blob: 315a66b14d689514643999d9682afda1bd7c036c [file] [log] [blame]
Gilles Peskine62cf2e82020-03-27 16:35:23 +01001#! /usr/bin/env bash
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002
Simon Butcher3ea7f522016-03-07 23:22:10 +00003# all.sh
4#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +00006# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Gilles Peskine192c72f2017-12-21 15:59:21 +01007
8
9
10################################################################
11#### Documentation
12################################################################
13
Simon Butcher3ea7f522016-03-07 23:22:10 +000014# Purpose
Gilles Peskine192c72f2017-12-21 15:59:21 +010015# -------
Simon Butcher3ea7f522016-03-07 23:22:10 +000016#
SimonB2e23c822016-04-16 21:54:39 +010017# To run all tests possible or available on the platform.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +010018#
Gilles Peskine192c72f2017-12-21 15:59:21 +010019# Notes for users
20# ---------------
21#
SimonB2e23c822016-04-16 21:54:39 +010022# Warning: the test is destructive. It includes various build modes and
23# configurations, and can and will arbitrarily change the current CMake
Gilles Peskine192c72f2017-12-21 15:59:21 +010024# configuration. The following files must be committed into git:
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020025# * include/mbedtls/mbedtls_config.h
Gilles Peskine636c26a2020-03-04 20:46:15 +010026# * Makefile, library/Makefile, programs/Makefile, tests/Makefile,
27# programs/fuzz/Makefile
Gilles Peskine192c72f2017-12-21 15:59:21 +010028# After running this script, the CMake cache will be lost and CMake
29# will no longer be initialised.
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +010030#
Gilles Peskine192c72f2017-12-21 15:59:21 +010031# The script assumes the presence of a number of tools:
32# * Basic Unix tools (Windows users note: a Unix-style find must be before
33# the Windows find in the PATH)
34# * Perl
35# * GNU Make
36# * CMake
37# * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind)
Andrzej Kurek05be06c2018-06-28 04:41:50 -040038# * G++
Gilles Peskine192c72f2017-12-21 15:59:21 +010039# * arm-gcc and mingw-gcc
40# * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc
Gilles Peskine7be571a2023-08-27 21:39:21 +020041# * OpenSSL and GnuTLS command line tools, in suitable versions for the
42# interoperability tests. The following are the official versions at the
43# time of writing:
44# * GNUTLS_{CLI,SERV} = 3.4.10
45# * GNUTLS_NEXT_{CLI,SERV} = 3.7.2
46# * OPENSSL = 1.0.2g (without Debian/Ubuntu patches)
47# * OPENSSL_NEXT = 1.1.1a
Gilles Peskine192c72f2017-12-21 15:59:21 +010048# See the invocation of check_tools below for details.
49#
50# This script must be invoked from the toplevel directory of a git
51# working copy of Mbed TLS.
52#
Gilles Peskinece266c42020-03-28 18:50:43 +010053# The behavior on an error depends on whether --keep-going (alias -k)
54# is in effect.
55# * Without --keep-going: the script stops on the first error without
56# cleaning up. This lets you work in the configuration of the failing
57# component.
58# * With --keep-going: the script runs all requested components and
59# reports failures at the end. In particular the script always cleans
60# up on exit.
61#
Gilles Peskine192c72f2017-12-21 15:59:21 +010062# Note that the output is not saved. You may want to run
63# script -c tests/scripts/all.sh
64# or
65# tests/scripts/all.sh >all.log 2>&1
66#
67# Notes for maintainers
68# ---------------------
69#
Gilles Peskine8f073122018-11-27 15:58:47 +010070# The bulk of the code is organized into functions that follow one of the
71# following naming conventions:
72# * pre_XXX: things to do before running the tests, in order.
73# * component_XXX: independent components. They can be run in any order.
Gilles Peskinec70637a2019-01-09 22:29:17 +010074# * component_check_XXX: quick tests that aren't worth parallelizing.
75# * component_build_XXX: build things but don't run them.
76# * component_test_XXX: build and test.
Bence Szépkúti89dd5c02023-12-15 17:05:15 +010077# * component_release_XXX: tests that the CI should skip during PR testing.
Gilles Peskine878cf602019-01-06 20:50:38 +000078# * support_XXX: if support_XXX exists and returns false then
79# component_XXX is not run by default.
Gilles Peskine8f073122018-11-27 15:58:47 +010080# * post_XXX: things to do after running the tests.
81# * other: miscellaneous support functions.
82#
Gilles Peskinec70637a2019-01-09 22:29:17 +010083# Each component must start by invoking `msg` with a short informative message.
84#
Gilles Peskinea681c592020-03-28 21:27:40 +010085# Warning: due to the way bash detects errors, the failure of a command
86# inside 'if' or '!' is not detected. Use the 'not' function instead of '!'.
87#
Gilles Peskinece266c42020-03-28 18:50:43 +010088# Each component is executed in a separate shell process. The component
89# fails if any command in it returns a non-zero status.
90#
Gilles Peskinec70637a2019-01-09 22:29:17 +010091# The framework performs some cleanup tasks after each component. This
92# means that components can assume that the working directory is in a
93# cleaned-up state, and don't need to perform the cleanup themselves.
94# * Run `make clean`.
Bence Szépkúti414d6bd2021-06-28 14:11:11 +010095# * Restore `include/mbedtls/mbedtls_config.h` from a backup made before running
Gilles Peskinec70637a2019-01-09 22:29:17 +010096# the component.
Gilles Peskine636c26a2020-03-04 20:46:15 +010097# * Check out `Makefile`, `library/Makefile`, `programs/Makefile`,
98# `tests/Makefile` and `programs/fuzz/Makefile` from git.
99# This cleans up after an in-tree use of CMake.
Gilles Peskinec70637a2019-01-09 22:29:17 +0100100#
Gilles Peskine192c72f2017-12-21 15:59:21 +0100101# The tests are roughly in order from fastest to slowest. This doesn't
102# have to be exact, but in general you should add slower tests towards
103# the end and fast checks near the beginning.
Gilles Peskine192c72f2017-12-21 15:59:21 +0100104
105
106
107################################################################
108#### Initialization and command line parsing
109################################################################
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100110
Gilles Peskine36647802020-03-28 18:50:49 +0100111# Abort on errors (even on the left-hand side of a pipe).
112# Treat uninitialised variables as errors.
113set -e -o pipefail -u
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100114
Gilles Peskine076f7252022-08-30 21:02:44 +0200115# Enable ksh/bash extended file matching patterns
116shopt -s extglob
117
David Horstmann76a77382023-08-17 17:32:26 +0100118in_mbedtls_repo () {
David Horstmannd02b5f82023-08-29 09:53:52 +0100119 test -d include -a -d library -a -d programs -a -d tests
120}
121
Ronald Cron070e8652023-10-09 10:25:45 +0200122in_tf_psa_crypto_repo () {
David Horstmannd02b5f82023-08-29 09:53:52 +0100123 test -d include -a -d core -a -d drivers -a -d programs -a -d tests
David Horstmann9a6c45b2023-07-14 12:30:00 +0100124}
125
Gilles Peskine8f073122018-11-27 15:58:47 +0100126pre_check_environment () {
Ronald Cron070e8652023-10-09 10:25:45 +0200127 if in_mbedtls_repo || in_tf_psa_crypto_repo; then :; else
128 echo "Must be run from Mbed TLS / TF-PSA-Crypto root" >&2
Gilles Peskine8f073122018-11-27 15:58:47 +0100129 exit 1
130 fi
131}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100132
Gilles Peskine8f073122018-11-27 15:58:47 +0100133pre_initialize_variables () {
David Horstmann76a77382023-08-17 17:32:26 +0100134 if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100135 CONFIG_H='include/mbedtls/mbedtls_config.h'
David Horstmann76a77382023-08-17 17:32:26 +0100136 else
137 CONFIG_H='drivers/builtin/include/mbedtls/mbedtls_config.h'
David Horstmann9a6c45b2023-07-14 12:30:00 +0100138 fi
John Durkopbd069d32020-10-31 22:14:03 -0700139 CRYPTO_CONFIG_H='include/psa/crypto_config.h'
Manuel Pégourié-Gonnard462e3a92022-12-27 12:35:11 +0100140 CONFIG_TEST_DRIVER_H='tests/include/test/drivers/config_test_driver.h'
Gilles Peskinef83eb822020-03-30 20:11:39 +0200141
142 # Files that are clobbered by some jobs will be backed up. Use a different
143 # suffix from auxiliary scripts so that all.sh and auxiliary scripts can
144 # independently decide when to remove the backup file.
145 backup_suffix='.all.bak'
146 # Files clobbered by config.py
Janos Follath2f045822023-07-31 10:57:16 +0100147 files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H $CONFIG_TEST_DRIVER_H"
David Horstmann76a77382023-08-17 17:32:26 +0100148 if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100149 # Files clobbered by in-tree cmake
150 files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile"
151 fi
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200152
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200153 append_outcome=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100154 MEMORY=0
155 FORCE=0
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200156 QUIET=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100157 KEEP_GOING=0
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100158
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200159 # Seed value used with the --release-test option.
Manuel Pégourié-Gonnard54304472020-06-22 10:11:47 +0200160 #
161 # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if
162 # both values are kept in sync. If you change the value here because it
163 # breaks some tests, you'll definitely want to change it in
164 # basic-build-test.sh as well.
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200165 RELEASE_SEED=1
166
Yanray Wang18040ed2023-11-23 21:29:56 +0800167 # Specify character collation for regular expressions and sorting with C locale
168 export LC_COLLATE=C
169
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200170 : ${MBEDTLS_TEST_OUTCOME_FILE=}
Gilles Peskine9004a172019-09-16 15:20:36 +0200171 : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200172 export MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine9004a172019-09-16 15:20:36 +0200173 export MBEDTLS_TEST_PLATFORM
174
Jaeden Ameroc4cc2512019-01-30 15:35:44 +0000175 # Default commands, can be overridden by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100176 : ${OPENSSL:="openssl"}
Gilles Peskine8f073122018-11-27 15:58:47 +0100177 : ${OPENSSL_NEXT:="$OPENSSL"}
178 : ${GNUTLS_CLI:="gnutls-cli"}
179 : ${GNUTLS_SERV:="gnutls-serv"}
Gilles Peskine8f073122018-11-27 15:58:47 +0100180 : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build}
181 : ${ARMC5_BIN_DIR:=/usr/bin}
182 : ${ARMC6_BIN_DIR:=/usr/bin}
Gilles Peskine6d061342020-04-30 18:19:32 +0200183 : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-}
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200184 : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-}
Gowtham Suresh Kumar9da40b82023-07-31 16:38:10 +0100185 : ${CLANG_LATEST:="clang-latest"}
186 : ${CLANG_EARLIEST:="clang-earliest"}
187 : ${GCC_LATEST:="gcc-latest"}
188 : ${GCC_EARLIEST:="gcc-earliest"}
Gilles Peskine8f073122018-11-27 15:58:47 +0100189 # if MAKEFLAGS is not set add the -j option to speed up invocations of make
Gilles Peskinea1fc4b52019-01-06 20:15:26 +0000190 if [ -z "${MAKEFLAGS+set}" ]; then
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200191 export MAKEFLAGS="-j$(all_sh_nproc)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100192 fi
Dave Rodgman0c5bfe82023-12-18 19:53:25 +0000193 # if CC is not set, use clang by default (if present) to improve build times
194 if [ -z "${CC+set}" ] && (type clang > /dev/null 2>&1); then
Dave Rodgmanfc5b9552023-12-19 16:08:19 +0000195 export CC="clang"
Dave Rodgman66cbc832023-12-18 18:34:50 +0000196 fi
Gilles Peskine878cf602019-01-06 20:50:38 +0000197
Gilles Peskine396853a2021-09-20 18:57:55 +0200198 # Include more verbose output for failing tests run by CMake or make
Jaeden Amerod48e9c72019-02-07 17:43:39 +0000199 export CTEST_OUTPUT_ON_FAILURE=1
200
Gilles Peskine8fd59422019-10-21 17:11:33 +0200201 # CFLAGS and LDFLAGS for Asan builds that don't use CMake
Manuel Pégourié-Gonnardfe549a72022-11-30 10:42:03 +0100202 # default to -O2, use -Ox _after_ this if you want another level
Przemek Stekiel6efa6082023-05-31 09:38:21 +0200203 ASAN_CFLAGS='-O2 -Werror -fsanitize=address,undefined -fno-sanitize-recover=all'
Dave Rodgman17127e92023-12-14 16:42:48 +0000204 # Normally, tests should use this compiler for ASAN testing
205 ASAN_CC=clang
Gilles Peskine8fd59422019-10-21 17:11:33 +0200206
Andrzej Kurek04bfe572023-06-27 10:02:09 -0400207 # Platform tests have an allocation that returns null
208 export ASAN_OPTIONS="allocator_may_return_null=1"
Andrzej Kurek026235c2023-07-05 08:32:43 -0400209 export MSAN_OPTIONS="allocator_may_return_null=1"
Andrzej Kurek04bfe572023-06-27 10:02:09 -0400210
Gilles Peskine878cf602019-01-06 20:50:38 +0000211 # Gather the list of available components. These are the functions
212 # defined in this script whose name starts with "component_".
Gowtham Suresh Kumar1e829a42023-07-28 16:41:21 +0100213 ALL_COMPONENTS=$(compgen -A function component_ | sed 's/component_//')
Gilles Peskine878cf602019-01-06 20:50:38 +0000214
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100215 # Delay determinig SUPPORTED_COMPONENTS until the command line options have a chance to override
216 # the commands set by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100217}
Andres AG38495a32016-07-12 16:54:33 +0100218
Gilles Peskinea28db922019-01-10 00:05:18 +0100219# Test whether the component $1 is included in the command line patterns.
220is_component_included()
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100221{
Gilles Peskine03af6782021-08-06 11:35:17 +0200222 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
223 # only does word splitting.
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100224 set -f
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000225 for pattern in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100226 set +f
227 case ${1#component_} in $pattern) return 0;; esac
228 done
229 set +f
230 return 1
231}
Andres AG7770ea82016-10-10 15:46:20 +0100232
Simon Butcher41eeccf2016-09-07 00:07:09 +0100233usage()
Andres AGd9eba4b2016-08-26 14:42:14 +0100234{
Gilles Peskine709346a2017-12-10 23:43:39 +0100235 cat <<EOF
Gilles Peskine92525112018-11-27 18:15:35 +0100236Usage: $0 [OPTION]... [COMPONENT]...
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100237Run mbedtls release validation tests.
Gilles Peskine92525112018-11-27 18:15:35 +0100238By default, run all tests. With one or more COMPONENT, run only those.
Gilles Peskinea28db922019-01-10 00:05:18 +0100239COMPONENT can be the name of a component or a shell wildcard pattern.
240
241Examples:
242 $0 "check_*"
243 Run all sanity checks.
244 $0 --no-armcc --except test_memsan
245 Run everything except builds that require armcc and MemSan.
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100246
247Special options:
248 -h|--help Print this help and exit.
Gilles Peskine878cf602019-01-06 20:50:38 +0000249 --list-all-components List all available test components and exit.
250 --list-components List components supported on this platform and exit.
Gilles Peskine709346a2017-12-10 23:43:39 +0100251
252General options:
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200253 -q|--quiet Only output component names, and errors if any.
Gilles Peskine709346a2017-12-10 23:43:39 +0100254 -f|--force Force the tests to overwrite any modified files.
Gilles Peskine7c652162017-12-11 00:01:40 +0100255 -k|--keep-going Run all tests and report errors at the end.
Gilles Peskine709346a2017-12-10 23:43:39 +0100256 -m|--memory Additional optional memory tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200257 --append-outcome Append to the outcome file (if used).
Gilles Peskine6d061342020-04-30 18:19:32 +0200258 --arm-none-eabi-gcc-prefix=<string>
259 Prefix for a cross-compiler for arm-none-eabi
260 (default: "${ARM_NONE_EABI_GCC_PREFIX}")
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200261 --arm-linux-gnueabi-gcc-prefix=<string>
262 Prefix for a cross-compiler for arm-linux-gnueabi
263 (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}")
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100264 --armcc Run ARM Compiler builds (on by default).
Gilles Peskine80ddb992021-08-06 11:51:59 +0200265 --restore First clean up the build tree, restoring backed up
266 files. Do not run any components unless they are
267 explicitly specified.
Gilles Peskine5d996822020-03-28 21:09:21 +0100268 --error-test Error test mode: run a failing function in addition
Gilles Peskine86f61292021-08-05 15:11:33 +0200269 to any specified component. May be repeated.
Gilles Peskinea28db922019-01-10 00:05:18 +0100270 --except Exclude the COMPONENTs listed on the command line,
271 instead of running only those.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200272 --no-append-outcome Write a new outcome file and analyze it (default).
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100273 --no-armcc Skip ARM Compiler builds.
Gilles Peskine38d81652018-03-21 08:40:26 +0100274 --no-force Refuse to overwrite modified files (default).
275 --no-keep-going Stop at the first error (default).
276 --no-memory No additional memory tests (default).
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800277 --no-quiet Print full output from components.
Gilles Peskine709346a2017-12-10 23:43:39 +0100278 --out-of-source-dir=<path> Directory used for CMake out-of-source build tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200279 --outcome-file=<path> File where test outcomes are written (not done if
280 empty; default: \$MBEDTLS_TEST_OUTCOME_FILE).
Gilles Peskine38d81652018-03-21 08:40:26 +0100281 --random-seed Use a random seed value for randomized tests (default).
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200282 -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}.
Gilles Peskine709346a2017-12-10 23:43:39 +0100283 -s|--seed Integer seed value to use for this test run.
284
285Tool path options:
286 --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory.
287 --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory.
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +0100288 --clang-earliest=<Clang_earliest_path> Earliest version of clang available
289 --clang-latest=<Clang_latest_path> Latest version of clang available
290 --gcc-earliest=<GCC_earliest_path> Earliest version of GCC available
291 --gcc-latest=<GCC_latest_path> Latest version of GCC available
Gilles Peskine709346a2017-12-10 23:43:39 +0100292 --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests.
293 --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests.
Gilles Peskine709346a2017-12-10 23:43:39 +0100294 --openssl=<OpenSSL_path> OpenSSL executable to use for most tests.
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +0100295 --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA
Gilles Peskine709346a2017-12-10 23:43:39 +0100296EOF
SimonB2e23c822016-04-16 21:54:39 +0100297}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100298
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200299# Cleanup before/after running a component.
300# Remove built files as well as the cmake cache/config.
301# Does not remove generated source files.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100302cleanup()
303{
David Horstmann76a77382023-08-17 17:32:26 +0100304 if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100305 command make clean
306 fi
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200307
Gilles Peskine31b07e22018-03-21 12:15:06 +0100308 # Remove CMake artefacts
Jaeden Amero2d0e00f2018-11-07 18:46:41 +0000309 find . -name .git -prune -o \
Gilles Peskine31b07e22018-03-21 12:15:06 +0100310 -iname CMakeFiles -exec rm -rf {} \+ -o \
311 \( -iname cmake_install.cmake -o \
312 -iname CTestTestfile.cmake -o \
Manuel Pégourié-Gonnardbfe54d72021-09-09 11:11:44 +0200313 -iname CMakeCache.txt -o \
314 -path './cmake/*.cmake' \) -exec rm -f {} \+
Gilles Peskine31b07e22018-03-21 12:15:06 +0100315 # Recover files overwritten by in-tree CMake builds
Gilles Peskine076f7252022-08-30 21:02:44 +0200316 rm -f include/Makefile include/mbedtls/Makefile programs/!(fuzz)/Makefile
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200317
Jaeden Ameroab83fdf2019-06-20 17:38:22 +0100318 # Remove any artifacts from the component_test_cmake_as_subdirectory test.
319 rm -rf programs/test/cmake_subproject/build
320 rm -f programs/test/cmake_subproject/Makefile
321 rm -f programs/test/cmake_subproject/cmake_subproject
322
Chris Kayd259e342021-03-25 16:03:25 +0000323 # Remove any artifacts from the component_test_cmake_as_package test.
324 rm -rf programs/test/cmake_package/build
325 rm -f programs/test/cmake_package/Makefile
326 rm -f programs/test/cmake_package/cmake_package
327
328 # Remove any artifacts from the component_test_cmake_as_installed_package test.
329 rm -rf programs/test/cmake_package_install/build
330 rm -f programs/test/cmake_package_install/Makefile
331 rm -f programs/test/cmake_package_install/cmake_package_install
332
Gilles Peskinef83eb822020-03-30 20:11:39 +0200333 # Restore files that may have been clobbered by the job
334 for x in $files_to_back_up; do
Gilles Peskinedd06efb2022-08-30 21:02:00 +0200335 if [[ -e "$x$backup_suffix" ]]; then
336 cp -p "$x$backup_suffix" "$x"
337 fi
Gilles Peskinef83eb822020-03-30 20:11:39 +0200338 done
339}
John Durkopbd069d32020-10-31 22:14:03 -0700340
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200341# Final cleanup when this script exits (except when exiting on a failure
342# in non-keep-going mode).
Gilles Peskinef83eb822020-03-30 20:11:39 +0200343final_cleanup () {
344 cleanup
345
346 for x in $files_to_back_up; do
347 rm -f "$x$backup_suffix"
348 done
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100349}
350
Gilles Peskine7c652162017-12-11 00:01:40 +0100351# Executed on exit. May be redefined depending on command line options.
352final_report () {
353 :
354}
355
356fatal_signal () {
Gilles Peskinef83eb822020-03-30 20:11:39 +0200357 final_cleanup
Gilles Peskine7c652162017-12-11 00:01:40 +0100358 final_report $1
359 trap - $1
360 kill -$1 $$
361}
362
363trap 'fatal_signal HUP' HUP
364trap 'fatal_signal INT' INT
365trap 'fatal_signal TERM' TERM
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200366
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200367# Number of processors on this machine. Used as the default setting
368# for parallel make.
369all_sh_nproc ()
370{
371 {
372 nproc || # Linux
373 sysctl -n hw.ncpuonline || # NetBSD, OpenBSD
374 sysctl -n hw.ncpu || # FreeBSD
375 echo 1
376 } 2>/dev/null
377}
378
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100379msg()
380{
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100381 if [ -n "${current_component:-}" ]; then
382 current_section="${current_component#component_}: $1"
383 else
384 current_section="$1"
385 fi
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200386
387 if [ $QUIET -eq 1 ]; then
388 return
389 fi
390
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100391 echo ""
392 echo "******************************************************************"
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100393 echo "* $current_section "
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +0000394 printf "* "; date
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100395 echo "******************************************************************"
396}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100397
Gilles Peskine8f073122018-11-27 15:58:47 +0100398armc6_build_test()
399{
400 FLAGS="$1"
Andres AGa5cd9732016-10-17 15:23:10 +0100401
Gilles Peskine18487f62020-04-30 23:11:54 +0200402 msg "build: ARM Compiler 6 ($FLAGS)"
Yanray Wangbc7716c2023-09-08 11:20:59 +0800403 make clean
Gilles Peskine8f073122018-11-27 15:58:47 +0100404 ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \
Dave Rodgman1c232a82023-03-02 13:39:04 +0000405 WARNING_CFLAGS='-Werror -xc -std=c99' make lib
Gilles Peskine18487f62020-04-30 23:11:54 +0200406
407 msg "size: ARM Compiler 6 ($FLAGS)"
408 "$ARMC6_FROMELF" -z library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +0100409}
Andres AGa5cd9732016-10-17 15:23:10 +0100410
Andres AGd9eba4b2016-08-26 14:42:14 +0100411err_msg()
412{
413 echo "$1" >&2
414}
415
416check_tools()
417{
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200418 for tool in "$@"; do
419 if ! `type "$tool" >/dev/null 2>&1`; then
420 err_msg "$tool not found!"
Andres AGd9eba4b2016-08-26 14:42:14 +0100421 exit 1
422 fi
423 done
424}
425
Gilles Peskine8f073122018-11-27 15:58:47 +0100426pre_parse_command_line () {
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000427 COMMAND_LINE_COMPONENTS=
Gilles Peskinea28db922019-01-10 00:05:18 +0100428 all_except=0
Gilles Peskine5d996822020-03-28 21:09:21 +0100429 error_test=0
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100430 list_components=0
Gilles Peskine80ddb992021-08-06 11:51:59 +0200431 restore_first=0
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000432 no_armcc=
SimonB2e23c822016-04-16 21:54:39 +0100433
Jaeden Amero9b90f2e2018-11-02 18:34:17 +0000434 # Note that legacy options are ignored instead of being omitted from this
435 # list of options, so invocations that worked with previous version of
436 # all.sh will still run and work properly.
Gilles Peskine8f073122018-11-27 15:58:47 +0100437 while [ $# -gt 0 ]; do
Gilles Peskine55f7c942019-01-09 22:28:21 +0100438 case "$1" in
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200439 --append-outcome) append_outcome=1;;
Gilles Peskine6d061342020-04-30 18:19:32 +0200440 --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";;
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200441 --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000442 --armcc) no_armcc=;;
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100443 --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";;
444 --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";;
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +0100445 --clang-earliest) shift; CLANG_EARLIEST="$1";;
446 --clang-latest) shift; CLANG_LATEST="$1";;
Gilles Peskine5d996822020-03-28 21:09:21 +0100447 --error-test) error_test=$((error_test + 1));;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000448 --except) all_except=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100449 --force|-f) FORCE=1;;
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +0100450 --gcc-earliest) shift; GCC_EARLIEST="$1";;
451 --gcc-latest) shift; GCC_LATEST="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100452 --gnutls-cli) shift; GNUTLS_CLI="$1";;
Gilles Peskine7be571a2023-08-27 21:39:21 +0200453 --gnutls-legacy-cli) shift;; # ignored for backward compatibility
454 --gnutls-legacy-serv) shift;; # ignored for backward compatibility
Gilles Peskine55f7c942019-01-09 22:28:21 +0100455 --gnutls-serv) shift; GNUTLS_SERV="$1";;
456 --help|-h) usage; exit;;
457 --keep-going|-k) KEEP_GOING=1;;
Gilles Peskine878cf602019-01-06 20:50:38 +0000458 --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;;
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100459 --list-components) list_components=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100460 --memory|-m) MEMORY=1;;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200461 --no-append-outcome) append_outcome=0;;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000462 --no-armcc) no_armcc=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100463 --no-force) FORCE=0;;
464 --no-keep-going) KEEP_GOING=0;;
465 --no-memory) MEMORY=0;;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200466 --no-quiet) QUIET=0;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100467 --openssl) shift; OPENSSL="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100468 --openssl-next) shift; OPENSSL_NEXT="$1";;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200469 --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100470 --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200471 --quiet|-q) QUIET=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100472 --random-seed) unset SEED;;
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200473 --release-test|-r) SEED=$RELEASE_SEED;;
Gilles Peskine80ddb992021-08-06 11:51:59 +0200474 --restore) restore_first=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100475 --seed|-s) shift; SEED="$1";;
476 -*)
477 echo >&2 "Unknown option: $1"
478 echo >&2 "Run $0 --help for usage."
479 exit 120
480 ;;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000481 *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100482 esac
483 shift
Gilles Peskine8f073122018-11-27 15:58:47 +0100484 done
SimonB2e23c822016-04-16 21:54:39 +0100485
Bence Szépkúti71c71eb2023-12-15 19:20:31 +0100486 # Exclude components that are not supported on this platform.
487 SUPPORTED_COMPONENTS=
488 for component in $ALL_COMPONENTS; do
489 case $(type "support_$component" 2>&1) in
490 *' function'*)
491 if ! support_$component; then continue; fi;;
492 esac
493 SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component"
494 done
495
496 if [ $list_components -eq 1 ]; then
497 printf '%s\n' $SUPPORTED_COMPONENTS
498 exit
499 fi
500
Gilles Peskinea28db922019-01-10 00:05:18 +0100501 # With no list of components, run everything.
Gilles Peskine80ddb992021-08-06 11:51:59 +0200502 if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000503 all_except=1
Andres AGdc192212016-08-31 17:33:13 +0100504 fi
505
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000506 # --no-armcc is a legacy option. The modern way is --except '*_armcc*'.
507 # Ignore it if components are listed explicitly on the command line.
Gilles Peskinea28db922019-01-10 00:05:18 +0100508 if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000509 COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*"
SimonB2e23c822016-04-16 21:54:39 +0100510 fi
SimonB2e23c822016-04-16 21:54:39 +0100511
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200512 # Error out if an explicitly requested component doesn't exist.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100513 if [ $all_except -eq 0 ]; then
514 unsupported=0
Gilles Peskine03af6782021-08-06 11:35:17 +0200515 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
516 # only does word splitting.
Gilles Peskine1d475b62021-08-03 13:43:36 +0200517 set -f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100518 for component in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine1d475b62021-08-03 13:43:36 +0200519 set +f
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200520 # If the requested name includes a wildcard character, don't
521 # check it. Accept wildcard patterns that don't match anything.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100522 case $component in
523 *[*?\[]*) continue;;
524 esac
525 case " $SUPPORTED_COMPONENTS " in
526 *" $component "*) :;;
527 *)
528 echo >&2 "Component $component was explicitly requested, but is not known or not supported."
529 unsupported=$((unsupported + 1));;
530 esac
531 done
Gilles Peskine1d475b62021-08-03 13:43:36 +0200532 set +f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100533 if [ $unsupported -ne 0 ]; then
534 exit 2
535 fi
536 fi
537
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000538 # Build the list of components to run.
Gilles Peskinea28db922019-01-10 00:05:18 +0100539 RUN_COMPONENTS=
540 for component in $SUPPORTED_COMPONENTS; do
541 if is_component_included "$component"; [ $? -eq $all_except ]; then
542 RUN_COMPONENTS="$RUN_COMPONENTS $component"
543 fi
544 done
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000545
546 unset all_except
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000547 unset no_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +0100548}
SimonB2e23c822016-04-16 21:54:39 +0100549
Gilles Peskine8f073122018-11-27 15:58:47 +0100550pre_check_git () {
551 if [ $FORCE -eq 1 ]; then
Gilles Peskine53190e62019-01-09 23:17:35 +0100552 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +0100553 git checkout-index -f -q $CONFIG_H
554 cleanup
555 else
SimonB2e23c822016-04-16 21:54:39 +0100556
Gilles Peskine8f073122018-11-27 15:58:47 +0100557 if [ -d "$OUT_OF_SOURCE_DIR" ]; then
558 echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2
559 echo "You can either delete this directory manually, or force the test by rerunning"
560 echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR"
561 exit 1
562 fi
563
Ronald Cron7a93ac52023-07-20 09:49:12 +0200564 if ! git diff --quiet "$CONFIG_H"; then
David Horstmann9a6c45b2023-07-14 12:30:00 +0100565 err_msg "Warning - the configuration file '$CONFIG_H' has been edited. "
Gilles Peskine8f073122018-11-27 15:58:47 +0100566 echo "You can either delete or preserve your work, or force the test by rerunning the"
567 echo "script as: $0 --force"
568 exit 1
569 fi
SimonB2e23c822016-04-16 21:54:39 +0100570 fi
Andrzej Kurekeb508712019-02-14 07:18:59 -0500571}
572
Gilles Peskine568f53a2021-07-12 18:16:01 +0200573pre_restore_files () {
574 # If the makefiles have been generated by a framework such as cmake,
575 # restore them from git. If the makefiles look like modifications from
576 # the ones checked into git, take care not to modify them. Whatever
577 # this function leaves behind is what the script will restore before
578 # each component.
579 case "$(head -n1 Makefile)" in
580 *[Gg]enerated*)
581 git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
582 git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
583 ;;
584 esac
585}
586
Gilles Peskinef83eb822020-03-30 20:11:39 +0200587pre_back_up () {
588 for x in $files_to_back_up; do
589 cp -p "$x" "$x$backup_suffix"
590 done
591}
592
Gilles Peskine8f073122018-11-27 15:58:47 +0100593pre_setup_keep_going () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100594 failure_count=0 # Number of failed components
595 last_failure_status=0 # Last failure status in this component
596
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100597 # See err_trap
598 previous_failure_status=0
599 previous_failed_command=
600 previous_failure_funcall_depth=0
Gilles Peskinea681c592020-03-28 21:27:40 +0100601 unset report_failed_command
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100602
Gilles Peskine7c652162017-12-11 00:01:40 +0100603 start_red=
604 end_color=
605 if [ -t 1 ]; then
Gilles Peskine9736b9d2018-01-02 21:54:17 +0100606 case "${TERM:-}" in
Gilles Peskine7c652162017-12-11 00:01:40 +0100607 *color*|cygwin|linux|rxvt*|screen|[Eex]term*)
608 start_red=$(printf '\033[31m')
609 end_color=$(printf '\033[0m')
610 ;;
611 esac
612 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100613
614 # Keep a summary of failures in a file. We'll print it out at the end.
615 failure_summary_file=$PWD/all-sh-failures-$$.log
616 : >"$failure_summary_file"
617
618 # Whether it makes sense to keep a component going after the specified
619 # command fails (test command) or not (configure or build).
Gilles Peskine03af6782021-08-06 11:35:17 +0200620 # This function normally receives the failing simple command
621 # ($BASH_COMMAND) as an argument, but if $report_failed_command is set,
622 # this is passed instead.
Gilles Peskinece266c42020-03-28 18:50:43 +0100623 # This doesn't have to be 100% accurate: all failures are recorded anyway.
Gilles Peskinec111e242021-08-02 23:29:53 +0200624 # False positives result in running things that can't be expected to
625 # work. False negatives result in things not running after something else
626 # failed even though they might have given useful feedback.
Gilles Peskinece266c42020-03-28 18:50:43 +0100627 can_keep_going_after_failure () {
628 case "$1" in
629 "msg "*) false;;
Gilles Peskinec111e242021-08-02 23:29:53 +0200630 "cd "*) false;;
Manuel Pégourié-Gonnarda7423372023-11-10 09:58:31 +0100631 "diff "*) true;;
Gilles Peskinec111e242021-08-02 23:29:53 +0200632 *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ...
633 *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ...
634 *make*check*) true;;
635 "grep "*) true;;
636 "[ "*) true;;
637 "! "*) true;;
Gilles Peskinece266c42020-03-28 18:50:43 +0100638 *) false;;
Gilles Peskine7c652162017-12-11 00:01:40 +0100639 esac
640 }
Gilles Peskinece266c42020-03-28 18:50:43 +0100641
642 # This function runs if there is any error in a component.
643 # It must either exit with a nonzero status, or set
644 # last_failure_status to a nonzero value.
645 err_trap () {
646 # Save $? (status of the failing command). This must be the very
647 # first thing, before $? is overridden.
648 last_failure_status=$?
Gilles Peskinea681c592020-03-28 21:27:40 +0100649 failed_command=${report_failed_command-$BASH_COMMAND}
Gilles Peskinece266c42020-03-28 18:50:43 +0100650
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100651 if [[ $last_failure_status -eq $previous_failure_status &&
652 "$failed_command" == "$previous_failed_command" &&
653 ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]]
654 then
655 # The same command failed twice in a row, but this time one level
656 # less deep in the function call stack. This happens when the last
657 # command of a function returns a nonzero status, and the function
658 # returns that same status. Ignore the second failure.
659 previous_failure_funcall_depth=${#FUNCNAME[@]}
660 return
661 fi
662 previous_failure_status=$last_failure_status
663 previous_failed_command=$failed_command
664 previous_failure_funcall_depth=${#FUNCNAME[@]}
665
Gilles Peskinece266c42020-03-28 18:50:43 +0100666 text="$current_section: $failed_command -> $last_failure_status"
667 echo "${start_red}^^^^$text^^^^${end_color}" >&2
668 echo "$text" >>"$failure_summary_file"
669
670 # If the command is fatal (configure or build command), stop this
671 # component. Otherwise (test command) keep the component running
672 # (run more tests from the same build).
673 if ! can_keep_going_after_failure "$failed_command"; then
674 exit $last_failure_status
675 fi
676 }
677
Gilles Peskine7c652162017-12-11 00:01:40 +0100678 final_report () {
679 if [ $failure_count -gt 0 ]; then
680 echo
681 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
Gilles Peskinece266c42020-03-28 18:50:43 +0100682 echo "${start_red}FAILED: $failure_count components${end_color}"
683 cat "$failure_summary_file"
Gilles Peskine7c652162017-12-11 00:01:40 +0100684 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
685 elif [ -z "${1-}" ]; then
686 echo "SUCCESS :)"
687 fi
688 if [ -n "${1-}" ]; then
689 echo "Killed by SIG$1."
690 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100691 rm -f "$failure_summary_file"
692 if [ $failure_count -gt 0 ]; then
693 exit 1
694 fi
Gilles Peskine7c652162017-12-11 00:01:40 +0100695 }
Gilles Peskine8f073122018-11-27 15:58:47 +0100696}
697
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200698# record_status() and if_build_succeeded() are kept temporarily for backward
699# compatibility. Don't use them in new components.
Gilles Peskinece266c42020-03-28 18:50:43 +0100700record_status () {
701 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100702}
Gilles Peskine7c652162017-12-11 00:01:40 +0100703if_build_succeeded () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100704 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100705}
706
Gilles Peskinea681c592020-03-28 21:27:40 +0100707# '! true' does not trigger the ERR trap. Arrange to trigger it, with
708# a reasonably informative error message (not just "$@").
709not () {
710 if "$@"; then
711 report_failed_command="! $*"
712 false
713 unset report_failed_command
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200714 fi
715}
716
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200717pre_prepare_outcome_file () {
718 case "$MBEDTLS_TEST_OUTCOME_FILE" in
719 [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";;
720 esac
721 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then
722 rm -f "$MBEDTLS_TEST_OUTCOME_FILE"
723 fi
724}
725
Gilles Peskine8f073122018-11-27 15:58:47 +0100726pre_print_configuration () {
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200727 if [ $QUIET -eq 1 ]; then
728 return
729 fi
730
Gilles Peskine8f073122018-11-27 15:58:47 +0100731 msg "info: $0 configuration"
732 echo "MEMORY: $MEMORY"
733 echo "FORCE: $FORCE"
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200734 echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}"
Gilles Peskine8f073122018-11-27 15:58:47 +0100735 echo "SEED: ${SEED-"UNSET"}"
Gilles Peskine636c26a2020-03-04 20:46:15 +0100736 echo
Gilles Peskine8f073122018-11-27 15:58:47 +0100737 echo "OPENSSL: $OPENSSL"
Gilles Peskine8f073122018-11-27 15:58:47 +0100738 echo "OPENSSL_NEXT: $OPENSSL_NEXT"
739 echo "GNUTLS_CLI: $GNUTLS_CLI"
740 echo "GNUTLS_SERV: $GNUTLS_SERV"
Gilles Peskine8f073122018-11-27 15:58:47 +0100741 echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR"
742 echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR"
743}
Andres AG7770ea82016-10-10 15:46:20 +0100744
Andres AGd9eba4b2016-08-26 14:42:14 +0100745# Make sure the tools we need are available.
Gilles Peskine8f073122018-11-27 15:58:47 +0100746pre_check_tools () {
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000747 # Build the list of variables to pass to output_env.sh.
748 set env
SimonB2e23c822016-04-16 21:54:39 +0100749
Gilles Peskine87964262019-01-06 22:40:00 +0000750 case " $RUN_COMPONENTS " in
751 # Require OpenSSL and GnuTLS if running any tests (as opposed to
752 # only doing builds). Not all tests run OpenSSL and GnuTLS, but this
753 # is a good enough approximation in practice.
Bence Szépkútibbb5af92023-12-15 20:58:15 +0100754 *" test_"* | *" release_test_"*)
Gilles Peskine87964262019-01-06 22:40:00 +0000755 # To avoid setting OpenSSL and GnuTLS for each call to compat.sh
756 # and ssl-opt.sh, we just export the variables they require.
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +0100757 export OPENSSL="$OPENSSL"
Gilles Peskine87964262019-01-06 22:40:00 +0000758 export GNUTLS_CLI="$GNUTLS_CLI"
759 export GNUTLS_SERV="$GNUTLS_SERV"
760 # Avoid passing --seed flag in every call to ssl-opt.sh
761 if [ -n "${SEED-}" ]; then
762 export SEED
763 fi
Gilles Peskine7be571a2023-08-27 21:39:21 +0200764 set "$@" OPENSSL="$OPENSSL"
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000765 set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV"
Gilles Peskine7be571a2023-08-27 21:39:21 +0200766 check_tools "$OPENSSL" "$OPENSSL_NEXT" \
767 "$GNUTLS_CLI" "$GNUTLS_SERV"
Gilles Peskine87964262019-01-06 22:40:00 +0000768 ;;
769 esac
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200770
Gilles Peskine87964262019-01-06 22:40:00 +0000771 case " $RUN_COMPONENTS " in
772 *_doxygen[_\ ]*) check_tools "doxygen" "dot";;
773 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100774
Gilles Peskine87964262019-01-06 22:40:00 +0000775 case " $RUN_COMPONENTS " in
Gilles Peskine6d061342020-04-30 18:19:32 +0200776 *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";;
Gilles Peskine87964262019-01-06 22:40:00 +0000777 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100778
Gilles Peskine87964262019-01-06 22:40:00 +0000779 case " $RUN_COMPONENTS " in
780 *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";;
781 esac
782
783 case " $RUN_COMPONENTS " in
784 *" test_zeroize "*) check_tools "gdb";;
785 esac
786
787 case " $RUN_COMPONENTS " in
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000788 *_armcc*)
Gilles Peskine87964262019-01-06 22:40:00 +0000789 ARMC5_CC="$ARMC5_BIN_DIR/armcc"
790 ARMC5_AR="$ARMC5_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200791 ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf"
Gilles Peskine87964262019-01-06 22:40:00 +0000792 ARMC6_CC="$ARMC6_BIN_DIR/armclang"
793 ARMC6_AR="$ARMC6_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200794 ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf"
795 check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \
796 "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000797 esac
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000798
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200799 # past this point, no call to check_tool, only printing output
800 if [ $QUIET -eq 1 ]; then
801 return
802 fi
803
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000804 msg "info: output_env.sh"
805 case $RUN_COMPONENTS in
806 *_armcc*)
807 set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;;
808 *) set "$@" RUN_ARMCC=0;;
809 esac
810 "$@" scripts/output_env.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100811}
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100812
Gilles Peskine1570b592021-04-22 01:10:12 +0200813pre_generate_files() {
Manuel Pégourié-Gonnard87db8a22021-06-18 13:30:14 +0200814 # since make doesn't have proper dependencies, remove any possibly outdate
815 # file that might be around before generating fresh ones
816 make neat
Gilles Peskine72385032021-07-08 19:07:07 +0200817 if [ $QUIET -eq 1 ]; then
Gilles Peskine75301632021-08-05 15:10:47 +0200818 make generated_files >/dev/null
Gilles Peskine72385032021-07-08 19:07:07 +0200819 else
820 make generated_files
821 fi
Gilles Peskine1570b592021-04-22 01:10:12 +0200822}
823
Tom Cosgroved4c373a2024-01-30 13:56:38 +0000824clang_version() {
825 if command -v clang > /dev/null ; then
826 clang --version|grep version|sed -E 's#.*version ([0-9]+).*#\1#'
827 else
828 echo 0 # report version 0 for "no clang"
829 fi
830}
831
Manuel Pégourié-Gonnard27e17672023-05-25 09:39:08 +0200832################################################################
833#### Helpers for components using libtestdriver1
834################################################################
Gilles Peskine192c72f2017-12-21 15:59:21 +0100835
Manuel Pégourié-Gonnardf5c5d972023-06-06 11:14:57 +0200836# How to use libtestdriver1
837# -------------------------
838#
839# 1. Define the list algorithms and key types to accelerate,
840# designated the same way as PSA_WANT_ macros but without PSA_WANT_.
841# Examples:
842# - loc_accel_list="ALG_JPAKE"
843# - loc_accel_list="ALG_FFDH KEY_TYPE_DH_KEY_PAIR KEY_TYPE_DH_PUBLIC_KEY"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200844# 2. Make configurations changes for the driver and/or main libraries.
845# 2a. Call helper_libtestdriver1_adjust_config <base>, where the argument
846# can be either "default" to start with the default config, or a name
847# supported by scripts/config.py (for example, "full"). This selects
Manuel Pégourié-Gonnard2336c8e2023-06-12 17:17:54 +0200848# the base to use, and makes common adjustments.
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200849# 2b. If desired, adjust the PSA_WANT symbols in psa/crypto_config.h.
850# These changes affect both the driver and the main libraries.
851# (Note: they need to have the same set of PSA_WANT symbols, as that
852# determines the ABI between them.)
853# 2c. Adjust MBEDTLS_ symbols in mbedtls_config.h. This only affects the
854# main libraries. Typically, you want to disable the module(s) that are
855# being accelerated. You may need to also disable modules that depend
856# on them or options that are not supported with drivers.
857# 2d. On top of psa/crypto_config.h, the driver library uses its own config
858# file: tests/include/test/drivers/config_test_driver.h. You usually
859# don't need to edit it: using loc_extra_list (see below) is preferred.
860# However, when there's no PSA symbol for what you want to enable,
861# calling scripts/config.py on this file remains the only option.
862# 3. Build the driver library, then the main libraries, test, and programs.
863# 3a. Call helper_libtestdriver1_make_drivers "$loc_accel_list". You may
864# need to enable more algorithms here, typically hash algorithms when
865# accelerating some signature algorithms (ECDSA, RSAv2). This is done
866# by passing a 2nd argument listing the extra algorithms.
867# Example:
868# loc_extra_list="ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512"
869# helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
Yanray Wang0df6d962023-10-11 13:27:25 +0800870# 3b. Call helper_libtestdriver1_make_main "$loc_accel_list". Any
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200871# additional arguments will be passed to make: this can be useful if
872# you don't want to build everything when iterating during development.
873# Example:
874# helper_libtestdriver1_make_main "$loc_accel_list" -C tests test_suite_foo
875# 4. Run the tests you want.
Manuel Pégourié-Gonnardf5c5d972023-06-06 11:14:57 +0200876
Manuel Pégourié-Gonnard27e17672023-05-25 09:39:08 +0200877# Adjust the configuration - for both libtestdriver1 and main library,
878# as they should have the same PSA_WANT macros.
879helper_libtestdriver1_adjust_config() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200880 base_config=$1
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200881 # Select the base configuration
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200882 if [ "$base_config" != "default" ]; then
883 scripts/config.py "$base_config"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +0200884 fi
885
886 # Enable PSA-based config (necessary to use drivers)
887 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
888
Manuel Pégourié-Gonnard2336c8e2023-06-12 17:17:54 +0200889 # Dynamic secure element support is a deprecated feature and needs to be disabled here.
890 # This is done to have the same form of psa_key_attributes_s for libdriver and library.
891 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Manuel Pégourié-Gonnard27e17672023-05-25 09:39:08 +0200892}
Gilles Peskine192c72f2017-12-21 15:59:21 +0100893
Valerio Settib2fd6732023-08-15 17:10:47 +0200894# When called with no parameter this function disables all builtin curves.
Valerio Setti4ca250b2023-09-04 14:01:41 +0200895# The function optionally accepts 1 parameter: a space-separated list of the
896# curves that should be kept enabled.
Valerio Settib2fd6732023-08-15 17:10:47 +0200897helper_disable_builtin_curves() {
898 allowed_list="${1:-}"
899 scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED"
900
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200901 for curve in $allowed_list; do
902 scripts/config.py set $curve
Valerio Settib2fd6732023-08-15 17:10:47 +0200903 done
904}
905
906# Helper returning the list of supported elliptic curves from CRYPTO_CONFIG_H,
907# without the "PSA_WANT_" prefix. This becomes handy for accelerating curves
908# in the following helpers.
909helper_get_psa_curve_list () {
910 loc_list=""
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200911 for item in $(sed -n 's/^#define PSA_WANT_\(ECC_[0-9A-Z_a-z]*\).*/\1/p' <"$CRYPTO_CONFIG_H"); do
912 loc_list="$loc_list $item"
Valerio Settib2fd6732023-08-15 17:10:47 +0200913 done
914
915 echo "$loc_list"
916}
917
918# Get the list of uncommented PSA_WANT_KEY_TYPE_xxx_ from CRYPTO_CONFIG_H. This
Valerio Setti0a342c92023-09-01 09:12:31 +0200919# is useful to easily get a list of key type symbols to accelerate.
Valerio Settib2fd6732023-08-15 17:10:47 +0200920# The function accepts a single argument which is the key type: ECC, DH, RSA.
Valerio Setti0a342c92023-09-01 09:12:31 +0200921helper_get_psa_key_type_list() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200922 key_type="$1"
Valerio Settib2fd6732023-08-15 17:10:47 +0200923 loc_list=""
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200924 for item in $(sed -n "s/^#define PSA_WANT_\(KEY_TYPE_${key_type}_[0-9A-Z_a-z]*\).*/\1/p" <"$CRYPTO_CONFIG_H"); do
Valerio Settib2fd6732023-08-15 17:10:47 +0200925 # Skip DERIVE for elliptic keys since there is no driver dispatch for
926 # it so it cannot be accelerated.
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +0200927 if [ "$item" != "KEY_TYPE_ECC_KEY_PAIR_DERIVE" ]; then
928 loc_list="$loc_list $item"
Valerio Settib2fd6732023-08-15 17:10:47 +0200929 fi
930 done
931
932 echo "$loc_list"
933}
934
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +0200935# Build the drivers library libtestdriver1.a (with ASan).
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +0200936#
937# Parameters:
938# 1. a space-separated list of things to accelerate;
939# 2. optional: a space-separate list of things to also support.
940# Here "things" are PSA_WANT_ symbols but with PSA_WANT_ removed.
941helper_libtestdriver1_make_drivers() {
942 loc_accel_flags=$( echo "$1 ${2-}" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
Gilles Peskine21570cf2023-12-22 11:49:50 +0100943 make CC=$ASAN_CC -C tests libtestdriver1.a CFLAGS=" $ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +0200944}
945
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +0200946# Build the main libraries, programs and tests,
947# linking to the drivers library (with ASan).
948#
949# Parameters:
950# 1. a space-separated list of things to accelerate;
951# *. remaining arguments if any are passed directly to make
952# (examples: lib, -C tests test_suite_xxx, etc.)
953# Here "things" are PSA_WANT_ symbols but with PSA_WANT_ removed.
954helper_libtestdriver1_make_main() {
955 loc_accel_list=$1
956 shift
957
958 # we need flags both with and without the LIBTESTDRIVER1_ prefix
959 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
960 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
Gilles Peskine21570cf2023-12-22 11:49:50 +0100961 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" "$@"
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +0200962}
Gilles Peskine192c72f2017-12-21 15:59:21 +0100963
964################################################################
965#### Basic checks
966################################################################
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100967
968#
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200969# Test Suites to be executed
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100970#
Manuel Pégourié-Gonnard3d404b42015-07-08 21:59:16 +0100971# The test ordering tries to optimize for the following criteria:
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200972# 1. Catch possible problems early, by running first tests that run quickly
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100973# and/or are more likely to fail than others (eg I use Clang most of the
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200974# time, so start with a GCC build).
975# 2. Minimize total running time, by avoiding useless rebuilds
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100976#
Manuel Pégourié-Gonnard259b08a2016-01-08 16:27:41 +0100977# Indicative running times are given for reference.
978
Gilles Peskine8f073122018-11-27 15:58:47 +0100979component_check_recursion () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200980 msg "Check: recursion.pl" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200981 tests/scripts/recursion.pl library/*.c
Gilles Peskine8f073122018-11-27 15:58:47 +0100982}
Janos Follathb72c6782016-07-19 14:54:17 +0100983
Gilles Peskine67debb62021-05-18 16:09:50 +0200984component_check_generated_files () {
985 msg "Check: check-generated-files, files generated with make" # 2s
986 make generated_files
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200987 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200988
989 msg "Check: check-generated-files -u, files present" # 2s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200990 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200991 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200992 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200993
994 msg "Check: check-generated-files -u, files absent" # 2s
995 command make neat
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200996 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200997 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200998 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200999
1000 # This component ends with the generated files present in the source tree.
1001 # This is necessary for subsequent components!
1002}
1003
Gilles Peskine8f073122018-11-27 15:58:47 +01001004component_check_doxy_blocks () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001005 msg "Check: doxygen markup outside doxygen blocks" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001006 tests/scripts/check-doxy-blocks.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001007}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001008
Gilles Peskine8f073122018-11-27 15:58:47 +01001009component_check_files () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001010 msg "Check: file sanity checks (permissions, encodings)" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001011 tests/scripts/check_files.py
Gilles Peskine8f073122018-11-27 15:58:47 +01001012}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001013
Gilles Peskine30e0bb42020-05-10 17:40:49 +02001014component_check_changelog () {
1015 msg "Check: changelog entries" # < 1s
1016 rm -f ChangeLog.new
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001017 scripts/assemble_changelog.py -o ChangeLog.new
Gilles Peskine30e0bb42020-05-10 17:40:49 +02001018 if [ -e ChangeLog.new ]; then
1019 # Show the diff for information. It isn't an error if the diff is
1020 # non-empty.
1021 diff -u ChangeLog ChangeLog.new || true
1022 rm ChangeLog.new
1023 fi
1024}
1025
Gilles Peskine8f073122018-11-27 15:58:47 +01001026component_check_names () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001027 msg "Check: declared and exported names (builds the library)" # < 3s
Yuto Takanoc3a6f632021-09-24 18:02:56 +01001028 tests/scripts/check_names.py -v
Gilles Peskine8f073122018-11-27 15:58:47 +01001029}
Darryl Greena07039c2018-03-13 16:48:16 +00001030
Gilles Peskine895868b2019-09-19 21:30:05 +02001031component_check_test_cases () {
1032 msg "Check: test case descriptions" # < 1s
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +02001033 if [ $QUIET -eq 1 ]; then
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02001034 opt='--quiet'
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +02001035 else
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02001036 opt=''
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +02001037 fi
Gilles Peskine031114d2022-12-15 14:46:31 +01001038 tests/scripts/check_test_cases.py -q $opt
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02001039 unset opt
Gilles Peskine895868b2019-09-19 21:30:05 +02001040}
1041
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001042component_check_test_dependencies () {
1043 msg "Check: test case dependencies: legacy vs PSA" # < 1s
Manuel Pégourié-Gonnard9f164f02023-11-10 10:16:06 +01001044 # The purpose of this component is to catch unjustified dependencies on
1045 # legacy feature macros (MBEDTLS_xxx) in PSA tests. Generally speaking,
1046 # PSA test should use PSA feature macros (PSA_WANT_xxx, more rarely
1047 # MBEDTLS_PSA_xxx).
1048 #
1049 # Most of the time, use of legacy MBEDTLS_xxx macros are mistakes, which
1050 # this component is meant to catch. However a few of them are justified,
1051 # mostly by the absence of a PSA equivalent, so this component includes a
1052 # list of expected exceptions.
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001053
1054 found="check-test-deps-found-$$"
1055 expected="check-test-deps-expected-$$"
1056
1057 # Find legacy dependencies in PSA tests
Manuel Pégourié-Gonnard5c6f7872023-11-10 10:04:22 +01001058 grep 'depends_on' \
1059 tests/suites/test_suite_psa*.data tests/suites/test_suite_psa*.function |
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001060 grep -Eo '!?MBEDTLS_[^: ]*' |
1061 grep -v MBEDTLS_PSA_ |
Yanray Wang18040ed2023-11-23 21:29:56 +08001062 sort -u > $found
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001063
Yanray Wang18040ed2023-11-23 21:29:56 +08001064 # Expected ones with justification - keep in sorted order by ASCII table!
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001065 rm -f $expected
1066 # No PSA equivalent - WANT_KEY_TYPE_AES means all sizes
1067 echo "!MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH" >> $expected
Yanray Wang18040ed2023-11-23 21:29:56 +08001068 # No PSA equivalent - used to skip decryption tests in PSA-ECB, CBC/XTS/NIST_KW/DES
1069 echo "!MBEDTLS_BLOCK_CIPHER_NO_DECRYPT" >> $expected
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001070 # This is used by import_rsa_made_up() in test_suite_psa_crypto in order
1071 # to build a fake RSA key of the wanted size based on
1072 # PSA_VENDOR_RSA_MAX_KEY_BITS. The legacy module is only used by
1073 # the test code and that's probably the most convenient way of achieving
1074 # the test's goal.
1075 echo "MBEDTLS_ASN1_WRITE_C" >> $expected
1076 # No PSA equivalent - we should probably have one in the future.
1077 echo "MBEDTLS_ECP_RESTARTABLE" >> $expected
1078 # No PSA equivalent - needed by some init tests
1079 echo "MBEDTLS_ENTROPY_NV_SEED" >> $expected
1080 # Used by two tests that are about an extension to the PSA standard;
1081 # as such, no PSA equivalent.
1082 echo "MBEDTLS_PEM_PARSE_C" >> $expected
1083
1084 # Compare reality with expectation.
1085 # We want an exact match, to ensure the above list remains up-to-date.
Manuel Pégourié-Gonnard9f164f02023-11-10 10:16:06 +01001086 #
1087 # The output should be empty. When it's not:
1088 # - Each '+' line is a macro that was found but not expected. You want to
1089 # find where that macro occurs, and either replace it with PSA macros, or
1090 # add it to the exceptions list above with a justification.
1091 # - Each '-' line is a macro that was expected but not found; it means the
1092 # exceptions list above should be updated by removing that macro.
Manuel Pégourié-Gonnard3e1d39b2023-11-08 12:54:02 +01001093 diff -U0 $expected $found
1094
1095 rm $found $expected
1096}
1097
Gilles Peskine8f073122018-11-27 15:58:47 +01001098component_check_doxygen_warnings () {
Gilles Peskine600bb692019-09-19 21:29:11 +02001099 msg "Check: doxygen warnings (builds the documentation)" # ~ 3s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001100 tests/scripts/doxygen.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001101}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001102
Gilles Peskine192c72f2017-12-21 15:59:21 +01001103
Gilles Peskine636c26a2020-03-04 20:46:15 +01001104
Gilles Peskine192c72f2017-12-21 15:59:21 +01001105################################################################
1106#### Build and test many configurations and targets
1107################################################################
1108
Gilles Peskine7832c9f2019-04-08 17:00:15 +02001109component_test_default_out_of_box () {
1110 msg "build: make, default config (out-of-box)" # ~1min
1111 make
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02001112 # Disable fancy stuff
1113 unset MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine7832c9f2019-04-08 17:00:15 +02001114
1115 msg "test: main suites make, default config (out-of-box)" # ~10s
1116 make test
1117
1118 msg "selftest: make, default config (out-of-box)" # ~10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001119 programs/test/selftest
Gilles Peskine82b27272019-06-14 18:27:03 +02001120
1121 msg "program demos: make, default config (out-of-box)" # ~10s
1122 tests/scripts/run_demos.py
Gilles Peskine7832c9f2019-04-08 17:00:15 +02001123}
1124
Gilles Peskine8f073122018-11-27 15:58:47 +01001125component_test_default_cmake_gcc_asan () {
1126 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Gilles Peskine8f073122018-11-27 15:58:47 +01001127 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1128 make
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001129
Gilles Peskine8f073122018-11-27 15:58:47 +01001130 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
1131 make test
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001132
Gilles Peskine82b27272019-06-14 18:27:03 +02001133 msg "program demos (ASan build)" # ~10s
1134 tests/scripts/run_demos.py
1135
Gilles Peskine97bea012020-04-23 23:37:45 +02001136 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001137 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +02001138
Gilles Peskine6848d172023-11-02 19:58:03 +01001139 msg "test: metatests (GCC, ASan build)"
1140 tests/scripts/run-metatests.sh any asan
1141
Gilles Peskine8f073122018-11-27 15:58:47 +01001142 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001143 tests/ssl-opt.sh
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001144
Gilles Peskine8f073122018-11-27 15:58:47 +01001145 msg "test: compat.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001146 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001147
1148 msg "test: context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001149 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001150}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001151
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001152component_test_default_cmake_gcc_asan_new_bignum () {
1153 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Janos Follath2f045822023-07-31 10:57:16 +01001154 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001155 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Janos Follath82823b22023-07-27 12:25:05 +01001156 make
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001157
1158 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
1159 make test
1160
1161 msg "test: selftest (ASan build)" # ~ 10s
1162 programs/test/selftest
1163
1164 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
1165 tests/ssl-opt.sh
1166
1167 msg "test: compat.sh (ASan build)" # ~ 6 min
1168 tests/compat.sh
1169
1170 msg "test: context-info.sh (ASan build)" # ~ 15 sec
1171 tests/context-info.sh
1172}
1173
Hanno Becker01635512019-02-26 14:27:09 +00001174component_test_full_cmake_gcc_asan () {
1175 msg "build: full config, cmake, gcc, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001176 scripts/config.py full
Hanno Becker01635512019-02-26 14:27:09 +00001177 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1178 make
1179
1180 msg "test: main suites (inc. selftests) (full config, ASan build)"
1181 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01001182
Gilles Peskine97bea012020-04-23 23:37:45 +02001183 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001184 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +02001185
Gilles Peskine636c26a2020-03-04 20:46:15 +01001186 msg "test: ssl-opt.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001187 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001188
1189 msg "test: compat.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001190 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001191
1192 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001193 tests/context-info.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001194}
1195
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001196
1197component_test_full_cmake_gcc_asan_new_bignum () {
1198 msg "build: full config, cmake, gcc, ASan"
1199 scripts/config.py full
Janos Follath2f045822023-07-31 10:57:16 +01001200 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001201 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Janos Follath82823b22023-07-27 12:25:05 +01001202 make
Gabor Mezei9b6b5a02023-06-06 17:22:25 +02001203
1204 msg "test: main suites (inc. selftests) (full config, ASan build)"
1205 make test
1206
1207 msg "test: selftest (ASan build)" # ~ 10s
1208 programs/test/selftest
1209
1210 msg "test: ssl-opt.sh (full config, ASan build)"
1211 tests/ssl-opt.sh
1212
1213 msg "test: compat.sh (full config, ASan build)"
1214 tests/compat.sh
1215
1216 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
1217 tests/context-info.sh
Gabor Mezei6db60472023-07-05 16:38:42 +02001218}
1219
Ronald Cronc3623db2020-10-29 10:51:32 +01001220component_test_psa_crypto_key_id_encodes_owner () {
Andrzej Kurek03e01462022-01-03 12:53:24 +01001221 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
Ronald Cronc3623db2020-10-29 10:51:32 +01001222 scripts/config.py full
Ronald Cronc3623db2020-10-29 10:51:32 +01001223 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1224 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1225 make
1226
1227 msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
1228 make test
1229}
1230
Gilles Peskinea3548672021-06-17 11:37:52 +02001231# check_renamed_symbols HEADER LIB
1232# Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol
1233# name is LIB.
1234check_renamed_symbols () {
1235 ! nm "$2" | sed 's/.* //' |
1236 grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")"
1237}
1238
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001239component_build_psa_crypto_spm () {
Andrzej Kurek03e01462022-01-03 12:53:24 +01001240 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc"
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001241 scripts/config.py full
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001242 scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
1243 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1244 scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM
1245 # We can only compile, not link, since our test and sample programs
1246 # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM
1247 # is active.
1248 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib
Gilles Peskinea3548672021-06-17 11:37:52 +02001249
1250 # Check that if a symbol is renamed by crypto_spe.h, the non-renamed
1251 # version is not present.
1252 echo "Checking for renamed symbols in the library"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001253 check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a
Gilles Peskined1dcfd52021-06-15 18:37:38 +02001254}
1255
Ronald Cron336678b2021-01-28 17:54:24 +01001256component_test_psa_crypto_client () {
1257 msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
1258 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1259 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
1260 scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT
Raef Colesb4568c52022-09-28 17:11:42 +01001261 scripts/config.py unset MBEDTLS_LMS_C
1262 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Ronald Cron336678b2021-01-28 17:54:24 +01001263 make
1264
1265 msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
1266 make test
1267}
1268
Jaeden Amero424fa932021-05-14 08:34:32 +01001269component_test_psa_crypto_rsa_no_genprime() {
1270 msg "build: default config minus MBEDTLS_GENPRIME"
1271 scripts/config.py unset MBEDTLS_GENPRIME
1272 make
1273
1274 msg "test: default config minus MBEDTLS_GENPRIME"
1275 make test
1276}
1277
Gilles Peskine782f4112018-11-27 16:11:09 +01001278component_test_ref_configs () {
1279 msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001280 # test-ref-configs works by overwriting mbedtls_config.h; this makes cmake
1281 # want to re-generate generated files that depend on it, quite correctly.
1282 # However this doesn't work as the generation script expects a specific
1283 # format for mbedtls_config.h, which the other files don't follow. Also,
1284 # cmake can't know this, but re-generation is actually not necessary as
David Horstmannd64f4b22021-10-20 12:29:47 +01001285 # the generated files only depend on the list of available options, not
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001286 # whether they're on or off. So, disable cmake's (over-sensitive here)
1287 # dependency resolution for generated files and just rely on them being
David Horstmanna8d14062021-10-20 17:14:23 +01001288 # present (thanks to pre_generate_files) by turning GEN_FILES off.
Dave Rodgman17127e92023-12-14 16:42:48 +00001289 CC=$ASAN_CC cmake -D GEN_FILES=Off -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001290 tests/scripts/test-ref-configs.pl
Gilles Peskine782f4112018-11-27 16:11:09 +01001291}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001292
Gilles Peskine8f073122018-11-27 15:58:47 +01001293component_test_no_renegotiation () {
1294 msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001295 scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION
Dave Rodgman17127e92023-12-14 16:42:48 +00001296 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001297 make
Simon Butcher3ea7f522016-03-07 23:22:10 +00001298
Gilles Peskine8f073122018-11-27 15:58:47 +01001299 msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s
1300 make test
Hanno Becker134c2ab2017-10-12 15:29:50 +01001301
Gilles Peskine8f073122018-11-27 15:58:47 +01001302 msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001303 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001304}
Hanno Becker134c2ab2017-10-12 15:29:50 +01001305
Gilles Peskine636c26a2020-03-04 20:46:15 +01001306component_test_no_pem_no_fs () {
1307 msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)"
1308 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1309 scripts/config.py unset MBEDTLS_FS_IO
1310 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem
1311 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS
Dave Rodgman17127e92023-12-14 16:42:48 +00001312 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine636c26a2020-03-04 20:46:15 +01001313 make
1314
1315 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s
1316 make test
1317
1318 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001319 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001320}
1321
Gilles Peskine8f073122018-11-27 15:58:47 +01001322component_test_rsa_no_crt () {
1323 msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001324 scripts/config.py set MBEDTLS_RSA_NO_CRT
Dave Rodgman17127e92023-12-14 16:42:48 +00001325 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001326 make
Manuel Pégourié-Gonnard246978d2014-11-20 13:29:53 +01001327
Gilles Peskine8f073122018-11-27 15:58:47 +01001328 msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s
1329 make test
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001330
Gilles Peskine8f073122018-11-27 15:58:47 +01001331 msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001332 tests/ssl-opt.sh -f RSA
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001333
Gilles Peskine8f073122018-11-27 15:58:47 +01001334 msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001335 tests/compat.sh -t RSA
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001336
1337 msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001338 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001339}
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001340
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001341component_test_no_ctr_drbg_classic () {
1342 msg "build: Full minus CTR_DRBG, classic crypto in TLS"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001343 scripts/config.py full
1344 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001345 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001346 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001347
Dave Rodgman17127e92023-12-14 16:42:48 +00001348 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001349 make
1350
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001351 msg "test: Full minus CTR_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001352 make test
1353
Gilles Peskineba749042021-01-13 20:02:03 +01001354 # In this configuration, the TLS test programs use HMAC_DRBG.
1355 # The SSL tests are slow, so run a small subset, just enough to get
1356 # confidence that the SSL code copes with HMAC_DRBG.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001357 msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001358 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskineba749042021-01-13 20:02:03 +01001359
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001360 msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001361 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001362}
1363
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001364component_test_no_ctr_drbg_use_psa () {
1365 msg "build: Full minus CTR_DRBG, PSA crypto in TLS"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001366 scripts/config.py full
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001367 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1368 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001369
Dave Rodgman17127e92023-12-14 16:42:48 +00001370 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001371 make
1372
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001373 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites"
1374 make test
1375
1376 # In this configuration, the TLS test programs use HMAC_DRBG.
1377 # The SSL tests are slow, so run a small subset, just enough to get
1378 # confidence that the SSL code copes with HMAC_DRBG.
1379 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001380 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001381
1382 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001383 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001384}
1385
1386component_test_no_hmac_drbg_classic () {
1387 msg "build: Full minus HMAC_DRBG, classic crypto in TLS"
1388 scripts/config.py full
1389 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1390 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1391 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001392 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001393
Dave Rodgman17127e92023-12-14 16:42:48 +00001394 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001395 make
1396
1397 msg "test: Full minus HMAC_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001398 make test
1399
Gilles Peskinea2224342020-11-19 22:14:34 +01001400 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1401 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1402 # instead.
1403 # Test SSL with non-deterministic ECDSA. Only test features that
1404 # might be affected by how ECDSA signature is performed.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001405 msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001406 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskinea2224342020-11-19 22:14:34 +01001407
1408 # To save time, only test one protocol version, since this part of
1409 # the protocol is identical in (D)TLS up to 1.2.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001410 msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001411 tests/compat.sh -m tls12 -t 'ECDSA'
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001412}
1413
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001414component_test_no_hmac_drbg_use_psa () {
1415 msg "build: Full minus HMAC_DRBG, PSA crypto in TLS"
1416 scripts/config.py full
1417 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1418 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1419 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1420
Dave Rodgman17127e92023-12-14 16:42:48 +00001421 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001422 make
1423
1424 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites"
1425 make test
1426
1427 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1428 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1429 # instead.
1430 # Test SSL with non-deterministic ECDSA. Only test features that
1431 # might be affected by how ECDSA signature is performed.
1432 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001433 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001434
1435 # To save time, only test one protocol version, since this part of
1436 # the protocol is identical in (D)TLS up to 1.2.
1437 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001438 tests/compat.sh -m tls12 -t 'ECDSA'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001439}
1440
1441component_test_psa_external_rng_no_drbg_classic () {
1442 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS"
1443 scripts/config.py full
1444 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001445 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001446 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001447 scripts/config.py unset MBEDTLS_ENTROPY_C
1448 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1449 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001450 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1451 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1452 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskine8eb29432021-02-03 20:07:11 +01001453 # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG,
1454 # the SSL test programs don't have an RNG and can't work. Explicitly
1455 # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG.
Gilles Peskine21570cf2023-12-22 11:49:50 +01001456 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001457
1458 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites"
1459 make test
1460
Gilles Peskine8eb29432021-02-03 20:07:11 +01001461 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001462 tests/ssl-opt.sh -f 'Default'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001463}
1464
1465component_test_psa_external_rng_no_drbg_use_psa () {
1466 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001467 scripts/config.py full
1468 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001469 scripts/config.py unset MBEDTLS_ENTROPY_C
1470 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1471 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinec109b372020-11-23 17:39:04 +01001472 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1473 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1474 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskine21570cf2023-12-22 11:49:50 +01001475 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001476
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001477 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites"
Gilles Peskinec109b372020-11-23 17:39:04 +01001478 make test
1479
Gilles Peskine8eb29432021-02-03 20:07:11 +01001480 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001481 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001482}
1483
Gilles Peskine4bdb2542023-04-28 19:25:25 +02001484component_test_psa_external_rng_use_psa_crypto () {
1485 msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1486 scripts/config.py full
1487 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1488 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1489 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine21570cf2023-12-22 11:49:50 +01001490 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine4bdb2542023-04-28 19:25:25 +02001491
1492 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1493 make test
1494
1495 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1496 tests/ssl-opt.sh -f 'Default\|opaque'
1497}
1498
Gilles Peskine801c4332023-04-28 21:04:28 +02001499component_test_psa_inject_entropy () {
1500 msg "build: full + MBEDTLS_PSA_INJECT_ENTROPY"
1501 scripts/config.py full
1502 scripts/config.py set MBEDTLS_PSA_INJECT_ENTROPY
1503 scripts/config.py set MBEDTLS_ENTROPY_NV_SEED
1504 scripts/config.py set MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
1505 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
1506 scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_READ
1507 scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_WRITE
Gilles Peskine21570cf2023-12-22 11:49:50 +01001508 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine801c4332023-04-28 21:04:28 +02001509
1510 msg "test: full + MBEDTLS_PSA_INJECT_ENTROPY"
1511 make test
1512}
1513
Andrzej Kurek06969fc2023-04-12 10:34:50 -04001514component_test_sw_inet_pton () {
1515 msg "build: default plus MBEDTLS_TEST_SW_INET_PTON"
1516
1517 # MBEDTLS_TEST_HOOKS required for x509_crt_parse_cn_inet_pton
1518 scripts/config.py set MBEDTLS_TEST_HOOKS
1519 make CFLAGS="-DMBEDTLS_TEST_SW_INET_PTON"
1520
1521 msg "test: default plus MBEDTLS_TEST_SW_INET_PTON"
1522 make test
1523}
1524
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001525component_test_crypto_full_md_light_only () {
1526 msg "build: crypto_full with only the light subset of MD"
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001527 scripts/config.py crypto_full
Gilles Peskine884b4622023-07-20 20:11:51 +02001528 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001529 # Disable MD
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001530 scripts/config.py unset MBEDTLS_MD_C
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01001531 # Disable direct dependencies of MD_C
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001532 scripts/config.py unset MBEDTLS_HKDF_C
1533 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
Nick Child89e82e12022-11-09 10:36:10 -06001534 scripts/config.py unset MBEDTLS_PKCS7_C
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01001535 # Disable indirect dependencies of MD_C
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001536 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # needs HMAC_DRBG
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01001537 # Disable things that would auto-enable MD_C
1538 scripts/config.py unset MBEDTLS_PKCS5_C
1539
Manuel Pégourié-Gonnard1b5ffc62023-03-14 10:11:20 +01001540 # Note: MD-light is auto-enabled in build_info.h by modules that need it,
1541 # which we haven't disabled, so no need to explicitly enable it.
Gilles Peskine21570cf2023-12-22 11:49:50 +01001542 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001543
Manuel Pégourié-Gonnard0d415212023-02-23 13:02:13 +01001544 # Make sure we don't have the HMAC functions, but the hashing functions
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001545 not grep mbedtls_md_hmac library/md.o
Manuel Pégourié-Gonnard0d415212023-02-23 13:02:13 +01001546 grep mbedtls_md library/md.o
Manuel Pégourié-Gonnardb9b630d2023-02-16 19:07:31 +01001547
1548 msg "test: crypto_full with only the light subset of MD"
Gilles Peskine21570cf2023-12-22 11:49:50 +01001549 make test
Przemek Stekielfe2367a2022-04-28 15:44:18 +02001550}
1551
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001552component_test_full_no_cipher_no_psa_crypto () {
Valerio Settidf17a102023-10-23 14:14:19 +02001553 msg "build: full no CIPHER no PSA_CRYPTO_C"
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001554 scripts/config.py full
1555 scripts/config.py unset MBEDTLS_CIPHER_C
Gilles Peskine9b8dead2023-08-09 19:48:42 +02001556 # Don't pull in cipher via PSA mechanisms
1557 # (currently ignored anyway because we completely disable PSA)
1558 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Valerio Setti4529d652023-10-24 11:51:58 +02001559 # Disable features that depend on CIPHER_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001560 scripts/config.py unset MBEDTLS_CMAC_C
1561 scripts/config.py unset MBEDTLS_NIST_KW_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001562 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1563 scripts/config.py unset MBEDTLS_SSL_TLS_C
1564 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Valerio Setti4529d652023-10-24 11:51:58 +02001565 # Disable features that depend on PSA_CRYPTO_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001566 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
1567 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001568 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Raef Colesa7e03ad2022-09-28 09:32:48 +01001569 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01001570 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001571
Valerio Settidf17a102023-10-23 14:14:19 +02001572 msg "test: full no CIPHER no PSA_CRYPTO_C"
Gilles Peskine21570cf2023-12-22 11:49:50 +01001573 make test
Przemek Stekiel10f3a602022-05-02 10:55:33 +02001574}
1575
Valerio Setti7e710e82023-08-25 09:14:15 +02001576# This is a common configurator and test function that is used in:
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001577# - component_test_full_no_cipher_with_psa_crypto
1578# - component_test_full_no_cipher_with_psa_crypto_config
Valerio Setti7e710e82023-08-25 09:14:15 +02001579# It accepts 2 input parameters:
1580# - $1: boolean value which basically reflects status of MBEDTLS_PSA_CRYPTO_CONFIG
1581# - $2: a text string which describes the test component
Valerio Setti5b4039f2023-10-24 13:41:44 +02001582common_test_full_no_cipher_with_psa_crypto () {
Valerio Setti7e710e82023-08-25 09:14:15 +02001583 USE_CRYPTO_CONFIG="$1"
1584 COMPONENT_DESCRIPTION="$2"
1585
1586 msg "build: $COMPONENT_DESCRIPTION"
1587
1588 scripts/config.py full
1589 scripts/config.py unset MBEDTLS_CIPHER_C
1590
1591 if [ "$USE_CRYPTO_CONFIG" -eq 1 ]; then
Valerio Setti862021a2023-10-24 13:52:06 +02001592 # The built-in implementation of the following algs/key-types depends
1593 # on CIPHER_C so we disable them.
1594 # This does not hold for KEY_TYPE_CHACHA20 and ALG_CHACHA20_POLY1305
1595 # so we keep them enabled.
Valerio Setti7e710e82023-08-25 09:14:15 +02001596 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CCM_STAR_NO_TAG
Valerio Setti7e710e82023-08-25 09:14:15 +02001597 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CMAC
1598 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_NO_PADDING
1599 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_PKCS7
1600 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CFB
1601 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CTR
1602 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_ECB_NO_PADDING
1603 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_OFB
1604 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_STREAM_CIPHER
Valerio Setti7e710e82023-08-25 09:14:15 +02001605 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_KEY_TYPE_DES
Valerio Setti7e710e82023-08-25 09:14:15 +02001606 else
1607 # Don't pull in cipher via PSA mechanisms
1608 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Valerio Setti287f6d12023-10-24 14:12:59 +02001609 # Disable cipher modes/keys that make PSA depend on CIPHER_C.
1610 # Keep CHACHA20 and CHACHAPOLY enabled since they do not depend on CIPHER_C.
1611 scripts/config.py unset-all MBEDTLS_CIPHER_MODE
Valerio Setti7e710e82023-08-25 09:14:15 +02001612 fi
Valerio Settic84d9402023-10-23 14:58:25 +02001613 # The following modules directly depends on CIPHER_C
Valerio Setti7e710e82023-08-25 09:14:15 +02001614 scripts/config.py unset MBEDTLS_CMAC_C
Valerio Setti7e710e82023-08-25 09:14:15 +02001615 scripts/config.py unset MBEDTLS_NIST_KW_C
Valerio Settifb0b0ff2023-10-23 14:58:55 +02001616
Gilles Peskine21570cf2023-12-22 11:49:50 +01001617 make
Gilles Peskine636c26a2020-03-04 20:46:15 +01001618
Valerio Setti7e710e82023-08-25 09:14:15 +02001619 # Ensure that CIPHER_C was not re-enabled
1620 not grep mbedtls_cipher_init library/cipher.o
1621
1622 msg "test: $COMPONENT_DESCRIPTION"
1623 make test
1624}
1625
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001626component_test_full_no_cipher_with_psa_crypto() {
Valerio Setti5b4039f2023-10-24 13:41:44 +02001627 common_test_full_no_cipher_with_psa_crypto 0 "full no CIPHER no CRYPTO_CONFIG"
Valerio Setti7e710e82023-08-25 09:14:15 +02001628}
1629
Manuel Pégourié-Gonnard88bae8b2024-01-08 10:56:35 +01001630component_test_full_no_cipher_with_psa_crypto_config() {
Valerio Setti5b4039f2023-10-24 13:41:44 +02001631 common_test_full_no_cipher_with_psa_crypto 1 "full no CIPHER"
Valerio Setti7e710e82023-08-25 09:14:15 +02001632}
1633
Valerio Settibdfecb62023-11-07 15:37:20 +01001634component_test_full_no_ccm() {
1635 msg "build: full no PSA_WANT_ALG_CCM"
1636
1637 # Full config enables:
1638 # - USE_PSA_CRYPTO so that TLS code dispatches cipher/AEAD to PSA
1639 # - CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated
1640 scripts/config.py full
1641
1642 # Disable PSA_WANT_ALG_CCM so that CCM is not supported in PSA. CCM_C is still
1643 # enabled, but not used from TLS since USE_PSA is set.
1644 # This is helpful to ensure that TLS tests below have proper dependencies.
1645 #
1646 # Note: also PSA_WANT_ALG_CCM_STAR_NO_TAG is enabled, but it does not cause
1647 # PSA_WANT_ALG_CCM to be re-enabled.
1648 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM
1649
Gilles Peskine21570cf2023-12-22 11:49:50 +01001650 make
Valerio Settibdfecb62023-11-07 15:37:20 +01001651
1652 msg "test: full no PSA_WANT_ALG_CCM"
Valerio Settiff2b06a2023-11-08 12:35:36 +01001653 make test
Valerio Settibdfecb62023-11-07 15:37:20 +01001654}
1655
1656component_test_full_no_ccm_star_no_tag() {
1657 msg "build: full no PSA_WANT_ALG_CCM_STAR_NO_TAG"
1658
1659 # Full config enables CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated
1660 scripts/config.py full
1661
1662 # Disable CCM_STAR_NO_TAG, which is the target of this test, as well as all
1663 # other components that enable MBEDTLS_PSA_BUILTIN_CIPHER internal symbol.
1664 # This basically disables all unauthenticated ciphers on the PSA side, while
1665 # keeping AEADs enabled.
1666 #
1667 # Note: PSA_WANT_ALG_CCM is enabled, but it does not cause
1668 # PSA_WANT_ALG_CCM_STAR_NO_TAG to be re-enabled.
1669 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
1670 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_STREAM_CIPHER
1671 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR
1672 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB
1673 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB
1674 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING
1675 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
1676 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
1677
Gilles Peskine21570cf2023-12-22 11:49:50 +01001678 make
Valerio Settibdfecb62023-11-07 15:37:20 +01001679
1680 # Ensure MBEDTLS_PSA_BUILTIN_CIPHER was not enabled
Valerio Settibdfecb62023-11-07 15:37:20 +01001681 not grep mbedtls_psa_cipher library/psa_crypto_cipher.o
Valerio Settiff2b06a2023-11-08 12:35:36 +01001682
1683 msg "test: full no PSA_WANT_ALG_CCM_STAR_NO_TAG"
Gilles Peskine636c26a2020-03-04 20:46:15 +01001684 make test
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001685}
Gilles Peskine636c26a2020-03-04 20:46:15 +01001686
Valerio Settie1655b82023-01-03 15:35:25 +01001687component_test_full_no_bignum () {
1688 msg "build: full minus bignum"
1689 scripts/config.py full
1690 scripts/config.py unset MBEDTLS_BIGNUM_C
1691 # Direct dependencies of bignum
1692 scripts/config.py unset MBEDTLS_ECP_C
1693 scripts/config.py unset MBEDTLS_RSA_C
1694 scripts/config.py unset MBEDTLS_DHM_C
1695 # Direct dependencies of ECP
1696 scripts/config.py unset MBEDTLS_ECDH_C
1697 scripts/config.py unset MBEDTLS_ECDSA_C
1698 scripts/config.py unset MBEDTLS_ECJPAKE_C
1699 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Valerio Setti22d0a792023-06-14 17:23:19 +02001700 # Disable what auto-enables ECP_LIGHT
1701 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
1702 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
Valerio Settie1655b82023-01-03 15:35:25 +01001703 # Indirect dependencies of ECP
1704 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1705 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1706 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1707 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1708 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1709 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
1710 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1711 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
1712 # Direct dependencies of DHM
1713 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
1714 # Direct dependencies of RSA
1715 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
1716 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
1717 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1718 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
1719 # PK and its dependencies
1720 scripts/config.py unset MBEDTLS_PK_C
1721 scripts/config.py unset MBEDTLS_PK_PARSE_C
1722 scripts/config.py unset MBEDTLS_PK_WRITE_C
1723 scripts/config.py unset MBEDTLS_X509_USE_C
1724 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
1725 scripts/config.py unset MBEDTLS_X509_CRL_PARSE_C
1726 scripts/config.py unset MBEDTLS_X509_CSR_PARSE_C
1727 scripts/config.py unset MBEDTLS_X509_CREATE_C
1728 scripts/config.py unset MBEDTLS_X509_CRT_WRITE_C
1729 scripts/config.py unset MBEDTLS_X509_CSR_WRITE_C
1730 scripts/config.py unset MBEDTLS_PKCS7_C
1731 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
1732 scripts/config.py unset MBEDTLS_SSL_ASYNC_PRIVATE
1733 scripts/config.py unset MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1734
Gilles Peskine21570cf2023-12-22 11:49:50 +01001735 make
Valerio Settie1655b82023-01-03 15:35:25 +01001736
1737 msg "test: full minus bignum"
1738 make test
1739}
1740
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001741component_test_tls1_2_default_stream_cipher_only () {
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001742 msg "build: default with only stream cipher"
1743
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001744 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001745 scripts/config.py unset MBEDTLS_GCM_C
1746 scripts/config.py unset MBEDTLS_CCM_C
1747 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001748 # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001749 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001750 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001751 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001752 # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
1753 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001754 # Modules that depend on AEAD
Przemek Stekield582a012022-09-28 07:59:01 +02001755 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001756 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001757
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001758 make
1759
1760 msg "test: default with only stream cipher"
1761 make test
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001762
1763 # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite.
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001764}
1765
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001766component_test_tls1_2_default_stream_cipher_only_use_psa () {
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001767 msg "build: default with only stream cipher use psa"
Przemek Stekiel9550c052022-09-28 09:51:55 +02001768
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001769 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001770 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel9550c052022-09-28 09:51:55 +02001771 scripts/config.py unset MBEDTLS_GCM_C
1772 scripts/config.py unset MBEDTLS_CCM_C
1773 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001774 # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
Przemek Stekiel9550c052022-09-28 09:51:55 +02001775 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001776 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekiel9550c052022-09-28 09:51:55 +02001777 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001778 # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
1779 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001780 # Modules that depend on AEAD
Przemek Stekiel9550c052022-09-28 09:51:55 +02001781 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001782 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel9550c052022-09-28 09:51:55 +02001783
Przemek Stekiel9550c052022-09-28 09:51:55 +02001784 make
1785
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001786 msg "test: default with only stream cipher use psa"
Przemek Stekiel9550c052022-09-28 09:51:55 +02001787 make test
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001788
1789 # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite.
Przemek Stekiel9550c052022-09-28 09:51:55 +02001790}
Przemek Stekiel11c362a2022-09-27 13:34:31 +02001791
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001792component_test_tls1_2_default_cbc_legacy_cipher_only () {
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001793 msg "build: default with only CBC-legacy cipher"
1794
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001795 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001796 scripts/config.py unset MBEDTLS_GCM_C
1797 scripts/config.py unset MBEDTLS_CCM_C
1798 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001799 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1800 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1801 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001802 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001803 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001804 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001805 # Modules that depend on AEAD
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001806 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001807 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001808
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001809 make
1810
1811 msg "test: default with only CBC-legacy cipher"
1812 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001813
1814 msg "test: default with only CBC-legacy cipher - ssl-opt.sh (subset)"
1815 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001816}
1817
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001818component_test_tls1_2_deafult_cbc_legacy_cipher_only_use_psa () {
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001819 msg "build: default with only CBC-legacy cipher use psa"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001820
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001821 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001822 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001823 scripts/config.py unset MBEDTLS_GCM_C
1824 scripts/config.py unset MBEDTLS_CCM_C
1825 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001826 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1827 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1828 # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001829 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001830 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001831 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001832 # Modules that depend on AEAD
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001833 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001834 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001835
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001836 make
1837
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001838 msg "test: default with only CBC-legacy cipher use psa"
1839 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001840
1841 msg "test: default with only CBC-legacy cipher use psa - ssl-opt.sh (subset)"
1842 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001843}
1844
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001845component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only () {
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001846 msg "build: default with only CBC-legacy and CBC-EtM ciphers"
1847
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001848 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001849 scripts/config.py unset MBEDTLS_GCM_C
1850 scripts/config.py unset MBEDTLS_CCM_C
1851 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001852 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1853 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1854 # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
1855 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1856 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001857 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001858 # Modules that depend on AEAD
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001859 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001860 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001861
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001862 make
1863
1864 msg "test: default with only CBC-legacy and CBC-EtM ciphers"
1865 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001866
1867 msg "test: default with only CBC-legacy and CBC-EtM ciphers - ssl-opt.sh (subset)"
1868 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001869}
1870
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001871component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only_use_psa () {
1872 msg "build: default with only CBC-legacy and CBC-EtM ciphers use psa"
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001873
1874 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001875 # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C)
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001876 scripts/config.py unset MBEDTLS_GCM_C
1877 scripts/config.py unset MBEDTLS_CCM_C
1878 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiel68db0d22022-09-29 08:32:25 +02001879 # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES))
1880 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1881 # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC)
1882 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1883 # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER))
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001884 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Przemek Stekiel6a5cc742022-10-03 09:04:16 +02001885 # Modules that depend on AEAD
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001886 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
Przemek Stekiel52a428b2022-10-10 08:47:13 +02001887 scripts/config.py unset MBEDTLS_SSL_TICKET_C
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001888
Przemek Stekiel0cc34662022-09-28 12:06:57 +02001889 make
1890
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001891 msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001892 make test
Przemek Stekiel48a6a662022-09-29 15:22:01 +02001893
1894 msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa - ssl-opt.sh (subset)"
1895 tests/ssl-opt.sh -f "TLS 1.2"
Przemek Stekielb0de1c02022-09-28 10:23:22 +02001896}
1897
Valerio Setti9f0ec532022-11-08 13:03:24 +01001898# We're not aware of any other (open source) implementation of EC J-PAKE in TLS
1899# that we could use for interop testing. However, we now have sort of two
1900# implementations ourselves: one using PSA, the other not. At least test that
1901# these two interoperate with each other.
1902component_test_tls1_2_ecjpake_compatibility() {
1903 msg "build: TLS1.2 server+client w/ EC-JPAKE w/o USE_PSA"
1904 scripts/config.py set MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Gilles Peskineedc84562023-09-20 15:03:18 +02001905 # Explicitly make lib first to avoid a race condition:
1906 # https://github.com/Mbed-TLS/mbedtls/issues/8229
1907 make lib
Valerio Setti9f0ec532022-11-08 13:03:24 +01001908 make -C programs ssl/ssl_server2 ssl/ssl_client2
1909 cp programs/ssl/ssl_server2 s2_no_use_psa
1910 cp programs/ssl/ssl_client2 c2_no_use_psa
1911
1912 msg "build: TLS1.2 server+client w/ EC-JPAKE w/ USE_PSA"
1913 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1914 make clean
Gilles Peskineedc84562023-09-20 15:03:18 +02001915 make lib
Valerio Setti9f0ec532022-11-08 13:03:24 +01001916 make -C programs ssl/ssl_server2 ssl/ssl_client2
1917 make -C programs test/udp_proxy test/query_compile_time_config
1918
Valerio Setti70e02902022-12-02 16:21:56 +01001919 msg "test: server w/o USE_PSA - client w/ USE_PSA, text password"
1920 P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: working, TLS"
1921 msg "test: server w/o USE_PSA - client w/ USE_PSA, opaque password"
1922 P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: opaque password client only, working, TLS"
1923 msg "test: client w/o USE_PSA - server w/ USE_PSA, text password"
1924 P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: working, TLS"
1925 msg "test: client w/o USE_PSA - server w/ USE_PSA, opaque password"
1926 P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: opaque password server only, working, TLS"
Valerio Setti9f0ec532022-11-08 13:03:24 +01001927
1928 rm s2_no_use_psa c2_no_use_psa
1929}
1930
Gilles Peskine636c26a2020-03-04 20:46:15 +01001931component_test_everest () {
1932 msg "build: Everest ECDH context (ASan build)" # ~ 6 min
1933 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1934 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan .
1935 make
1936
1937 msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
1938 make test
1939
Gilles Peskine6848d172023-11-02 19:58:03 +01001940 msg "test: metatests (clang, ASan)"
1941 tests/scripts/run-metatests.sh any asan
1942
Gilles Peskine636c26a2020-03-04 20:46:15 +01001943 msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
1944 tests/ssl-opt.sh -f ECDH
1945
1946 msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
1947 # Exclude some symmetric ciphers that are redundant here to gain time.
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02001948 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA'
Gilles Peskine636c26a2020-03-04 20:46:15 +01001949}
1950
Gilles Peskined3beca92020-07-03 00:15:37 +02001951component_test_everest_curve25519_only () {
1952 msg "build: Everest ECDH context, only Curve25519" # ~ 6 min
Gilles Peskined3beca92020-07-03 00:15:37 +02001953 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1954 scripts/config.py unset MBEDTLS_ECDSA_C
1955 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1956 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
TRodziewicz7c1d41d2021-04-23 13:33:44 +02001957 scripts/config.py unset MBEDTLS_ECJPAKE_C
Gilles Peskined3beca92020-07-03 00:15:37 +02001958 # Disable all curves
Valerio Setti2e0275d2023-07-28 16:33:13 +02001959 scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED"
Gilles Peskined3beca92020-07-03 00:15:37 +02001960 scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED
1961
Dave Rodgman17127e92023-12-14 16:42:48 +00001962 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskined3beca92020-07-03 00:15:37 +02001963
1964 msg "test: Everest ECDH context, only Curve25519" # ~ 50s
1965 make test
1966}
1967
Gilles Peskine8f073122018-11-27 15:58:47 +01001968component_test_small_ssl_out_content_len () {
1969 msg "build: small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001970 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
1971 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Dave Rodgman17127e92023-12-14 16:42:48 +00001972 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001973 make
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001974
Gilles Peskine8f073122018-11-27 15:58:47 +01001975 msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001976 tests/ssl-opt.sh -f "Max fragment\|Large packet"
Gilles Peskine8f073122018-11-27 15:58:47 +01001977}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001978
Gilles Peskine8f073122018-11-27 15:58:47 +01001979component_test_small_ssl_in_content_len () {
1980 msg "build: small SSL_IN_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001981 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096
1982 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384
Dave Rodgman17127e92023-12-14 16:42:48 +00001983 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001984 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001985
Gilles Peskine8f073122018-11-27 15:58:47 +01001986 msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001987 tests/ssl-opt.sh -f "Max fragment"
Gilles Peskine8f073122018-11-27 15:58:47 +01001988}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001989
Gilles Peskine8f073122018-11-27 15:58:47 +01001990component_test_small_ssl_dtls_max_buffering () {
1991 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001992 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000
Dave Rodgman17127e92023-12-14 16:42:48 +00001993 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01001994 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001995
Gilles Peskine8f073122018-11-27 15:58:47 +01001996 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001997 tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg"
Gilles Peskine8f073122018-11-27 15:58:47 +01001998}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001999
Gilles Peskine8f073122018-11-27 15:58:47 +01002000component_test_small_mbedtls_ssl_dtls_max_buffering () {
2001 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1"
Gilles Peskine636c26a2020-03-04 20:46:15 +01002002 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190
Dave Rodgman17127e92023-12-14 16:42:48 +00002003 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01002004 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002005
Gilles Peskine8f073122018-11-27 15:58:47 +01002006 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002007 tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket"
Gilles Peskine8f073122018-11-27 15:58:47 +01002008}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002009
Gilles Peskine75cc7712019-09-06 19:47:17 +02002010component_test_psa_collect_statuses () {
2011 msg "build+test: psa_collect_statuses" # ~30s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002012 scripts/config.py full
Gilles Peskine21570cf2023-12-22 11:49:50 +01002013 tests/scripts/psa_collect_statuses.py
Gilles Peskine75cc7712019-09-06 19:47:17 +02002014 # Check that psa_crypto_init() succeeded at least once
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002015 grep -q '^0:psa_crypto_init:' tests/statuses.log
Gilles Peskine75cc7712019-09-06 19:47:17 +02002016 rm -f tests/statuses.log
2017}
2018
Gilles Peskine8f073122018-11-27 15:58:47 +01002019component_test_full_cmake_clang () {
2020 msg "build: cmake, full config, clang" # ~ 50s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002021 scripts/config.py full
Gilles Peskineda6017c2022-10-30 21:02:40 +01002022 CC=clang CXX=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On -D TEST_CPP=1 .
Gilles Peskine8f073122018-11-27 15:58:47 +01002023 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01002024
k-stachowiak0291cb72019-06-26 15:52:12 +02002025 msg "test: main suites (full config, clang)" # ~ 5s
Gilles Peskine8f073122018-11-27 15:58:47 +01002026 make test
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +01002027
Gilles Peskineda6017c2022-10-30 21:02:40 +01002028 msg "test: cpp_dummy_build (full config, clang)" # ~ 1s
2029 programs/test/cpp_dummy_build
2030
Gilles Peskine6848d172023-11-02 19:58:03 +01002031 msg "test: metatests (clang)"
Gilles Peskine102aea22023-11-03 18:05:38 +01002032 tests/scripts/run-metatests.sh any pthread
Gilles Peskine6848d172023-11-02 19:58:03 +01002033
Gilles Peskine82b27272019-06-14 18:27:03 +02002034 msg "program demos (full config, clang)" # ~10s
2035 tests/scripts/run_demos.py
2036
k-stachowiak0291cb72019-06-26 15:52:12 +02002037 msg "test: psa_constant_names (full config, clang)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002038 tests/scripts/test_psa_constant_names.py
Gilles Peskine69e8f7f2020-02-26 19:51:43 +01002039
Gilles Peskine8f073122018-11-27 15:58:47 +01002040 msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002041 tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002042
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02002043 msg "test: compat.sh NULL (full config)" # ~ 2 min
Gilles Peskinee29203b2023-08-27 21:43:00 +02002044 tests/compat.sh -e '^$' -f 'NULL'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002045
Gilles Peskine8f073122018-11-27 15:58:47 +01002046 msg "test: compat.sh ARIA + ChachaPoly"
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +01002047 env OPENSSL="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Gilles Peskine8f073122018-11-27 15:58:47 +01002048}
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002049
Gilles Peskine0c671602022-11-29 16:01:41 +01002050skip_suites_without_constant_flow () {
2051 # Skip the test suites that don't have any constant-flow annotations.
2052 # This will need to be adjusted if we ever start declaring things as
2053 # secret from macros or functions inside tests/include or tests/src.
2054 SKIP_TEST_SUITES=$(
2055 git -C tests/suites grep -L TEST_CF_ 'test_suite_*.function' |
2056 sed 's/test_suite_//; s/\.function$//' |
2057 tr '\n' ,)
2058 export SKIP_TEST_SUITES
2059}
2060
Dave Rodgman246210e2023-07-31 18:07:44 +01002061skip_all_except_given_suite () {
2062 # Skip all but the given test suite
2063 SKIP_TEST_SUITES=$(
2064 ls -1 tests/suites/test_suite_*.function |
2065 grep -v $1.function |
2066 sed 's/tests.suites.test_suite_//; s/\.function$//' |
2067 tr '\n' ,)
2068 export SKIP_TEST_SUITES
2069}
2070
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02002071component_test_memsan_constant_flow () {
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02002072 # This tests both (1) accesses to undefined memory, and (2) branches or
2073 # memory access depending on secret values. To distinguish between those:
2074 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
2075 # - or alternatively, change the build type to MemSanDbg, which enables
2076 # origin tracking and nicer stack traces (which are useful for debugging
2077 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002078 msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
2079 scripts/config.py full
2080 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
2081 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2082 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
2083 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
2084 make
2085
2086 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, Msan + constant flow)"
2087 make test
2088}
2089
2090component_test_memsan_constant_flow_psa () {
2091 # This tests both (1) accesses to undefined memory, and (2) branches or
2092 # memory access depending on secret values. To distinguish between those:
2093 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
2094 # - or alternatively, change the build type to MemSanDbg, which enables
2095 # origin tracking and nicer stack traces (which are useful for debugging
2096 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02002097 msg "build: cmake MSan (clang), full config with constant flow testing"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02002098 scripts/config.py full
2099 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
2100 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
2101 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
2102 make
2103
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02002104 msg "test: main suites (Msan + constant flow)"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02002105 make test
2106}
2107
Bence Szépkúti0354d042023-12-06 16:14:37 +01002108component_release_test_valgrind_constant_flow () {
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002109 # This tests both (1) everything that valgrind's memcheck usually checks
2110 # (heap buffer overflows, use of uninitialized memory, use-after-free,
2111 # etc.) and (2) branches or memory access depending on secret values,
2112 # which will be reported as uninitialized memory. To distinguish between
2113 # secret and actually uninitialized:
2114 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
2115 # - or alternatively, build with debug info and manually run the offending
2116 # test suite with valgrind --track-origins=yes, then check if the origin
2117 # was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002118 msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
2119 scripts/config.py full
2120 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
2121 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine0c671602022-11-29 16:01:41 +01002122 skip_suites_without_constant_flow
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002123 cmake -D CMAKE_BUILD_TYPE:String=Release .
2124 make
2125
2126 # this only shows a summary of the results (how many of each type)
2127 # details are left in Testing/<date>/DynamicAnalysis.xml
Gilles Peskine0c671602022-11-29 16:01:41 +01002128 msg "test: some suites (full minus MBEDTLS_USE_PSA_CRYPTO, valgrind + constant flow)"
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002129 make memcheck
Dave Rodgman246210e2023-07-31 18:07:44 +01002130
2131 # Test asm path in constant time module - by default, it will test the plain C
2132 # path under Valgrind or Memsan. Running only the constant_time tests is fast (<1s)
2133 msg "test: valgrind asm constant_time"
2134 scripts/config.py --force set MBEDTLS_TEST_CONSTANT_FLOW_ASM
2135 skip_all_except_given_suite test_suite_constant_time
2136 cmake -D CMAKE_BUILD_TYPE:String=Release .
2137 make clean
2138 make
2139 make memcheck
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002140}
2141
Bence Szépkúti0354d042023-12-06 16:14:37 +01002142component_release_test_valgrind_constant_flow_psa () {
Neil Armstrong0ab7a232022-03-18 09:57:32 +01002143 # This tests both (1) everything that valgrind's memcheck usually checks
2144 # (heap buffer overflows, use of uninitialized memory, use-after-free,
2145 # etc.) and (2) branches or memory access depending on secret values,
2146 # which will be reported as uninitialized memory. To distinguish between
2147 # secret and actually uninitialized:
2148 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
2149 # - or alternatively, build with debug info and manually run the offending
2150 # test suite with valgrind --track-origins=yes, then check if the origin
2151 # was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002152 msg "build: cmake release GCC, full config with constant flow testing"
2153 scripts/config.py full
2154 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
Gilles Peskine0c671602022-11-29 16:01:41 +01002155 skip_suites_without_constant_flow
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002156 cmake -D CMAKE_BUILD_TYPE:String=Release .
2157 make
2158
2159 # this only shows a summary of the results (how many of each type)
2160 # details are left in Testing/<date>/DynamicAnalysis.xml
Gilles Peskine0c671602022-11-29 16:01:41 +01002161 msg "test: some suites (valgrind + constant flow)"
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02002162 make memcheck
2163}
2164
Janos Follath9338cac2023-10-04 18:55:39 +01002165component_test_tsan () {
2166 msg "build: TSan (clang)"
Paul Elliott356597f2023-12-01 18:09:41 +00002167 scripts/config.py full
Janos Follath9338cac2023-10-04 18:55:39 +01002168 scripts/config.py set MBEDTLS_THREADING_C
2169 scripts/config.py set MBEDTLS_THREADING_PTHREAD
2170
2171 CC=clang cmake -D CMAKE_BUILD_TYPE:String=TSan .
2172 make
2173
2174 msg "test: main suites (TSan)"
2175 make test
2176}
2177
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002178component_test_default_no_deprecated () {
Gilles Peskine8386ea22020-04-30 09:07:29 +02002179 # Test that removing the deprecated features from the default
2180 # configuration leaves something consistent.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002181 msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s
2182 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
Dave Rodgmanea03ef92023-12-19 12:19:59 +00002183 make CFLAGS='-O -Werror -Wall -Wextra'
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002184
2185 msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s
2186 make test
2187}
2188
2189component_test_full_no_deprecated () {
Gilles Peskine30de2e82020-04-20 21:39:22 +02002190 msg "build: make, full_no_deprecated config" # ~ 30s
2191 scripts/config.py full_no_deprecated
Dave Rodgman84125a12024-01-02 11:42:38 +00002192 make CFLAGS='-O -Werror -Wall -Wextra'
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002193
Gilles Peskine30de2e82020-04-20 21:39:22 +02002194 msg "test: make, full_no_deprecated config" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002195 make test
Valerio Setti41b5fb62023-01-09 12:20:45 +01002196
2197 msg "test: ensure that X509 has no direct dependency on BIGNUM_C"
2198 not grep mbedtls_mpi library/libmbedx509.a
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002199}
2200
Gilles Peskine8386ea22020-04-30 09:07:29 +02002201component_test_full_no_deprecated_deprecated_warning () {
2202 # Test that there is nothing deprecated in "full_no_deprecated".
2203 # A deprecated feature would trigger a warning (made fatal) from
2204 # MBEDTLS_DEPRECATED_WARNING.
Gilles Peskine30de2e82020-04-20 21:39:22 +02002205 msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s
2206 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002207 scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED
2208 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Dave Rodgman84125a12024-01-02 11:42:38 +00002209 make CFLAGS='-O -Werror -Wall -Wextra'
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002210
Gilles Peskine30de2e82020-04-20 21:39:22 +02002211 msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002212 make test
2213}
2214
Gilles Peskine8386ea22020-04-30 09:07:29 +02002215component_test_full_deprecated_warning () {
2216 # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes
2217 # with only certain whitelisted types of warnings.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002218 msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002219 scripts/config.py full
2220 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002221 # Expect warnings from '#warning' directives in check_config.h.
Dave Rodgmanbc8e61d2023-12-19 14:07:15 +00002222 # Note that gcc is required to allow the use of -Wno-error=cpp, which allows us to
2223 # display #warning messages without them being treated as errors.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002224 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +01002225
Gilles Peskine8386ea22020-04-30 09:07:29 +02002226 msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
2227 # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features.
2228 # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002229 # Expect warnings from '#warning' directives in check_config.h and
2230 # from the use of deprecated functions in test suites.
Gilles Peskine21570cf2023-12-22 11:49:50 +01002231 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests
Gilles Peskine841b14b2019-11-26 17:37:37 +01002232
Gilles Peskine1093d9f2020-04-13 01:03:21 +02002233 msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s
2234 make test
Gilles Peskine82b27272019-06-14 18:27:03 +02002235
2236 msg "program demos: full config + MBEDTLS_TEST_DEPRECATED" # ~10s
2237 tests/scripts/run_demos.py
Gilles Peskine8f073122018-11-27 15:58:47 +01002238}
Jaeden Ameroed93bdc2018-11-02 16:57:24 +00002239
Gilles Peskineec541fe2020-01-31 14:24:14 +01002240# Check that the specified libraries exist and are empty.
2241are_empty_libraries () {
2242 nm "$@" >/dev/null 2>/dev/null
2243 ! nm "$@" 2>/dev/null | grep -v ':$' | grep .
2244}
2245
2246component_build_crypto_default () {
2247 msg "build: make, crypto only"
2248 scripts/config.py crypto
Gilles Peskine6bb39152020-02-03 11:59:20 +01002249 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002250 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01002251}
2252
2253component_build_crypto_full () {
2254 msg "build: make, crypto only, full config"
2255 scripts/config.py crypto_full
Gilles Peskine21570cf2023-12-22 11:49:50 +01002256 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002257 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01002258}
2259
Gilles Peskinefc4f11b2022-10-21 19:34:54 +02002260component_test_crypto_for_psa_service () {
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002261 msg "build: make, config for PSA crypto service"
2262 scripts/config.py crypto
2263 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
2264 # Disable things that are not needed for just cryptography, to
2265 # reach a configuration that would be typical for a PSA cryptography
2266 # service providing all implemented PSA algorithms.
2267 # System stuff
2268 scripts/config.py unset MBEDTLS_ERROR_C
2269 scripts/config.py unset MBEDTLS_TIMING_C
Gilles Peskine78bffd12022-10-25 21:02:33 +02002270 scripts/config.py unset MBEDTLS_VERSION_FEATURES
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002271 # Crypto stuff with no PSA interface
2272 scripts/config.py unset MBEDTLS_BASE64_C
Gilles Peskine649e04e2022-10-25 21:05:57 +02002273 # Keep MBEDTLS_CIPHER_C because psa_crypto_cipher, CCM and GCM need it.
Gilles Peskineb06f0712022-10-25 21:06:11 +02002274 scripts/config.py unset MBEDTLS_HKDF_C # PSA's HKDF is independent
Gilles Peskine649e04e2022-10-25 21:05:57 +02002275 # Keep MBEDTLS_MD_C because deterministic ECDSA needs it for HMAC_DRBG.
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002276 scripts/config.py unset MBEDTLS_NIST_KW_C
2277 scripts/config.py unset MBEDTLS_PEM_PARSE_C
2278 scripts/config.py unset MBEDTLS_PEM_WRITE_C
2279 scripts/config.py unset MBEDTLS_PKCS12_C
2280 scripts/config.py unset MBEDTLS_PKCS5_C
Gilles Peskinefcee7402022-10-11 21:15:24 +02002281 # MBEDTLS_PK_PARSE_C and MBEDTLS_PK_WRITE_C are actually currently needed
2282 # in PSA code to work with RSA keys. We don't require users to set those:
2283 # they will be reenabled in build_info.h.
Gilles Peskine1f108072022-10-25 21:02:56 +02002284 scripts/config.py unset MBEDTLS_PK_C
Gilles Peskinefcee7402022-10-11 21:15:24 +02002285 scripts/config.py unset MBEDTLS_PK_PARSE_C
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002286 scripts/config.py unset MBEDTLS_PK_WRITE_C
Gilles Peskineaef1ba62022-10-11 21:05:06 +02002287 make CFLAGS='-O1 -Werror' all test
2288 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
2289}
2290
Gilles Peskineec541fe2020-01-31 14:24:14 +01002291component_build_crypto_baremetal () {
2292 msg "build: make, crypto only, baremetal config"
2293 scripts/config.py crypto_baremetal
David Horstmann61faf662021-11-30 11:40:54 +00002294 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002295 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01002296}
Daniel Axtens446af202020-09-02 21:30:13 +10002297support_build_crypto_baremetal () {
Daniel Axtens814c8132020-08-31 14:22:58 +10002298 support_build_baremetal "$@"
2299}
2300
2301component_build_baremetal () {
2302 msg "build: make, baremetal config"
2303 scripts/config.py baremetal
David Horstmann61faf662021-11-30 11:40:54 +00002304 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Daniel Axtens814c8132020-08-31 14:22:58 +10002305}
2306support_build_baremetal () {
Daniel Axtens446af202020-09-02 21:30:13 +10002307 # Older Glibc versions include time.h from other headers such as stdlib.h,
2308 # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this
2309 # problem, Ubuntu 18.04 is ok.
2310 ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h
2311}
Gilles Peskineec541fe2020-01-31 14:24:14 +01002312
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002313# depends.py family of tests
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002314component_test_depends_py_cipher_id () {
2315 msg "test/build: depends.py cipher_id (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002316 tests/scripts/depends.py cipher_id --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002317}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00002318
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002319component_test_depends_py_cipher_chaining () {
2320 msg "test/build: depends.py cipher_chaining (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002321 tests/scripts/depends.py cipher_chaining --unset-use-psa
John Durkopc14be902020-08-20 06:16:41 -07002322}
2323
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002324component_test_depends_py_cipher_padding () {
2325 msg "test/build: depends.py cipher_padding (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002326 tests/scripts/depends.py cipher_padding --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002327}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00002328
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002329component_test_depends_py_curves () {
2330 msg "test/build: depends.py curves (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002331 tests/scripts/depends.py curves --unset-use-psa
John Durkop2ec2eaa2020-08-24 18:29:15 -07002332}
2333
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002334component_test_depends_py_hashes () {
2335 msg "test/build: depends.py hashes (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002336 tests/scripts/depends.py hashes --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002337}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002338
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002339component_test_depends_py_kex () {
2340 msg "test/build: depends.py kex (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002341 tests/scripts/depends.py kex --unset-use-psa
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002342}
2343
Andrzej Kurekfcbd2ac2022-10-05 09:14:07 -04002344component_test_depends_py_pkalgs () {
2345 msg "test/build: depends.py pkalgs (gcc)"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002346 tests/scripts/depends.py pkalgs --unset-use-psa
Gilles Peskine8f073122018-11-27 15:58:47 +01002347}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002348
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002349# PSA equivalents of the depends.py tests
2350component_test_depends_py_cipher_id_psa () {
2351 msg "test/build: depends.py cipher_id (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002352 tests/scripts/depends.py cipher_id
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002353}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002354
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002355component_test_depends_py_cipher_chaining_psa () {
2356 msg "test/build: depends.py cipher_chaining (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002357 tests/scripts/depends.py cipher_chaining
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002358}
2359
2360component_test_depends_py_cipher_padding_psa () {
2361 msg "test/build: depends.py cipher_padding (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002362 tests/scripts/depends.py cipher_padding
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002363}
2364
2365component_test_depends_py_curves_psa () {
2366 msg "test/build: depends.py curves (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002367 tests/scripts/depends.py curves
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002368}
2369
2370component_test_depends_py_hashes_psa () {
2371 msg "test/build: depends.py hashes (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002372 tests/scripts/depends.py hashes
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002373}
2374
2375component_test_depends_py_kex_psa () {
2376 msg "test/build: depends.py kex (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002377 tests/scripts/depends.py kex
Andrzej Kurek7cb00772022-10-24 10:49:22 -04002378}
2379
2380component_test_depends_py_pkalgs_psa () {
2381 msg "test/build: depends.py pkalgs (gcc) with MBEDTLS_USE_PSA_CRYPTO defined"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002382 tests/scripts/depends.py pkalgs
Gilles Peskine8f073122018-11-27 15:58:47 +01002383}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01002384
Dave Rodgman1a034dc2023-01-20 13:18:05 +00002385component_build_no_pk_rsa_alt_support () {
2386 msg "build: !MBEDTLS_PK_RSA_ALT_SUPPORT" # ~30s
2387
2388 scripts/config.py full
2389 scripts/config.py unset MBEDTLS_PK_RSA_ALT_SUPPORT
2390 scripts/config.py set MBEDTLS_RSA_C
2391 scripts/config.py set MBEDTLS_X509_CRT_WRITE_C
2392
2393 # Only compile - this is primarily to test for compile issues
Dave Rodgman84125a12024-01-02 11:42:38 +00002394 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy'
Dave Rodgman1a034dc2023-01-20 13:18:05 +00002395}
2396
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002397component_build_module_alt () {
2398 msg "build: MBEDTLS_XXX_ALT" # ~30s
2399 scripts/config.py full
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002400
2401 # Disable options that are incompatible with some ALT implementations:
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002402 # aesni.c and padlock.c reference mbedtls_aes_context fields directly.
2403 scripts/config.py unset MBEDTLS_AESNI_C
2404 scripts/config.py unset MBEDTLS_PADLOCK_C
Jerry Yue51eddc2023-01-11 14:16:08 +08002405 scripts/config.py unset MBEDTLS_AESCE_C
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002406 # MBEDTLS_ECP_RESTARTABLE is documented as incompatible.
2407 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002408 # You can only have one threading implementation: alt or pthread, not both.
2409 scripts/config.py unset MBEDTLS_THREADING_PTHREAD
Gilles Peskine5c3f18d2021-05-31 21:21:12 +02002410 # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields
2411 # directly and assumes the implementation works with partial groups.
2412 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
Dave Rodgman5b89c552023-10-10 14:59:02 +01002413 # MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*
2414 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
2415 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00002416 # MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*
2417 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
2418 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002419
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002420 # Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable
2421 # MBEDTLS_XXX_YYY_ALT which are for single functions.
2422 scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT'
Gilles Peskine1628a9c2021-05-31 22:09:58 +02002423 scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C
Manuel Pégourié-Gonnarda6e3d3e2022-12-06 12:10:33 +01002424
Gilles Peskine1628a9c2021-05-31 22:09:58 +02002425 # We can only compile, not link, since we don't have any implementations
2426 # suitable for testing with the dummy alt headers.
Dave Rodgmanea03ef92023-12-19 12:19:59 +00002427 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
Gilles Peskine1628a9c2021-05-31 22:09:58 +02002428}
2429
2430component_build_dhm_alt () {
2431 msg "build: MBEDTLS_DHM_ALT" # ~30s
2432 scripts/config.py full
2433 scripts/config.py set MBEDTLS_DHM_ALT
2434 # debug.c currently references mbedtls_dhm_context fields directly.
2435 scripts/config.py unset MBEDTLS_DEBUG_C
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002436 # We can only compile, not link, since we don't have any implementations
2437 # suitable for testing with the dummy alt headers.
Dave Rodgmanea03ef92023-12-19 12:19:59 +00002438 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
Gilles Peskinecc73cc52021-05-25 09:04:46 +02002439}
2440
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01002441component_test_no_use_psa_crypto_full_cmake_asan() {
2442 # full minus MBEDTLS_USE_PSA_CRYPTO: run the same set of tests as basic-build-test.sh
Gilles Peskinedc3a1792019-09-03 11:42:04 +02002443 msg "build: cmake, full config minus MBEDTLS_USE_PSA_CRYPTO, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002444 scripts/config.py full
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002445 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
2446 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cron6f135e12021-12-08 16:57:54 +01002447 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002448 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskinedc6d8382020-04-12 14:21:55 +02002449 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002450 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Raef Colesa7e03ad2022-09-28 09:32:48 +01002451 scripts/config.py unset MBEDTLS_LMS_C
Raef Coles47bccb72022-09-28 12:00:20 +01002452 scripts/config.py unset MBEDTLS_LMS_PRIVATE
Dave Rodgman17127e92023-12-14 16:42:48 +00002453 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Andrzej Kurekde5a0072019-02-01 07:03:03 -05002454 make
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +02002455
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01002456 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO)"
Andrzej Kurekde5a0072019-02-01 07:03:03 -05002457 make test
Manuel Pégourié-Gonnard503a5ef2015-10-23 09:04:45 +02002458
Manuel Pégourié-Gonnard182a23b2022-12-07 10:38:43 +01002459 # Note: ssl-opt.sh has some test cases that depend on
2460 # MBEDTLS_ECP_RESTARTABLE && !MBEDTLS_USE_PSA_CRYPTO
2461 # This is the only component where those tests are not skipped.
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01002462 msg "test: ssl-opt.sh (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002463 tests/ssl-opt.sh
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002464
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01002465 msg "test: compat.sh default (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002466 tests/compat.sh
Andrzej Kurek991f9fe2018-07-02 09:08:21 -04002467
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02002468 msg "test: compat.sh NULL (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskinee29203b2023-08-27 21:43:00 +02002469 tests/compat.sh -f 'NULL'
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05002470
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01002471 msg "test: compat.sh ARIA + ChachaPoly (full minus MBEDTLS_USE_PSA_CRYPTO)"
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +01002472 env OPENSSL="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Andrzej Kurekde5a0072019-02-01 07:03:03 -05002473}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05002474
Ronald Cron403c15c2021-09-13 09:38:05 +02002475component_test_psa_crypto_config_accel_ecdsa () {
Valerio Setti5aab43f2023-03-29 10:42:07 +02002476 msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
Ronald Cron403c15c2021-09-13 09:38:05 +02002477
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002478 # Algorithms and key types to accelerate
Valerio Settic0d2f842023-06-28 10:48:08 +02002479 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002480 $(helper_get_psa_key_type_list "ECC") \
2481 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002482
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002483 # Configure
2484 # ---------
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002485
Manuel Pégourié-Gonnard8d645dc2023-06-15 09:07:10 +02002486 # Start from default config (no USE_PSA) + TLS 1.3
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002487 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard6d7db932022-12-28 09:48:01 +01002488 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002489
2490 # Disable the module that's accelerated
Ronald Cron403c15c2021-09-13 09:38:05 +02002491 scripts/config.py unset MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002492
2493 # Disable things that depend on it
Ronald Cron403c15c2021-09-13 09:38:05 +02002494 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2495 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2496
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002497 # Build
2498 # -----
2499
2500 # These hashes are needed for some ECDSA signature tests.
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02002501 loc_extra_list="ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2502 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002503
2504 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2505
Valerio Setti3fe105b2023-10-30 11:08:12 +01002506 helper_libtestdriver1_make_main "$loc_accel_list"
Ronald Cron403c15c2021-09-13 09:38:05 +02002507
Manuel Pégourié-Gonnarde3095e72022-12-28 10:09:53 +01002508 # Make sure this was not re-enabled by accident (additive config)
Gilles Peskine827dbd92022-02-04 00:30:54 +01002509 not grep mbedtls_ecdsa_ library/ecdsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02002510
Manuel Pégourié-Gonnard200fd0f2022-12-27 13:03:10 +01002511 # Run the tests
2512 # -------------
2513
Ronald Cron403c15c2021-09-13 09:38:05 +02002514 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
2515 make test
2516}
2517
Valerio Setti44b178c2023-03-22 14:02:57 +01002518component_test_psa_crypto_config_accel_ecdh () {
Valerio Setti5aab43f2023-03-29 10:42:07 +02002519 msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDH"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002520
2521 # Algorithms and key types to accelerate
Valerio Settic0d2f842023-06-28 10:48:08 +02002522 loc_accel_list="ALG_ECDH \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002523 $(helper_get_psa_key_type_list "ECC") \
2524 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002525
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002526 # Configure
2527 # ---------
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002528
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002529 # Start from default config (no TLS 1.3, no USE_PSA)
2530 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002531
Valerio Setti44b178c2023-03-22 14:02:57 +01002532 # Disable the module that's accelerated
2533 scripts/config.py unset MBEDTLS_ECDH_C
2534
2535 # Disable things that depend on it
2536 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
2537 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2538 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2539 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
2540 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2541
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002542 # Build
2543 # -----
2544
2545 helper_libtestdriver1_make_drivers "$loc_accel_list"
2546
Valerio Setti3fe105b2023-10-30 11:08:12 +01002547 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002548
Valerio Setti44b178c2023-03-22 14:02:57 +01002549 # Make sure this was not re-enabled by accident (additive config)
2550 not grep mbedtls_ecdh_ library/ecdh.o
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002551
2552 # Run the tests
2553 # -------------
2554
Valerio Setti44b178c2023-03-22 14:02:57 +01002555 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDH"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002556 make test
Manuel Pégourié-Gonnard10e39632022-12-29 12:29:09 +01002557}
2558
Przemek Stekieldccb2022023-05-11 10:48:50 +02002559component_test_psa_crypto_config_accel_ffdh () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002560 msg "build: full with accelerated FFDH"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002561
2562 # Algorithms and key types to accelerate
Valerio Setti27602c32023-07-10 16:38:59 +02002563 loc_accel_list="ALG_FFDH \
Valerio Setti0a342c92023-09-01 09:12:31 +02002564 $(helper_get_psa_key_type_list "DH")"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002565
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002566 # Configure
2567 # ---------
Przemek Stekieldccb2022023-05-11 10:48:50 +02002568
Przemek Stekiel565353e2023-07-05 11:07:07 +02002569 # start with full (USE_PSA and TLS 1.3)
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002570 helper_libtestdriver1_adjust_config "full"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002571
2572 # Disable the module that's accelerated
2573 scripts/config.py unset MBEDTLS_DHM_C
2574
2575 # Disable things that depend on it
2576 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
2577 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
2578
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002579 # Build
2580 # -----
2581
2582 helper_libtestdriver1_make_drivers "$loc_accel_list"
2583
Manuel Pégourié-Gonnard981732e2023-06-08 09:15:59 +02002584 helper_libtestdriver1_make_main "$loc_accel_list"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002585
2586 # Make sure this was not re-enabled by accident (additive config)
2587 not grep mbedtls_dhm_ library/dhm.o
2588
2589 # Run the tests
2590 # -------------
2591
Gilles Peskine14302ed2023-07-19 19:30:04 +02002592 msg "test: full with accelerated FFDH"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002593 make test
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002594
Gilles Peskine14302ed2023-07-19 19:30:04 +02002595 msg "ssl-opt: full with accelerated FFDH alg"
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002596 tests/ssl-opt.sh -f "ffdh"
Przemek Stekieldccb2022023-05-11 10:48:50 +02002597}
2598
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002599component_test_psa_crypto_config_reference_ffdh () {
Gilles Peskineb7d577e2023-08-09 19:48:58 +02002600 msg "build: full with non-accelerated FFDH"
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002601
2602 # Start with full (USE_PSA and TLS 1.3)
Przemek Stekiel565353e2023-07-05 11:07:07 +02002603 helper_libtestdriver1_adjust_config "full"
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002604
2605 # Disable things that are not supported
2606 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
2607 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
Gilles Peskine21570cf2023-12-22 11:49:50 +01002608 make
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002609
Gilles Peskine14302ed2023-07-19 19:30:04 +02002610 msg "test suites: full with non-accelerated FFDH alg"
Przemek Stekiel01c248c2023-05-26 10:19:49 +02002611 make test
2612
Gilles Peskine14302ed2023-07-19 19:30:04 +02002613 msg "ssl-opt: full with non-accelerated FFDH alg"
Przemek Stekiel84f4ff12023-07-04 12:35:31 +02002614 tests/ssl-opt.sh -f "ffdh"
Valerio Setti42d5f192023-03-20 13:54:41 +01002615}
2616
Valerio Setti44b178c2023-03-22 14:02:57 +01002617component_test_psa_crypto_config_accel_pake() {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002618 msg "build: full with accelerated PAKE"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002619
Manuel Pégourié-Gonnard5a7523e2023-09-20 12:45:01 +02002620 loc_accel_list="ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002621 $(helper_get_psa_key_type_list "ECC") \
2622 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002623
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002624 # Configure
2625 # ---------
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002626
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002627 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002628
2629 # Make built-in fallback not available
2630 scripts/config.py unset MBEDTLS_ECJPAKE_C
2631 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
2632
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002633 # Build
2634 # -----
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002635
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002636 helper_libtestdriver1_make_drivers "$loc_accel_list"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002637
Valerio Setti3fe105b2023-10-30 11:08:12 +01002638 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002639
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02002640 # Make sure this was not re-enabled by accident (additive config)
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002641 not grep mbedtls_ecjpake_init library/ecjpake.o
2642
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02002643 # Run the tests
2644 # -------------
2645
Gilles Peskine14302ed2023-07-19 19:30:04 +02002646 msg "test: full with accelerated PAKE"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002647 make test
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002648}
2649
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002650component_test_psa_crypto_config_accel_ecc_some_key_types () {
2651 msg "build: full with accelerated EC algs and some key types"
2652
2653 # Algorithms and key types to accelerate
2654 # For key types, use an explicitly list to omit GENERATE (and DERIVE)
2655 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2656 ALG_ECDH \
2657 ALG_JPAKE \
2658 KEY_TYPE_ECC_PUBLIC_KEY \
2659 KEY_TYPE_ECC_KEY_PAIR_BASIC \
2660 KEY_TYPE_ECC_KEY_PAIR_IMPORT \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002661 KEY_TYPE_ECC_KEY_PAIR_EXPORT \
2662 $(helper_get_psa_curve_list)"
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002663
2664 # Configure
2665 # ---------
2666
2667 # start with config full for maximum coverage (also enables USE_PSA)
2668 helper_libtestdriver1_adjust_config "full"
2669
2670 # Disable modules that are accelerated - some will be re-enabled
2671 scripts/config.py unset MBEDTLS_ECDSA_C
2672 scripts/config.py unset MBEDTLS_ECDH_C
2673 scripts/config.py unset MBEDTLS_ECJPAKE_C
2674 scripts/config.py unset MBEDTLS_ECP_C
2675
2676 # Disable all curves - those that aren't accelerated should be re-enabled
2677 helper_disable_builtin_curves
2678
2679 # Restartable feature is not yet supported by PSA. Once it will in
2680 # the future, the following line could be removed (see issues
2681 # 6061, 6332 and following ones)
2682 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2683
2684 # this is not supported by the driver API yet
2685 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
2686
2687 # Build
2688 # -----
2689
2690 # These hashes are needed for some ECDSA signature tests.
2691 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2692 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
2693 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2694
Valerio Setti3fe105b2023-10-30 11:08:12 +01002695 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002696
2697 # ECP should be re-enabled but not the others
2698 not grep mbedtls_ecdh_ library/ecdh.o
2699 not grep mbedtls_ecdsa library/ecdsa.o
2700 not grep mbedtls_ecjpake library/ecjpake.o
2701 grep mbedtls_ecp library/ecp.o
2702
2703 # Run the tests
2704 # -------------
2705
2706 msg "test suites: full with accelerated EC algs and some key types"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002707 make test
Manuel Pégourié-Gonnard5c210362023-09-26 12:03:10 +02002708}
2709
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002710# Run tests with only (non-)Weierstrass accelerated
2711# Common code used in:
Manuel Pégourié-Gonnardfaea9192023-09-28 09:10:01 +02002712# - component_test_psa_crypto_config_accel_ecc_weierstrass_curves
2713# - component_test_psa_crypto_config_accel_ecc_non_weierstrass_curves
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002714common_test_psa_crypto_config_accel_ecc_some_curves () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002715 weierstrass=$1
2716 if [ $weierstrass -eq 1 ]; then
2717 desc="Weierstrass"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002718 else
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002719 desc="non-Weierstrass"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002720 fi
2721
Manuel Pégourié-Gonnardc0c9b232023-09-28 10:05:57 +02002722 msg "build: crypto_full minus PK with accelerated EC algs and $desc curves"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002723
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002724 # Note: Curves are handled in a special way by the libtestdriver machinery,
2725 # so we only want to include them in the accel list when building the main
2726 # libraries, hence the use of a separate variable.
2727 # Note: the following loop is a modified version of
2728 # helper_get_psa_curve_list that only keeps Weierstrass families.
2729 loc_weierstrass_list=""
2730 loc_non_weierstrass_list=""
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002731 for item in $(sed -n 's/^#define PSA_WANT_\(ECC_[0-9A-Z_a-z]*\).*/\1/p' <"$CRYPTO_CONFIG_H"); do
2732 case $item in
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002733 ECC_BRAINPOOL*|ECC_SECP*)
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002734 loc_weierstrass_list="$loc_weierstrass_list $item"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002735 ;;
2736 *)
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002737 loc_non_weierstrass_list="$loc_non_weierstrass_list $item"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002738 ;;
2739 esac
2740 done
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002741 if [ $weierstrass -eq 1 ]; then
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002742 loc_curve_list=$loc_weierstrass_list
2743 else
2744 loc_curve_list=$loc_non_weierstrass_list
2745 fi
2746
Valerio Setti3fe105b2023-10-30 11:08:12 +01002747 # Algorithms and key types to accelerate
2748 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2749 ALG_ECDH \
2750 ALG_JPAKE \
2751 $(helper_get_psa_key_type_list "ECC") \
2752 $loc_curve_list"
2753
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002754 # Configure
2755 # ---------
2756
Manuel Pégourié-Gonnardc0c9b232023-09-28 10:05:57 +02002757 # Start with config crypto_full and remove PK_C:
2758 # that's what's supported now, see docs/driver-only-builds.md.
2759 helper_libtestdriver1_adjust_config "crypto_full"
2760 scripts/config.py unset MBEDTLS_PK_C
2761 scripts/config.py unset MBEDTLS_PK_PARSE_C
2762 scripts/config.py unset MBEDTLS_PK_WRITE_C
2763 # We need to disable RSA too or PK will be re-enabled.
2764 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*"
2765 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*"
2766 scripts/config.py unset MBEDTLS_RSA_C
2767 scripts/config.py unset MBEDTLS_PKCS1_V15
2768 scripts/config.py unset MBEDTLS_PKCS1_V21
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002769
2770 # Disable modules that are accelerated - some will be re-enabled
2771 scripts/config.py unset MBEDTLS_ECDSA_C
2772 scripts/config.py unset MBEDTLS_ECDH_C
2773 scripts/config.py unset MBEDTLS_ECJPAKE_C
2774 scripts/config.py unset MBEDTLS_ECP_C
2775
2776 # Disable all curves - those that aren't accelerated should be re-enabled
2777 helper_disable_builtin_curves
2778
2779 # Restartable feature is not yet supported by PSA. Once it will in
2780 # the future, the following line could be removed (see issues
2781 # 6061, 6332 and following ones)
2782 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2783
2784 # this is not supported by the driver API yet
2785 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
2786
2787 # Build
2788 # -----
2789
2790 # These hashes are needed for some ECDSA signature tests.
2791 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2792 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
2793 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2794
Valerio Settiac7a8092023-10-31 12:23:44 +01002795 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002796
2797 # We expect ECDH to be re-enabled for the missing curves
2798 grep mbedtls_ecdh_ library/ecdh.o
2799 # We expect ECP to be re-enabled, however the parts specific to the
2800 # families of curves that are accelerated should be ommited.
2801 # - functions with mxz in the name are specific to Montgomery curves
2802 # - ecp_muladd is specific to Weierstrass curves
2803 ##nm library/ecp.o | tee ecp.syms
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002804 if [ $weierstrass -eq 1 ]; then
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002805 not grep mbedtls_ecp_muladd library/ecp.o
2806 grep mxz library/ecp.o
2807 else
2808 grep mbedtls_ecp_muladd library/ecp.o
2809 not grep mxz library/ecp.o
2810 fi
2811 # We expect ECDSA and ECJPAKE to be re-enabled only when
2812 # Weierstrass curves are not accelerated
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002813 if [ $weierstrass -eq 1 ]; then
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002814 not grep mbedtls_ecdsa library/ecdsa.o
2815 not grep mbedtls_ecjpake library/ecjpake.o
2816 else
2817 grep mbedtls_ecdsa library/ecdsa.o
2818 grep mbedtls_ecjpake library/ecjpake.o
2819 fi
2820
2821 # Run the tests
2822 # -------------
2823
Manuel Pégourié-Gonnardc0c9b232023-09-28 10:05:57 +02002824 msg "test suites: crypto_full minus PK with accelerated EC algs and $desc curves"
2825 make test
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002826}
2827
Manuel Pégourié-Gonnardfaea9192023-09-28 09:10:01 +02002828component_test_psa_crypto_config_accel_ecc_weierstrass_curves () {
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002829 common_test_psa_crypto_config_accel_ecc_some_curves 1
2830}
2831
Manuel Pégourié-Gonnardfaea9192023-09-28 09:10:01 +02002832component_test_psa_crypto_config_accel_ecc_non_weierstrass_curves () {
Manuel Pégourié-Gonnard561bce62023-09-25 12:35:15 +02002833 common_test_psa_crypto_config_accel_ecc_some_curves 0
2834}
2835
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002836# Auxiliary function to build config for all EC based algorithms (EC-JPAKE,
2837# ECDH, ECDSA) with and without drivers.
2838# The input parameter is a boolean value which indicates:
2839# - 0 keep built-in EC algs,
2840# - 1 exclude built-in EC algs (driver only).
2841#
2842# This is used by the two following components to ensure they always use the
2843# same config, except for the use of driver or built-in EC algorithms:
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002844# - component_test_psa_crypto_config_accel_ecc_ecp_light_only;
2845# - component_test_psa_crypto_config_reference_ecc_ecp_light_only.
Manuel Pégourié-Gonnard171c45f2022-12-29 11:31:35 +01002846# This supports comparing their test coverage with analyze_outcomes.py.
Gilles Peskine8dbdf2f2023-07-19 19:16:37 +02002847config_psa_crypto_config_ecp_light_only () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002848 driver_only="$1"
Valerio Setti42d5f192023-03-20 13:54:41 +01002849 # start with config full for maximum coverage (also enables USE_PSA)
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002850 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002851 if [ "$driver_only" -eq 1 ]; then
Valerio Setti42d5f192023-03-20 13:54:41 +01002852 # Disable modules that are accelerated
2853 scripts/config.py unset MBEDTLS_ECDSA_C
2854 scripts/config.py unset MBEDTLS_ECDH_C
2855 scripts/config.py unset MBEDTLS_ECJPAKE_C
Valerio Setti29b395c2023-04-05 18:20:30 +02002856 scripts/config.py unset MBEDTLS_ECP_C
Valerio Setti42d5f192023-03-20 13:54:41 +01002857 fi
2858
2859 # Restartable feature is not yet supported by PSA. Once it will in
2860 # the future, the following line could be removed (see issues
2861 # 6061, 6332 and following ones)
2862 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Valerio Setti42d5f192023-03-20 13:54:41 +01002863}
2864
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002865# Keep in sync with component_test_psa_crypto_config_reference_ecc_ecp_light_only
2866component_test_psa_crypto_config_accel_ecc_ecp_light_only () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002867 msg "build: full with accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002868
2869 # Algorithms and key types to accelerate
2870 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2871 ALG_ECDH \
2872 ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002873 $(helper_get_psa_key_type_list "ECC") \
2874 $(helper_get_psa_curve_list)"
Valerio Setti42d5f192023-03-20 13:54:41 +01002875
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002876 # Configure
2877 # ---------
Valerio Setti42d5f192023-03-20 13:54:41 +01002878
2879 # Use the same config as reference, only without built-in EC algs
Gilles Peskine8dbdf2f2023-07-19 19:16:37 +02002880 config_psa_crypto_config_ecp_light_only 1
Valerio Setti42d5f192023-03-20 13:54:41 +01002881
Valerio Setti0a342c92023-09-01 09:12:31 +02002882 # Do not disable builtin curves because that support is required for:
Valerio Settib2fd6732023-08-15 17:10:47 +02002883 # - MBEDTLS_PK_PARSE_EC_EXTENDED
2884 # - MBEDTLS_PK_PARSE_EC_COMPRESSED
Valerio Setti42d5f192023-03-20 13:54:41 +01002885
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002886 # Build
2887 # -----
2888
2889 # These hashes are needed for some ECDSA signature tests.
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02002890 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2891 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002892 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
2893
Valerio Setti3fe105b2023-10-30 11:08:12 +01002894 helper_libtestdriver1_make_main "$loc_accel_list"
Valerio Setti42d5f192023-03-20 13:54:41 +01002895
2896 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
2897 not grep mbedtls_ecdsa_ library/ecdsa.o
2898 not grep mbedtls_ecdh_ library/ecdh.o
2899 not grep mbedtls_ecjpake_ library/ecjpake.o
Valerio Setti29b395c2023-04-05 18:20:30 +02002900 not grep mbedtls_ecp_mul library/ecp.o
Valerio Setti42d5f192023-03-20 13:54:41 +01002901
2902 # Run the tests
2903 # -------------
2904
Gilles Peskine14302ed2023-07-19 19:30:04 +02002905 msg "test suites: full with accelerated EC algs"
Gilles Peskine21570cf2023-12-22 11:49:50 +01002906 make test
Valerio Setti42d5f192023-03-20 13:54:41 +01002907
Gilles Peskine14302ed2023-07-19 19:30:04 +02002908 msg "ssl-opt: full with accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002909 tests/ssl-opt.sh
2910}
2911
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002912# Keep in sync with component_test_psa_crypto_config_accel_ecc_ecp_light_only
2913component_test_psa_crypto_config_reference_ecc_ecp_light_only () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002914 msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with non-accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002915
Gilles Peskine8dbdf2f2023-07-19 19:16:37 +02002916 config_psa_crypto_config_ecp_light_only 0
Valerio Setti42d5f192023-03-20 13:54:41 +01002917
Gilles Peskine21570cf2023-12-22 11:49:50 +01002918 make
Valerio Setti42d5f192023-03-20 13:54:41 +01002919
Gilles Peskine14302ed2023-07-19 19:30:04 +02002920 msg "test suites: full with non-accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002921 make test
2922
Gilles Peskine14302ed2023-07-19 19:30:04 +02002923 msg "ssl-opt: full with non-accelerated EC algs"
Valerio Setti42d5f192023-03-20 13:54:41 +01002924 tests/ssl-opt.sh
2925}
2926
Valerio Settie618cb02023-04-12 14:59:16 +02002927# This helper function is used by:
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002928# - component_test_psa_crypto_config_accel_ecc_no_ecp_at_all()
2929# - component_test_psa_crypto_config_reference_ecc_no_ecp_at_all()
Valerio Settie618cb02023-04-12 14:59:16 +02002930# to ensure that both tests use the same underlying configuration when testing
2931# driver's coverage with analyze_outcomes.py.
2932#
2933# This functions accepts 1 boolean parameter as follows:
2934# - 1: building with accelerated EC algorithms (ECDSA, ECDH, ECJPAKE), therefore
2935# excluding their built-in implementation as well as ECP_C & ECP_LIGHT
2936# - 0: include built-in implementation of EC algorithms.
2937#
2938# PK_C and RSA_C are always disabled to ensure there is no remaining dependency
2939# on the ECP module.
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002940config_psa_crypto_no_ecp_at_all () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002941 driver_only="$1"
Valerio Settiaafe9002023-06-26 15:23:44 +02002942 # start with full config for maximum coverage (also enables USE_PSA)
2943 helper_libtestdriver1_adjust_config "full"
2944
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02002945 if [ "$driver_only" -eq 1 ]; then
Valerio Settie618cb02023-04-12 14:59:16 +02002946 # Disable modules that are accelerated
2947 scripts/config.py unset MBEDTLS_ECDSA_C
2948 scripts/config.py unset MBEDTLS_ECDH_C
2949 scripts/config.py unset MBEDTLS_ECJPAKE_C
2950 # Disable ECP module (entirely)
2951 scripts/config.py unset MBEDTLS_ECP_C
Valerio Settie618cb02023-04-12 14:59:16 +02002952 fi
2953
Valerio Settiaecd32c2023-06-14 10:42:31 +02002954 # Disable all the features that auto-enable ECP_LIGHT (see build_info.h)
2955 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
Valerio Settiaddeee42023-06-14 10:46:55 +02002956 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
Ronald Cron6b49b552023-07-20 09:57:54 +02002957 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
Valerio Settiaecd32c2023-06-14 10:42:31 +02002958
Valerio Settie618cb02023-04-12 14:59:16 +02002959 # Restartable feature is not yet supported by PSA. Once it will in
2960 # the future, the following line could be removed (see issues
2961 # 6061, 6332 and following ones)
2962 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
Valerio Settie618cb02023-04-12 14:59:16 +02002963}
2964
2965# Build and test a configuration where driver accelerates all EC algs while
2966# all support and dependencies from ECP and ECP_LIGHT are removed on the library
2967# side.
2968#
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002969# Keep in sync with component_test_psa_crypto_config_reference_ecc_no_ecp_at_all()
2970component_test_psa_crypto_config_accel_ecc_no_ecp_at_all () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02002971 msg "build: full + accelerated EC algs - ECP"
Valerio Settie618cb02023-04-12 14:59:16 +02002972
2973 # Algorithms and key types to accelerate
2974 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
2975 ALG_ECDH \
2976 ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01002977 $(helper_get_psa_key_type_list "ECC") \
2978 $(helper_get_psa_curve_list)"
Valerio Settie618cb02023-04-12 14:59:16 +02002979
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002980 # Configure
2981 # ---------
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02002982
Valerio Settie618cb02023-04-12 14:59:16 +02002983 # Set common configurations between library's and driver's builds
Valerio Setti4d25a8d2023-06-14 10:33:10 +02002984 config_psa_crypto_no_ecp_at_all 1
Valerio Settib2fd6732023-08-15 17:10:47 +02002985 # Disable all the builtin curves. All the required algs are accelerated.
2986 helper_disable_builtin_curves
Valerio Settie618cb02023-04-12 14:59:16 +02002987
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02002988 # Build
2989 # -----
Valerio Settie618cb02023-04-12 14:59:16 +02002990
2991 # Things we wanted supported in libtestdriver1, but not accelerated in the main library:
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02002992 # SHA-1 and all SHA-2/3 variants, as they are used by ECDSA deterministic.
2993 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
2994 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Valerio Settie618cb02023-04-12 14:59:16 +02002995
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +02002996 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
Valerio Settie618cb02023-04-12 14:59:16 +02002997
Valerio Setti3fe105b2023-10-30 11:08:12 +01002998 helper_libtestdriver1_make_main "$loc_accel_list"
Valerio Settie618cb02023-04-12 14:59:16 +02002999
3000 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3001 not grep mbedtls_ecdsa_ library/ecdsa.o
3002 not grep mbedtls_ecdh_ library/ecdh.o
3003 not grep mbedtls_ecjpake_ library/ecjpake.o
Valerio Settib2fd6732023-08-15 17:10:47 +02003004 # Also ensure that ECP module was not re-enabled
Valerio Settie618cb02023-04-12 14:59:16 +02003005 not grep mbedtls_ecp_ library/ecp.o
Valerio Settie618cb02023-04-12 14:59:16 +02003006
3007 # Run the tests
3008 # -------------
3009
Gilles Peskine14302ed2023-07-19 19:30:04 +02003010 msg "test: full + accelerated EC algs - ECP"
Gilles Peskine21570cf2023-12-22 11:49:50 +01003011 make test
Valerio Setti16b70f22023-06-27 17:45:49 +02003012
Gilles Peskine14302ed2023-07-19 19:30:04 +02003013 msg "ssl-opt: full + accelerated EC algs - ECP"
Valerio Setti16b70f22023-06-27 17:45:49 +02003014 tests/ssl-opt.sh
Valerio Settie618cb02023-04-12 14:59:16 +02003015}
3016
3017# Reference function used for driver's coverage analysis in analyze_outcomes.py
Valerio Setti4d25a8d2023-06-14 10:33:10 +02003018# in conjunction with component_test_psa_crypto_config_accel_ecc_no_ecp_at_all().
Valerio Settie618cb02023-04-12 14:59:16 +02003019# Keep in sync with its accelerated counterpart.
Valerio Setti4d25a8d2023-06-14 10:33:10 +02003020component_test_psa_crypto_config_reference_ecc_no_ecp_at_all () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02003021 msg "build: full + non accelerated EC algs"
Valerio Settie618cb02023-04-12 14:59:16 +02003022
Valerio Setti4d25a8d2023-06-14 10:33:10 +02003023 config_psa_crypto_no_ecp_at_all 0
Valerio Settie618cb02023-04-12 14:59:16 +02003024
Gilles Peskine21570cf2023-12-22 11:49:50 +01003025 make
Valerio Settie618cb02023-04-12 14:59:16 +02003026
Gilles Peskine14302ed2023-07-19 19:30:04 +02003027 msg "test: full + non accelerated EC algs"
Valerio Settie618cb02023-04-12 14:59:16 +02003028 make test
Valerio Setti16b70f22023-06-27 17:45:49 +02003029
Gilles Peskine14302ed2023-07-19 19:30:04 +02003030 msg "ssl-opt: full + non accelerated EC algs"
Valerio Setti16b70f22023-06-27 17:45:49 +02003031 tests/ssl-opt.sh
Valerio Settie618cb02023-04-12 14:59:16 +02003032}
3033
Valerio Setti4e2f2442023-08-15 10:10:26 +02003034# This is a common configuration helper used directly from:
3035# - common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum
3036# - common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum
3037# and indirectly from:
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003038# - component_test_psa_crypto_config_accel_ecc_no_bignum
Valerio Setti4e2f2442023-08-15 10:10:26 +02003039# - accelerate all EC algs, disable RSA and FFDH
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003040# - component_test_psa_crypto_config_reference_ecc_no_bignum
Valerio Setti4e2f2442023-08-15 10:10:26 +02003041# - this is the reference component of the above
3042# - it still disables RSA and FFDH, but it uses builtin EC algs
3043# - component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum
3044# - accelerate all EC and FFDH algs, disable only RSA
3045# - component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum
3046# - this is the reference component of the above
3047# - it still disables RSA, but it uses builtin EC and FFDH algs
3048#
3049# This function accepts 2 parameters:
Valerio Setti5dfaca42023-09-05 08:48:51 +02003050# $1: a boolean value which states if we are testing an accelerated scenario
3051# or not.
3052# $2: a string value which states which components are tested. Allowed values
3053# are "ECC" or "ECC_DH".
Valerio Setti4e2f2442023-08-15 10:10:26 +02003054config_psa_crypto_config_accel_ecc_ffdh_no_bignum() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003055 driver_only="$1"
3056 test_target="$2"
Valerio Setti18535c32023-07-31 11:27:17 +02003057 # start with full config for maximum coverage (also enables USE_PSA)
Valerio Setti29c1b4d2023-07-27 10:08:45 +02003058 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003059
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003060 if [ "$driver_only" -eq 1 ]; then
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003061 # Disable modules that are accelerated
3062 scripts/config.py unset MBEDTLS_ECDSA_C
3063 scripts/config.py unset MBEDTLS_ECDH_C
3064 scripts/config.py unset MBEDTLS_ECJPAKE_C
3065 # Disable ECP module (entirely)
3066 scripts/config.py unset MBEDTLS_ECP_C
Manuel Pégourié-Gonnard660bbf22023-06-12 18:42:40 +02003067 # Also disable bignum
3068 scripts/config.py unset MBEDTLS_BIGNUM_C
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003069 fi
3070
3071 # Disable all the features that auto-enable ECP_LIGHT (see build_info.h)
3072 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
3073 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
3074 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
3075
Manuel Pégourié-Gonnard7dccb662023-06-12 18:28:42 +02003076 # RSA support is intentionally disabled on this test because RSA_C depends
3077 # on BIGNUM_C.
Valerio Setti2e0275d2023-07-28 16:33:13 +02003078 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*"
3079 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*"
Manuel Pégourié-Gonnard7dccb662023-06-12 18:28:42 +02003080 scripts/config.py unset MBEDTLS_RSA_C
3081 scripts/config.py unset MBEDTLS_PKCS1_V15
3082 scripts/config.py unset MBEDTLS_PKCS1_V21
3083 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3084 # Also disable key exchanges that depend on RSA
3085 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
3086 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
3087 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3088 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3089 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3090
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003091 if [ "$test_target" = "ECC" ]; then
Valerio Setti4e2f2442023-08-15 10:10:26 +02003092 # When testing ECC only, we disable FFDH support, both from builtin and
3093 # PSA sides, and also disable the key exchanges that depend on DHM.
3094 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_FFDH
3095 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_DH_[0-9A-Z_a-z]*"
3096 scripts/config.py unset MBEDTLS_DHM_C
3097 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
3098 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3099 else
3100 # When testing ECC and DH instead, we disable DHM and depending key
3101 # exchanges only in the accelerated build
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003102 if [ "$driver_only" -eq 1 ]; then
Valerio Setti4e2f2442023-08-15 10:10:26 +02003103 scripts/config.py unset MBEDTLS_DHM_C
3104 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
3105 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3106 fi
3107 fi
Manuel Pégourié-Gonnard7dccb662023-06-12 18:28:42 +02003108
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003109 # Restartable feature is not yet supported by PSA. Once it will in
3110 # the future, the following line could be removed (see issues
3111 # 6061, 6332 and following ones)
3112 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
3113}
3114
Valerio Setti4e2f2442023-08-15 10:10:26 +02003115# Common helper used by:
3116# - component_test_psa_crypto_config_accel_ecc_no_bignum
3117# - component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003118#
Valerio Setti4e2f2442023-08-15 10:10:26 +02003119# The goal is to build and test accelerating either:
3120# - ECC only or
3121# - both ECC and FFDH
3122#
3123# It is meant to be used in conjunction with
Valerio Setti5dfaca42023-09-05 08:48:51 +02003124# common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum() for drivers
3125# coverage analysis in the "analyze_outcomes.py" script.
Valerio Setti4e2f2442023-08-15 10:10:26 +02003126common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003127 test_target="$1"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003128
Valerio Setti5dfaca42023-09-05 08:48:51 +02003129 # This is an internal helper to simplify text message handling
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003130 if [ "$test_target" = "ECC_DH" ]; then
3131 accel_text="ECC/FFDH"
3132 removed_text="ECP - DH"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003133 else
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003134 accel_text="ECC"
3135 removed_text="ECP"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003136 fi
3137
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003138 msg "build: full + accelerated $accel_text algs + USE_PSA - $removed_text - BIGNUM"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003139
3140 # By default we accelerate all EC keys/algs
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003141 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \
3142 ALG_ECDH \
3143 ALG_JPAKE \
Valerio Setti3fe105b2023-10-30 11:08:12 +01003144 $(helper_get_psa_key_type_list "ECC") \
3145 $(helper_get_psa_curve_list)"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003146 # Optionally we can also add DH to the list of accelerated items
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003147 if [ "$test_target" = "ECC_DH" ]; then
Valerio Setti4e2f2442023-08-15 10:10:26 +02003148 loc_accel_list="$loc_accel_list \
3149 ALG_FFDH \
Manuel Pégourié-Gonnard85ff5e62023-09-22 09:05:48 +02003150 $(helper_get_psa_key_type_list "DH")"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003151 fi
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003152
3153 # Configure
3154 # ---------
3155
3156 # Set common configurations between library's and driver's builds
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003157 config_psa_crypto_config_accel_ecc_ffdh_no_bignum 1 "$test_target"
Valerio Settib2fd6732023-08-15 17:10:47 +02003158 # Disable all the builtin curves. All the required algs are accelerated.
3159 helper_disable_builtin_curves
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003160
3161 # Build
3162 # -----
3163
3164 # Things we wanted supported in libtestdriver1, but not accelerated in the main library:
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02003165 # SHA-1 and all SHA-2/3 variants, as they are used by ECDSA deterministic.
3166 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3167 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003168
3169 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
3170
Valerio Setti3fe105b2023-10-30 11:08:12 +01003171 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003172
3173 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3174 not grep mbedtls_ecdsa_ library/ecdsa.o
3175 not grep mbedtls_ecdh_ library/ecdh.o
3176 not grep mbedtls_ecjpake_ library/ecjpake.o
Valerio Setti4e2f2442023-08-15 10:10:26 +02003177 # Also ensure that ECP, RSA, [DHM] or BIGNUM modules were not re-enabled
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003178 not grep mbedtls_ecp_ library/ecp.o
Manuel Pégourié-Gonnard06aebe42023-06-12 18:33:34 +02003179 not grep mbedtls_rsa_ library/rsa.o
Manuel Pégourié-Gonnard660bbf22023-06-12 18:42:40 +02003180 not grep mbedtls_mpi_ library/bignum.o
Valerio Setti4e2f2442023-08-15 10:10:26 +02003181 not grep mbedtls_dhm_ library/dhm.o
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003182
3183 # Run the tests
3184 # -------------
3185
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003186 msg "test suites: full + accelerated $accel_text algs + USE_PSA - $removed_text - DHM - BIGNUM"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003187
Gilles Peskine21570cf2023-12-22 11:49:50 +01003188 make test
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003189
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003190 msg "ssl-opt: full + accelerated $accel_text algs + USE_PSA - $removed_text - BIGNUM"
Valerio Setti18535c32023-07-31 11:27:17 +02003191 tests/ssl-opt.sh
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003192}
3193
Valerio Setti4e2f2442023-08-15 10:10:26 +02003194# Common helper used by:
3195# - component_test_psa_crypto_config_reference_ecc_no_bignum
3196# - component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum
3197#
3198# The goal is to build and test a reference scenario (i.e. with builtin
3199# components) compared to the ones used in
3200# common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum() above.
3201#
3202# It is meant to be used in conjunction with
3203# common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum() for drivers'
3204# coverage analysis in "analyze_outcomes.py" script.
3205common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003206 test_target="$1"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003207
Valerio Setti5dfaca42023-09-05 08:48:51 +02003208 # This is an internal helper to simplify text message handling
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003209 if [ "$test_target" = "ECC_DH" ]; then
3210 accel_text="ECC/FFDH"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003211 else
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003212 accel_text="ECC"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003213 fi
3214
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003215 msg "build: full + non accelerated $accel_text algs + USE_PSA"
Valerio Setti4e2f2442023-08-15 10:10:26 +02003216
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003217 config_psa_crypto_config_accel_ecc_ffdh_no_bignum 0 "$test_target"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003218
Gilles Peskine21570cf2023-12-22 11:49:50 +01003219 make
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003220
Valerio Setti29c1b4d2023-07-27 10:08:45 +02003221 msg "test suites: full + non accelerated EC algs + USE_PSA"
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003222 make test
3223
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003224 msg "ssl-opt: full + non accelerated $accel_text algs + USE_PSA"
Valerio Setti18535c32023-07-31 11:27:17 +02003225 tests/ssl-opt.sh
Manuel Pégourié-Gonnardabd00d02023-06-12 17:51:33 +02003226}
3227
Valerio Setti4e2f2442023-08-15 10:10:26 +02003228component_test_psa_crypto_config_accel_ecc_no_bignum () {
3229 common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum "ECC"
3230}
3231
3232component_test_psa_crypto_config_reference_ecc_no_bignum () {
3233 common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum "ECC"
3234}
3235
3236component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum () {
3237 common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum "ECC_DH"
3238}
3239
3240component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum () {
3241 common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum "ECC_DH"
3242}
3243
Valerio Settiac6d35f2023-08-04 12:49:11 +02003244# Helper for setting common configurations between:
3245# - component_test_tfm_config_p256m_driver_accel_ec()
3246# - component_test_tfm_config()
Valerio Setti52ba0e32023-08-04 12:43:03 +02003247common_tfm_config () {
3248 # Enable TF-M config
Yanray Wang70505042023-09-21 17:11:40 +08003249 cp configs/config-tfm.h "$CONFIG_H"
3250 echo "#undef MBEDTLS_PSA_CRYPTO_CONFIG_FILE" >> "$CONFIG_H"
3251 cp configs/ext/crypto_config_profile_medium.h "$CRYPTO_CONFIG_H"
Valerio Settic5c4bd22023-08-03 14:28:20 +02003252
Yanray Wang73bb2312023-09-25 11:21:15 +08003253 # Other config adjustment to make the tests pass.
3254 # This should probably be adopted upstream.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003255 #
Manuel Pégourié-Gonnard96839e72023-08-08 13:01:29 +02003256 # - USE_PSA_CRYPTO for PK_HAVE_ECC_KEYS
3257 echo "#define MBEDTLS_USE_PSA_CRYPTO" >> "$CONFIG_H"
Valerio Setti52ba0e32023-08-04 12:43:03 +02003258
Yanray Wang73bb2312023-09-25 11:21:15 +08003259 # Config adjustment for better test coverage in our environment.
3260 # This is not needed just to build and pass tests.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003261 #
3262 # Enable filesystem I/O for the benefit of PK parse/write tests.
3263 echo "#define MBEDTLS_FS_IO" >> "$CONFIG_H"
3264}
3265
Valerio Settiac6d35f2023-08-04 12:49:11 +02003266# Keep this in sync with component_test_tfm_config() as they are both meant
3267# to be used in analyze_outcomes.py for driver's coverage analysis.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003268component_test_tfm_config_p256m_driver_accel_ec () {
3269 msg "build: TF-M config + p256m driver + accel ECDH(E)/ECDSA"
3270
3271 common_tfm_config
Valerio Settic5c4bd22023-08-03 14:28:20 +02003272
Dave Rodgman897bb772023-11-15 16:34:20 +00003273 # Build crypto library
Dave Rodgman17127e92023-12-14 16:42:48 +00003274 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -I../tests/include/spe" LDFLAGS="$ASAN_CFLAGS"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003275
Manuel Pégourié-Gonnardf8930e22023-06-13 09:51:32 +02003276 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3277 not grep mbedtls_ecdsa_ library/ecdsa.o
Valerio Settib7e95442023-03-21 11:52:33 +01003278 not grep mbedtls_ecdh_ library/ecdh.o
3279 not grep mbedtls_ecjpake_ library/ecjpake.o
3280 # Also ensure that ECP, RSA, DHM or BIGNUM modules were not re-enabled
3281 not grep mbedtls_ecp_ library/ecp.o
3282 not grep mbedtls_rsa_ library/rsa.o
Valerio Settie4758aa2023-03-24 16:51:17 +01003283 not grep mbedtls_dhm_ library/dhm.o
Valerio Settiee97a1e2023-03-27 12:44:15 +02003284 not grep mbedtls_mpi_ library/bignum.o
Dave Rodgman897bb772023-11-15 16:34:20 +00003285 # Check that p256m was built
Dave Rodgmanbe5489a2023-11-27 10:30:03 +00003286 grep -q p256_ecdsa_ library/libmbedcrypto.a
Valerio Settib7e95442023-03-21 11:52:33 +01003287
Valerio Setti5e18b902023-12-04 12:07:30 +01003288 # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration
3289 # files, so we want to ensure that it has not be re-enabled accidentally.
3290 not grep mbedtls_cipher library/cipher.o
3291
Valerio Settib7e95442023-03-21 11:52:33 +01003292 # Run the tests
Valerio Setti52ba0e32023-08-04 12:43:03 +02003293 msg "test: TF-M config + p256m driver + accel ECDH(E)/ECDSA"
Valerio Settib7e95442023-03-21 11:52:33 +01003294 make test
Valerio Settie4758aa2023-03-24 16:51:17 +01003295}
Valerio Settiee97a1e2023-03-27 12:44:15 +02003296
Valerio Settiac6d35f2023-08-04 12:49:11 +02003297# Keep this in sync with component_test_tfm_config_p256m_driver_accel_ec() as
3298# they are both meant to be used in analyze_outcomes.py for driver's coverage
3299# analysis.
Valerio Setti52ba0e32023-08-04 12:43:03 +02003300component_test_tfm_config() {
3301 common_tfm_config
Valerio Settiee97a1e2023-03-27 12:44:15 +02003302
Dave Rodgman897bb772023-11-15 16:34:20 +00003303 # Disable P256M driver, which is on by default, so that analyze_outcomes
3304 # can compare this test with test_tfm_config_p256m_driver_accel_ec
3305 echo "#undef MBEDTLS_PSA_P256M_DRIVER_ENABLED" >> "$CONFIG_H"
3306
Valerio Setti52ba0e32023-08-04 12:43:03 +02003307 msg "build: TF-M config"
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02003308 make CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' tests
Valerio Setti52ba0e32023-08-04 12:43:03 +02003309
Dave Rodgman897bb772023-11-15 16:34:20 +00003310 # Check that p256m was not built
Dave Rodgmanbe5489a2023-11-27 10:30:03 +00003311 not grep p256_ecdsa_ library/libmbedcrypto.a
Dave Rodgman897bb772023-11-15 16:34:20 +00003312
Valerio Setti5e18b902023-12-04 12:07:30 +01003313 # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration
3314 # files, so we want to ensure that it has not be re-enabled accidentally.
3315 not grep mbedtls_cipher library/cipher.o
3316
Valerio Setti52ba0e32023-08-04 12:43:03 +02003317 msg "test: TF-M config"
3318 make test
Valerio Settic5c4bd22023-08-03 14:28:20 +02003319}
3320
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003321# Common helper for component_full_without_ecdhe_ecdsa() and
3322# component_full_without_ecdhe_ecdsa_and_tls13() which:
3323# - starts from the "full" configuration minus the list of symbols passed in
3324# as 1st parameter
3325# - build
3326# - test only TLS (i.e. test_suite_tls and ssl-opt)
3327build_full_minus_something_and_test_tls () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003328 symbols_to_disable="$1"
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003329
3330 msg "build: full minus something, test TLS"
3331
3332 scripts/config.py full
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003333 for sym in $symbols_to_disable; do
3334 echo "Disabling $sym"
3335 scripts/config.py unset $sym
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003336 done
Valerio Settie4758aa2023-03-24 16:51:17 +01003337
Gilles Peskine21570cf2023-12-22 11:49:50 +01003338 make
Valerio Settiee97a1e2023-03-27 12:44:15 +02003339
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003340 msg "test: full minus something, test TLS"
3341 ( cd tests; ./test_suite_ssl )
Valerio Settib7e95442023-03-21 11:52:33 +01003342
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003343 msg "ssl-opt: full minus something, test TLS"
Valerio Settib7e95442023-03-21 11:52:33 +01003344 tests/ssl-opt.sh
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003345}
Valerio Setti1f1420d2023-03-28 10:35:45 +02003346
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003347component_full_without_ecdhe_ecdsa () {
3348 build_full_minus_something_and_test_tls "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED"
Valerio Settib7e95442023-03-21 11:52:33 +01003349}
3350
Valerio Setti5a57e2a2023-08-02 11:30:50 +02003351component_full_without_ecdhe_ecdsa_and_tls13 () {
3352 build_full_minus_something_and_test_tls "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
3353 MBEDTLS_SSL_PROTO_TLS1_3"
Valerio Settie4758aa2023-03-24 16:51:17 +01003354}
3355
Valerio Setti249b18a2023-06-20 12:08:30 +02003356# This is an helper used by:
3357# - component_test_psa_ecc_key_pair_no_derive
3358# - component_test_psa_ecc_key_pair_no_generate
3359# The goal is to test with all PSA_WANT_KEY_TYPE_xxx_KEY_PAIR_yyy symbols
3360# enabled, but one. Input arguments are as follows:
3361# - $1 is the key type under test, i.e. ECC/RSA/DH
3362# - $2 is the key option to be unset (i.e. generate, derive, etc)
Valerio Settia9836552023-06-22 11:22:23 +02003363build_and_test_psa_want_key_pair_partial() {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003364 key_type=$1
3365 unset_option=$2
3366 disabled_psa_want="PSA_WANT_KEY_TYPE_${key_type}_KEY_PAIR_${unset_option}"
Valerio Setti249b18a2023-06-20 12:08:30 +02003367
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003368 msg "build: full - MBEDTLS_USE_PSA_CRYPTO - ${disabled_psa_want}"
Valerio Setti249b18a2023-06-20 12:08:30 +02003369 scripts/config.py full
Valerio Setti249b18a2023-06-20 12:08:30 +02003370 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
3371 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
3372
3373 # All the PSA_WANT_KEY_TYPE_xxx_KEY_PAIR_yyy are enabled by default in
3374 # crypto_config.h so we just disable the one we don't want.
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003375 scripts/config.py -f "$CRYPTO_CONFIG_H" unset "$disabled_psa_want"
Valerio Setti249b18a2023-06-20 12:08:30 +02003376
Gilles Peskine21570cf2023-12-22 11:49:50 +01003377 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Valerio Setti249b18a2023-06-20 12:08:30 +02003378
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003379 msg "test: full - MBEDTLS_USE_PSA_CRYPTO - ${disabled_psa_want}"
Valerio Setti249b18a2023-06-20 12:08:30 +02003380 make test
3381}
3382
3383component_test_psa_ecc_key_pair_no_derive() {
Valerio Settia9836552023-06-22 11:22:23 +02003384 build_and_test_psa_want_key_pair_partial "ECC" "DERIVE"
Valerio Setti249b18a2023-06-20 12:08:30 +02003385}
3386
3387component_test_psa_ecc_key_pair_no_generate() {
Valerio Settia9836552023-06-22 11:22:23 +02003388 build_and_test_psa_want_key_pair_partial "ECC" "GENERATE"
Valerio Setti249b18a2023-06-20 12:08:30 +02003389}
3390
Pengyu Lve705f572023-12-06 16:38:15 +08003391config_psa_crypto_accel_rsa () {
3392 driver_only=$1
Ronald Cron403c15c2021-09-13 09:38:05 +02003393
Pengyu Lve705f572023-12-06 16:38:15 +08003394 # Start from crypto_full config (no X.509, no TLS)
3395 helper_libtestdriver1_adjust_config "crypto_full"
3396
3397 if [ "$driver_only" -eq 1 ]; then
3398 # Remove RSA support and its dependencies
3399 scripts/config.py unset MBEDTLS_RSA_C
3400 scripts/config.py unset MBEDTLS_PKCS1_V15
3401 scripts/config.py unset MBEDTLS_PKCS1_V21
3402
3403 # We need PEM parsing in the test library as well to support the import
3404 # of PEM encoded RSA keys.
3405 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_PEM_PARSE_C
3406 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_BASE64_C
3407 fi
3408}
3409
3410component_test_psa_crypto_config_accel_rsa_crypto () {
3411 msg "build: crypto_full with accelerated RSA"
3412
3413 loc_accel_list="ALG_RSA_OAEP ALG_RSA_PSS \
3414 ALG_RSA_PKCS1V15_CRYPT ALG_RSA_PKCS1V15_SIGN \
3415 KEY_TYPE_RSA_PUBLIC_KEY \
3416 KEY_TYPE_RSA_KEY_PAIR_BASIC \
3417 KEY_TYPE_RSA_KEY_PAIR_GENERATE \
3418 KEY_TYPE_RSA_KEY_PAIR_IMPORT \
3419 KEY_TYPE_RSA_KEY_PAIR_EXPORT"
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003420
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003421 # Configure
3422 # ---------
Ronald Cron403c15c2021-09-13 09:38:05 +02003423
Pengyu Lve705f572023-12-06 16:38:15 +08003424 config_psa_crypto_accel_rsa 1
Ronald Cron403c15c2021-09-13 09:38:05 +02003425
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003426 # Build
3427 # -----
3428
Pengyu Lve705f572023-12-06 16:38:15 +08003429 # These hashes are needed for unit tests.
Manuel Pégourié-Gonnarde47c53e2023-09-23 08:54:30 +02003430 loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
Pengyu Lve705f572023-12-06 16:38:15 +08003431 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512 ALG_MD5"
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003432 helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list"
Ronald Cron403c15c2021-09-13 09:38:05 +02003433
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003434 helper_libtestdriver1_make_main "$loc_accel_list"
Ronald Cron403c15c2021-09-13 09:38:05 +02003435
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003436 # Make sure this was not re-enabled by accident (additive config)
Pengyu Lv98a90c62023-12-07 17:23:25 +08003437 not grep mbedtls_rsa library/rsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02003438
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003439 # Run the tests
3440 # -------------
3441
Pengyu Lve705f572023-12-06 16:38:15 +08003442 msg "test: crypto_full with accelerated RSA"
Gilles Peskine21570cf2023-12-22 11:49:50 +01003443 make test
Pengyu Lve705f572023-12-06 16:38:15 +08003444}
3445
3446component_test_psa_crypto_config_reference_rsa_crypto () {
3447 msg "build: crypto_full with non-accelerated RSA"
3448
3449 # Configure
3450 # ---------
3451 config_psa_crypto_accel_rsa 0
3452
3453 # Build
3454 # -----
Gilles Peskine21570cf2023-12-22 11:49:50 +01003455 make
Pengyu Lve705f572023-12-06 16:38:15 +08003456
3457 # Run the tests
3458 # -------------
3459 msg "test: crypto_full with non-accelerated RSA"
Ronald Cron403c15c2021-09-13 09:38:05 +02003460 make test
3461}
3462
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003463# This is a temporary test to verify that full RSA support is present even when
Valerio Setti01cc88a2023-06-15 11:53:08 +02003464# only one single new symbols (PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) is defined.
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003465component_test_new_psa_want_key_pair_symbol() {
Valerio Setti01cc88a2023-06-15 11:53:08 +02003466 msg "Build: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC"
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003467
Valerio Setti4590bc22023-06-13 15:39:23 +02003468 # Create a temporary output file unless there is already one set
3469 if [ "$MBEDTLS_TEST_OUTCOME_FILE" ]; then
3470 REMOVE_OUTCOME_ON_EXIT="no"
3471 else
3472 REMOVE_OUTCOME_ON_EXIT="yes"
3473 MBEDTLS_TEST_OUTCOME_FILE="$PWD/out.csv"
3474 export MBEDTLS_TEST_OUTCOME_FILE
3475 fi
3476
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003477 # Start from crypto configuration
3478 scripts/config.py crypto
3479
3480 # Remove RSA support and its dependencies
3481 scripts/config.py unset MBEDTLS_PKCS1_V15
3482 scripts/config.py unset MBEDTLS_PKCS1_V21
3483 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3484 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3485 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3486 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
3487 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
3488 scripts/config.py unset MBEDTLS_RSA_C
3489 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3490
3491 # Enable PSA support
3492 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
3493
Valerio Setti01cc88a2023-06-15 11:53:08 +02003494 # Keep only PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC enabled in order to ensure
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003495 # that proper translations is done in crypto_legacy.h.
Ronald Cron6b49b552023-07-20 09:57:54 +02003496 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT
3497 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT
3498 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003499
3500 make
3501
Valerio Setti01cc88a2023-06-15 11:53:08 +02003502 msg "Test: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC"
Valerio Setti4590bc22023-06-13 15:39:23 +02003503 make test
3504
3505 # Parse only 1 relevant line from the outcome file, i.e. a test which is
3506 # performing RSA signature.
3507 msg "Verify that 'RSA PKCS1 Sign #1 (SHA512, 1536 bits RSA)' is PASS"
3508 cat $MBEDTLS_TEST_OUTCOME_FILE | grep 'RSA PKCS1 Sign #1 (SHA512, 1536 bits RSA)' | grep -q "PASS"
3509
3510 if [ "$REMOVE_OUTCOME_ON_EXIT" == "yes" ]; then
3511 rm $MBEDTLS_TEST_OUTCOME_FILE
3512 fi
Valerio Settia1a0b1b2023-06-13 14:19:03 +02003513}
3514
Ronald Cronb2312452021-05-08 14:32:59 +02003515component_test_psa_crypto_config_accel_hash () {
3516 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
3517
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003518 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \
3519 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3520 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Ronald Cronb2312452021-05-08 14:32:59 +02003521
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003522 # Configure
3523 # ---------
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003524
3525 # Start from default config (no TLS 1.3, no USE_PSA)
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003526 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003527
3528 # Disable the things that are being accelerated
Ronald Cronb2312452021-05-08 14:32:59 +02003529 scripts/config.py unset MBEDTLS_MD5_C
3530 scripts/config.py unset MBEDTLS_RIPEMD160_C
3531 scripts/config.py unset MBEDTLS_SHA1_C
Manuel Pégourié-Gonnardc584c272023-03-22 00:32:04 +01003532 scripts/config.py unset MBEDTLS_SHA224_C
3533 scripts/config.py unset MBEDTLS_SHA256_C
Ronald Cronb2312452021-05-08 14:32:59 +02003534 scripts/config.py unset MBEDTLS_SHA384_C
3535 scripts/config.py unset MBEDTLS_SHA512_C
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003536 scripts/config.py unset MBEDTLS_SHA3_C
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003537
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003538 # Build
3539 # -----
3540
3541 helper_libtestdriver1_make_drivers "$loc_accel_list"
3542
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003543 helper_libtestdriver1_make_main "$loc_accel_list"
Ronald Cronb2312452021-05-08 14:32:59 +02003544
Manuel Pégourié-Gonnardc584c272023-03-22 00:32:04 +01003545 # There's a risk of something getting re-enabled via config_psa.h;
3546 # make sure it did not happen. Note: it's OK for MD_C to be enabled.
3547 not grep mbedtls_md5 library/md5.o
3548 not grep mbedtls_sha1 library/sha1.o
3549 not grep mbedtls_sha256 library/sha256.o
3550 not grep mbedtls_sha512 library/sha512.o
3551 not grep mbedtls_ripemd160 library/ripemd160.o
Ronald Cronb2312452021-05-08 14:32:59 +02003552
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003553 # Run the tests
3554 # -------------
3555
Ronald Cronb2312452021-05-08 14:32:59 +02003556 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
3557 make test
3558}
3559
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003560component_test_psa_crypto_config_accel_hash_keep_builtins () {
3561 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated+builtin hash"
3562 # This component ensures that all the test cases for
3563 # md_psa_dynamic_dispatch with legacy+driver in test_suite_md are run.
3564
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003565 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \
3566 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3567 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003568
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003569 # Start from default config (no TLS 1.3, no USE_PSA)
3570 helper_libtestdriver1_adjust_config "default"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003571
Manuel Pégourié-Gonnard31639e42023-05-25 10:07:31 +02003572 helper_libtestdriver1_make_drivers "$loc_accel_list"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003573
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003574 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard9b146392023-03-09 15:56:14 +01003575
3576 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated+builtin hash"
3577 make test
3578}
3579
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003580# Auxiliary function to build config for hashes with and without drivers
3581config_psa_crypto_hash_use_psa () {
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003582 driver_only="$1"
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003583 # start with config full for maximum coverage (also enables USE_PSA)
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003584 helper_libtestdriver1_adjust_config "full"
Manuel Pégourié-Gonnard6be64f72023-09-28 09:08:04 +02003585 if [ "$driver_only" -eq 1 ]; then
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003586 # disable the built-in implementation of hashes
3587 scripts/config.py unset MBEDTLS_MD5_C
3588 scripts/config.py unset MBEDTLS_RIPEMD160_C
3589 scripts/config.py unset MBEDTLS_SHA1_C
3590 scripts/config.py unset MBEDTLS_SHA224_C
3591 scripts/config.py unset MBEDTLS_SHA256_C # see external RNG below
Dave Rodgman5b89c552023-10-10 14:59:02 +01003592 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003593 scripts/config.py unset MBEDTLS_SHA384_C
3594 scripts/config.py unset MBEDTLS_SHA512_C
3595 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003596 scripts/config.py unset MBEDTLS_SHA3_C
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003597 fi
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003598}
3599
Przemek Stekiel120ed8f2022-10-27 10:29:15 +02003600# Note that component_test_psa_crypto_config_reference_hash_use_psa
3601# is related to this component and both components need to be kept in sync.
3602# For details please see comments for component_test_psa_crypto_config_reference_hash_use_psa.
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003603component_test_psa_crypto_config_accel_hash_use_psa () {
Gilles Peskine14302ed2023-07-19 19:30:04 +02003604 msg "test: full with accelerated hashes"
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003605
Manuel Pégourié-Gonnardcc21ad42023-09-22 09:46:14 +02003606 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \
3607 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \
3608 ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512"
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003609
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003610 # Configure
3611 # ---------
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003612
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003613 config_psa_crypto_hash_use_psa 1
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003614
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003615 # Build
3616 # -----
3617
3618 helper_libtestdriver1_make_drivers "$loc_accel_list"
3619
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003620 helper_libtestdriver1_make_main "$loc_accel_list"
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003621
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003622 # There's a risk of something getting re-enabled via config_psa.h;
Manuel Pégourié-Gonnard49e67f82023-03-16 11:39:20 +01003623 # make sure it did not happen. Note: it's OK for MD_C to be enabled.
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003624 not grep mbedtls_md5 library/md5.o
3625 not grep mbedtls_sha1 library/sha1.o
Manuel Pégourié-Gonnard7b0825d2022-07-11 11:06:09 +02003626 not grep mbedtls_sha256 library/sha256.o
Manuel Pégourié-Gonnardf0f63bc2022-07-08 19:12:33 +02003627 not grep mbedtls_sha512 library/sha512.o
3628 not grep mbedtls_ripemd160 library/ripemd160.o
3629
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003630 # Run the tests
3631 # -------------
3632
Gilles Peskine14302ed2023-07-19 19:30:04 +02003633 msg "test: full with accelerated hashes"
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003634 make test
Andrzej Kurek07e35702022-09-05 15:39:23 -04003635
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01003636 # This is mostly useful so that we can later compare outcome files with
3637 # the reference config in analyze_outcomes.py, to check that the
3638 # dependency declarations in ssl-opt.sh and in TLS code are correct.
Gilles Peskine14302ed2023-07-19 19:30:04 +02003639 msg "test: ssl-opt.sh, full with accelerated hashes"
Przemek Stekiel5f6f32a2022-10-27 08:24:43 +02003640 tests/ssl-opt.sh
Andrzej Kurek07e35702022-09-05 15:39:23 -04003641
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01003642 # This is to make sure all ciphersuites are exercised, but we don't need
3643 # interop testing (besides, we already got some from ssl-opt.sh).
Gilles Peskine14302ed2023-07-19 19:30:04 +02003644 msg "test: compat.sh, full with accelerated hashes"
Manuel Pégourié-Gonnard30d94662022-11-29 12:37:53 +01003645 tests/compat.sh -p mbedTLS -V YES
Manuel Pégourié-Gonnard525add62022-07-06 13:06:57 +02003646}
3647
Przemek Stekiel120ed8f2022-10-27 10:29:15 +02003648# This component provides reference configuration for test_psa_crypto_config_accel_hash_use_psa
3649# without accelerated hash. The outcome from both components are used by the analyze_outcomes.py
3650# script to find regression in test coverage when accelerated hash is used (tests and ssl-opt).
3651# Both components need to be kept in sync.
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02003652component_test_psa_crypto_config_reference_hash_use_psa() {
Gilles Peskine14302ed2023-07-19 19:30:04 +02003653 msg "test: full without accelerated hashes"
Przemek Stekielaa88e0b2022-11-15 13:21:14 +01003654
3655 config_psa_crypto_hash_use_psa 0
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02003656
Gilles Peskine21570cf2023-12-22 11:49:50 +01003657 make
Przemek Stekielab0451b2022-10-24 11:29:35 +02003658
Gilles Peskine14302ed2023-07-19 19:30:04 +02003659 msg "test: full without accelerated hashes"
Przemek Stekiel01df9dd2022-10-20 14:21:21 +02003660 make test
3661
Gilles Peskine14302ed2023-07-19 19:30:04 +02003662 msg "test: ssl-opt.sh, full without accelerated hashes"
Przemek Stekiel5f6f32a2022-10-27 08:24:43 +02003663 tests/ssl-opt.sh
Ronald Cron3a8714d2021-10-18 11:26:01 +02003664}
Manuel Pégourié-Gonnard97ab2a32022-07-06 10:46:57 +02003665
Valerio Setti9da01a72023-12-18 17:38:18 +01003666component_test_psa_crypto_config_accel_des () {
Valerio Settib9f4bfc2023-12-28 11:07:48 +01003667 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated DES"
Ronald Cron067de3b2021-03-11 11:49:03 +01003668
Valerio Setti9da01a72023-12-18 17:38:18 +01003669 # Albeit this components aims at accelerating DES which should only support
3670 # CBC and ECB modes, we need to accelerate more than that otherwise DES_C
3671 # would automatically be re-enabled by "config_adjust_legacy_from_psa.c"
Valerio Setti0244fbb2023-10-19 10:42:31 +02003672 loc_accel_list="ALG_ECB_NO_PADDING ALG_CBC_NO_PADDING ALG_CBC_PKCS7 \
3673 ALG_CTR ALG_CFB ALG_OFB ALG_XTS ALG_CMAC \
3674 KEY_TYPE_DES"
John Durkopd8959392020-09-20 23:09:17 -07003675
Valerio Setti9da01a72023-12-18 17:38:18 +01003676 # Note: we cannot accelerate all ciphers' key types otherwise we would also
3677 # have to either disable CCM/GCM or accelerate them, but that's out of scope
3678 # of this component. This limitation will be addressed by #8598.
3679
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003680 # Configure
3681 # ---------
Ronald Cron067de3b2021-03-11 11:49:03 +01003682
Valerio Setti9a427302023-10-17 11:40:42 +02003683 # Start from the full config
Valerio Settia797ce32023-10-03 15:16:38 +02003684 helper_libtestdriver1_adjust_config "full"
Ronald Cron067de3b2021-03-11 11:49:03 +01003685
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003686 # Disable the things that are being accelerated
Ronald Cron067de3b2021-03-11 11:49:03 +01003687 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
3688 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
3689 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
3690 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
3691 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
3692 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
3693 scripts/config.py unset MBEDTLS_DES_C
Yanray Wangaf5003a2023-10-11 11:57:10 +08003694 scripts/config.py unset MBEDTLS_CMAC_C
Ronald Cron067de3b2021-03-11 11:49:03 +01003695
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003696 # Build
3697 # -----
Gilles Peskine3587dfd2021-09-20 19:20:04 +02003698
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003699 helper_libtestdriver1_make_drivers "$loc_accel_list"
3700
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003701 helper_libtestdriver1_make_main "$loc_accel_list"
Gilles Peskine3587dfd2021-09-20 19:20:04 +02003702
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003703 # Make sure this was not re-enabled by accident (additive config)
Gilles Peskine3587dfd2021-09-20 19:20:04 +02003704 not grep mbedtls_des* library/des.o
Ronald Cron17b3afc2020-12-10 18:17:09 +01003705
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003706 # Run the tests
3707 # -------------
3708
Valerio Settib9f4bfc2023-12-28 11:07:48 +01003709 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated DES"
John Durkop4377bf72020-10-23 01:26:57 -07003710 make test
3711}
3712
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003713component_test_psa_crypto_config_accel_aead () {
3714 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD"
3715
Valerio Setti3f02bb72023-10-02 15:57:33 +02003716 loc_accel_list="ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 \
3717 KEY_TYPE_AES KEY_TYPE_CHACHA20 KEY_TYPE_ARIA KEY_TYPE_CAMELLIA"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003718
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003719 # Configure
3720 # ---------
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003721
Valerio Setti3f02bb72023-10-02 15:57:33 +02003722 # Start from full config
3723 helper_libtestdriver1_adjust_config "full"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003724
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003725 # Disable things that are being accelerated
Przemek Stekielee1bb412022-10-11 11:52:25 +02003726 scripts/config.py unset MBEDTLS_GCM_C
3727 scripts/config.py unset MBEDTLS_CCM_C
3728 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003729
Valerio Settia50b89e2023-11-08 15:58:47 +01003730 # Disable CCM_STAR_NO_TAG because this re-enables CCM_C.
3731 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003732
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003733 # Build
3734 # -----
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003735
Manuel Pégourié-Gonnard8df87bf2023-06-12 17:09:38 +02003736 helper_libtestdriver1_make_drivers "$loc_accel_list"
3737
Manuel Pégourié-Gonnard27dd73f2023-05-25 10:39:23 +02003738 helper_libtestdriver1_make_main "$loc_accel_list"
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003739
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003740 # Make sure this was not re-enabled by accident (additive config)
Przemek Stekielee1bb412022-10-11 11:52:25 +02003741 not grep mbedtls_ccm library/ccm.o
3742 not grep mbedtls_gcm library/gcm.o
3743 not grep mbedtls_chachapoly library/chachapoly.o
3744
Manuel Pégourié-Gonnard239094d2023-05-31 12:51:50 +02003745 # Run the tests
3746 # -------------
3747
Przemek Stekiele290f2e2022-10-02 20:58:39 +02003748 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD"
3749 make test
3750}
3751
Valerio Settib680fc42023-10-13 09:29:37 +02003752# This is a common configuration function used in:
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003753# - component_test_psa_crypto_config_accel_cipher_aead_cmac
3754# - component_test_psa_crypto_config_reference_cipher_aead_cmac
3755common_psa_crypto_config_accel_cipher_aead_cmac() {
Pengyu Lv78657d02023-10-27 11:00:32 +08003756 # Start from the full config
3757 helper_libtestdriver1_adjust_config "full"
3758
Valerio Settib680fc42023-10-13 09:29:37 +02003759 scripts/config.py unset MBEDTLS_NIST_KW_C
3760}
3761
Valerio Settib6b301f2023-10-04 12:05:05 +02003762# The 2 following test components, i.e.
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003763# - component_test_psa_crypto_config_accel_cipher_aead_cmac
3764# - component_test_psa_crypto_config_reference_cipher_aead_cmac
Valerio Settib6b301f2023-10-04 12:05:05 +02003765# are meant to be used together in analyze_outcomes.py script in order to test
3766# driver's coverage for ciphers and AEADs.
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003767component_test_psa_crypto_config_accel_cipher_aead_cmac () {
3768 msg "build: full config with accelerated cipher inc. AEAD and CMAC"
Valerio Settib6b301f2023-10-04 12:05:05 +02003769
Valerio Settiad8b7f02023-10-25 12:39:50 +02003770 loc_accel_list="ALG_ECB_NO_PADDING ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB \
Valerio Setti51d5b192023-11-08 10:56:54 +01003771 ALG_OFB ALG_XTS ALG_STREAM_CIPHER ALG_CCM_STAR_NO_TAG \
Valerio Setti97454fd2023-10-25 12:27:12 +02003772 ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 ALG_CMAC \
Valerio Settib6b301f2023-10-04 12:05:05 +02003773 KEY_TYPE_DES KEY_TYPE_AES KEY_TYPE_ARIA KEY_TYPE_CHACHA20 KEY_TYPE_CAMELLIA"
3774
3775 # Configure
3776 # ---------
3777
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003778 common_psa_crypto_config_accel_cipher_aead_cmac
Valerio Settib6b301f2023-10-04 12:05:05 +02003779
3780 # Disable the things that are being accelerated
3781 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
3782 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
3783 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
3784 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
3785 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
3786 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
3787 scripts/config.py unset MBEDTLS_GCM_C
3788 scripts/config.py unset MBEDTLS_CCM_C
3789 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Valerio Setti97454fd2023-10-25 12:27:12 +02003790 scripts/config.py unset MBEDTLS_CMAC_C
Valerio Settib6b301f2023-10-04 12:05:05 +02003791 scripts/config.py unset MBEDTLS_DES_C
3792 scripts/config.py unset MBEDTLS_AES_C
3793 scripts/config.py unset MBEDTLS_ARIA_C
3794 scripts/config.py unset MBEDTLS_CHACHA20_C
3795 scripts/config.py unset MBEDTLS_CAMELLIA_C
3796
Valerio Settiec9b2582023-11-08 16:50:54 +01003797 # Disable CIPHER_C entirely as all ciphers/AEADs are accelerated and PSA
3798 # does not depend on it.
3799 scripts/config.py unset MBEDTLS_CIPHER_C
3800
Valerio Settib6b301f2023-10-04 12:05:05 +02003801 # Build
3802 # -----
3803
3804 helper_libtestdriver1_make_drivers "$loc_accel_list"
3805
3806 helper_libtestdriver1_make_main "$loc_accel_list"
3807
3808 # Make sure this was not re-enabled by accident (additive config)
Valerio Settiec9b2582023-11-08 16:50:54 +01003809 not grep mbedtls_cipher library/cipher.o
Valerio Setti58d2b1a2023-10-12 15:24:12 +02003810 not grep mbedtls_des library/des.o
3811 not grep mbedtls_aes library/aes.o
3812 not grep mbedtls_aria library/aria.o
3813 not grep mbedtls_camellia library/camellia.o
Valerio Settib6b301f2023-10-04 12:05:05 +02003814 not grep mbedtls_ccm library/ccm.o
3815 not grep mbedtls_gcm library/gcm.o
3816 not grep mbedtls_chachapoly library/chachapoly.o
3817 not grep mbedtls_cmac library/cmac.o
3818
3819 # Run the tests
3820 # -------------
3821
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003822 msg "test: full config with accelerated cipher inc. AEAD and CMAC"
Gilles Peskine21570cf2023-12-22 11:49:50 +01003823 make test
Valerio Settif9414552023-11-09 10:43:20 +01003824
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003825 msg "ssl-opt: full config with accelerated cipher inc. AEAD and CMAC"
Valerio Settif9414552023-11-09 10:43:20 +01003826 tests/ssl-opt.sh
Pengyu Lvf561ed82023-11-14 17:33:32 +08003827
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003828 msg "compat.sh: full config with accelerated cipher inc. AEAD and CMAC"
Pengyu Lvf561ed82023-11-14 17:33:32 +08003829 tests/compat.sh -V NO -p mbedTLS
Valerio Settib6b301f2023-10-04 12:05:05 +02003830}
3831
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003832component_test_psa_crypto_config_reference_cipher_aead_cmac () {
3833 msg "build: full config with non-accelerated cipher inc. AEAD and CMAC"
3834 common_psa_crypto_config_accel_cipher_aead_cmac
Valerio Settib6b301f2023-10-04 12:05:05 +02003835
Gilles Peskine21570cf2023-12-22 11:49:50 +01003836 make
Valerio Settif9414552023-11-09 10:43:20 +01003837
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003838 msg "test: full config with non-accelerated cipher inc. AEAD and CMAC"
Valerio Settib6b301f2023-10-04 12:05:05 +02003839 make test
Valerio Settif9414552023-11-09 10:43:20 +01003840
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003841 msg "ssl-opt: full config with non-accelerated cipher inc. AEAD and CMAC"
Valerio Settif9414552023-11-09 10:43:20 +01003842 tests/ssl-opt.sh
Pengyu Lvf561ed82023-11-14 17:33:32 +08003843
Manuel Pégourié-Gonnard7f48d5e2024-01-08 10:55:09 +01003844 msg "compat.sh: full config with non-accelerated cipher inc. AEAD and CMAC"
Pengyu Lvf561ed82023-11-14 17:33:32 +08003845 tests/compat.sh -V NO -p mbedTLS
Valerio Settib6b301f2023-10-04 12:05:05 +02003846}
3847
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003848common_block_cipher_dispatch() {
3849 TEST_WITH_DRIVER="$1"
3850
3851 # Start from the full config
3852 helper_libtestdriver1_adjust_config "full"
3853
3854 if [ "$TEST_WITH_DRIVER" -eq 1 ]; then
3855 # Disable key types that are accelerated (there is no legacy equivalent
3856 # symbol for ECB)
3857 scripts/config.py unset MBEDTLS_AES_C
3858 scripts/config.py unset MBEDTLS_ARIA_C
3859 scripts/config.py unset MBEDTLS_CAMELLIA_C
3860 fi
3861
Valerio Setti8c8b4da2024-01-02 11:44:30 +01003862 # Disable cipher's modes that, when not accelerated, cause
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003863 # legacy key types to be re-enabled in "config_adjust_legacy_from_psa.h".
Valerio Setticd21d4e2023-12-28 16:00:55 +01003864 # Keep this also in the reference component in order to skip the same tests
3865 # that were skipped in the accelerated one.
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003866 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR
3867 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB
3868 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB
3869 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
3870 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
3871 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CMAC
3872 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003873
3874 # Disable direct dependency on AES_C
3875 scripts/config.py unset MBEDTLS_NIST_KW_C
3876
3877 # Prevent the cipher module from using deprecated PSA path. The reason is
3878 # that otherwise there will be tests relying on "aes_info" (defined in
3879 # "cipher_wrap.c") whose functions are not available when AES_C is
3880 # not defined. ARIA and Camellia are not a problem in this case because
3881 # the PSA path is not tested for these key types.
3882 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
3883}
3884
Valerio Settif8e6cba2023-12-12 11:53:39 +01003885component_test_full_block_cipher_psa_dispatch () {
3886 msg "build: full + PSA dispatch in block_cipher"
3887
3888 loc_accel_list="ALG_ECB_NO_PADDING \
3889 KEY_TYPE_AES KEY_TYPE_ARIA KEY_TYPE_CAMELLIA"
3890
3891 # Configure
3892 # ---------
3893
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003894 common_block_cipher_dispatch 1
Valerio Settif8e6cba2023-12-12 11:53:39 +01003895
Valerio Settif8e6cba2023-12-12 11:53:39 +01003896 # Build
3897 # -----
3898
3899 helper_libtestdriver1_make_drivers "$loc_accel_list"
3900
3901 helper_libtestdriver1_make_main "$loc_accel_list"
3902
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003903 # Make sure disabled components were not re-enabled by accident (additive
3904 # config)
3905 not grep mbedtls_aes_ library/aes.o
3906 not grep mbedtls_aria_ library/aria.o
3907 not grep mbedtls_camellia_ library/camellia.o
3908
Valerio Settif8e6cba2023-12-12 11:53:39 +01003909 # Run the tests
3910 # -------------
3911
3912 msg "test: full + PSA dispatch in block_cipher"
3913 make test
3914}
3915
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003916# This is the reference component of component_test_full_block_cipher_psa_dispatch
3917component_test_full_block_cipher_legacy_dispatch () {
3918 msg "build: full + legacy dispatch in block_cipher"
3919
3920 common_block_cipher_dispatch 0
3921
Valerio Setti4a8ef7c2023-12-19 11:16:27 +01003922 make
3923
3924 msg "test: full + legacy dispatch in block_cipher"
3925 make test
3926}
3927
Gilles Peskine36dea152023-07-20 22:19:45 +02003928component_test_aead_chachapoly_disabled() {
3929 msg "build: full minus CHACHAPOLY"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02003930 scripts/config.py full
3931 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
Ronald Cron6b49b552023-07-20 09:57:54 +02003932 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305
Gilles Peskine21570cf2023-12-22 11:49:50 +01003933 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02003934
Gilles Peskine36dea152023-07-20 22:19:45 +02003935 msg "test: full minus CHACHAPOLY"
3936 make test
3937}
3938
3939component_test_aead_only_ccm() {
3940 msg "build: full minus CHACHAPOLY and GCM"
3941 scripts/config.py full
3942 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
3943 scripts/config.py unset MBEDTLS_GCM_C
3944 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305
3945 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_GCM
Gilles Peskine21570cf2023-12-22 11:49:50 +01003946 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine36dea152023-07-20 22:19:45 +02003947
3948 msg "test: full minus CHACHAPOLY and GCM"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02003949 make test
3950}
3951
Ronald Crone501d0e2023-07-10 08:31:19 +02003952component_test_ccm_aes_sha256() {
3953 msg "build: CCM + AES + SHA256 configuration"
3954
Ronald Cron7612d8c2023-07-20 10:03:54 +02003955 cp "$CONFIG_TEST_DRIVER_H" "$CONFIG_H"
Ronald Cron6b49b552023-07-20 09:57:54 +02003956 cp configs/crypto-config-ccm-aes-sha256.h "$CRYPTO_CONFIG_H"
Ronald Crone501d0e2023-07-10 08:31:19 +02003957
Dave Rodgmanea03ef92023-12-19 12:19:59 +00003958 make
Ronald Crone501d0e2023-07-10 08:31:19 +02003959
3960 msg "test: CCM + AES + SHA256 configuration"
3961 make test
3962}
3963
John Durkopd0321952020-10-29 21:37:36 -07003964# This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08003965component_build_psa_accel_alg_ecdh() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02003966 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C"
John Durkopd0321952020-10-29 21:37:36 -07003967 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07003968 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01003969 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003970 scripts/config.py unset MBEDTLS_ECDH_C
3971 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3972 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
3973 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
3974 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3975 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3976 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01003977 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07003978}
3979
3980# This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08003981component_build_psa_accel_alg_hmac() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02003982 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_HMAC"
John Durkopd0321952020-10-29 21:37:36 -07003983 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07003984 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01003985 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003986 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01003987 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07003988}
3989
3990# This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08003991component_build_psa_accel_alg_hkdf() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02003992 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C"
John Durkopd0321952020-10-29 21:37:36 -07003993 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07003994 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01003995 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003996 scripts/config.py unset MBEDTLS_HKDF_C
Ronald Cron6f135e12021-12-08 16:57:54 +01003997 # Make sure to unset TLS1_3 since it requires HKDF_C and will not build properly without it.
3998 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07003999 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004000 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07004001}
4002
John Durkop1b7ee052020-11-27 08:51:22 -08004003# This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test.
4004component_build_psa_accel_alg_md5() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004005 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_MD5 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004006 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004007 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004008 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004009 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4010 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4011 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4012 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4013 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4014 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4015 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004016 scripts/config.py unset MBEDTLS_LMS_C
4017 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004018 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004019 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004020}
4021
4022# This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test.
4023component_build_psa_accel_alg_ripemd160() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004024 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RIPEMD160 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004025 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004026 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004027 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004028 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4029 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4030 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4031 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4032 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4033 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4034 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004035 scripts/config.py unset MBEDTLS_LMS_C
4036 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004037 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004038 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004039}
4040
4041# This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test.
4042component_build_psa_accel_alg_sha1() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004043 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_1 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004044 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004045 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004046 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004047 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4048 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4049 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4050 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4051 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4052 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4053 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004054 scripts/config.py unset MBEDTLS_LMS_C
4055 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004056 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004057 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004058}
4059
4060# This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test.
4061component_build_psa_accel_alg_sha224() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004062 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_224 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004063 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004064 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004065 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004066 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4067 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4068 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4069 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4070 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4071 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
John Durkop1b7ee052020-11-27 08:51:22 -08004072 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004073 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004074}
4075
4076# This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test.
4077component_build_psa_accel_alg_sha256() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004078 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_256 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004079 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004080 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004081 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004082 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4083 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4084 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4085 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4086 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4087 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
John Durkop1b7ee052020-11-27 08:51:22 -08004088 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004089 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004090}
4091
4092# This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test.
4093component_build_psa_accel_alg_sha384() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004094 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_384 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004095 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004096 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004097 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004098 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4099 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4100 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4101 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4102 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4103 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004104 scripts/config.py unset MBEDTLS_LMS_C
4105 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004106 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004107 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004108}
4109
4110# This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test.
4111component_build_psa_accel_alg_sha512() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004112 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_512 - other hashes"
John Durkop1b7ee052020-11-27 08:51:22 -08004113 scripts/config.py full
John Durkop1b7ee052020-11-27 08:51:22 -08004114 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004115 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004116 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4117 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4118 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4119 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4120 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4121 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4122 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
Gilles Peskinefa652372022-10-13 22:05:38 +02004123 scripts/config.py unset MBEDTLS_LMS_C
4124 scripts/config.py unset MBEDTLS_LMS_PRIVATE
John Durkop1b7ee052020-11-27 08:51:22 -08004125 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004126 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkop1b7ee052020-11-27 08:51:22 -08004127}
4128
John Durkopd0321952020-10-29 21:37:36 -07004129# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004130component_build_psa_accel_alg_rsa_pkcs1v15_crypt() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004131 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopd0321952020-10-29 21:37:36 -07004132 scripts/config.py full
John Durkopd0321952020-10-29 21:37:36 -07004133 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004134 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004135 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
4136 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4137 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4138 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
John Durkopd0321952020-10-29 21:37:36 -07004139 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004140 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004141}
4142
4143# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004144component_build_psa_accel_alg_rsa_pkcs1v15_sign() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004145 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopbd069d32020-10-31 22:14:03 -07004146 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004147 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004148 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004149 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
4150 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4151 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4152 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07004153 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004154 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004155}
4156
4157# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004158component_build_psa_accel_alg_rsa_oaep() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004159 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopbd069d32020-10-31 22:14:03 -07004160 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004161 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004162 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004163 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_OAEP 1
4164 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4165 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4166 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07004167 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004168 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004169}
4170
4171# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004172component_build_psa_accel_alg_rsa_pss() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004173 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopbd069d32020-10-31 22:14:03 -07004174 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004175 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004176 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004177 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4178 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4179 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4180 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
John Durkopbd069d32020-10-31 22:14:03 -07004181 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004182 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004183}
4184
4185# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004186component_build_psa_accel_key_type_rsa_key_pair() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004187 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_xxx + PSA_WANT_ALG_RSA_PSS"
John Durkopbd069d32020-10-31 22:14:03 -07004188 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004189 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004190 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004191 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4192 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
4193 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
4194 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
4195 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
John Durkopbd069d32020-10-31 22:14:03 -07004196 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004197 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopbd069d32020-10-31 22:14:03 -07004198}
4199
4200# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08004201component_build_psa_accel_key_type_rsa_public_key() {
Gilles Peskineeb41e0d2023-07-19 19:36:55 +02004202 msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS"
John Durkopbd069d32020-10-31 22:14:03 -07004203 scripts/config.py full
John Durkopbd069d32020-10-31 22:14:03 -07004204 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01004205 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron6b49b552023-07-20 09:57:54 +02004206 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4207 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
John Durkopbd069d32020-10-31 22:14:03 -07004208 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
Gilles Peskine21570cf2023-12-22 11:49:50 +01004209 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07004210}
4211
Dave Rodgmanc164c072023-06-28 09:43:23 +01004212
Dave Rodgman904c5892023-06-28 17:36:02 +01004213support_build_tfm_armcc () {
Yanray Wang799bd842023-11-10 12:21:35 +08004214 support_build_armcc
Dave Rodgmanc164c072023-06-28 09:43:23 +01004215}
4216
Dave Rodgman904c5892023-06-28 17:36:02 +01004217component_build_tfm_armcc() {
4218 # test the TF-M configuration can build cleanly with various warning flags enabled
Dave Rodgman82d7a872023-11-28 10:06:33 +00004219 cp configs/config-tfm.h "$CONFIG_H"
Dave Rodgmanc164c072023-06-28 09:43:23 +01004220
Dave Rodgman88651c42023-06-29 12:35:51 +01004221 msg "build: TF-M config, armclang armv7-m thumb2"
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02004222 armc6_build_test "--target=arm-arm-none-eabi -march=armv7-m -mthumb -Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused -I../tests/include/spe"
Dave Rodgmanfb374e62023-06-29 11:58:16 +01004223}
4224
4225component_build_tfm() {
Gilles Peskineeaa1c562023-09-06 16:23:13 +02004226 # Check that the TF-M configuration can build cleanly with various
4227 # warning flags enabled. We don't build or run tests, since the
4228 # TF-M configuration needs a TF-M platform. A tweaked version of
4229 # the configuration that works on mainstream platforms is in
4230 # configs/config-tfm.h, tested via test-ref-configs.pl.
Dave Rodgman82d7a872023-11-28 10:06:33 +00004231 cp configs/config-tfm.h "$CONFIG_H"
Dave Rodgmanfb374e62023-06-29 11:58:16 +01004232
Dave Rodgman88651c42023-06-29 12:35:51 +01004233 msg "build: TF-M config, clang, armv7-m thumb2"
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02004234 make lib CC="clang" CFLAGS="--target=arm-linux-gnueabihf -march=armv7-m -mthumb -Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused -I../tests/include/spe"
Dave Rodgmanc164c072023-06-28 09:43:23 +01004235
Dave Rodgman904c5892023-06-28 17:36:02 +01004236 msg "build: TF-M config, gcc native build"
4237 make clean
Gilles Peskinec1bedfe2023-09-27 15:53:08 +02004238 make lib CC="gcc" CFLAGS="-Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wformat-signedness -Wlogical-op -I../tests/include/spe"
Dave Rodgmanc164c072023-06-28 09:43:23 +01004239}
4240
Dave Rodgman54ada8b2023-10-04 11:55:25 +01004241# Test that the given .o file builds with all (valid) combinations of the given options.
4242#
4243# Syntax: build_test_config_combos FILE VALIDATOR_FUNCTION OPT1 OPT2 ...
4244#
4245# The validator function is the name of a function to validate the combination of options.
4246# It may be "" if all combinations are valid.
4247# It receives a string containing a combination of options, as passed to the compiler,
Dave Rodgmanf3803a12023-10-16 13:47:15 +01004248# e.g. "-DOPT1 -DOPT2 ...". It must return 0 iff the combination is valid, non-zero if invalid.
Dave Rodgman920343a2023-10-01 18:41:09 +01004249build_test_config_combos() {
Dave Rodgman28e38d82023-10-04 11:50:30 +01004250 file=$1
Dave Rodgman920343a2023-10-01 18:41:09 +01004251 shift
Dave Rodgman28e38d82023-10-04 11:50:30 +01004252 validate_options=$1
Dave Rodgman920343a2023-10-01 18:41:09 +01004253 shift
Dave Rodgman28e38d82023-10-04 11:50:30 +01004254 options=("$@")
Dave Rodgman0f0f7692023-06-29 12:10:45 +01004255
Dave Rodgman42436102023-10-03 15:47:05 +01004256 # clear all of the options so that they can be overridden on the clang commandline
Dave Rodgman28e38d82023-10-04 11:50:30 +01004257 for opt in "${options[@]}"; do
4258 ./scripts/config.py unset ${opt}
Dave Rodgman42436102023-10-03 15:47:05 +01004259 done
4260
4261 # enter the directory containing the target file & strip the dir from the filename
Dave Rodgman28e38d82023-10-04 11:50:30 +01004262 cd $(dirname ${file})
4263 file=$(basename ${file})
Dave Rodgman42436102023-10-03 15:47:05 +01004264
Dave Rodgman920343a2023-10-01 18:41:09 +01004265 # The most common issue is unused variables/functions, so ensure -Wunused is set.
Dave Rodgman28e38d82023-10-04 11:50:30 +01004266 warning_flags="-Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused"
Dave Rodgman97285622023-09-29 17:32:06 +01004267
Dave Rodgman42436102023-10-03 15:47:05 +01004268 # Extract the command generated by the Makefile to build the target file.
4269 # This ensures that we have any include paths, macro definitions, etc
4270 # that may be applied by make.
4271 # Add -fsyntax-only as we only want a syntax check and don't need to generate a file.
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004272 compile_cmd="clang \$(LOCAL_CFLAGS) ${warning_flags} -fsyntax-only -c"
Dave Rodgman42436102023-10-03 15:47:05 +01004273
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004274 makefile=$(TMPDIR=. mktemp)
Dave Rodgman28e38d82023-10-04 11:50:30 +01004275 deps=""
Dave Rodgman97285622023-09-29 17:32:06 +01004276
Dave Rodgman28e38d82023-10-04 11:50:30 +01004277 len=${#options[@]}
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004278 source_file=${file%.o}.c
4279
4280 targets=0
4281 echo 'include Makefile' >${makefile}
Dave Rodgman97285622023-09-29 17:32:06 +01004282
Dave Rodgman28e38d82023-10-04 11:50:30 +01004283 for ((i = 0; i < $((2**${len})); i++)); do
Dave Rodgman920343a2023-10-01 18:41:09 +01004284 # generate each of 2^n combinations of options
Dave Rodgman28e38d82023-10-04 11:50:30 +01004285 # each bit of $i is used to determine if options[i] will be set or not
4286 target="t"
4287 clang_args=""
4288 for ((j = 0; j < ${len}; j++)); do
Dave Rodgmanb1107ae2023-10-04 12:30:23 +01004289 if (((i >> j) & 1)); then
Dave Rodgmana7127eb2023-10-04 13:38:41 +01004290 opt=-D${options[$j]}
Dave Rodgman7a8a2492023-10-04 13:14:20 +01004291 clang_args="${clang_args} ${opt}"
4292 target="${target}${opt}"
Dave Rodgmanb1107ae2023-10-04 12:30:23 +01004293 fi
Dave Rodgman920343a2023-10-01 18:41:09 +01004294 done
4295
Dave Rodgmanb1107ae2023-10-04 12:30:23 +01004296 # if combination is not known to be invalid, add it to the makefile
Dave Rodgmanf3803a12023-10-16 13:47:15 +01004297 if [[ -z $validate_options ]] || $validate_options "${clang_args}"; then
Dave Rodgman28e38d82023-10-04 11:50:30 +01004298 cmd="${compile_cmd} ${clang_args}"
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004299 echo "${target}: ${source_file}; $cmd ${source_file}" >> ${makefile}
Dave Rodgman920343a2023-10-01 18:41:09 +01004300
Dave Rodgman28e38d82023-10-04 11:50:30 +01004301 deps="${deps} ${target}"
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004302 ((++targets))
Dave Rodgman745af9f2023-09-29 15:47:07 +01004303 fi
Dave Rodgman97285622023-09-29 17:32:06 +01004304 done
Dave Rodgman6001fb22023-06-29 09:29:00 +01004305
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004306 echo "build_test_config_combos: ${deps}" >> ${makefile}
Dave Rodgmanaea01c92023-09-29 18:54:49 +01004307
Dave Rodgman920343a2023-10-01 18:41:09 +01004308 # execute all of the commands via Make (probably in parallel)
Dave Rodgmancc88ccd2023-10-13 10:33:15 +01004309 make -s -f ${makefile} build_test_config_combos
4310 echo "$targets targets checked"
Dave Rodgman920343a2023-10-01 18:41:09 +01004311
4312 # clean up the temporary makefile
Dave Rodgman28e38d82023-10-04 11:50:30 +01004313 rm ${makefile}
Dave Rodgman6001fb22023-06-29 09:29:00 +01004314}
4315
Dave Rodgman43a5ce82023-10-02 17:09:37 +01004316validate_aes_config_variations() {
Dave Rodgman920343a2023-10-01 18:41:09 +01004317 if [[ "$1" == *"MBEDTLS_AES_USE_HARDWARE_ONLY"* ]]; then
4318 if [[ "$1" == *"MBEDTLS_PADLOCK_C"* ]]; then
Dave Rodgman41bc7982023-10-16 14:04:21 +01004319 return 1
Dave Rodgman920343a2023-10-01 18:41:09 +01004320 fi
4321 if [[ !(("$HOSTTYPE" == "aarch64" && "$1" != *"MBEDTLS_AESCE_C"*) || \
4322 ("$HOSTTYPE" == "x86_64" && "$1" != *"MBEDTLS_AESNI_C"*)) ]]; then
Dave Rodgman41bc7982023-10-16 14:04:21 +01004323 return 1
Dave Rodgman920343a2023-10-01 18:41:09 +01004324 fi
4325 fi
Dave Rodgman41bc7982023-10-16 14:04:21 +01004326 return 0
Dave Rodgman920343a2023-10-01 18:41:09 +01004327}
4328
4329component_build_aes_variations() {
4330 # 18s - around 90ms per clang invocation on M1 Pro
4331 #
Gilles Peskine8f073122018-11-27 15:58:47 +01004332 # aes.o has many #if defined(...) guards that intersect in complex ways.
Dave Rodgman920343a2023-10-01 18:41:09 +01004333 # Test that all the combinations build cleanly.
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004334
Yanray Wangbc29aef2023-11-06 11:08:17 +08004335 MBEDTLS_ROOT_DIR="$PWD"
Gilles Peskine32e889d2020-04-12 23:43:28 +02004336 msg "build: aes.o for all combinations of relevant config options"
Gilles Peskinef4d2fd42021-10-08 11:45:47 +02004337
Dave Rodgman42436102023-10-03 15:47:05 +01004338 build_test_config_combos library/aes.o validate_aes_config_variations \
Dave Rodgman920343a2023-10-01 18:41:09 +01004339 "MBEDTLS_AES_SETKEY_ENC_ALT" "MBEDTLS_AES_DECRYPT_ALT" \
4340 "MBEDTLS_AES_ROM_TABLES" "MBEDTLS_AES_ENCRYPT_ALT" "MBEDTLS_AES_SETKEY_DEC_ALT" \
4341 "MBEDTLS_AES_FEWER_TABLES" "MBEDTLS_PADLOCK_C" "MBEDTLS_AES_USE_HARDWARE_ONLY" \
4342 "MBEDTLS_AESNI_C" "MBEDTLS_AESCE_C" "MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH"
Yanray Wangbc29aef2023-11-06 11:08:17 +08004343
4344 cd "$MBEDTLS_ROOT_DIR"
4345 msg "build: aes.o for all combinations of relevant config options + BLOCK_CIPHER_NO_DECRYPT"
4346
Yanray Wang42be1ba2023-11-23 14:28:47 +08004347 # MBEDTLS_BLOCK_CIPHER_NO_DECRYPT is incompatible with ECB in PSA, CBC/XTS/NIST_KW/DES,
Yanray Wangbc29aef2023-11-06 11:08:17 +08004348 # manually set or unset those configurations to check
4349 # MBEDTLS_BLOCK_CIPHER_NO_DECRYPT with various combinations in aes.o.
Yanray Wangbc29aef2023-11-06 11:08:17 +08004350 scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
4351 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
4352 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
4353 scripts/config.py unset MBEDTLS_DES_C
4354 scripts/config.py unset MBEDTLS_NIST_KW_C
4355 build_test_config_combos library/aes.o validate_aes_config_variations \
4356 "MBEDTLS_AES_SETKEY_ENC_ALT" "MBEDTLS_AES_DECRYPT_ALT" \
4357 "MBEDTLS_AES_ROM_TABLES" "MBEDTLS_AES_ENCRYPT_ALT" "MBEDTLS_AES_SETKEY_DEC_ALT" \
4358 "MBEDTLS_AES_FEWER_TABLES" "MBEDTLS_PADLOCK_C" "MBEDTLS_AES_USE_HARDWARE_ONLY" \
4359 "MBEDTLS_AESNI_C" "MBEDTLS_AESCE_C" "MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004360}
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02004361
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04004362component_test_no_platform () {
4363 # Full configuration build, without platform support, file IO and net sockets.
4364 # This should catch missing mbedtls_printf definitions, and by disabling file
4365 # IO, it should catch missing '#include <stdio.h>'
4366 msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s
Paul Elliottfb81f772023-10-18 17:44:59 +01004367 scripts/config.py full_no_platform
Simon Butcherf95c1762016-11-10 17:25:58 +00004368 scripts/config.py unset MBEDTLS_PLATFORM_C
4369 scripts/config.py unset MBEDTLS_NET_C
Manuel Pégourié-Gonnard3d4755b2015-06-03 14:03:17 +01004370 scripts/config.py unset MBEDTLS_FS_IO
4371 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Simon Butcherb9283432016-07-13 11:02:41 +01004372 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Manuel Pégourié-Gonnard3d4755b2015-06-03 14:03:17 +01004373 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Paul Elliottfb81f772023-10-18 17:44:59 +01004374 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
Simon Butcher284b4c92016-06-26 13:10:00 +01004375 # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004376 # to re-enable platform integration features otherwise disabled in C99 builds
4377 make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs
Gilles Peskine21570cf2023-12-22 11:49:50 +01004378 make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test
Simon Butchercb587002017-01-06 16:14:44 +00004379}
Gilles Peskine7c652162017-12-11 00:01:40 +01004380
4381component_build_no_std_function () {
Manuel Pégourié-Gonnarda71780e2015-02-13 13:56:55 +00004382 # catch compile bugs in _uninit functions
Gilles Peskine8f073122018-11-27 15:58:47 +01004383 msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s
4384 scripts/config.py full
4385 scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
Gilles Peskine8f073122018-11-27 15:58:47 +01004386 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
4387 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
4388 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
4389 make
4390}
Manuel Pégourié-Gonnarddccb80b2015-06-03 10:20:33 +01004391
Gilles Peskine8f073122018-11-27 15:58:47 +01004392component_build_no_ssl_srv () {
4393 msg "build: full config except SSL server, make, gcc" # ~ 30s
Gilles Peskine8f073122018-11-27 15:58:47 +01004394 scripts/config.py full
4395 scripts/config.py unset MBEDTLS_SSL_SRV_C
Gilles Peskine21570cf2023-12-22 11:49:50 +01004396 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01004397}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02004398
Gilles Peskine8f073122018-11-27 15:58:47 +01004399component_build_no_ssl_cli () {
4400 msg "build: full config except SSL client, make, gcc" # ~ 30s
Gilles Peskine8f073122018-11-27 15:58:47 +01004401 scripts/config.py full
4402 scripts/config.py unset MBEDTLS_SSL_CLI_C
Gilles Peskine21570cf2023-12-22 11:49:50 +01004403 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01004404}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02004405
Gilles Peskine8f073122018-11-27 15:58:47 +01004406component_build_no_sockets () {
4407 # Note, C99 compliance can also be tested with the sockets support disabled,
4408 # as that requires a POSIX platform (which isn't the same as C99).
4409 msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s
Gilles Peskine8f073122018-11-27 15:58:47 +01004410 scripts/config.py full
4411 scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc.
4412 scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux
4413 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib
4414}
Manuel Pégourié-Gonnard009a2642015-05-29 10:31:13 +02004415
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004416component_test_memory_buffer_allocator_backtrace () {
Hanno Becker0fb9ba22019-02-26 14:34:13 +00004417 msg "build: default config with memory buffer allocator and backtrace enabled"
4418 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4419 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4420 scripts/config.py set MBEDTLS_MEMORY_BACKTRACE
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04004421 scripts/config.py set MBEDTLS_MEMORY_DEBUG
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004422 cmake -DCMAKE_BUILD_TYPE:String=Release .
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04004423 make
4424
4425 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE"
4426 make test
4427}
4428
4429component_test_memory_buffer_allocator () {
4430 msg "build: default config with memory buffer allocator"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004431 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4432 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004433 cmake -DCMAKE_BUILD_TYPE:String=Release .
Hanno Becker0fb9ba22019-02-26 14:34:13 +00004434 make
4435
4436 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C"
4437 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01004438
4439 msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C"
4440 # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004441 tests/ssl-opt.sh -e '^DTLS proxy'
Hanno Becker0fb9ba22019-02-26 14:34:13 +00004442}
4443
Gilles Peskine8f073122018-11-27 15:58:47 +01004444component_test_no_max_fragment_length () {
4445 # Run max fragment length tests with MFL disabled
4446 msg "build: default config except MFL extension (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004447 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Dave Rodgman17127e92023-12-14 16:42:48 +00004448 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01004449 make
Hanno Becker5175ac62017-09-18 15:36:25 +01004450
Gilles Peskine8f073122018-11-27 15:58:47 +01004451 msg "test: ssl-opt.sh, MFL-related tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004452 tests/ssl-opt.sh -f "Max fragment length"
Gilles Peskine8f073122018-11-27 15:58:47 +01004453}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004454
Hanno Becker545ced42019-02-19 11:10:48 +00004455component_test_asan_remove_peer_certificate () {
4456 msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004457 scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
Dave Rodgman17127e92023-12-14 16:42:48 +00004458 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Hanno Becker545ced42019-02-19 11:10:48 +00004459 make
4460
4461 msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
4462 make test
4463
4464 msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004465 tests/ssl-opt.sh
Hanno Becker545ced42019-02-19 11:10:48 +00004466
4467 msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004468 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02004469
4470 msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004471 tests/context-info.sh
Hanno Becker545ced42019-02-19 11:10:48 +00004472}
4473
Gilles Peskine8f073122018-11-27 15:58:47 +01004474component_test_no_max_fragment_length_small_ssl_out_content_len () {
4475 msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004476 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4477 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
4478 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Dave Rodgman17127e92023-12-14 16:42:48 +00004479 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01004480 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10004481
Gilles Peskine8f073122018-11-27 15:58:47 +01004482 msg "test: MFL tests (disabled MFL extension case) & large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004483 tests/ssl-opt.sh -f "Max fragment length\|Large buffer"
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02004484
4485 msg "test: context-info.sh (disabled MFL extension case)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004486 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01004487}
Angus Grattonc4dd0732018-04-11 16:28:39 +10004488
Darryl Greenaad82f92019-12-02 10:53:11 +00004489component_test_variable_ssl_in_out_buffer_len () {
4490 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)"
4491 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Dave Rodgman17127e92023-12-14 16:42:48 +00004492 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Darryl Greenaad82f92019-12-02 10:53:11 +00004493 make
4494
4495 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
4496 make test
4497
4498 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004499 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004500
4501 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004502 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004503}
4504
Manuel Pégourié-Gonnard6a543ba2022-11-25 11:30:10 +01004505component_test_dtls_cid_legacy () {
Hannes Tschofenigdf84bb32022-11-23 11:14:03 +01004506 msg "build: MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled (ASan build)"
Hannes Tschofenigfd6cca42021-10-12 09:22:33 +02004507 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT 1
Darryl Greenaad82f92019-12-02 10:53:11 +00004508
Dave Rodgman17127e92023-12-14 16:42:48 +00004509 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Darryl Greenaad82f92019-12-02 10:53:11 +00004510 make
4511
Hannes Tschofenigdf84bb32022-11-23 11:14:03 +01004512 msg "test: MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy)"
Darryl Greenaad82f92019-12-02 10:53:11 +00004513 make test
4514
Hannes Tschofenigdf84bb32022-11-23 11:14:03 +01004515 msg "test: ssl-opt.sh, MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004516 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004517
Manuel Pégourié-Gonnard6a543ba2022-11-25 11:30:10 +01004518 msg "test: compat.sh, MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004519 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00004520}
4521
Piotr Nowicki0937ed22019-11-26 16:32:40 +01004522component_test_ssl_alloc_buffer_and_mfl () {
4523 msg "build: default config with memory buffer allocator and MFL extension"
4524 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4525 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4526 scripts/config.py set MBEDTLS_MEMORY_DEBUG
4527 scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4528 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004529 cmake -DCMAKE_BUILD_TYPE:String=Release .
Piotr Nowicki0937ed22019-11-26 16:32:40 +01004530 make
4531
4532 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
4533 make test
4534
4535 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004536 tests/ssl-opt.sh -f "Handshake memory usage"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01004537}
4538
Gilles Peskine636c26a2020-03-04 20:46:15 +01004539component_test_when_no_ciphersuites_have_mac () {
4540 msg "build: when no ciphersuites have MAC"
4541 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Gilles Peskine636c26a2020-03-04 20:46:15 +01004542 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
TRodziewicz2add5c12021-04-28 16:50:20 +02004543 scripts/config.py unset MBEDTLS_CMAC_C
Gilles Peskine636c26a2020-03-04 20:46:15 +01004544 make
4545
4546 msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
4547 make test
4548
4549 msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004550 tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM'
Gilles Peskine636c26a2020-03-04 20:46:15 +01004551}
4552
Raoul Strackxa4e86142020-06-15 17:03:13 +02004553component_test_no_date_time () {
4554 msg "build: default config without MBEDTLS_HAVE_TIME_DATE"
4555 scripts/config.py unset MBEDTLS_HAVE_TIME_DATE
Dave Rodgmanea03ef92023-12-19 12:19:59 +00004556 cmake -D CMAKE_BUILD_TYPE:String=Check .
Raoul Strackxa4e86142020-06-15 17:03:13 +02004557 make
4558
4559 msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites"
4560 make test
4561}
4562
Gilles Peskine8f073122018-11-27 15:58:47 +01004563component_test_platform_calloc_macro () {
4564 msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02004565 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4566 scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc
4567 scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free
Dave Rodgman17127e92023-12-14 16:42:48 +00004568 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine8f073122018-11-27 15:58:47 +01004569 make
Hanno Beckere5fecec2018-10-11 11:02:52 +01004570
Gilles Peskine8f073122018-11-27 15:58:47 +01004571 msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
4572 make test
4573}
Hanno Beckere5fecec2018-10-11 11:02:52 +01004574
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02004575component_test_malloc_0_null () {
4576 msg "build: malloc(0) returns NULL (ASan+UBSan build)"
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01004577 scripts/config.py full
Gilles Peskine21570cf2023-12-22 11:49:50 +01004578 make CC=$ASAN_CC CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"$PWD/tests/configs/user-config-malloc-0-null.h\"' $ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02004579
4580 msg "test: malloc(0) returns NULL (ASan+UBSan build)"
4581 make test
4582
4583 msg "selftest: malloc(0) returns NULL (ASan+UBSan build)"
4584 # Just the calloc selftest. "make test" ran the others as part of the
4585 # test suites.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004586 programs/test/selftest calloc
Gilles Peskine765d2402020-02-11 18:26:34 +01004587
4588 msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)"
4589 # Run a subset of the tests. The choice is a balance between coverage
4590 # and time (including time indirectly wasted due to flaky tests).
4591 # The current choice is to skip tests whose description includes
4592 # "proxy", which is an approximation of skipping tests that use the
4593 # UDP proxy, which tend to be slower and flakier.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02004594 tests/ssl-opt.sh -e 'proxy'
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02004595}
4596
Dave Rodgman6a08b682023-06-19 11:51:33 +01004597support_test_aesni() {
4598 # Check that gcc targets x86_64 (we can build AESNI), and check for
4599 # AESNI support on the host (we can run AESNI).
4600 #
4601 # The name of this function is possibly slightly misleading, but needs to align
4602 # with the name of the corresponding test, component_test_aesni.
Dave Rodgmanf8986e32023-06-19 10:55:59 +01004603 #
4604 # In principle 32-bit x86 can support AESNI, but our implementation does not
4605 # support 32-bit x86, so we check for x86-64.
4606 # We can only grep /proc/cpuinfo on Linux, so this also checks for Linux
Dave Rodgman6a08b682023-06-19 11:51:33 +01004607 (gcc -v 2>&1 | grep Target | grep -q x86_64) &&
4608 [[ "$HOSTTYPE" == "x86_64" && "$OSTYPE" == "linux-gnu" ]] &&
Jerry Yua7de78d2023-08-08 12:57:35 +08004609 (lscpu | grep -qw aes)
Dave Rodgmanf8986e32023-06-19 10:55:59 +01004610}
4611
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004612component_test_aesni () { # ~ 60s
4613 # This tests the two AESNI implementations (intrinsics and assembly), and also the plain C
4614 # fallback. It also tests the logic that is used to select which implementation(s) to build.
4615 #
4616 # This test does not require the host to have support for AESNI (if it doesn't, the run-time
4617 # AESNI detection will fallback to the plain C implementation, so the tests will instead
4618 # exercise the plain C impl).
4619
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004620 msg "build: default config with different AES implementations"
Dave Rodgman838dc462023-06-16 13:18:19 +01004621 scripts/config.py set MBEDTLS_AESNI_C
Jerry Yu17a9d2e2023-08-03 16:14:18 +08004622 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgman838dc462023-06-16 13:18:19 +01004623 scripts/config.py set MBEDTLS_HAVE_ASM
4624
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004625 # test the intrinsics implementation
4626 msg "AES tests, test intrinsics"
Dave Rodgman838dc462023-06-16 13:18:19 +01004627 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004628 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mpclmul -msse2 -maes'
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004629 # check that we built intrinsics - this should be used by default when supported by the compiler
Jerry Yu1221a312023-08-03 16:09:07 +08004630 ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics"
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004631
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004632 # test the asm implementation
4633 msg "AES tests, test assembly"
4634 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004635 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mno-pclmul -mno-sse2 -mno-aes'
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004636 # check that we built assembly - this should be built if the compiler does not support intrinsics
Jerry Yu1221a312023-08-03 16:09:07 +08004637 ./programs/test/selftest aes | grep "AESNI code" | grep -q "assembly"
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004638
4639 # test the plain C implementation
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004640 scripts/config.py unset MBEDTLS_AESNI_C
Jerry Yu17a9d2e2023-08-03 16:14:18 +08004641 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgmanbe60fcc2023-06-16 17:04:52 +01004642 msg "AES tests, plain C"
4643 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004644 make CC=gcc CFLAGS='-O2 -Werror'
Dave Rodgman96a9e6a2023-06-16 20:18:36 +01004645 # check that there is no AESNI code present
Jerry Yu1221a312023-08-03 16:09:07 +08004646 ./programs/test/selftest aes | not grep -q "AESNI code"
Jerry Yu76a51b92023-08-08 16:03:55 +08004647 not grep -q "AES note: using AESNI" ./programs/test/selftest
4648 grep -q "AES note: built-in implementation." ./programs/test/selftest
Jerry Yu8a599c02023-08-03 17:01:02 +08004649
4650 # test the intrinsics implementation
4651 scripts/config.py set MBEDTLS_AESNI_C
4652 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4653 msg "AES tests, test AESNI only"
4654 make clean
Jerry Yua7de78d2023-08-08 12:57:35 +08004655 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mpclmul -msse2 -maes'
Jerry Yua7de78d2023-08-08 12:57:35 +08004656 ./programs/test/selftest aes | grep -q "AES note: using AESNI"
4657 ./programs/test/selftest aes | not grep -q "AES note: built-in implementation."
Jerry Yu76a51b92023-08-08 16:03:55 +08004658 grep -q "AES note: using AESNI" ./programs/test/selftest
4659 not grep -q "AES note: built-in implementation." ./programs/test/selftest
Dave Rodgman838dc462023-06-16 13:18:19 +01004660}
4661
Jerry Yub6d39c22023-08-16 15:11:48 +08004662support_test_aesni_m32() {
Dave Rodgman852de3c2023-12-14 14:46:45 +00004663 support_test_m32_no_asm && (lscpu | grep -qw aes)
Jerry Yub6d39c22023-08-16 15:11:48 +08004664}
4665
4666component_test_aesni_m32 () { # ~ 60s
4667 # This tests are duplicated from component_test_aesni for i386 target
4668 #
4669 # AESNI intrinsic code supports i386 and assembly code does not support it.
4670
4671 msg "build: default config with different AES implementations"
4672 scripts/config.py set MBEDTLS_AESNI_C
4673 scripts/config.py set MBEDTLS_PADLOCK_C
4674 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4675 scripts/config.py set MBEDTLS_HAVE_ASM
4676
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004677 # test the intrinsics implementation with gcc
4678 msg "AES tests, test intrinsics (gcc)"
Jerry Yub6d39c22023-08-16 15:11:48 +08004679 make clean
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004680 make CC=gcc CFLAGS='-m32 -Werror -Wall -Wextra' LDFLAGS='-m32'
Jerry Yub6d39c22023-08-16 15:11:48 +08004681 # check that we built intrinsics - this should be used by default when supported by the compiler
4682 ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics"
4683 grep -q "AES note: using AESNI" ./programs/test/selftest
4684 grep -q "AES note: built-in implementation." ./programs/test/selftest
4685 grep -q "AES note: using VIA Padlock" ./programs/test/selftest
4686 grep -q mbedtls_aesni_has_support ./programs/test/selftest
4687
4688 scripts/config.py set MBEDTLS_AESNI_C
Jerry Yub6d39c22023-08-16 15:11:48 +08004689 scripts/config.py unset MBEDTLS_PADLOCK_C
4690 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4691 msg "AES tests, test AESNI only"
4692 make clean
4693 make CC=gcc CFLAGS='-m32 -Werror -Wall -Wextra -mpclmul -msse2 -maes' LDFLAGS='-m32'
4694 ./programs/test/selftest aes | grep -q "AES note: using AESNI"
4695 ./programs/test/selftest aes | not grep -q "AES note: built-in implementation."
4696 grep -q "AES note: using AESNI" ./programs/test/selftest
4697 not grep -q "AES note: built-in implementation." ./programs/test/selftest
4698 not grep -q "AES note: using VIA Padlock" ./programs/test/selftest
4699 not grep -q mbedtls_aesni_has_support ./programs/test/selftest
4700}
4701
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004702support_test_aesni_m32_clang() {
Tom Cosgroved4c373a2024-01-30 13:56:38 +00004703 # clang >= 4 is required to build with target attributes
4704 support_test_aesni_m32 && [[ $(clang_version) -ge 4 ]]
Beniamin Sandu3bca7812023-10-24 18:55:36 +01004705}
4706
4707component_test_aesni_m32_clang() {
4708
4709 scripts/config.py set MBEDTLS_AESNI_C
4710 scripts/config.py set MBEDTLS_PADLOCK_C
4711 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4712 scripts/config.py set MBEDTLS_HAVE_ASM
4713
4714 # test the intrinsics implementation with clang
4715 msg "AES tests, test intrinsics (clang)"
4716 make clean
4717 make CC=clang CFLAGS='-m32 -Werror -Wall -Wextra' LDFLAGS='-m32'
4718 # check that we built intrinsics - this should be used by default when supported by the compiler
4719 ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics"
4720 grep -q "AES note: using AESNI" ./programs/test/selftest
4721 grep -q "AES note: built-in implementation." ./programs/test/selftest
4722 grep -q "AES note: using VIA Padlock" ./programs/test/selftest
4723 grep -q mbedtls_aesni_has_support ./programs/test/selftest
4724}
4725
Jerry Yu193cbc02023-08-03 17:06:29 +08004726# For timebeing, no aarch64 gcc available in CI and no arm64 CI node.
4727component_build_aes_aesce_armcc () {
4728 msg "Build: AESCE test on arm64 platform without plain C."
4729 scripts/config.py baremetal
4730
4731 # armc[56] don't support SHA-512 intrinsics
4732 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
4733
4734 # Stop armclang warning about feature detection for A64_CRYPTO.
4735 # With this enabled, the library does build correctly under armclang,
4736 # but in baremetal builds (as tested here), feature detection is
4737 # unavailable, and the user is notified via a #warning. So enabling
4738 # this feature would prevent us from building with -Werror on
4739 # armclang. Tracked in #7198.
Dave Rodgman5b89c552023-10-10 14:59:02 +01004740 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Jerry Yu193cbc02023-08-03 17:06:29 +08004741 scripts/config.py set MBEDTLS_HAVE_ASM
4742
4743 msg "AESCE, build with default configuration."
4744 scripts/config.py set MBEDTLS_AESCE_C
4745 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4746 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto"
4747
4748 msg "AESCE, build AESCE only"
4749 scripts/config.py set MBEDTLS_AESCE_C
4750 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4751 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto"
4752}
4753
Dave Rodgman0c584032023-10-08 12:26:54 +01004754support_build_aes_armce() {
Tom Cosgrove9e4eeff2024-01-30 13:51:18 +00004755 # clang >= 11 is required to build with AES extensions
Tom Cosgroved4c373a2024-01-30 13:56:38 +00004756 [[ $(clang_version) -ge 11 ]]
Dave Rodgman0c584032023-10-08 12:26:54 +01004757}
4758
4759component_build_aes_armce () {
4760 # Test variations of AES with Armv8 crypto extensions
4761 scripts/config.py set MBEDTLS_AESCE_C
4762 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4763
4764 msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, aarch64"
Dave Rodgmanb622ff82023-10-08 22:25:16 +01004765 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a+crypto"
Dave Rodgman0c584032023-10-08 12:26:54 +01004766
4767 msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, arm"
4768 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm"
4769
4770 msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, thumb"
4771 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
4772
Dave Rodgman5e419372023-10-23 15:30:20 +01004773 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgman0c584032023-10-08 12:26:54 +01004774
Dave Rodgman5e419372023-10-23 15:30:20 +01004775 msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, aarch64"
4776 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a+crypto"
Dave Rodgman0c584032023-10-08 12:26:54 +01004777
Dave Rodgman5e419372023-10-23 15:30:20 +01004778 msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, arm"
4779 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm"
Dave Rodgman0c584032023-10-08 12:26:54 +01004780
Dave Rodgman5e419372023-10-23 15:30:20 +01004781 msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, thumb"
4782 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
Dave Rodgmanf3501b42023-10-11 16:21:25 +01004783
4784 # test for presence of AES instructions
4785 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4786 msg "clang, test A32 crypto instructions built"
4787 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4788 grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4789 msg "clang, test T32 crypto instructions built"
4790 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4791 grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4792 msg "clang, test aarch64 crypto instructions built"
4793 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4794 grep -E 'aes[a-z]+\s*[qv]' library/aesce.o
4795
4796 # test for absence of AES instructions
4797 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4798 scripts/config.py unset MBEDTLS_AESCE_C
4799 msg "clang, test A32 crypto instructions not built"
4800 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4801 not grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4802 msg "clang, test T32 crypto instructions not built"
4803 make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4804 not grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o
4805 msg "clang, test aarch64 crypto instructions not built"
4806 make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4807 not grep -E 'aes[a-z]+\s*[qv]' library/aesce.o
Dave Rodgman0c584032023-10-08 12:26:54 +01004808}
4809
Dave Rodgman9ed18532023-10-05 00:06:47 +01004810support_build_sha_armce() {
Tom Cosgroved4c373a2024-01-30 13:56:38 +00004811 # clang >= 4 is required to build with SHA extensions
4812 [[ $(clang_version) -ge 4 ]]
Dave Rodgman9ed18532023-10-05 00:06:47 +01004813}
4814
Dave Rodgmand9e80832023-10-04 17:17:46 +01004815component_build_sha_armce () {
Dave Rodgman5b89c552023-10-10 14:59:02 +01004816 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004817
4818
4819 # Test variations of SHA256 Armv8 crypto extensions
Dave Rodgman5b89c552023-10-10 14:59:02 +01004820 scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004821 msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY clang, aarch64"
4822 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a"
4823 msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY clang, arm"
4824 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm"
4825 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
Dave Rodgmand9e80832023-10-04 17:17:46 +01004826
Dave Rodgmand9e80832023-10-04 17:17:46 +01004827
Dave Rodgman94a634d2023-10-10 12:59:29 +01004828 # test the deprecated form of the config option
Dave Rodgman94a634d2023-10-10 12:59:29 +01004829 scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004830 msg "MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY clang, thumb"
4831 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
4832 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
Dave Rodgmand9e80832023-10-04 17:17:46 +01004833
Dave Rodgman5b89c552023-10-10 14:59:02 +01004834 scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004835 msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT clang, aarch64"
4836 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a"
4837 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgmand9e80832023-10-04 17:17:46 +01004838
Dave Rodgmancd654002023-10-05 09:40:07 +01004839
Dave Rodgman94a634d2023-10-10 12:59:29 +01004840 # test the deprecated form of the config option
Dave Rodgman94a634d2023-10-10 12:59:29 +01004841 scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004842 msg "MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT clang, arm"
4843 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -std=c99"
4844 msg "MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT clang, thumb"
4845 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb"
4846 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
Dave Rodgman94a634d2023-10-10 12:59:29 +01004847
Dave Rodgmancd654002023-10-05 09:40:07 +01004848
Dave Rodgmanf4b415c2023-10-11 16:11:42 +01004849 # examine the disassembly for presence of SHA instructions
4850 for opt in MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT; do
4851 scripts/config.py set ${opt}
4852 msg "${opt} clang, test A32 crypto instructions built"
4853 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4854 grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4855
4856 msg "${opt} clang, test T32 crypto instructions built"
4857 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4858 grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4859
4860 msg "${opt} clang, test aarch64 crypto instructions built"
4861 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4862 grep -E 'sha256[a-z0-9]+\s+[qv]' library/sha256.o
4863 scripts/config.py unset ${opt}
4864 done
4865
4866
4867 # examine the disassembly for absence of SHA instructions
4868 msg "clang, test A32 crypto instructions not built"
4869 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S"
4870 not grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4871
4872 msg "clang, test T32 crypto instructions not built"
4873 make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S"
4874 not grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o
4875
4876 msg "clang, test aarch64 crypto instructions not built"
4877 make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S"
4878 not grep -E 'sha256[a-z0-9]+\s+[qv]' library/sha256.o
Dave Rodgmand9e80832023-10-04 17:17:46 +01004879}
4880
Jerry Yuc935aa62023-08-03 17:08:27 +08004881# For timebeing, no VIA Padlock platform available.
4882component_build_aes_via_padlock () {
4883
4884 msg "AES:VIA PadLock, build with default configuration."
Jerry Yu506759f2023-08-16 17:11:22 +08004885 scripts/config.py unset MBEDTLS_AESNI_C
Jerry Yuc935aa62023-08-03 17:08:27 +08004886 scripts/config.py set MBEDTLS_PADLOCK_C
4887 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
Dave Rodgmanb90f87b2023-12-14 23:27:33 +00004888 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Jerry Yu506759f2023-08-16 17:11:22 +08004889 grep -q mbedtls_padlock_has_support ./programs/test/selftest
Jerry Yuc935aa62023-08-03 17:08:27 +08004890
4891}
4892
4893support_build_aes_via_padlock_only () {
4894 ( [ "$MBEDTLS_TEST_PLATFORM" == "Linux-x86_64" ] || \
4895 [ "$MBEDTLS_TEST_PLATFORM" == "Linux-amd64" ] ) && \
4896 [ "`dpkg --print-foreign-architectures`" == "i386" ]
4897}
4898
Jerry Yu193cbc02023-08-03 17:06:29 +08004899support_build_aes_aesce_armcc () {
4900 support_build_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +01004901}
4902
Gilles Peskine3bdd4122019-07-27 23:52:53 +02004903component_test_aes_only_128_bit_keys () {
Gilles Peskine8f073122018-11-27 15:58:47 +01004904 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH"
Hanno Becker83ebf782017-07-07 12:29:15 +01004905 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01004906 scripts/config.py unset MBEDTLS_PADLOCK_C
4907
Dave Rodgmand8d64512023-12-19 12:20:21 +00004908 make CFLAGS='-O2 -Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01004909
4910 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH"
4911 make test
4912}
4913
4914component_test_no_ctr_drbg_aes_only_128_bit_keys () {
4915 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C"
4916 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01004917 scripts/config.py unset MBEDTLS_CTR_DRBG_C
4918 scripts/config.py unset MBEDTLS_PADLOCK_C
4919
Hanno Becker83ebf782017-07-07 12:29:15 +01004920 make CC=clang CFLAGS='-Werror -Wall -Wextra'
Gilles Peskine8f073122018-11-27 15:58:47 +01004921
4922 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02004923 make test
4924}
Gilles Peskine8f073122018-11-27 15:58:47 +01004925
Hanno Becker83ebf782017-07-07 12:29:15 +01004926component_test_aes_only_128_bit_keys_have_builtins () {
Gilles Peskine8f073122018-11-27 15:58:47 +01004927 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
4928 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
4929 scripts/config.py unset MBEDTLS_PADLOCK_C
4930 scripts/config.py unset MBEDTLS_AESNI_C
Gilles Peskine592f5912019-10-07 18:49:32 +02004931 scripts/config.py unset MBEDTLS_AESCE_C
4932
Dave Rodgmand8d64512023-12-19 12:20:21 +00004933 make CFLAGS='-O2 -Werror -Wall -Wextra'
Gilles Peskine3b46cd32020-02-18 17:56:33 +01004934
4935 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
Gilles Peskine592f5912019-10-07 18:49:32 +02004936 make test
4937
4938 msg "selftest: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
4939 programs/test/selftest
4940}
4941
4942component_test_aes_fewer_tables () {
4943 msg "build: default config with AES_FEWER_TABLES enabled"
4944 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
Dave Rodgmand8d64512023-12-19 12:20:21 +00004945 make CFLAGS='-O2 -Werror -Wall -Wextra'
Gilles Peskine7ad603e2017-12-10 23:22:20 +01004946
Gilles Peskine7c652162017-12-11 00:01:40 +01004947 msg "test: AES_FEWER_TABLES"
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01004948 make test
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01004949}
4950
4951component_test_aes_rom_tables () {
4952 msg "build: default config with AES_ROM_TABLES enabled"
4953 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Dave Rodgmand8d64512023-12-19 12:20:21 +00004954 make CFLAGS='-O2 -Werror -Wall -Wextra'
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01004955
4956 msg "test: AES_ROM_TABLES"
4957 make test
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00004958}
4959
Gilles Peskine14c3c062018-01-29 21:25:12 +01004960component_test_aes_fewer_tables_and_rom_tables () {
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01004961 msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled"
4962 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
4963 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Dave Rodgmand8d64512023-12-19 12:20:21 +00004964 make CFLAGS='-O2 -Werror -Wall -Wextra'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01004965
Gilles Peskine8f073122018-11-27 15:58:47 +01004966 msg "test: AES_FEWER_TABLES + AES_ROM_TABLES"
4967 make test
4968}
4969
Yanray Wang49cd4b52023-11-10 11:58:37 +08004970# helper for common_block_cipher_no_decrypt() which:
4971# - enable/disable the list of config options passed from -s/-u respectively.
4972# - build
4973# - test for tests_suite_xxx
4974# - selftest
4975#
4976# Usage: helper_block_cipher_no_decrypt_build_test
4977# [-s set_opts] [-u unset_opts] [-c cflags] [-l ldflags] [option [...]]
4978# Options: -s set_opts the list of config options to enable
4979# -u unset_opts the list of config options to disable
4980# -c cflags the list of options passed to CFLAGS
4981# -l ldflags the list of options passed to LDFLAGS
4982helper_block_cipher_no_decrypt_build_test () {
4983 while [ $# -gt 0 ]; do
4984 case "$1" in
4985 -s)
4986 shift; local set_opts="$1";;
4987 -u)
4988 shift; local unset_opts="$1";;
4989 -c)
Yanray Wang07e663d2023-11-13 17:15:39 +08004990 shift; local cflags="-Werror -Wall -Wextra $1";;
Yanray Wang49cd4b52023-11-10 11:58:37 +08004991 -l)
4992 shift; local ldflags="$1";;
4993 esac
4994 shift
4995 done
4996 set_opts="${set_opts:-}"
4997 unset_opts="${unset_opts:-}"
4998 cflags="${cflags:-}"
4999 ldflags="${ldflags:-}"
5000
Yanray Wangb2d6e522023-11-13 16:57:47 +08005001 [ -n "$set_opts" ] && echo "Enabling: $set_opts" && scripts/config.py set-all $set_opts
5002 [ -n "$unset_opts" ] && echo "Disabling: $unset_opts" && scripts/config.py unset-all $unset_opts
Yanray Wang49cd4b52023-11-10 11:58:37 +08005003
5004 msg "build: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5005 make clean
Dave Rodgmandfe5ce82023-12-19 11:47:18 +00005006 make CFLAGS="-O2 $cflags" LDFLAGS="$ldflags"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005007
5008 # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA
5009 not grep mbedtls_aes_setkey_dec library/aes.o
5010 not grep mbedtls_aria_setkey_dec library/aria.o
5011 not grep mbedtls_camellia_setkey_dec library/camellia.o
5012 # Make sure we don't have mbedtls_internal_aes_decrypt in AES
5013 not grep mbedtls_internal_aes_decrypt library/aes.o
Yanray Wang85b74652023-11-13 16:48:36 +08005014 # Make sure we don't have mbedtls_aesni_inverse_key in AESNI
5015 not grep mbedtls_aesni_inverse_key library/aesni.o
Yanray Wang49cd4b52023-11-10 11:58:37 +08005016
5017 msg "test: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5018 make test
5019
5020 msg "selftest: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5021 programs/test/selftest
5022}
5023
5024# This is a common configuration function used in:
5025# - component_test_block_cipher_no_decrypt_aesni_legacy()
5026# - component_test_block_cipher_no_decrypt_aesni_use_psa()
5027# in order to test BLOCK_CIPHER_NO_DECRYPT with AESNI intrinsics,
5028# AESNI assembly and AES C implementation on x86_64 and with AESNI intrinsics
5029# on x86.
5030common_block_cipher_no_decrypt () {
5031 # test AESNI intrinsics
5032 helper_block_cipher_no_decrypt_build_test \
5033 -s "MBEDTLS_AESNI_C" \
Yanray Wang07e663d2023-11-13 17:15:39 +08005034 -c "-mpclmul -msse2 -maes"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005035
5036 # test AESNI assembly
5037 helper_block_cipher_no_decrypt_build_test \
5038 -s "MBEDTLS_AESNI_C" \
Yanray Wang07e663d2023-11-13 17:15:39 +08005039 -c "-mno-pclmul -mno-sse2 -mno-aes"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005040
5041 # test AES C implementation
5042 helper_block_cipher_no_decrypt_build_test \
Yanray Wang07e663d2023-11-13 17:15:39 +08005043 -u "MBEDTLS_AESNI_C"
Yanray Wang49cd4b52023-11-10 11:58:37 +08005044
5045 # test AESNI intrinsics for i386 target
5046 helper_block_cipher_no_decrypt_build_test \
5047 -s "MBEDTLS_AESNI_C" \
Yanray Wang07e663d2023-11-13 17:15:39 +08005048 -c "-m32 -mpclmul -msse2 -maes" \
Yanray Wang49cd4b52023-11-10 11:58:37 +08005049 -l "-m32"
5050}
5051
Yanray Wang3ae11992023-11-13 17:32:09 +08005052# This is a configuration function used in component_test_block_cipher_no_decrypt_xxx:
5053# usage: 0: no PSA crypto configuration
5054# 1: use PSA crypto configuration
5055config_block_cipher_no_decrypt () {
5056 use_psa=$1
5057
Yanray Wang66111392023-10-31 18:54:54 +08005058 scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
Yanray Wanga8ac23a2023-05-15 18:03:10 +08005059 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
5060 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
Yanray Wang3caaf0c2023-09-07 17:50:14 +08005061 scripts/config.py unset MBEDTLS_DES_C
Yanray Wanga8ac23a2023-05-15 18:03:10 +08005062 scripts/config.py unset MBEDTLS_NIST_KW_C
5063
Yanray Wang3ae11992023-11-13 17:32:09 +08005064 if [ "$use_psa" -eq 1 ]; then
5065 # Enable support for cryptographic mechanisms through the PSA API.
5066 # Note: XTS, KW are not yet supported via the PSA API in Mbed TLS.
5067 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
5068 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
5069 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
5070 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING
5071 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_DES
5072 fi
5073}
5074
5075component_test_block_cipher_no_decrypt_aesni () {
Dave Rodgmanc3932222023-12-19 17:51:51 +00005076 # This consistently causes an llvm crash on clang 3.8, so use gcc
5077 export CC=gcc
Yanray Wang3ae11992023-11-13 17:32:09 +08005078 config_block_cipher_no_decrypt 0
Yanray Wang49cd4b52023-11-10 11:58:37 +08005079 common_block_cipher_no_decrypt
Yanray Wanga8ac23a2023-05-15 18:03:10 +08005080}
5081
Yanray Wangf1496402023-11-01 18:55:13 +08005082component_test_block_cipher_no_decrypt_aesni_use_psa () {
Dave Rodgmanc3932222023-12-19 17:51:51 +00005083 # This consistently causes an llvm crash on clang 3.8, so use gcc
5084 export CC=gcc
Yanray Wang3ae11992023-11-13 17:32:09 +08005085 config_block_cipher_no_decrypt 1
Yanray Wang49cd4b52023-11-10 11:58:37 +08005086 common_block_cipher_no_decrypt
Yanray Wang78219042023-08-31 15:00:57 +08005087}
5088
Yanray Wang66111392023-10-31 18:54:54 +08005089support_test_block_cipher_no_decrypt_aesce_armcc () {
Yanray Wang799bd842023-11-10 12:21:35 +08005090 support_build_armcc
Yanray Wangbf66ef92023-08-31 14:47:01 +08005091}
5092
Yanray Wang66111392023-10-31 18:54:54 +08005093component_test_block_cipher_no_decrypt_aesce_armcc () {
Yanray Wangbf66ef92023-08-31 14:47:01 +08005094 scripts/config.py baremetal
5095
5096 # armc[56] don't support SHA-512 intrinsics
5097 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
5098
5099 # Stop armclang warning about feature detection for A64_CRYPTO.
5100 # With this enabled, the library does build correctly under armclang,
5101 # but in baremetal builds (as tested here), feature detection is
5102 # unavailable, and the user is notified via a #warning. So enabling
5103 # this feature would prevent us from building with -Werror on
5104 # armclang. Tracked in #7198.
5105 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
5106 scripts/config.py set MBEDTLS_HAVE_ASM
5107
Yanray Wang3ae11992023-11-13 17:32:09 +08005108 config_block_cipher_no_decrypt 1
Yanray Wangbf66ef92023-08-31 14:47:01 +08005109
5110 # test AESCE baremetal build
5111 scripts/config.py set MBEDTLS_AESCE_C
Yanray Wang66111392023-10-31 18:54:54 +08005112 msg "build: default config + BLOCK_CIPHER_NO_DECRYPT with AESCE"
Yanray Wangc4347912023-11-14 10:10:49 +08005113 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto -Werror -Wall -Wextra"
Yanray Wangbf66ef92023-08-31 14:47:01 +08005114
Yanray Wangef1b04d2023-09-08 11:09:26 +08005115 # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA
5116 not grep mbedtls_aes_setkey_dec library/aes.o
5117 not grep mbedtls_aria_setkey_dec library/aria.o
5118 not grep mbedtls_camellia_setkey_dec library/camellia.o
5119 # Make sure we don't have mbedtls_internal_aes_decrypt in AES
5120 not grep mbedtls_internal_aes_decrypt library/aes.o
Yanray Wang85b74652023-11-13 16:48:36 +08005121 # Make sure we don't have mbedtls_aesce_inverse_key and aesce_decrypt_block in AESCE
Yanray Wang4cd1b162023-11-10 12:18:29 +08005122 not grep mbedtls_aesce_inverse_key library/aesce.o
5123 not grep aesce_decrypt_block library/aesce.o
Yanray Wangbf66ef92023-08-31 14:47:01 +08005124}
5125
Gilles Peskine592f5912019-10-07 18:49:32 +02005126component_test_ctr_drbg_aes_256_sha_256 () {
5127 msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
5128 scripts/config.py full
5129 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5130 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Dave Rodgman17127e92023-12-14 16:42:48 +00005131 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine592f5912019-10-07 18:49:32 +02005132 make
5133
5134 msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
5135 make test
5136}
5137
5138component_test_ctr_drbg_aes_128_sha_512 () {
5139 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01005140 scripts/config.py full
5141 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5142 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
Dave Rodgman17127e92023-12-14 16:42:48 +00005143 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine592f5912019-10-07 18:49:32 +02005144 make
5145
5146 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
5147 make test
5148}
5149
5150component_test_ctr_drbg_aes_128_sha_256 () {
5151 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01005152 scripts/config.py full
5153 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5154 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
5155 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Dave Rodgman17127e92023-12-14 16:42:48 +00005156 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine592f5912019-10-07 18:49:32 +02005157 make
5158
5159 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
5160 make test
5161}
5162
Gilles Peskinef96aefe2019-07-24 14:58:38 +02005163component_test_se_default () {
5164 msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005165 scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine004206c2019-10-21 17:11:33 +02005166 make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinef96aefe2019-07-24 14:58:38 +02005167
5168 msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C"
5169 make test
5170}
5171
Steven Cooremand57203d2020-07-16 20:28:59 +02005172component_test_psa_crypto_drivers () {
Gilles Peskine1997f302023-07-26 18:45:20 +02005173 msg "build: full + test drivers dispatching to builtins"
Steven Cooreman753f9732021-03-15 11:38:44 +01005174 scripts/config.py full
Gilles Peskine1997f302023-07-26 18:45:20 +02005175 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
Gilles Peskine3587dfd2021-09-20 19:20:04 +02005176 loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL"
5177 loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'"
Ronald Cron17b3afc2020-12-10 18:17:09 +01005178 loc_cflags="${loc_cflags} -I../tests/include -O2"
5179
Gilles Peskine21570cf2023-12-22 11:49:50 +01005180 make CC=$ASAN_CC CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS"
Steven Cooremand57203d2020-07-16 20:28:59 +02005181
Gilles Peskine1997f302023-07-26 18:45:20 +02005182 msg "test: full + test drivers dispatching to builtins"
Steven Cooremand57203d2020-07-16 20:28:59 +02005183 make test
5184}
5185
Gilles Peskine8f073122018-11-27 15:58:47 +01005186component_test_make_shared () {
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005187 msg "build/test: make shared" # ~ 40s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04005188 make SHARED=1 all check
Gilles Peskine56c01612019-07-03 20:43:32 +02005189 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskineca144592021-11-04 12:52:14 +01005190 programs/test/dlopen_demo.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01005191}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005192
Gilles Peskinecf740502019-07-03 20:43:05 +02005193component_test_cmake_shared () {
5194 msg "build/test: cmake shared" # ~ 2min
5195 cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On .
5196 make
Gilles Peskine56c01612019-07-03 20:43:32 +02005197 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskinecf740502019-07-03 20:43:05 +02005198 make test
Gilles Peskineca144592021-11-04 12:52:14 +01005199 programs/test/dlopen_demo.sh
Gilles Peskinecf740502019-07-03 20:43:05 +02005200}
5201
Gilles Peskineec10bf12019-09-20 19:56:06 +02005202test_build_opt () {
5203 info=$1 cc=$2; shift 2
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005204 $cc --version
Gilles Peskineec10bf12019-09-20 19:56:06 +02005205 for opt in "$@"; do
5206 msg "build/test: $cc $opt, $info" # ~ 30s
Gilles Peskine21570cf2023-12-22 11:49:50 +01005207 make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror"
Gilles Peskineec10bf12019-09-20 19:56:06 +02005208 # We're confident enough in compilers to not run _all_ the tests,
5209 # but at least run the unit tests. In particular, runs with
5210 # optimizations use inline assembly whereas runs with -O0
5211 # skip inline assembly.
5212 make test # ~30s
5213 make clean
5214 done
5215}
5216
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005217# For FreeBSD we invoke the function by name so this condition is added
5218# to disable the existing test_clang_opt function for linux.
5219if [[ $(uname) != "Linux" ]]; then
5220 component_test_clang_opt () {
5221 scripts/config.py full
5222 test_build_opt 'full config' clang -O0 -Os -O2
5223 }
5224fi
5225
5226component_test_clang_latest_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01005227 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005228 test_build_opt 'full config' "$CLANG_LATEST" -O0 -Os -O2
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005229}
5230support_test_clang_latest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005231 type "$CLANG_LATEST" >/dev/null 2>/dev/null
Gilles Peskineec10bf12019-09-20 19:56:06 +02005232}
5233
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005234component_test_clang_earliest_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01005235 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005236 test_build_opt 'full config' "$CLANG_EARLIEST" -O0
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005237}
5238support_test_clang_earliest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005239 type "$CLANG_EARLIEST" >/dev/null 2>/dev/null
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005240}
5241
5242component_test_gcc_latest_opt () {
5243 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005244 test_build_opt 'full config' "$GCC_LATEST" -O0 -Os -O2
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005245}
5246support_test_gcc_latest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005247 type "$GCC_LATEST" >/dev/null 2>/dev/null
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005248}
5249
5250component_test_gcc_earliest_opt () {
5251 scripts/config.py full
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005252 test_build_opt 'full config' "$GCC_EARLIEST" -O0
Gowtham Suresh Kumara12baf82023-07-19 08:39:20 +01005253}
5254support_test_gcc_earliest_opt () {
Gowtham Suresh Kumar6f1977b2023-07-28 17:04:47 +01005255 type "$GCC_EARLIEST" >/dev/null 2>/dev/null
Gilles Peskineec10bf12019-09-20 19:56:06 +02005256}
5257
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02005258component_build_mbedtls_config_file () {
5259 msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s
Gilles Peskine2003c2f2022-04-07 20:55:57 +02005260 scripts/config.py -w full_config.h full
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02005261 echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H"
Gilles Peskine21570cf2023-12-22 11:49:50 +01005262 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'"
Gilles Peskine45e680e2022-04-13 23:23:21 +02005263 # Make sure this feature is enabled. We'll disable it in the next phase.
Gilles Peskinee10df772022-04-07 21:06:41 +02005264 programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
5265 make clean
5266
5267 msg "build: make with MBEDTLS_CONFIG_FILE + MBEDTLS_USER_CONFIG_FILE"
5268 # In the user config, disable one feature (for simplicity, pick a feature
5269 # that nothing else depends on).
5270 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
Gilles Peskine21570cf2023-12-22 11:49:50 +01005271 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"' -DMBEDTLS_USER_CONFIG_FILE='\"user_config.h\"'"
Gilles Peskinee10df772022-04-07 21:06:41 +02005272 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
5273
5274 rm -f user_config.h full_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005275}
5276
Gilles Peskine7d904e72022-04-07 21:59:14 +02005277component_build_psa_config_file () {
5278 msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE" # ~40s
5279 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
5280 cp "$CRYPTO_CONFIG_H" psa_test_config.h
5281 echo '#error "MBEDTLS_PSA_CRYPTO_CONFIG_FILE is not working"' >"$CRYPTO_CONFIG_H"
5282 make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"'"
Gilles Peskine45e680e2022-04-13 23:23:21 +02005283 # Make sure this feature is enabled. We'll disable it in the next phase.
Gilles Peskine7d904e72022-04-07 21:59:14 +02005284 programs/test/query_compile_time_config MBEDTLS_CMAC_C
5285 make clean
5286
5287 msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE + MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE" # ~40s
5288 # In the user config, disable one feature, which will reflect on the
5289 # mbedtls configuration so we can query it with query_compile_time_config.
5290 echo '#undef PSA_WANT_ALG_CMAC' >psa_user_config.h
5291 scripts/config.py unset MBEDTLS_CMAC_C
5292 make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"' -DMBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE='\"psa_user_config.h\"'"
5293 not programs/test/query_compile_time_config MBEDTLS_CMAC_C
5294
5295 rm -f psa_test_config.h psa_user_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005296}
5297
Gilles Peskinedf6e84a2023-02-22 22:09:51 +01005298component_build_psa_alt_headers () {
5299 msg "build: make with PSA alt headers" # ~20s
5300
5301 # Generate alternative versions of the substitutable headers with the
5302 # same content except different include guards.
5303 make -C tests include/alt-extra/psa/crypto_platform_alt.h include/alt-extra/psa/crypto_struct_alt.h
5304
5305 # Build the library and some programs.
5306 # Don't build the fuzzers to avoid having to go through hoops to set
5307 # a correct include path for programs/fuzz/Makefile.
5308 make CFLAGS="-I ../tests/include/alt-extra -DMBEDTLS_PSA_CRYPTO_PLATFORM_FILE='\"psa/crypto_platform_alt.h\"' -DMBEDTLS_PSA_CRYPTO_STRUCT_FILE='\"psa/crypto_struct_alt.h\"'" lib
5309 make -C programs -o fuzz CFLAGS="-I ../tests/include/alt-extra -DMBEDTLS_PSA_CRYPTO_PLATFORM_FILE='\"psa/crypto_platform_alt.h\"' -DMBEDTLS_PSA_CRYPTO_STRUCT_FILE='\"psa/crypto_struct_alt.h\"'"
5310
5311 # Check that we're getting the alternative include guards and not the
5312 # original include guards.
5313 programs/test/query_included_headers | grep -x PSA_CRYPTO_PLATFORM_ALT_H
5314 programs/test/query_included_headers | grep -x PSA_CRYPTO_STRUCT_ALT_H
5315 programs/test/query_included_headers | not grep -x PSA_CRYPTO_PLATFORM_H
5316 programs/test/query_included_headers | not grep -x PSA_CRYPTO_STRUCT_H
5317}
5318
Dave Rodgman852de3c2023-12-14 14:46:45 +00005319component_test_m32_no_asm () {
5320 # Build without assembly, so as to use portable C code (in a 32-bit
Gilles Peskine77f05352021-10-07 19:27:16 +02005321 # build) and not the i386-specific inline assembly.
Dave Rodgmana2cf2402023-12-15 11:04:13 +00005322 #
5323 # Note that we require gcc, because clang Asan builds fail to link for
5324 # this target (cannot find libclang_rt.lsan-i386.a - this is a known clang issue).
Dave Rodgman852de3c2023-12-14 14:46:45 +00005325 msg "build: i386, make, gcc, no asm (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005326 scripts/config.py full
Dave Rodgman852de3c2023-12-14 14:46:45 +00005327 scripts/config.py unset MBEDTLS_HAVE_ASM
5328 scripts/config.py unset MBEDTLS_PADLOCK_C
Pengyu Lv13226132023-10-16 14:03:29 +08005329 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
Gilles Peskine21570cf2023-12-22 11:49:50 +01005330 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005331
Dave Rodgman852de3c2023-12-14 14:46:45 +00005332 msg "test: i386, make, gcc, no asm (ASan build)"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01005333 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01005334}
Dave Rodgman852de3c2023-12-14 14:46:45 +00005335support_test_m32_no_asm () {
Gilles Peskine878cf602019-01-06 20:50:38 +00005336 case $(uname -m) in
Pengyu Lvc92df3b2022-10-21 10:50:26 +00005337 amd64|x86_64) true;;
Gilles Peskine878cf602019-01-06 20:50:38 +00005338 *) false;;
5339 esac
5340}
Simon Butcher8e6a22a2018-07-20 21:27:33 +01005341
Gilles Peskineff0aee02021-10-05 09:36:03 +02005342component_test_m32_o2 () {
5343 # Build with optimization, to use the i386 specific inline assembly
5344 # and go faster for tests.
5345 msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005346 scripts/config.py full
Pengyu Lv13226132023-10-16 14:03:29 +08005347 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
Gilles Peskine21570cf2023-12-22 11:49:50 +01005348 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01005349
Gilles Peskineff0aee02021-10-05 09:36:03 +02005350 msg "test: i386, make, gcc -O2 (ASan build)"
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005351 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01005352
Gilles Peskineff0aee02021-10-05 09:36:03 +02005353 msg "test ssl-opt.sh, i386, make, gcc-O2"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005354 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01005355}
Gilles Peskinecf522222021-10-07 19:25:29 +02005356support_test_m32_o2 () {
Dave Rodgman852de3c2023-12-14 14:46:45 +00005357 support_test_m32_no_asm "$@"
Gilles Peskine878cf602019-01-06 20:50:38 +00005358}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005359
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005360component_test_m32_everest () {
5361 msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005362 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
Pengyu Lv13226132023-10-16 14:03:29 +08005363 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
Dave Rodgmanb90f87b2023-12-14 23:27:33 +00005364 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005365
5366 msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
5367 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01005368
5369 msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005370 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01005371
5372 msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
5373 # Exclude some symmetric ciphers that are redundant here to gain time.
Manuel Pégourié-Gonnard296787f2022-04-06 13:28:27 +02005374 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA'
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005375}
5376support_test_m32_everest () {
Dave Rodgman852de3c2023-12-14 14:46:45 +00005377 support_test_m32_no_asm "$@"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02005378}
5379
Gilles Peskine8f073122018-11-27 15:58:47 +01005380component_test_mx32 () {
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005381 msg "build: 64-bit ILP32, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005382 scripts/config.py full
Dave Rodgman84125a12024-01-02 11:42:38 +00005383 make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -mx32' LDFLAGS='-mx32'
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005384
5385 msg "test: 64-bit ILP32, make, gcc"
5386 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01005387}
Gilles Peskine878cf602019-01-06 20:50:38 +00005388support_test_mx32 () {
5389 case $(uname -m) in
5390 amd64|x86_64) true;;
5391 *) false;;
5392 esac
5393}
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01005394
Peter Kolbus60c6da22018-12-27 06:59:04 -06005395component_test_min_mpi_window_size () {
5396 msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005397 scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1
Dave Rodgman17127e92023-12-14 16:42:48 +00005398 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Peter Kolbus60c6da22018-12-27 06:59:04 -06005399 make
5400
5401 msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s
5402 make test
5403}
5404
Gilles Peskine8f073122018-11-27 15:58:47 +01005405component_test_have_int32 () {
5406 msg "build: gcc, force 32-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005407 scripts/config.py unset MBEDTLS_HAVE_ASM
5408 scripts/config.py unset MBEDTLS_AESNI_C
5409 scripts/config.py unset MBEDTLS_PADLOCK_C
Jerry Yue51eddc2023-01-11 14:16:08 +08005410 scripts/config.py unset MBEDTLS_AESCE_C
Dave Rodgmand8d64512023-12-19 12:20:21 +00005411 make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01005412
Gilles Peskine8f073122018-11-27 15:58:47 +01005413 msg "test: gcc, force 32-bit bignum limbs"
5414 make test
5415}
Andres Amaya Garciafe843a32017-07-20 13:21:34 +01005416
Gilles Peskine8f073122018-11-27 15:58:47 +01005417component_test_have_int64 () {
5418 msg "build: gcc, force 64-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005419 scripts/config.py unset MBEDTLS_HAVE_ASM
5420 scripts/config.py unset MBEDTLS_AESNI_C
5421 scripts/config.py unset MBEDTLS_PADLOCK_C
Jerry Yue51eddc2023-01-11 14:16:08 +08005422 scripts/config.py unset MBEDTLS_AESCE_C
Dave Rodgmand8d64512023-12-19 12:20:21 +00005423 make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64'
Gilles Peskine14c3c062018-01-29 21:25:12 +01005424
Gilles Peskine8f073122018-11-27 15:58:47 +01005425 msg "test: gcc, force 64-bit bignum limbs"
5426 make test
5427}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00005428
Gabor Mezeie256cc12023-07-26 17:28:48 +02005429component_test_have_int32_cmake_new_bignum () {
5430 msg "build: gcc, force 32-bit bignum limbs, new bignum interface, test hooks (ASan build)"
5431 scripts/config.py unset MBEDTLS_HAVE_ASM
5432 scripts/config.py unset MBEDTLS_AESNI_C
5433 scripts/config.py unset MBEDTLS_PADLOCK_C
5434 scripts/config.py unset MBEDTLS_AESCE_C
5435 scripts/config.py set MBEDTLS_TEST_HOOKS
Janos Follath2f045822023-07-31 10:57:16 +01005436 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
Janos Follathf3135af2023-07-31 10:07:57 +01005437 make CC=gcc CFLAGS="$ASAN_CFLAGS -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32" LDFLAGS="$ASAN_CFLAGS"
Gabor Mezeie256cc12023-07-26 17:28:48 +02005438
5439 msg "test: gcc, force 32-bit bignum limbs, new bignum interface, test hooks (ASan build)"
5440 make test
5441}
5442
Gilles Peskine8f073122018-11-27 15:58:47 +01005443component_test_no_udbl_division () {
5444 msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005445 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005446 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskine21570cf2023-12-22 11:49:50 +01005447 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005448
Gilles Peskine8f073122018-11-27 15:58:47 +01005449 msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
5450 make test
5451}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005452
Gilles Peskine8f073122018-11-27 15:58:47 +01005453component_test_no_64bit_multiplication () {
5454 msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005455 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02005456 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskine21570cf2023-12-22 11:49:50 +01005457 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005458
Gilles Peskine8f073122018-11-27 15:58:47 +01005459 msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
5460 make test
5461}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005462
Gilles Peskine3809f5f2020-11-09 15:40:05 +01005463component_test_no_strings () {
5464 msg "build: no strings" # ~10s
5465 scripts/config.py full
5466 # Disable options that activate a large amount of string constants.
5467 scripts/config.py unset MBEDTLS_DEBUG_C
5468 scripts/config.py unset MBEDTLS_ERROR_C
5469 scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY
5470 scripts/config.py unset MBEDTLS_VERSION_FEATURES
Gilles Peskine21570cf2023-12-22 11:49:50 +01005471 make CFLAGS='-Werror -Os'
Gilles Peskine3809f5f2020-11-09 15:40:05 +01005472
5473 msg "test: no strings" # ~ 10s
5474 make test
5475}
5476
Hanno Beckerc5722d12020-10-09 11:10:42 +01005477component_test_no_x509_info () {
5478 msg "build: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
5479 scripts/config.pl full
5480 scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests
5481 scripts/config.pl set MBEDTLS_X509_REMOVE_INFO
Gilles Peskine21570cf2023-12-22 11:49:50 +01005482 make CFLAGS='-Werror -O2'
Hanno Beckerc5722d12020-10-09 11:10:42 +01005483
5484 msg "test: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
5485 make test
5486
5487 msg "test: ssl-opt.sh, full + MBEDTLS_X509_REMOVE_INFO" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005488 tests/ssl-opt.sh
Hanno Beckerc5722d12020-10-09 11:10:42 +01005489}
5490
Gilles Peskine8f073122018-11-27 15:58:47 +01005491component_build_arm_none_eabi_gcc () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005492 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005493 scripts/config.py baremetal
Gilles Peskineaeedd742020-09-02 11:03:04 +02005494 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005495
Gilles Peskinee36fe812021-09-01 20:00:33 +02005496 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005497 ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01005498}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005499
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005500component_build_arm_linux_gnueabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005501 msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005502 scripts/config.py baremetal
Gilles Peskine2c897d72019-08-09 16:05:05 +02005503 # Build for a target platform that's close to what Debian uses
5504 # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort).
Dave Rodgman017a1992022-03-31 14:07:01 +01005505 # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments.
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005506 # Build everything including programs, see for example
Dave Rodgman017a1992022-03-31 14:07:01 +01005507 # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005508 make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te'
5509
Gilles Peskinee36fe812021-09-01 20:00:33 +02005510 msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005511 ${ARM_LINUX_GNUEABI_GCC_PREFIX}size -t library/*.o
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005512}
5513support_build_arm_linux_gnueabi_gcc_arm5vte () {
5514 type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1
5515}
5516
5517component_build_arm_none_eabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005518 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02005519 scripts/config.py baremetal
5520 # This is an imperfect substitute for
5521 # component_build_arm_linux_gnueabi_gcc_arm5vte
Manuel Pégourié-Gonnardae505ee2021-07-06 09:44:59 +02005522 # in case the gcc-arm-linux-gnueabi toolchain is not available
Gilles Peskineaeedd742020-09-02 11:03:04 +02005523 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005524
Gilles Peskinee36fe812021-09-01 20:00:33 +02005525 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005526 ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o
Gilles Peskine93e4e032019-08-05 11:34:25 +02005527}
5528
Gilles Peskine6e2fb862020-04-30 23:00:53 +02005529component_build_arm_none_eabi_gcc_m0plus () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02005530 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s
5531 scripts/config.py baremetal_size
Gilles Peskineaeedd742020-09-02 11:03:04 +02005532 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005533
Gilles Peskinee36fe812021-09-01 20:00:33 +02005534 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size"
Manuel Pégourié-Gonnarda14b8f02023-03-28 12:49:39 +02005535 ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o
Manuel Pégourié-Gonnard67f80372023-06-06 13:01:18 +02005536 for lib in library/*.a; do
5537 echo "$lib:"
5538 ${ARM_NONE_EABI_GCC_PREFIX}size -t $lib | grep TOTALS
5539 done
Gilles Peskine6e2fb862020-04-30 23:00:53 +02005540}
5541
Gilles Peskine8f073122018-11-27 15:58:47 +01005542component_build_arm_none_eabi_gcc_no_udbl_division () {
Gilles Peskine6d061342020-04-30 18:19:32 +02005543 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005544 scripts/config.py baremetal
5545 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskineaeedd742020-09-02 11:03:04 +02005546 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01005547 echo "Checking that software 64-bit division is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005548 not grep __aeabi_uldiv library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01005549}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005550
Gilles Peskine8f073122018-11-27 15:58:47 +01005551component_build_arm_none_eabi_gcc_no_64bit_multiplication () {
Gilles Peskine6d061342020-04-30 18:19:32 +02005552 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005553 scripts/config.py baremetal
5554 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskineaeedd742020-09-02 11:03:04 +02005555 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01005556 echo "Checking that software 64-bit multiplication is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005557 not grep __aeabi_lmul library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01005558}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02005559
Dave Rodgman8c315f22023-06-02 10:26:24 -04005560component_build_arm_clang_thumb () {
5561 # ~ 30s
5562
5563 scripts/config.py baremetal
5564
5565 msg "build: clang thumb 2, make"
5566 make clean
5567 make CC="clang" CFLAGS='-std=c99 -Werror -Os --target=arm-linux-gnueabihf -march=armv7-m -mthumb' lib
5568
5569 # Some Thumb 1 asm is sensitive to optimisation level, so test both -O0 and -Os
5570 msg "build: clang thumb 1 -O0, make"
5571 make clean
5572 make CC="clang" CFLAGS='-std=c99 -Werror -O0 --target=arm-linux-gnueabihf -mcpu=arm1136j-s -mthumb' lib
5573
5574 msg "build: clang thumb 1 -Os, make"
5575 make clean
5576 make CC="clang" CFLAGS='-std=c99 -Werror -Os --target=arm-linux-gnueabihf -mcpu=arm1136j-s -mthumb' lib
5577}
5578
Gilles Peskine8f073122018-11-27 15:58:47 +01005579component_build_armcc () {
Gilles Peskine18487f62020-04-30 23:11:54 +02005580 msg "build: ARM Compiler 5"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005581 scripts/config.py baremetal
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00005582 # armc[56] don't support SHA-512 intrinsics
5583 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
Dave Rodgman2f386c52023-03-02 13:38:33 +00005584
Dave Rodgman4b8e8dc2023-10-08 21:41:40 +01005585 # older versions of armcc/armclang don't support AESCE_C on 32-bit Arm
5586 scripts/config.py unset MBEDTLS_AESCE_C
5587
Dave Rodgman0fddf822023-03-02 15:32:12 +00005588 # Stop armclang warning about feature detection for A64_CRYPTO.
5589 # With this enabled, the library does build correctly under armclang,
5590 # but in baremetal builds (as tested here), feature detection is
5591 # unavailable, and the user is notified via a #warning. So enabling
5592 # this feature would prevent us from building with -Werror on
5593 # armclang. Tracked in #7198.
Dave Rodgman5b89c552023-10-10 14:59:02 +01005594 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
Dave Rodgman2f386c52023-03-02 13:38:33 +00005595
Hanno Beckerf0762e92022-07-15 12:08:19 +01005596 scripts/config.py set MBEDTLS_HAVE_ASM
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00005597
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005598 make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02005599
5600 msg "size: ARM Compiler 5"
5601 "$ARMC5_FROMELF" -z library/*.o
5602
Dave Rodgmanb45d58b2023-06-02 13:54:00 -04005603 # Compile mostly with -O1 since some Arm inline assembly is disabled for -O0.
Hanno Beckerf0762e92022-07-15 12:08:19 +01005604
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005605 # ARM Compiler 6 - Target ARMv7-A
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005606 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-a"
Simon Butcher940737f2017-07-23 13:42:36 +02005607
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005608 # ARM Compiler 6 - Target ARMv7-M
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005609 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m"
5610
5611 # ARM Compiler 6 - Target ARMv7-M+DSP
5612 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m+dsp"
Simon Butcher940737f2017-07-23 13:42:36 +02005613
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005614 # ARM Compiler 6 - Target ARMv8-A - AArch32
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005615 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8.2-a"
Simon Butcher940737f2017-07-23 13:42:36 +02005616
Gilles Peskinebca6ab92017-12-19 18:24:31 +01005617 # ARM Compiler 6 - Target ARMv8-M
Dave Rodgman03f7a6e2022-08-17 14:35:29 +01005618 armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8-m.main"
Simon Butcher940737f2017-07-23 13:42:36 +02005619
Dave Rodgmanb45d58b2023-06-02 13:54:00 -04005620 # ARM Compiler 6 - Target Cortex-M0 - no optimisation
5621 armc6_build_test "-O0 --target=arm-arm-none-eabi -mcpu=cortex-m0"
5622
Dave Rodgman99318e62023-05-24 12:27:42 +01005623 # ARM Compiler 6 - Target Cortex-M0
5624 armc6_build_test "-Os --target=arm-arm-none-eabi -mcpu=cortex-m0"
Dave Rodgman4b8e8dc2023-10-08 21:41:40 +01005625
5626 # ARM Compiler 6 - Target ARMv8.2-A - AArch64
5627 #
5628 # Re-enable MBEDTLS_AESCE_C as this should be supported by the version of armclang
5629 # that we have in our CI
5630 scripts/config.py set MBEDTLS_AESCE_C
5631 armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8.2-a+crypto"
Gilles Peskine8f073122018-11-27 15:58:47 +01005632}
Tom Cosgrove6ec39ca2023-06-09 15:34:31 +01005633
Pengyu Lvdf070032023-02-24 16:03:31 +08005634support_build_armcc () {
Pengyu Lvc6298ad2023-03-01 10:31:29 +08005635 armc5_cc="$ARMC5_BIN_DIR/armcc"
5636 armc6_cc="$ARMC6_BIN_DIR/armclang"
5637 (check_tools "$armc5_cc" "$armc6_cc" > /dev/null 2>&1)
Pengyu Lvdf070032023-02-24 16:03:31 +08005638}
Manuel Pégourié-Gonnardc5c59392015-02-10 17:38:54 +01005639
Jerry Yu81d5e1f2022-01-27 13:01:01 +08005640component_test_tls13_only () {
5641 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3, without MBEDTLS_SSL_PROTO_TLS1_2"
Ronald Cronc2e110f2022-11-22 09:01:46 +01005642 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Waleed Elmelegye8402632024-01-09 17:21:20 +00005643 scripts/config.py set MBEDTLS_SSL_RECORD_SIZE_LIMIT
Jerry Yuda5af222021-12-24 18:45:45 +08005644 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5645
Gilles Peskine4bb369c2022-10-29 17:44:19 +02005646 msg "test: TLS 1.3 only, all key exchange modes enabled"
5647 make test
Jerry Yubaa49342022-02-15 10:26:40 +08005648
Ronald Cronc3f43b62022-10-17 17:35:32 +02005649 msg "ssl-opt.sh: TLS 1.3 only, all key exchange modes enabled"
5650 tests/ssl-opt.sh
Jerry Yuda5af222021-12-24 18:45:45 +08005651}
5652
Ronald Cronc3f43b62022-10-17 17:35:32 +02005653component_test_tls13_only_psk () {
5654 msg "build: TLS 1.3 only from default, only PSK key exchange mode"
5655 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5656 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5657 scripts/config.py unset MBEDTLS_ECDH_C
Przemek Stekiel0c231472023-06-14 11:12:45 +02005658 scripts/config.py unset MBEDTLS_DHM_C
Ronald Cronc3f43b62022-10-17 17:35:32 +02005659 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5660 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5661 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5662 scripts/config.py unset MBEDTLS_ECDSA_C
5663 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00005664 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01005665 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Crone3dac4a2022-06-10 17:21:51 +02005666 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5667
Ronald Cronc3f43b62022-10-17 17:35:32 +02005668 msg "test_suite_ssl: TLS 1.3 only, only PSK key exchange mode enabled"
5669 cd tests; ./test_suite_ssl; cd ..
Ronald Crone3dac4a2022-06-10 17:21:51 +02005670
Ronald Cronc3f43b62022-10-17 17:35:32 +02005671 msg "ssl-opt.sh: TLS 1.3 only, only PSK key exchange mode enabled"
5672 tests/ssl-opt.sh
5673}
5674
5675component_test_tls13_only_ephemeral () {
5676 msg "build: TLS 1.3 only from default, only ephemeral key exchange mode"
5677 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5678 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian2dbfeda2022-11-15 10:52:57 +00005679 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005680 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5681
5682 msg "test_suite_ssl: TLS 1.3 only, only ephemeral key exchange mode"
5683 cd tests; ./test_suite_ssl; cd ..
5684
5685 msg "ssl-opt.sh: TLS 1.3 only, only ephemeral key exchange mode"
5686 tests/ssl-opt.sh
5687}
5688
Przemek Stekiela01c2422023-06-13 10:46:48 +02005689component_test_tls13_only_ephemeral_ffdh () {
5690 msg "build: TLS 1.3 only from default, only ephemeral ffdh key exchange mode"
5691 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5692 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5693 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
Przemek Stekielce05f542023-06-15 16:44:08 +02005694 scripts/config.py unset MBEDTLS_ECDH_C
5695
Przemek Stekiela01c2422023-06-13 10:46:48 +02005696 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5697
5698 msg "test_suite_ssl: TLS 1.3 only, only ephemeral ffdh key exchange mode"
5699 cd tests; ./test_suite_ssl; cd ..
5700
5701 msg "ssl-opt.sh: TLS 1.3 only, only ephemeral ffdh key exchange mode"
5702 tests/ssl-opt.sh
5703}
5704
Ronald Cronc3f43b62022-10-17 17:35:32 +02005705component_test_tls13_only_psk_ephemeral () {
5706 msg "build: TLS 1.3 only from default, only PSK ephemeral key exchange mode"
5707 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5708 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5709 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5710 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5711 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5712 scripts/config.py unset MBEDTLS_ECDSA_C
5713 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00005714 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01005715 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005716 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5717
5718 msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral key exchange mode"
5719 cd tests; ./test_suite_ssl; cd ..
5720
5721 msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral key exchange mode"
5722 tests/ssl-opt.sh
5723}
5724
Przemek Stekiela01c2422023-06-13 10:46:48 +02005725component_test_tls13_only_psk_ephemeral_ffdh () {
5726 msg "build: TLS 1.3 only from default, only PSK ephemeral ffdh key exchange mode"
5727 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5728 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5729 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5730 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5731 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5732 scripts/config.py unset MBEDTLS_ECDSA_C
5733 scripts/config.py unset MBEDTLS_PKCS1_V21
5734 scripts/config.py unset MBEDTLS_PKCS7_C
5735 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Przemek Stekielce05f542023-06-15 16:44:08 +02005736 scripts/config.py unset MBEDTLS_ECDH_C
Przemek Stekiela01c2422023-06-13 10:46:48 +02005737 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5738
5739 msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral ffdh key exchange mode"
5740 cd tests; ./test_suite_ssl; cd ..
5741
5742 msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral ffdh key exchange mode"
5743 tests/ssl-opt.sh
5744}
5745
Ronald Cronc3f43b62022-10-17 17:35:32 +02005746component_test_tls13_only_psk_all () {
5747 msg "build: TLS 1.3 only from default, without ephemeral key exchange mode"
5748 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5749 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5750 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5751 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5752 scripts/config.py unset MBEDTLS_ECDSA_C
5753 scripts/config.py unset MBEDTLS_PKCS1_V21
Dave Rodgman71565cf2022-11-11 10:37:38 +00005754 scripts/config.py unset MBEDTLS_PKCS7_C
Ronald Cronc2e110f2022-11-22 09:01:46 +01005755 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005756 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5757
5758 msg "test_suite_ssl: TLS 1.3 only, PSK and PSK ephemeral key exchange modes"
5759 cd tests; ./test_suite_ssl; cd ..
5760
5761 msg "ssl-opt.sh: TLS 1.3 only, PSK and PSK ephemeral key exchange modes"
5762 tests/ssl-opt.sh
5763}
5764
5765component_test_tls13_only_ephemeral_all () {
5766 msg "build: TLS 1.3 only from default, without PSK key exchange mode"
5767 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Ronald Cronc2e110f2022-11-22 09:01:46 +01005768 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Ronald Cronc3f43b62022-10-17 17:35:32 +02005769 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
5770
5771 msg "test_suite_ssl: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes"
5772 cd tests; ./test_suite_ssl; cd ..
5773
5774 msg "ssl-opt.sh: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes"
5775 tests/ssl-opt.sh
Ronald Crone3dac4a2022-06-10 17:21:51 +02005776}
5777
Ronald Cron6f135e12021-12-08 16:57:54 +01005778component_test_tls13 () {
5779 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
5780 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005781 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5782 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Ronald Cronc2e110f2022-11-22 09:01:46 +01005783 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Dave Rodgman17127e92023-12-14 16:42:48 +00005784 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005785 make
Ronald Cron6f135e12021-12-08 16:57:54 +01005786 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005787 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01005788 msg "ssl-opt.sh (TLS 1.3)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01005789 tests/ssl-opt.sh
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005790}
5791
Ronald Cron6f135e12021-12-08 16:57:54 +01005792component_test_tls13_no_compatibility_mode () {
5793 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
5794 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01005795 scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5796 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Ronald Cronc2e110f2022-11-22 09:01:46 +01005797 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
Dave Rodgman17127e92023-12-14 16:42:48 +00005798 CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan .
Hanno Beckera711f6e2020-05-04 12:03:51 +01005799 make
Ronald Cron6f135e12021-12-08 16:57:54 +01005800 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Hanno Becker6c53ecc2021-08-01 19:20:10 +01005801 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01005802 msg "ssl-opt.sh (TLS 1.3 no compatibility mode)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01005803 tests/ssl-opt.sh
Hanno Becker6c53ecc2021-08-01 19:20:10 +01005804}
5805
Gilles Peskine8f073122018-11-27 15:58:47 +01005806component_build_mingw () {
5807 msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s
Pengyu Lv64cca2f2023-10-10 18:22:24 +08005808 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 lib programs
Hanno Beckere963efa2018-01-03 10:03:43 +00005809
Gilles Peskine8f073122018-11-27 15:58:47 +01005810 # note Make tests only builds the tests, but doesn't run them
Pengyu Lv64cca2f2023-10-10 18:22:24 +08005811 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -maes -msse2 -mpclmul' WINDOWS_BUILD=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01005812 make WINDOWS_BUILD=1 clean
Gilles Peskine2a458da2017-05-12 15:26:58 +02005813
Gilles Peskine8f073122018-11-27 15:58:47 +01005814 msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s
Pengyu Lv64cca2f2023-10-10 18:22:24 +08005815 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 SHARED=1 lib programs
5816 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 SHARED=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01005817 make WINDOWS_BUILD=1 clean
Pengyu Lvbb4f63c2023-10-19 10:38:58 +08005818
Pengyu Lv158eead2023-10-19 11:27:05 +08005819 msg "build: Windows cross build - mingw64, make (Library only, default config without MBEDTLS_AESNI_C)" # ~ 30s
Pengyu Lvbb4f63c2023-10-19 10:38:58 +08005820 ./scripts/config.py unset MBEDTLS_AESNI_C #
Pengyu Lv158eead2023-10-19 11:27:05 +08005821 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib
Gilles Peskine8f073122018-11-27 15:58:47 +01005822 make WINDOWS_BUILD=1 clean
5823}
Jaeden Amero117b8a42019-04-17 15:19:26 +01005824support_build_mingw() {
Pengyu Lv51b5f002023-02-24 15:38:52 +08005825 case $(i686-w64-mingw32-gcc -dumpversion 2>/dev/null) in
5826 [0-5]*|"") false;;
Jaeden Amero117b8a42019-04-17 15:19:26 +01005827 *) true;;
5828 esac
5829}
Simon Butcher91aef332016-11-17 09:20:50 +00005830
Gilles Peskine8f073122018-11-27 15:58:47 +01005831component_test_memsan () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005832 msg "build: MSan (clang)" # ~ 1 min 20s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02005833 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005834 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
5835 make
Manuel Pégourié-Gonnard4a9dc2a2014-05-09 13:46:59 +02005836
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005837 msg "test: main suites (MSan)" # ~ 10s
5838 make test
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01005839
Gilles Peskine6848d172023-11-02 19:58:03 +01005840 msg "test: metatests (MSan)"
5841 tests/scripts/run-metatests.sh any msan
5842
Gilles Peskine82b27272019-06-14 18:27:03 +02005843 msg "program demos (MSan)" # ~20s
5844 tests/scripts/run_demos.py
5845
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005846 msg "test: ssl-opt.sh (MSan)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005847 tests/ssl-opt.sh
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01005848
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005849 # Optional part(s)
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01005850
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005851 if [ "$MEMORY" -gt 0 ]; then
5852 msg "test: compat.sh (MSan)" # ~ 6 min 20s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005853 tests/compat.sh
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005854 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01005855}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01005856
Bence Szépkúti0354d042023-12-06 16:14:37 +01005857component_release_test_valgrind () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005858 msg "build: Release (clang)"
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005859 # default config, in particular without MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005860 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
5861 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005862
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005863 msg "test: main suites, Valgrind (default config)"
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005864 make memcheck
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005865
Gilles Peskine636c26a2020-03-04 20:46:15 +01005866 # Optional parts (slow; currently broken on OS X because programs don't
5867 # seem to receive signals under valgrind on OS X).
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005868 # These optional parts don't run on the CI.
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005869 if [ "$MEMORY" -gt 0 ]; then
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005870 msg "test: ssl-opt.sh --memcheck (default config)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005871 tests/ssl-opt.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005872 fi
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005873
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005874 if [ "$MEMORY" -gt 1 ]; then
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005875 msg "test: compat.sh --memcheck (default config)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005876 tests/compat.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01005877 fi
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02005878
5879 if [ "$MEMORY" -gt 0 ]; then
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005880 msg "test: context-info.sh --memcheck (default config)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005881 tests/context-info.sh --memcheck
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02005882 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01005883}
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005884
Bence Szépkúti0354d042023-12-06 16:14:37 +01005885component_release_test_valgrind_psa () {
Gilles Peskinedf3dd4c2022-11-29 16:45:30 +01005886 msg "build: Release, full (clang)"
5887 # full config, in particular with MBEDTLS_USE_PSA_CRYPTO
5888 scripts/config.py full
5889 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
5890 make
5891
5892 msg "test: main suites, Valgrind (full config)"
5893 make memcheck
5894}
5895
Paul Elliott62dc3922021-11-25 17:29:40 +00005896support_test_cmake_out_of_source () {
5897 distrib_id=""
5898 distrib_ver=""
5899 distrib_ver_minor=""
5900 distrib_ver_major=""
5901
5902 # Attempt to parse lsb-release to find out distribution and version. If not
5903 # found this should fail safe (test is supported).
5904 if [[ -f /etc/lsb-release ]]; then
5905
5906 while read -r lsb_line; do
5907 case "$lsb_line" in
5908 "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};;
5909 "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};;
5910 esac
5911 done < /etc/lsb-release
5912
5913 distrib_ver_major="${distrib_ver%%.*}"
5914 distrib_ver="${distrib_ver#*.}"
5915 distrib_ver_minor="${distrib_ver%%.*}"
5916 fi
5917
5918 # Running the out of source CMake test on Ubuntu 16.04 using more than one
5919 # processor (as the CI does) can create a race condition whereby the build
5920 # fails to see a generated file, despite that file actually having been
5921 # generated. This problem appears to go away with 18.04 or newer, so make
5922 # the out of source tests unsupported on Ubuntu 16.04.
5923 [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ]
5924}
5925
Gilles Peskine8f073122018-11-27 15:58:47 +01005926component_test_cmake_out_of_source () {
David Horstmann862abe22023-09-28 10:42:10 +01005927 # Remove existing generated files so that we use the ones cmake
David Horstmann9f48fff2023-09-27 15:53:54 +01005928 # generates
5929 make neat
5930
Gilles Peskine8f073122018-11-27 15:58:47 +01005931 msg "build: cmake 'out-of-source' build"
Gilles Peskine8f073122018-11-27 15:58:47 +01005932 MBEDTLS_ROOT_DIR="$PWD"
5933 mkdir "$OUT_OF_SOURCE_DIR"
5934 cd "$OUT_OF_SOURCE_DIR"
David Horstmann9f48fff2023-09-27 15:53:54 +01005935 # Note: Explicitly generate files as these are turned off in releases
5936 cmake -D CMAKE_BUILD_TYPE:String=Check -D GEN_FILES=ON "$MBEDTLS_ROOT_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01005937 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00005938
Gilles Peskine8f073122018-11-27 15:58:47 +01005939 msg "test: cmake 'out-of-source' build"
5940 make test
Gilles Peskinea841c2a2022-04-16 11:31:25 +02005941 # Check that ssl-opt.sh can find the test programs.
Gilles Peskine8f073122018-11-27 15:58:47 +01005942 # Also ensure that there are no error messages such as
5943 # "No such file or directory", which would indicate that some required
5944 # file is missing (ssl-opt.sh tolerates the absence of some files so
5945 # may exit with status 0 but emit errors).
Gilles Peskinea841c2a2022-04-16 11:31:25 +02005946 ./tests/ssl-opt.sh -f 'Default' >ssl-opt.out 2>ssl-opt.err
Gilles Peskine7393ec52022-04-15 22:43:38 +02005947 grep PASS ssl-opt.out
Gilles Peskinef7e956c2020-03-28 18:56:09 +01005948 cat ssl-opt.err >&2
5949 # If ssl-opt.err is non-empty, record an error and keep going.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005950 [ ! -s ssl-opt.err ]
Gilles Peskine7393ec52022-04-15 22:43:38 +02005951 rm ssl-opt.out ssl-opt.err
Gilles Peskine8f073122018-11-27 15:58:47 +01005952 cd "$MBEDTLS_ROOT_DIR"
5953 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01005954}
Andres AGdc192212016-08-31 17:33:13 +01005955
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005956component_test_cmake_as_subdirectory () {
David Horstmann9f48fff2023-09-27 15:53:54 +01005957 # Remove existing generated files so that we use the ones CMake
5958 # generates
5959 make neat
5960
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005961 msg "build: cmake 'as-subdirectory' build"
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005962 cd programs/test/cmake_subproject
David Horstmann9f48fff2023-09-27 15:53:54 +01005963 # Note: Explicitly generate files as these are turned off in releases
5964 cmake -D GEN_FILES=ON .
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005965 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005966 ./cmake_subproject
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005967}
Gilles Peskinea3000992022-02-04 00:21:12 +01005968support_test_cmake_as_subdirectory () {
5969 support_test_cmake_out_of_source
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01005970}
5971
Chris Kayd259e342021-03-25 16:03:25 +00005972component_test_cmake_as_package () {
David Horstmann6c979852023-09-28 10:40:22 +01005973 # Remove existing generated files so that we use the ones CMake
5974 # generates
5975 make neat
5976
Chris Kayd259e342021-03-25 16:03:25 +00005977 msg "build: cmake 'as-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00005978 cd programs/test/cmake_package
5979 cmake .
5980 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005981 ./cmake_package
Chris Kayd259e342021-03-25 16:03:25 +00005982}
Gilles Peskinea3000992022-02-04 00:21:12 +01005983support_test_cmake_as_package () {
5984 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00005985}
5986
5987component_test_cmake_as_package_install () {
David Horstmann6c979852023-09-28 10:40:22 +01005988 # Remove existing generated files so that we use the ones CMake
5989 # generates
5990 make neat
5991
Chris Kayd259e342021-03-25 16:03:25 +00005992 msg "build: cmake 'as-installed-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00005993 cd programs/test/cmake_package_install
5994 cmake .
5995 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02005996 ./cmake_package_install
Chris Kayd259e342021-03-25 16:03:25 +00005997}
Gilles Peskinea3000992022-02-04 00:21:12 +01005998support_test_cmake_as_package_install () {
5999 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00006000}
6001
David Horstmann20550e32023-01-12 14:17:01 +00006002component_build_cmake_custom_config_file () {
David Horstmann969c1452023-01-31 10:34:44 +00006003 # Make a copy of config file to use for the in-tree test
6004 cp "$CONFIG_H" include/mbedtls_config_in_tree_copy.h
David Horstmann20550e32023-01-12 14:17:01 +00006005
6006 MBEDTLS_ROOT_DIR="$PWD"
6007 mkdir "$OUT_OF_SOURCE_DIR"
6008 cd "$OUT_OF_SOURCE_DIR"
6009
David Horstmann969c1452023-01-31 10:34:44 +00006010 # Build once to get the generated files (which need an intact config file)
David Horstmann20550e32023-01-12 14:17:01 +00006011 cmake "$MBEDTLS_ROOT_DIR"
6012 make
6013
6014 msg "build: cmake with -DMBEDTLS_CONFIG_FILE"
6015 scripts/config.py -w full_config.h full
David Horstmann969c1452023-01-31 10:34:44 +00006016 echo '#error "cmake -DMBEDTLS_CONFIG_FILE is not working."' > "$MBEDTLS_ROOT_DIR/$CONFIG_H"
David Horstmann20550e32023-01-12 14:17:01 +00006017 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h "$MBEDTLS_ROOT_DIR"
6018 make
6019
6020 msg "build: cmake with -DMBEDTLS_CONFIG_FILE + -DMBEDTLS_USER_CONFIG_FILE"
6021 # In the user config, disable one feature (for simplicity, pick a feature
6022 # that nothing else depends on).
6023 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
6024
6025 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h -DMBEDTLS_USER_CONFIG_FILE=user_config.h "$MBEDTLS_ROOT_DIR"
6026 make
6027 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
6028
6029 rm -f user_config.h full_config.h
6030
6031 cd "$MBEDTLS_ROOT_DIR"
6032 rm -rf "$OUT_OF_SOURCE_DIR"
6033
6034 # Now repeat the test for an in-tree build:
6035
David Horstmann969c1452023-01-31 10:34:44 +00006036 # Restore config for the in-tree test
6037 mv include/mbedtls_config_in_tree_copy.h "$CONFIG_H"
David Horstmann20550e32023-01-12 14:17:01 +00006038
David Horstmann969c1452023-01-31 10:34:44 +00006039 # Build once to get the generated files (which need an intact config)
David Horstmann20550e32023-01-12 14:17:01 +00006040 cmake .
6041 make
6042
6043 msg "build: cmake (in-tree) with -DMBEDTLS_CONFIG_FILE"
6044 scripts/config.py -w full_config.h full
David Horstmann969c1452023-01-31 10:34:44 +00006045 echo '#error "cmake -DMBEDTLS_CONFIG_FILE is not working."' > "$MBEDTLS_ROOT_DIR/$CONFIG_H"
David Horstmann20550e32023-01-12 14:17:01 +00006046 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h .
6047 make
6048
6049 msg "build: cmake (in-tree) with -DMBEDTLS_CONFIG_FILE + -DMBEDTLS_USER_CONFIG_FILE"
6050 # In the user config, disable one feature (for simplicity, pick a feature
6051 # that nothing else depends on).
6052 echo '#undef MBEDTLS_NIST_KW_C' >user_config.h
6053
6054 cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h -DMBEDTLS_USER_CONFIG_FILE=user_config.h .
6055 make
6056 not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C
6057
6058 rm -f user_config.h full_config.h
6059}
6060support_build_cmake_custom_config_file () {
6061 support_test_cmake_out_of_source
6062}
6063
6064
Tom Cosgrovedaddf112023-09-01 10:40:15 +01006065component_build_zeroize_checks () {
6066 msg "build: check for obviously wrong calls to mbedtls_platform_zeroize()"
6067
6068 scripts/config.py full
6069
6070 # Only compile - we're looking for sizeof-pointer-memaccess warnings
Dave Rodgman84125a12024-01-02 11:42:38 +00006071 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-zeroize-memset.h\"' -DMBEDTLS_TEST_DEFINES_ZEROIZE -Werror -Wsizeof-pointer-memaccess"
Tom Cosgrovedaddf112023-09-01 10:40:15 +01006072}
6073
6074
Gilles Peskine8f073122018-11-27 15:58:47 +01006075component_test_zeroize () {
6076 # Test that the function mbedtls_platform_zeroize() is not optimized away by
6077 # different combinations of compilers and optimization flags by using an
6078 # auxiliary GDB script. Unfortunately, GDB does not return error values to the
6079 # system in all cases that the script fails, so we must manually search the
6080 # output to check whether the pass string is present and no failure strings
6081 # were printed.
Andres AGdc192212016-08-31 17:33:13 +01006082
Gilles Peskine4976e822019-01-06 19:52:22 +00006083 # Don't try to disable ASLR. We don't care about ASLR here. We do care
6084 # about a spurious message if Gdb tries and fails, so suppress that.
6085 gdb_disable_aslr=
6086 if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then
6087 gdb_disable_aslr='set disable-randomization off'
6088 fi
6089
Gilles Peskine8f073122018-11-27 15:58:47 +01006090 for optimization_flag in -O2 -O3 -Ofast -Os; do
Gilles Peskine55f7c942019-01-09 22:28:21 +01006091 for compiler in clang gcc; do
6092 msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()"
6093 make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006094 gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log
6095 grep "The buffer was correctly zeroized" test_zeroize.log
6096 not grep -i "error" test_zeroize.log
Gilles Peskine55f7c942019-01-09 22:28:21 +01006097 rm -f test_zeroize.log
6098 make clean
6099 done
Andres Amaya Garcia29673812017-10-25 10:35:51 +01006100 done
Gilles Peskine8f073122018-11-27 15:58:47 +01006101}
Gilles Peskine192c72f2017-12-21 15:59:21 +01006102
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006103component_test_psa_compliance () {
Dave Rodgman932ce852023-12-18 19:55:40 +00006104 # The arch tests build with gcc, so require use of gcc here to link properly
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006105 msg "build: make, default config (out-of-box), libmbedcrypto.a only"
Dave Rodgman932ce852023-12-18 19:55:40 +00006106 CC=gcc make -C library libmbedcrypto.a
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006107
6108 msg "unit test: test_psa_compliance.py"
Dave Rodgmand0a594d2023-12-18 22:29:56 +00006109 CC=gcc ./tests/scripts/test_psa_compliance.py
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006110}
6111
6112support_test_psa_compliance () {
Bence Szépkútief0d02e2021-11-03 11:36:09 +01006113 # psa-compliance-tests only supports CMake >= 3.10.0
Bence Szépkútica9236b2021-10-25 19:29:07 +02006114 ver="$(cmake --version)"
6115 ver="${ver#cmake version }"
6116 ver_major="${ver%%.*}"
6117
6118 ver="${ver#*.}"
6119 ver_minor="${ver%%.*}"
6120
6121 [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ]
Bence Szépkúti80b31c52021-10-19 15:05:36 +02006122}
6123
Gilles Peskinec848d222022-12-09 12:23:35 +01006124component_check_code_style () {
6125 msg "Check C code style"
6126 ./scripts/code_style.py
David Horstmann92b5ac12022-11-10 18:30:52 +00006127}
6128
Gilles Peskinec848d222022-12-09 12:23:35 +01006129support_check_code_style() {
David Horstmann92b5ac12022-11-10 18:30:52 +00006130 case $(uncrustify --version) in
6131 *0.75.1*) true;;
6132 *) false;;
6133 esac
6134}
6135
Gilles Peskine8f073122018-11-27 15:58:47 +01006136component_check_python_files () {
6137 msg "Lint: Python scripts"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006138 tests/scripts/check-python-files.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01006139}
Gilles Peskine192c72f2017-12-21 15:59:21 +01006140
Joe Subbianid614c0b2021-07-29 11:18:29 +01006141component_check_test_helpers () {
6142 msg "unit test: generate_test_code.py"
Manuel Pégourié-Gonnarddfb114a2020-06-02 11:40:08 +02006143 # unittest writes out mundane stuff like number or tests run on stderr.
6144 # Our convention is to reserve stderr for actual errors, and write
6145 # harmless info on stdout so it can be suppress with --quiet.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02006146 ./tests/scripts/test_generate_test_code.py 2>&1
Joe Subbianid614c0b2021-07-29 11:18:29 +01006147
Joe Subbiania25ffab2021-08-06 09:41:27 +01006148 msg "unit test: translate_ciphers.py"
6149 python3 -m unittest tests/scripts/translate_ciphers.py 2>&1
Gilles Peskine8f073122018-11-27 15:58:47 +01006150}
Gilles Peskine192c72f2017-12-21 15:59:21 +01006151
Jerry Yud767cc42023-03-31 15:03:55 +08006152
Gilles Peskine192c72f2017-12-21 15:59:21 +01006153################################################################
6154#### Termination
6155################################################################
6156
Gilles Peskine8f073122018-11-27 15:58:47 +01006157post_report () {
6158 msg "Done, cleaning up"
Gilles Peskinef83eb822020-03-30 20:11:39 +02006159 final_cleanup
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01006160
Gilles Peskine8f073122018-11-27 15:58:47 +01006161 final_report
6162}
6163
6164
6165
6166################################################################
6167#### Run all the things
6168################################################################
6169
Gilles Peskine5d996822020-03-28 21:09:21 +01006170# Function invoked by --error-test to test error reporting.
6171pseudo_component_error_test () {
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006172 msg "Testing error reporting $error_test_i"
Gilles Peskine5d996822020-03-28 21:09:21 +01006173 if [ $KEEP_GOING -ne 0 ]; then
6174 echo "Expect three failing commands."
6175 fi
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006176 # If the component doesn't run in a subshell, changing error_test_i to an
6177 # invalid integer will cause an error in the loop that runs this function.
6178 error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell
Gilles Peskineec135542021-08-02 23:14:03 +02006179 # Expected error: 'grep non_existent /dev/null -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01006180 grep non_existent /dev/null
Gilles Peskineec135542021-08-02 23:14:03 +02006181 # Expected error: '! grep -q . tests/scripts/all.sh -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01006182 not grep -q . "$0"
Gilles Peskineec135542021-08-02 23:14:03 +02006183 # Expected error: 'make unknown_target -> 2'
Gilles Peskine5d996822020-03-28 21:09:21 +01006184 make unknown_target
6185 false "this should not be executed"
6186}
6187
Gilles Peskinee48351a2018-11-27 16:06:30 +01006188# Run one component and clean up afterwards.
Gilles Peskine8f073122018-11-27 15:58:47 +01006189run_component () {
Gilles Peskineffcdeff2018-12-04 12:49:28 +01006190 current_component="$1"
Gilles Peskine9004a172019-09-16 15:20:36 +02006191 export MBEDTLS_TEST_CONFIGURATION="$current_component"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02006192
6193 # Unconditionally create a seedfile that's sufficiently long.
6194 # Do this before each component, because a previous component may
6195 # have messed it up or shortened it.
Gilles Peskine88a07452021-07-08 19:03:50 +02006196 local dd_cmd
6197 dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1)
6198 case $OSTYPE in
Tom Cosgrove226aca12022-03-16 14:11:07 +00006199 linux*|freebsd*|openbsd*) dd_cmd+=(status=none)
Gilles Peskine88a07452021-07-08 19:03:50 +02006200 esac
6201 "${dd_cmd[@]}"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02006202
Gilles Peskineec135542021-08-02 23:14:03 +02006203 # Run the component in a subshell, with error trapping and output
6204 # redirection set up based on the relevant options.
Gilles Peskinece266c42020-03-28 18:50:43 +01006205 if [ $KEEP_GOING -eq 1 ]; then
Gilles Peskineec135542021-08-02 23:14:03 +02006206 # We want to keep running if the subshell fails, so 'set -e' must
6207 # be off when the subshell runs.
Gilles Peskinece266c42020-03-28 18:50:43 +01006208 set +e
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +02006209 fi
Gilles Peskinece266c42020-03-28 18:50:43 +01006210 (
6211 if [ $QUIET -eq 1 ]; then
6212 # msg() will be silenced, so just print the component name here.
6213 echo "${current_component#component_}"
6214 exec >/dev/null
6215 fi
6216 if [ $KEEP_GOING -eq 1 ]; then
6217 # Keep "set -e" off, and run an ERR trap instead to record failures.
6218 set -E
6219 trap err_trap ERR
6220 fi
6221 # The next line is what runs the component
6222 "$@"
6223 if [ $KEEP_GOING -eq 1 ]; then
6224 trap - ERR
6225 exit $last_failure_status
6226 fi
6227 )
6228 component_status=$?
6229 if [ $KEEP_GOING -eq 1 ]; then
6230 set -e
6231 if [ $component_status -ne 0 ]; then
6232 failure_count=$((failure_count + 1))
6233 fi
6234 fi
Gilles Peskine2ef377d2019-10-07 18:44:21 +02006235
6236 # Restore the build tree to a clean state.
Gilles Peskinee48351a2018-11-27 16:06:30 +01006237 cleanup
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02006238 unset current_component
Gilles Peskine8f073122018-11-27 15:58:47 +01006239}
6240
6241# Preliminary setup
6242pre_check_environment
6243pre_initialize_variables
6244pre_parse_command_line "$@"
Gilles Peskine348fb9a2018-11-27 17:04:29 +01006245
Gilles Peskine878cf602019-01-06 20:50:38 +00006246pre_check_git
Gilles Peskine568f53a2021-07-12 18:16:01 +02006247pre_restore_files
Gilles Peskinef83eb822020-03-30 20:11:39 +02006248pre_back_up
Andrzej Kurekeb508712019-02-14 07:18:59 -05006249
Gilles Peskine878cf602019-01-06 20:50:38 +00006250build_status=0
6251if [ $KEEP_GOING -eq 1 ]; then
6252 pre_setup_keep_going
Gilles Peskine8f073122018-11-27 15:58:47 +01006253fi
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02006254pre_prepare_outcome_file
Gilles Peskine878cf602019-01-06 20:50:38 +00006255pre_print_configuration
6256pre_check_tools
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01006257cleanup
David Horstmann76a77382023-08-17 17:32:26 +01006258if in_mbedtls_repo; then
David Horstmann9a6c45b2023-07-14 12:30:00 +01006259 pre_generate_files
6260fi
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01006261
Gilles Peskinebeb3a812019-01-06 22:11:25 +00006262# Run the requested tests.
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006263for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do
Gilles Peskine5d996822020-03-28 21:09:21 +01006264 run_component pseudo_component_error_test
Gilles Peskine5d996822020-03-28 21:09:21 +01006265done
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02006266unset error_test_i
Gilles Peskinebeb3a812019-01-06 22:11:25 +00006267for component in $RUN_COMPONENTS; do
6268 run_component "component_$component"
6269done
Gilles Peskine8f073122018-11-27 15:58:47 +01006270
6271# We're done.
Gilles Peskine878cf602019-01-06 20:50:38 +00006272post_report