commit c768600de7196a11722f7bded105f17e6e63d8d0
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Apr 20 16:31:37 2022 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Apr 20 20:58:04 2022 +0200
tree 0aced3c591051242436714cdf03c46b15228c1ec
parent ce78c9600fdee15b2b9e08ba036895beea4d10c8

Mbed TLS supports RC4 only with 128-bit keys

In PSA tests, don't try to exercise RC4 keys with other sizes. Do test that
attempts to use RC4 keys of other sizes fail with NOT_SUPPORTED (import does
work, which is not really useful, but removing import support would
technically break backward compatibility).

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

tests/scripts/generate_psa_tests.py

diff --git a/tests/scripts/generate_psa_tests.py b/tests/scripts/generate_psa_tests.py
index 933dd0a..8e81675 100755
--- a/tests/scripts/generate_psa_tests.py
+++ b/tests/scripts/generate_psa_tests.py
@@ -539,6 +539,9 @@
         # loss of test coverage.
         if key_type.string == 'PSA_KEY_TYPE_RAW_DATA':
             return False
+        # Mbed TLS only supports 128-bit keys for RC4.
+        if key_type.string == 'PSA_KEY_TYPE_ARC4' and bits != 128:
+            return False
         # OAEP requires room for two hashes plus wrapping
         m = cls.RSA_OAEP_RE.match(alg.string)
         if m: