +02003341
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003342 msg "test: full minus something, test TLS"
3343 ( cd tests; ./test_suite_ssl )
Valerio Settib7e95442023-03-21 11:52:33 +01003344
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003345 msg "ssl-opt: full minus something, test TLS"
Valerio Settib7e95442023-03-21 11:52:33 +01003346 tests/ssl-opt.sh
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003347}
Valerio Setti1f1420d2023-03-28 10:35:45 +02003348
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003349component_full_without_ecdhe_ecdsa () {
3350 build_full_minus_something_and_test_tls "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED"
Valerio Settib7e95442023-03-21 11:52:33 +01003351}
3352
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003353component_full_without_ecdhe_ecdsa_and_tls13 () {
3354 build_full_minus_something_and_test_tls "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
3355 MBEDTLS_SSL_PROTO_TLS1_3"
Valerio Settie4758aa2023-03-24 16:51:17 +01003356}
3357
Valerio Setti249b18a2023-06-20 12:08:30 +02003358# This is an helper used by:
3359# - component_test_psa_ecc_key_pair_no_derive
3360# - component_test_psa_ecc_key_pair_no_generate
3361# The goal is to test with all PSA_WANT_KEY_TYPE_xxx_KEY_PAIR_yyy symbols
3362# enabled, but one. Input arguments are as follows:
3363# - $1 is the key type under test, i.e. ECC/RSA/DH
3364# - $2 is the key option to be unset (i.e. generate, derive, etc)
Valerio Settia9836552023-06-22 11:22:23 +02003365build_and_test_psa_want_key_pair_partial() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003366 key_type=$1
3367 unset_option=$2
3368 disabled_psa_want="PSA_WANT_KEY_TYPE_${key_type}_KEY_PAIR_${unset_option}"
Valerio Setti249b18a2023-06-20 12:08:30 +02003369
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003370 msg "build: full - MBEDTLS_USE_PSA_CRYPTO - ${disabled_psa_want}"
Valerio Setti249b18a2023-06-20 12:08:30 +02003371 scripts/config.py full
Valerio Setti249b18a2023-06-20 12:08:30 +02003372 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
3373 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
3374
3375 # All the PSA_WANT_KEY_TYPE_xxx_KEY_PAIR_yyy are enabled by default in
3376 # crypto_config.h so we just disable the one we don't want.
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003377 scripts/config.py -f "$CRYPTO_CONFIG_H" unset "$disabled_psa_want"
Valerio Setti249b18a2023-06-20 12:08:30 +02003378
Gilles Peskine21570cf2023-12-22 11:49:50 +01003379 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Valerio Setti249b18a2023-06-20 12:08:30 +02003380
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003381 msg "test: full - MBEDTLS_USE_PSA_CRYPTO - ${disabled_psa_want}"
Valerio Setti249b18a2023-06-20 12:08:30 +02003382 make test
3383}
3384
3385component_test_psa_ecc_key_pair_no_derive() {
Valerio Settia9836552023-06-22 11:22:23 +02003386 build_and_test_psa_want_key_pair_partial "ECC" "DERIVE"
Valerio Setti249b18a2023-06-20 12:08:30 +02003387}
3388
3389component_test_psa_ecc_key_pair_no_generate() {
Valerio Settia9836552023-06-22 11:22:23 +02003390 build_and_test_psa_want_key_pair_partial "ECC" "GENERATE"
Valerio Setti249b18a2023-06-20 12:08:30 +02003391}
3392
Pengyu Lve705f572023-12-06 16:38:15 +08003393config_psa_crypto_accel_rsa () {
3394 driver_only=$1
Ronald Cron403c15c2021-09-13 09:38:05 +02003395
Pengyu Lve705f572023-12-06 16:38:15 +08003396 # Start from crypto_full config (no X.509, no TLS)
3397 helper_libtestdriver1_adjust_config "crypto_full"
3398
3399 if [ "$driver_only" -eq 1 ]; then
3400 # Remove RSA support and its dependencies
3401 scripts/config.py unset MBEDTLS_RSA_C
3402 scripts/config.py unset MBEDTLS_PKCS1_V15
3403 scripts/config.py unset MBEDTLS_PKCS1_V21
3404
3405 # We need PEM parsing in the test library as well to support the import
3406 # of PEM encoded RSA keys.
3407 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_PEM_PARSE_C
3408 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_BASE64_C
3409 fi
3410}
3411
3412component_test_psa_crypto_config_accel_rsa_crypto () {
3413 msg "build: crypto_full with accelerated RSA"
3414
3415 loc_accel_list="ALG_RSA_OAEP ALG_RSA_PSS \
3416 ALG_RSA_PKCS1V15_CRYPT ALG_RSA_PKCS1V15_SIGN \
3417 KEY_TYPE_RSA_PUBLIC_KEY \
3418 KEY_TYPE_RSA_KEY_PAIR_BASIC \
3419 KEY_TYPE_RSA_KEY_PAIR_GENERATE \
3420 KEY_TYPE_RSA_KEY_PAIR_IMPORT \
3421 KEY_TYPE_RSA_KEY_PAIR_EXPORT"
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003422
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003423 # Configure
3424 # ---------
Ronald Cron403c15c2021-09-13 09:38:05 +02003425
Pengyu Lve705f572023-12-06 16:38:15 +08003426 config_psa_crypto_accel_rsa 1
Ronald Cron403c15c2021-09-13 09:38:05 +02003427
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003428 # Build
3429 # -----
3430
Pengyu Lve705f572023-12-06 16:38:15 +08003431 # These hashes are needed for unit tests.
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02003432 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
Pengyu Lve705f572023-12-06 16:38:15 +08003433 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512 ALG_MD5"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003434 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
Ronald Cron403c15c2021-09-13 09:38:05 +02003435
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003436 helper_libtestdriver1_make_main "$loc_accel_list"
Ronald Cron403c15c2021-09-13 09:38:05 +02003437
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003438 # Make sure this was not re-enabled by accident (additive config)
Pengyu Lv98a90c62023-12-07 17:23:25 +08003439 not grep mbedtls_rsa library/rsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02003440
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003441 # Run the tests
3442 # -------------
3443
Pengyu Lve705f572023-12-06 16:38:15 +08003444 msg "test: crypto_full with accelerated RSA"
Gilles Peskine21570cf2023-12-22 11:49:50 +01003445 make test
Pengyu Lve705f572023-12-06 16:38:15 +08003446}
3447
3448component_test_psa_crypto_config_reference_rsa_crypto () {
3449 msg "build: crypto_full with non-accelerated RSA"
3450
3451 # Configure
3452 # ---------
3453 config_psa_crypto_accel_rsa 0
3454
3455 # Build
3456 # -----
Gilles Peskine21570cf2023-12-22 11:49:50 +01003457 make
Pengyu Lve705f572023-12-06 16:38:15 +08003458
3459 # Run the tests
3460 # -------------
3461 msg "test: crypto_full with non-accelerated RSA"
Ronald Cron403c15c2021-09-13 09:38:05 +02003462 make test
3463}
3464
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003465# This is a temporary test to verify that full RSA support is present even when
Valerio Setti01cc88a2023-06-15 11:53:08 +02003466# only one single new symbols (PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) is defined.
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003467component_test_new_psa_want_key_pair_symbol() {
Valerio Setti01cc88a2023-06-15 11:53:08 +02003468 msg "Build: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC"
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003469
Valerio Setti4590bc22023-06-13 15:39:23 +02003470 # Create a temporary output file unless there is already one set
3471 if [ "$MBEDTLS_TEST_OUTCOME_FILE" ]; then
3472 REMOVE_OUTCOME_ON_EXIT="no"
3473 else
3474 REMOVE_OUTCOME_ON_EXIT="yes"
3475 MBEDTLS_TEST_OUTCOME_FILE="$PWD/out.csv"
3476 export MBEDTLS_TEST_OUTCOME_FILE
3477 fi
3478
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003479 # Start from crypto configuration
3480 scripts/config.py crypto
3481
3482 # Remove RSA support and its dependencies
3483 scripts/config.py unset MBEDTLS_PKCS1_V15
3484 scripts/config.py unset MBEDTLS_PKCS1_V21
3485 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3486 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3487 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3488 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
3489 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
3490 scripts/config.py unset MBEDTLS_RSA_C
3491 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3492
3493 # Enable PSA support
3494 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
3495
Valerio Setti01cc88a2023-06-15 11:53:08 +02003496 # Keep only PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC enabled in order to ensure
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003497 # that proper translations is done in crypto_legacy.h.
Ronald Cron6b49b552023-07-20 09:57:54 +02003498 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT
3499 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT
3500 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003501
3502 make
3503
Valerio Setti01cc88a2023-06-15 11:53:08 +02003504 msg "Test: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC"
Valerio Setti4590bc22023-06-13 15:39:23 +02003505 make test
3506
3507 # Parse only 1 relevant line from the outcome file, i.e. a test which is
3508 # performing RSA signature.
3509 msg "Verify that 'RSA PKCS1 Sign #1 (SHA512, 1536 bits RSA)' is PASS"
3510 cat $MBEDTLS_TEST_OUTCOME_FILE | grep 'RSA PKCS1 Sign #1 (SHA512, 1536 bits RSA)' | grep -q "PASS"
3511
3512 if [ "$REMOVE_OUTCOME_ON_EXIT" == "yes" ]; then
3513 rm $MBEDTLS_TEST_OUTCOME_FILE
3514 fi
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003515}
3516
Ronald Cronb2312452021-05-08 14:32:59 +02003517component_test_psa_crypto_config_accel_hash () {
3518 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
3519
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003520 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \
3521 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3522 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Ronald Cronb2312452021-05-08 14:32:59 +02003523
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003524 # Configure
3525 # ---------
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003526
3527 # Start from default config (no TLS 1.3, no USE_PSA)
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003528 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003529
3530 # Disable the things that are being accelerated
Ronald Cronb2312452021-05-08 14:32:59 +02003531 scripts/config.py unset MBEDTLS_MD5_C
3532 scripts/config.py unset MBEDTLS_RIPEMD160_C
3533 scripts/config.py unset MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc584c272023-03-22 00:32:04 +01003534 scripts/config.py unset MBEDTLS_SHA224_C
3535 scripts/config.py unset MBEDTLS_SHA256_C
Ronald Cronb2312452021-05-08 14:32:59 +02003536 scripts/config.py unset MBEDTLS_SHA384_C
3537 scripts/config.py unset MBEDTLS_SHA512_C
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003538 scripts/config.py unset MBEDTLS_SHA3_C
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003539
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003540 # Build
3541 # -----
3542
3543 helper_libtestdriver1_make_drivers "$loc_accel_list"
3544
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003545 helper_libtestdriver1_make_main "$loc_accel_list"
Ronald Cronb2312452021-05-08 14:32:59 +02003546
Manuel Pégourié-Gonnardc584c272023-03-22 00:32:04 +01003547 # There's a risk of something getting re-enabled via config_psa.h;
3548 # make sure it did not happen. Note: it's OK for MD_C to be enabled.
3549 not grep mbedtls_md5 library/md5.o
3550 not grep mbedtls_sha1 library/sha1.o
3551 not grep mbedtls_sha256 library/sha256.o
3552 not grep mbedtls_sha512 library/sha512.o
3553 not grep mbedtls_ripemd160 library/ripemd160.o
Ronald Cronb2312452021-05-08 14:32:59 +02003554
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003555 # Run the tests
3556 # -------------
3557
Ronald Cronb2312452021-05-08 14:32:59 +02003558 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
3559 make test
3560}
3561
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003562component_test_psa_crypto_config_accel_hash_keep_builtins () {
3563 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated+builtin hash"
3564 # This component ensures that all the test cases for
3565 # md_psa_dynamic_dispatch with legacy+driver in test_suite_md are run.
3566
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003567 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \
3568 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3569 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003570
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003571 # Start from default config (no TLS 1.3, no USE_PSA)
3572 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003573
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +02003574 helper_libtestdriver1_make_drivers "$loc_accel_list"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003575
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003576 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003577
3578 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated+builtin hash"
3579 make test
3580}
3581
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003582# Auxiliary function to build config for hashes with and without drivers
3583config_psa_crypto_hash_use_psa () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003584 driver_only="$1"
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003585 # start with config full for maximum coverage (also enables USE_PSA)
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003586 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003587 if [ "$driver_only" -eq 1 ]; then
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003588 # disable the built-in implementation of hashes
3589 scripts/config.py unset MBEDTLS_MD5_C
3590 scripts/config.py unset MBEDTLS_RIPEMD160_C
3591 scripts/config.py unset MBEDTLS_SHA1_C
3592 scripts/config.py unset MBEDTLS_SHA224_C
3593 scripts/config.py unset MBEDTLS_SHA256_C # see external RNG below
Dave Rodgman5b89c552023-10-10 14:59:02 +01003594 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003595 scripts/config.py unset MBEDTLS_SHA384_C
3596 scripts/config.py unset MBEDTLS_SHA512_C
3597 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003598 scripts/config.py unset MBEDTLS_SHA3_C
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003599 fi
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003600}
3601
Przemek Stekiel120ed8f2022-10-27 10:29:15 +02003602# Note that component_test_psa_crypto_config_reference_hash_use_psa
3603# is related to this component and both components need to be kept in sync.
3604# For details please see comments for component_test_psa_crypto_config_reference_hash_use_psa.
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003605component_test_psa_crypto_config_accel_hash_use_psa () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02003606 msg "test: full with accelerated hashes"
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003607
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003608 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \
3609 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3610 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003611
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003612 # Configure
3613 # ---------
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003614
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003615 config_psa_crypto_hash_use_psa 1
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003616
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003617 # Build
3618 # -----
3619
3620 helper_libtestdriver1_make_drivers "$loc_accel_list"
3621
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003622 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003623
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003624 # There's a risk of something getting re-enabled via config_psa.h;
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01003625 # make sure it did not happen. Note: it's OK for MD_C to be enabled.
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003626 not grep mbedtls_md5 library/md5.o
3627 not grep mbedtls_sha1 library/sha1.o
Manuel Pégourié-Gonnard7b0825d2022-07-11 11:06:09 +02003628 not grep mbedtls_sha256 library/sha256.o
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003629 not grep mbedtls_sha512 library/sha512.o
3630 not grep mbedtls_ripemd160 library/ripemd160.o
3631
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003632 # Run the tests
3633 # -------------
3634
Gilles Peskine14302ed2023-07-19 19:30:04 +02003635 msg "test: full with accelerated hashes"
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003636 make test
Andrzej Kurek07e35702022-09-05 15:39:23 -04003637
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01003638 # This is mostly useful so that we can later compare outcome files with
3639 # the reference config in analyze_outcomes.py, to check that the
3640 # dependency declarations in ssl-opt.sh and in TLS code are correct.
Gilles Peskine14302ed2023-07-19 19:30:04 +02003641 msg "test: ssl-opt.sh, full with accelerated hashes"
Przemek Stekiel5f6f32a2022-10-27 08:24:43 +02003642 tests/ssl-opt.sh
Andrzej Kurek07e35702022-09-05 15:39:23 -04003643
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01003644 # This is to make sure all ciphersuites are exercised, but we don't need
3645 # interop testing (besides, we already got some from ssl-opt.sh).
Gilles Peskine14302ed2023-07-19 19:30:04 +02003646 msg "test: compat.sh, full with accelerated hashes"
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01003647 tests/compat.sh -p mbedTLS -V YES
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003648}
3649
Przemek Stekiel120ed8f2022-10-27 10:29:15 +02003650# This component provides reference configuration for test_psa_crypto_config_accel_hash_use_psa
3651# without accelerated hash. The outcome from both components are used by the analyze_outcomes.py
3652# script to find regression in test coverage when accelerated hash is used (tests and ssl-opt).
3653# Both components need to be kept in sync.
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02003654component_test_psa_crypto_config_reference_hash_use_psa() {
Gilles Peskine14302ed2023-07-19 19:30:04 +02003655 msg "test: full without accelerated hashes"
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003656
3657 config_psa_crypto_hash_use_psa 0
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02003658
Gilles Peskine21570cf2023-12-22 11:49:50 +01003659 make
Przemek Stekielab0451b2022-10-24 11:29:35 +02003660
Gilles Peskine14302ed2023-07-19 19:30:04 +02003661 msg "test: full without accelerated hashes"
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02003662 make test
3663
Gilles Peskine14302ed2023-07-19 19:30:04 +02003664 msg "test: ssl-opt.sh, full without accelerated hashes"
Przemek Stekiel5f6f32a2022-10-27 08:24:43 +02003665 tests/ssl-opt.sh
Ronald Cron3a8714d2021-10-18 11:26:01 +02003666}
Manuel Pégourié-Gonnard97ab2a32022-07-06 10:46:57 +02003667
Valerio Setti9da01a72023-12-18 17:38:18 +01003668component_test_psa_crypto_config_accel_des () {
Valerio Settib9f4bfc2023-12-28 11:07:48 +01003669 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated DES"
Ronald Cron067de3b2021-03-11 11:49:03 +01003670
Valerio Setti9da01a72023-12-18 17:38:18 +01003671 # Albeit this components aims at accelerating DES which should only support
3672 # CBC and ECB modes, we need to accelerate more than that otherwise DES_C
3673 # would automatically be re-enabled by "config_adjust_legacy_from_psa.c"
Valerio Setti0244fbb2023-10-19 10:42:31 +02003674 loc_accel_list="ALG_ECB_NO_PADDING ALG_CBC_NO_PADDING ALG_CBC_PKCS7 \
3675 ALG_CTR ALG_CFB ALG_OFB ALG_XTS ALG_CMAC \
3676 KEY_TYPE_DES"
John Durkopd8959392020-09-20 23:09:17 -07003677
Valerio Setti9da01a72023-12-18 17:38:18 +01003678 # Note: we cannot accelerate all ciphers' key types otherwise we would also
3679 # have to either disable CCM/GCM or accelerate them, but that's out of scope
3680 # of this component. This limitation will be addressed by #8598.
3681
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003682 # Configure
3683 # ---------
Ronald Cron067de3b2021-03-11 11:49:03 +01003684
Valerio Setti9a427302023-10-17 11:40:42 +02003685 # Start from the full config
Valerio Settia797ce32023-10-03 15:16:38 +02003686 helper_libtestdriver1_adjust_config "full"
Ronald Cron067de3b2021-03-11 11:49:03 +01003687
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003688 # Disable the things that are being accelerated
Ronald Cron067de3b2021-03-11 11:49:03 +01003689 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
3690 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
3691 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
3692 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
3693 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
3694 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
3695 scripts/config.py unset MBEDTLS_DES_C
Yanray Wangaf5003a2023-10-11 11:57:10 +08003696 scripts/config.py unset MBEDTLS_CMAC_C
Ronald Cron067de3b2021-03-11 11:49:03 +01003697
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003698 # Build
3699 # -----
Gilles Peskine3587dfd2021-09-20 19:20:04 +02003700
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003701 helper_libtestdriver1_make_drivers "$loc_accel_list"
3702
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003703 helper_libtestdriver1_make_main "$loc_accel_list"
Gilles Peskine3587dfd2021-09-20 19:20:04 +02003704
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003705 # Make sure this was not re-enabled by accident (additive config)
Gilles Peskine3587dfd2021-09-20 19:20:04 +02003706 not grep mbedtls_des* library/des.o
Ronald Cron17b3afc2020-12-10 18:17:09 +01003707
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003708 # Run the tests
3709 # -------------
3710
Valerio Settib9f4bfc2023-12-28 11:07:48 +01003711 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated DES"
John Durkop4377bf72020-10-23 01:26:57 -07003712 make test
3713}
3714
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003715component_test_psa_crypto_config_accel_aead () {
3716 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD"
3717
Valerio Setti3f02bb72023-10-02 15:57:33 +02003718 loc_accel_list="ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 \
3719 KEY_TYPE_AES KEY_TYPE_CHACHA20 KEY_TYPE_ARIA KEY_TYPE_CAMELLIA"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003720
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003721 # Configure
3722 # ---------
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003723
Valerio Setti3f02bb72023-10-02 15:57:33 +02003724 # Start from full config
3725 helper_libtestdriver1_adjust_config "full"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003726
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003727 # Disable things that are being accelerated
Przemek Stekielee1bb412022-10-11 11:52:25 +02003728 scripts/config.py unset MBEDTLS_GCM_C
3729 scripts/config.py unset MBEDTLS_CCM_C
3730 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003731
Valerio Settia50b89e2023-11-08 15:58:47 +01003732 # Disable CCM_STAR_NO_TAG because this re-enables CCM_C.
3733 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003734
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003735 # Build
3736 # -----
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003737
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003738 helper_libtestdriver1_make_drivers "$loc_accel_list"
3739
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003740 helper_libtestdriver1_make_main "$loc_accel_list"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003741
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003742 # Make sure this was not re-enabled by accident (additive config)
Przemek Stekielee1bb412022-10-11 11:52:25 +02003743 not grep mbedtls_ccm library/ccm.o
3744 not grep mbedtls_gcm library/gcm.o
3745 not grep mbedtls_chachapoly library/chachapoly.o
3746
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003747 # Run the tests
3748 # -------------
3749
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003750 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD"
3751 make test
3752}
3753
Valerio Settib680fc42023-10-13 09:29:37 +02003754# This is a common configuration function used in:
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003755# - component_test_psa_crypto_config_accel_cipher_aead_cmac
3756# - component_test_psa_crypto_config_reference_cipher_aead_cmac
3757common_psa_crypto_config_accel_cipher_aead_cmac() {
Pengyu Lv78657d02023-10-27 11:00:32 +08003758 # Start from the full config
3759 helper_libtestdriver1_adjust_config "full"
3760
Valerio Settib680fc42023-10-13 09:29:37 +02003761 scripts/config.py unset MBEDTLS_NIST_KW_C
3762}
3763
Valerio Settib6b301f2023-10-04 12:05:05 +02003764# The 2 following test components, i.e.
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003765# - component_test_psa_crypto_config_accel_cipher_aead_cmac
3766# - component_test_psa_crypto_config_reference_cipher_aead_cmac
Valerio Settib6b301f2023-10-04 12:05:05 +02003767# are meant to be used together in analyze_outcomes.py script in order to test
3768# driver's coverage for ciphers and AEADs.
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003769component_test_psa_crypto_config_accel_cipher_aead_cmac () {
3770 msg "build: full config with accelerated cipher inc. AEAD and CMAC"
Valerio Settib6b301f2023-10-04 12:05:05 +02003771
Valerio Settiad8b7f02023-10-25 12:39:50 +02003772 loc_accel_list="ALG_ECB_NO_PADDING ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB \
Valerio Setti51d5b192023-11-08 10:56:54 +01003773 ALG_OFB ALG_XTS ALG_STREAM_CIPHER ALG_CCM_STAR_NO_TAG \
Valerio Setti97454fd2023-10-25 12:27:12 +02003774 ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 ALG_CMAC \
Valerio Settib6b301f2023-10-04 12:05:05 +02003775 KEY_TYPE_DES KEY_TYPE_AES KEY_TYPE_ARIA KEY_TYPE_CHACHA20 KEY_TYPE_CAMELLIA"
3776
3777 # Configure
3778 # ---------
3779
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003780 common_psa_crypto_config_accel_cipher_aead_cmac
Valerio Settib6b301f2023-10-04 12:05:05 +02003781
3782 # Disable the things that are being accelerated
3783 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
3784 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
3785 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
3786 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
3787 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
3788 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
3789 scripts/config.py unset MBEDTLS_GCM_C
3790 scripts/config.py unset MBEDTLS_CCM_C
3791 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Valerio Setti97454fd2023-10-25 12:27:12 +02003792 scripts/config.py unset MBEDTLS_CMAC_C
Valerio Settib6b301f2023-10-04 12:05:05 +02003793 scripts/config.py unset MBEDTLS_DES_C
3794 scripts/config.py unset MBEDTLS_AES_C
3795 scripts/config.py unset MBEDTLS_ARIA_C
3796 scripts/config.py unset MBEDTLS_CHACHA20_C
3797 scripts/config.py unset MBEDTLS_CAMELLIA_C
3798
Valerio Settiec9b2582023-11-08 16:50:54 +01003799 # Disable CIPHER_C entirely as all ciphers/AEADs are accelerated and PSA
3800 # does not depend on it.
3801 scripts/config.py unset MBEDTLS_CIPHER_C
3802
Valerio Settib6b301f2023-10-04 12:05:05 +02003803 # Build
3804 # -----
3805
3806 helper_libtestdriver1_make_drivers "$loc_accel_list"
3807
3808 helper_libtestdriver1_make_main "$loc_accel_list"
3809
3810 # Make sure this was not re-enabled by accident (additive config)
Valerio Settiec9b2582023-11-08 16:50:54 +01003811 not grep mbedtls_cipher library/cipher.o
Valerio Setti58d2b1a2023-10-12 15:24:12 +02003812 not grep mbedtls_des library/des.o
3813 not grep mbedtls_aes library/aes.o
3814 not grep mbedtls_aria library/aria.o
3815 not grep mbedtls_camellia library/camellia.o
Valerio Settib6b301f2023-10-04 12:05:05 +02003816 not grep mbedtls_ccm library/ccm.o
3817 not grep mbedtls_gcm library/gcm.o
3818 not grep mbedtls_chachapoly library/chachapoly.o
3819 not grep mbedtls_cmac library/cmac.o
3820
3821 # Run the tests
3822 # -------------
3823
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003824 msg "test: full config with accelerated cipher inc. AEAD and CMAC"
Gilles Peskine21570cf2023-12-22 11:49:50 +01003825 make test
Valerio Settif9414552023-11-09 10:43:20 +01003826
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003827 msg "ssl-opt: full config with accelerated cipher inc. AEAD and CMAC"
Valerio Settif9414552023-11-09 10:43:20 +01003828 tests/ssl-opt.sh
Pengyu Lvf561ed82023-11-14 17:33:32 +08003829
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003830 msg "compat.sh: full config with accelerated cipher inc. AEAD and CMAC"
Pengyu Lvf561ed82023-11-14 17:33:32 +08003831 tests/compat.sh -V NO -p mbedTLS
Valerio Settib6b301f2023-10-04 12:05:05 +02003832}
3833
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003834component_test_psa_crypto_config_reference_cipher_aead_cmac () {
3835 msg "build: full config with non-accelerated cipher inc. AEAD and CMAC"
3836 common_psa_crypto_config_accel_cipher_aead_cmac
Valerio Settib6b301f2023-10-04 12:05:05 +02003837
Gilles Peskine21570cf2023-12-22 11:49:50 +01003838 make
Valerio Settif9414552023-11-09 10:43:20 +01003839
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003840 msg "test: full config with non-accelerated cipher inc. AEAD and CMAC"
Valerio Settib6b301f2023-10-04 12:05:05 +02003841 make test
Valerio Settif9414552023-11-09 10:43:20 +01003842
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003843 msg "ssl-opt: full config with non-accelerated cipher inc. AEAD and CMAC"
Valerio Settif9414552023-11-09 10:43:20 +01003844 tests/ssl-opt.sh
Pengyu Lvf561ed82023-11-14 17:33:32 +08003845
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003846 msg "compat.sh: full config with non-accelerated cipher inc. AEAD and CMAC"
Pengyu Lvf561ed82023-11-14 17:33:32 +08003847 tests/compat.sh -V NO -p mbedTLS
Valerio Settib6b301f2023-10-04 12:05:05 +02003848}
3849
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003850common_block_cipher_dispatch() {
3851 TEST_WITH_DRIVER="$1"
3852
3853 # Start from the full config
3854 helper_libtestdriver1_adjust_config "full"
3855
3856 if [ "$TEST_WITH_DRIVER" -eq 1 ]; then
3857 # Disable key types that are accelerated (there is no legacy equivalent
3858 # symbol for ECB)
3859 scripts/config.py unset MBEDTLS_AES_C
3860 scripts/config.py unset MBEDTLS_ARIA_C
3861 scripts/config.py unset MBEDTLS_CAMELLIA_C
3862 fi
3863
Valerio Setti8c8b4da2024-01-02 11:44:30 +01003864 # Disable cipher's modes that, when not accelerated, cause
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003865 # legacy key types to be re-enabled in "config_adjust_legacy_from_psa.h".
Valerio Setticd21d4e2023-12-28 16:00:55 +01003866 # Keep this also in the reference component in order to skip the same tests
3867 # that were skipped in the accelerated one.
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003868 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR
3869 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB
3870 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB
3871 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
3872 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
3873 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CMAC
3874 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003875
3876 # Disable direct dependency on AES_C
3877 scripts/config.py unset MBEDTLS_NIST_KW_C
3878
3879 # Prevent the cipher module from using deprecated PSA path. The reason is
3880 # that otherwise there will be tests relying on "aes_info" (defined in
3881 # "cipher_wrap.c") whose functions are not available when AES_C is
3882 # not defined. ARIA and Camellia are not a problem in this case because
3883 # the PSA path is not tested for these key types.
3884 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
3885}
3886
Valerio Settif8e6cba2023-12-12 11:53:39 +01003887component_test_full_block_cipher_psa_dispatch () {
3888 msg "build: full + PSA dispatch in block_cipher"
3889
3890 loc_accel_list="ALG_ECB_NO_PADDING \
3891 KEY_TYPE_AES KEY_TYPE_ARIA KEY_TYPE_CAMELLIA"
3892
3893 # Configure
3894 # ---------
3895
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003896 common_block_cipher_dispatch 1
Valerio Settif8e6cba2023-12-12 11:53:39 +01003897
Valerio Settif8e6cba2023-12-12 11:53:39 +01003898 # Build
3899 # -----
3900
3901 helper_libtestdriver1_make_drivers "$loc_accel_list"
3902
3903 helper_libtestdriver1_make_main "$loc_accel_list"
3904
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003905 # Make sure disabled components were not re-enabled by accident (additive
3906 # config)
3907 not grep mbedtls_aes_ library/aes.o
3908 not grep mbedtls_aria_ library/aria.o
3909 not grep mbedtls_camellia_ library/camellia.o
3910
Valerio Settif8e6cba2023-12-12 11:53:39 +01003911 # Run the tests
3912 # -------------
3913
3914 msg "test: full + PSA dispatch in block_cipher"
3915 make test
3916}
3917
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003918# This is the reference component of component_test_full_block_cipher_psa_dispatch
3919component_test_full_block_cipher_legacy_dispatch () {
3920 msg "build: full + legacy dispatch in block_cipher"
3921
3922 common_block_cipher_dispatch 0
3923
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003924 make
3925
3926 msg "test: full + legacy dispatch in block_cipher"
3927 make test
3928}
3929
Gilles Peskine36dea152023-07-20 22:19:45 +02003930component_test_aead_chachapoly_disabled() {
3931 msg "build: full minus CHACHAPOLY"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02003932 scripts/config.py full
3933 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Ronald Cron6b49b552023-07-20 09:57:54 +02003934 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305
Gilles Peskine21570cf2023-12-22 11:49:50 +01003935 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02003936
Gilles Peskine36dea152023-07-20 22:19:45 +02003937 msg "test: full minus CHACHAPOLY"
3938 make test
3939}
3940
3941component_test_aead_only_ccm() {
3942 msg "build: full minus CHACHAPOLY and GCM"
3943 scripts/config.py full
3944 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
3945 scripts/config.py unset MBEDTLS_GCM_C
3946 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305
3947 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_GCM
Gilles Peskine21570cf2023-12-22 11:49:50 +01003948 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine36dea152023-07-20 22:19:45 +02003949
3950 msg "test: full minus CHACHAPOLY and GCM"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02003951 make test
3952}
3953
Ronald Crone501d0e2023-07-10 08:31:19 +02003954component_test_ccm_aes_sha256() {
3955 msg "build: CCM + AES + SHA256 configuration"
3956
Ronald Cron7612d8c2023-07-20 10:03:54 +02003957 cp "$CONFIG_TEST_DRIVER_H" "$CONFIG_H"
Ronald Cron6b49b552023-07-20 09:57:54 +02003958 cp configs/crypto-config-ccm-aes-sha256.h "$CRYPTO_CONFIG_H"
Ronald Crone501d0e2023-07-10 08:31:19 +02003959
Dave Rodgmanea03ef92023-12-19 12:19:59 +00003960 make
Ronald Crone501d0e2023-07-10 08:31:19 +02003961
3962 msg "test: CCM + AES + SHA256 configuration"
3963 make test
3964}
3965
John Durkopd0321952020-10-29 21:37:36 -07003966# This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08003967component_build_psa_accel_alg_ecdh() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02003968 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C"
John Durkopd0321952020-10-29 21:37:36 -07003969 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07003970 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01003971 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003972 scripts/config.py unset MBEDTLS_ECDH_C
3973 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3974 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
3975 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
3976 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3977 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3978 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01003979 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07003980}
3981
3982# This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08003983component_build_psa_accel_alg_hmac() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02003984 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_HMAC"
John Durkopd0321952020-10-29 21:37:36 -07003985 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07003986 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01003987 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003988 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01003989 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07003990}
3991
3992# This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08003993component_build_psa_accel_alg_hkdf() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02003994 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C"
John Durkopd0321952020-10-29 21:37:36 -07003995 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07003996 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01003997 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003998 scripts/config.py unset MBEDTLS_HKDF_C
Ronald Cron6f135e12021-12-08 16:57:54 +01003999 # Make sure to unset TLS1_3 since it requires HKDF_C and will not build properly without it.
4000 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07004001 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004002 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07004003}
4004
John Durkop1b7ee052020-11-27 08:51:22 -08004005# This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test.
4006component_build_psa_accel_alg_md5() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004007 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_MD5 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004008 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004009 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004010 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004011 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4012 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4013 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4014 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4015 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4016 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4017 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004018 scripts/config.py unset MBEDTLS_LMS_C
4019 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004020 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004021 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004022}
4023
4024# This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test.
4025component_build_psa_accel_alg_ripemd160() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004026 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RIPEMD160 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004027 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004028 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004029 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004030 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4031 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4032 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4033 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4034 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4035 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4036 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004037 scripts/config.py unset MBEDTLS_LMS_C
4038 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004039 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004040 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004041}
4042
4043# This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test.
4044component_build_psa_accel_alg_sha1() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004045 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_1 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004046 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004047 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004048 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004049 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4050 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4051 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4052 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4053 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4054 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4055 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004056 scripts/config.py unset MBEDTLS_LMS_C
4057 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004058 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004059 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004060}
4061
4062# This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test.
4063component_build_psa_accel_alg_sha224() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004064 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_224 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004065 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004066 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004067 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004068 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4069 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4070 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4071 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4072 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4073 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
John Durkop1b7ee052020-11-27 08:51:22 -08004074 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004075 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004076}
4077
4078# This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test.
4079component_build_psa_accel_alg_sha256() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004080 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_256 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004081 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004082 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004083 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004084 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4085 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4086 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4087 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4088 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4089 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
John Durkop1b7ee052020-11-27 08:51:22 -08004090 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004091 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004092}
4093
4094# This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test.
4095component_build_psa_accel_alg_sha384() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004096 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_384 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004097 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004098 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004099 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004100 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4101 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4102 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4103 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4104 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4105 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004106 scripts/config.py unset MBEDTLS_LMS_C
4107 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004108 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004109 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004110}
4111
4112# This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test.
4113component_build_psa_accel_alg_sha512() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004114 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_512 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004115 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004116 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004117 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004118 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4119 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4120 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4121 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4122 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4123 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4124 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004125 scripts/config.py unset MBEDTLS_LMS_C
4126 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004127 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004128 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004129}
4130
John Durkopd0321952020-10-29 21:37:36 -07004131# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004132component_build_psa_accel_alg_rsa_pkcs1v15_crypt() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004133 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopd0321952020-10-29 21:37:36 -07004134 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07004135 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004136 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004137 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
4138 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4139 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4140 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
John Durkopd0321952020-10-29 21:37:36 -07004141 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004142 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004143}
4144
4145# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004146component_build_psa_accel_alg_rsa_pkcs1v15_sign() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004147 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopbd069d32020-10-31 22:14:03 -07004148 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004149 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004150 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004151 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
4152 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4153 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4154 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07004155 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004156 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004157}
4158
4159# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004160component_build_psa_accel_alg_rsa_oaep() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004161 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopbd069d32020-10-31 22:14:03 -07004162 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004163 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004164 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004165 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_OAEP 1
4166 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4167 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4168 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07004169 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004170 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004171}
4172
4173# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004174component_build_psa_accel_alg_rsa_pss() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004175 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopbd069d32020-10-31 22:14:03 -07004176 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004177 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004178 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004179 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4180 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4181 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4182 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
John Durkopbd069d32020-10-31 22:14:03 -07004183 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004184 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004185}
4186
4187# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004188component_build_psa_accel_key_type_rsa_key_pair() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004189 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_xxx + PSA_WANT_ALG_RSA_PSS"
John Durkopbd069d32020-10-31 22:14:03 -07004190 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004191 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004192 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004193 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4194 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
4195 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
4196 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
4197 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
John Durkopbd069d32020-10-31 22:14:03 -07004198 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004199 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004200}
4201
4202# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004203component_build_psa_accel_key_type_rsa_public_key() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004204 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS"
John Durkopbd069d32020-10-31 22:14:03 -07004205 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004206 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004207 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004208 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4209 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
John Durkopbd069d32020-10-31 22:14:03 -07004210 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004211 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07004212}
4213
Dave Rodgmanc164c072023-06-28 09:43:23 +01004214
Dave Rodgman904c5892023-06-28 17:36:02 +01004215support_build_tfm_armcc () {
Yanray Wang799bd842023-11-10 12:21:35 +08004216 support_build_armcc
Dave Rodgmanc164c072023-06-28 09:43:23 +01004217}
4218
Dave Rodgman904c5892023-06-28 17:36:02 +01004219component_build_tfm_armcc() {
4220 # test the TF-M configuration can build cleanly with various warning flags enabled
Dave Rodgman82d7a872023-11-28 10:06:33 +00004221 cp configs/config-tfm.h "$CONFIG_H"
Dave Rodgmanc164c072023-06-28 09:43:23 +01004222
Dave Rodgman88651c42023-06-29 12:35:51 +01004223 msg "build: TF-M config, armclang armv7-m thumb2"
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02004224 armc6_build_test "--target=arm-arm-none-eabi -march=armv7-m -mthumb -Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused -I../tests/include/spe"
Dave Rodgmanfb374e62023-06-29 11:58:16 +01004225}
4226
4227component_build_tfm() {
Gilles Peskineeaa1c562023-09-06 16:23:13 +02004228 # Check that the TF-M configuration can build cleanly with various
4229 # warning flags enabled. We don't build or run tests, since the
4230 # TF-M configuration needs a TF-M platform. A tweaked version of
4231 # the configuration that works on mainstream platforms is in
4232 # configs/config-tfm.h, tested via test-ref-configs.pl.
Dave Rodgman82d7a872023-11-28 10:06:33 +00004233 cp configs/config-tfm.h "$CONFIG_H"
Dave Rodgmanfb374e62023-06-29 11:58:16 +01004234
Dave Rodgman88651c42023-06-29 12:35:51 +01004235 msg "build: TF-M config, clang, armv7-m thumb2"
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02004236 make lib CC="clang" CFLAGS="--target=arm-linux-gnueabihf -march=armv7-m -mthumb -Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused -I../tests/include/spe"
Dave Rodgmanc164c072023-06-28 09:43:23 +01004237
Dave Rodgman904c5892023-06-28 17:36:02 +01004238 msg "build: TF-M config, gcc native build"
4239 make clean
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02004240 make lib CC="gcc" CFLAGS="-Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wformat-signedness -Wlogical-op -I../tests/include/spe"
Dave Rodgmanc164c072023-06-28 09:43:23 +01004241}
4242
Dave Rodgman54ada8b2023-10-04 11:55:25 +01004243# Test that the given .o file builds with all (valid) combinations of the given options.
4244#
4245# Syntax: build_test_config_combos FILE VALIDATOR_FUNCTION OPT1 OPT2 ...
4246#
4247# The validator function is the name of a function to validate the combination of options.
4248# It may be "" if all combinations are valid.
4249# It receives a string containing a combination of options, as passed to the compiler,
Dave Rodgmanf3803a12023-10-16 13:47:15 +01004250# e.g. "-DOPT1 -DOPT2 ...". It must return 0 iff the combination is valid, non-zero if invalid.
Dave Rodgman920343a2023-10-01 18:41:09 +01004251build_test_config_combos() {
Dave Rodgman28e38d82023-10-04 11:50:30 +01004252 file=$1
Dave Rodgman920343a2023-10-01 18:41:09 +01004253 shift
Dave Rodgman28e38d82023-10-04 11:50:30 +01004254 validate_options=$1
Dave Rodgman920343a2023-10-01 18:41:09 +01004255 shift
Dave Rodgman28e38d82023-10-04 11:50:30 +01004256 options=("$@")
Dave Rodgman0f0f7692023-06-29 12:10:45 +01004257
Dave Rodgman42436102023-10-03 15:47:05 +01004258 # clear all of the options so that they can be overridden on the clang commandline
Dave Rodgman28e38d82023-10-04 11:50:30 +01004259 for opt in "${options[@]}"; do
4260 ./scripts/config.py unset ${opt}
Dave Rodgman42436102023-10-03 15:47:05 +01004261 done
4262
4263 # enter the directory containing the target file & strip the dir from the filename
Dave Rodgman28e38d82023-10-04 11:50:30 +01004264 cd $(dirname ${file})
4265 file=$(basename ${file})
Dave Rodgman42436102023-10-03 15:47:05 +01004266
Dave Rodgman920343a2023-10-01 18:41:09 +01004267 # The most common issue is unused variables/functions, so ensure -Wunused is set.
Dave Rodgman28e38d82023-10-04 11:50:30 +01004268 warning_flags="-Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused"
Dave Rodgman97285622023-09-29 17:32:06 +01004269
Dave Rodgman42436102023-10-03 15:47:05 +01004270 # Extract the command generated by the Makefile to build the target file.
4271 # This ensures that we have any include paths, macro definitions, etc
4272 # that may be applied by make.
4273 # Add -fsyntax-only as we only want a syntax check and don't need to generate a file.
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004274 compile_cmd="clang \$(LOCAL_CFLAGS) ${warning_flags} -fsyntax-only -c"
Dave Rodgman42436102023-10-03 15:47:05 +01004275
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004276 makefile=$(TMPDIR=. mktemp)
Dave Rodgman28e38d82023-10-04 11:50:30 +01004277 deps=""
Dave Rodgman97285622023-09-29 17:32:06 +01004278
Dave Rodgman28e38d82023-10-04 11:50:30 +01004279 len=${#options[@]}
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004280 source_file=${file%.o}.c
4281
4282 targets=0
4283 echo 'include Makefile' >${makefile}
Dave Rodgman97285622023-09-29 17:32:06 +01004284
Dave Rodgman28e38d82023-10-04 11:50:30 +01004285 for ((i = 0; i < $((2**${len})); i++)); do
Dave Rodgman920343a2023-10-01 18:41:09 +01004286 # generate each of 2^n combinations of options
Dave Rodgman28e38d82023-10-04 11:50:30 +01004287 # each bit of $i is used to determine if options[i] will be set or not
4288 target="t"
4289 clang_args=""
4290 for ((j = 0; j < ${len}; j++)); do
Dave Rodgmanb1107ae2023-10-04 12:30:23 +01004291 if (((i >> j) & 1)); then
Dave Rodgmana7127eb2023-10-04 13:38:41 +01004292 opt=-D${options[$j]}
Dave Rodgman7a8a2492023-10-04 13:14:20 +01004293 clang_args="${clang_args} ${opt}"
4294 target="${target}${opt}"
Dave Rodgmanb1107ae2023-10-04 12:30:23 +01004295 fi
Dave Rodgman920343a2023-10-01 18:41:09 +01004296 done
4297
Dave Rodgmanb1107ae2023-10-04 12:30:23 +01004298 # if combination is not known to be invalid, add it to the makefile
Dave Rodgmanf3803a12023-10-16 13:47:15 +01004299 if [[ -z $validate_options ]] || $validate_options "${clang_args}"; then
Dave Rodgman28e38d82023-10-04 11:50:30 +01004300 cmd="${compile_cmd} ${clang_args}"
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004301 echo "${target}: ${source_file}; $cmd ${source_file}" >> ${makefile}
Dave Rodgman920343a2023-10-01 18:41:09 +01004302
Dave Rodgman28e38d82023-10-04 11:50:30 +01004303 deps="${deps} ${target}"
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004304 ((++targets))
Dave Rodgman745af9f2023-09-29 15:47:07 +01004305 fi
Dave Rodgman97285622023-09-29 17:32:06 +01004306 done
Dave Rodgman6001fb22023-06-29 09:29:00 +01004307
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004308 echo "build_test_config_combos: ${deps}" >> ${makefile}
Dave Rodgmanaea01c92023-09-29 18:54:49 +01004309
Dave Rodgman920343a2023-10-01 18:41:09 +01004310 # execute all of the commands via Make (probably in parallel)
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004311 make -s -f ${makefile} build_test_config_combos
4312 echo "$targets targets checked"
Dave Rodgman920343a2023-10-01 18:41:09 +01004313
4314 # clean up the temporary makefile
Dave Rodgman28e38d82023-10-04 11:50:30 +01004315 rm ${makefile}
Dave Rodgman6001fb22023-06-29 09:29:00 +01004316}
4317
Dave Rodgman43a5ce82023-10-02 17:09:37 +01004318validate_aes_config_variations() {
Dave Rodgman920343a2023-10-01 18:41:09 +01004319 if [[ "$1" == *"MBEDTLS_AES_USE_HARDWARE_ONLY"* ]]; then
4320 if [[ "$1" == *"MBEDTLS_PADLOCK_C"* ]]; then
Dave Rodgman41bc7982023-10-16 14:04:21 +01004321 return 1
Dave Rodgman920343a2023-10-01 18:41:09 +01004322 fi
4323 if [[ !(("$HOSTTYPE" == "aarch64" && "$1" != *"MBEDTLS_AESCE_C"*) || \
4324 ("$HOSTTYPE" == "x86_64" && "$1" != *"MBEDTLS_AESNI_C"*)) ]]; then
Dave Rodgman41bc7982023-10-16 14:04:21 +01004325 return 1
Dave Rodgman920343a2023-10-01 18:41:09 +01004326 fi
4327 fi
Dave Rodgman41bc7982023-10-16 14:04:21 +01004328 return 0
Dave Rodgman920343a2023-10-01 18:41:09 +01004329}
4330
4331component_build_aes_variations() {
4332 # 18s - around 90ms per clang invocation on M1 Pro
4333 #
Gilles Peskine8f073122018-11-27 15:58:47 +01004334 # aes.o has many #if defined(...) guards that intersect in complex ways.
Dave Rodgman920343a2023-10-01 18:41:09 +01004335 # Test that all the combinations build cleanly.
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004336
Yanray Wangbc29aef2023-11-06 11:08:17 +08004337 MBEDTLS_ROOT_DIR="$PWD"
Gilles Peskine32e889d2020-04-12 23:43:28 +02004338 msg "build: aes.o for all combinations of relevant config options"
Gilles Peskinef4d2fd42021-10-08 11:45:47 +02004339
Dave Rodgman42436102023-10-03 15:47:05 +01004340 build_test_config_combos library/aes.o validate_aes_config_variations \
Dave Rodgman920343a2023-10-01 18:41:09 +01004341 "MBEDTLS_AES_SETKEY_ENC_ALT" "MBEDTLS_AES_DECRYPT_ALT" \
4342 "MBEDTLS_AES_ROM_TABLES" "MBEDTLS_AES_ENCRYPT_ALT" "MBEDTLS_AES_SETKEY_DEC_ALT" \
4343 "MBEDTLS_AES_FEWER_TABLES" "MBEDTLS_PADLOCK_C" "MBEDTLS_AES_USE_HARDWARE_ONLY" \
4344 "MBEDTLS_AESNI_C" "MBEDTLS_AESCE_C" "MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH"
Yanray Wangbc29aef2023-11-06 11:08:17 +08004345
4346 cd "$MBEDTLS_ROOT_DIR"
4347 msg "build: aes.o for all combinations of relevant config options + BLOCK_CIPHER_NO_DECRYPT"
4348
Yanray Wang42be1ba2023-11-23 14:28:47 +08004349 # MBEDTLS_BLOCK_CIPHER_NO_DECRYPT is incompatible with ECB in PSA, CBC/XTS/NIST_KW/DES,
Yanray Wangbc29aef2023-11-06 11:08:17 +08004350 # manually set or unset those configurations to check
4351 # MBEDTLS_BLOCK_CIPHER_NO_DECRYPT with various combinations in aes.o.
Yanray Wangbc29aef2023-11-06 11:08:17 +08004352 scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
4353 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
4354 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
4355 scripts/config.py unset MBEDTLS_DES_C
4356 scripts/config.py unset MBEDTLS_NIST_KW_C
4357 build_test_config_combos library/aes.o validate_aes_config_variations \
4358 "MBEDTLS_AES_SETKEY_ENC_ALT" "MBEDTLS_AES_DECRYPT_ALT" \
4359 "MBEDTLS_AES_ROM_TABLES" "MBEDTLS_AES_ENCRYPT_ALT" "MBEDTLS_AES_SETKEY_DEC_ALT" \
4360 "MBEDTLS_AES_FEWER_TABLES" "MBEDTLS_PADLOCK_C" "MBEDTLS_AES_USE_HARDWARE_ONLY" \
4361 "MBEDTLS_AESNI_C" "MBEDTLS_AESCE_C" "MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004362}
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02004363
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04004364component_test_no_platform () {
4365 # Full configuration build, without platform support, file IO and net sockets.
4366 # This should catch missing mbedtls_printf definitions, and by disabling file
4367 # IO, it should catch missing '#include <stdio.h>'
4368 msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s
Paul Elliottfb81f772023-10-18 17:44:59 +01004369 scripts/config.py full_no_platform
Simon Butcherf95c1762016-11-10 17:25:58 +00004370 scripts/config.py unset MBEDTLS_PLATFORM_C
4371 scripts/config.py unset MBEDTLS_NET_C
Manuel Pégourié-Gonnard3d4755b2015-06-03 14:03:17 +01004372 scripts/config.py unset MBEDTLS_FS_IO
4373 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Simon Butcherb9283432016-07-13 11:02:41 +01004374 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Manuel Pégourié-Gonnard3d4755b2015-06-03 14:03:17 +01004375 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Paul Elliottfb81f772023-10-18 17:44:59 +01004376 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
Simon Butcher284b4c92016-06-26 13:10:00 +01004377 # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004378 # to re-enable platform integration features otherwise disabled in C99 builds
4379 make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs
Gilles Peskine21570cf2023-12-22 11:49:50 +01004380 make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test
Simon Butchercb587002017-01-06 16:14:44 +00004381}
Gilles Peskine7c652162017-12-11 00:01:40 +01004382
4383component_build_no_std_function () {
Manuel Pégourié-Gonnarda71780e2015-02-13 13:56:55 +00004384 # catch compile bugs in _uninit functions
Gilles Peskine8f073122018-11-27 15:58:47 +01004385 msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s
4386 scripts/config.py full
4387 scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
Gilles Peskine8f073122018-11-27 15:58:47 +01004388 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
4389 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
4390 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
4391 make
4392}
Manuel Pégourié-Gonnarddccb80b2015-06-03 10:20:33 +01004393
Gilles Peskine8f073122018-11-27 15:58:47 +01004394component_build_no_ssl_srv () {
4395 msg "build: full config except SSL server, make, gcc" # ~ 30s
Gilles Peskine8f073122018-11-27 15:58:47 +01004396 scripts/config.py full
4397 scripts/config.py unset MBEDTLS_SSL_SRV_C
Gilles Peskine21570cf2023-12-22 11:49:50 +01004398 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01004399}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02004400
Gilles Peskine8f073122018-11-27 15:58:47 +01004401component_build_no_ssl_cli () {
4402 msg "build: full config except SSL client, make, gcc" # ~ 30s
Gilles Peskine8f073122018-11-27 15:58:47 +01004403 scripts/config.py full
4404 scripts/config.py unset MBEDTLS_SSL_CLI_C
Gilles Peskine21570cf2023-12-22 11:49:50 +01004405 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01004406}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02004407
Gilles Peskine8f073122018-11-27 15:58:47 +01004408component_build_no_sockets () {
4409 # Note, C99 compliance can also be tested with the sockets support disabled,
4410 # as that requires a POSIX platform (which isn't the same as C99).
4411 msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s
Gilles Peskine8f073122018-11-27 15:58:47 +01004412 scripts/config.py full
4413 scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc.
4414 scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux
4415 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib
4416}
Manuel Pégourié-Gonnard009a2642015-05-29 10:31:13 +02004417
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004418component_test_memory_buffer_allocator_backtrace () {
Hanno Becker0fb9ba22019-02-26 14:34:13 +00004419 msg "build: default config with memory buffer allocator and backtrace enabled"
4420 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4421 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4422 scripts/config.py set MBEDTLS_MEMORY_BACKTRACE
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04004423 scripts/config.py set MBEDTLS_MEMORY_DEBUG
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004424 cmake -DCMAKE_BUILD_TYPE:String=Release .
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04004425 make
4426
4427 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE"
4428 make test
4429}
4430
4431component_test_memory_buffer_allocator () {
4432 msg "build: default config with memory buffer allocator"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004433 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4434 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004435 cmake -DCMAKE_BUILD_TYPE:String=Release .
Hanno Becker0fb9ba22019-02-26 14:34:13 +00004436 make
4437
4438 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C"
4439 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01004440
4441 msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C"
4442 # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004443 tests/ssl-opt.sh -e '^DTLS proxy'
Hanno Becker0fb9ba22019-02-26 14:34:13 +00004444}
4445
Gilles Peskine8f073122018-11-27 15:58:47 +01004446component_test_no_max_fragment_length () {
4447 # Run max fragment length tests with MFL disabled
4448 msg "build: default config except MFL extension (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004449 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Dave Rodgman17127e92023-12-14 16:42:48 +00004450 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01004451 make
Hanno Becker5175ac62017-09-18 15:36:25 +01004452
Gilles Peskine8f073122018-11-27 15:58:47 +01004453 msg "test: ssl-opt.sh, MFL-related tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004454 tests/ssl-opt.sh -f "Max fragment length"
Gilles Peskine8f073122018-11-27 15:58:47 +01004455}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004456
Hanno Becker545ced42019-02-19 11:10:48 +00004457component_test_asan_remove_peer_certificate () {
4458 msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004459 scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
Dave Rodgman17127e92023-12-14 16:42:48 +00004460 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Hanno Becker545ced42019-02-19 11:10:48 +00004461 make
4462
4463 msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
4464 make test
4465
4466 msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004467 tests/ssl-opt.sh
Hanno Becker545ced42019-02-19 11:10:48 +00004468
4469 msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004470 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02004471
4472 msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004473 tests/context-info.sh
Hanno Becker545ced42019-02-19 11:10:48 +00004474}
4475
Gilles Peskine8f073122018-11-27 15:58:47 +01004476component_test_no_max_fragment_length_small_ssl_out_content_len () {
4477 msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004478 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4479 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
4480 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Dave Rodgman17127e92023-12-14 16:42:48 +00004481 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01004482 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10004483
Gilles Peskine8f073122018-11-27 15:58:47 +01004484 msg "test: MFL tests (disabled MFL extension case) & large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004485 tests/ssl-opt.sh -f "Max fragment length\|Large buffer"
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02004486
4487 msg "test: context-info.sh (disabled MFL extension case)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004488 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01004489}
Angus Grattonc4dd0732018-04-11 16:28:39 +10004490
Darryl Greenaad82f92019-12-02 10:53:11 +00004491component_test_variable_ssl_in_out_buffer_len () {
4492 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)"
4493 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Dave Rodgman17127e92023-12-14 16:42:48 +00004494 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Darryl Greenaad82f92019-12-02 10:53:11 +00004495 make
4496
4497 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
4498 make test
4499
4500 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004501 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004502
4503 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004504 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004505}
4506
Manuel Pégourié-Gonnard6a543ba2022-11-25 11:30:10 +01004507component_test_dtls_cid_legacy () {
Hannes Tschofenigdf84bb32022-11-23 11:14:03 +01004508 msg "build: MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled (ASan build)"
Hannes Tschofenigfd6cca42021-10-12 09:22:33 +02004509 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT 1
Darryl Greenaad82f92019-12-02 10:53:11 +00004510
Dave Rodgman17127e92023-12-14 16:42:48 +00004511 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Darryl Greenaad82f92019-12-02 10:53:11 +00004512 make
4513
Hannes Tschofenigdf84bb32022-11-23 11:14:03 +01004514 msg "test: MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy)"
Darryl Greenaad82f92019-12-02 10:53:11 +00004515 make test
4516
Hannes Tschofenigdf84bb32022-11-23 11:14:03 +01004517 msg "test: ssl-opt.sh, MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004518 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004519
Manuel Pégourié-Gonnard6a543ba2022-11-25 11:30:10 +01004520 msg "test: compat.sh, MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004521 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004522}
4523
Piotr Nowicki0937ed22019-11-26 16:32:40 +01004524component_test_ssl_alloc_buffer_and_mfl () {
4525 msg "build: default config with memory buffer allocator and MFL extension"
4526 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4527 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4528 scripts/config.py set MBEDTLS_MEMORY_DEBUG
4529 scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4530 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004531 cmake -DCMAKE_BUILD_TYPE:String=Release .
Piotr Nowicki0937ed22019-11-26 16:32:40 +01004532 make
4533
4534 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
4535 make test
4536
4537 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004538 tests/ssl-opt.sh -f "Handshake memory usage"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01004539}
4540
Gilles Peskine636c26a2020-03-04 20:46:15 +01004541component_test_when_no_ciphersuites_have_mac () {
4542 msg "build: when no ciphersuites have MAC"
4543 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Gilles Peskine636c26a2020-03-04 20:46:15 +01004544 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
TRodziewicz2add5c12021-04-28 16:50:20 +02004545 scripts/config.py unset MBEDTLS_CMAC_C
Gilles Peskine636c26a2020-03-04 20:46:15 +01004546 make
4547
4548 msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
4549 make test
4550
4551 msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004552 tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM'
Gilles Peskine636c26a2020-03-04 20:46:15 +01004553}
4554
Raoul Strackxa4e86142020-06-15 17:03:13 +02004555component_test_no_date_time () {
4556 msg "build: default config without MBEDTLS_HAVE_TIME_DATE"
4557 scripts/config.py unset MBEDTLS_HAVE_TIME_DATE
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004558 cmake -D CMAKE_BUILD_TYPE:String=Check .
Raoul Strackxa4e86142020-06-15 17:03:13 +02004559 make
4560
4561 msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites"
4562 make test
4563}
4564
Gilles Peskine8f073122018-11-27 15:58:47 +01004565component_test_platform_calloc_macro () {
4566 msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004567 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4568 scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc
4569 scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free
Dave Rodgman17127e92023-12-14 16:42:48 +00004570 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01004571 make
Hanno Beckere5fecec2018-10-11 11:02:52 +01004572
Gilles Peskine8f073122018-11-27 15:58:47 +01004573 msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
4574 make test
4575}
Hanno Beckere5fecec2018-10-11 11:02:52 +01004576
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02004577component_test_malloc_0_null () {
4578 msg "build: malloc(0) returns NULL (ASan+UBSan build)"
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01004579 scripts/config.py full
Gilles Peskine21570cf2023-12-22 11:49:50 +01004580 make CC=$ASAN_CC CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"$PWD/tests/configs/user-config-malloc-0-null.h\"' $ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02004581
4582 msg "test: malloc(0) returns NULL (ASan+UBSan build)"
4583 make test
4584
4585 msg "selftest: malloc(0) returns NULL (ASan+UBSan build)"
4586 # Just the calloc selftest. "make test" ran the others as part of the
4587 # test suites.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004588 programs/test/selftest calloc
Gilles Peskine765d2402020-02-11 18:26:34 +01004589
4590 msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)"
4591 # Run a subset of the tests. The choice is a balance between coverage
4592 # and time (including time indirectly wasted due to flaky tests).
4593 # The current choice is to skip tests whose description includes
4594 # "proxy", which is an approximation of skipping tests that use the
4595 # UDP proxy, which tend to be slower and flakier.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004596 tests/ssl-opt.sh -e 'proxy'
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02004597}
4598
Dave Rodgman6a08b682023-06-19 11:51:33 +01004599support_test_aesni() {
4600 # Check that gcc targets x86_64 (we can build AESNI), and check for
4601 # AESNI support on the host (we can run AESNI).
4602 #
4603 # The name of this function is possibly slightly misleading, but needs to align
4604 # with the name of the corresponding test, component_test_aesni.
Dave Rodgmanf8986e32023-06-19 10:55:59 +01004605 #
4606 # In principle 32-bit x86 can support AESNI, but our implementation does not
4607 # support 32-bit x86, so we check for x86-64.
4608 # We can only grep /proc/cpuinfo on Linux, so this also checks for Linux
Dave Rodgman6a08b682023-06-19 11:51:33 +01004609 (gcc -v 2>&1 | grep Target | grep -q x86_64) &&
4610 [[ "$HOSTTYPE" == "x86_64" && "$OSTYPE" == "linux-gnu" ]] &&
Jerry Yua7de78d2023-08-08 12:57:35 +08004611 (lscpu | grep -qw aes)
Dave Rodgmanf8986e32023-06-19 10:55:59 +01004612}
4613
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004614component_test_aesni () { # ~ 60s
4615 # This tests the two AESNI implementations (intrinsics and assembly), and also the plain C
4616 # fallback. It also tests the logic that is used to select which implementation(s) to build.
4617 #
4618 # This test does not require the host to have support for AESNI (if it doesn't, the run-time
4619 # AESNI detection will fallback to the plain C implementation, so the tests will instead
4620 # exercise the plain C impl).
4621
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004622 msg "build: default config with different AES implementations"
Dave Rodgman838dc462023-06-16 13:18:19 +01004623 scripts/config.py set MBEDTLS_AESNI_C
Jerry Yu17a9d2e2023-08-03 16:14:18 +08004624 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgman838dc462023-06-16 13:18:19 +01004625 scripts/config.py set MBEDTLS_HAVE_ASM
4626
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004627 # test the intrinsics implementation
4628 msg "AES tests, test intrinsics"
Dave Rodgman838dc462023-06-16 13:18:19 +01004629 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004630 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mpclmul -msse2 -maes'
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004631 # check that we built intrinsics - this should be used by default when supported by the compiler
Jerry Yu1221a312023-08-03 16:09:07 +08004632 ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics"
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004633
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004634 # test the asm implementation
4635 msg "AES tests, test assembly"
4636 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004637 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mno-pclmul -mno-sse2 -mno-aes'
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004638 # check that we built assembly - this should be built if the compiler does not support intrinsics
Jerry Yu1221a312023-08-03 16:09:07 +08004639 ./programs/test/selftest aes | grep "AESNI code" | grep -q "assembly"
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004640
4641 # test the plain C implementation
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004642 scripts/config.py unset MBEDTLS_AESNI_C
Jerry Yu17a9d2e2023-08-03 16:14:18 +08004643 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004644 msg "AES tests, plain C"
4645 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004646 make CC=gcc CFLAGS='-O2 -Werror'
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004647 # check that there is no AESNI code present
Jerry Yu1221a312023-08-03 16:09:07 +08004648 ./programs/test/selftest aes | not grep -q "AESNI code"
Jerry Yu76a51b92023-08-08 16:03:55 +08004649 not grep -q "AES note: using AESNI" ./programs/test/selftest
4650 grep -q "AES note: built-in implementation." ./programs/test/selftest
Jerry Yu8a599c02023-08-03 17:01:02 +08004651
4652 # test the intrinsics implementation
4653 scripts/config.py set MBEDTLS_AESNI_C
4654 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4655 msg "AES tests, test AESNI only"
4656 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004657 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mpclmul -msse2 -maes'
Jerry Yua7de78d2023-08-08 12:57:35 +08004658 ./programs/test/selftest aes | grep -q "AES note: using AESNI"
4659 ./programs/test/selftest aes | not grep -q "AES note: built-in implementation."
Jerry Yu76a51b92023-08-08 16:03:55 +08004660 grep -q "AES note: using AESNI" ./programs/test/selftest
4661 not grep -q "AES note: built-in implementation." ./programs/test/selftest
Dave Rodgman838dc462023-06-16 13:18:19 +01004662}
4663
Jerry Yub6d39c22023-08-16 15:11:48 +08004664support_test_aesni_m32() {
Dave Rodgman852de3c2023-12-14 14:46:45 +00004665 support_test_m32_no_asm && (lscpu | grep -qw aes)
Jerry Yub6d39c22023-08-16 15:11:48 +08004666}
4667
4668component_test_aesni_m32 () { # ~ 60s
4669 # This tests are duplicated from component_test_aesni for i386 target
4670 #
4671 # AESNI intrinsic code supports i386 and assembly code does not support it.
4672
4673 msg "build: default config with different AES implementations"
4674 scripts/config.py set MBEDTLS_AESNI_C
4675 scripts/config.py set MBEDTLS_PADLOCK_C
4676 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4677 scripts/config.py set MBEDTLS_HAVE_ASM
4678
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004679 # test the intrinsics implementation with gcc
4680 msg "AES tests, test intrinsics (gcc)"
Jerry Yub6d39c22023-08-16 15:11:48 +08004681 make clean
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004682 make CC=gcc CFLAGS='-m32 -Werror -Wall -Wextra' LDFLAGS='-m32'
Jerry Yub6d39c22023-08-16 15:11:48 +08004683 # check that we built intrinsics - this should be used by default when supported by the compiler
4684 ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics"
4685 grep -q "AES note: using AESNI" ./programs/test/selftest
4686 grep -q "AES note: built-in implementation." ./programs/test/selftest
4687 grep -q "AES note: using VIA Padlock" ./programs/test/selftest
4688 grep -q mbedtls_aesni_has_support ./programs/test/selftest
4689
4690 scripts/config.py set MBEDTLS_AESNI_C
Jerry Yub6d39c22023-08-16 15:11:48 +08004691 scripts/config.py unset MBEDTLS_PADLOCK_C
4692 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4693 msg "AES tests, test AESNI only"
4694 make clean
4695 make CC=gcc CFLAGS='-m32 -Werror -Wall -Wextra -mpclmul -msse2 -maes' LDFLAGS='-m32'
4696 ./programs/test/selftest aes | grep -q "AES note: using AESNI"
4697 ./programs/test/selftest aes | not grep -q "AES note: built-in implementation."
4698 grep -q "AES note: using AESNI" ./programs/test/selftest
4699 not grep -q "AES note: built-in implementation." ./programs/test/selftest
4700 not grep -q "AES note: using VIA Padlock" ./programs/test/selftest
4701 not grep -q mbedtls_aesni_has_support ./programs/test/selftest
4702}
4703
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004704support_test_aesni_m32_clang() {
Tom Cosgroved4c373a2024-01-30 13:56:38 +00004705 # clang >= 4 is required to build with target attributes
4706 support_test_aesni_m32 && [[ $(clang_version) -ge 4 ]]
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004707}
4708
4709component_test_aesni_m32_clang() {
4710
4711 scripts/config.py set MBEDTLS_AESNI_C
4712 scripts/config.py set MBEDTLS_PADLOCK_C
4713 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4714 scripts/config.py set MBEDTLS_HAVE_ASM
4715
4716 # test the intrinsics implementation with clang
4717 msg "AES tests, test intrinsics (clang)"
4718 make clean
4719 make CC=clang CFLAGS='-m32 -Werror -Wall -Wextra' LDFLAGS='-m32'
4720 # check that we built intrinsics - this should be used by default when supported by the compiler
4721 ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics"
4722 grep -q "AES note: using AESNI" ./programs/test/selftest
4723 grep -q "AES note: built-in implementation." ./programs/test/selftest
4724 grep -q "AES note: using VIA Padlock" ./programs/test/selftest
4725 grep -q mbedtls_aesni_has_support ./programs/test/selftest
4726}
4727
Jerry Yu193cbc02023-08-03 17:06:29 +08004728# For timebeing, no aarch64 gcc available in CI and no arm64 CI node.
4729component_build_aes_aesce_armcc () {
4730 msg "Build: AESCE test on arm64 platform without plain C."
4731 scripts/config.py baremetal
4732
4733 # armc[56] don't support SHA-512 intrinsics
4734 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
4735
4736 # Stop armclang warning about feature detection for A64_CRYPTO.
4737 # With this enabled, the library does build correctly under armclang,
4738 # but in baremetal builds (as tested here), feature detection is
4739 # unavailable, and the user is notified via a #warning. So enabling
4740 # this feature would prevent us from building with -Werror on
4741 # armclang. Tracked in #7198.
Dave Rodgman5b89c552023-10-10 14:59:02 +01004742 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Jerry Yu193cbc02023-08-03 17:06:29 +08004743 scripts/config.py set MBEDTLS_HAVE_ASM
4744
4745 msg "AESCE, build with default configuration."
4746 scripts/config.py set MBEDTLS_AESCE_C
4747 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4748 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto"
4749
4750 msg "AESCE, build AESCE only"
4751 scripts/config.py set MBEDTLS_AESCE_C
4752 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4753 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto"
4754}
4755
Dave Rodgman0c584032023-10-08 12:26:54 +01004756support_build_aes_armce() {
Tom Cosgrove9e4eeff2024-01-30 13:51:18 +00004757 # clang >= 11 is required to build with AES extensions
Tom Cosgroved4c373a2024-01-30 13:56:38 +00004758 [[ $(clang_version) -ge 11 ]]
Dave Rodgman0c584032023-10-08 12:26:54 +01004759}
4760
4761component_build_aes_armce () {
4762 # Test variations of AES with Armv8 crypto extensions
4763 scripts/config.py set MBEDTLS_AESCE_C
4764 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4765
4766 msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, aarch64"
Dave Rodgmanb622ff82023-10-08 22:25:16 +01004767 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a+crypto"
Dave Rodgman0c584032023-10-08 12:26:54 +01004768
4769 msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, arm"
4770 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm"
4771
4772 msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, thumb"
4773 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
4774
Dave Rodgman5e419372023-10-23 15:30:20 +01004775 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgman0c584032023-10-08 12:26:54 +01004776
Dave Rodgman5e419372023-10-23 15:30:20 +01004777 msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, aarch64"
4778 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a+crypto"
Dave Rodgman0c584032023-10-08 12:26:54 +01004779
Dave Rodgman5e419372023-10-23 15:30:20 +01004780 msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, arm"
4781 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm"
Dave Rodgman0c584032023-10-08 12:26:54 +01004782
Dave Rodgman5e419372023-10-23 15:30:20 +01004783 msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, thumb"
4784 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
Dave Rodgmanf3501b42023-10-11 16:21:25 +01004785
4786 # test for presence of AES instructions
4787 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4788 msg "clang, test A32 crypto instructions built"
4789 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4790 grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4791 msg "clang, test T32 crypto instructions built"
4792 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4793 grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4794 msg "clang, test aarch64 crypto instructions built"
4795 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4796 grep -E 'aes[a-z]+\s*[qv]' library/aesce.o
4797
4798 # test for absence of AES instructions
4799 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4800 scripts/config.py unset MBEDTLS_AESCE_C
4801 msg "clang, test A32 crypto instructions not built"
4802 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4803 not grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4804 msg "clang, test T32 crypto instructions not built"
4805 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4806 not grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4807 msg "clang, test aarch64 crypto instructions not built"
4808 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4809 not grep -E 'aes[a-z]+\s*[qv]' library/aesce.o
Dave Rodgman0c584032023-10-08 12:26:54 +01004810}
4811
Dave Rodgman9ed18532023-10-05 00:06:47 +01004812support_build_sha_armce() {
Tom Cosgroved4c373a2024-01-30 13:56:38 +00004813 # clang >= 4 is required to build with SHA extensions
4814 [[ $(clang_version) -ge 4 ]]
Dave Rodgman9ed18532023-10-05 00:06:47 +01004815}
4816
Dave Rodgmand9e80832023-10-04 17:17:46 +01004817component_build_sha_armce () {
Dave Rodgman5b89c552023-10-10 14:59:02 +01004818 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004819
4820
4821 # Test variations of SHA256 Armv8 crypto extensions
Dave Rodgman5b89c552023-10-10 14:59:02 +01004822 scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004823 msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY clang, aarch64"
4824 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a"
4825 msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY clang, arm"
4826 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm"
4827 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
Dave Rodgmand9e80832023-10-04 17:17:46 +01004828
Dave Rodgmand9e80832023-10-04 17:17:46 +01004829
Dave Rodgman94a634d2023-10-10 12:59:29 +01004830 # test the deprecated form of the config option
Dave Rodgman94a634d2023-10-10 12:59:29 +01004831 scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004832 msg "MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY clang, thumb"
4833 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
4834 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
Dave Rodgmand9e80832023-10-04 17:17:46 +01004835
Dave Rodgman5b89c552023-10-10 14:59:02 +01004836 scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004837 msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT clang, aarch64"
4838 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a"
4839 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgmand9e80832023-10-04 17:17:46 +01004840
Dave Rodgmancd654002023-10-05 09:40:07 +01004841
Dave Rodgman94a634d2023-10-10 12:59:29 +01004842 # test the deprecated form of the config option
Dave Rodgman94a634d2023-10-10 12:59:29 +01004843 scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004844 msg "MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT clang, arm"
4845 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -std=c99"
4846 msg "MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT clang, thumb"
4847 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
4848 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
Dave Rodgman94a634d2023-10-10 12:59:29 +01004849
Dave Rodgmancd654002023-10-05 09:40:07 +01004850
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004851 # examine the disassembly for presence of SHA instructions
4852 for opt in MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT; do
4853 scripts/config.py set ${opt}
4854 msg "${opt} clang, test A32 crypto instructions built"
4855 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4856 grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4857
4858 msg "${opt} clang, test T32 crypto instructions built"
4859 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4860 grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4861
4862 msg "${opt} clang, test aarch64 crypto instructions built"
4863 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4864 grep -E 'sha256[a-z0-9]+\s+[qv]' library/sha256.o
4865 scripts/config.py unset ${opt}
4866 done
4867
4868
4869 # examine the disassembly for absence of SHA instructions
4870 msg "clang, test A32 crypto instructions not built"
4871 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4872 not grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4873
4874 msg "clang, test T32 crypto instructions not built"
4875 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4876 not grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4877
4878 msg "clang, test aarch64 crypto instructions not built"
4879 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4880 not grep -E 'sha256[a-z0-9]+\s+[qv]' library/sha256.o
Dave Rodgmand9e80832023-10-04 17:17:46 +01004881}
4882
Jerry Yuc935aa62023-08-03 17:08:27 +08004883# For timebeing, no VIA Padlock platform available.
4884component_build_aes_via_padlock () {
4885
4886 msg "AES:VIA PadLock, build with default configuration."
Jerry Yu506759f2023-08-16 17:11:22 +08004887 scripts/config.py unset MBEDTLS_AESNI_C
Jerry Yuc935aa62023-08-03 17:08:27 +08004888 scripts/config.py set MBEDTLS_PADLOCK_C
4889 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgmanb90f87b2023-12-14 23:27:33 +00004890 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Jerry Yu506759f2023-08-16 17:11:22 +08004891 grep -q mbedtls_padlock_has_support ./programs/test/selftest
Jerry Yuc935aa62023-08-03 17:08:27 +08004892
4893}
4894
4895support_build_aes_via_padlock_only () {
4896 ( [ "$MBEDTLS_TEST_PLATFORM" == "Linux-x86_64" ] || \
4897 [ "$MBEDTLS_TEST_PLATFORM" == "Linux-amd64" ] ) && \
4898 [ "`dpkg --print-foreign-architectures`" == "i386" ]
4899}
4900
Jerry Yu193cbc02023-08-03 17:06:29 +08004901support_build_aes_aesce_armcc () {
4902 support_build_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +01004903}
4904
Gilles Peskine3bdd4122019-07-27 23:52:53 +02004905component_test_aes_only_128_bit_keys () {
Gilles Peskine8f073122018-11-27 15:58:47 +01004906 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH"
Hanno Becker83ebf782017-07-07 12:29:15 +01004907 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01004908 scripts/config.py unset MBEDTLS_PADLOCK_C
4909
Dave Rodgmand8d64512023-12-19 12:20:21 +00004910 make CFLAGS='-O2 -Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01004911
4912 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH"
4913 make test
4914}
4915
4916component_test_no_ctr_drbg_aes_only_128_bit_keys () {
4917 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C"
4918 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01004919 scripts/config.py unset MBEDTLS_CTR_DRBG_C
4920 scripts/config.py unset MBEDTLS_PADLOCK_C
4921
Hanno Becker83ebf782017-07-07 12:29:15 +01004922 make CC=clang CFLAGS='-Werror -Wall -Wextra'
Gilles Peskine8f073122018-11-27 15:58:47 +01004923
4924 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02004925 make test
4926}
Gilles Peskine8f073122018-11-27 15:58:47 +01004927
Hanno Becker83ebf782017-07-07 12:29:15 +01004928component_test_aes_only_128_bit_keys_have_builtins () {
Gilles Peskine8f073122018-11-27 15:58:47 +01004929 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
4930 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
4931 scripts/config.py unset MBEDTLS_PADLOCK_C
4932 scripts/config.py unset MBEDTLS_AESNI_C
Gilles Peskine592f5912019-10-07 18:49:32 +02004933 scripts/config.py unset MBEDTLS_AESCE_C
4934
Dave Rodgmand8d64512023-12-19 12:20:21 +00004935 make CFLAGS='-O2 -Werror -Wall -Wextra'
Gilles Peskine3b46cd32020-02-18 17:56:33 +01004936
4937 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
Gilles Peskine592f5912019-10-07 18:49:32 +02004938 make test
4939
4940 msg "selftest: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
4941 programs/test/selftest
4942}
4943
Matthias Schulz0767fda2024-02-07 10:46:28 +01004944component_test_gcm_largetable () {
Matthias Schulza6ac0f12024-02-09 17:09:42 +01004945 msg "build: default config + GCM_LARGE_TABLE - AESNI_C - AESCE_C"
4946 scripts/config.py set MBEDTLS_GCM_LARGE_TABLE
Matthias Schulz0767fda2024-02-07 10:46:28 +01004947 scripts/config.py unset MBEDTLS_PADLOCK_C
4948 scripts/config.py unset MBEDTLS_AESNI_C
4949 scripts/config.py unset MBEDTLS_AESCE_C
4950
4951 make CFLAGS='-O2 -Werror -Wall -Wextra'
4952
Matthias Schulza6ac0f12024-02-09 17:09:42 +01004953 msg "test: default config - GCM_LARGE_TABLE - AESNI_C - AESCE_C"
Matthias Schulz0767fda2024-02-07 10:46:28 +01004954 make test
4955}
4956
Manuel Pégourié-Gonnard9b06abe2015-06-25 09:56:07 +02004957component_test_aes_fewer_tables () {
4958 msg "build: default config with AES_FEWER_TABLES enabled"
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004959 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
Dave Rodgmand8d64512023-12-19 12:20:21 +00004960 make CFLAGS='-O2 -Werror -Wall -Wextra'
Gilles Peskine7ad603e2017-12-10 23:22:20 +01004961
Gilles Peskine7c652162017-12-11 00:01:40 +01004962 msg "test: AES_FEWER_TABLES"
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01004963 make test
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01004964}
4965
4966component_test_aes_rom_tables () {
4967 msg "build: default config with AES_ROM_TABLES enabled"
4968 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Dave Rodgmand8d64512023-12-19 12:20:21 +00004969 make CFLAGS='-O2 -Werror -Wall -Wextra'
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01004970
4971 msg "test: AES_ROM_TABLES"
4972 make test
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004973}
4974
Gilles Peskine14c3c062018-01-29 21:25:12 +01004975component_test_aes_fewer_tables_and_rom_tables () {
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01004976 msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled"
4977 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
4978 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Dave Rodgmand8d64512023-12-19 12:20:21 +00004979 make CFLAGS='-O2 -Werror -Wall -Wextra'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01004980
Gilles Peskine8f073122018-11-27 15:58:47 +01004981 msg "test: AES_FEWER_TABLES + AES_ROM_TABLES"
4982 make test
4983}
4984
Yanray Wang49cd4b52023-11-10 11:58:37 +08004985# helper for common_block_cipher_no_decrypt() which:
4986# - enable/disable the list of config options passed from -s/-u respectively.
4987# - build
4988# - test for tests_suite_xxx
4989# - selftest
4990#
4991# Usage: helper_block_cipher_no_decrypt_build_test
4992# [-s set_opts] [-u unset_opts] [-c cflags] [-l ldflags] [option [...]]
4993# Options: -s set_opts the list of config options to enable
4994# -u unset_opts the list of config options to disable
4995# -c cflags the list of options passed to CFLAGS
4996# -l ldflags the list of options passed to LDFLAGS
4997helper_block_cipher_no_decrypt_build_test () {
4998 while [ $# -gt 0 ]; do
4999 case "$1" in
5000 -s)
5001 shift; local set_opts="$1";;
5002 -u)
5003 shift; local unset_opts="$1";;
5004 -c)
Yanray Wang07e663d2023-11-13 17:15:39 +08005005 shift; local cflags="-Werror -Wall -Wextra $1";;
Yanray Wang49cd4b52023-11-10 11:58:37 +08005006 -l)
5007 shift; local ldflags="$1";;
5008 esac
5009 shift
5010 done
5011 set_opts="${set_opts:-}"
5012 unset_opts="${unset_opts:-}"
5013 cflags="${cflags:-}"
5014 ldflags="${ldflags:-}"
5015
Yanray Wangb2d6e522023-11-13 16:57:47 +08005016 [ -n "$set_opts" ] && echo "Enabling: $set_opts" && scripts/config.py set-all $set_opts
5017 [ -n "$unset_opts" ] && echo "Disabling: $unset_opts" && scripts/config.py unset-all $unset_opts
Yanray Wang49cd4b52023-11-10 11:58:37 +08005018
5019 msg "build: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5020 make clean
Dave Rodgmandfe5ce82023-12-19 11:47:18 +00005021 make CFLAGS="-O2 $cflags" LDFLAGS="$ldflags"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005022
5023 # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA
5024 not grep mbedtls_aes_setkey_dec library/aes.o
5025 not grep mbedtls_aria_setkey_dec library/aria.o
5026 not grep mbedtls_camellia_setkey_dec library/camellia.o
5027 # Make sure we don't have mbedtls_internal_aes_decrypt in AES
5028 not grep mbedtls_internal_aes_decrypt library/aes.o
Yanray Wang85b74652023-11-13 16:48:36 +08005029 # Make sure we don't have mbedtls_aesni_inverse_key in AESNI
5030 not grep mbedtls_aesni_inverse_key library/aesni.o
Yanray Wang49cd4b52023-11-10 11:58:37 +08005031
5032 msg "test: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5033 make test
5034
5035 msg "selftest: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5036 programs/test/selftest
5037}
5038
5039# This is a common configuration function used in:
5040# - component_test_block_cipher_no_decrypt_aesni_legacy()
5041# - component_test_block_cipher_no_decrypt_aesni_use_psa()
5042# in order to test BLOCK_CIPHER_NO_DECRYPT with AESNI intrinsics,
5043# AESNI assembly and AES C implementation on x86_64 and with AESNI intrinsics
5044# on x86.
5045common_block_cipher_no_decrypt () {
5046 # test AESNI intrinsics
5047 helper_block_cipher_no_decrypt_build_test \
5048 -s "MBEDTLS_AESNI_C" \
Yanray Wang07e663d2023-11-13 17:15:39 +08005049 -c "-mpclmul -msse2 -maes"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005050
5051 # test AESNI assembly
5052 helper_block_cipher_no_decrypt_build_test \
5053 -s "MBEDTLS_AESNI_C" \
Yanray Wang07e663d2023-11-13 17:15:39 +08005054 -c "-mno-pclmul -mno-sse2 -mno-aes"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005055
5056 # test AES C implementation
5057 helper_block_cipher_no_decrypt_build_test \
Yanray Wang07e663d2023-11-13 17:15:39 +08005058 -u "MBEDTLS_AESNI_C"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005059
5060 # test AESNI intrinsics for i386 target
5061 helper_block_cipher_no_decrypt_build_test \
5062 -s "MBEDTLS_AESNI_C" \
Yanray Wang07e663d2023-11-13 17:15:39 +08005063 -c "-m32 -mpclmul -msse2 -maes" \
Yanray Wang49cd4b52023-11-10 11:58:37 +08005064 -l "-m32"
5065}
5066
Yanray Wang3ae11992023-11-13 17:32:09 +08005067# This is a configuration function used in component_test_block_cipher_no_decrypt_xxx:
5068# usage: 0: no PSA crypto configuration
5069# 1: use PSA crypto configuration
5070config_block_cipher_no_decrypt () {
5071 use_psa=$1
5072
Yanray Wang66111392023-10-31 18:54:54 +08005073 scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
Yanray Wanga8ac23a2023-05-15 18:03:10 +08005074 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
5075 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
Yanray Wang3caaf0c2023-09-07 17:50:14 +08005076 scripts/config.py unset MBEDTLS_DES_C
Yanray Wanga8ac23a2023-05-15 18:03:10 +08005077 scripts/config.py unset MBEDTLS_NIST_KW_C
5078
Yanray Wang3ae11992023-11-13 17:32:09 +08005079 if [ "$use_psa" -eq 1 ]; then
5080 # Enable support for cryptographic mechanisms through the PSA API.
5081 # Note: XTS, KW are not yet supported via the PSA API in Mbed TLS.
5082 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
5083 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
5084 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
5085 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING
5086 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_DES
5087 fi
5088}
5089
5090component_test_block_cipher_no_decrypt_aesni () {
Dave Rodgmanc3932222023-12-19 17:51:51 +00005091 # This consistently causes an llvm crash on clang 3.8, so use gcc
5092 export CC=gcc
Yanray Wang3ae11992023-11-13 17:32:09 +08005093 config_block_cipher_no_decrypt 0
Yanray Wang49cd4b52023-11-10 11:58:37 +08005094 common_block_cipher_no_decrypt
Yanray Wanga8ac23a2023-05-15 18:03:10 +08005095}
5096
Yanray Wangf1496402023-11-01 18:55:13 +08005097component_test_block_cipher_no_decrypt_aesni_use_psa () {
Dave Rodgmanc3932222023-12-19 17:51:51 +00005098 # This consistently causes an llvm crash on clang 3.8, so use gcc
5099 export CC=gcc
Yanray Wang3ae11992023-11-13 17:32:09 +08005100 config_block_cipher_no_decrypt 1
Yanray Wang49cd4b52023-11-10 11:58:37 +08005101 common_block_cipher_no_decrypt
Yanray Wang78219042023-08-31 15:00:57 +08005102}
5103
Yanray Wang66111392023-10-31 18:54:54 +08005104support_test_block_cipher_no_decrypt_aesce_armcc () {
Yanray Wang799bd842023-11-10 12:21:35 +08005105 support_build_armcc
Yanray Wangbf66ef92023-08-31 14:47:01 +08005106}
5107
Yanray Wang66111392023-10-31 18:54:54 +08005108component_test_block_cipher_no_decrypt_aesce_armcc () {
Yanray Wangbf66ef92023-08-31 14:47:01 +08005109 scripts/config.py baremetal
5110
5111 # armc[56] don't support SHA-512 intrinsics
5112 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
5113
5114 # Stop armclang warning about feature detection for A64_CRYPTO.
5115 # With this enabled, the library does build correctly under armclang,
5116 # but in baremetal builds (as tested here), feature detection is
5117 # unavailable, and the user is notified via a #warning. So enabling
5118 # this feature would prevent us from building with -Werror on
5119 # armclang. Tracked in #7198.
5120 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
5121 scripts/config.py set MBEDTLS_HAVE_ASM
5122
Yanray Wang3ae11992023-11-13 17:32:09 +08005123 config_block_cipher_no_decrypt 1
Yanray Wangbf66ef92023-08-31 14:47:01 +08005124
5125 # test AESCE baremetal build
5126 scripts/config.py set MBEDTLS_AESCE_C
Yanray Wang66111392023-10-31 18:54:54 +08005127 msg "build: default config + BLOCK_CIPHER_NO_DECRYPT with AESCE"
Yanray Wangc4347912023-11-14 10:10:49 +08005128 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto -Werror -Wall -Wextra"
Yanray Wangbf66ef92023-08-31 14:47:01 +08005129
Yanray Wangef1b04d2023-09-08 11:09:26 +08005130 # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA
5131 not grep mbedtls_aes_setkey_dec library/aes.o
5132 not grep mbedtls_aria_setkey_dec library/aria.o
5133 not grep mbedtls_camellia_setkey_dec library/camellia.o
5134 # Make sure we don't have mbedtls_internal_aes_decrypt in AES
5135 not grep mbedtls_internal_aes_decrypt library/aes.o
Yanray Wang85b74652023-11-13 16:48:36 +08005136 # Make sure we don't have mbedtls_aesce_inverse_key and aesce_decrypt_block in AESCE
Yanray Wang4cd1b162023-11-10 12:18:29 +08005137 not grep mbedtls_aesce_inverse_key library/aesce.o
5138 not grep aesce_decrypt_block library/aesce.o
Yanray Wangbf66ef92023-08-31 14:47:01 +08005139}
5140
Gilles Peskine592f5912019-10-07 18:49:32 +02005141component_test_ctr_drbg_aes_256_sha_256 () {
5142 msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
5143 scripts/config.py full
5144 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5145 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Dave Rodgman17127e92023-12-14 16:42:48 +00005146 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine592f5912019-10-07 18:49:32 +02005147 make
5148
5149 msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
5150 make test
5151}
5152
5153component_test_ctr_drbg_aes_128_sha_512 () {
5154 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01005155 scripts/config.py full
5156 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5157 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
Dave Rodgman17127e92023-12-14 16:42:48 +00005158 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine592f5912019-10-07 18:49:32 +02005159 make
5160
5161 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
5162 make test
5163}
5164
5165component_test_ctr_drbg_aes_128_sha_256 () {
5166 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01005167 scripts/config.py full
5168 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5169 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
5170 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Dave Rodgman17127e92023-12-14 16:42:48 +00005171 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine592f5912019-10-07 18:49:32 +02005172 make
5173
5174 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
5175 make test
5176}
5177
Gilles Peskinef96aefe2019-07-24 14:58:38 +02005178component_test_se_default () {
5179 msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005180 scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine004206c2019-10-21 17:11:33 +02005181 make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinef96aefe2019-07-24 14:58:38 +02005182
5183 msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C"
5184 make test
5185}
5186
Steven Cooremand57203d2020-07-16 20:28:59 +02005187component_test_psa_crypto_drivers () {
Gilles Peskine1997f302023-07-26 18:45:20 +02005188 msg "build: full + test drivers dispatching to builtins"
Steven Cooreman753f9732021-03-15 11:38:44 +01005189 scripts/config.py full
Gilles Peskine1997f302023-07-26 18:45:20 +02005190 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Gilles Peskine3587dfd2021-09-20 19:20:04 +02005191 loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL"
5192 loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'"
Ronald Cron17b3afc2020-12-10 18:17:09 +01005193 loc_cflags="${loc_cflags} -I../tests/include -O2"
5194
Gilles Peskine21570cf2023-12-22 11:49:50 +01005195 make CC=$ASAN_CC CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS"
Steven Cooremand57203d2020-07-16 20:28:59 +02005196
Gilles Peskine1997f302023-07-26 18:45:20 +02005197 msg "test: full + test drivers dispatching to builtins"
Steven Cooremand57203d2020-07-16 20:28:59 +02005198 make test
5199}
5200
Gilles Peskine8f073122018-11-27 15:58:47 +01005201component_test_make_shared () {
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005202 msg "build/test: make shared" # ~ 40s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04005203 make SHARED=1 all check
Gilles Peskine56c01612019-07-03 20:43:32 +02005204 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskineca144592021-11-04 12:52:14 +01005205 programs/test/dlopen_demo.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01005206}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005207
Gilles Peskinecf740502019-07-03 20:43:05 +02005208component_test_cmake_shared () {
5209 msg "build/test: cmake shared" # ~ 2min
5210 cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On .
5211 make
Gilles Peskine56c01612019-07-03 20:43:32 +02005212 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskinecf740502019-07-03 20:43:05 +02005213 make test
Gilles Peskineca144592021-11-04 12:52:14 +01005214 programs/test/dlopen_demo.sh
Gilles Peskinecf740502019-07-03 20:43:05 +02005215}
5216
Gilles Peskineec10bf12019-09-20 19:56:06 +02005217test_build_opt () {
5218 info=$1 cc=$2; shift 2
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005219 $cc --version
Gilles Peskineec10bf12019-09-20 19:56:06 +02005220 for opt in "$@"; do
5221 msg "build/test: $cc $opt, $info" # ~ 30s
Gilles Peskine21570cf2023-12-22 11:49:50 +01005222 make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror"
Gilles Peskineec10bf12019-09-20 19:56:06 +02005223 # We're confident enough in compilers to not run _all_ the tests,
5224 # but at least run the unit tests. In particular, runs with
5225 # optimizations use inline assembly whereas runs with -O0
5226 # skip inline assembly.
5227 make test # ~30s
5228 make clean
5229 done
5230}
5231
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005232# For FreeBSD we invoke the function by name so this condition is added
5233# to disable the existing test_clang_opt function for linux.
5234if [[ $(uname) != "Linux" ]]; then
5235 component_test_clang_opt () {
5236 scripts/config.py full
5237 test_build_opt 'full config' clang -O0 -Os -O2
5238 }
5239fi
5240
5241component_test_clang_latest_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01005242 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005243 test_build_opt 'full config' "$CLANG_LATEST" -O0 -Os -O2
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005244}
5245support_test_clang_latest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005246 type "$CLANG_LATEST" >/dev/null 2>/dev/null
Gilles Peskineec10bf12019-09-20 19:56:06 +02005247}
5248
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005249component_test_clang_earliest_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01005250 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005251 test_build_opt 'full config' "$CLANG_EARLIEST" -O0
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005252}
5253support_test_clang_earliest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005254 type "$CLANG_EARLIEST" >/dev/null 2>/dev/null
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005255}
5256
5257component_test_gcc_latest_opt () {
5258 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005259 test_build_opt 'full config' "$GCC_LATEST" -O0 -Os -O2
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005260}
5261support_test_gcc_latest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005262 type "$GCC_LATEST" >/dev/null 2>/dev/null
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005263}
5264
5265component_test_gcc_earliest_opt () {
5266 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005267 test_build_opt 'full config' "$GCC_EARLIEST" -O0
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005268}
5269support_test_gcc_earliest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005270 type "$GCC_EARLIEST" >/dev/null 2>/dev/null
Gilles Peskineec10bf12019-09-20 19:56:06 +02005271}
5272
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02005273component_build_mbedtls_config_file () {
5274 msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s
Gilles Peskine2003c2f2022-04-07 20:55:57 +02005275 scripts/config.py -w full_config.h full
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02005276 echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H"
Gilles Peskine21570cf2023-12-22 11:49:50 +01005277 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'"
Gilles Peskine45e680e2022-04-13 23:23:21 +02005278 # Make sure this feature is enabled. We'll disable it in the next phase.
Gilles Peskinee10df772022-04-07 21:06:41 +02005279 programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
5280 make clean
5281
5282 msg "build: make with MBEDTLS_CONFIG_FILE + MBEDTLS_USER_CONFIG_FILE"
5283 # In the user config, disable one feature (for simplicity, pick a feature
5284 # that nothing else depends on).
5285 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
Gilles Peskine21570cf2023-12-22 11:49:50 +01005286 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"' -DMBEDTLS_USER_CONFIG_FILE='\"user_config.h\"'"
Gilles Peskinee10df772022-04-07 21:06:41 +02005287 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
5288
5289 rm -f user_config.h full_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005290}
5291
Gilles Peskine7d904e72022-04-07 21:59:14 +02005292component_build_psa_config_file () {
5293 msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE" # ~40s
5294 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
5295 cp "$CRYPTO_CONFIG_H" psa_test_config.h
5296 echo '#error "MBEDTLS_PSA_CRYPTO_CONFIG_FILE is not working"' >"$CRYPTO_CONFIG_H"
5297 make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"'"
Gilles Peskine45e680e2022-04-13 23:23:21 +02005298 # Make sure this feature is enabled. We'll disable it in the next phase.
Gilles Peskine7d904e72022-04-07 21:59:14 +02005299 programs/test/query_compile_time_config MBEDTLS_CMAC_C
5300 make clean
5301
5302 msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE + MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE" # ~40s
5303 # In the user config, disable one feature, which will reflect on the
5304 # mbedtls configuration so we can query it with query_compile_time_config.
5305 echo '#undef PSA_WANT_ALG_CMAC' >psa_user_config.h
5306 scripts/config.py unset MBEDTLS_CMAC_C
5307 make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"' -DMBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE='\"psa_user_config.h\"'"
5308 not programs/test/query_compile_time_config MBEDTLS_CMAC_C
5309
5310 rm -f psa_test_config.h psa_user_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005311}
5312
Gilles Peskinedf6e84a2023-02-22 22:09:51 +01005313component_build_psa_alt_headers () {
5314 msg "build: make with PSA alt headers" # ~20s
5315
5316 # Generate alternative versions of the substitutable headers with the
5317 # same content except different include guards.
5318 make -C tests include/alt-extra/psa/crypto_platform_alt.h include/alt-extra/psa/crypto_struct_alt.h
5319
5320 # Build the library and some programs.
5321 # Don't build the fuzzers to avoid having to go through hoops to set
5322 # a correct include path for programs/fuzz/Makefile.
5323 make CFLAGS="-I ../tests/include/alt-extra -DMBEDTLS_PSA_CRYPTO_PLATFORM_FILE='\"psa/crypto_platform_alt.h\"' -DMBEDTLS_PSA_CRYPTO_STRUCT_FILE='\"psa/crypto_struct_alt.h\"'" lib
5324 make -C programs -o fuzz CFLAGS="-I ../tests/include/alt-extra -DMBEDTLS_PSA_CRYPTO_PLATFORM_FILE='\"psa/crypto_platform_alt.h\"' -DMBEDTLS_PSA_CRYPTO_STRUCT_FILE='\"psa/crypto_struct_alt.h\"'"
5325
5326 # Check that we're getting the alternative include guards and not the
5327 # original include guards.
5328 programs/test/query_included_headers | grep -x PSA_CRYPTO_PLATFORM_ALT_H
5329 programs/test/query_included_headers | grep -x PSA_CRYPTO_STRUCT_ALT_H
5330 programs/test/query_included_headers | not grep -x PSA_CRYPTO_PLATFORM_H
5331 programs/test/query_included_headers | not grep -x PSA_CRYPTO_STRUCT_H
5332}
5333
Dave Rodgman852de3c2023-12-14 14:46:45 +00005334component_test_m32_no_asm () {
5335 # Build without assembly, so as to use portable C code (in a 32-bit
Gilles Peskine77f05352021-10-07 19:27:16 +02005336 # build) and not the i386-specific inline assembly.
Dave Rodgmana2cf2402023-12-15 11:04:13 +00005337 #
5338 # Note that we require gcc, because clang Asan builds fail to link for
5339 # this target (cannot find libclang_rt.lsan-i386.a - this is a known clang issue).
Dave Rodgman852de3c2023-12-14 14:46:45 +00005340 msg "build: i386, make, gcc, no asm (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005341 scripts/config.py full
Dave Rodgman852de3c2023-12-14 14:46:45 +00005342 scripts/config.py unset MBEDTLS_HAVE_ASM
5343 scripts/config.py unset MBEDTLS_PADLOCK_C
Pengyu Lv13226132023-10-16 14:03:29 +08005344 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
Gilles Peskine21570cf2023-12-22 11:49:50 +01005345 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005346
Dave Rodgman852de3c2023-12-14 14:46:45 +00005347 msg "test: i386, make, gcc, no asm (ASan build)"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01005348 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01005349}
Dave Rodgman852de3c2023-12-14 14:46:45 +00005350support_test_m32_no_asm () {
Gilles Peskine878cf602019-01-06 20:50:38 +00005351 case $(uname -m) in
Pengyu Lvc92df3b2022-10-21 10:50:26 +00005352 amd64|x86_64) true;;
Gilles Peskine878cf602019-01-06 20:50:38 +00005353 *) false;;
5354 esac
5355}
Simon Butcher8e6a22a2018-07-20 21:27:33 +01005356
Gilles Peskineff0aee02021-10-05 09:36:03 +02005357component_test_m32_o2 () {
5358 # Build with optimization, to use the i386 specific inline assembly
5359 # and go faster for tests.
5360 msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005361 scripts/config.py full
Pengyu Lv13226132023-10-16 14:03:29 +08005362 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
Gilles Peskine21570cf2023-12-22 11:49:50 +01005363 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01005364
Gilles Peskineff0aee02021-10-05 09:36:03 +02005365 msg "test: i386, make, gcc -O2 (ASan build)"
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005366 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01005367
Gilles Peskineff0aee02021-10-05 09:36:03 +02005368 msg "test ssl-opt.sh, i386, make, gcc-O2"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005369 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01005370}
Gilles Peskinecf522222021-10-07 19:25:29 +02005371support_test_m32_o2 () {
Dave Rodgman852de3c2023-12-14 14:46:45 +00005372 support_test_m32_no_asm "$@"
Gilles Peskine878cf602019-01-06 20:50:38 +00005373}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005374
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005375component_test_m32_everest () {
5376 msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005377 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
Pengyu Lv13226132023-10-16 14:03:29 +08005378 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
Dave Rodgmanb90f87b2023-12-14 23:27:33 +00005379 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005380
5381 msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
5382 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01005383
5384 msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005385 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01005386
5387 msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
5388 # Exclude some symmetric ciphers that are redundant here to gain time.
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02005389 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA'
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005390}
5391support_test_m32_everest () {
Dave Rodgman852de3c2023-12-14 14:46:45 +00005392 support_test_m32_no_asm "$@"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005393}
5394
Gilles Peskine8f073122018-11-27 15:58:47 +01005395component_test_mx32 () {
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005396 msg "build: 64-bit ILP32, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005397 scripts/config.py full
Dave Rodgman84125a12024-01-02 11:42:38 +00005398 make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -mx32' LDFLAGS='-mx32'
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005399
5400 msg "test: 64-bit ILP32, make, gcc"
5401 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01005402}
Gilles Peskine878cf602019-01-06 20:50:38 +00005403support_test_mx32 () {
5404 case $(uname -m) in
5405 amd64|x86_64) true;;
5406 *) false;;
5407 esac
5408}
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01005409
Peter Kolbus60c6da22018-12-27 06:59:04 -06005410component_test_min_mpi_window_size () {
5411 msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005412 scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1
Dave Rodgman17127e92023-12-14 16:42:48 +00005413 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Peter Kolbus60c6da22018-12-27 06:59:04 -06005414 make
5415
5416 msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s
5417 make test
5418}
5419
Gilles Peskine8f073122018-11-27 15:58:47 +01005420component_test_have_int32 () {
5421 msg "build: gcc, force 32-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005422 scripts/config.py unset MBEDTLS_HAVE_ASM
5423 scripts/config.py unset MBEDTLS_AESNI_C
5424 scripts/config.py unset MBEDTLS_PADLOCK_C
Jerry Yue51eddc2023-01-11 14:16:08 +08005425 scripts/config.py unset MBEDTLS_AESCE_C
Dave Rodgmand8d64512023-12-19 12:20:21 +00005426 make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01005427
Gilles Peskine8f073122018-11-27 15:58:47 +01005428 msg "test: gcc, force 32-bit bignum limbs"
5429 make test
5430}
Andres Amaya Garciafe843a32017-07-20 13:21:34 +01005431
Gilles Peskine8f073122018-11-27 15:58:47 +01005432component_test_have_int64 () {
5433 msg "build: gcc, force 64-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005434 scripts/config.py unset MBEDTLS_HAVE_ASM
5435 scripts/config.py unset MBEDTLS_AESNI_C
5436 scripts/config.py unset MBEDTLS_PADLOCK_C
Jerry Yue51eddc2023-01-11 14:16:08 +08005437 scripts/config.py unset MBEDTLS_AESCE_C
Dave Rodgmand8d64512023-12-19 12:20:21 +00005438 make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64'
Gilles Peskine14c3c062018-01-29 21:25:12 +01005439
Gilles Peskine8f073122018-11-27 15:58:47 +01005440 msg "test: gcc, force 64-bit bignum limbs"
5441 make test
5442}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005443
Gabor Mezeie256cc12023-07-26 17:28:48 +02005444component_test_have_int32_cmake_new_bignum () {
5445 msg "build: gcc, force 32-bit bignum limbs, new bignum interface, test hooks (ASan build)"
5446 scripts/config.py unset MBEDTLS_HAVE_ASM
5447 scripts/config.py unset MBEDTLS_AESNI_C
5448 scripts/config.py unset MBEDTLS_PADLOCK_C
5449 scripts/config.py unset MBEDTLS_AESCE_C
5450 scripts/config.py set MBEDTLS_TEST_HOOKS
Janos Follath2f045822023-07-31 10:57:16 +01005451 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
Janos Follathf3135af2023-07-31 10:07:57 +01005452 make CC=gcc CFLAGS="$ASAN_CFLAGS -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32" LDFLAGS="$ASAN_CFLAGS"
Gabor Mezeie256cc12023-07-26 17:28:48 +02005453
5454 msg "test: gcc, force 32-bit bignum limbs, new bignum interface, test hooks (ASan build)"
5455 make test
5456}
5457
Gilles Peskine8f073122018-11-27 15:58:47 +01005458component_test_no_udbl_division () {
5459 msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005460 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005461 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskine21570cf2023-12-22 11:49:50 +01005462 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005463
Gilles Peskine8f073122018-11-27 15:58:47 +01005464 msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
5465 make test
5466}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005467
Gilles Peskine8f073122018-11-27 15:58:47 +01005468component_test_no_64bit_multiplication () {
5469 msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005470 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005471 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskine21570cf2023-12-22 11:49:50 +01005472 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005473
Gilles Peskine8f073122018-11-27 15:58:47 +01005474 msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
5475 make test
5476}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005477
Gilles Peskine3809f5f2020-11-09 15:40:05 +01005478component_test_no_strings () {
5479 msg "build: no strings" # ~10s
5480 scripts/config.py full
5481 # Disable options that activate a large amount of string constants.
5482 scripts/config.py unset MBEDTLS_DEBUG_C
5483 scripts/config.py unset MBEDTLS_ERROR_C
5484 scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY
5485 scripts/config.py unset MBEDTLS_VERSION_FEATURES
Gilles Peskine21570cf2023-12-22 11:49:50 +01005486 make CFLAGS='-Werror -Os'
Gilles Peskine3809f5f2020-11-09 15:40:05 +01005487
5488 msg "test: no strings" # ~ 10s
5489 make test
5490}
5491
Hanno Beckerc5722d12020-10-09 11:10:42 +01005492component_test_no_x509_info () {
5493 msg "build: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
5494 scripts/config.pl full
5495 scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests
5496 scripts/config.pl set MBEDTLS_X509_REMOVE_INFO
Gilles Peskine21570cf2023-12-22 11:49:50 +01005497 make CFLAGS='-Werror -O2'
Hanno Beckerc5722d12020-10-09 11:10:42 +01005498
5499 msg "test: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
5500 make test
5501
5502 msg "test: ssl-opt.sh, full + MBEDTLS_X509_REMOVE_INFO" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005503 tests/ssl-opt.sh
Hanno Beckerc5722d12020-10-09 11:10:42 +01005504}
5505
Gilles Peskine8f073122018-11-27 15:58:47 +01005506component_build_arm_none_eabi_gcc () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005507 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005508 scripts/config.py baremetal
Gilles Peskineaeedd742020-09-02 11:03:04 +02005509 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005510
Gilles Peskinee36fe812021-09-01 20:00:33 +02005511 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005512 ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01005513}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005514
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005515component_build_arm_linux_gnueabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005516 msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005517 scripts/config.py baremetal
Gilles Peskine2c897d72019-08-09 16:05:05 +02005518 # Build for a target platform that's close to what Debian uses
5519 # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort).
Dave Rodgman017a1992022-03-31 14:07:01 +01005520 # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments.
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005521 # Build everything including programs, see for example
Dave Rodgman017a1992022-03-31 14:07:01 +01005522 # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005523 make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te'
5524
Gilles Peskinee36fe812021-09-01 20:00:33 +02005525 msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005526 ${ARM_LINUX_GNUEABI_GCC_PREFIX}size -t library/*.o
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005527}
5528support_build_arm_linux_gnueabi_gcc_arm5vte () {
5529 type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1
5530}
5531
5532component_build_arm_none_eabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005533 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005534 scripts/config.py baremetal
5535 # This is an imperfect substitute for
5536 # component_build_arm_linux_gnueabi_gcc_arm5vte
Manuel Pégourié-Gonnardae505ee2021-07-06 09:44:59 +02005537 # in case the gcc-arm-linux-gnueabi toolchain is not available
Gilles Peskineaeedd742020-09-02 11:03:04 +02005538 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005539
Gilles Peskinee36fe812021-09-01 20:00:33 +02005540 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005541 ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o
Gilles Peskine93e4e032019-08-05 11:34:25 +02005542}
5543
Gilles Peskine6e2fb862020-04-30 23:00:53 +02005544component_build_arm_none_eabi_gcc_m0plus () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005545 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s
5546 scripts/config.py baremetal_size
Gilles Peskineaeedd742020-09-02 11:03:04 +02005547 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005548
Gilles Peskinee36fe812021-09-01 20:00:33 +02005549 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005550 ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o
Manuel Pégourié-Gonnard67f80372023-06-06 13:01:18 +02005551 for lib in library/*.a; do
5552 echo "$lib:"
5553 ${ARM_NONE_EABI_GCC_PREFIX}size -t $lib | grep TOTALS
5554 done
Gilles Peskine6e2fb862020-04-30 23:00:53 +02005555}
5556
Gilles Peskine8f073122018-11-27 15:58:47 +01005557component_build_arm_none_eabi_gcc_no_udbl_division () {
Gilles Peskine6d061342020-04-30 18:19:32 +02005558 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005559 scripts/config.py baremetal
5560 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskineaeedd742020-09-02 11:03:04 +02005561 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01005562 echo "Checking that software 64-bit division is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005563 not grep __aeabi_uldiv library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01005564}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005565
Gilles Peskine8f073122018-11-27 15:58:47 +01005566component_build_arm_none_eabi_gcc_no_64bit_multiplication () {
Gilles Peskine6d061342020-04-30 18:19:32 +02005567 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005568 scripts/config.py baremetal
5569 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskineaeedd742020-09-02 11:03:04 +02005570 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01005571 echo "Checking that software 64-bit multiplication is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005572 not grep __aeabi_lmul library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01005573}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005574
Dave Rodgman8c315f22023-06-02 10:26:24 -04005575component_build_arm_clang_thumb () {
5576 # ~ 30s
5577
5578 scripts/config.py baremetal
5579
5580 msg "build: clang thumb 2, make"
5581 make clean
5582 make CC="clang" CFLAGS='-std=c99 -Werror -Os --target=arm-linux-gnueabihf -march=armv7-m -mthumb' lib
5583
5584 # Some Thumb 1 asm is sensitive to optimisation level, so test both -O0 and -Os
5585 msg "build: clang thumb 1 -O0, make"
5586 make clean
5587 make CC="clang" CFLAGS='-std=c99 -Werror -O0 --target=arm-linux-gnueabihf -mcpu=arm1136j-s -mthumb' lib
5588
5589 msg "build: clang thumb 1 -Os, make"
5590 make clean
5591 make CC="clang" CFLAGS='-std=c99 -Werror -Os --target=arm-linux-gnueabihf -mcpu=arm1136j-s -mthumb' lib
5592}
5593
Gilles Peskine8f073122018-11-27 15:58:47 +01005594component_build_armcc () {
Gilles Peskine18487f62020-04-30 23:11:54 +02005595 msg "build: ARM Compiler 5"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005596 scripts/config.py baremetal
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00005597 # armc[56] don't support SHA-512 intrinsics
5598 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
Dave Rodgman2f386c52023-03-02 13:38:33 +00005599
Dave Rodgman4b8e8dc2023-10-08 21:41:40 +01005600 # older versions of armcc/armclang don't support AESCE_C on 32-bit Arm
5601 scripts/config.py unset MBEDTLS_AESCE_C
5602
Dave Rodgman0fddf822023-03-02 15:32:12 +00005603 # Stop armclang warning about feature detection for A64_CRYPTO.
5604 # With this enabled, the library does build correctly under armclang,
5605 # but in baremetal builds (as tested here), feature detection is
5606 # unavailable, and the user is notified via a #warning. So enabling
5607 # this feature would prevent us from building with -Werror on
5608 # armclang. Tracked in #7198.
Dave Rodgman5b89c552023-10-10 14:59:02 +01005609 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgman2f386c52023-03-02 13:38:33 +00005610
Hanno Beckerf0762e92022-07-15 12:08:19 +01005611 scripts/config.py set MBEDTLS_HAVE_ASM
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00005612
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005613 make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005614
5615 msg "size: ARM Compiler 5"
5616 "$ARMC5_FROMELF" -z library/*.o
5617
Dave Rodgmanb45d58b2023-06-02 13:54:00 -04005618 # Compile mostly with -O1 since some Arm inline assembly is disabled for -O0.
Hanno Beckerf0762e92022-07-15 12:08:19 +01005619
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005620 # ARM Compiler 6 - Target ARMv7-A
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005621 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-a"
Simon Butcher940737f2017-07-23 13:42:36 +02005622
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005623 # ARM Compiler 6 - Target ARMv7-M
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005624 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m"
5625
5626 # ARM Compiler 6 - Target ARMv7-M+DSP
5627 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m+dsp"
Simon Butcher940737f2017-07-23 13:42:36 +02005628
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005629 # ARM Compiler 6 - Target ARMv8-A - AArch32
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005630 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8.2-a"
Simon Butcher940737f2017-07-23 13:42:36 +02005631
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005632 # ARM Compiler 6 - Target ARMv8-M
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005633 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8-m.main"
Simon Butcher940737f2017-07-23 13:42:36 +02005634
Dave Rodgmanb45d58b2023-06-02 13:54:00 -04005635 # ARM Compiler 6 - Target Cortex-M0 - no optimisation
5636 armc6_build_test "-O0 --target=arm-arm-none-eabi -mcpu=cortex-m0"
5637
Dave Rodgman99318e62023-05-24 12:27:42 +01005638 # ARM Compiler 6 - Target Cortex-M0
5639 armc6_build_test "-Os --target=arm-arm-none-eabi -mcpu=cortex-m0"
Dave Rodgman4b8e8dc2023-10-08 21:41:40 +01005640
5641 # ARM Compiler 6 - Target ARMv8.2-A - AArch64
5642 #
5643 # Re-enable MBEDTLS_AESCE_C as this should be supported by the version of armclang
5644 # that we have in our CI
5645 scripts/config.py set MBEDTLS_AESCE_C
5646 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8.2-a+crypto"
Gilles Peskine8f073122018-11-27 15:58:47 +01005647}
Tom Cosgrove6ec39ca2023-06-09 15:34:31 +01005648
Pengyu Lvdf070032023-02-24 16:03:31 +08005649support_build_armcc () {
Pengyu Lvc6298ad2023-03-01 10:31:29 +08005650 armc5_cc="$ARMC5_BIN_DIR/armcc"
5651 armc6_cc="$ARMC6_BIN_DIR/armclang"
5652 (check_tools "$armc5_cc" "$armc6_cc" > /dev/null 2>&1)
Pengyu Lvdf070032023-02-24 16:03:31 +08005653}
Manuel Pégourié-Gonnardc5c59392015-02-10 17:38:54 +01005654
Jerry Yu81d5e1f2022-01-27 13:01:01 +08005655component_test_tls13_only () {
5656 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3, without MBEDTLS_SSL_PROTO_TLS1_2"
Ronald Cronc2e110f2022-11-22 09:01:46 +01005657 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Waleed Elmelegye8402632024-01-09 17:21:20 +00005658 scripts/config.py set MBEDTLS_SSL_RECORD_SIZE_LIMIT
Jerry Yuda5af222021-12-24 18:45:45 +08005659 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5660
Gilles Peskine4bb369c2022-10-29 17:44:19 +02005661 msg "test: TLS 1.3 only, all key exchange modes enabled"
5662 make test
Jerry Yubaa49342022-02-15 10:26:40 +08005663
Ronald Cronc3f43b62022-10-17 17:35:32 +02005664 msg "ssl-opt.sh: TLS 1.3 only, all key exchange modes enabled"
5665 tests/ssl-opt.sh
Jerry Yuda5af222021-12-24 18:45:45 +08005666}
5667
Ronald Cronc3f43b62022-10-17 17:35:32 +02005668component_test_tls13_only_psk () {
5669 msg "build: TLS 1.3 only from default, only PSK key exchange mode"
5670 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5671 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5672 scripts/config.py unset MBEDTLS_ECDH_C
Przemek Stekiel0c231472023-06-14 11:12:45 +02005673 scripts/config.py unset MBEDTLS_DHM_C
Ronald Cronc3f43b62022-10-17 17:35:32 +02005674 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5675 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5676 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5677 scripts/config.py unset MBEDTLS_ECDSA_C
5678 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00005679 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01005680 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Crone3dac4a2022-06-10 17:21:51 +02005681 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5682
Ronald Cronc3f43b62022-10-17 17:35:32 +02005683 msg "test_suite_ssl: TLS 1.3 only, only PSK key exchange mode enabled"
5684 cd tests; ./test_suite_ssl; cd ..
Ronald Crone3dac4a2022-06-10 17:21:51 +02005685
Ronald Cronc3f43b62022-10-17 17:35:32 +02005686 msg "ssl-opt.sh: TLS 1.3 only, only PSK key exchange mode enabled"
5687 tests/ssl-opt.sh
5688}
5689
5690component_test_tls13_only_ephemeral () {
5691 msg "build: TLS 1.3 only from default, only ephemeral key exchange mode"
5692 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5693 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian2dbfeda2022-11-15 10:52:57 +00005694 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005695 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5696
5697 msg "test_suite_ssl: TLS 1.3 only, only ephemeral key exchange mode"
5698 cd tests; ./test_suite_ssl; cd ..
5699
5700 msg "ssl-opt.sh: TLS 1.3 only, only ephemeral key exchange mode"
5701 tests/ssl-opt.sh
5702}
5703
Przemek Stekiela01c2422023-06-13 10:46:48 +02005704component_test_tls13_only_ephemeral_ffdh () {
5705 msg "build: TLS 1.3 only from default, only ephemeral ffdh key exchange mode"
5706 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5707 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5708 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
Przemek Stekielce05f542023-06-15 16:44:08 +02005709 scripts/config.py unset MBEDTLS_ECDH_C
5710
Przemek Stekiela01c2422023-06-13 10:46:48 +02005711 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5712
5713 msg "test_suite_ssl: TLS 1.3 only, only ephemeral ffdh key exchange mode"
5714 cd tests; ./test_suite_ssl; cd ..
5715
5716 msg "ssl-opt.sh: TLS 1.3 only, only ephemeral ffdh key exchange mode"
5717 tests/ssl-opt.sh
5718}
5719
Ronald Cronc3f43b62022-10-17 17:35:32 +02005720component_test_tls13_only_psk_ephemeral () {
5721 msg "build: TLS 1.3 only from default, only PSK ephemeral key exchange mode"
5722 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5723 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5724 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5725 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5726 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5727 scripts/config.py unset MBEDTLS_ECDSA_C
5728 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00005729 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01005730 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005731 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5732
5733 msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral key exchange mode"
5734 cd tests; ./test_suite_ssl; cd ..
5735
5736 msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral key exchange mode"
5737 tests/ssl-opt.sh
5738}
5739
Przemek Stekiela01c2422023-06-13 10:46:48 +02005740component_test_tls13_only_psk_ephemeral_ffdh () {
5741 msg "build: TLS 1.3 only from default, only PSK ephemeral ffdh key exchange mode"
5742 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5743 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5744 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5745 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5746 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5747 scripts/config.py unset MBEDTLS_ECDSA_C
5748 scripts/config.py unset MBEDTLS_PKCS1_V21
5749 scripts/config.py unset MBEDTLS_PKCS7_C
5750 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Przemek Stekielce05f542023-06-15 16:44:08 +02005751 scripts/config.py unset MBEDTLS_ECDH_C
Przemek Stekiela01c2422023-06-13 10:46:48 +02005752 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5753
5754 msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral ffdh key exchange mode"
5755 cd tests; ./test_suite_ssl; cd ..
5756
5757 msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral ffdh key exchange mode"
5758 tests/ssl-opt.sh
5759}
5760
Ronald Cronc3f43b62022-10-17 17:35:32 +02005761component_test_tls13_only_psk_all () {
5762 msg "build: TLS 1.3 only from default, without ephemeral key exchange mode"
5763 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5764 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5765 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5766 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5767 scripts/config.py unset MBEDTLS_ECDSA_C
5768 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00005769 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01005770 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005771 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5772
5773 msg "test_suite_ssl: TLS 1.3 only, PSK and PSK ephemeral key exchange modes"
5774 cd tests; ./test_suite_ssl; cd ..
5775
5776 msg "ssl-opt.sh: TLS 1.3 only, PSK and PSK ephemeral key exchange modes"
5777 tests/ssl-opt.sh
5778}
5779
5780component_test_tls13_only_ephemeral_all () {
5781 msg "build: TLS 1.3 only from default, without PSK key exchange mode"
5782 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Ronald Cronc2e110f2022-11-22 09:01:46 +01005783 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005784 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5785
5786 msg "test_suite_ssl: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes"
5787 cd tests; ./test_suite_ssl; cd ..
5788
5789 msg "ssl-opt.sh: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes"
5790 tests/ssl-opt.sh
Ronald Crone3dac4a2022-06-10 17:21:51 +02005791}
5792
Ronald Cron6f135e12021-12-08 16:57:54 +01005793component_test_tls13 () {
5794 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
5795 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005796 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5797 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Ronald Cronc2e110f2022-11-22 09:01:46 +01005798 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Dave Rodgman17127e92023-12-14 16:42:48 +00005799 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005800 make
Ronald Cron6f135e12021-12-08 16:57:54 +01005801 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005802 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01005803 msg "ssl-opt.sh (TLS 1.3)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01005804 tests/ssl-opt.sh
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005805}
5806
Ronald Cron6f135e12021-12-08 16:57:54 +01005807component_test_tls13_no_compatibility_mode () {
5808 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
5809 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005810 scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5811 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Ronald Cronc2e110f2022-11-22 09:01:46 +01005812 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Dave Rodgman17127e92023-12-14 16:42:48 +00005813 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Hanno Beckera711f6e2020-05-04 12:03:51 +01005814 make
Ronald Cron6f135e12021-12-08 16:57:54 +01005815 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Hanno Becker6c53ecc2021-08-01 19:20:10 +01005816 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01005817 msg "ssl-opt.sh (TLS 1.3 no compatibility mode)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01005818 tests/ssl-opt.sh
Hanno Becker6c53ecc2021-08-01 19:20:10 +01005819}
5820
Gilles Peskine8f073122018-11-27 15:58:47 +01005821component_build_mingw () {
5822 msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s
Pengyu Lv64cca2f2023-10-10 18:22:24 +08005823 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 lib programs
Hanno Beckere963efa2018-01-03 10:03:43 +00005824
Gilles Peskine8f073122018-11-27 15:58:47 +01005825 # note Make tests only builds the tests, but doesn't run them
Pengyu Lv64cca2f2023-10-10 18:22:24 +08005826 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -maes -msse2 -mpclmul' WINDOWS_BUILD=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01005827 make WINDOWS_BUILD=1 clean
Gilles Peskine2a458da2017-05-12 15:26:58 +02005828
Gilles Peskine8f073122018-11-27 15:58:47 +01005829 msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s
Pengyu Lv64cca2f2023-10-10 18:22:24 +08005830 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 SHARED=1 lib programs
5831 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 SHARED=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01005832 make WINDOWS_BUILD=1 clean
Pengyu Lvbb4f63c2023-10-19 10:38:58 +08005833
Pengyu Lv158eead2023-10-19 11:27:05 +08005834 msg "build: Windows cross build - mingw64, make (Library only, default config without MBEDTLS_AESNI_C)" # ~ 30s
Pengyu Lvbb4f63c2023-10-19 10:38:58 +08005835 ./scripts/config.py unset MBEDTLS_AESNI_C #
Pengyu Lv158eead2023-10-19 11:27:05 +08005836 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib
Gilles Peskine8f073122018-11-27 15:58:47 +01005837 make WINDOWS_BUILD=1 clean
5838}
Jaeden Amero117b8a42019-04-17 15:19:26 +01005839support_build_mingw() {
Pengyu Lv51b5f002023-02-24 15:38:52 +08005840 case $(i686-w64-mingw32-gcc -dumpversion 2>/dev/null) in
5841 [0-5]*|"") false;;
Jaeden Amero117b8a42019-04-17 15:19:26 +01005842 *) true;;
5843 esac
5844}
Simon Butcher91aef332016-11-17 09:20:50 +00005845
Gilles Peskine8f073122018-11-27 15:58:47 +01005846component_test_memsan () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005847 msg "build: MSan (clang)" # ~ 1 min 20s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005848 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005849 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
5850 make
Manuel Pégourié-Gonnard4a9dc2a2014-05-09 13:46:59 +02005851
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005852 msg "test: main suites (MSan)" # ~ 10s
5853 make test
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01005854
Gilles Peskine6848d172023-11-02 19:58:03 +01005855 msg "test: metatests (MSan)"
5856 tests/scripts/run-metatests.sh any msan
5857
Gilles Peskine82b27272019-06-14 18:27:03 +02005858 msg "program demos (MSan)" # ~20s
5859 tests/scripts/run_demos.py
5860
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005861 msg "test: ssl-opt.sh (MSan)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005862 tests/ssl-opt.sh
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01005863
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005864 # Optional part(s)
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01005865
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005866 if [ "$MEMORY" -gt 0 ]; then
5867 msg "test: compat.sh (MSan)" # ~ 6 min 20s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005868 tests/compat.sh
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005869 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01005870}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01005871
Bence Szépkúti0354d042023-12-06 16:14:37 +01005872component_release_test_valgrind () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005873 msg "build: Release (clang)"
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005874 # default config, in particular without MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005875 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
5876 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005877
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005878 msg "test: main suites, Valgrind (default config)"
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005879 make memcheck
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005880
Gilles Peskine636c26a2020-03-04 20:46:15 +01005881 # Optional parts (slow; currently broken on OS X because programs don't
5882 # seem to receive signals under valgrind on OS X).
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005883 # These optional parts don't run on the CI.
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005884 if [ "$MEMORY" -gt 0 ]; then
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005885 msg "test: ssl-opt.sh --memcheck (default config)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005886 tests/ssl-opt.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005887 fi
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005888
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005889 if [ "$MEMORY" -gt 1 ]; then
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005890 msg "test: compat.sh --memcheck (default config)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005891 tests/compat.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005892 fi
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02005893
5894 if [ "$MEMORY" -gt 0 ]; then
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005895 msg "test: context-info.sh --memcheck (default config)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005896 tests/context-info.sh --memcheck
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02005897 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01005898}
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005899
Bence Szépkúti0354d042023-12-06 16:14:37 +01005900component_release_test_valgrind_psa () {
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005901 msg "build: Release, full (clang)"
5902 # full config, in particular with MBEDTLS_USE_PSA_CRYPTO
5903 scripts/config.py full
5904 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
5905 make
5906
5907 msg "test: main suites, Valgrind (full config)"
5908 make memcheck
5909}
5910
Paul Elliott62dc3922021-11-25 17:29:40 +00005911support_test_cmake_out_of_source () {
5912 distrib_id=""
5913 distrib_ver=""
5914 distrib_ver_minor=""
5915 distrib_ver_major=""
5916
5917 # Attempt to parse lsb-release to find out distribution and version. If not
5918 # found this should fail safe (test is supported).
5919 if [[ -f /etc/lsb-release ]]; then
5920
5921 while read -r lsb_line; do
5922 case "$lsb_line" in
5923 "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};;
5924 "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};;
5925 esac
5926 done < /etc/lsb-release
5927
5928 distrib_ver_major="${distrib_ver%%.*}"
5929 distrib_ver="${distrib_ver#*.}"
5930 distrib_ver_minor="${distrib_ver%%.*}"
5931 fi
5932
5933 # Running the out of source CMake test on Ubuntu 16.04 using more than one
5934 # processor (as the CI does) can create a race condition whereby the build
5935 # fails to see a generated file, despite that file actually having been
5936 # generated. This problem appears to go away with 18.04 or newer, so make
5937 # the out of source tests unsupported on Ubuntu 16.04.
5938 [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ]
5939}
5940
Gilles Peskine8f073122018-11-27 15:58:47 +01005941component_test_cmake_out_of_source () {
David Horstmann862abe22023-09-28 10:42:10 +01005942 # Remove existing generated files so that we use the ones cmake
David Horstmann9f48fff2023-09-27 15:53:54 +01005943 # generates
5944 make neat
5945
Gilles Peskine8f073122018-11-27 15:58:47 +01005946 msg "build: cmake 'out-of-source' build"
Gilles Peskine8f073122018-11-27 15:58:47 +01005947 MBEDTLS_ROOT_DIR="$PWD"
5948 mkdir "$OUT_OF_SOURCE_DIR"
5949 cd "$OUT_OF_SOURCE_DIR"
David Horstmann9f48fff2023-09-27 15:53:54 +01005950 # Note: Explicitly generate files as these are turned off in releases
5951 cmake -D CMAKE_BUILD_TYPE:String=Check -D GEN_FILES=ON "$MBEDTLS_ROOT_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01005952 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005953
Gilles Peskine8f073122018-11-27 15:58:47 +01005954 msg "test: cmake 'out-of-source' build"
5955 make test
Gilles Peskinea841c2a2022-04-16 11:31:25 +02005956 # Check that ssl-opt.sh can find the test programs.
Gilles Peskine8f073122018-11-27 15:58:47 +01005957 # Also ensure that there are no error messages such as
5958 # "No such file or directory", which would indicate that some required
5959 # file is missing (ssl-opt.sh tolerates the absence of some files so
5960 # may exit with status 0 but emit errors).
Gilles Peskinea841c2a2022-04-16 11:31:25 +02005961 ./tests/ssl-opt.sh -f 'Default' >ssl-opt.out 2>ssl-opt.err
Gilles Peskine7393ec52022-04-15 22:43:38 +02005962 grep PASS ssl-opt.out
Gilles Peskinef7e956c2020-03-28 18:56:09 +01005963 cat ssl-opt.err >&2
5964 # If ssl-opt.err is non-empty, record an error and keep going.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005965 [ ! -s ssl-opt.err ]
Gilles Peskine7393ec52022-04-15 22:43:38 +02005966 rm ssl-opt.out ssl-opt.err
Gilles Peskine8f073122018-11-27 15:58:47 +01005967 cd "$MBEDTLS_ROOT_DIR"
5968 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01005969}
Andres AGdc192212016-08-31 17:33:13 +01005970
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005971component_test_cmake_as_subdirectory () {
David Horstmann9f48fff2023-09-27 15:53:54 +01005972 # Remove existing generated files so that we use the ones CMake
5973 # generates
5974 make neat
5975
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005976 msg "build: cmake 'as-subdirectory' build"
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005977 cd programs/test/cmake_subproject
David Horstmann9f48fff2023-09-27 15:53:54 +01005978 # Note: Explicitly generate files as these are turned off in releases
5979 cmake -D GEN_FILES=ON .
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005980 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005981 ./cmake_subproject
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005982}
Gilles Peskinea3000992022-02-04 00:21:12 +01005983support_test_cmake_as_subdirectory () {
5984 support_test_cmake_out_of_source
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005985}
5986
Chris Kayd259e342021-03-25 16:03:25 +00005987component_test_cmake_as_package () {
David Horstmann6c979852023-09-28 10:40:22 +01005988 # Remove existing generated files so that we use the ones CMake
5989 # generates
5990 make neat
5991
Chris Kayd259e342021-03-25 16:03:25 +00005992 msg "build: cmake 'as-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00005993 cd programs/test/cmake_package
5994 cmake .
5995 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005996 ./cmake_package
Chris Kayd259e342021-03-25 16:03:25 +00005997}
Gilles Peskinea3000992022-02-04 00:21:12 +01005998support_test_cmake_as_package () {
5999 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00006000}
6001
6002component_test_cmake_as_package_install () {
David Horstmann6c979852023-09-28 10:40:22 +01006003 # Remove existing generated files so that we use the ones CMake
6004 # generates
6005 make neat
6006
Chris Kayd259e342021-03-25 16:03:25 +00006007 msg "build: cmake 'as-installed-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00006008 cd programs/test/cmake_package_install
6009 cmake .
6010 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006011 ./cmake_package_install
Chris Kayd259e342021-03-25 16:03:25 +00006012}
Gilles Peskinea3000992022-02-04 00:21:12 +01006013support_test_cmake_as_package_install () {
6014 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00006015}
6016
David Horstmann20550e32023-01-12 14:17:01 +00006017component_build_cmake_custom_config_file () {
David Horstmann969c1452023-01-31 10:34:44 +00006018 # Make a copy of config file to use for the in-tree test
6019 cp "$CONFIG_H" include/mbedtls_config_in_tree_copy.h
David Horstmann20550e32023-01-12 14:17:01 +00006020
6021 MBEDTLS_ROOT_DIR="$PWD"
6022 mkdir "$OUT_OF_SOURCE_DIR"
6023 cd "$OUT_OF_SOURCE_DIR"
6024
David Horstmann969c1452023-01-31 10:34:44 +00006025 # Build once to get the generated files (which need an intact config file)
David Horstmann20550e32023-01-12 14:17:01 +00006026 cmake "$MBEDTLS_ROOT_DIR"
6027 make
6028
6029 msg "build: cmake with -DMBEDTLS_CONFIG_FILE"
6030 scripts/config.py -w full_config.h full
David Horstmann969c1452023-01-31 10:34:44 +00006031 echo '#error "cmake -DMBEDTLS_CONFIG_FILE is not working."' > "$MBEDTLS_ROOT_DIR/$CONFIG_H"
David Horstmann20550e32023-01-12 14:17:01 +00006032 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h "$MBEDTLS_ROOT_DIR"
6033 make
6034
6035 msg "build: cmake with -DMBEDTLS_CONFIG_FILE + -DMBEDTLS_USER_CONFIG_FILE"
6036 # In the user config, disable one feature (for simplicity, pick a feature
6037 # that nothing else depends on).
6038 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
6039
6040 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h -DMBEDTLS_USER_CONFIG_FILE=user_config.h "$MBEDTLS_ROOT_DIR"
6041 make
6042 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
6043
6044 rm -f user_config.h full_config.h
6045
6046 cd "$MBEDTLS_ROOT_DIR"
6047 rm -rf "$OUT_OF_SOURCE_DIR"
6048
6049 # Now repeat the test for an in-tree build:
6050
David Horstmann969c1452023-01-31 10:34:44 +00006051 # Restore config for the in-tree test
6052 mv include/mbedtls_config_in_tree_copy.h "$CONFIG_H"
David Horstmann20550e32023-01-12 14:17:01 +00006053
David Horstmann969c1452023-01-31 10:34:44 +00006054 # Build once to get the generated files (which need an intact config)
David Horstmann20550e32023-01-12 14:17:01 +00006055 cmake .
6056 make
6057
6058 msg "build: cmake (in-tree) with -DMBEDTLS_CONFIG_FILE"
6059 scripts/config.py -w full_config.h full
David Horstmann969c1452023-01-31 10:34:44 +00006060 echo '#error "cmake -DMBEDTLS_CONFIG_FILE is not working."' > "$MBEDTLS_ROOT_DIR/$CONFIG_H"
David Horstmann20550e32023-01-12 14:17:01 +00006061 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h .
6062 make
6063
6064 msg "build: cmake (in-tree) with -DMBEDTLS_CONFIG_FILE + -DMBEDTLS_USER_CONFIG_FILE"
6065 # In the user config, disable one feature (for simplicity, pick a feature
6066 # that nothing else depends on).
6067 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
6068
6069 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h -DMBEDTLS_USER_CONFIG_FILE=user_config.h .
6070 make
6071 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
6072
6073 rm -f user_config.h full_config.h
6074}
6075support_build_cmake_custom_config_file () {
6076 support_test_cmake_out_of_source
6077}
6078
6079
Tom Cosgrovedaddf112023-09-01 10:40:15 +01006080component_build_zeroize_checks () {
6081 msg "build: check for obviously wrong calls to mbedtls_platform_zeroize()"
6082
6083 scripts/config.py full
6084
6085 # Only compile - we're looking for sizeof-pointer-memaccess warnings
Dave Rodgman84125a12024-01-02 11:42:38 +00006086 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-zeroize-memset.h\"' -DMBEDTLS_TEST_DEFINES_ZEROIZE -Werror -Wsizeof-pointer-memaccess"
Tom Cosgrovedaddf112023-09-01 10:40:15 +01006087}
6088
6089
Gilles Peskine8f073122018-11-27 15:58:47 +01006090component_test_zeroize () {
6091 # Test that the function mbedtls_platform_zeroize() is not optimized away by
6092 # different combinations of compilers and optimization flags by using an
6093 # auxiliary GDB script. Unfortunately, GDB does not return error values to the
6094 # system in all cases that the script fails, so we must manually search the
6095 # output to check whether the pass string is present and no failure strings
6096 # were printed.
Andres AGdc192212016-08-31 17:33:13 +01006097
Gilles Peskine4976e822019-01-06 19:52:22 +00006098 # Don't try to disable ASLR. We don't care about ASLR here. We do care
6099 # about a spurious message if Gdb tries and fails, so suppress that.
6100 gdb_disable_aslr=
6101 if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then
6102 gdb_disable_aslr='set disable-randomization off'
6103 fi
6104
Gilles Peskine8f073122018-11-27 15:58:47 +01006105 for optimization_flag in -O2 -O3 -Ofast -Os; do
Gilles Peskine55f7c942019-01-09 22:28:21 +01006106 for compiler in clang gcc; do
6107 msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()"
6108 make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006109 gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log
6110 grep "The buffer was correctly zeroized" test_zeroize.log
6111 not grep -i "error" test_zeroize.log
Gilles Peskine55f7c942019-01-09 22:28:21 +01006112 rm -f test_zeroize.log
6113 make clean
6114 done
Andres Amaya Garcia29673812017-10-25 10:35:51 +01006115 done
Gilles Peskine8f073122018-11-27 15:58:47 +01006116}
Gilles Peskine192c72f2017-12-21 15:59:21 +01006117
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006118component_test_psa_compliance () {
Dave Rodgman932ce852023-12-18 19:55:40 +00006119 # The arch tests build with gcc, so require use of gcc here to link properly
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006120 msg "build: make, default config (out-of-box), libmbedcrypto.a only"
Dave Rodgman932ce852023-12-18 19:55:40 +00006121 CC=gcc make -C library libmbedcrypto.a
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006122
6123 msg "unit test: test_psa_compliance.py"
Dave Rodgmand0a594d2023-12-18 22:29:56 +00006124 CC=gcc ./tests/scripts/test_psa_compliance.py
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006125}
6126
6127support_test_psa_compliance () {
Bence Szépkútief0d02e2021-11-03 11:36:09 +01006128 # psa-compliance-tests only supports CMake >= 3.10.0
Bence Szépkútica9236b2021-10-25 19:29:07 +02006129 ver="$(cmake --version)"
6130 ver="${ver#cmake version }"
6131 ver_major="${ver%%.*}"
6132
6133 ver="${ver#*.}"
6134 ver_minor="${ver%%.*}"
6135
6136 [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ]
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006137}
6138
Gilles Peskinec848d222022-12-09 12:23:35 +01006139component_check_code_style () {
6140 msg "Check C code style"
6141 ./scripts/code_style.py
David Horstmann92b5ac12022-11-10 18:30:52 +00006142}
6143
Gilles Peskinec848d222022-12-09 12:23:35 +01006144support_check_code_style() {
David Horstmann92b5ac12022-11-10 18:30:52 +00006145 case $(uncrustify --version) in
6146 *0.75.1*) true;;
6147 *) false;;
6148 esac
6149}
6150
Gilles Peskine8f073122018-11-27 15:58:47 +01006151component_check_python_files () {
6152 msg "Lint: Python scripts"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006153 tests/scripts/check-python-files.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01006154}
Gilles Peskine192c72f2017-12-21 15:59:21 +01006155
Joe Subbianid614c0b2021-07-29 11:18:29 +01006156component_check_test_helpers () {
6157 msg "unit test: generate_test_code.py"
Manuel Pégourié-Gonnarddfb114a2020-06-02 11:40:08 +02006158 # unittest writes out mundane stuff like number or tests run on stderr.
6159 # Our convention is to reserve stderr for actual errors, and write
6160 # harmless info on stdout so it can be suppress with --quiet.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006161 ./tests/scripts/test_generate_test_code.py 2>&1
Joe Subbianid614c0b2021-07-29 11:18:29 +01006162
Joe Subbiania25ffab2021-08-06 09:41:27 +01006163 msg "unit test: translate_ciphers.py"
6164 python3 -m unittest tests/scripts/translate_ciphers.py 2>&1
Gilles Peskine8f073122018-11-27 15:58:47 +01006165}
Gilles Peskine192c72f2017-12-21 15:59:21 +01006166
Jerry Yud767cc42023-03-31 15:03:55 +08006167
Gilles Peskine192c72f2017-12-21 15:59:21 +01006168################################################################
6169#### Termination
6170################################################################
6171
Gilles Peskine8f073122018-11-27 15:58:47 +01006172post_report () {
6173 msg "Done, cleaning up"
Gilles Peskinef83eb822020-03-30 20:11:39 +02006174 final_cleanup
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01006175
Gilles Peskine8f073122018-11-27 15:58:47 +01006176 final_report
6177}
6178
6179
6180
6181################################################################
6182#### Run all the things
6183################################################################
6184
Gilles Peskine5d996822020-03-28 21:09:21 +01006185# Function invoked by --error-test to test error reporting.
6186pseudo_component_error_test () {
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006187 msg "Testing error reporting $error_test_i"
Gilles Peskine5d996822020-03-28 21:09:21 +01006188 if [ $KEEP_GOING -ne 0 ]; then
6189 echo "Expect three failing commands."
6190 fi
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006191 # If the component doesn't run in a subshell, changing error_test_i to an
6192 # invalid integer will cause an error in the loop that runs this function.
6193 error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell
Gilles Peskineec135542021-08-02 23:14:03 +02006194 # Expected error: 'grep non_existent /dev/null -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01006195 grep non_existent /dev/null
Gilles Peskineec135542021-08-02 23:14:03 +02006196 # Expected error: '! grep -q . tests/scripts/all.sh -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01006197 not grep -q . "$0"
Gilles Peskineec135542021-08-02 23:14:03 +02006198 # Expected error: 'make unknown_target -> 2'
Gilles Peskine5d996822020-03-28 21:09:21 +01006199 make unknown_target
6200 false "this should not be executed"
6201}
6202
Gilles Peskinee48351a2018-11-27 16:06:30 +01006203# Run one component and clean up afterwards.
Gilles Peskine8f073122018-11-27 15:58:47 +01006204run_component () {
Gilles Peskineffcdeff2018-12-04 12:49:28 +01006205 current_component="$1"
Gilles Peskine9004a172019-09-16 15:20:36 +02006206 export MBEDTLS_TEST_CONFIGURATION="$current_component"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02006207
6208 # Unconditionally create a seedfile that's sufficiently long.
6209 # Do this before each component, because a previous component may
6210 # have messed it up or shortened it.
Gilles Peskine88a07452021-07-08 19:03:50 +02006211 local dd_cmd
6212 dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1)
6213 case $OSTYPE in
Tom Cosgrove226aca12022-03-16 14:11:07 +00006214 linux*|freebsd*|openbsd*) dd_cmd+=(status=none)
Gilles Peskine88a07452021-07-08 19:03:50 +02006215 esac
6216 "${dd_cmd[@]}"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02006217
Gilles Peskineec135542021-08-02 23:14:03 +02006218 # Run the component in a subshell, with error trapping and output
6219 # redirection set up based on the relevant options.
Gilles Peskinece266c42020-03-28 18:50:43 +01006220 if [ $KEEP_GOING -eq 1 ]; then
Gilles Peskineec135542021-08-02 23:14:03 +02006221 # We want to keep running if the subshell fails, so 'set -e' must
6222 # be off when the subshell runs.
Gilles Peskinece266c42020-03-28 18:50:43 +01006223 set +e
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +02006224 fi
Gilles Peskinece266c42020-03-28 18:50:43 +01006225 (
6226 if [ $QUIET -eq 1 ]; then
6227 # msg() will be silenced, so just print the component name here.
6228 echo "${current_component#component_}"
6229 exec >/dev/null
6230 fi
6231 if [ $KEEP_GOING -eq 1 ]; then
6232 # Keep "set -e" off, and run an ERR trap instead to record failures.
6233 set -E
6234 trap err_trap ERR
6235 fi
6236 # The next line is what runs the component
6237 "$@"
6238 if [ $KEEP_GOING -eq 1 ]; then
6239 trap - ERR
6240 exit $last_failure_status
6241 fi
6242 )
6243 component_status=$?
6244 if [ $KEEP_GOING -eq 1 ]; then
6245 set -e
6246 if [ $component_status -ne 0 ]; then
6247 failure_count=$((failure_count + 1))
6248 fi
6249 fi
Gilles Peskine2ef377d2019-10-07 18:44:21 +02006250
6251 # Restore the build tree to a clean state.
Gilles Peskinee48351a2018-11-27 16:06:30 +01006252 cleanup
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02006253 unset current_component
Gilles Peskine8f073122018-11-27 15:58:47 +01006254}
6255
6256# Preliminary setup
6257pre_check_environment
6258pre_initialize_variables
6259pre_parse_command_line "$@"
Gilles Peskine348fb9a2018-11-27 17:04:29 +01006260
Gilles Peskine878cf602019-01-06 20:50:38 +00006261pre_check_git
Gilles Peskine568f53a2021-07-12 18:16:01 +02006262pre_restore_files
Gilles Peskinef83eb822020-03-30 20:11:39 +02006263pre_back_up
Andrzej Kurekeb508712019-02-14 07:18:59 -05006264
Gilles Peskine878cf602019-01-06 20:50:38 +00006265build_status=0
6266if [ $KEEP_GOING -eq 1 ]; then
6267 pre_setup_keep_going
Gilles Peskine8f073122018-11-27 15:58:47 +01006268fi
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02006269pre_prepare_outcome_file
Gilles Peskine878cf602019-01-06 20:50:38 +00006270pre_print_configuration
6271pre_check_tools
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01006272cleanup
David Horstmann76a77382023-08-17 17:32:26 +01006273if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +01006274 pre_generate_files
6275fi
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01006276
Gilles Peskinebeb3a812019-01-06 22:11:25 +00006277# Run the requested tests.
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006278for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do
Gilles Peskine5d996822020-03-28 21:09:21 +01006279 run_component pseudo_component_error_test
Gilles Peskine5d996822020-03-28 21:09:21 +01006280done
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006281unset error_test_i
Gilles Peskinebeb3a812019-01-06 22:11:25 +00006282for component in $RUN_COMPONENTS; do
6283 run_component "component_$component"
6284done
Gilles Peskine8f073122018-11-27 15:58:47 +01006285
6286# We're done.
Gilles Peskine878cf602019-01-06 20:50:38 +00006287post_report