Gilles Peskine | 62cf2e8 | 2020-03-27 16:35:23 +0100 | [diff] [blame] | 1 | #! /usr/bin/env bash |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 2 | |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 3 | # all.sh |
| 4 | # |
Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 5 | # Copyright The Mbed TLS Contributors |
Dave Rodgman | 16799db | 2023-11-02 19:47:20 +0000 | [diff] [blame] | 6 | # SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 7 | |
| 8 | |
| 9 | |
| 10 | ################################################################ |
| 11 | #### Documentation |
| 12 | ################################################################ |
| 13 | |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 14 | # Purpose |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 15 | # ------- |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 16 | # |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 17 | # To run all tests possible or available on the platform. |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 18 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 19 | # Notes for users |
| 20 | # --------------- |
| 21 | # |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 22 | # Warning: the test is destructive. It includes various build modes and |
| 23 | # configurations, and can and will arbitrarily change the current CMake |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 24 | # configuration. The following files must be committed into git: |
Bence Szépkúti | bb0cfeb | 2021-05-28 09:42:25 +0200 | [diff] [blame] | 25 | # * include/mbedtls/mbedtls_config.h |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 26 | # * Makefile, library/Makefile, programs/Makefile, tests/Makefile, |
| 27 | # programs/fuzz/Makefile |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 28 | # After running this script, the CMake cache will be lost and CMake |
| 29 | # will no longer be initialised. |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 30 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 31 | # The script assumes the presence of a number of tools: |
| 32 | # * Basic Unix tools (Windows users note: a Unix-style find must be before |
| 33 | # the Windows find in the PATH) |
| 34 | # * Perl |
| 35 | # * GNU Make |
| 36 | # * CMake |
| 37 | # * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind) |
Andrzej Kurek | 05be06c | 2018-06-28 04:41:50 -0400 | [diff] [blame] | 38 | # * G++ |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 39 | # * arm-gcc and mingw-gcc |
| 40 | # * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc |
Gilles Peskine | 7be571a | 2023-08-27 21:39:21 +0200 | [diff] [blame] | 41 | # * OpenSSL and GnuTLS command line tools, in suitable versions for the |
| 42 | # interoperability tests. The following are the official versions at the |
| 43 | # time of writing: |
| 44 | # * GNUTLS_{CLI,SERV} = 3.4.10 |
| 45 | # * GNUTLS_NEXT_{CLI,SERV} = 3.7.2 |
| 46 | # * OPENSSL = 1.0.2g (without Debian/Ubuntu patches) |
| 47 | # * OPENSSL_NEXT = 1.1.1a |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 48 | # See the invocation of check_tools below for details. |
| 49 | # |
| 50 | # This script must be invoked from the toplevel directory of a git |
| 51 | # working copy of Mbed TLS. |
| 52 | # |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 53 | # The behavior on an error depends on whether --keep-going (alias -k) |
| 54 | # is in effect. |
| 55 | # * Without --keep-going: the script stops on the first error without |
| 56 | # cleaning up. This lets you work in the configuration of the failing |
| 57 | # component. |
| 58 | # * With --keep-going: the script runs all requested components and |
| 59 | # reports failures at the end. In particular the script always cleans |
| 60 | # up on exit. |
| 61 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 62 | # Note that the output is not saved. You may want to run |
| 63 | # script -c tests/scripts/all.sh |
| 64 | # or |
| 65 | # tests/scripts/all.sh >all.log 2>&1 |
| 66 | # |
| 67 | # Notes for maintainers |
| 68 | # --------------------- |
| 69 | # |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 70 | # The bulk of the code is organized into functions that follow one of the |
| 71 | # following naming conventions: |
| 72 | # * pre_XXX: things to do before running the tests, in order. |
| 73 | # * component_XXX: independent components. They can be run in any order. |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 74 | # * component_check_XXX: quick tests that aren't worth parallelizing. |
| 75 | # * component_build_XXX: build things but don't run them. |
| 76 | # * component_test_XXX: build and test. |
Bence Szépkúti | 89dd5c0 | 2023-12-15 17:05:15 +0100 | [diff] [blame] | 77 | # * component_release_XXX: tests that the CI should skip during PR testing. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 78 | # * support_XXX: if support_XXX exists and returns false then |
| 79 | # component_XXX is not run by default. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 80 | # * post_XXX: things to do after running the tests. |
| 81 | # * other: miscellaneous support functions. |
| 82 | # |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 83 | # Each component must start by invoking `msg` with a short informative message. |
| 84 | # |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 85 | # Warning: due to the way bash detects errors, the failure of a command |
| 86 | # inside 'if' or '!' is not detected. Use the 'not' function instead of '!'. |
| 87 | # |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 88 | # Each component is executed in a separate shell process. The component |
| 89 | # fails if any command in it returns a non-zero status. |
| 90 | # |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 91 | # The framework performs some cleanup tasks after each component. This |
| 92 | # means that components can assume that the working directory is in a |
| 93 | # cleaned-up state, and don't need to perform the cleanup themselves. |
| 94 | # * Run `make clean`. |
Bence Szépkúti | 414d6bd | 2021-06-28 14:11:11 +0100 | [diff] [blame] | 95 | # * Restore `include/mbedtls/mbedtls_config.h` from a backup made before running |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 96 | # the component. |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 97 | # * Check out `Makefile`, `library/Makefile`, `programs/Makefile`, |
| 98 | # `tests/Makefile` and `programs/fuzz/Makefile` from git. |
| 99 | # This cleans up after an in-tree use of CMake. |
Gilles Peskine | c70637a | 2019-01-09 22:29:17 +0100 | [diff] [blame] | 100 | # |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 101 | # The tests are roughly in order from fastest to slowest. This doesn't |
| 102 | # have to be exact, but in general you should add slower tests towards |
| 103 | # the end and fast checks near the beginning. |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 104 | |
| 105 | |
| 106 | |
| 107 | ################################################################ |
| 108 | #### Initialization and command line parsing |
| 109 | ################################################################ |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 110 | |
Gilles Peskine | 3664780 | 2020-03-28 18:50:49 +0100 | [diff] [blame] | 111 | # Abort on errors (even on the left-hand side of a pipe). |
| 112 | # Treat uninitialised variables as errors. |
| 113 | set -e -o pipefail -u |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 114 | |
Gilles Peskine | 076f725 | 2022-08-30 21:02:44 +0200 | [diff] [blame] | 115 | # Enable ksh/bash extended file matching patterns |
| 116 | shopt -s extglob |
| 117 | |
David Horstmann | 76a7738 | 2023-08-17 17:32:26 +0100 | [diff] [blame] | 118 | in_mbedtls_repo () { |
David Horstmann | d02b5f8 | 2023-08-29 09:53:52 +0100 | [diff] [blame] | 119 | test -d include -a -d library -a -d programs -a -d tests |
| 120 | } |
| 121 | |
Ronald Cron | 070e865 | 2023-10-09 10:25:45 +0200 | [diff] [blame] | 122 | in_tf_psa_crypto_repo () { |
David Horstmann | d02b5f8 | 2023-08-29 09:53:52 +0100 | [diff] [blame] | 123 | test -d include -a -d core -a -d drivers -a -d programs -a -d tests |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 124 | } |
| 125 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 126 | pre_check_environment () { |
Ronald Cron | 070e865 | 2023-10-09 10:25:45 +0200 | [diff] [blame] | 127 | if in_mbedtls_repo || in_tf_psa_crypto_repo; then :; else |
| 128 | echo "Must be run from Mbed TLS / TF-PSA-Crypto root" >&2 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 129 | exit 1 |
| 130 | fi |
| 131 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 132 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 133 | pre_initialize_variables () { |
David Horstmann | 76a7738 | 2023-08-17 17:32:26 +0100 | [diff] [blame] | 134 | if in_mbedtls_repo; then |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 135 | CONFIG_H='include/mbedtls/mbedtls_config.h' |
David Horstmann | 76a7738 | 2023-08-17 17:32:26 +0100 | [diff] [blame] | 136 | else |
| 137 | CONFIG_H='drivers/builtin/include/mbedtls/mbedtls_config.h' |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 138 | fi |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 139 | CRYPTO_CONFIG_H='include/psa/crypto_config.h' |
Manuel Pégourié-Gonnard | 462e3a9 | 2022-12-27 12:35:11 +0100 | [diff] [blame] | 140 | CONFIG_TEST_DRIVER_H='tests/include/test/drivers/config_test_driver.h' |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 141 | |
| 142 | # Files that are clobbered by some jobs will be backed up. Use a different |
| 143 | # suffix from auxiliary scripts so that all.sh and auxiliary scripts can |
| 144 | # independently decide when to remove the backup file. |
| 145 | backup_suffix='.all.bak' |
| 146 | # Files clobbered by config.py |
Janos Follath | 2f04582 | 2023-07-31 10:57:16 +0100 | [diff] [blame] | 147 | files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H $CONFIG_TEST_DRIVER_H" |
David Horstmann | 76a7738 | 2023-08-17 17:32:26 +0100 | [diff] [blame] | 148 | if in_mbedtls_repo; then |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 149 | # Files clobbered by in-tree cmake |
| 150 | files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile" |
| 151 | fi |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 152 | |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 153 | append_outcome=0 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 154 | MEMORY=0 |
| 155 | FORCE=0 |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 156 | QUIET=0 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 157 | KEEP_GOING=0 |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 158 | |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 159 | # Seed value used with the --release-test option. |
Manuel Pégourié-Gonnard | 5430447 | 2020-06-22 10:11:47 +0200 | [diff] [blame] | 160 | # |
| 161 | # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if |
| 162 | # both values are kept in sync. If you change the value here because it |
| 163 | # breaks some tests, you'll definitely want to change it in |
| 164 | # basic-build-test.sh as well. |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 165 | RELEASE_SEED=1 |
| 166 | |
Yanray Wang | 18040ed | 2023-11-23 21:29:56 +0800 | [diff] [blame] | 167 | # Specify character collation for regular expressions and sorting with C locale |
| 168 | export LC_COLLATE=C |
| 169 | |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 170 | : ${MBEDTLS_TEST_OUTCOME_FILE=} |
Gilles Peskine | 9004a17 | 2019-09-16 15:20:36 +0200 | [diff] [blame] | 171 | : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"} |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 172 | export MBEDTLS_TEST_OUTCOME_FILE |
Gilles Peskine | 9004a17 | 2019-09-16 15:20:36 +0200 | [diff] [blame] | 173 | export MBEDTLS_TEST_PLATFORM |
| 174 | |
Jaeden Amero | c4cc251 | 2019-01-30 15:35:44 +0000 | [diff] [blame] | 175 | # Default commands, can be overridden by the environment |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 176 | : ${OPENSSL:="openssl"} |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 177 | : ${OPENSSL_NEXT:="$OPENSSL"} |
| 178 | : ${GNUTLS_CLI:="gnutls-cli"} |
| 179 | : ${GNUTLS_SERV:="gnutls-serv"} |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 180 | : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build} |
| 181 | : ${ARMC5_BIN_DIR:=/usr/bin} |
| 182 | : ${ARMC6_BIN_DIR:=/usr/bin} |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 183 | : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-} |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 184 | : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-} |
Gowtham Suresh Kumar | 9da40b8 | 2023-07-31 16:38:10 +0100 | [diff] [blame] | 185 | : ${CLANG_LATEST:="clang-latest"} |
| 186 | : ${CLANG_EARLIEST:="clang-earliest"} |
| 187 | : ${GCC_LATEST:="gcc-latest"} |
| 188 | : ${GCC_EARLIEST:="gcc-earliest"} |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 189 | # if MAKEFLAGS is not set add the -j option to speed up invocations of make |
Gilles Peskine | a1fc4b5 | 2019-01-06 20:15:26 +0000 | [diff] [blame] | 190 | if [ -z "${MAKEFLAGS+set}" ]; then |
Gilles Peskine | 050d2fc | 2021-09-30 18:24:21 +0200 | [diff] [blame] | 191 | export MAKEFLAGS="-j$(all_sh_nproc)" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 192 | fi |
Dave Rodgman | 0c5bfe8 | 2023-12-18 19:53:25 +0000 | [diff] [blame] | 193 | # if CC is not set, use clang by default (if present) to improve build times |
| 194 | if [ -z "${CC+set}" ] && (type clang > /dev/null 2>&1); then |
Dave Rodgman | fc5b955 | 2023-12-19 16:08:19 +0000 | [diff] [blame] | 195 | export CC="clang" |
Dave Rodgman | 66cbc83 | 2023-12-18 18:34:50 +0000 | [diff] [blame] | 196 | fi |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 197 | |
Gilles Peskine | 396853a | 2021-09-20 18:57:55 +0200 | [diff] [blame] | 198 | # Include more verbose output for failing tests run by CMake or make |
Jaeden Amero | d48e9c7 | 2019-02-07 17:43:39 +0000 | [diff] [blame] | 199 | export CTEST_OUTPUT_ON_FAILURE=1 |
| 200 | |
Gilles Peskine | 8fd5942 | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 201 | # CFLAGS and LDFLAGS for Asan builds that don't use CMake |
Manuel Pégourié-Gonnard | fe549a7 | 2022-11-30 10:42:03 +0100 | [diff] [blame] | 202 | # default to -O2, use -Ox _after_ this if you want another level |
Przemek Stekiel | 6efa608 | 2023-05-31 09:38:21 +0200 | [diff] [blame] | 203 | ASAN_CFLAGS='-O2 -Werror -fsanitize=address,undefined -fno-sanitize-recover=all' |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 204 | # Normally, tests should use this compiler for ASAN testing |
| 205 | ASAN_CC=clang |
Gilles Peskine | 8fd5942 | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 206 | |
Andrzej Kurek | 04bfe57 | 2023-06-27 10:02:09 -0400 | [diff] [blame] | 207 | # Platform tests have an allocation that returns null |
| 208 | export ASAN_OPTIONS="allocator_may_return_null=1" |
Andrzej Kurek | 026235c | 2023-07-05 08:32:43 -0400 | [diff] [blame] | 209 | export MSAN_OPTIONS="allocator_may_return_null=1" |
Andrzej Kurek | 04bfe57 | 2023-06-27 10:02:09 -0400 | [diff] [blame] | 210 | |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 211 | # Gather the list of available components. These are the functions |
| 212 | # defined in this script whose name starts with "component_". |
Gowtham Suresh Kumar | 1e829a4 | 2023-07-28 16:41:21 +0100 | [diff] [blame] | 213 | ALL_COMPONENTS=$(compgen -A function component_ | sed 's/component_//') |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 214 | |
Bence Szépkúti | 71c71eb | 2023-12-15 19:20:31 +0100 | [diff] [blame] | 215 | # Delay determinig SUPPORTED_COMPONENTS until the command line options have a chance to override |
| 216 | # the commands set by the environment |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 217 | } |
Andres AG | 38495a3 | 2016-07-12 16:54:33 +0100 | [diff] [blame] | 218 | |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 219 | # Test whether the component $1 is included in the command line patterns. |
| 220 | is_component_included() |
Gilles Peskine | 81b96ed | 2018-11-27 21:37:53 +0100 | [diff] [blame] | 221 | { |
Gilles Peskine | 03af678 | 2021-08-06 11:35:17 +0200 | [diff] [blame] | 222 | # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS |
| 223 | # only does word splitting. |
Gilles Peskine | 81b96ed | 2018-11-27 21:37:53 +0100 | [diff] [blame] | 224 | set -f |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 225 | for pattern in $COMMAND_LINE_COMPONENTS; do |
Gilles Peskine | 81b96ed | 2018-11-27 21:37:53 +0100 | [diff] [blame] | 226 | set +f |
| 227 | case ${1#component_} in $pattern) return 0;; esac |
| 228 | done |
| 229 | set +f |
| 230 | return 1 |
| 231 | } |
Andres AG | 7770ea8 | 2016-10-10 15:46:20 +0100 | [diff] [blame] | 232 | |
Simon Butcher | 41eeccf | 2016-09-07 00:07:09 +0100 | [diff] [blame] | 233 | usage() |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 234 | { |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 235 | cat <<EOF |
Gilles Peskine | 9252511 | 2018-11-27 18:15:35 +0100 | [diff] [blame] | 236 | Usage: $0 [OPTION]... [COMPONENT]... |
Gilles Peskine | 348fb9a | 2018-11-27 17:04:29 +0100 | [diff] [blame] | 237 | Run mbedtls release validation tests. |
Gilles Peskine | 9252511 | 2018-11-27 18:15:35 +0100 | [diff] [blame] | 238 | By default, run all tests. With one or more COMPONENT, run only those. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 239 | COMPONENT can be the name of a component or a shell wildcard pattern. |
| 240 | |
| 241 | Examples: |
| 242 | $0 "check_*" |
| 243 | Run all sanity checks. |
| 244 | $0 --no-armcc --except test_memsan |
| 245 | Run everything except builds that require armcc and MemSan. |
Gilles Peskine | 348fb9a | 2018-11-27 17:04:29 +0100 | [diff] [blame] | 246 | |
| 247 | Special options: |
| 248 | -h|--help Print this help and exit. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 249 | --list-all-components List all available test components and exit. |
| 250 | --list-components List components supported on this platform and exit. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 251 | |
| 252 | General options: |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 253 | -q|--quiet Only output component names, and errors if any. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 254 | -f|--force Force the tests to overwrite any modified files. |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 255 | -k|--keep-going Run all tests and report errors at the end. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 256 | -m|--memory Additional optional memory tests. |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 257 | --append-outcome Append to the outcome file (if used). |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 258 | --arm-none-eabi-gcc-prefix=<string> |
| 259 | Prefix for a cross-compiler for arm-none-eabi |
| 260 | (default: "${ARM_NONE_EABI_GCC_PREFIX}") |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 261 | --arm-linux-gnueabi-gcc-prefix=<string> |
| 262 | Prefix for a cross-compiler for arm-linux-gnueabi |
| 263 | (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}") |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 264 | --armcc Run ARM Compiler builds (on by default). |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 265 | --restore First clean up the build tree, restoring backed up |
| 266 | files. Do not run any components unless they are |
| 267 | explicitly specified. |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 268 | --error-test Error test mode: run a failing function in addition |
Gilles Peskine | 86f6129 | 2021-08-05 15:11:33 +0200 | [diff] [blame] | 269 | to any specified component. May be repeated. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 270 | --except Exclude the COMPONENTs listed on the command line, |
| 271 | instead of running only those. |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 272 | --no-append-outcome Write a new outcome file and analyze it (default). |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 273 | --no-armcc Skip ARM Compiler builds. |
Gilles Peskine | 38d8165 | 2018-03-21 08:40:26 +0100 | [diff] [blame] | 274 | --no-force Refuse to overwrite modified files (default). |
| 275 | --no-keep-going Stop at the first error (default). |
| 276 | --no-memory No additional memory tests (default). |
Shaun Case | 8b0ecbc | 2021-12-20 21:14:10 -0800 | [diff] [blame] | 277 | --no-quiet Print full output from components. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 278 | --out-of-source-dir=<path> Directory used for CMake out-of-source build tests. |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 279 | --outcome-file=<path> File where test outcomes are written (not done if |
| 280 | empty; default: \$MBEDTLS_TEST_OUTCOME_FILE). |
Gilles Peskine | 38d8165 | 2018-03-21 08:40:26 +0100 | [diff] [blame] | 281 | --random-seed Use a random seed value for randomized tests (default). |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 282 | -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 283 | -s|--seed Integer seed value to use for this test run. |
| 284 | |
| 285 | Tool path options: |
| 286 | --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory. |
| 287 | --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory. |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 288 | --clang-earliest=<Clang_earliest_path> Earliest version of clang available |
| 289 | --clang-latest=<Clang_latest_path> Latest version of clang available |
| 290 | --gcc-earliest=<GCC_earliest_path> Earliest version of GCC available |
| 291 | --gcc-latest=<GCC_latest_path> Latest version of GCC available |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 292 | --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests. |
| 293 | --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests. |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 294 | --openssl=<OpenSSL_path> OpenSSL executable to use for most tests. |
Manuel Pégourié-Gonnard | 6b36892 | 2018-02-20 12:02:07 +0100 | [diff] [blame] | 295 | --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA |
Gilles Peskine | 709346a | 2017-12-10 23:43:39 +0100 | [diff] [blame] | 296 | EOF |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 297 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 298 | |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 299 | # Cleanup before/after running a component. |
| 300 | # Remove built files as well as the cmake cache/config. |
| 301 | # Does not remove generated source files. |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 302 | cleanup() |
| 303 | { |
David Horstmann | 76a7738 | 2023-08-17 17:32:26 +0100 | [diff] [blame] | 304 | if in_mbedtls_repo; then |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 305 | command make clean |
| 306 | fi |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 307 | |
Gilles Peskine | 31b07e2 | 2018-03-21 12:15:06 +0100 | [diff] [blame] | 308 | # Remove CMake artefacts |
Jaeden Amero | 2d0e00f | 2018-11-07 18:46:41 +0000 | [diff] [blame] | 309 | find . -name .git -prune -o \ |
Gilles Peskine | 31b07e2 | 2018-03-21 12:15:06 +0100 | [diff] [blame] | 310 | -iname CMakeFiles -exec rm -rf {} \+ -o \ |
| 311 | \( -iname cmake_install.cmake -o \ |
| 312 | -iname CTestTestfile.cmake -o \ |
Manuel Pégourié-Gonnard | bfe54d7 | 2021-09-09 11:11:44 +0200 | [diff] [blame] | 313 | -iname CMakeCache.txt -o \ |
| 314 | -path './cmake/*.cmake' \) -exec rm -f {} \+ |
Gilles Peskine | 31b07e2 | 2018-03-21 12:15:06 +0100 | [diff] [blame] | 315 | # Recover files overwritten by in-tree CMake builds |
Gilles Peskine | 076f725 | 2022-08-30 21:02:44 +0200 | [diff] [blame] | 316 | rm -f include/Makefile include/mbedtls/Makefile programs/!(fuzz)/Makefile |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 317 | |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 318 | # Remove any artifacts from the component_test_cmake_as_subdirectory test. |
| 319 | rm -rf programs/test/cmake_subproject/build |
| 320 | rm -f programs/test/cmake_subproject/Makefile |
| 321 | rm -f programs/test/cmake_subproject/cmake_subproject |
| 322 | |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 323 | # Remove any artifacts from the component_test_cmake_as_package test. |
| 324 | rm -rf programs/test/cmake_package/build |
| 325 | rm -f programs/test/cmake_package/Makefile |
| 326 | rm -f programs/test/cmake_package/cmake_package |
| 327 | |
| 328 | # Remove any artifacts from the component_test_cmake_as_installed_package test. |
| 329 | rm -rf programs/test/cmake_package_install/build |
| 330 | rm -f programs/test/cmake_package_install/Makefile |
| 331 | rm -f programs/test/cmake_package_install/cmake_package_install |
| 332 | |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 333 | # Restore files that may have been clobbered by the job |
| 334 | for x in $files_to_back_up; do |
Gilles Peskine | dd06efb | 2022-08-30 21:02:00 +0200 | [diff] [blame] | 335 | if [[ -e "$x$backup_suffix" ]]; then |
| 336 | cp -p "$x$backup_suffix" "$x" |
| 337 | fi |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 338 | done |
| 339 | } |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 340 | |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 341 | # Final cleanup when this script exits (except when exiting on a failure |
| 342 | # in non-keep-going mode). |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 343 | final_cleanup () { |
| 344 | cleanup |
| 345 | |
| 346 | for x in $files_to_back_up; do |
| 347 | rm -f "$x$backup_suffix" |
| 348 | done |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 349 | } |
| 350 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 351 | # Executed on exit. May be redefined depending on command line options. |
| 352 | final_report () { |
| 353 | : |
| 354 | } |
| 355 | |
| 356 | fatal_signal () { |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 357 | final_cleanup |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 358 | final_report $1 |
| 359 | trap - $1 |
| 360 | kill -$1 $$ |
| 361 | } |
| 362 | |
| 363 | trap 'fatal_signal HUP' HUP |
| 364 | trap 'fatal_signal INT' INT |
| 365 | trap 'fatal_signal TERM' TERM |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 366 | |
Gilles Peskine | 050d2fc | 2021-09-30 18:24:21 +0200 | [diff] [blame] | 367 | # Number of processors on this machine. Used as the default setting |
| 368 | # for parallel make. |
| 369 | all_sh_nproc () |
| 370 | { |
| 371 | { |
| 372 | nproc || # Linux |
| 373 | sysctl -n hw.ncpuonline || # NetBSD, OpenBSD |
| 374 | sysctl -n hw.ncpu || # FreeBSD |
| 375 | echo 1 |
| 376 | } 2>/dev/null |
| 377 | } |
| 378 | |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 379 | msg() |
| 380 | { |
Gilles Peskine | ffcdeff | 2018-12-04 12:49:28 +0100 | [diff] [blame] | 381 | if [ -n "${current_component:-}" ]; then |
| 382 | current_section="${current_component#component_}: $1" |
| 383 | else |
| 384 | current_section="$1" |
| 385 | fi |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 386 | |
| 387 | if [ $QUIET -eq 1 ]; then |
| 388 | return |
| 389 | fi |
| 390 | |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 391 | echo "" |
| 392 | echo "******************************************************************" |
Gilles Peskine | ffcdeff | 2018-12-04 12:49:28 +0100 | [diff] [blame] | 393 | echo "* $current_section " |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 394 | printf "* "; date |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 395 | echo "******************************************************************" |
| 396 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 397 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 398 | armc6_build_test() |
| 399 | { |
| 400 | FLAGS="$1" |
Andres AG | a5cd973 | 2016-10-17 15:23:10 +0100 | [diff] [blame] | 401 | |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 402 | msg "build: ARM Compiler 6 ($FLAGS)" |
Yanray Wang | bc7716c | 2023-09-08 11:20:59 +0800 | [diff] [blame] | 403 | make clean |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 404 | ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \ |
Dave Rodgman | 1c232a8 | 2023-03-02 13:39:04 +0000 | [diff] [blame] | 405 | WARNING_CFLAGS='-Werror -xc -std=c99' make lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 406 | |
| 407 | msg "size: ARM Compiler 6 ($FLAGS)" |
| 408 | "$ARMC6_FROMELF" -z library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 409 | } |
Andres AG | a5cd973 | 2016-10-17 15:23:10 +0100 | [diff] [blame] | 410 | |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 411 | err_msg() |
| 412 | { |
| 413 | echo "$1" >&2 |
| 414 | } |
| 415 | |
| 416 | check_tools() |
| 417 | { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 418 | for tool in "$@"; do |
| 419 | if ! `type "$tool" >/dev/null 2>&1`; then |
| 420 | err_msg "$tool not found!" |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 421 | exit 1 |
| 422 | fi |
| 423 | done |
| 424 | } |
| 425 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 426 | pre_parse_command_line () { |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 427 | COMMAND_LINE_COMPONENTS= |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 428 | all_except=0 |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 429 | error_test=0 |
Bence Szépkúti | 71c71eb | 2023-12-15 19:20:31 +0100 | [diff] [blame] | 430 | list_components=0 |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 431 | restore_first=0 |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 432 | no_armcc= |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 433 | |
Jaeden Amero | 9b90f2e | 2018-11-02 18:34:17 +0000 | [diff] [blame] | 434 | # Note that legacy options are ignored instead of being omitted from this |
| 435 | # list of options, so invocations that worked with previous version of |
| 436 | # all.sh will still run and work properly. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 437 | while [ $# -gt 0 ]; do |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 438 | case "$1" in |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 439 | --append-outcome) append_outcome=1;; |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 440 | --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";; |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 441 | --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";; |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 442 | --armcc) no_armcc=;; |
Bence Szépkúti | 71c71eb | 2023-12-15 19:20:31 +0100 | [diff] [blame] | 443 | --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";; |
| 444 | --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";; |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 445 | --clang-earliest) shift; CLANG_EARLIEST="$1";; |
| 446 | --clang-latest) shift; CLANG_LATEST="$1";; |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 447 | --error-test) error_test=$((error_test + 1));; |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 448 | --except) all_except=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 449 | --force|-f) FORCE=1;; |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 450 | --gcc-earliest) shift; GCC_EARLIEST="$1";; |
| 451 | --gcc-latest) shift; GCC_LATEST="$1";; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 452 | --gnutls-cli) shift; GNUTLS_CLI="$1";; |
Gilles Peskine | 7be571a | 2023-08-27 21:39:21 +0200 | [diff] [blame] | 453 | --gnutls-legacy-cli) shift;; # ignored for backward compatibility |
| 454 | --gnutls-legacy-serv) shift;; # ignored for backward compatibility |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 455 | --gnutls-serv) shift; GNUTLS_SERV="$1";; |
| 456 | --help|-h) usage; exit;; |
| 457 | --keep-going|-k) KEEP_GOING=1;; |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 458 | --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;; |
Bence Szépkúti | 71c71eb | 2023-12-15 19:20:31 +0100 | [diff] [blame] | 459 | --list-components) list_components=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 460 | --memory|-m) MEMORY=1;; |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 461 | --no-append-outcome) append_outcome=0;; |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 462 | --no-armcc) no_armcc=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 463 | --no-force) FORCE=0;; |
| 464 | --no-keep-going) KEEP_GOING=0;; |
| 465 | --no-memory) MEMORY=0;; |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 466 | --no-quiet) QUIET=0;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 467 | --openssl) shift; OPENSSL="$1";; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 468 | --openssl-next) shift; OPENSSL_NEXT="$1";; |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 469 | --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 470 | --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";; |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 471 | --quiet|-q) QUIET=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 472 | --random-seed) unset SEED;; |
Manuel Pégourié-Gonnard | e050191 | 2020-06-08 12:59:27 +0200 | [diff] [blame] | 473 | --release-test|-r) SEED=$RELEASE_SEED;; |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 474 | --restore) restore_first=1;; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 475 | --seed|-s) shift; SEED="$1";; |
| 476 | -*) |
| 477 | echo >&2 "Unknown option: $1" |
| 478 | echo >&2 "Run $0 --help for usage." |
| 479 | exit 120 |
| 480 | ;; |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 481 | *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";; |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 482 | esac |
| 483 | shift |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 484 | done |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 485 | |
Bence Szépkúti | 71c71eb | 2023-12-15 19:20:31 +0100 | [diff] [blame] | 486 | # Exclude components that are not supported on this platform. |
| 487 | SUPPORTED_COMPONENTS= |
| 488 | for component in $ALL_COMPONENTS; do |
| 489 | case $(type "support_$component" 2>&1) in |
| 490 | *' function'*) |
| 491 | if ! support_$component; then continue; fi;; |
| 492 | esac |
| 493 | SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component" |
| 494 | done |
| 495 | |
| 496 | if [ $list_components -eq 1 ]; then |
| 497 | printf '%s\n' $SUPPORTED_COMPONENTS |
| 498 | exit |
| 499 | fi |
| 500 | |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 501 | # With no list of components, run everything. |
Gilles Peskine | 80ddb99 | 2021-08-06 11:51:59 +0200 | [diff] [blame] | 502 | if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 503 | all_except=1 |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 504 | fi |
| 505 | |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 506 | # --no-armcc is a legacy option. The modern way is --except '*_armcc*'. |
| 507 | # Ignore it if components are listed explicitly on the command line. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 508 | if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 509 | COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*" |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 510 | fi |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 511 | |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 512 | # Error out if an explicitly requested component doesn't exist. |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 513 | if [ $all_except -eq 0 ]; then |
| 514 | unsupported=0 |
Gilles Peskine | 03af678 | 2021-08-06 11:35:17 +0200 | [diff] [blame] | 515 | # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS |
| 516 | # only does word splitting. |
Gilles Peskine | 1d475b6 | 2021-08-03 13:43:36 +0200 | [diff] [blame] | 517 | set -f |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 518 | for component in $COMMAND_LINE_COMPONENTS; do |
Gilles Peskine | 1d475b6 | 2021-08-03 13:43:36 +0200 | [diff] [blame] | 519 | set +f |
Gilles Peskine | bf66e2c | 2021-08-03 13:44:28 +0200 | [diff] [blame] | 520 | # If the requested name includes a wildcard character, don't |
| 521 | # check it. Accept wildcard patterns that don't match anything. |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 522 | case $component in |
| 523 | *[*?\[]*) continue;; |
| 524 | esac |
| 525 | case " $SUPPORTED_COMPONENTS " in |
| 526 | *" $component "*) :;; |
| 527 | *) |
| 528 | echo >&2 "Component $component was explicitly requested, but is not known or not supported." |
| 529 | unsupported=$((unsupported + 1));; |
| 530 | esac |
| 531 | done |
Gilles Peskine | 1d475b6 | 2021-08-03 13:43:36 +0200 | [diff] [blame] | 532 | set +f |
Gilles Peskine | b80f0d2 | 2020-03-28 21:37:59 +0100 | [diff] [blame] | 533 | if [ $unsupported -ne 0 ]; then |
| 534 | exit 2 |
| 535 | fi |
| 536 | fi |
| 537 | |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 538 | # Build the list of components to run. |
Gilles Peskine | a28db92 | 2019-01-10 00:05:18 +0100 | [diff] [blame] | 539 | RUN_COMPONENTS= |
| 540 | for component in $SUPPORTED_COMPONENTS; do |
| 541 | if is_component_included "$component"; [ $? -eq $all_except ]; then |
| 542 | RUN_COMPONENTS="$RUN_COMPONENTS $component" |
| 543 | fi |
| 544 | done |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 545 | |
| 546 | unset all_except |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 547 | unset no_armcc |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 548 | } |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 549 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 550 | pre_check_git () { |
| 551 | if [ $FORCE -eq 1 ]; then |
Gilles Peskine | 53190e6 | 2019-01-09 23:17:35 +0100 | [diff] [blame] | 552 | rm -rf "$OUT_OF_SOURCE_DIR" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 553 | git checkout-index -f -q $CONFIG_H |
| 554 | cleanup |
| 555 | else |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 556 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 557 | if [ -d "$OUT_OF_SOURCE_DIR" ]; then |
| 558 | echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2 |
| 559 | echo "You can either delete this directory manually, or force the test by rerunning" |
| 560 | echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR" |
| 561 | exit 1 |
| 562 | fi |
| 563 | |
Ronald Cron | 7a93ac5 | 2023-07-20 09:49:12 +0200 | [diff] [blame] | 564 | if ! git diff --quiet "$CONFIG_H"; then |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 565 | err_msg "Warning - the configuration file '$CONFIG_H' has been edited. " |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 566 | echo "You can either delete or preserve your work, or force the test by rerunning the" |
| 567 | echo "script as: $0 --force" |
| 568 | exit 1 |
| 569 | fi |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 570 | fi |
Andrzej Kurek | eb50871 | 2019-02-14 07:18:59 -0500 | [diff] [blame] | 571 | } |
| 572 | |
Gilles Peskine | 568f53a | 2021-07-12 18:16:01 +0200 | [diff] [blame] | 573 | pre_restore_files () { |
| 574 | # If the makefiles have been generated by a framework such as cmake, |
| 575 | # restore them from git. If the makefiles look like modifications from |
| 576 | # the ones checked into git, take care not to modify them. Whatever |
| 577 | # this function leaves behind is what the script will restore before |
| 578 | # each component. |
| 579 | case "$(head -n1 Makefile)" in |
| 580 | *[Gg]enerated*) |
| 581 | git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile |
| 582 | git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile |
| 583 | ;; |
| 584 | esac |
| 585 | } |
| 586 | |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 587 | pre_back_up () { |
| 588 | for x in $files_to_back_up; do |
| 589 | cp -p "$x" "$x$backup_suffix" |
| 590 | done |
| 591 | } |
| 592 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 593 | pre_setup_keep_going () { |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 594 | failure_count=0 # Number of failed components |
| 595 | last_failure_status=0 # Last failure status in this component |
| 596 | |
Gilles Peskine | fec30cb | 2020-03-28 19:34:23 +0100 | [diff] [blame] | 597 | # See err_trap |
| 598 | previous_failure_status=0 |
| 599 | previous_failed_command= |
| 600 | previous_failure_funcall_depth=0 |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 601 | unset report_failed_command |
Gilles Peskine | fec30cb | 2020-03-28 19:34:23 +0100 | [diff] [blame] | 602 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 603 | start_red= |
| 604 | end_color= |
| 605 | if [ -t 1 ]; then |
Gilles Peskine | 9736b9d | 2018-01-02 21:54:17 +0100 | [diff] [blame] | 606 | case "${TERM:-}" in |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 607 | *color*|cygwin|linux|rxvt*|screen|[Eex]term*) |
| 608 | start_red=$(printf '\033[31m') |
| 609 | end_color=$(printf '\033[0m') |
| 610 | ;; |
| 611 | esac |
| 612 | fi |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 613 | |
| 614 | # Keep a summary of failures in a file. We'll print it out at the end. |
| 615 | failure_summary_file=$PWD/all-sh-failures-$$.log |
| 616 | : >"$failure_summary_file" |
| 617 | |
| 618 | # Whether it makes sense to keep a component going after the specified |
| 619 | # command fails (test command) or not (configure or build). |
Gilles Peskine | 03af678 | 2021-08-06 11:35:17 +0200 | [diff] [blame] | 620 | # This function normally receives the failing simple command |
| 621 | # ($BASH_COMMAND) as an argument, but if $report_failed_command is set, |
| 622 | # this is passed instead. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 623 | # This doesn't have to be 100% accurate: all failures are recorded anyway. |
Gilles Peskine | c111e24 | 2021-08-02 23:29:53 +0200 | [diff] [blame] | 624 | # False positives result in running things that can't be expected to |
| 625 | # work. False negatives result in things not running after something else |
| 626 | # failed even though they might have given useful feedback. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 627 | can_keep_going_after_failure () { |
| 628 | case "$1" in |
| 629 | "msg "*) false;; |
Gilles Peskine | c111e24 | 2021-08-02 23:29:53 +0200 | [diff] [blame] | 630 | "cd "*) false;; |
Manuel Pégourié-Gonnard | a742337 | 2023-11-10 09:58:31 +0100 | [diff] [blame] | 631 | "diff "*) true;; |
Gilles Peskine | c111e24 | 2021-08-02 23:29:53 +0200 | [diff] [blame] | 632 | *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ... |
| 633 | *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ... |
| 634 | *make*check*) true;; |
| 635 | "grep "*) true;; |
| 636 | "[ "*) true;; |
| 637 | "! "*) true;; |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 638 | *) false;; |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 639 | esac |
| 640 | } |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 641 | |
| 642 | # This function runs if there is any error in a component. |
| 643 | # It must either exit with a nonzero status, or set |
| 644 | # last_failure_status to a nonzero value. |
| 645 | err_trap () { |
| 646 | # Save $? (status of the failing command). This must be the very |
| 647 | # first thing, before $? is overridden. |
| 648 | last_failure_status=$? |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 649 | failed_command=${report_failed_command-$BASH_COMMAND} |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 650 | |
Gilles Peskine | fec30cb | 2020-03-28 19:34:23 +0100 | [diff] [blame] | 651 | if [[ $last_failure_status -eq $previous_failure_status && |
| 652 | "$failed_command" == "$previous_failed_command" && |
| 653 | ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]] |
| 654 | then |
| 655 | # The same command failed twice in a row, but this time one level |
| 656 | # less deep in the function call stack. This happens when the last |
| 657 | # command of a function returns a nonzero status, and the function |
| 658 | # returns that same status. Ignore the second failure. |
| 659 | previous_failure_funcall_depth=${#FUNCNAME[@]} |
| 660 | return |
| 661 | fi |
| 662 | previous_failure_status=$last_failure_status |
| 663 | previous_failed_command=$failed_command |
| 664 | previous_failure_funcall_depth=${#FUNCNAME[@]} |
| 665 | |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 666 | text="$current_section: $failed_command -> $last_failure_status" |
| 667 | echo "${start_red}^^^^$text^^^^${end_color}" >&2 |
| 668 | echo "$text" >>"$failure_summary_file" |
| 669 | |
| 670 | # If the command is fatal (configure or build command), stop this |
| 671 | # component. Otherwise (test command) keep the component running |
| 672 | # (run more tests from the same build). |
| 673 | if ! can_keep_going_after_failure "$failed_command"; then |
| 674 | exit $last_failure_status |
| 675 | fi |
| 676 | } |
| 677 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 678 | final_report () { |
| 679 | if [ $failure_count -gt 0 ]; then |
| 680 | echo |
| 681 | echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 682 | echo "${start_red}FAILED: $failure_count components${end_color}" |
| 683 | cat "$failure_summary_file" |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 684 | echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" |
| 685 | elif [ -z "${1-}" ]; then |
| 686 | echo "SUCCESS :)" |
| 687 | fi |
| 688 | if [ -n "${1-}" ]; then |
| 689 | echo "Killed by SIG$1." |
| 690 | fi |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 691 | rm -f "$failure_summary_file" |
| 692 | if [ $failure_count -gt 0 ]; then |
| 693 | exit 1 |
| 694 | fi |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 695 | } |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 696 | } |
| 697 | |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 698 | # record_status() and if_build_succeeded() are kept temporarily for backward |
| 699 | # compatibility. Don't use them in new components. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 700 | record_status () { |
| 701 | "$@" |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 702 | } |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 703 | if_build_succeeded () { |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 704 | "$@" |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 705 | } |
| 706 | |
Gilles Peskine | a681c59 | 2020-03-28 21:27:40 +0100 | [diff] [blame] | 707 | # '! true' does not trigger the ERR trap. Arrange to trigger it, with |
| 708 | # a reasonably informative error message (not just "$@"). |
| 709 | not () { |
| 710 | if "$@"; then |
| 711 | report_failed_command="! $*" |
| 712 | false |
| 713 | unset report_failed_command |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 714 | fi |
| 715 | } |
| 716 | |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 717 | pre_prepare_outcome_file () { |
| 718 | case "$MBEDTLS_TEST_OUTCOME_FILE" in |
| 719 | [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";; |
| 720 | esac |
| 721 | if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then |
| 722 | rm -f "$MBEDTLS_TEST_OUTCOME_FILE" |
| 723 | fi |
| 724 | } |
| 725 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 726 | pre_print_configuration () { |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 727 | if [ $QUIET -eq 1 ]; then |
| 728 | return |
| 729 | fi |
| 730 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 731 | msg "info: $0 configuration" |
| 732 | echo "MEMORY: $MEMORY" |
| 733 | echo "FORCE: $FORCE" |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 734 | echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 735 | echo "SEED: ${SEED-"UNSET"}" |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 736 | echo |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 737 | echo "OPENSSL: $OPENSSL" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 738 | echo "OPENSSL_NEXT: $OPENSSL_NEXT" |
| 739 | echo "GNUTLS_CLI: $GNUTLS_CLI" |
| 740 | echo "GNUTLS_SERV: $GNUTLS_SERV" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 741 | echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR" |
| 742 | echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR" |
| 743 | } |
Andres AG | 7770ea8 | 2016-10-10 15:46:20 +0100 | [diff] [blame] | 744 | |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 745 | # Make sure the tools we need are available. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 746 | pre_check_tools () { |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 747 | # Build the list of variables to pass to output_env.sh. |
| 748 | set env |
SimonB | 2e23c82 | 2016-04-16 21:54:39 +0100 | [diff] [blame] | 749 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 750 | case " $RUN_COMPONENTS " in |
| 751 | # Require OpenSSL and GnuTLS if running any tests (as opposed to |
| 752 | # only doing builds). Not all tests run OpenSSL and GnuTLS, but this |
| 753 | # is a good enough approximation in practice. |
Bence Szépkúti | bbb5af9 | 2023-12-15 20:58:15 +0100 | [diff] [blame] | 754 | *" test_"* | *" release_test_"*) |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 755 | # To avoid setting OpenSSL and GnuTLS for each call to compat.sh |
| 756 | # and ssl-opt.sh, we just export the variables they require. |
Manuel Pégourié-Gonnard | c572246 | 2022-12-19 11:42:12 +0100 | [diff] [blame] | 757 | export OPENSSL="$OPENSSL" |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 758 | export GNUTLS_CLI="$GNUTLS_CLI" |
| 759 | export GNUTLS_SERV="$GNUTLS_SERV" |
| 760 | # Avoid passing --seed flag in every call to ssl-opt.sh |
| 761 | if [ -n "${SEED-}" ]; then |
| 762 | export SEED |
| 763 | fi |
Gilles Peskine | 7be571a | 2023-08-27 21:39:21 +0200 | [diff] [blame] | 764 | set "$@" OPENSSL="$OPENSSL" |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 765 | set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV" |
Gilles Peskine | 7be571a | 2023-08-27 21:39:21 +0200 | [diff] [blame] | 766 | check_tools "$OPENSSL" "$OPENSSL_NEXT" \ |
| 767 | "$GNUTLS_CLI" "$GNUTLS_SERV" |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 768 | ;; |
| 769 | esac |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 770 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 771 | case " $RUN_COMPONENTS " in |
| 772 | *_doxygen[_\ ]*) check_tools "doxygen" "dot";; |
| 773 | esac |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 774 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 775 | case " $RUN_COMPONENTS " in |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 776 | *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";; |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 777 | esac |
Andres AG | d9eba4b | 2016-08-26 14:42:14 +0100 | [diff] [blame] | 778 | |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 779 | case " $RUN_COMPONENTS " in |
| 780 | *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";; |
| 781 | esac |
| 782 | |
| 783 | case " $RUN_COMPONENTS " in |
| 784 | *" test_zeroize "*) check_tools "gdb";; |
| 785 | esac |
| 786 | |
| 787 | case " $RUN_COMPONENTS " in |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 788 | *_armcc*) |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 789 | ARMC5_CC="$ARMC5_BIN_DIR/armcc" |
| 790 | ARMC5_AR="$ARMC5_BIN_DIR/armar" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 791 | ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf" |
Gilles Peskine | 8796426 | 2019-01-06 22:40:00 +0000 | [diff] [blame] | 792 | ARMC6_CC="$ARMC6_BIN_DIR/armclang" |
| 793 | ARMC6_AR="$ARMC6_BIN_DIR/armar" |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 794 | ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf" |
| 795 | check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \ |
| 796 | "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";; |
Gilles Peskine | 5331c6e | 2019-01-06 22:23:42 +0000 | [diff] [blame] | 797 | esac |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 798 | |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 799 | # past this point, no call to check_tool, only printing output |
| 800 | if [ $QUIET -eq 1 ]; then |
| 801 | return |
| 802 | fi |
| 803 | |
Gilles Peskine | cc9f0b9 | 2019-01-06 22:46:21 +0000 | [diff] [blame] | 804 | msg "info: output_env.sh" |
| 805 | case $RUN_COMPONENTS in |
| 806 | *_armcc*) |
| 807 | set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;; |
| 808 | *) set "$@" RUN_ARMCC=0;; |
| 809 | esac |
| 810 | "$@" scripts/output_env.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 811 | } |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 812 | |
Gilles Peskine | 1570b59 | 2021-04-22 01:10:12 +0200 | [diff] [blame] | 813 | pre_generate_files() { |
Manuel Pégourié-Gonnard | 87db8a2 | 2021-06-18 13:30:14 +0200 | [diff] [blame] | 814 | # since make doesn't have proper dependencies, remove any possibly outdate |
| 815 | # file that might be around before generating fresh ones |
| 816 | make neat |
Gilles Peskine | 7238503 | 2021-07-08 19:07:07 +0200 | [diff] [blame] | 817 | if [ $QUIET -eq 1 ]; then |
Gilles Peskine | 7530163 | 2021-08-05 15:10:47 +0200 | [diff] [blame] | 818 | make generated_files >/dev/null |
Gilles Peskine | 7238503 | 2021-07-08 19:07:07 +0200 | [diff] [blame] | 819 | else |
| 820 | make generated_files |
| 821 | fi |
Gilles Peskine | 1570b59 | 2021-04-22 01:10:12 +0200 | [diff] [blame] | 822 | } |
| 823 | |
Tom Cosgrove | d4c373a | 2024-01-30 13:56:38 +0000 | [diff] [blame^] | 824 | clang_version() { |
| 825 | if command -v clang > /dev/null ; then |
| 826 | clang --version|grep version|sed -E 's#.*version ([0-9]+).*#\1#' |
| 827 | else |
| 828 | echo 0 # report version 0 for "no clang" |
| 829 | fi |
| 830 | } |
| 831 | |
Manuel Pégourié-Gonnard | 27e1767 | 2023-05-25 09:39:08 +0200 | [diff] [blame] | 832 | ################################################################ |
| 833 | #### Helpers for components using libtestdriver1 |
| 834 | ################################################################ |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 835 | |
Manuel Pégourié-Gonnard | f5c5d97 | 2023-06-06 11:14:57 +0200 | [diff] [blame] | 836 | # How to use libtestdriver1 |
| 837 | # ------------------------- |
| 838 | # |
| 839 | # 1. Define the list algorithms and key types to accelerate, |
| 840 | # designated the same way as PSA_WANT_ macros but without PSA_WANT_. |
| 841 | # Examples: |
| 842 | # - loc_accel_list="ALG_JPAKE" |
| 843 | # - loc_accel_list="ALG_FFDH KEY_TYPE_DH_KEY_PAIR KEY_TYPE_DH_PUBLIC_KEY" |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 844 | # 2. Make configurations changes for the driver and/or main libraries. |
| 845 | # 2a. Call helper_libtestdriver1_adjust_config <base>, where the argument |
| 846 | # can be either "default" to start with the default config, or a name |
| 847 | # supported by scripts/config.py (for example, "full"). This selects |
Manuel Pégourié-Gonnard | 2336c8e | 2023-06-12 17:17:54 +0200 | [diff] [blame] | 848 | # the base to use, and makes common adjustments. |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 849 | # 2b. If desired, adjust the PSA_WANT symbols in psa/crypto_config.h. |
| 850 | # These changes affect both the driver and the main libraries. |
| 851 | # (Note: they need to have the same set of PSA_WANT symbols, as that |
| 852 | # determines the ABI between them.) |
| 853 | # 2c. Adjust MBEDTLS_ symbols in mbedtls_config.h. This only affects the |
| 854 | # main libraries. Typically, you want to disable the module(s) that are |
| 855 | # being accelerated. You may need to also disable modules that depend |
| 856 | # on them or options that are not supported with drivers. |
| 857 | # 2d. On top of psa/crypto_config.h, the driver library uses its own config |
| 858 | # file: tests/include/test/drivers/config_test_driver.h. You usually |
| 859 | # don't need to edit it: using loc_extra_list (see below) is preferred. |
| 860 | # However, when there's no PSA symbol for what you want to enable, |
| 861 | # calling scripts/config.py on this file remains the only option. |
| 862 | # 3. Build the driver library, then the main libraries, test, and programs. |
| 863 | # 3a. Call helper_libtestdriver1_make_drivers "$loc_accel_list". You may |
| 864 | # need to enable more algorithms here, typically hash algorithms when |
| 865 | # accelerating some signature algorithms (ECDSA, RSAv2). This is done |
| 866 | # by passing a 2nd argument listing the extra algorithms. |
| 867 | # Example: |
| 868 | # loc_extra_list="ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512" |
| 869 | # helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
Yanray Wang | 0df6d96 | 2023-10-11 13:27:25 +0800 | [diff] [blame] | 870 | # 3b. Call helper_libtestdriver1_make_main "$loc_accel_list". Any |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 871 | # additional arguments will be passed to make: this can be useful if |
| 872 | # you don't want to build everything when iterating during development. |
| 873 | # Example: |
| 874 | # helper_libtestdriver1_make_main "$loc_accel_list" -C tests test_suite_foo |
| 875 | # 4. Run the tests you want. |
Manuel Pégourié-Gonnard | f5c5d97 | 2023-06-06 11:14:57 +0200 | [diff] [blame] | 876 | |
Manuel Pégourié-Gonnard | 27e1767 | 2023-05-25 09:39:08 +0200 | [diff] [blame] | 877 | # Adjust the configuration - for both libtestdriver1 and main library, |
| 878 | # as they should have the same PSA_WANT macros. |
| 879 | helper_libtestdriver1_adjust_config() { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 880 | base_config=$1 |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 881 | # Select the base configuration |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 882 | if [ "$base_config" != "default" ]; then |
| 883 | scripts/config.py "$base_config" |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 884 | fi |
| 885 | |
| 886 | # Enable PSA-based config (necessary to use drivers) |
| 887 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 888 | |
Manuel Pégourié-Gonnard | 2336c8e | 2023-06-12 17:17:54 +0200 | [diff] [blame] | 889 | # Dynamic secure element support is a deprecated feature and needs to be disabled here. |
| 890 | # This is done to have the same form of psa_key_attributes_s for libdriver and library. |
| 891 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C |
Manuel Pégourié-Gonnard | 27e1767 | 2023-05-25 09:39:08 +0200 | [diff] [blame] | 892 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 893 | |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 894 | # When called with no parameter this function disables all builtin curves. |
Valerio Setti | 4ca250b | 2023-09-04 14:01:41 +0200 | [diff] [blame] | 895 | # The function optionally accepts 1 parameter: a space-separated list of the |
| 896 | # curves that should be kept enabled. |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 897 | helper_disable_builtin_curves() { |
| 898 | allowed_list="${1:-}" |
| 899 | scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED" |
| 900 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 901 | for curve in $allowed_list; do |
| 902 | scripts/config.py set $curve |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 903 | done |
| 904 | } |
| 905 | |
| 906 | # Helper returning the list of supported elliptic curves from CRYPTO_CONFIG_H, |
| 907 | # without the "PSA_WANT_" prefix. This becomes handy for accelerating curves |
| 908 | # in the following helpers. |
| 909 | helper_get_psa_curve_list () { |
| 910 | loc_list="" |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 911 | for item in $(sed -n 's/^#define PSA_WANT_\(ECC_[0-9A-Z_a-z]*\).*/\1/p' <"$CRYPTO_CONFIG_H"); do |
| 912 | loc_list="$loc_list $item" |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 913 | done |
| 914 | |
| 915 | echo "$loc_list" |
| 916 | } |
| 917 | |
| 918 | # Get the list of uncommented PSA_WANT_KEY_TYPE_xxx_ from CRYPTO_CONFIG_H. This |
Valerio Setti | 0a342c9 | 2023-09-01 09:12:31 +0200 | [diff] [blame] | 919 | # is useful to easily get a list of key type symbols to accelerate. |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 920 | # The function accepts a single argument which is the key type: ECC, DH, RSA. |
Valerio Setti | 0a342c9 | 2023-09-01 09:12:31 +0200 | [diff] [blame] | 921 | helper_get_psa_key_type_list() { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 922 | key_type="$1" |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 923 | loc_list="" |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 924 | for item in $(sed -n "s/^#define PSA_WANT_\(KEY_TYPE_${key_type}_[0-9A-Z_a-z]*\).*/\1/p" <"$CRYPTO_CONFIG_H"); do |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 925 | # Skip DERIVE for elliptic keys since there is no driver dispatch for |
| 926 | # it so it cannot be accelerated. |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 927 | if [ "$item" != "KEY_TYPE_ECC_KEY_PAIR_DERIVE" ]; then |
| 928 | loc_list="$loc_list $item" |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 929 | fi |
| 930 | done |
| 931 | |
| 932 | echo "$loc_list" |
| 933 | } |
| 934 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 935 | # Build the drivers library libtestdriver1.a (with ASan). |
Manuel Pégourié-Gonnard | 31639e4 | 2023-05-25 10:07:31 +0200 | [diff] [blame] | 936 | # |
| 937 | # Parameters: |
| 938 | # 1. a space-separated list of things to accelerate; |
| 939 | # 2. optional: a space-separate list of things to also support. |
| 940 | # Here "things" are PSA_WANT_ symbols but with PSA_WANT_ removed. |
| 941 | helper_libtestdriver1_make_drivers() { |
| 942 | loc_accel_flags=$( echo "$1 ${2-}" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' ) |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 943 | make CC=$ASAN_CC -C tests libtestdriver1.a CFLAGS=" $ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS" |
Manuel Pégourié-Gonnard | 31639e4 | 2023-05-25 10:07:31 +0200 | [diff] [blame] | 944 | } |
| 945 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 946 | # Build the main libraries, programs and tests, |
| 947 | # linking to the drivers library (with ASan). |
| 948 | # |
| 949 | # Parameters: |
| 950 | # 1. a space-separated list of things to accelerate; |
| 951 | # *. remaining arguments if any are passed directly to make |
| 952 | # (examples: lib, -C tests test_suite_xxx, etc.) |
| 953 | # Here "things" are PSA_WANT_ symbols but with PSA_WANT_ removed. |
| 954 | helper_libtestdriver1_make_main() { |
| 955 | loc_accel_list=$1 |
| 956 | shift |
| 957 | |
| 958 | # we need flags both with and without the LIBTESTDRIVER1_ prefix |
| 959 | loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' ) |
| 960 | loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 961 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -I../tests/include -I../tests -I../../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS" "$@" |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 962 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 963 | |
| 964 | ################################################################ |
| 965 | #### Basic checks |
| 966 | ################################################################ |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 967 | |
| 968 | # |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 969 | # Test Suites to be executed |
Manuel Pégourié-Gonnard | 89d69b3 | 2014-11-20 13:48:53 +0100 | [diff] [blame] | 970 | # |
Manuel Pégourié-Gonnard | 3d404b4 | 2015-07-08 21:59:16 +0100 | [diff] [blame] | 971 | # The test ordering tries to optimize for the following criteria: |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 972 | # 1. Catch possible problems early, by running first tests that run quickly |
Manuel Pégourié-Gonnard | 89d69b3 | 2014-11-20 13:48:53 +0100 | [diff] [blame] | 973 | # and/or are more likely to fail than others (eg I use Clang most of the |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 974 | # time, so start with a GCC build). |
| 975 | # 2. Minimize total running time, by avoiding useless rebuilds |
Manuel Pégourié-Gonnard | 89d69b3 | 2014-11-20 13:48:53 +0100 | [diff] [blame] | 976 | # |
Manuel Pégourié-Gonnard | 259b08a | 2016-01-08 16:27:41 +0100 | [diff] [blame] | 977 | # Indicative running times are given for reference. |
| 978 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 979 | component_check_recursion () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 980 | msg "Check: recursion.pl" # < 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 981 | tests/scripts/recursion.pl library/*.c |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 982 | } |
Janos Follath | b72c678 | 2016-07-19 14:54:17 +0100 | [diff] [blame] | 983 | |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 984 | component_check_generated_files () { |
| 985 | msg "Check: check-generated-files, files generated with make" # 2s |
| 986 | make generated_files |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 987 | tests/scripts/check-generated-files.sh |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 988 | |
| 989 | msg "Check: check-generated-files -u, files present" # 2s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 990 | tests/scripts/check-generated-files.sh -u |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 991 | # Check that the generated files are considered up to date. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 992 | tests/scripts/check-generated-files.sh |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 993 | |
| 994 | msg "Check: check-generated-files -u, files absent" # 2s |
| 995 | command make neat |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 996 | tests/scripts/check-generated-files.sh -u |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 997 | # Check that the generated files are considered up to date. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 998 | tests/scripts/check-generated-files.sh |
Gilles Peskine | 67debb6 | 2021-05-18 16:09:50 +0200 | [diff] [blame] | 999 | |
| 1000 | # This component ends with the generated files present in the source tree. |
| 1001 | # This is necessary for subsequent components! |
| 1002 | } |
| 1003 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1004 | component_check_doxy_blocks () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 1005 | msg "Check: doxygen markup outside doxygen blocks" # < 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1006 | tests/scripts/check-doxy-blocks.pl |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1007 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1008 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1009 | component_check_files () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 1010 | msg "Check: file sanity checks (permissions, encodings)" # < 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1011 | tests/scripts/check_files.py |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1012 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1013 | |
Gilles Peskine | 30e0bb4 | 2020-05-10 17:40:49 +0200 | [diff] [blame] | 1014 | component_check_changelog () { |
| 1015 | msg "Check: changelog entries" # < 1s |
| 1016 | rm -f ChangeLog.new |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1017 | scripts/assemble_changelog.py -o ChangeLog.new |
Gilles Peskine | 30e0bb4 | 2020-05-10 17:40:49 +0200 | [diff] [blame] | 1018 | if [ -e ChangeLog.new ]; then |
| 1019 | # Show the diff for information. It isn't an error if the diff is |
| 1020 | # non-empty. |
| 1021 | diff -u ChangeLog ChangeLog.new || true |
| 1022 | rm ChangeLog.new |
| 1023 | fi |
| 1024 | } |
| 1025 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1026 | component_check_names () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 1027 | msg "Check: declared and exported names (builds the library)" # < 3s |
Yuto Takano | c3a6f63 | 2021-09-24 18:02:56 +0100 | [diff] [blame] | 1028 | tests/scripts/check_names.py -v |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1029 | } |
Darryl Green | a07039c | 2018-03-13 16:48:16 +0000 | [diff] [blame] | 1030 | |
Gilles Peskine | 895868b | 2019-09-19 21:30:05 +0200 | [diff] [blame] | 1031 | component_check_test_cases () { |
| 1032 | msg "Check: test case descriptions" # < 1s |
Manuel Pégourié-Gonnard | a911916 | 2020-06-02 11:51:40 +0200 | [diff] [blame] | 1033 | if [ $QUIET -eq 1 ]; then |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 1034 | opt='--quiet' |
Manuel Pégourié-Gonnard | a911916 | 2020-06-02 11:51:40 +0200 | [diff] [blame] | 1035 | else |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 1036 | opt='' |
Manuel Pégourié-Gonnard | a911916 | 2020-06-02 11:51:40 +0200 | [diff] [blame] | 1037 | fi |
Gilles Peskine | 031114d | 2022-12-15 14:46:31 +0100 | [diff] [blame] | 1038 | tests/scripts/check_test_cases.py -q $opt |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 1039 | unset opt |
Gilles Peskine | 895868b | 2019-09-19 21:30:05 +0200 | [diff] [blame] | 1040 | } |
| 1041 | |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1042 | component_check_test_dependencies () { |
| 1043 | msg "Check: test case dependencies: legacy vs PSA" # < 1s |
Manuel Pégourié-Gonnard | 9f164f0 | 2023-11-10 10:16:06 +0100 | [diff] [blame] | 1044 | # The purpose of this component is to catch unjustified dependencies on |
| 1045 | # legacy feature macros (MBEDTLS_xxx) in PSA tests. Generally speaking, |
| 1046 | # PSA test should use PSA feature macros (PSA_WANT_xxx, more rarely |
| 1047 | # MBEDTLS_PSA_xxx). |
| 1048 | # |
| 1049 | # Most of the time, use of legacy MBEDTLS_xxx macros are mistakes, which |
| 1050 | # this component is meant to catch. However a few of them are justified, |
| 1051 | # mostly by the absence of a PSA equivalent, so this component includes a |
| 1052 | # list of expected exceptions. |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1053 | |
| 1054 | found="check-test-deps-found-$$" |
| 1055 | expected="check-test-deps-expected-$$" |
| 1056 | |
| 1057 | # Find legacy dependencies in PSA tests |
Manuel Pégourié-Gonnard | 5c6f787 | 2023-11-10 10:04:22 +0100 | [diff] [blame] | 1058 | grep 'depends_on' \ |
| 1059 | tests/suites/test_suite_psa*.data tests/suites/test_suite_psa*.function | |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1060 | grep -Eo '!?MBEDTLS_[^: ]*' | |
| 1061 | grep -v MBEDTLS_PSA_ | |
Yanray Wang | 18040ed | 2023-11-23 21:29:56 +0800 | [diff] [blame] | 1062 | sort -u > $found |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1063 | |
Yanray Wang | 18040ed | 2023-11-23 21:29:56 +0800 | [diff] [blame] | 1064 | # Expected ones with justification - keep in sorted order by ASCII table! |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1065 | rm -f $expected |
| 1066 | # No PSA equivalent - WANT_KEY_TYPE_AES means all sizes |
| 1067 | echo "!MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH" >> $expected |
Yanray Wang | 18040ed | 2023-11-23 21:29:56 +0800 | [diff] [blame] | 1068 | # No PSA equivalent - used to skip decryption tests in PSA-ECB, CBC/XTS/NIST_KW/DES |
| 1069 | echo "!MBEDTLS_BLOCK_CIPHER_NO_DECRYPT" >> $expected |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1070 | # This is used by import_rsa_made_up() in test_suite_psa_crypto in order |
| 1071 | # to build a fake RSA key of the wanted size based on |
| 1072 | # PSA_VENDOR_RSA_MAX_KEY_BITS. The legacy module is only used by |
| 1073 | # the test code and that's probably the most convenient way of achieving |
| 1074 | # the test's goal. |
| 1075 | echo "MBEDTLS_ASN1_WRITE_C" >> $expected |
| 1076 | # No PSA equivalent - we should probably have one in the future. |
| 1077 | echo "MBEDTLS_ECP_RESTARTABLE" >> $expected |
| 1078 | # No PSA equivalent - needed by some init tests |
| 1079 | echo "MBEDTLS_ENTROPY_NV_SEED" >> $expected |
| 1080 | # Used by two tests that are about an extension to the PSA standard; |
| 1081 | # as such, no PSA equivalent. |
| 1082 | echo "MBEDTLS_PEM_PARSE_C" >> $expected |
| 1083 | |
| 1084 | # Compare reality with expectation. |
| 1085 | # We want an exact match, to ensure the above list remains up-to-date. |
Manuel Pégourié-Gonnard | 9f164f0 | 2023-11-10 10:16:06 +0100 | [diff] [blame] | 1086 | # |
| 1087 | # The output should be empty. When it's not: |
| 1088 | # - Each '+' line is a macro that was found but not expected. You want to |
| 1089 | # find where that macro occurs, and either replace it with PSA macros, or |
| 1090 | # add it to the exceptions list above with a justification. |
| 1091 | # - Each '-' line is a macro that was expected but not found; it means the |
| 1092 | # exceptions list above should be updated by removing that macro. |
Manuel Pégourié-Gonnard | 3e1d39b | 2023-11-08 12:54:02 +0100 | [diff] [blame] | 1093 | diff -U0 $expected $found |
| 1094 | |
| 1095 | rm $found $expected |
| 1096 | } |
| 1097 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1098 | component_check_doxygen_warnings () { |
Gilles Peskine | 600bb69 | 2019-09-19 21:29:11 +0200 | [diff] [blame] | 1099 | msg "Check: doxygen warnings (builds the documentation)" # ~ 3s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1100 | tests/scripts/doxygen.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1101 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1102 | |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 1103 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1104 | |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 1105 | ################################################################ |
| 1106 | #### Build and test many configurations and targets |
| 1107 | ################################################################ |
| 1108 | |
Gilles Peskine | 7832c9f | 2019-04-08 17:00:15 +0200 | [diff] [blame] | 1109 | component_test_default_out_of_box () { |
| 1110 | msg "build: make, default config (out-of-box)" # ~1min |
| 1111 | make |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 1112 | # Disable fancy stuff |
| 1113 | unset MBEDTLS_TEST_OUTCOME_FILE |
Gilles Peskine | 7832c9f | 2019-04-08 17:00:15 +0200 | [diff] [blame] | 1114 | |
| 1115 | msg "test: main suites make, default config (out-of-box)" # ~10s |
| 1116 | make test |
| 1117 | |
| 1118 | msg "selftest: make, default config (out-of-box)" # ~10s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1119 | programs/test/selftest |
Gilles Peskine | 82b2727 | 2019-06-14 18:27:03 +0200 | [diff] [blame] | 1120 | |
| 1121 | msg "program demos: make, default config (out-of-box)" # ~10s |
| 1122 | tests/scripts/run_demos.py |
Gilles Peskine | 7832c9f | 2019-04-08 17:00:15 +0200 | [diff] [blame] | 1123 | } |
| 1124 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1125 | component_test_default_cmake_gcc_asan () { |
| 1126 | msg "build: cmake, gcc, ASan" # ~ 1 min 50s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1127 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1128 | make |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1129 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1130 | msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1131 | make test |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1132 | |
Gilles Peskine | 82b2727 | 2019-06-14 18:27:03 +0200 | [diff] [blame] | 1133 | msg "program demos (ASan build)" # ~10s |
| 1134 | tests/scripts/run_demos.py |
| 1135 | |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 1136 | msg "test: selftest (ASan build)" # ~ 10s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1137 | programs/test/selftest |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 1138 | |
Gilles Peskine | 6848d17 | 2023-11-02 19:58:03 +0100 | [diff] [blame] | 1139 | msg "test: metatests (GCC, ASan build)" |
| 1140 | tests/scripts/run-metatests.sh any asan |
| 1141 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1142 | msg "test: ssl-opt.sh (ASan build)" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1143 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1144 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1145 | msg "test: compat.sh (ASan build)" # ~ 6 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1146 | tests/compat.sh |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 1147 | |
| 1148 | msg "test: context-info.sh (ASan build)" # ~ 15 sec |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1149 | tests/context-info.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1150 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1151 | |
Gabor Mezei | 9b6b5a0 | 2023-06-06 17:22:25 +0200 | [diff] [blame] | 1152 | component_test_default_cmake_gcc_asan_new_bignum () { |
| 1153 | msg "build: cmake, gcc, ASan" # ~ 1 min 50s |
Janos Follath | 2f04582 | 2023-07-31 10:57:16 +0100 | [diff] [blame] | 1154 | scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT |
Gabor Mezei | 9b6b5a0 | 2023-06-06 17:22:25 +0200 | [diff] [blame] | 1155 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Janos Follath | 82823b2 | 2023-07-27 12:25:05 +0100 | [diff] [blame] | 1156 | make |
Gabor Mezei | 9b6b5a0 | 2023-06-06 17:22:25 +0200 | [diff] [blame] | 1157 | |
| 1158 | msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1159 | make test |
| 1160 | |
| 1161 | msg "test: selftest (ASan build)" # ~ 10s |
| 1162 | programs/test/selftest |
| 1163 | |
| 1164 | msg "test: ssl-opt.sh (ASan build)" # ~ 1 min |
| 1165 | tests/ssl-opt.sh |
| 1166 | |
| 1167 | msg "test: compat.sh (ASan build)" # ~ 6 min |
| 1168 | tests/compat.sh |
| 1169 | |
| 1170 | msg "test: context-info.sh (ASan build)" # ~ 15 sec |
| 1171 | tests/context-info.sh |
| 1172 | } |
| 1173 | |
Hanno Becker | 0163551 | 2019-02-26 14:27:09 +0000 | [diff] [blame] | 1174 | component_test_full_cmake_gcc_asan () { |
| 1175 | msg "build: full config, cmake, gcc, ASan" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1176 | scripts/config.py full |
Hanno Becker | 0163551 | 2019-02-26 14:27:09 +0000 | [diff] [blame] | 1177 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1178 | make |
| 1179 | |
| 1180 | msg "test: main suites (inc. selftests) (full config, ASan build)" |
| 1181 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1182 | |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 1183 | msg "test: selftest (ASan build)" # ~ 10s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1184 | programs/test/selftest |
Gilles Peskine | 97bea01 | 2020-04-23 23:37:45 +0200 | [diff] [blame] | 1185 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1186 | msg "test: ssl-opt.sh (full config, ASan build)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1187 | tests/ssl-opt.sh |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1188 | |
| 1189 | msg "test: compat.sh (full config, ASan build)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1190 | tests/compat.sh |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 1191 | |
| 1192 | msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1193 | tests/context-info.sh |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1194 | } |
| 1195 | |
Gabor Mezei | 9b6b5a0 | 2023-06-06 17:22:25 +0200 | [diff] [blame] | 1196 | |
| 1197 | component_test_full_cmake_gcc_asan_new_bignum () { |
| 1198 | msg "build: full config, cmake, gcc, ASan" |
| 1199 | scripts/config.py full |
Janos Follath | 2f04582 | 2023-07-31 10:57:16 +0100 | [diff] [blame] | 1200 | scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT |
Gabor Mezei | 9b6b5a0 | 2023-06-06 17:22:25 +0200 | [diff] [blame] | 1201 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Janos Follath | 82823b2 | 2023-07-27 12:25:05 +0100 | [diff] [blame] | 1202 | make |
Gabor Mezei | 9b6b5a0 | 2023-06-06 17:22:25 +0200 | [diff] [blame] | 1203 | |
| 1204 | msg "test: main suites (inc. selftests) (full config, ASan build)" |
| 1205 | make test |
| 1206 | |
| 1207 | msg "test: selftest (ASan build)" # ~ 10s |
| 1208 | programs/test/selftest |
| 1209 | |
| 1210 | msg "test: ssl-opt.sh (full config, ASan build)" |
| 1211 | tests/ssl-opt.sh |
| 1212 | |
| 1213 | msg "test: compat.sh (full config, ASan build)" |
| 1214 | tests/compat.sh |
| 1215 | |
| 1216 | msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec |
| 1217 | tests/context-info.sh |
Gabor Mezei | 6db6047 | 2023-07-05 16:38:42 +0200 | [diff] [blame] | 1218 | } |
| 1219 | |
Ronald Cron | c3623db | 2020-10-29 10:51:32 +0100 | [diff] [blame] | 1220 | component_test_psa_crypto_key_id_encodes_owner () { |
Andrzej Kurek | 03e0146 | 2022-01-03 12:53:24 +0100 | [diff] [blame] | 1221 | msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan" |
Ronald Cron | c3623db | 2020-10-29 10:51:32 +0100 | [diff] [blame] | 1222 | scripts/config.py full |
Ronald Cron | c3623db | 2020-10-29 10:51:32 +0100 | [diff] [blame] | 1223 | scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER |
| 1224 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1225 | make |
| 1226 | |
| 1227 | msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan" |
| 1228 | make test |
| 1229 | } |
| 1230 | |
Gilles Peskine | a354867 | 2021-06-17 11:37:52 +0200 | [diff] [blame] | 1231 | # check_renamed_symbols HEADER LIB |
| 1232 | # Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol |
| 1233 | # name is LIB. |
| 1234 | check_renamed_symbols () { |
| 1235 | ! nm "$2" | sed 's/.* //' | |
| 1236 | grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")" |
| 1237 | } |
| 1238 | |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 1239 | component_build_psa_crypto_spm () { |
Andrzej Kurek | 03e0146 | 2022-01-03 12:53:24 +0100 | [diff] [blame] | 1240 | msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc" |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 1241 | scripts/config.py full |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 1242 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS |
| 1243 | scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER |
| 1244 | scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM |
| 1245 | # We can only compile, not link, since our test and sample programs |
| 1246 | # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM |
| 1247 | # is active. |
| 1248 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib |
Gilles Peskine | a354867 | 2021-06-17 11:37:52 +0200 | [diff] [blame] | 1249 | |
| 1250 | # Check that if a symbol is renamed by crypto_spe.h, the non-renamed |
| 1251 | # version is not present. |
| 1252 | echo "Checking for renamed symbols in the library" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1253 | check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a |
Gilles Peskine | d1dcfd5 | 2021-06-15 18:37:38 +0200 | [diff] [blame] | 1254 | } |
| 1255 | |
Ronald Cron | 336678b | 2021-01-28 17:54:24 +0100 | [diff] [blame] | 1256 | component_test_psa_crypto_client () { |
| 1257 | msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make" |
| 1258 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_C |
| 1259 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
| 1260 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT |
Raef Coles | b4568c5 | 2022-09-28 17:11:42 +0100 | [diff] [blame] | 1261 | scripts/config.py unset MBEDTLS_LMS_C |
| 1262 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
Ronald Cron | 336678b | 2021-01-28 17:54:24 +0100 | [diff] [blame] | 1263 | make |
| 1264 | |
| 1265 | msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make" |
| 1266 | make test |
| 1267 | } |
| 1268 | |
Jaeden Amero | 424fa93 | 2021-05-14 08:34:32 +0100 | [diff] [blame] | 1269 | component_test_psa_crypto_rsa_no_genprime() { |
| 1270 | msg "build: default config minus MBEDTLS_GENPRIME" |
| 1271 | scripts/config.py unset MBEDTLS_GENPRIME |
| 1272 | make |
| 1273 | |
| 1274 | msg "test: default config minus MBEDTLS_GENPRIME" |
| 1275 | make test |
| 1276 | } |
| 1277 | |
Gilles Peskine | 782f411 | 2018-11-27 16:11:09 +0100 | [diff] [blame] | 1278 | component_test_ref_configs () { |
| 1279 | msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s |
Manuel Pégourié-Gonnard | 9327fb3 | 2021-09-09 11:46:25 +0200 | [diff] [blame] | 1280 | # test-ref-configs works by overwriting mbedtls_config.h; this makes cmake |
| 1281 | # want to re-generate generated files that depend on it, quite correctly. |
| 1282 | # However this doesn't work as the generation script expects a specific |
| 1283 | # format for mbedtls_config.h, which the other files don't follow. Also, |
| 1284 | # cmake can't know this, but re-generation is actually not necessary as |
David Horstmann | d64f4b2 | 2021-10-20 12:29:47 +0100 | [diff] [blame] | 1285 | # the generated files only depend on the list of available options, not |
Manuel Pégourié-Gonnard | 9327fb3 | 2021-09-09 11:46:25 +0200 | [diff] [blame] | 1286 | # whether they're on or off. So, disable cmake's (over-sensitive here) |
| 1287 | # dependency resolution for generated files and just rely on them being |
David Horstmann | a8d1406 | 2021-10-20 17:14:23 +0100 | [diff] [blame] | 1288 | # present (thanks to pre_generate_files) by turning GEN_FILES off. |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1289 | CC=$ASAN_CC cmake -D GEN_FILES=Off -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1290 | tests/scripts/test-ref-configs.pl |
Gilles Peskine | 782f411 | 2018-11-27 16:11:09 +0100 | [diff] [blame] | 1291 | } |
Manuel Pégourié-Gonnard | 57255b1 | 2014-06-09 11:21:49 +0200 | [diff] [blame] | 1292 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1293 | component_test_no_renegotiation () { |
| 1294 | msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1295 | scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1296 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1297 | make |
Simon Butcher | 3ea7f52 | 2016-03-07 23:22:10 +0000 | [diff] [blame] | 1298 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1299 | msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1300 | make test |
Hanno Becker | 134c2ab | 2017-10-12 15:29:50 +0100 | [diff] [blame] | 1301 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1302 | msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1303 | tests/ssl-opt.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1304 | } |
Hanno Becker | 134c2ab | 2017-10-12 15:29:50 +0100 | [diff] [blame] | 1305 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1306 | component_test_no_pem_no_fs () { |
| 1307 | msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)" |
| 1308 | scripts/config.py unset MBEDTLS_PEM_PARSE_C |
| 1309 | scripts/config.py unset MBEDTLS_FS_IO |
| 1310 | scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem |
| 1311 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1312 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1313 | make |
| 1314 | |
| 1315 | msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1316 | make test |
| 1317 | |
| 1318 | msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1319 | tests/ssl-opt.sh |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1320 | } |
| 1321 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1322 | component_test_rsa_no_crt () { |
| 1323 | msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1324 | scripts/config.py set MBEDTLS_RSA_NO_CRT |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1325 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1326 | make |
Manuel Pégourié-Gonnard | 246978d | 2014-11-20 13:29:53 +0100 | [diff] [blame] | 1327 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1328 | msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1329 | make test |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1330 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1331 | msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1332 | tests/ssl-opt.sh -f RSA |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1333 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1334 | msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1335 | tests/compat.sh -t RSA |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 1336 | |
| 1337 | msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1338 | tests/context-info.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1339 | } |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1340 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1341 | component_test_no_ctr_drbg_classic () { |
| 1342 | msg "build: Full minus CTR_DRBG, classic crypto in TLS" |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1343 | scripts/config.py full |
| 1344 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1345 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1346 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1347 | |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1348 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1349 | make |
| 1350 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1351 | msg "test: Full minus CTR_DRBG, classic crypto - main suites" |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1352 | make test |
| 1353 | |
Gilles Peskine | ba74904 | 2021-01-13 20:02:03 +0100 | [diff] [blame] | 1354 | # In this configuration, the TLS test programs use HMAC_DRBG. |
| 1355 | # The SSL tests are slow, so run a small subset, just enough to get |
| 1356 | # confidence that the SSL code copes with HMAC_DRBG. |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1357 | msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1358 | tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server' |
Gilles Peskine | ba74904 | 2021-01-13 20:02:03 +0100 | [diff] [blame] | 1359 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1360 | msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1361 | tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1362 | } |
| 1363 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1364 | component_test_no_ctr_drbg_use_psa () { |
| 1365 | msg "build: Full minus CTR_DRBG, PSA crypto in TLS" |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1366 | scripts/config.py full |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1367 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1368 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1369 | |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1370 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1371 | make |
| 1372 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1373 | msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites" |
| 1374 | make test |
| 1375 | |
| 1376 | # In this configuration, the TLS test programs use HMAC_DRBG. |
| 1377 | # The SSL tests are slow, so run a small subset, just enough to get |
| 1378 | # confidence that the SSL code copes with HMAC_DRBG. |
| 1379 | msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1380 | tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1381 | |
| 1382 | msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1383 | tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1384 | } |
| 1385 | |
| 1386 | component_test_no_hmac_drbg_classic () { |
| 1387 | msg "build: Full minus HMAC_DRBG, classic crypto in TLS" |
| 1388 | scripts/config.py full |
| 1389 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1390 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
| 1391 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1392 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1393 | |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1394 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1395 | make |
| 1396 | |
| 1397 | msg "test: Full minus HMAC_DRBG, classic crypto - main suites" |
Manuel Pégourié-Gonnard | 5b942dc | 2020-06-05 09:29:51 +0200 | [diff] [blame] | 1398 | make test |
| 1399 | |
Gilles Peskine | a222434 | 2020-11-19 22:14:34 +0100 | [diff] [blame] | 1400 | # Normally our ECDSA implementation uses deterministic ECDSA. But since |
| 1401 | # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used |
| 1402 | # instead. |
| 1403 | # Test SSL with non-deterministic ECDSA. Only test features that |
| 1404 | # might be affected by how ECDSA signature is performed. |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1405 | msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1406 | tests/ssl-opt.sh -f 'Default\|SSL async private: sign' |
Gilles Peskine | a222434 | 2020-11-19 22:14:34 +0100 | [diff] [blame] | 1407 | |
| 1408 | # To save time, only test one protocol version, since this part of |
| 1409 | # the protocol is identical in (D)TLS up to 1.2. |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1410 | msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1411 | tests/compat.sh -m tls12 -t 'ECDSA' |
Manuel Pégourié-Gonnard | 817e368 | 2020-05-28 12:55:10 +0200 | [diff] [blame] | 1412 | } |
| 1413 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1414 | component_test_no_hmac_drbg_use_psa () { |
| 1415 | msg "build: Full minus HMAC_DRBG, PSA crypto in TLS" |
| 1416 | scripts/config.py full |
| 1417 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1418 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
| 1419 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
| 1420 | |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1421 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1422 | make |
| 1423 | |
| 1424 | msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites" |
| 1425 | make test |
| 1426 | |
| 1427 | # Normally our ECDSA implementation uses deterministic ECDSA. But since |
| 1428 | # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used |
| 1429 | # instead. |
| 1430 | # Test SSL with non-deterministic ECDSA. Only test features that |
| 1431 | # might be affected by how ECDSA signature is performed. |
| 1432 | msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1433 | tests/ssl-opt.sh -f 'Default\|SSL async private: sign' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1434 | |
| 1435 | # To save time, only test one protocol version, since this part of |
| 1436 | # the protocol is identical in (D)TLS up to 1.2. |
| 1437 | msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)" |
Xiaofei Bai | 8b5c382 | 2021-12-02 08:43:35 +0000 | [diff] [blame] | 1438 | tests/compat.sh -m tls12 -t 'ECDSA' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1439 | } |
| 1440 | |
| 1441 | component_test_psa_external_rng_no_drbg_classic () { |
| 1442 | msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS" |
| 1443 | scripts/config.py full |
| 1444 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 1445 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1446 | scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG |
Gilles Peskine | 38c12fd | 2021-02-08 21:02:53 +0100 | [diff] [blame] | 1447 | scripts/config.py unset MBEDTLS_ENTROPY_C |
| 1448 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
| 1449 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1450 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1451 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1452 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
Gilles Peskine | 8eb2943 | 2021-02-03 20:07:11 +0100 | [diff] [blame] | 1453 | # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG, |
| 1454 | # the SSL test programs don't have an RNG and can't work. Explicitly |
| 1455 | # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG. |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1456 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1457 | |
| 1458 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites" |
| 1459 | make test |
| 1460 | |
Gilles Peskine | 8eb2943 | 2021-02-03 20:07:11 +0100 | [diff] [blame] | 1461 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1462 | tests/ssl-opt.sh -f 'Default' |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1463 | } |
| 1464 | |
| 1465 | component_test_psa_external_rng_no_drbg_use_psa () { |
| 1466 | msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS" |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1467 | scripts/config.py full |
| 1468 | scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG |
Gilles Peskine | 38c12fd | 2021-02-08 21:02:53 +0100 | [diff] [blame] | 1469 | scripts/config.py unset MBEDTLS_ENTROPY_C |
| 1470 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
| 1471 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1472 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 1473 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
| 1474 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1475 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1476 | |
Gilles Peskine | 2747d7d | 2021-02-03 14:56:51 +0100 | [diff] [blame] | 1477 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites" |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1478 | make test |
| 1479 | |
Gilles Peskine | 8eb2943 | 2021-02-03 20:07:11 +0100 | [diff] [blame] | 1480 | msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1481 | tests/ssl-opt.sh -f 'Default\|opaque' |
Gilles Peskine | c109b37 | 2020-11-23 17:39:04 +0100 | [diff] [blame] | 1482 | } |
| 1483 | |
Gilles Peskine | 4bdb254 | 2023-04-28 19:25:25 +0200 | [diff] [blame] | 1484 | component_test_psa_external_rng_use_psa_crypto () { |
| 1485 | msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG" |
| 1486 | scripts/config.py full |
| 1487 | scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG |
| 1488 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
| 1489 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1490 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | 4bdb254 | 2023-04-28 19:25:25 +0200 | [diff] [blame] | 1491 | |
| 1492 | msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG" |
| 1493 | make test |
| 1494 | |
| 1495 | msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG" |
| 1496 | tests/ssl-opt.sh -f 'Default\|opaque' |
| 1497 | } |
| 1498 | |
Gilles Peskine | 801c433 | 2023-04-28 21:04:28 +0200 | [diff] [blame] | 1499 | component_test_psa_inject_entropy () { |
| 1500 | msg "build: full + MBEDTLS_PSA_INJECT_ENTROPY" |
| 1501 | scripts/config.py full |
| 1502 | scripts/config.py set MBEDTLS_PSA_INJECT_ENTROPY |
| 1503 | scripts/config.py set MBEDTLS_ENTROPY_NV_SEED |
| 1504 | scripts/config.py set MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES |
| 1505 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
| 1506 | scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_READ |
| 1507 | scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_WRITE |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1508 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | 801c433 | 2023-04-28 21:04:28 +0200 | [diff] [blame] | 1509 | |
| 1510 | msg "test: full + MBEDTLS_PSA_INJECT_ENTROPY" |
| 1511 | make test |
| 1512 | } |
| 1513 | |
Andrzej Kurek | 06969fc | 2023-04-12 10:34:50 -0400 | [diff] [blame] | 1514 | component_test_sw_inet_pton () { |
| 1515 | msg "build: default plus MBEDTLS_TEST_SW_INET_PTON" |
| 1516 | |
| 1517 | # MBEDTLS_TEST_HOOKS required for x509_crt_parse_cn_inet_pton |
| 1518 | scripts/config.py set MBEDTLS_TEST_HOOKS |
| 1519 | make CFLAGS="-DMBEDTLS_TEST_SW_INET_PTON" |
| 1520 | |
| 1521 | msg "test: default plus MBEDTLS_TEST_SW_INET_PTON" |
| 1522 | make test |
| 1523 | } |
| 1524 | |
Manuel Pégourié-Gonnard | b9b630d | 2023-02-16 19:07:31 +0100 | [diff] [blame] | 1525 | component_test_crypto_full_md_light_only () { |
| 1526 | msg "build: crypto_full with only the light subset of MD" |
Przemek Stekiel | fe2367a | 2022-04-28 15:44:18 +0200 | [diff] [blame] | 1527 | scripts/config.py crypto_full |
Gilles Peskine | 884b462 | 2023-07-20 20:11:51 +0200 | [diff] [blame] | 1528 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG |
Manuel Pégourié-Gonnard | b9b630d | 2023-02-16 19:07:31 +0100 | [diff] [blame] | 1529 | # Disable MD |
Przemek Stekiel | fe2367a | 2022-04-28 15:44:18 +0200 | [diff] [blame] | 1530 | scripts/config.py unset MBEDTLS_MD_C |
Manuel Pégourié-Gonnard | 49e67f8 | 2023-03-16 11:39:20 +0100 | [diff] [blame] | 1531 | # Disable direct dependencies of MD_C |
Przemek Stekiel | fe2367a | 2022-04-28 15:44:18 +0200 | [diff] [blame] | 1532 | scripts/config.py unset MBEDTLS_HKDF_C |
| 1533 | scripts/config.py unset MBEDTLS_HMAC_DRBG_C |
Nick Child | 89e82e1 | 2022-11-09 10:36:10 -0600 | [diff] [blame] | 1534 | scripts/config.py unset MBEDTLS_PKCS7_C |
Manuel Pégourié-Gonnard | 49e67f8 | 2023-03-16 11:39:20 +0100 | [diff] [blame] | 1535 | # Disable indirect dependencies of MD_C |
Manuel Pégourié-Gonnard | b9b630d | 2023-02-16 19:07:31 +0100 | [diff] [blame] | 1536 | scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # needs HMAC_DRBG |
Manuel Pégourié-Gonnard | 49e67f8 | 2023-03-16 11:39:20 +0100 | [diff] [blame] | 1537 | # Disable things that would auto-enable MD_C |
| 1538 | scripts/config.py unset MBEDTLS_PKCS5_C |
| 1539 | |
Manuel Pégourié-Gonnard | 1b5ffc6 | 2023-03-14 10:11:20 +0100 | [diff] [blame] | 1540 | # Note: MD-light is auto-enabled in build_info.h by modules that need it, |
| 1541 | # which we haven't disabled, so no need to explicitly enable it. |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1542 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Przemek Stekiel | fe2367a | 2022-04-28 15:44:18 +0200 | [diff] [blame] | 1543 | |
Manuel Pégourié-Gonnard | 0d41521 | 2023-02-23 13:02:13 +0100 | [diff] [blame] | 1544 | # Make sure we don't have the HMAC functions, but the hashing functions |
Manuel Pégourié-Gonnard | b9b630d | 2023-02-16 19:07:31 +0100 | [diff] [blame] | 1545 | not grep mbedtls_md_hmac library/md.o |
Manuel Pégourié-Gonnard | 0d41521 | 2023-02-23 13:02:13 +0100 | [diff] [blame] | 1546 | grep mbedtls_md library/md.o |
Manuel Pégourié-Gonnard | b9b630d | 2023-02-16 19:07:31 +0100 | [diff] [blame] | 1547 | |
| 1548 | msg "test: crypto_full with only the light subset of MD" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1549 | make test |
Przemek Stekiel | fe2367a | 2022-04-28 15:44:18 +0200 | [diff] [blame] | 1550 | } |
| 1551 | |
Manuel Pégourié-Gonnard | 88bae8b | 2024-01-08 10:56:35 +0100 | [diff] [blame] | 1552 | component_test_full_no_cipher_no_psa_crypto () { |
Valerio Setti | df17a10 | 2023-10-23 14:14:19 +0200 | [diff] [blame] | 1553 | msg "build: full no CIPHER no PSA_CRYPTO_C" |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1554 | scripts/config.py full |
| 1555 | scripts/config.py unset MBEDTLS_CIPHER_C |
Gilles Peskine | 9b8dead | 2023-08-09 19:48:42 +0200 | [diff] [blame] | 1556 | # Don't pull in cipher via PSA mechanisms |
| 1557 | # (currently ignored anyway because we completely disable PSA) |
| 1558 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG |
Valerio Setti | 4529d65 | 2023-10-24 11:51:58 +0200 | [diff] [blame] | 1559 | # Disable features that depend on CIPHER_C |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1560 | scripts/config.py unset MBEDTLS_CMAC_C |
| 1561 | scripts/config.py unset MBEDTLS_NIST_KW_C |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1562 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_C |
| 1563 | scripts/config.py unset MBEDTLS_SSL_TLS_C |
| 1564 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Valerio Setti | 4529d65 | 2023-10-24 11:51:58 +0200 | [diff] [blame] | 1565 | # Disable features that depend on PSA_CRYPTO_C |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1566 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C |
| 1567 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1568 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Raef Coles | a7e03ad | 2022-09-28 09:32:48 +0100 | [diff] [blame] | 1569 | scripts/config.py unset MBEDTLS_LMS_C |
Raef Coles | 47bccb7 | 2022-09-28 12:00:20 +0100 | [diff] [blame] | 1570 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1571 | |
Valerio Setti | df17a10 | 2023-10-23 14:14:19 +0200 | [diff] [blame] | 1572 | msg "test: full no CIPHER no PSA_CRYPTO_C" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1573 | make test |
Przemek Stekiel | 10f3a60 | 2022-05-02 10:55:33 +0200 | [diff] [blame] | 1574 | } |
| 1575 | |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1576 | # This is a common configurator and test function that is used in: |
Manuel Pégourié-Gonnard | 88bae8b | 2024-01-08 10:56:35 +0100 | [diff] [blame] | 1577 | # - component_test_full_no_cipher_with_psa_crypto |
| 1578 | # - component_test_full_no_cipher_with_psa_crypto_config |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1579 | # It accepts 2 input parameters: |
| 1580 | # - $1: boolean value which basically reflects status of MBEDTLS_PSA_CRYPTO_CONFIG |
| 1581 | # - $2: a text string which describes the test component |
Valerio Setti | 5b4039f | 2023-10-24 13:41:44 +0200 | [diff] [blame] | 1582 | common_test_full_no_cipher_with_psa_crypto () { |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1583 | USE_CRYPTO_CONFIG="$1" |
| 1584 | COMPONENT_DESCRIPTION="$2" |
| 1585 | |
| 1586 | msg "build: $COMPONENT_DESCRIPTION" |
| 1587 | |
| 1588 | scripts/config.py full |
| 1589 | scripts/config.py unset MBEDTLS_CIPHER_C |
| 1590 | |
| 1591 | if [ "$USE_CRYPTO_CONFIG" -eq 1 ]; then |
Valerio Setti | 862021a | 2023-10-24 13:52:06 +0200 | [diff] [blame] | 1592 | # The built-in implementation of the following algs/key-types depends |
| 1593 | # on CIPHER_C so we disable them. |
| 1594 | # This does not hold for KEY_TYPE_CHACHA20 and ALG_CHACHA20_POLY1305 |
| 1595 | # so we keep them enabled. |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1596 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CCM_STAR_NO_TAG |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1597 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CMAC |
| 1598 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_NO_PADDING |
| 1599 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_PKCS7 |
| 1600 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CFB |
| 1601 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CTR |
| 1602 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_ECB_NO_PADDING |
| 1603 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_OFB |
| 1604 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_STREAM_CIPHER |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1605 | scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_KEY_TYPE_DES |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1606 | else |
| 1607 | # Don't pull in cipher via PSA mechanisms |
| 1608 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG |
Valerio Setti | 287f6d1 | 2023-10-24 14:12:59 +0200 | [diff] [blame] | 1609 | # Disable cipher modes/keys that make PSA depend on CIPHER_C. |
| 1610 | # Keep CHACHA20 and CHACHAPOLY enabled since they do not depend on CIPHER_C. |
| 1611 | scripts/config.py unset-all MBEDTLS_CIPHER_MODE |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1612 | fi |
Valerio Setti | c84d940 | 2023-10-23 14:58:25 +0200 | [diff] [blame] | 1613 | # The following modules directly depends on CIPHER_C |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1614 | scripts/config.py unset MBEDTLS_CMAC_C |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1615 | scripts/config.py unset MBEDTLS_NIST_KW_C |
Valerio Setti | fb0b0ff | 2023-10-23 14:58:55 +0200 | [diff] [blame] | 1616 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1617 | make |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1618 | |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1619 | # Ensure that CIPHER_C was not re-enabled |
| 1620 | not grep mbedtls_cipher_init library/cipher.o |
| 1621 | |
| 1622 | msg "test: $COMPONENT_DESCRIPTION" |
| 1623 | make test |
| 1624 | } |
| 1625 | |
Manuel Pégourié-Gonnard | 88bae8b | 2024-01-08 10:56:35 +0100 | [diff] [blame] | 1626 | component_test_full_no_cipher_with_psa_crypto() { |
Valerio Setti | 5b4039f | 2023-10-24 13:41:44 +0200 | [diff] [blame] | 1627 | common_test_full_no_cipher_with_psa_crypto 0 "full no CIPHER no CRYPTO_CONFIG" |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1628 | } |
| 1629 | |
Manuel Pégourié-Gonnard | 88bae8b | 2024-01-08 10:56:35 +0100 | [diff] [blame] | 1630 | component_test_full_no_cipher_with_psa_crypto_config() { |
Valerio Setti | 5b4039f | 2023-10-24 13:41:44 +0200 | [diff] [blame] | 1631 | common_test_full_no_cipher_with_psa_crypto 1 "full no CIPHER" |
Valerio Setti | 7e710e8 | 2023-08-25 09:14:15 +0200 | [diff] [blame] | 1632 | } |
| 1633 | |
Valerio Setti | bdfecb6 | 2023-11-07 15:37:20 +0100 | [diff] [blame] | 1634 | component_test_full_no_ccm() { |
| 1635 | msg "build: full no PSA_WANT_ALG_CCM" |
| 1636 | |
| 1637 | # Full config enables: |
| 1638 | # - USE_PSA_CRYPTO so that TLS code dispatches cipher/AEAD to PSA |
| 1639 | # - CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated |
| 1640 | scripts/config.py full |
| 1641 | |
| 1642 | # Disable PSA_WANT_ALG_CCM so that CCM is not supported in PSA. CCM_C is still |
| 1643 | # enabled, but not used from TLS since USE_PSA is set. |
| 1644 | # This is helpful to ensure that TLS tests below have proper dependencies. |
| 1645 | # |
| 1646 | # Note: also PSA_WANT_ALG_CCM_STAR_NO_TAG is enabled, but it does not cause |
| 1647 | # PSA_WANT_ALG_CCM to be re-enabled. |
| 1648 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM |
| 1649 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1650 | make |
Valerio Setti | bdfecb6 | 2023-11-07 15:37:20 +0100 | [diff] [blame] | 1651 | |
| 1652 | msg "test: full no PSA_WANT_ALG_CCM" |
Valerio Setti | ff2b06a | 2023-11-08 12:35:36 +0100 | [diff] [blame] | 1653 | make test |
Valerio Setti | bdfecb6 | 2023-11-07 15:37:20 +0100 | [diff] [blame] | 1654 | } |
| 1655 | |
| 1656 | component_test_full_no_ccm_star_no_tag() { |
| 1657 | msg "build: full no PSA_WANT_ALG_CCM_STAR_NO_TAG" |
| 1658 | |
| 1659 | # Full config enables CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated |
| 1660 | scripts/config.py full |
| 1661 | |
| 1662 | # Disable CCM_STAR_NO_TAG, which is the target of this test, as well as all |
| 1663 | # other components that enable MBEDTLS_PSA_BUILTIN_CIPHER internal symbol. |
| 1664 | # This basically disables all unauthenticated ciphers on the PSA side, while |
| 1665 | # keeping AEADs enabled. |
| 1666 | # |
| 1667 | # Note: PSA_WANT_ALG_CCM is enabled, but it does not cause |
| 1668 | # PSA_WANT_ALG_CCM_STAR_NO_TAG to be re-enabled. |
| 1669 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG |
| 1670 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_STREAM_CIPHER |
| 1671 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR |
| 1672 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB |
| 1673 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB |
| 1674 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING |
| 1675 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING |
| 1676 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7 |
| 1677 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1678 | make |
Valerio Setti | bdfecb6 | 2023-11-07 15:37:20 +0100 | [diff] [blame] | 1679 | |
| 1680 | # Ensure MBEDTLS_PSA_BUILTIN_CIPHER was not enabled |
Valerio Setti | bdfecb6 | 2023-11-07 15:37:20 +0100 | [diff] [blame] | 1681 | not grep mbedtls_psa_cipher library/psa_crypto_cipher.o |
Valerio Setti | ff2b06a | 2023-11-08 12:35:36 +0100 | [diff] [blame] | 1682 | |
| 1683 | msg "test: full no PSA_WANT_ALG_CCM_STAR_NO_TAG" |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1684 | make test |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1685 | } |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1686 | |
Valerio Setti | e1655b8 | 2023-01-03 15:35:25 +0100 | [diff] [blame] | 1687 | component_test_full_no_bignum () { |
| 1688 | msg "build: full minus bignum" |
| 1689 | scripts/config.py full |
| 1690 | scripts/config.py unset MBEDTLS_BIGNUM_C |
| 1691 | # Direct dependencies of bignum |
| 1692 | scripts/config.py unset MBEDTLS_ECP_C |
| 1693 | scripts/config.py unset MBEDTLS_RSA_C |
| 1694 | scripts/config.py unset MBEDTLS_DHM_C |
| 1695 | # Direct dependencies of ECP |
| 1696 | scripts/config.py unset MBEDTLS_ECDH_C |
| 1697 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 1698 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
| 1699 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
Valerio Setti | 22d0a79 | 2023-06-14 17:23:19 +0200 | [diff] [blame] | 1700 | # Disable what auto-enables ECP_LIGHT |
| 1701 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED |
| 1702 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED |
Valerio Setti | e1655b8 | 2023-01-03 15:35:25 +0100 | [diff] [blame] | 1703 | # Indirect dependencies of ECP |
| 1704 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 1705 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 1706 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 1707 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 1708 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 1709 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED |
| 1710 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 1711 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| 1712 | # Direct dependencies of DHM |
| 1713 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED |
| 1714 | # Direct dependencies of RSA |
| 1715 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 1716 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED |
| 1717 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED |
| 1718 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 1719 | # PK and its dependencies |
| 1720 | scripts/config.py unset MBEDTLS_PK_C |
| 1721 | scripts/config.py unset MBEDTLS_PK_PARSE_C |
| 1722 | scripts/config.py unset MBEDTLS_PK_WRITE_C |
| 1723 | scripts/config.py unset MBEDTLS_X509_USE_C |
| 1724 | scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C |
| 1725 | scripts/config.py unset MBEDTLS_X509_CRL_PARSE_C |
| 1726 | scripts/config.py unset MBEDTLS_X509_CSR_PARSE_C |
| 1727 | scripts/config.py unset MBEDTLS_X509_CREATE_C |
| 1728 | scripts/config.py unset MBEDTLS_X509_CRT_WRITE_C |
| 1729 | scripts/config.py unset MBEDTLS_X509_CSR_WRITE_C |
| 1730 | scripts/config.py unset MBEDTLS_PKCS7_C |
| 1731 | scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION |
| 1732 | scripts/config.py unset MBEDTLS_SSL_ASYNC_PRIVATE |
| 1733 | scripts/config.py unset MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK |
| 1734 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 1735 | make |
Valerio Setti | e1655b8 | 2023-01-03 15:35:25 +0100 | [diff] [blame] | 1736 | |
| 1737 | msg "test: full minus bignum" |
| 1738 | make test |
| 1739 | } |
| 1740 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1741 | component_test_tls1_2_default_stream_cipher_only () { |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1742 | msg "build: default with only stream cipher" |
| 1743 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1744 | # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1745 | scripts/config.py unset MBEDTLS_GCM_C |
| 1746 | scripts/config.py unset MBEDTLS_CCM_C |
| 1747 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1748 | # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES)) |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1749 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1750 | # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1751 | scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1752 | # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER)) |
| 1753 | scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1754 | # Modules that depend on AEAD |
Przemek Stekiel | d582a01 | 2022-09-28 07:59:01 +0200 | [diff] [blame] | 1755 | scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION |
Przemek Stekiel | 52a428b | 2022-10-10 08:47:13 +0200 | [diff] [blame] | 1756 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1757 | |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1758 | make |
| 1759 | |
| 1760 | msg "test: default with only stream cipher" |
| 1761 | make test |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1762 | |
| 1763 | # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite. |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1764 | } |
| 1765 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1766 | component_test_tls1_2_default_stream_cipher_only_use_psa () { |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1767 | msg "build: default with only stream cipher use psa" |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1768 | |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1769 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1770 | # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C) |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1771 | scripts/config.py unset MBEDTLS_GCM_C |
| 1772 | scripts/config.py unset MBEDTLS_CCM_C |
| 1773 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1774 | # Disable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES)) |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1775 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1776 | # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1777 | scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1778 | # Enable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER)) |
| 1779 | scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1780 | # Modules that depend on AEAD |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1781 | scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION |
Przemek Stekiel | 52a428b | 2022-10-10 08:47:13 +0200 | [diff] [blame] | 1782 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1783 | |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1784 | make |
| 1785 | |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1786 | msg "test: default with only stream cipher use psa" |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1787 | make test |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1788 | |
| 1789 | # Not running ssl-opt.sh because most tests require a non-NULL ciphersuite. |
Przemek Stekiel | 9550c05 | 2022-09-28 09:51:55 +0200 | [diff] [blame] | 1790 | } |
Przemek Stekiel | 11c362a | 2022-09-27 13:34:31 +0200 | [diff] [blame] | 1791 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1792 | component_test_tls1_2_default_cbc_legacy_cipher_only () { |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1793 | msg "build: default with only CBC-legacy cipher" |
| 1794 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1795 | # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C) |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1796 | scripts/config.py unset MBEDTLS_GCM_C |
| 1797 | scripts/config.py unset MBEDTLS_CCM_C |
| 1798 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1799 | # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES)) |
| 1800 | scripts/config.py set MBEDTLS_CIPHER_MODE_CBC |
| 1801 | # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1802 | scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1803 | # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER)) |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1804 | scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1805 | # Modules that depend on AEAD |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1806 | scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION |
Przemek Stekiel | 52a428b | 2022-10-10 08:47:13 +0200 | [diff] [blame] | 1807 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1808 | |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1809 | make |
| 1810 | |
| 1811 | msg "test: default with only CBC-legacy cipher" |
| 1812 | make test |
Przemek Stekiel | 48a6a66 | 2022-09-29 15:22:01 +0200 | [diff] [blame] | 1813 | |
| 1814 | msg "test: default with only CBC-legacy cipher - ssl-opt.sh (subset)" |
| 1815 | tests/ssl-opt.sh -f "TLS 1.2" |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1816 | } |
| 1817 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1818 | component_test_tls1_2_deafult_cbc_legacy_cipher_only_use_psa () { |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1819 | msg "build: default with only CBC-legacy cipher use psa" |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1820 | |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1821 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1822 | # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C) |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1823 | scripts/config.py unset MBEDTLS_GCM_C |
| 1824 | scripts/config.py unset MBEDTLS_CCM_C |
| 1825 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1826 | # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES)) |
| 1827 | scripts/config.py set MBEDTLS_CIPHER_MODE_CBC |
| 1828 | # Disable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1829 | scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1830 | # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER)) |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1831 | scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1832 | # Modules that depend on AEAD |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1833 | scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION |
Przemek Stekiel | 52a428b | 2022-10-10 08:47:13 +0200 | [diff] [blame] | 1834 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1835 | |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1836 | make |
| 1837 | |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1838 | msg "test: default with only CBC-legacy cipher use psa" |
| 1839 | make test |
Przemek Stekiel | 48a6a66 | 2022-09-29 15:22:01 +0200 | [diff] [blame] | 1840 | |
| 1841 | msg "test: default with only CBC-legacy cipher use psa - ssl-opt.sh (subset)" |
| 1842 | tests/ssl-opt.sh -f "TLS 1.2" |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1843 | } |
| 1844 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1845 | component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only () { |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1846 | msg "build: default with only CBC-legacy and CBC-EtM ciphers" |
| 1847 | |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1848 | # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C) |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1849 | scripts/config.py unset MBEDTLS_GCM_C |
| 1850 | scripts/config.py unset MBEDTLS_CCM_C |
| 1851 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1852 | # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES)) |
| 1853 | scripts/config.py set MBEDTLS_CIPHER_MODE_CBC |
| 1854 | # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
| 1855 | scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC |
| 1856 | # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER)) |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1857 | scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1858 | # Modules that depend on AEAD |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1859 | scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION |
Przemek Stekiel | 52a428b | 2022-10-10 08:47:13 +0200 | [diff] [blame] | 1860 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1861 | |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1862 | make |
| 1863 | |
| 1864 | msg "test: default with only CBC-legacy and CBC-EtM ciphers" |
| 1865 | make test |
Przemek Stekiel | 48a6a66 | 2022-09-29 15:22:01 +0200 | [diff] [blame] | 1866 | |
| 1867 | msg "test: default with only CBC-legacy and CBC-EtM ciphers - ssl-opt.sh (subset)" |
| 1868 | tests/ssl-opt.sh -f "TLS 1.2" |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1869 | } |
| 1870 | |
Przemek Stekiel | 48a6a66 | 2022-09-29 15:22:01 +0200 | [diff] [blame] | 1871 | component_test_tls1_2_default_cbc_legacy_cbc_etm_cipher_only_use_psa () { |
| 1872 | msg "build: default with only CBC-legacy and CBC-EtM ciphers use psa" |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1873 | |
| 1874 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1875 | # Disable AEAD (controlled by the presence of one of GCM_C, CCM_C, CHACHAPOLY_C) |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1876 | scripts/config.py unset MBEDTLS_GCM_C |
| 1877 | scripts/config.py unset MBEDTLS_CCM_C |
| 1878 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | 68db0d2 | 2022-09-29 08:32:25 +0200 | [diff] [blame] | 1879 | # Enable CBC-legacy (controlled by MBEDTLS_CIPHER_MODE_CBC plus at least one block cipher (AES, ARIA, Camellia, DES)) |
| 1880 | scripts/config.py set MBEDTLS_CIPHER_MODE_CBC |
| 1881 | # Enable CBC-EtM (controlled by the same as CBC-legacy plus MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
| 1882 | scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC |
| 1883 | # Disable stream (currently that's just the NULL pseudo-cipher (controlled by MBEDTLS_CIPHER_NULL_CIPHER)) |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1884 | scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER |
Przemek Stekiel | 6a5cc74 | 2022-10-03 09:04:16 +0200 | [diff] [blame] | 1885 | # Modules that depend on AEAD |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1886 | scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION |
Przemek Stekiel | 52a428b | 2022-10-10 08:47:13 +0200 | [diff] [blame] | 1887 | scripts/config.py unset MBEDTLS_SSL_TICKET_C |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1888 | |
Przemek Stekiel | 0cc3466 | 2022-09-28 12:06:57 +0200 | [diff] [blame] | 1889 | make |
| 1890 | |
Przemek Stekiel | 48a6a66 | 2022-09-29 15:22:01 +0200 | [diff] [blame] | 1891 | msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa" |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1892 | make test |
Przemek Stekiel | 48a6a66 | 2022-09-29 15:22:01 +0200 | [diff] [blame] | 1893 | |
| 1894 | msg "test: default with only CBC-legacy and CBC-EtM ciphers use psa - ssl-opt.sh (subset)" |
| 1895 | tests/ssl-opt.sh -f "TLS 1.2" |
Przemek Stekiel | b0de1c0 | 2022-09-28 10:23:22 +0200 | [diff] [blame] | 1896 | } |
| 1897 | |
Valerio Setti | 9f0ec53 | 2022-11-08 13:03:24 +0100 | [diff] [blame] | 1898 | # We're not aware of any other (open source) implementation of EC J-PAKE in TLS |
| 1899 | # that we could use for interop testing. However, we now have sort of two |
| 1900 | # implementations ourselves: one using PSA, the other not. At least test that |
| 1901 | # these two interoperate with each other. |
| 1902 | component_test_tls1_2_ecjpake_compatibility() { |
| 1903 | msg "build: TLS1.2 server+client w/ EC-JPAKE w/o USE_PSA" |
| 1904 | scripts/config.py set MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED |
Gilles Peskine | edc8456 | 2023-09-20 15:03:18 +0200 | [diff] [blame] | 1905 | # Explicitly make lib first to avoid a race condition: |
| 1906 | # https://github.com/Mbed-TLS/mbedtls/issues/8229 |
| 1907 | make lib |
Valerio Setti | 9f0ec53 | 2022-11-08 13:03:24 +0100 | [diff] [blame] | 1908 | make -C programs ssl/ssl_server2 ssl/ssl_client2 |
| 1909 | cp programs/ssl/ssl_server2 s2_no_use_psa |
| 1910 | cp programs/ssl/ssl_client2 c2_no_use_psa |
| 1911 | |
| 1912 | msg "build: TLS1.2 server+client w/ EC-JPAKE w/ USE_PSA" |
| 1913 | scripts/config.py set MBEDTLS_USE_PSA_CRYPTO |
| 1914 | make clean |
Gilles Peskine | edc8456 | 2023-09-20 15:03:18 +0200 | [diff] [blame] | 1915 | make lib |
Valerio Setti | 9f0ec53 | 2022-11-08 13:03:24 +0100 | [diff] [blame] | 1916 | make -C programs ssl/ssl_server2 ssl/ssl_client2 |
| 1917 | make -C programs test/udp_proxy test/query_compile_time_config |
| 1918 | |
Valerio Setti | 70e0290 | 2022-12-02 16:21:56 +0100 | [diff] [blame] | 1919 | msg "test: server w/o USE_PSA - client w/ USE_PSA, text password" |
| 1920 | P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: working, TLS" |
| 1921 | msg "test: server w/o USE_PSA - client w/ USE_PSA, opaque password" |
| 1922 | P_SRV=../s2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: opaque password client only, working, TLS" |
| 1923 | msg "test: client w/o USE_PSA - server w/ USE_PSA, text password" |
| 1924 | P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: working, TLS" |
| 1925 | msg "test: client w/o USE_PSA - server w/ USE_PSA, opaque password" |
| 1926 | P_CLI=../c2_no_use_psa tests/ssl-opt.sh -f "ECJPAKE: opaque password server only, working, TLS" |
Valerio Setti | 9f0ec53 | 2022-11-08 13:03:24 +0100 | [diff] [blame] | 1927 | |
| 1928 | rm s2_no_use_psa c2_no_use_psa |
| 1929 | } |
| 1930 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1931 | component_test_everest () { |
| 1932 | msg "build: Everest ECDH context (ASan build)" # ~ 6 min |
| 1933 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
| 1934 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan . |
| 1935 | make |
| 1936 | |
| 1937 | msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 1938 | make test |
| 1939 | |
Gilles Peskine | 6848d17 | 2023-11-02 19:58:03 +0100 | [diff] [blame] | 1940 | msg "test: metatests (clang, ASan)" |
| 1941 | tests/scripts/run-metatests.sh any asan |
| 1942 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1943 | msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s |
| 1944 | tests/ssl-opt.sh -f ECDH |
| 1945 | |
| 1946 | msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min |
| 1947 | # Exclude some symmetric ciphers that are redundant here to gain time. |
Manuel Pégourié-Gonnard | 296787f | 2022-04-06 13:28:27 +0200 | [diff] [blame] | 1948 | tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA' |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 1949 | } |
| 1950 | |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1951 | component_test_everest_curve25519_only () { |
| 1952 | msg "build: Everest ECDH context, only Curve25519" # ~ 6 min |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1953 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
| 1954 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 1955 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 1956 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
TRodziewicz | 7c1d41d | 2021-04-23 13:33:44 +0200 | [diff] [blame] | 1957 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1958 | # Disable all curves |
Valerio Setti | 2e0275d | 2023-07-28 16:33:13 +0200 | [diff] [blame] | 1959 | scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED" |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1960 | scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED |
| 1961 | |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1962 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | d3beca9 | 2020-07-03 00:15:37 +0200 | [diff] [blame] | 1963 | |
| 1964 | msg "test: Everest ECDH context, only Curve25519" # ~ 50s |
| 1965 | make test |
| 1966 | } |
| 1967 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1968 | component_test_small_ssl_out_content_len () { |
| 1969 | msg "build: small SSL_OUT_CONTENT_LEN (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1970 | scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384 |
| 1971 | scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1972 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1973 | make |
Hanno Becker | d5ba5ef | 2017-09-28 12:53:51 +0100 | [diff] [blame] | 1974 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1975 | msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1976 | tests/ssl-opt.sh -f "Max fragment\|Large packet" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1977 | } |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1978 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1979 | component_test_small_ssl_in_content_len () { |
| 1980 | msg "build: small SSL_IN_CONTENT_LEN (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1981 | scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096 |
| 1982 | scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1983 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1984 | make |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1985 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1986 | msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1987 | tests/ssl-opt.sh -f "Max fragment" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1988 | } |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1989 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1990 | component_test_small_ssl_dtls_max_buffering () { |
| 1991 | msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 1992 | scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 1993 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1994 | make |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 1995 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1996 | msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 1997 | tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 1998 | } |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 1999 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2000 | component_test_small_mbedtls_ssl_dtls_max_buffering () { |
| 2001 | msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1" |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 2002 | scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 2003 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2004 | make |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 2005 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2006 | msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2007 | tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2008 | } |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 2009 | |
Gilles Peskine | 75cc771 | 2019-09-06 19:47:17 +0200 | [diff] [blame] | 2010 | component_test_psa_collect_statuses () { |
| 2011 | msg "build+test: psa_collect_statuses" # ~30s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2012 | scripts/config.py full |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2013 | tests/scripts/psa_collect_statuses.py |
Gilles Peskine | 75cc771 | 2019-09-06 19:47:17 +0200 | [diff] [blame] | 2014 | # Check that psa_crypto_init() succeeded at least once |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2015 | grep -q '^0:psa_crypto_init:' tests/statuses.log |
Gilles Peskine | 75cc771 | 2019-09-06 19:47:17 +0200 | [diff] [blame] | 2016 | rm -f tests/statuses.log |
| 2017 | } |
| 2018 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2019 | component_test_full_cmake_clang () { |
| 2020 | msg "build: cmake, full config, clang" # ~ 50s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2021 | scripts/config.py full |
Gilles Peskine | da6017c | 2022-10-30 21:02:40 +0100 | [diff] [blame] | 2022 | CC=clang CXX=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On -D TEST_CPP=1 . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2023 | make |
Hanno Becker | 2f5aa4c | 2018-08-24 14:43:44 +0100 | [diff] [blame] | 2024 | |
k-stachowiak | 0291cb7 | 2019-06-26 15:52:12 +0200 | [diff] [blame] | 2025 | msg "test: main suites (full config, clang)" # ~ 5s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2026 | make test |
Manuel Pégourié-Gonnard | 3895f5a | 2014-03-27 14:44:04 +0100 | [diff] [blame] | 2027 | |
Gilles Peskine | da6017c | 2022-10-30 21:02:40 +0100 | [diff] [blame] | 2028 | msg "test: cpp_dummy_build (full config, clang)" # ~ 1s |
| 2029 | programs/test/cpp_dummy_build |
| 2030 | |
Gilles Peskine | 6848d17 | 2023-11-02 19:58:03 +0100 | [diff] [blame] | 2031 | msg "test: metatests (clang)" |
Gilles Peskine | 102aea2 | 2023-11-03 18:05:38 +0100 | [diff] [blame] | 2032 | tests/scripts/run-metatests.sh any pthread |
Gilles Peskine | 6848d17 | 2023-11-02 19:58:03 +0100 | [diff] [blame] | 2033 | |
Gilles Peskine | 82b2727 | 2019-06-14 18:27:03 +0200 | [diff] [blame] | 2034 | msg "program demos (full config, clang)" # ~10s |
| 2035 | tests/scripts/run_demos.py |
| 2036 | |
k-stachowiak | 0291cb7 | 2019-06-26 15:52:12 +0200 | [diff] [blame] | 2037 | msg "test: psa_constant_names (full config, clang)" # ~ 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2038 | tests/scripts/test_psa_constant_names.py |
Gilles Peskine | 69e8f7f | 2020-02-26 19:51:43 +0100 | [diff] [blame] | 2039 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2040 | msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2041 | tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private' |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 2042 | |
Manuel Pégourié-Gonnard | 296787f | 2022-04-06 13:28:27 +0200 | [diff] [blame] | 2043 | msg "test: compat.sh NULL (full config)" # ~ 2 min |
Gilles Peskine | e29203b | 2023-08-27 21:43:00 +0200 | [diff] [blame] | 2044 | tests/compat.sh -e '^$' -f 'NULL' |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 2045 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2046 | msg "test: compat.sh ARIA + ChachaPoly" |
Manuel Pégourié-Gonnard | c572246 | 2022-12-19 11:42:12 +0100 | [diff] [blame] | 2047 | env OPENSSL="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2048 | } |
Manuel Pégourié-Gonnard | e73b263 | 2014-07-12 04:00:00 +0200 | [diff] [blame] | 2049 | |
Gilles Peskine | 0c67160 | 2022-11-29 16:01:41 +0100 | [diff] [blame] | 2050 | skip_suites_without_constant_flow () { |
| 2051 | # Skip the test suites that don't have any constant-flow annotations. |
| 2052 | # This will need to be adjusted if we ever start declaring things as |
| 2053 | # secret from macros or functions inside tests/include or tests/src. |
| 2054 | SKIP_TEST_SUITES=$( |
| 2055 | git -C tests/suites grep -L TEST_CF_ 'test_suite_*.function' | |
| 2056 | sed 's/test_suite_//; s/\.function$//' | |
| 2057 | tr '\n' ,) |
| 2058 | export SKIP_TEST_SUITES |
| 2059 | } |
| 2060 | |
Dave Rodgman | 246210e | 2023-07-31 18:07:44 +0100 | [diff] [blame] | 2061 | skip_all_except_given_suite () { |
| 2062 | # Skip all but the given test suite |
| 2063 | SKIP_TEST_SUITES=$( |
| 2064 | ls -1 tests/suites/test_suite_*.function | |
| 2065 | grep -v $1.function | |
| 2066 | sed 's/tests.suites.test_suite_//; s/\.function$//' | |
| 2067 | tr '\n' ,) |
| 2068 | export SKIP_TEST_SUITES |
| 2069 | } |
| 2070 | |
Manuel Pégourié-Gonnard | 6240def | 2020-07-10 09:35:54 +0200 | [diff] [blame] | 2071 | component_test_memsan_constant_flow () { |
Manuel Pégourié-Gonnard | 0b2112d | 2020-07-22 11:09:28 +0200 | [diff] [blame] | 2072 | # This tests both (1) accesses to undefined memory, and (2) branches or |
| 2073 | # memory access depending on secret values. To distinguish between those: |
| 2074 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist? |
| 2075 | # - or alternatively, change the build type to MemSanDbg, which enables |
| 2076 | # origin tracking and nicer stack traces (which are useful for debugging |
| 2077 | # anyway), and check if the origin was TEST_CF_SECRET() or something else. |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 2078 | msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing" |
| 2079 | scripts/config.py full |
| 2080 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN |
| 2081 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
| 2082 | scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm |
| 2083 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan . |
| 2084 | make |
| 2085 | |
| 2086 | msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, Msan + constant flow)" |
| 2087 | make test |
| 2088 | } |
| 2089 | |
| 2090 | component_test_memsan_constant_flow_psa () { |
| 2091 | # This tests both (1) accesses to undefined memory, and (2) branches or |
| 2092 | # memory access depending on secret values. To distinguish between those: |
| 2093 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist? |
| 2094 | # - or alternatively, change the build type to MemSanDbg, which enables |
| 2095 | # origin tracking and nicer stack traces (which are useful for debugging |
| 2096 | # anyway), and check if the origin was TEST_CF_SECRET() or something else. |
Manuel Pégourié-Gonnard | 0b2112d | 2020-07-22 11:09:28 +0200 | [diff] [blame] | 2097 | msg "build: cmake MSan (clang), full config with constant flow testing" |
Manuel Pégourié-Gonnard | 6240def | 2020-07-10 09:35:54 +0200 | [diff] [blame] | 2098 | scripts/config.py full |
| 2099 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN |
| 2100 | scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm |
| 2101 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan . |
| 2102 | make |
| 2103 | |
Manuel Pégourié-Gonnard | 0b2112d | 2020-07-22 11:09:28 +0200 | [diff] [blame] | 2104 | msg "test: main suites (Msan + constant flow)" |
Manuel Pégourié-Gonnard | 6240def | 2020-07-10 09:35:54 +0200 | [diff] [blame] | 2105 | make test |
| 2106 | } |
| 2107 | |
Bence Szépkúti | 0354d04 | 2023-12-06 16:14:37 +0100 | [diff] [blame] | 2108 | component_release_test_valgrind_constant_flow () { |
Manuel Pégourié-Gonnard | 73afa37 | 2020-08-19 10:27:38 +0200 | [diff] [blame] | 2109 | # This tests both (1) everything that valgrind's memcheck usually checks |
| 2110 | # (heap buffer overflows, use of uninitialized memory, use-after-free, |
| 2111 | # etc.) and (2) branches or memory access depending on secret values, |
| 2112 | # which will be reported as uninitialized memory. To distinguish between |
| 2113 | # secret and actually uninitialized: |
| 2114 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist? |
| 2115 | # - or alternatively, build with debug info and manually run the offending |
| 2116 | # test suite with valgrind --track-origins=yes, then check if the origin |
| 2117 | # was TEST_CF_SECRET() or something else. |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 2118 | msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing" |
| 2119 | scripts/config.py full |
| 2120 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND |
| 2121 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Gilles Peskine | 0c67160 | 2022-11-29 16:01:41 +0100 | [diff] [blame] | 2122 | skip_suites_without_constant_flow |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 2123 | cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 2124 | make |
| 2125 | |
| 2126 | # this only shows a summary of the results (how many of each type) |
| 2127 | # details are left in Testing/<date>/DynamicAnalysis.xml |
Gilles Peskine | 0c67160 | 2022-11-29 16:01:41 +0100 | [diff] [blame] | 2128 | msg "test: some suites (full minus MBEDTLS_USE_PSA_CRYPTO, valgrind + constant flow)" |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 2129 | make memcheck |
Dave Rodgman | 246210e | 2023-07-31 18:07:44 +0100 | [diff] [blame] | 2130 | |
| 2131 | # Test asm path in constant time module - by default, it will test the plain C |
| 2132 | # path under Valgrind or Memsan. Running only the constant_time tests is fast (<1s) |
| 2133 | msg "test: valgrind asm constant_time" |
| 2134 | scripts/config.py --force set MBEDTLS_TEST_CONSTANT_FLOW_ASM |
| 2135 | skip_all_except_given_suite test_suite_constant_time |
| 2136 | cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 2137 | make clean |
| 2138 | make |
| 2139 | make memcheck |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 2140 | } |
| 2141 | |
Bence Szépkúti | 0354d04 | 2023-12-06 16:14:37 +0100 | [diff] [blame] | 2142 | component_release_test_valgrind_constant_flow_psa () { |
Neil Armstrong | 0ab7a23 | 2022-03-18 09:57:32 +0100 | [diff] [blame] | 2143 | # This tests both (1) everything that valgrind's memcheck usually checks |
| 2144 | # (heap buffer overflows, use of uninitialized memory, use-after-free, |
| 2145 | # etc.) and (2) branches or memory access depending on secret values, |
| 2146 | # which will be reported as uninitialized memory. To distinguish between |
| 2147 | # secret and actually uninitialized: |
| 2148 | # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist? |
| 2149 | # - or alternatively, build with debug info and manually run the offending |
| 2150 | # test suite with valgrind --track-origins=yes, then check if the origin |
| 2151 | # was TEST_CF_SECRET() or something else. |
Manuel Pégourié-Gonnard | 73afa37 | 2020-08-19 10:27:38 +0200 | [diff] [blame] | 2152 | msg "build: cmake release GCC, full config with constant flow testing" |
| 2153 | scripts/config.py full |
| 2154 | scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND |
Gilles Peskine | 0c67160 | 2022-11-29 16:01:41 +0100 | [diff] [blame] | 2155 | skip_suites_without_constant_flow |
Manuel Pégourié-Gonnard | 73afa37 | 2020-08-19 10:27:38 +0200 | [diff] [blame] | 2156 | cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 2157 | make |
| 2158 | |
| 2159 | # this only shows a summary of the results (how many of each type) |
| 2160 | # details are left in Testing/<date>/DynamicAnalysis.xml |
Gilles Peskine | 0c67160 | 2022-11-29 16:01:41 +0100 | [diff] [blame] | 2161 | msg "test: some suites (valgrind + constant flow)" |
Manuel Pégourié-Gonnard | 73afa37 | 2020-08-19 10:27:38 +0200 | [diff] [blame] | 2162 | make memcheck |
| 2163 | } |
| 2164 | |
Janos Follath | 9338cac | 2023-10-04 18:55:39 +0100 | [diff] [blame] | 2165 | component_test_tsan () { |
| 2166 | msg "build: TSan (clang)" |
Paul Elliott | 356597f | 2023-12-01 18:09:41 +0000 | [diff] [blame] | 2167 | scripts/config.py full |
Janos Follath | 9338cac | 2023-10-04 18:55:39 +0100 | [diff] [blame] | 2168 | scripts/config.py set MBEDTLS_THREADING_C |
| 2169 | scripts/config.py set MBEDTLS_THREADING_PTHREAD |
| 2170 | |
| 2171 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=TSan . |
| 2172 | make |
| 2173 | |
| 2174 | msg "test: main suites (TSan)" |
| 2175 | make test |
| 2176 | } |
| 2177 | |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2178 | component_test_default_no_deprecated () { |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 2179 | # Test that removing the deprecated features from the default |
| 2180 | # configuration leaves something consistent. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2181 | msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s |
| 2182 | scripts/config.py set MBEDTLS_DEPRECATED_REMOVED |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 2183 | make CFLAGS='-O -Werror -Wall -Wextra' |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2184 | |
| 2185 | msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s |
| 2186 | make test |
| 2187 | } |
| 2188 | |
| 2189 | component_test_full_no_deprecated () { |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 2190 | msg "build: make, full_no_deprecated config" # ~ 30s |
| 2191 | scripts/config.py full_no_deprecated |
Dave Rodgman | 84125a1 | 2024-01-02 11:42:38 +0000 | [diff] [blame] | 2192 | make CFLAGS='-O -Werror -Wall -Wextra' |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2193 | |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 2194 | msg "test: make, full_no_deprecated config" # ~ 5s |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2195 | make test |
Valerio Setti | 41b5fb6 | 2023-01-09 12:20:45 +0100 | [diff] [blame] | 2196 | |
| 2197 | msg "test: ensure that X509 has no direct dependency on BIGNUM_C" |
| 2198 | not grep mbedtls_mpi library/libmbedx509.a |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2199 | } |
| 2200 | |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 2201 | component_test_full_no_deprecated_deprecated_warning () { |
| 2202 | # Test that there is nothing deprecated in "full_no_deprecated". |
| 2203 | # A deprecated feature would trigger a warning (made fatal) from |
| 2204 | # MBEDTLS_DEPRECATED_WARNING. |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 2205 | msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s |
| 2206 | scripts/config.py full_no_deprecated |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2207 | scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED |
| 2208 | scripts/config.py set MBEDTLS_DEPRECATED_WARNING |
Dave Rodgman | 84125a1 | 2024-01-02 11:42:38 +0000 | [diff] [blame] | 2209 | make CFLAGS='-O -Werror -Wall -Wextra' |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2210 | |
Gilles Peskine | 30de2e8 | 2020-04-20 21:39:22 +0200 | [diff] [blame] | 2211 | msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2212 | make test |
| 2213 | } |
| 2214 | |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 2215 | component_test_full_deprecated_warning () { |
| 2216 | # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes |
| 2217 | # with only certain whitelisted types of warnings. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2218 | msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2219 | scripts/config.py full |
| 2220 | scripts/config.py set MBEDTLS_DEPRECATED_WARNING |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2221 | # Expect warnings from '#warning' directives in check_config.h. |
Dave Rodgman | bc8e61d | 2023-12-19 14:07:15 +0000 | [diff] [blame] | 2222 | # Note that gcc is required to allow the use of -Wno-error=cpp, which allows us to |
| 2223 | # display #warning messages without them being treated as errors. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2224 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs |
Manuel Pégourié-Gonnard | 6b36892 | 2018-02-20 12:02:07 +0100 | [diff] [blame] | 2225 | |
Gilles Peskine | 8386ea2 | 2020-04-30 09:07:29 +0200 | [diff] [blame] | 2226 | msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s |
| 2227 | # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features. |
| 2228 | # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set. |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2229 | # Expect warnings from '#warning' directives in check_config.h and |
| 2230 | # from the use of deprecated functions in test suites. |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2231 | make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests |
Gilles Peskine | 841b14b | 2019-11-26 17:37:37 +0100 | [diff] [blame] | 2232 | |
Gilles Peskine | 1093d9f | 2020-04-13 01:03:21 +0200 | [diff] [blame] | 2233 | msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s |
| 2234 | make test |
Gilles Peskine | 82b2727 | 2019-06-14 18:27:03 +0200 | [diff] [blame] | 2235 | |
| 2236 | msg "program demos: full config + MBEDTLS_TEST_DEPRECATED" # ~10s |
| 2237 | tests/scripts/run_demos.py |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2238 | } |
Jaeden Amero | ed93bdc | 2018-11-02 16:57:24 +0000 | [diff] [blame] | 2239 | |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 2240 | # Check that the specified libraries exist and are empty. |
| 2241 | are_empty_libraries () { |
| 2242 | nm "$@" >/dev/null 2>/dev/null |
| 2243 | ! nm "$@" 2>/dev/null | grep -v ':$' | grep . |
| 2244 | } |
| 2245 | |
| 2246 | component_build_crypto_default () { |
| 2247 | msg "build: make, crypto only" |
| 2248 | scripts/config.py crypto |
Gilles Peskine | 6bb3915 | 2020-02-03 11:59:20 +0100 | [diff] [blame] | 2249 | make CFLAGS='-O1 -Werror' |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2250 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 2251 | } |
| 2252 | |
| 2253 | component_build_crypto_full () { |
| 2254 | msg "build: make, crypto only, full config" |
| 2255 | scripts/config.py crypto_full |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2256 | make CFLAGS='-O1 -Werror' |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2257 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 2258 | } |
| 2259 | |
Gilles Peskine | fc4f11b | 2022-10-21 19:34:54 +0200 | [diff] [blame] | 2260 | component_test_crypto_for_psa_service () { |
Gilles Peskine | aef1ba6 | 2022-10-11 21:05:06 +0200 | [diff] [blame] | 2261 | msg "build: make, config for PSA crypto service" |
| 2262 | scripts/config.py crypto |
| 2263 | scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER |
| 2264 | # Disable things that are not needed for just cryptography, to |
| 2265 | # reach a configuration that would be typical for a PSA cryptography |
| 2266 | # service providing all implemented PSA algorithms. |
| 2267 | # System stuff |
| 2268 | scripts/config.py unset MBEDTLS_ERROR_C |
| 2269 | scripts/config.py unset MBEDTLS_TIMING_C |
Gilles Peskine | 78bffd1 | 2022-10-25 21:02:33 +0200 | [diff] [blame] | 2270 | scripts/config.py unset MBEDTLS_VERSION_FEATURES |
Gilles Peskine | aef1ba6 | 2022-10-11 21:05:06 +0200 | [diff] [blame] | 2271 | # Crypto stuff with no PSA interface |
| 2272 | scripts/config.py unset MBEDTLS_BASE64_C |
Gilles Peskine | 649e04e | 2022-10-25 21:05:57 +0200 | [diff] [blame] | 2273 | # Keep MBEDTLS_CIPHER_C because psa_crypto_cipher, CCM and GCM need it. |
Gilles Peskine | b06f071 | 2022-10-25 21:06:11 +0200 | [diff] [blame] | 2274 | scripts/config.py unset MBEDTLS_HKDF_C # PSA's HKDF is independent |
Gilles Peskine | 649e04e | 2022-10-25 21:05:57 +0200 | [diff] [blame] | 2275 | # Keep MBEDTLS_MD_C because deterministic ECDSA needs it for HMAC_DRBG. |
Gilles Peskine | aef1ba6 | 2022-10-11 21:05:06 +0200 | [diff] [blame] | 2276 | scripts/config.py unset MBEDTLS_NIST_KW_C |
| 2277 | scripts/config.py unset MBEDTLS_PEM_PARSE_C |
| 2278 | scripts/config.py unset MBEDTLS_PEM_WRITE_C |
| 2279 | scripts/config.py unset MBEDTLS_PKCS12_C |
| 2280 | scripts/config.py unset MBEDTLS_PKCS5_C |
Gilles Peskine | fcee740 | 2022-10-11 21:15:24 +0200 | [diff] [blame] | 2281 | # MBEDTLS_PK_PARSE_C and MBEDTLS_PK_WRITE_C are actually currently needed |
| 2282 | # in PSA code to work with RSA keys. We don't require users to set those: |
| 2283 | # they will be reenabled in build_info.h. |
Gilles Peskine | 1f10807 | 2022-10-25 21:02:56 +0200 | [diff] [blame] | 2284 | scripts/config.py unset MBEDTLS_PK_C |
Gilles Peskine | fcee740 | 2022-10-11 21:15:24 +0200 | [diff] [blame] | 2285 | scripts/config.py unset MBEDTLS_PK_PARSE_C |
Gilles Peskine | aef1ba6 | 2022-10-11 21:05:06 +0200 | [diff] [blame] | 2286 | scripts/config.py unset MBEDTLS_PK_WRITE_C |
Gilles Peskine | aef1ba6 | 2022-10-11 21:05:06 +0200 | [diff] [blame] | 2287 | make CFLAGS='-O1 -Werror' all test |
| 2288 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
| 2289 | } |
| 2290 | |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 2291 | component_build_crypto_baremetal () { |
| 2292 | msg "build: make, crypto only, baremetal config" |
| 2293 | scripts/config.py crypto_baremetal |
David Horstmann | 61faf66 | 2021-11-30 11:40:54 +0000 | [diff] [blame] | 2294 | make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2295 | are_empty_libraries library/libmbedx509.* library/libmbedtls.* |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 2296 | } |
Daniel Axtens | 446af20 | 2020-09-02 21:30:13 +1000 | [diff] [blame] | 2297 | support_build_crypto_baremetal () { |
Daniel Axtens | 814c813 | 2020-08-31 14:22:58 +1000 | [diff] [blame] | 2298 | support_build_baremetal "$@" |
| 2299 | } |
| 2300 | |
| 2301 | component_build_baremetal () { |
| 2302 | msg "build: make, baremetal config" |
| 2303 | scripts/config.py baremetal |
David Horstmann | 61faf66 | 2021-11-30 11:40:54 +0000 | [diff] [blame] | 2304 | make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/" |
Daniel Axtens | 814c813 | 2020-08-31 14:22:58 +1000 | [diff] [blame] | 2305 | } |
| 2306 | support_build_baremetal () { |
Daniel Axtens | 446af20 | 2020-09-02 21:30:13 +1000 | [diff] [blame] | 2307 | # Older Glibc versions include time.h from other headers such as stdlib.h, |
| 2308 | # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this |
| 2309 | # problem, Ubuntu 18.04 is ok. |
| 2310 | ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h |
| 2311 | } |
Gilles Peskine | ec541fe | 2020-01-31 14:24:14 +0100 | [diff] [blame] | 2312 | |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2313 | # depends.py family of tests |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2314 | component_test_depends_py_cipher_id () { |
| 2315 | msg "test/build: depends.py cipher_id (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2316 | tests/scripts/depends.py cipher_id --unset-use-psa |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2317 | } |
Jaeden Amero | acaabe7 | 2018-11-07 11:52:52 +0000 | [diff] [blame] | 2318 | |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2319 | component_test_depends_py_cipher_chaining () { |
| 2320 | msg "test/build: depends.py cipher_chaining (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2321 | tests/scripts/depends.py cipher_chaining --unset-use-psa |
John Durkop | c14be90 | 2020-08-20 06:16:41 -0700 | [diff] [blame] | 2322 | } |
| 2323 | |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2324 | component_test_depends_py_cipher_padding () { |
| 2325 | msg "test/build: depends.py cipher_padding (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2326 | tests/scripts/depends.py cipher_padding --unset-use-psa |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2327 | } |
Jaeden Amero | acaabe7 | 2018-11-07 11:52:52 +0000 | [diff] [blame] | 2328 | |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2329 | component_test_depends_py_curves () { |
| 2330 | msg "test/build: depends.py curves (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2331 | tests/scripts/depends.py curves --unset-use-psa |
John Durkop | 2ec2eaa | 2020-08-24 18:29:15 -0700 | [diff] [blame] | 2332 | } |
| 2333 | |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2334 | component_test_depends_py_hashes () { |
| 2335 | msg "test/build: depends.py hashes (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2336 | tests/scripts/depends.py hashes --unset-use-psa |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2337 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 2338 | |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2339 | component_test_depends_py_kex () { |
| 2340 | msg "test/build: depends.py kex (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2341 | tests/scripts/depends.py kex --unset-use-psa |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 2342 | } |
| 2343 | |
Andrzej Kurek | fcbd2ac | 2022-10-05 09:14:07 -0400 | [diff] [blame] | 2344 | component_test_depends_py_pkalgs () { |
| 2345 | msg "test/build: depends.py pkalgs (gcc)" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2346 | tests/scripts/depends.py pkalgs --unset-use-psa |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2347 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 2348 | |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2349 | # PSA equivalents of the depends.py tests |
| 2350 | component_test_depends_py_cipher_id_psa () { |
| 2351 | msg "test/build: depends.py cipher_id (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2352 | tests/scripts/depends.py cipher_id |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2353 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 2354 | |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2355 | component_test_depends_py_cipher_chaining_psa () { |
| 2356 | msg "test/build: depends.py cipher_chaining (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2357 | tests/scripts/depends.py cipher_chaining |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2358 | } |
| 2359 | |
| 2360 | component_test_depends_py_cipher_padding_psa () { |
| 2361 | msg "test/build: depends.py cipher_padding (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2362 | tests/scripts/depends.py cipher_padding |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2363 | } |
| 2364 | |
| 2365 | component_test_depends_py_curves_psa () { |
| 2366 | msg "test/build: depends.py curves (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2367 | tests/scripts/depends.py curves |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2368 | } |
| 2369 | |
| 2370 | component_test_depends_py_hashes_psa () { |
| 2371 | msg "test/build: depends.py hashes (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2372 | tests/scripts/depends.py hashes |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2373 | } |
| 2374 | |
| 2375 | component_test_depends_py_kex_psa () { |
| 2376 | msg "test/build: depends.py kex (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2377 | tests/scripts/depends.py kex |
Andrzej Kurek | 7cb0077 | 2022-10-24 10:49:22 -0400 | [diff] [blame] | 2378 | } |
| 2379 | |
| 2380 | component_test_depends_py_pkalgs_psa () { |
| 2381 | msg "test/build: depends.py pkalgs (gcc) with MBEDTLS_USE_PSA_CRYPTO defined" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2382 | tests/scripts/depends.py pkalgs |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 2383 | } |
Manuel Pégourié-Gonnard | 655c0a8 | 2018-10-30 11:20:45 +0100 | [diff] [blame] | 2384 | |
Dave Rodgman | 1a034dc | 2023-01-20 13:18:05 +0000 | [diff] [blame] | 2385 | component_build_no_pk_rsa_alt_support () { |
| 2386 | msg "build: !MBEDTLS_PK_RSA_ALT_SUPPORT" # ~30s |
| 2387 | |
| 2388 | scripts/config.py full |
| 2389 | scripts/config.py unset MBEDTLS_PK_RSA_ALT_SUPPORT |
| 2390 | scripts/config.py set MBEDTLS_RSA_C |
| 2391 | scripts/config.py set MBEDTLS_X509_CRT_WRITE_C |
| 2392 | |
| 2393 | # Only compile - this is primarily to test for compile issues |
Dave Rodgman | 84125a1 | 2024-01-02 11:42:38 +0000 | [diff] [blame] | 2394 | make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' |
Dave Rodgman | 1a034dc | 2023-01-20 13:18:05 +0000 | [diff] [blame] | 2395 | } |
| 2396 | |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 2397 | component_build_module_alt () { |
| 2398 | msg "build: MBEDTLS_XXX_ALT" # ~30s |
| 2399 | scripts/config.py full |
Manuel Pégourié-Gonnard | a6e3d3e | 2022-12-06 12:10:33 +0100 | [diff] [blame] | 2400 | |
| 2401 | # Disable options that are incompatible with some ALT implementations: |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 2402 | # aesni.c and padlock.c reference mbedtls_aes_context fields directly. |
| 2403 | scripts/config.py unset MBEDTLS_AESNI_C |
| 2404 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Jerry Yu | e51eddc | 2023-01-11 14:16:08 +0800 | [diff] [blame] | 2405 | scripts/config.py unset MBEDTLS_AESCE_C |
Manuel Pégourié-Gonnard | a6e3d3e | 2022-12-06 12:10:33 +0100 | [diff] [blame] | 2406 | # MBEDTLS_ECP_RESTARTABLE is documented as incompatible. |
| 2407 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 2408 | # You can only have one threading implementation: alt or pthread, not both. |
| 2409 | scripts/config.py unset MBEDTLS_THREADING_PTHREAD |
Gilles Peskine | 5c3f18d | 2021-05-31 21:21:12 +0200 | [diff] [blame] | 2410 | # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields |
| 2411 | # directly and assumes the implementation works with partial groups. |
| 2412 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 2413 | # MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_* |
| 2414 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
| 2415 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY |
Tom Cosgrove | 87fbfb5 | 2022-03-15 10:51:52 +0000 | [diff] [blame] | 2416 | # MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_* |
| 2417 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
| 2418 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY |
Manuel Pégourié-Gonnard | a6e3d3e | 2022-12-06 12:10:33 +0100 | [diff] [blame] | 2419 | |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 2420 | # Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable |
| 2421 | # MBEDTLS_XXX_YYY_ALT which are for single functions. |
| 2422 | scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT' |
Gilles Peskine | 1628a9c | 2021-05-31 22:09:58 +0200 | [diff] [blame] | 2423 | scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C |
Manuel Pégourié-Gonnard | a6e3d3e | 2022-12-06 12:10:33 +0100 | [diff] [blame] | 2424 | |
Gilles Peskine | 1628a9c | 2021-05-31 22:09:58 +0200 | [diff] [blame] | 2425 | # We can only compile, not link, since we don't have any implementations |
| 2426 | # suitable for testing with the dummy alt headers. |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 2427 | make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib |
Gilles Peskine | 1628a9c | 2021-05-31 22:09:58 +0200 | [diff] [blame] | 2428 | } |
| 2429 | |
| 2430 | component_build_dhm_alt () { |
| 2431 | msg "build: MBEDTLS_DHM_ALT" # ~30s |
| 2432 | scripts/config.py full |
| 2433 | scripts/config.py set MBEDTLS_DHM_ALT |
| 2434 | # debug.c currently references mbedtls_dhm_context fields directly. |
| 2435 | scripts/config.py unset MBEDTLS_DEBUG_C |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 2436 | # We can only compile, not link, since we don't have any implementations |
| 2437 | # suitable for testing with the dummy alt headers. |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 2438 | make CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib |
Gilles Peskine | cc73cc5 | 2021-05-25 09:04:46 +0200 | [diff] [blame] | 2439 | } |
| 2440 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 2441 | component_test_no_use_psa_crypto_full_cmake_asan() { |
| 2442 | # full minus MBEDTLS_USE_PSA_CRYPTO: run the same set of tests as basic-build-test.sh |
Gilles Peskine | dc3a179 | 2019-09-03 11:42:04 +0200 | [diff] [blame] | 2443 | msg "build: cmake, full config minus MBEDTLS_USE_PSA_CRYPTO, ASan" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2444 | scripts/config.py full |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2445 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_C |
| 2446 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 2447 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2448 | scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C |
Gilles Peskine | dc6d838 | 2020-04-12 14:21:55 +0200 | [diff] [blame] | 2449 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 2450 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
Raef Coles | a7e03ad | 2022-09-28 09:32:48 +0100 | [diff] [blame] | 2451 | scripts/config.py unset MBEDTLS_LMS_C |
Raef Coles | 47bccb7 | 2022-09-28 12:00:20 +0100 | [diff] [blame] | 2452 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 2453 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Andrzej Kurek | de5a007 | 2019-02-01 07:03:03 -0500 | [diff] [blame] | 2454 | make |
Manuel Pégourié-Gonnard | 43be6cd | 2017-06-20 09:53:42 +0200 | [diff] [blame] | 2455 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 2456 | msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Andrzej Kurek | de5a007 | 2019-02-01 07:03:03 -0500 | [diff] [blame] | 2457 | make test |
Manuel Pégourié-Gonnard | 503a5ef | 2015-10-23 09:04:45 +0200 | [diff] [blame] | 2458 | |
Manuel Pégourié-Gonnard | 182a23b | 2022-12-07 10:38:43 +0100 | [diff] [blame] | 2459 | # Note: ssl-opt.sh has some test cases that depend on |
| 2460 | # MBEDTLS_ECP_RESTARTABLE && !MBEDTLS_USE_PSA_CRYPTO |
| 2461 | # This is the only component where those tests are not skipped. |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 2462 | msg "test: ssl-opt.sh (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2463 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 2464 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 2465 | msg "test: compat.sh default (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 2466 | tests/compat.sh |
Andrzej Kurek | 991f9fe | 2018-07-02 09:08:21 -0400 | [diff] [blame] | 2467 | |
Manuel Pégourié-Gonnard | 296787f | 2022-04-06 13:28:27 +0200 | [diff] [blame] | 2468 | msg "test: compat.sh NULL (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Gilles Peskine | e29203b | 2023-08-27 21:43:00 +0200 | [diff] [blame] | 2469 | tests/compat.sh -f 'NULL' |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 2470 | |
Manuel Pégourié-Gonnard | 971dea3 | 2019-02-01 12:38:40 +0100 | [diff] [blame] | 2471 | msg "test: compat.sh ARIA + ChachaPoly (full minus MBEDTLS_USE_PSA_CRYPTO)" |
Manuel Pégourié-Gonnard | c572246 | 2022-12-19 11:42:12 +0100 | [diff] [blame] | 2472 | env OPENSSL="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA' |
Andrzej Kurek | de5a007 | 2019-02-01 07:03:03 -0500 | [diff] [blame] | 2473 | } |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 2474 | |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2475 | component_test_psa_crypto_config_accel_ecdsa () { |
Valerio Setti | 5aab43f | 2023-03-29 10:42:07 +0200 | [diff] [blame] | 2476 | msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA" |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2477 | |
Manuel Pégourié-Gonnard | 200fd0f | 2022-12-27 13:03:10 +0100 | [diff] [blame] | 2478 | # Algorithms and key types to accelerate |
Valerio Setti | c0d2f84 | 2023-06-28 10:48:08 +0200 | [diff] [blame] | 2479 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2480 | $(helper_get_psa_key_type_list "ECC") \ |
| 2481 | $(helper_get_psa_curve_list)" |
Manuel Pégourié-Gonnard | 200fd0f | 2022-12-27 13:03:10 +0100 | [diff] [blame] | 2482 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2483 | # Configure |
| 2484 | # --------- |
Manuel Pégourié-Gonnard | 200fd0f | 2022-12-27 13:03:10 +0100 | [diff] [blame] | 2485 | |
Manuel Pégourié-Gonnard | 8d645dc | 2023-06-15 09:07:10 +0200 | [diff] [blame] | 2486 | # Start from default config (no USE_PSA) + TLS 1.3 |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2487 | helper_libtestdriver1_adjust_config "default" |
Manuel Pégourié-Gonnard | 6d7db93 | 2022-12-28 09:48:01 +0100 | [diff] [blame] | 2488 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Manuel Pégourié-Gonnard | 200fd0f | 2022-12-27 13:03:10 +0100 | [diff] [blame] | 2489 | |
| 2490 | # Disable the module that's accelerated |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2491 | scripts/config.py unset MBEDTLS_ECDSA_C |
Manuel Pégourié-Gonnard | 200fd0f | 2022-12-27 13:03:10 +0100 | [diff] [blame] | 2492 | |
| 2493 | # Disable things that depend on it |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2494 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 2495 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 2496 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2497 | # Build |
| 2498 | # ----- |
| 2499 | |
| 2500 | # These hashes are needed for some ECDSA signature tests. |
Manuel Pégourié-Gonnard | e47c53e | 2023-09-23 08:54:30 +0200 | [diff] [blame] | 2501 | loc_extra_list="ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 2502 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2503 | |
| 2504 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
| 2505 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2506 | helper_libtestdriver1_make_main "$loc_accel_list" |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2507 | |
Manuel Pégourié-Gonnard | e3095e7 | 2022-12-28 10:09:53 +0100 | [diff] [blame] | 2508 | # Make sure this was not re-enabled by accident (additive config) |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 2509 | not grep mbedtls_ecdsa_ library/ecdsa.o |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2510 | |
Manuel Pégourié-Gonnard | 200fd0f | 2022-12-27 13:03:10 +0100 | [diff] [blame] | 2511 | # Run the tests |
| 2512 | # ------------- |
| 2513 | |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 2514 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA" |
| 2515 | make test |
| 2516 | } |
| 2517 | |
Valerio Setti | 44b178c | 2023-03-22 14:02:57 +0100 | [diff] [blame] | 2518 | component_test_psa_crypto_config_accel_ecdh () { |
Valerio Setti | 5aab43f | 2023-03-29 10:42:07 +0200 | [diff] [blame] | 2519 | msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDH" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2520 | |
| 2521 | # Algorithms and key types to accelerate |
Valerio Setti | c0d2f84 | 2023-06-28 10:48:08 +0200 | [diff] [blame] | 2522 | loc_accel_list="ALG_ECDH \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2523 | $(helper_get_psa_key_type_list "ECC") \ |
| 2524 | $(helper_get_psa_curve_list)" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2525 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2526 | # Configure |
| 2527 | # --------- |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2528 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2529 | # Start from default config (no TLS 1.3, no USE_PSA) |
| 2530 | helper_libtestdriver1_adjust_config "default" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2531 | |
Valerio Setti | 44b178c | 2023-03-22 14:02:57 +0100 | [diff] [blame] | 2532 | # Disable the module that's accelerated |
| 2533 | scripts/config.py unset MBEDTLS_ECDH_C |
| 2534 | |
| 2535 | # Disable things that depend on it |
| 2536 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 2537 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 2538 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 2539 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 2540 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 2541 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2542 | # Build |
| 2543 | # ----- |
| 2544 | |
| 2545 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 2546 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2547 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2548 | |
Valerio Setti | 44b178c | 2023-03-22 14:02:57 +0100 | [diff] [blame] | 2549 | # Make sure this was not re-enabled by accident (additive config) |
| 2550 | not grep mbedtls_ecdh_ library/ecdh.o |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2551 | |
| 2552 | # Run the tests |
| 2553 | # ------------- |
| 2554 | |
Valerio Setti | 44b178c | 2023-03-22 14:02:57 +0100 | [diff] [blame] | 2555 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDH" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2556 | make test |
Manuel Pégourié-Gonnard | 10e3963 | 2022-12-29 12:29:09 +0100 | [diff] [blame] | 2557 | } |
| 2558 | |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2559 | component_test_psa_crypto_config_accel_ffdh () { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2560 | msg "build: full with accelerated FFDH" |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2561 | |
| 2562 | # Algorithms and key types to accelerate |
Valerio Setti | 27602c3 | 2023-07-10 16:38:59 +0200 | [diff] [blame] | 2563 | loc_accel_list="ALG_FFDH \ |
Valerio Setti | 0a342c9 | 2023-09-01 09:12:31 +0200 | [diff] [blame] | 2564 | $(helper_get_psa_key_type_list "DH")" |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2565 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2566 | # Configure |
| 2567 | # --------- |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2568 | |
Przemek Stekiel | 565353e | 2023-07-05 11:07:07 +0200 | [diff] [blame] | 2569 | # start with full (USE_PSA and TLS 1.3) |
Przemek Stekiel | 84f4ff1 | 2023-07-04 12:35:31 +0200 | [diff] [blame] | 2570 | helper_libtestdriver1_adjust_config "full" |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2571 | |
| 2572 | # Disable the module that's accelerated |
| 2573 | scripts/config.py unset MBEDTLS_DHM_C |
| 2574 | |
| 2575 | # Disable things that depend on it |
| 2576 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED |
| 2577 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 2578 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2579 | # Build |
| 2580 | # ----- |
| 2581 | |
| 2582 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 2583 | |
Manuel Pégourié-Gonnard | 981732e | 2023-06-08 09:15:59 +0200 | [diff] [blame] | 2584 | helper_libtestdriver1_make_main "$loc_accel_list" |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2585 | |
| 2586 | # Make sure this was not re-enabled by accident (additive config) |
| 2587 | not grep mbedtls_dhm_ library/dhm.o |
| 2588 | |
| 2589 | # Run the tests |
| 2590 | # ------------- |
| 2591 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2592 | msg "test: full with accelerated FFDH" |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2593 | make test |
Przemek Stekiel | 84f4ff1 | 2023-07-04 12:35:31 +0200 | [diff] [blame] | 2594 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2595 | msg "ssl-opt: full with accelerated FFDH alg" |
Przemek Stekiel | 84f4ff1 | 2023-07-04 12:35:31 +0200 | [diff] [blame] | 2596 | tests/ssl-opt.sh -f "ffdh" |
Przemek Stekiel | dccb202 | 2023-05-11 10:48:50 +0200 | [diff] [blame] | 2597 | } |
| 2598 | |
Przemek Stekiel | 01c248c | 2023-05-26 10:19:49 +0200 | [diff] [blame] | 2599 | component_test_psa_crypto_config_reference_ffdh () { |
Gilles Peskine | b7d577e | 2023-08-09 19:48:58 +0200 | [diff] [blame] | 2600 | msg "build: full with non-accelerated FFDH" |
Przemek Stekiel | 01c248c | 2023-05-26 10:19:49 +0200 | [diff] [blame] | 2601 | |
| 2602 | # Start with full (USE_PSA and TLS 1.3) |
Przemek Stekiel | 565353e | 2023-07-05 11:07:07 +0200 | [diff] [blame] | 2603 | helper_libtestdriver1_adjust_config "full" |
Przemek Stekiel | 01c248c | 2023-05-26 10:19:49 +0200 | [diff] [blame] | 2604 | |
| 2605 | # Disable things that are not supported |
| 2606 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED |
| 2607 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2608 | make |
Przemek Stekiel | 01c248c | 2023-05-26 10:19:49 +0200 | [diff] [blame] | 2609 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2610 | msg "test suites: full with non-accelerated FFDH alg" |
Przemek Stekiel | 01c248c | 2023-05-26 10:19:49 +0200 | [diff] [blame] | 2611 | make test |
| 2612 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2613 | msg "ssl-opt: full with non-accelerated FFDH alg" |
Przemek Stekiel | 84f4ff1 | 2023-07-04 12:35:31 +0200 | [diff] [blame] | 2614 | tests/ssl-opt.sh -f "ffdh" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2615 | } |
| 2616 | |
Valerio Setti | 44b178c | 2023-03-22 14:02:57 +0100 | [diff] [blame] | 2617 | component_test_psa_crypto_config_accel_pake() { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2618 | msg "build: full with accelerated PAKE" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2619 | |
Manuel Pégourié-Gonnard | 5a7523e | 2023-09-20 12:45:01 +0200 | [diff] [blame] | 2620 | loc_accel_list="ALG_JPAKE \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2621 | $(helper_get_psa_key_type_list "ECC") \ |
| 2622 | $(helper_get_psa_curve_list)" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2623 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2624 | # Configure |
| 2625 | # --------- |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2626 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2627 | helper_libtestdriver1_adjust_config "full" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2628 | |
| 2629 | # Make built-in fallback not available |
| 2630 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
| 2631 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED |
| 2632 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2633 | # Build |
| 2634 | # ----- |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2635 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2636 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2637 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2638 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2639 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 2640 | # Make sure this was not re-enabled by accident (additive config) |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2641 | not grep mbedtls_ecjpake_init library/ecjpake.o |
| 2642 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 2643 | # Run the tests |
| 2644 | # ------------- |
| 2645 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2646 | msg "test: full with accelerated PAKE" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2647 | make test |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2648 | } |
| 2649 | |
Manuel Pégourié-Gonnard | 5c21036 | 2023-09-26 12:03:10 +0200 | [diff] [blame] | 2650 | component_test_psa_crypto_config_accel_ecc_some_key_types () { |
| 2651 | msg "build: full with accelerated EC algs and some key types" |
| 2652 | |
| 2653 | # Algorithms and key types to accelerate |
| 2654 | # For key types, use an explicitly list to omit GENERATE (and DERIVE) |
| 2655 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \ |
| 2656 | ALG_ECDH \ |
| 2657 | ALG_JPAKE \ |
| 2658 | KEY_TYPE_ECC_PUBLIC_KEY \ |
| 2659 | KEY_TYPE_ECC_KEY_PAIR_BASIC \ |
| 2660 | KEY_TYPE_ECC_KEY_PAIR_IMPORT \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2661 | KEY_TYPE_ECC_KEY_PAIR_EXPORT \ |
| 2662 | $(helper_get_psa_curve_list)" |
Manuel Pégourié-Gonnard | 5c21036 | 2023-09-26 12:03:10 +0200 | [diff] [blame] | 2663 | |
| 2664 | # Configure |
| 2665 | # --------- |
| 2666 | |
| 2667 | # start with config full for maximum coverage (also enables USE_PSA) |
| 2668 | helper_libtestdriver1_adjust_config "full" |
| 2669 | |
| 2670 | # Disable modules that are accelerated - some will be re-enabled |
| 2671 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 2672 | scripts/config.py unset MBEDTLS_ECDH_C |
| 2673 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
| 2674 | scripts/config.py unset MBEDTLS_ECP_C |
| 2675 | |
| 2676 | # Disable all curves - those that aren't accelerated should be re-enabled |
| 2677 | helper_disable_builtin_curves |
| 2678 | |
| 2679 | # Restartable feature is not yet supported by PSA. Once it will in |
| 2680 | # the future, the following line could be removed (see issues |
| 2681 | # 6061, 6332 and following ones) |
| 2682 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
| 2683 | |
| 2684 | # this is not supported by the driver API yet |
| 2685 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE |
| 2686 | |
| 2687 | # Build |
| 2688 | # ----- |
| 2689 | |
| 2690 | # These hashes are needed for some ECDSA signature tests. |
| 2691 | loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 2692 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
| 2693 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
| 2694 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2695 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | 5c21036 | 2023-09-26 12:03:10 +0200 | [diff] [blame] | 2696 | |
| 2697 | # ECP should be re-enabled but not the others |
| 2698 | not grep mbedtls_ecdh_ library/ecdh.o |
| 2699 | not grep mbedtls_ecdsa library/ecdsa.o |
| 2700 | not grep mbedtls_ecjpake library/ecjpake.o |
| 2701 | grep mbedtls_ecp library/ecp.o |
| 2702 | |
| 2703 | # Run the tests |
| 2704 | # ------------- |
| 2705 | |
| 2706 | msg "test suites: full with accelerated EC algs and some key types" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2707 | make test |
Manuel Pégourié-Gonnard | 5c21036 | 2023-09-26 12:03:10 +0200 | [diff] [blame] | 2708 | } |
| 2709 | |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2710 | # Run tests with only (non-)Weierstrass accelerated |
| 2711 | # Common code used in: |
Manuel Pégourié-Gonnard | faea919 | 2023-09-28 09:10:01 +0200 | [diff] [blame] | 2712 | # - component_test_psa_crypto_config_accel_ecc_weierstrass_curves |
| 2713 | # - component_test_psa_crypto_config_accel_ecc_non_weierstrass_curves |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2714 | common_test_psa_crypto_config_accel_ecc_some_curves () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2715 | weierstrass=$1 |
| 2716 | if [ $weierstrass -eq 1 ]; then |
| 2717 | desc="Weierstrass" |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2718 | else |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2719 | desc="non-Weierstrass" |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2720 | fi |
| 2721 | |
Manuel Pégourié-Gonnard | c0c9b23 | 2023-09-28 10:05:57 +0200 | [diff] [blame] | 2722 | msg "build: crypto_full minus PK with accelerated EC algs and $desc curves" |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2723 | |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2724 | # Note: Curves are handled in a special way by the libtestdriver machinery, |
| 2725 | # so we only want to include them in the accel list when building the main |
| 2726 | # libraries, hence the use of a separate variable. |
| 2727 | # Note: the following loop is a modified version of |
| 2728 | # helper_get_psa_curve_list that only keeps Weierstrass families. |
| 2729 | loc_weierstrass_list="" |
| 2730 | loc_non_weierstrass_list="" |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2731 | for item in $(sed -n 's/^#define PSA_WANT_\(ECC_[0-9A-Z_a-z]*\).*/\1/p' <"$CRYPTO_CONFIG_H"); do |
| 2732 | case $item in |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2733 | ECC_BRAINPOOL*|ECC_SECP*) |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2734 | loc_weierstrass_list="$loc_weierstrass_list $item" |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2735 | ;; |
| 2736 | *) |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2737 | loc_non_weierstrass_list="$loc_non_weierstrass_list $item" |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2738 | ;; |
| 2739 | esac |
| 2740 | done |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2741 | if [ $weierstrass -eq 1 ]; then |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2742 | loc_curve_list=$loc_weierstrass_list |
| 2743 | else |
| 2744 | loc_curve_list=$loc_non_weierstrass_list |
| 2745 | fi |
| 2746 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2747 | # Algorithms and key types to accelerate |
| 2748 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \ |
| 2749 | ALG_ECDH \ |
| 2750 | ALG_JPAKE \ |
| 2751 | $(helper_get_psa_key_type_list "ECC") \ |
| 2752 | $loc_curve_list" |
| 2753 | |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2754 | # Configure |
| 2755 | # --------- |
| 2756 | |
Manuel Pégourié-Gonnard | c0c9b23 | 2023-09-28 10:05:57 +0200 | [diff] [blame] | 2757 | # Start with config crypto_full and remove PK_C: |
| 2758 | # that's what's supported now, see docs/driver-only-builds.md. |
| 2759 | helper_libtestdriver1_adjust_config "crypto_full" |
| 2760 | scripts/config.py unset MBEDTLS_PK_C |
| 2761 | scripts/config.py unset MBEDTLS_PK_PARSE_C |
| 2762 | scripts/config.py unset MBEDTLS_PK_WRITE_C |
| 2763 | # We need to disable RSA too or PK will be re-enabled. |
| 2764 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*" |
| 2765 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*" |
| 2766 | scripts/config.py unset MBEDTLS_RSA_C |
| 2767 | scripts/config.py unset MBEDTLS_PKCS1_V15 |
| 2768 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2769 | |
| 2770 | # Disable modules that are accelerated - some will be re-enabled |
| 2771 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 2772 | scripts/config.py unset MBEDTLS_ECDH_C |
| 2773 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
| 2774 | scripts/config.py unset MBEDTLS_ECP_C |
| 2775 | |
| 2776 | # Disable all curves - those that aren't accelerated should be re-enabled |
| 2777 | helper_disable_builtin_curves |
| 2778 | |
| 2779 | # Restartable feature is not yet supported by PSA. Once it will in |
| 2780 | # the future, the following line could be removed (see issues |
| 2781 | # 6061, 6332 and following ones) |
| 2782 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
| 2783 | |
| 2784 | # this is not supported by the driver API yet |
| 2785 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE |
| 2786 | |
| 2787 | # Build |
| 2788 | # ----- |
| 2789 | |
| 2790 | # These hashes are needed for some ECDSA signature tests. |
| 2791 | loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 2792 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
| 2793 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
| 2794 | |
Valerio Setti | ac7a809 | 2023-10-31 12:23:44 +0100 | [diff] [blame] | 2795 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2796 | |
| 2797 | # We expect ECDH to be re-enabled for the missing curves |
| 2798 | grep mbedtls_ecdh_ library/ecdh.o |
| 2799 | # We expect ECP to be re-enabled, however the parts specific to the |
| 2800 | # families of curves that are accelerated should be ommited. |
| 2801 | # - functions with mxz in the name are specific to Montgomery curves |
| 2802 | # - ecp_muladd is specific to Weierstrass curves |
| 2803 | ##nm library/ecp.o | tee ecp.syms |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2804 | if [ $weierstrass -eq 1 ]; then |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2805 | not grep mbedtls_ecp_muladd library/ecp.o |
| 2806 | grep mxz library/ecp.o |
| 2807 | else |
| 2808 | grep mbedtls_ecp_muladd library/ecp.o |
| 2809 | not grep mxz library/ecp.o |
| 2810 | fi |
| 2811 | # We expect ECDSA and ECJPAKE to be re-enabled only when |
| 2812 | # Weierstrass curves are not accelerated |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2813 | if [ $weierstrass -eq 1 ]; then |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2814 | not grep mbedtls_ecdsa library/ecdsa.o |
| 2815 | not grep mbedtls_ecjpake library/ecjpake.o |
| 2816 | else |
| 2817 | grep mbedtls_ecdsa library/ecdsa.o |
| 2818 | grep mbedtls_ecjpake library/ecjpake.o |
| 2819 | fi |
| 2820 | |
| 2821 | # Run the tests |
| 2822 | # ------------- |
| 2823 | |
Manuel Pégourié-Gonnard | c0c9b23 | 2023-09-28 10:05:57 +0200 | [diff] [blame] | 2824 | msg "test suites: crypto_full minus PK with accelerated EC algs and $desc curves" |
| 2825 | make test |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2826 | } |
| 2827 | |
Manuel Pégourié-Gonnard | faea919 | 2023-09-28 09:10:01 +0200 | [diff] [blame] | 2828 | component_test_psa_crypto_config_accel_ecc_weierstrass_curves () { |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2829 | common_test_psa_crypto_config_accel_ecc_some_curves 1 |
| 2830 | } |
| 2831 | |
Manuel Pégourié-Gonnard | faea919 | 2023-09-28 09:10:01 +0200 | [diff] [blame] | 2832 | component_test_psa_crypto_config_accel_ecc_non_weierstrass_curves () { |
Manuel Pégourié-Gonnard | 561bce6 | 2023-09-25 12:35:15 +0200 | [diff] [blame] | 2833 | common_test_psa_crypto_config_accel_ecc_some_curves 0 |
| 2834 | } |
| 2835 | |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2836 | # Auxiliary function to build config for all EC based algorithms (EC-JPAKE, |
| 2837 | # ECDH, ECDSA) with and without drivers. |
| 2838 | # The input parameter is a boolean value which indicates: |
| 2839 | # - 0 keep built-in EC algs, |
| 2840 | # - 1 exclude built-in EC algs (driver only). |
| 2841 | # |
| 2842 | # This is used by the two following components to ensure they always use the |
| 2843 | # same config, except for the use of driver or built-in EC algorithms: |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2844 | # - component_test_psa_crypto_config_accel_ecc_ecp_light_only; |
| 2845 | # - component_test_psa_crypto_config_reference_ecc_ecp_light_only. |
Manuel Pégourié-Gonnard | 171c45f | 2022-12-29 11:31:35 +0100 | [diff] [blame] | 2846 | # This supports comparing their test coverage with analyze_outcomes.py. |
Gilles Peskine | 8dbdf2f | 2023-07-19 19:16:37 +0200 | [diff] [blame] | 2847 | config_psa_crypto_config_ecp_light_only () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2848 | driver_only="$1" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2849 | # start with config full for maximum coverage (also enables USE_PSA) |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2850 | helper_libtestdriver1_adjust_config "full" |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2851 | if [ "$driver_only" -eq 1 ]; then |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2852 | # Disable modules that are accelerated |
| 2853 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 2854 | scripts/config.py unset MBEDTLS_ECDH_C |
| 2855 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
Valerio Setti | 29b395c | 2023-04-05 18:20:30 +0200 | [diff] [blame] | 2856 | scripts/config.py unset MBEDTLS_ECP_C |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2857 | fi |
| 2858 | |
| 2859 | # Restartable feature is not yet supported by PSA. Once it will in |
| 2860 | # the future, the following line could be removed (see issues |
| 2861 | # 6061, 6332 and following ones) |
| 2862 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2863 | } |
| 2864 | |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2865 | # Keep in sync with component_test_psa_crypto_config_reference_ecc_ecp_light_only |
| 2866 | component_test_psa_crypto_config_accel_ecc_ecp_light_only () { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2867 | msg "build: full with accelerated EC algs" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2868 | |
| 2869 | # Algorithms and key types to accelerate |
| 2870 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \ |
| 2871 | ALG_ECDH \ |
| 2872 | ALG_JPAKE \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2873 | $(helper_get_psa_key_type_list "ECC") \ |
| 2874 | $(helper_get_psa_curve_list)" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2875 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2876 | # Configure |
| 2877 | # --------- |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2878 | |
| 2879 | # Use the same config as reference, only without built-in EC algs |
Gilles Peskine | 8dbdf2f | 2023-07-19 19:16:37 +0200 | [diff] [blame] | 2880 | config_psa_crypto_config_ecp_light_only 1 |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2881 | |
Valerio Setti | 0a342c9 | 2023-09-01 09:12:31 +0200 | [diff] [blame] | 2882 | # Do not disable builtin curves because that support is required for: |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 2883 | # - MBEDTLS_PK_PARSE_EC_EXTENDED |
| 2884 | # - MBEDTLS_PK_PARSE_EC_COMPRESSED |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2885 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2886 | # Build |
| 2887 | # ----- |
| 2888 | |
| 2889 | # These hashes are needed for some ECDSA signature tests. |
Manuel Pégourié-Gonnard | e47c53e | 2023-09-23 08:54:30 +0200 | [diff] [blame] | 2890 | loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 2891 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2892 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
| 2893 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2894 | helper_libtestdriver1_make_main "$loc_accel_list" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2895 | |
| 2896 | # Make sure any built-in EC alg was not re-enabled by accident (additive config) |
| 2897 | not grep mbedtls_ecdsa_ library/ecdsa.o |
| 2898 | not grep mbedtls_ecdh_ library/ecdh.o |
| 2899 | not grep mbedtls_ecjpake_ library/ecjpake.o |
Valerio Setti | 29b395c | 2023-04-05 18:20:30 +0200 | [diff] [blame] | 2900 | not grep mbedtls_ecp_mul library/ecp.o |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2901 | |
| 2902 | # Run the tests |
| 2903 | # ------------- |
| 2904 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2905 | msg "test suites: full with accelerated EC algs" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2906 | make test |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2907 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2908 | msg "ssl-opt: full with accelerated EC algs" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2909 | tests/ssl-opt.sh |
| 2910 | } |
| 2911 | |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2912 | # Keep in sync with component_test_psa_crypto_config_accel_ecc_ecp_light_only |
| 2913 | component_test_psa_crypto_config_reference_ecc_ecp_light_only () { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2914 | msg "build: MBEDTLS_PSA_CRYPTO_CONFIG with non-accelerated EC algs" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2915 | |
Gilles Peskine | 8dbdf2f | 2023-07-19 19:16:37 +0200 | [diff] [blame] | 2916 | config_psa_crypto_config_ecp_light_only 0 |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2917 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 2918 | make |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2919 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2920 | msg "test suites: full with non-accelerated EC algs" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2921 | make test |
| 2922 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2923 | msg "ssl-opt: full with non-accelerated EC algs" |
Valerio Setti | 42d5f19 | 2023-03-20 13:54:41 +0100 | [diff] [blame] | 2924 | tests/ssl-opt.sh |
| 2925 | } |
| 2926 | |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2927 | # This helper function is used by: |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2928 | # - component_test_psa_crypto_config_accel_ecc_no_ecp_at_all() |
| 2929 | # - component_test_psa_crypto_config_reference_ecc_no_ecp_at_all() |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2930 | # to ensure that both tests use the same underlying configuration when testing |
| 2931 | # driver's coverage with analyze_outcomes.py. |
| 2932 | # |
| 2933 | # This functions accepts 1 boolean parameter as follows: |
| 2934 | # - 1: building with accelerated EC algorithms (ECDSA, ECDH, ECJPAKE), therefore |
| 2935 | # excluding their built-in implementation as well as ECP_C & ECP_LIGHT |
| 2936 | # - 0: include built-in implementation of EC algorithms. |
| 2937 | # |
| 2938 | # PK_C and RSA_C are always disabled to ensure there is no remaining dependency |
| 2939 | # on the ECP module. |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2940 | config_psa_crypto_no_ecp_at_all () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2941 | driver_only="$1" |
Valerio Setti | aafe900 | 2023-06-26 15:23:44 +0200 | [diff] [blame] | 2942 | # start with full config for maximum coverage (also enables USE_PSA) |
| 2943 | helper_libtestdriver1_adjust_config "full" |
| 2944 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 2945 | if [ "$driver_only" -eq 1 ]; then |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2946 | # Disable modules that are accelerated |
| 2947 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 2948 | scripts/config.py unset MBEDTLS_ECDH_C |
| 2949 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
| 2950 | # Disable ECP module (entirely) |
| 2951 | scripts/config.py unset MBEDTLS_ECP_C |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2952 | fi |
| 2953 | |
Valerio Setti | aecd32c | 2023-06-14 10:42:31 +0200 | [diff] [blame] | 2954 | # Disable all the features that auto-enable ECP_LIGHT (see build_info.h) |
| 2955 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED |
Valerio Setti | addeee4 | 2023-06-14 10:46:55 +0200 | [diff] [blame] | 2956 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 2957 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE |
Valerio Setti | aecd32c | 2023-06-14 10:42:31 +0200 | [diff] [blame] | 2958 | |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2959 | # Restartable feature is not yet supported by PSA. Once it will in |
| 2960 | # the future, the following line could be removed (see issues |
| 2961 | # 6061, 6332 and following ones) |
| 2962 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2963 | } |
| 2964 | |
| 2965 | # Build and test a configuration where driver accelerates all EC algs while |
| 2966 | # all support and dependencies from ECP and ECP_LIGHT are removed on the library |
| 2967 | # side. |
| 2968 | # |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2969 | # Keep in sync with component_test_psa_crypto_config_reference_ecc_no_ecp_at_all() |
| 2970 | component_test_psa_crypto_config_accel_ecc_no_ecp_at_all () { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 2971 | msg "build: full + accelerated EC algs - ECP" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2972 | |
| 2973 | # Algorithms and key types to accelerate |
| 2974 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \ |
| 2975 | ALG_ECDH \ |
| 2976 | ALG_JPAKE \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2977 | $(helper_get_psa_key_type_list "ECC") \ |
| 2978 | $(helper_get_psa_curve_list)" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2979 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2980 | # Configure |
| 2981 | # --------- |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 2982 | |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2983 | # Set common configurations between library's and driver's builds |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 2984 | config_psa_crypto_no_ecp_at_all 1 |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 2985 | # Disable all the builtin curves. All the required algs are accelerated. |
| 2986 | helper_disable_builtin_curves |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2987 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 2988 | # Build |
| 2989 | # ----- |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2990 | |
| 2991 | # Things we wanted supported in libtestdriver1, but not accelerated in the main library: |
Manuel Pégourié-Gonnard | e47c53e | 2023-09-23 08:54:30 +0200 | [diff] [blame] | 2992 | # SHA-1 and all SHA-2/3 variants, as they are used by ECDSA deterministic. |
| 2993 | loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 2994 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2995 | |
Manuel Pégourié-Gonnard | 31639e4 | 2023-05-25 10:07:31 +0200 | [diff] [blame] | 2996 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2997 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 2998 | helper_libtestdriver1_make_main "$loc_accel_list" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 2999 | |
| 3000 | # Make sure any built-in EC alg was not re-enabled by accident (additive config) |
| 3001 | not grep mbedtls_ecdsa_ library/ecdsa.o |
| 3002 | not grep mbedtls_ecdh_ library/ecdh.o |
| 3003 | not grep mbedtls_ecjpake_ library/ecjpake.o |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 3004 | # Also ensure that ECP module was not re-enabled |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3005 | not grep mbedtls_ecp_ library/ecp.o |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3006 | |
| 3007 | # Run the tests |
| 3008 | # ------------- |
| 3009 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3010 | msg "test: full + accelerated EC algs - ECP" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3011 | make test |
Valerio Setti | 16b70f2 | 2023-06-27 17:45:49 +0200 | [diff] [blame] | 3012 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3013 | msg "ssl-opt: full + accelerated EC algs - ECP" |
Valerio Setti | 16b70f2 | 2023-06-27 17:45:49 +0200 | [diff] [blame] | 3014 | tests/ssl-opt.sh |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3015 | } |
| 3016 | |
| 3017 | # Reference function used for driver's coverage analysis in analyze_outcomes.py |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 3018 | # in conjunction with component_test_psa_crypto_config_accel_ecc_no_ecp_at_all(). |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3019 | # Keep in sync with its accelerated counterpart. |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 3020 | component_test_psa_crypto_config_reference_ecc_no_ecp_at_all () { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3021 | msg "build: full + non accelerated EC algs" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3022 | |
Valerio Setti | 4d25a8d | 2023-06-14 10:33:10 +0200 | [diff] [blame] | 3023 | config_psa_crypto_no_ecp_at_all 0 |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3024 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3025 | make |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3026 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3027 | msg "test: full + non accelerated EC algs" |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3028 | make test |
Valerio Setti | 16b70f2 | 2023-06-27 17:45:49 +0200 | [diff] [blame] | 3029 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3030 | msg "ssl-opt: full + non accelerated EC algs" |
Valerio Setti | 16b70f2 | 2023-06-27 17:45:49 +0200 | [diff] [blame] | 3031 | tests/ssl-opt.sh |
Valerio Setti | e618cb0 | 2023-04-12 14:59:16 +0200 | [diff] [blame] | 3032 | } |
| 3033 | |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3034 | # This is a common configuration helper used directly from: |
| 3035 | # - common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum |
| 3036 | # - common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum |
| 3037 | # and indirectly from: |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3038 | # - component_test_psa_crypto_config_accel_ecc_no_bignum |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3039 | # - accelerate all EC algs, disable RSA and FFDH |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3040 | # - component_test_psa_crypto_config_reference_ecc_no_bignum |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3041 | # - this is the reference component of the above |
| 3042 | # - it still disables RSA and FFDH, but it uses builtin EC algs |
| 3043 | # - component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum |
| 3044 | # - accelerate all EC and FFDH algs, disable only RSA |
| 3045 | # - component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum |
| 3046 | # - this is the reference component of the above |
| 3047 | # - it still disables RSA, but it uses builtin EC and FFDH algs |
| 3048 | # |
| 3049 | # This function accepts 2 parameters: |
Valerio Setti | 5dfaca4 | 2023-09-05 08:48:51 +0200 | [diff] [blame] | 3050 | # $1: a boolean value which states if we are testing an accelerated scenario |
| 3051 | # or not. |
| 3052 | # $2: a string value which states which components are tested. Allowed values |
| 3053 | # are "ECC" or "ECC_DH". |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3054 | config_psa_crypto_config_accel_ecc_ffdh_no_bignum() { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3055 | driver_only="$1" |
| 3056 | test_target="$2" |
Valerio Setti | 18535c3 | 2023-07-31 11:27:17 +0200 | [diff] [blame] | 3057 | # start with full config for maximum coverage (also enables USE_PSA) |
Valerio Setti | 29c1b4d | 2023-07-27 10:08:45 +0200 | [diff] [blame] | 3058 | helper_libtestdriver1_adjust_config "full" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3059 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3060 | if [ "$driver_only" -eq 1 ]; then |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3061 | # Disable modules that are accelerated |
| 3062 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 3063 | scripts/config.py unset MBEDTLS_ECDH_C |
| 3064 | scripts/config.py unset MBEDTLS_ECJPAKE_C |
| 3065 | # Disable ECP module (entirely) |
| 3066 | scripts/config.py unset MBEDTLS_ECP_C |
Manuel Pégourié-Gonnard | 660bbf2 | 2023-06-12 18:42:40 +0200 | [diff] [blame] | 3067 | # Also disable bignum |
| 3068 | scripts/config.py unset MBEDTLS_BIGNUM_C |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3069 | fi |
| 3070 | |
| 3071 | # Disable all the features that auto-enable ECP_LIGHT (see build_info.h) |
| 3072 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED |
| 3073 | scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED |
| 3074 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE |
| 3075 | |
Manuel Pégourié-Gonnard | 7dccb66 | 2023-06-12 18:28:42 +0200 | [diff] [blame] | 3076 | # RSA support is intentionally disabled on this test because RSA_C depends |
| 3077 | # on BIGNUM_C. |
Valerio Setti | 2e0275d | 2023-07-28 16:33:13 +0200 | [diff] [blame] | 3078 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*" |
| 3079 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*" |
Manuel Pégourié-Gonnard | 7dccb66 | 2023-06-12 18:28:42 +0200 | [diff] [blame] | 3080 | scripts/config.py unset MBEDTLS_RSA_C |
| 3081 | scripts/config.py unset MBEDTLS_PKCS1_V15 |
| 3082 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
| 3083 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 3084 | # Also disable key exchanges that depend on RSA |
| 3085 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED |
| 3086 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED |
| 3087 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 3088 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 3089 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 3090 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3091 | if [ "$test_target" = "ECC" ]; then |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3092 | # When testing ECC only, we disable FFDH support, both from builtin and |
| 3093 | # PSA sides, and also disable the key exchanges that depend on DHM. |
| 3094 | scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_FFDH |
| 3095 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_DH_[0-9A-Z_a-z]*" |
| 3096 | scripts/config.py unset MBEDTLS_DHM_C |
| 3097 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED |
| 3098 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 3099 | else |
| 3100 | # When testing ECC and DH instead, we disable DHM and depending key |
| 3101 | # exchanges only in the accelerated build |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3102 | if [ "$driver_only" -eq 1 ]; then |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3103 | scripts/config.py unset MBEDTLS_DHM_C |
| 3104 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED |
| 3105 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 3106 | fi |
| 3107 | fi |
Manuel Pégourié-Gonnard | 7dccb66 | 2023-06-12 18:28:42 +0200 | [diff] [blame] | 3108 | |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3109 | # Restartable feature is not yet supported by PSA. Once it will in |
| 3110 | # the future, the following line could be removed (see issues |
| 3111 | # 6061, 6332 and following ones) |
| 3112 | scripts/config.py unset MBEDTLS_ECP_RESTARTABLE |
| 3113 | } |
| 3114 | |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3115 | # Common helper used by: |
| 3116 | # - component_test_psa_crypto_config_accel_ecc_no_bignum |
| 3117 | # - component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3118 | # |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3119 | # The goal is to build and test accelerating either: |
| 3120 | # - ECC only or |
| 3121 | # - both ECC and FFDH |
| 3122 | # |
| 3123 | # It is meant to be used in conjunction with |
Valerio Setti | 5dfaca4 | 2023-09-05 08:48:51 +0200 | [diff] [blame] | 3124 | # common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum() for drivers |
| 3125 | # coverage analysis in the "analyze_outcomes.py" script. |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3126 | common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3127 | test_target="$1" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3128 | |
Valerio Setti | 5dfaca4 | 2023-09-05 08:48:51 +0200 | [diff] [blame] | 3129 | # This is an internal helper to simplify text message handling |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3130 | if [ "$test_target" = "ECC_DH" ]; then |
| 3131 | accel_text="ECC/FFDH" |
| 3132 | removed_text="ECP - DH" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3133 | else |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3134 | accel_text="ECC" |
| 3135 | removed_text="ECP" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3136 | fi |
| 3137 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3138 | msg "build: full + accelerated $accel_text algs + USE_PSA - $removed_text - BIGNUM" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3139 | |
| 3140 | # By default we accelerate all EC keys/algs |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3141 | loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA \ |
| 3142 | ALG_ECDH \ |
| 3143 | ALG_JPAKE \ |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 3144 | $(helper_get_psa_key_type_list "ECC") \ |
| 3145 | $(helper_get_psa_curve_list)" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3146 | # Optionally we can also add DH to the list of accelerated items |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3147 | if [ "$test_target" = "ECC_DH" ]; then |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3148 | loc_accel_list="$loc_accel_list \ |
| 3149 | ALG_FFDH \ |
Manuel Pégourié-Gonnard | 85ff5e6 | 2023-09-22 09:05:48 +0200 | [diff] [blame] | 3150 | $(helper_get_psa_key_type_list "DH")" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3151 | fi |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3152 | |
| 3153 | # Configure |
| 3154 | # --------- |
| 3155 | |
| 3156 | # Set common configurations between library's and driver's builds |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3157 | config_psa_crypto_config_accel_ecc_ffdh_no_bignum 1 "$test_target" |
Valerio Setti | b2fd673 | 2023-08-15 17:10:47 +0200 | [diff] [blame] | 3158 | # Disable all the builtin curves. All the required algs are accelerated. |
| 3159 | helper_disable_builtin_curves |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3160 | |
| 3161 | # Build |
| 3162 | # ----- |
| 3163 | |
| 3164 | # Things we wanted supported in libtestdriver1, but not accelerated in the main library: |
Manuel Pégourié-Gonnard | e47c53e | 2023-09-23 08:54:30 +0200 | [diff] [blame] | 3165 | # SHA-1 and all SHA-2/3 variants, as they are used by ECDSA deterministic. |
| 3166 | loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 3167 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3168 | |
| 3169 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
| 3170 | |
Valerio Setti | 3fe105b | 2023-10-30 11:08:12 +0100 | [diff] [blame] | 3171 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3172 | |
| 3173 | # Make sure any built-in EC alg was not re-enabled by accident (additive config) |
| 3174 | not grep mbedtls_ecdsa_ library/ecdsa.o |
| 3175 | not grep mbedtls_ecdh_ library/ecdh.o |
| 3176 | not grep mbedtls_ecjpake_ library/ecjpake.o |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3177 | # Also ensure that ECP, RSA, [DHM] or BIGNUM modules were not re-enabled |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3178 | not grep mbedtls_ecp_ library/ecp.o |
Manuel Pégourié-Gonnard | 06aebe4 | 2023-06-12 18:33:34 +0200 | [diff] [blame] | 3179 | not grep mbedtls_rsa_ library/rsa.o |
Manuel Pégourié-Gonnard | 660bbf2 | 2023-06-12 18:42:40 +0200 | [diff] [blame] | 3180 | not grep mbedtls_mpi_ library/bignum.o |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3181 | not grep mbedtls_dhm_ library/dhm.o |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3182 | |
| 3183 | # Run the tests |
| 3184 | # ------------- |
| 3185 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3186 | msg "test suites: full + accelerated $accel_text algs + USE_PSA - $removed_text - DHM - BIGNUM" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3187 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3188 | make test |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3189 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3190 | msg "ssl-opt: full + accelerated $accel_text algs + USE_PSA - $removed_text - BIGNUM" |
Valerio Setti | 18535c3 | 2023-07-31 11:27:17 +0200 | [diff] [blame] | 3191 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3192 | } |
| 3193 | |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3194 | # Common helper used by: |
| 3195 | # - component_test_psa_crypto_config_reference_ecc_no_bignum |
| 3196 | # - component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum |
| 3197 | # |
| 3198 | # The goal is to build and test a reference scenario (i.e. with builtin |
| 3199 | # components) compared to the ones used in |
| 3200 | # common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum() above. |
| 3201 | # |
| 3202 | # It is meant to be used in conjunction with |
| 3203 | # common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum() for drivers' |
| 3204 | # coverage analysis in "analyze_outcomes.py" script. |
| 3205 | common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3206 | test_target="$1" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3207 | |
Valerio Setti | 5dfaca4 | 2023-09-05 08:48:51 +0200 | [diff] [blame] | 3208 | # This is an internal helper to simplify text message handling |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3209 | if [ "$test_target" = "ECC_DH" ]; then |
| 3210 | accel_text="ECC/FFDH" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3211 | else |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3212 | accel_text="ECC" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3213 | fi |
| 3214 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3215 | msg "build: full + non accelerated $accel_text algs + USE_PSA" |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3216 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3217 | config_psa_crypto_config_accel_ecc_ffdh_no_bignum 0 "$test_target" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3218 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3219 | make |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3220 | |
Valerio Setti | 29c1b4d | 2023-07-27 10:08:45 +0200 | [diff] [blame] | 3221 | msg "test suites: full + non accelerated EC algs + USE_PSA" |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3222 | make test |
| 3223 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3224 | msg "ssl-opt: full + non accelerated $accel_text algs + USE_PSA" |
Valerio Setti | 18535c3 | 2023-07-31 11:27:17 +0200 | [diff] [blame] | 3225 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | abd00d0 | 2023-06-12 17:51:33 +0200 | [diff] [blame] | 3226 | } |
| 3227 | |
Valerio Setti | 4e2f244 | 2023-08-15 10:10:26 +0200 | [diff] [blame] | 3228 | component_test_psa_crypto_config_accel_ecc_no_bignum () { |
| 3229 | common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum "ECC" |
| 3230 | } |
| 3231 | |
| 3232 | component_test_psa_crypto_config_reference_ecc_no_bignum () { |
| 3233 | common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum "ECC" |
| 3234 | } |
| 3235 | |
| 3236 | component_test_psa_crypto_config_accel_ecc_ffdh_no_bignum () { |
| 3237 | common_test_psa_crypto_config_accel_ecc_ffdh_no_bignum "ECC_DH" |
| 3238 | } |
| 3239 | |
| 3240 | component_test_psa_crypto_config_reference_ecc_ffdh_no_bignum () { |
| 3241 | common_test_psa_crypto_config_reference_ecc_ffdh_no_bignum "ECC_DH" |
| 3242 | } |
| 3243 | |
Valerio Setti | ac6d35f | 2023-08-04 12:49:11 +0200 | [diff] [blame] | 3244 | # Helper for setting common configurations between: |
| 3245 | # - component_test_tfm_config_p256m_driver_accel_ec() |
| 3246 | # - component_test_tfm_config() |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3247 | common_tfm_config () { |
| 3248 | # Enable TF-M config |
Yanray Wang | 7050504 | 2023-09-21 17:11:40 +0800 | [diff] [blame] | 3249 | cp configs/config-tfm.h "$CONFIG_H" |
| 3250 | echo "#undef MBEDTLS_PSA_CRYPTO_CONFIG_FILE" >> "$CONFIG_H" |
| 3251 | cp configs/ext/crypto_config_profile_medium.h "$CRYPTO_CONFIG_H" |
Valerio Setti | c5c4bd2 | 2023-08-03 14:28:20 +0200 | [diff] [blame] | 3252 | |
Yanray Wang | 73bb231 | 2023-09-25 11:21:15 +0800 | [diff] [blame] | 3253 | # Other config adjustment to make the tests pass. |
| 3254 | # This should probably be adopted upstream. |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3255 | # |
Manuel Pégourié-Gonnard | 96839e7 | 2023-08-08 13:01:29 +0200 | [diff] [blame] | 3256 | # - USE_PSA_CRYPTO for PK_HAVE_ECC_KEYS |
| 3257 | echo "#define MBEDTLS_USE_PSA_CRYPTO" >> "$CONFIG_H" |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3258 | |
Yanray Wang | 73bb231 | 2023-09-25 11:21:15 +0800 | [diff] [blame] | 3259 | # Config adjustment for better test coverage in our environment. |
| 3260 | # This is not needed just to build and pass tests. |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3261 | # |
| 3262 | # Enable filesystem I/O for the benefit of PK parse/write tests. |
| 3263 | echo "#define MBEDTLS_FS_IO" >> "$CONFIG_H" |
| 3264 | } |
| 3265 | |
Valerio Setti | ac6d35f | 2023-08-04 12:49:11 +0200 | [diff] [blame] | 3266 | # Keep this in sync with component_test_tfm_config() as they are both meant |
| 3267 | # to be used in analyze_outcomes.py for driver's coverage analysis. |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3268 | component_test_tfm_config_p256m_driver_accel_ec () { |
| 3269 | msg "build: TF-M config + p256m driver + accel ECDH(E)/ECDSA" |
| 3270 | |
| 3271 | common_tfm_config |
Valerio Setti | c5c4bd2 | 2023-08-03 14:28:20 +0200 | [diff] [blame] | 3272 | |
Dave Rodgman | 897bb77 | 2023-11-15 16:34:20 +0000 | [diff] [blame] | 3273 | # Build crypto library |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 3274 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -I../tests/include/spe" LDFLAGS="$ASAN_CFLAGS" |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3275 | |
Manuel Pégourié-Gonnard | f8930e2 | 2023-06-13 09:51:32 +0200 | [diff] [blame] | 3276 | # Make sure any built-in EC alg was not re-enabled by accident (additive config) |
| 3277 | not grep mbedtls_ecdsa_ library/ecdsa.o |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3278 | not grep mbedtls_ecdh_ library/ecdh.o |
| 3279 | not grep mbedtls_ecjpake_ library/ecjpake.o |
| 3280 | # Also ensure that ECP, RSA, DHM or BIGNUM modules were not re-enabled |
| 3281 | not grep mbedtls_ecp_ library/ecp.o |
| 3282 | not grep mbedtls_rsa_ library/rsa.o |
Valerio Setti | e4758aa | 2023-03-24 16:51:17 +0100 | [diff] [blame] | 3283 | not grep mbedtls_dhm_ library/dhm.o |
Valerio Setti | ee97a1e | 2023-03-27 12:44:15 +0200 | [diff] [blame] | 3284 | not grep mbedtls_mpi_ library/bignum.o |
Dave Rodgman | 897bb77 | 2023-11-15 16:34:20 +0000 | [diff] [blame] | 3285 | # Check that p256m was built |
Dave Rodgman | be5489a | 2023-11-27 10:30:03 +0000 | [diff] [blame] | 3286 | grep -q p256_ecdsa_ library/libmbedcrypto.a |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3287 | |
Valerio Setti | 5e18b90 | 2023-12-04 12:07:30 +0100 | [diff] [blame] | 3288 | # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration |
| 3289 | # files, so we want to ensure that it has not be re-enabled accidentally. |
| 3290 | not grep mbedtls_cipher library/cipher.o |
| 3291 | |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3292 | # Run the tests |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3293 | msg "test: TF-M config + p256m driver + accel ECDH(E)/ECDSA" |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3294 | make test |
Valerio Setti | e4758aa | 2023-03-24 16:51:17 +0100 | [diff] [blame] | 3295 | } |
Valerio Setti | ee97a1e | 2023-03-27 12:44:15 +0200 | [diff] [blame] | 3296 | |
Valerio Setti | ac6d35f | 2023-08-04 12:49:11 +0200 | [diff] [blame] | 3297 | # Keep this in sync with component_test_tfm_config_p256m_driver_accel_ec() as |
| 3298 | # they are both meant to be used in analyze_outcomes.py for driver's coverage |
| 3299 | # analysis. |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3300 | component_test_tfm_config() { |
| 3301 | common_tfm_config |
Valerio Setti | ee97a1e | 2023-03-27 12:44:15 +0200 | [diff] [blame] | 3302 | |
Dave Rodgman | 897bb77 | 2023-11-15 16:34:20 +0000 | [diff] [blame] | 3303 | # Disable P256M driver, which is on by default, so that analyze_outcomes |
| 3304 | # can compare this test with test_tfm_config_p256m_driver_accel_ec |
| 3305 | echo "#undef MBEDTLS_PSA_P256M_DRIVER_ENABLED" >> "$CONFIG_H" |
| 3306 | |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3307 | msg "build: TF-M config" |
Gilles Peskine | c1bedfe | 2023-09-27 15:53:08 +0200 | [diff] [blame] | 3308 | make CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' tests |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3309 | |
Dave Rodgman | 897bb77 | 2023-11-15 16:34:20 +0000 | [diff] [blame] | 3310 | # Check that p256m was not built |
Dave Rodgman | be5489a | 2023-11-27 10:30:03 +0000 | [diff] [blame] | 3311 | not grep p256_ecdsa_ library/libmbedcrypto.a |
Dave Rodgman | 897bb77 | 2023-11-15 16:34:20 +0000 | [diff] [blame] | 3312 | |
Valerio Setti | 5e18b90 | 2023-12-04 12:07:30 +0100 | [diff] [blame] | 3313 | # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration |
| 3314 | # files, so we want to ensure that it has not be re-enabled accidentally. |
| 3315 | not grep mbedtls_cipher library/cipher.o |
| 3316 | |
Valerio Setti | 52ba0e3 | 2023-08-04 12:43:03 +0200 | [diff] [blame] | 3317 | msg "test: TF-M config" |
| 3318 | make test |
Valerio Setti | c5c4bd2 | 2023-08-03 14:28:20 +0200 | [diff] [blame] | 3319 | } |
| 3320 | |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3321 | # Common helper for component_full_without_ecdhe_ecdsa() and |
| 3322 | # component_full_without_ecdhe_ecdsa_and_tls13() which: |
| 3323 | # - starts from the "full" configuration minus the list of symbols passed in |
| 3324 | # as 1st parameter |
| 3325 | # - build |
| 3326 | # - test only TLS (i.e. test_suite_tls and ssl-opt) |
| 3327 | build_full_minus_something_and_test_tls () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3328 | symbols_to_disable="$1" |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3329 | |
| 3330 | msg "build: full minus something, test TLS" |
| 3331 | |
| 3332 | scripts/config.py full |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3333 | for sym in $symbols_to_disable; do |
| 3334 | echo "Disabling $sym" |
| 3335 | scripts/config.py unset $sym |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3336 | done |
Valerio Setti | e4758aa | 2023-03-24 16:51:17 +0100 | [diff] [blame] | 3337 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3338 | make |
Valerio Setti | ee97a1e | 2023-03-27 12:44:15 +0200 | [diff] [blame] | 3339 | |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3340 | msg "test: full minus something, test TLS" |
| 3341 | ( cd tests; ./test_suite_ssl ) |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3342 | |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3343 | msg "ssl-opt: full minus something, test TLS" |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3344 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3345 | } |
Valerio Setti | 1f1420d | 2023-03-28 10:35:45 +0200 | [diff] [blame] | 3346 | |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3347 | component_full_without_ecdhe_ecdsa () { |
| 3348 | build_full_minus_something_and_test_tls "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED" |
Valerio Setti | b7e9544 | 2023-03-21 11:52:33 +0100 | [diff] [blame] | 3349 | } |
| 3350 | |
Valerio Setti | 5a57e2a | 2023-08-02 11:30:50 +0200 | [diff] [blame] | 3351 | component_full_without_ecdhe_ecdsa_and_tls13 () { |
| 3352 | build_full_minus_something_and_test_tls "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 3353 | MBEDTLS_SSL_PROTO_TLS1_3" |
Valerio Setti | e4758aa | 2023-03-24 16:51:17 +0100 | [diff] [blame] | 3354 | } |
| 3355 | |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3356 | # This is an helper used by: |
| 3357 | # - component_test_psa_ecc_key_pair_no_derive |
| 3358 | # - component_test_psa_ecc_key_pair_no_generate |
| 3359 | # The goal is to test with all PSA_WANT_KEY_TYPE_xxx_KEY_PAIR_yyy symbols |
| 3360 | # enabled, but one. Input arguments are as follows: |
| 3361 | # - $1 is the key type under test, i.e. ECC/RSA/DH |
| 3362 | # - $2 is the key option to be unset (i.e. generate, derive, etc) |
Valerio Setti | a983655 | 2023-06-22 11:22:23 +0200 | [diff] [blame] | 3363 | build_and_test_psa_want_key_pair_partial() { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3364 | key_type=$1 |
| 3365 | unset_option=$2 |
| 3366 | disabled_psa_want="PSA_WANT_KEY_TYPE_${key_type}_KEY_PAIR_${unset_option}" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3367 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3368 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO - ${disabled_psa_want}" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3369 | scripts/config.py full |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3370 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
| 3371 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
| 3372 | |
| 3373 | # All the PSA_WANT_KEY_TYPE_xxx_KEY_PAIR_yyy are enabled by default in |
| 3374 | # crypto_config.h so we just disable the one we don't want. |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3375 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset "$disabled_psa_want" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3376 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3377 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3378 | |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3379 | msg "test: full - MBEDTLS_USE_PSA_CRYPTO - ${disabled_psa_want}" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3380 | make test |
| 3381 | } |
| 3382 | |
| 3383 | component_test_psa_ecc_key_pair_no_derive() { |
Valerio Setti | a983655 | 2023-06-22 11:22:23 +0200 | [diff] [blame] | 3384 | build_and_test_psa_want_key_pair_partial "ECC" "DERIVE" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3385 | } |
| 3386 | |
| 3387 | component_test_psa_ecc_key_pair_no_generate() { |
Valerio Setti | a983655 | 2023-06-22 11:22:23 +0200 | [diff] [blame] | 3388 | build_and_test_psa_want_key_pair_partial "ECC" "GENERATE" |
Valerio Setti | 249b18a | 2023-06-20 12:08:30 +0200 | [diff] [blame] | 3389 | } |
| 3390 | |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3391 | config_psa_crypto_accel_rsa () { |
| 3392 | driver_only=$1 |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3393 | |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3394 | # Start from crypto_full config (no X.509, no TLS) |
| 3395 | helper_libtestdriver1_adjust_config "crypto_full" |
| 3396 | |
| 3397 | if [ "$driver_only" -eq 1 ]; then |
| 3398 | # Remove RSA support and its dependencies |
| 3399 | scripts/config.py unset MBEDTLS_RSA_C |
| 3400 | scripts/config.py unset MBEDTLS_PKCS1_V15 |
| 3401 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
| 3402 | |
| 3403 | # We need PEM parsing in the test library as well to support the import |
| 3404 | # of PEM encoded RSA keys. |
| 3405 | scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_PEM_PARSE_C |
| 3406 | scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_BASE64_C |
| 3407 | fi |
| 3408 | } |
| 3409 | |
| 3410 | component_test_psa_crypto_config_accel_rsa_crypto () { |
| 3411 | msg "build: crypto_full with accelerated RSA" |
| 3412 | |
| 3413 | loc_accel_list="ALG_RSA_OAEP ALG_RSA_PSS \ |
| 3414 | ALG_RSA_PKCS1V15_CRYPT ALG_RSA_PKCS1V15_SIGN \ |
| 3415 | KEY_TYPE_RSA_PUBLIC_KEY \ |
| 3416 | KEY_TYPE_RSA_KEY_PAIR_BASIC \ |
| 3417 | KEY_TYPE_RSA_KEY_PAIR_GENERATE \ |
| 3418 | KEY_TYPE_RSA_KEY_PAIR_IMPORT \ |
| 3419 | KEY_TYPE_RSA_KEY_PAIR_EXPORT" |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3420 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3421 | # Configure |
| 3422 | # --------- |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3423 | |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3424 | config_psa_crypto_accel_rsa 1 |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3425 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3426 | # Build |
| 3427 | # ----- |
| 3428 | |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3429 | # These hashes are needed for unit tests. |
Manuel Pégourié-Gonnard | e47c53e | 2023-09-23 08:54:30 +0200 | [diff] [blame] | 3430 | loc_extra_list="ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3431 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512 ALG_MD5" |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3432 | helper_libtestdriver1_make_drivers "$loc_accel_list" "$loc_extra_list" |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3433 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3434 | helper_libtestdriver1_make_main "$loc_accel_list" |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3435 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3436 | # Make sure this was not re-enabled by accident (additive config) |
Pengyu Lv | 98a90c6 | 2023-12-07 17:23:25 +0800 | [diff] [blame] | 3437 | not grep mbedtls_rsa library/rsa.o |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3438 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3439 | # Run the tests |
| 3440 | # ------------- |
| 3441 | |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3442 | msg "test: crypto_full with accelerated RSA" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3443 | make test |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3444 | } |
| 3445 | |
| 3446 | component_test_psa_crypto_config_reference_rsa_crypto () { |
| 3447 | msg "build: crypto_full with non-accelerated RSA" |
| 3448 | |
| 3449 | # Configure |
| 3450 | # --------- |
| 3451 | config_psa_crypto_accel_rsa 0 |
| 3452 | |
| 3453 | # Build |
| 3454 | # ----- |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3455 | make |
Pengyu Lv | e705f57 | 2023-12-06 16:38:15 +0800 | [diff] [blame] | 3456 | |
| 3457 | # Run the tests |
| 3458 | # ------------- |
| 3459 | msg "test: crypto_full with non-accelerated RSA" |
Ronald Cron | 403c15c | 2021-09-13 09:38:05 +0200 | [diff] [blame] | 3460 | make test |
| 3461 | } |
| 3462 | |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3463 | # This is a temporary test to verify that full RSA support is present even when |
Valerio Setti | 01cc88a | 2023-06-15 11:53:08 +0200 | [diff] [blame] | 3464 | # only one single new symbols (PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) is defined. |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3465 | component_test_new_psa_want_key_pair_symbol() { |
Valerio Setti | 01cc88a | 2023-06-15 11:53:08 +0200 | [diff] [blame] | 3466 | msg "Build: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC" |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3467 | |
Valerio Setti | 4590bc2 | 2023-06-13 15:39:23 +0200 | [diff] [blame] | 3468 | # Create a temporary output file unless there is already one set |
| 3469 | if [ "$MBEDTLS_TEST_OUTCOME_FILE" ]; then |
| 3470 | REMOVE_OUTCOME_ON_EXIT="no" |
| 3471 | else |
| 3472 | REMOVE_OUTCOME_ON_EXIT="yes" |
| 3473 | MBEDTLS_TEST_OUTCOME_FILE="$PWD/out.csv" |
| 3474 | export MBEDTLS_TEST_OUTCOME_FILE |
| 3475 | fi |
| 3476 | |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3477 | # Start from crypto configuration |
| 3478 | scripts/config.py crypto |
| 3479 | |
| 3480 | # Remove RSA support and its dependencies |
| 3481 | scripts/config.py unset MBEDTLS_PKCS1_V15 |
| 3482 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
| 3483 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
| 3484 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 3485 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 3486 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED |
| 3487 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED |
| 3488 | scripts/config.py unset MBEDTLS_RSA_C |
| 3489 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 3490 | |
| 3491 | # Enable PSA support |
| 3492 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 3493 | |
Valerio Setti | 01cc88a | 2023-06-15 11:53:08 +0200 | [diff] [blame] | 3494 | # Keep only PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC enabled in order to ensure |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3495 | # that proper translations is done in crypto_legacy.h. |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 3496 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT |
| 3497 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT |
| 3498 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3499 | |
| 3500 | make |
| 3501 | |
Valerio Setti | 01cc88a | 2023-06-15 11:53:08 +0200 | [diff] [blame] | 3502 | msg "Test: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC" |
Valerio Setti | 4590bc2 | 2023-06-13 15:39:23 +0200 | [diff] [blame] | 3503 | make test |
| 3504 | |
| 3505 | # Parse only 1 relevant line from the outcome file, i.e. a test which is |
| 3506 | # performing RSA signature. |
| 3507 | msg "Verify that 'RSA PKCS1 Sign #1 (SHA512, 1536 bits RSA)' is PASS" |
| 3508 | cat $MBEDTLS_TEST_OUTCOME_FILE | grep 'RSA PKCS1 Sign #1 (SHA512, 1536 bits RSA)' | grep -q "PASS" |
| 3509 | |
| 3510 | if [ "$REMOVE_OUTCOME_ON_EXIT" == "yes" ]; then |
| 3511 | rm $MBEDTLS_TEST_OUTCOME_FILE |
| 3512 | fi |
Valerio Setti | a1a0b1b | 2023-06-13 14:19:03 +0200 | [diff] [blame] | 3513 | } |
| 3514 | |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3515 | component_test_psa_crypto_config_accel_hash () { |
| 3516 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash" |
| 3517 | |
Manuel Pégourié-Gonnard | cc21ad4 | 2023-09-22 09:46:14 +0200 | [diff] [blame] | 3518 | loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \ |
| 3519 | ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 3520 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3521 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3522 | # Configure |
| 3523 | # --------- |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3524 | |
| 3525 | # Start from default config (no TLS 1.3, no USE_PSA) |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3526 | helper_libtestdriver1_adjust_config "default" |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3527 | |
| 3528 | # Disable the things that are being accelerated |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3529 | scripts/config.py unset MBEDTLS_MD5_C |
| 3530 | scripts/config.py unset MBEDTLS_RIPEMD160_C |
| 3531 | scripts/config.py unset MBEDTLS_SHA1_C |
Manuel Pégourié-Gonnard | c584c27 | 2023-03-22 00:32:04 +0100 | [diff] [blame] | 3532 | scripts/config.py unset MBEDTLS_SHA224_C |
| 3533 | scripts/config.py unset MBEDTLS_SHA256_C |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3534 | scripts/config.py unset MBEDTLS_SHA384_C |
| 3535 | scripts/config.py unset MBEDTLS_SHA512_C |
Manuel Pégourié-Gonnard | cc21ad4 | 2023-09-22 09:46:14 +0200 | [diff] [blame] | 3536 | scripts/config.py unset MBEDTLS_SHA3_C |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3537 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3538 | # Build |
| 3539 | # ----- |
| 3540 | |
| 3541 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 3542 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3543 | helper_libtestdriver1_make_main "$loc_accel_list" |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3544 | |
Manuel Pégourié-Gonnard | c584c27 | 2023-03-22 00:32:04 +0100 | [diff] [blame] | 3545 | # There's a risk of something getting re-enabled via config_psa.h; |
| 3546 | # make sure it did not happen. Note: it's OK for MD_C to be enabled. |
| 3547 | not grep mbedtls_md5 library/md5.o |
| 3548 | not grep mbedtls_sha1 library/sha1.o |
| 3549 | not grep mbedtls_sha256 library/sha256.o |
| 3550 | not grep mbedtls_sha512 library/sha512.o |
| 3551 | not grep mbedtls_ripemd160 library/ripemd160.o |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3552 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3553 | # Run the tests |
| 3554 | # ------------- |
| 3555 | |
Ronald Cron | b231245 | 2021-05-08 14:32:59 +0200 | [diff] [blame] | 3556 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash" |
| 3557 | make test |
| 3558 | } |
| 3559 | |
Manuel Pégourié-Gonnard | 9b14639 | 2023-03-09 15:56:14 +0100 | [diff] [blame] | 3560 | component_test_psa_crypto_config_accel_hash_keep_builtins () { |
| 3561 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated+builtin hash" |
| 3562 | # This component ensures that all the test cases for |
| 3563 | # md_psa_dynamic_dispatch with legacy+driver in test_suite_md are run. |
| 3564 | |
Manuel Pégourié-Gonnard | cc21ad4 | 2023-09-22 09:46:14 +0200 | [diff] [blame] | 3565 | loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \ |
| 3566 | ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 3567 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Manuel Pégourié-Gonnard | 9b14639 | 2023-03-09 15:56:14 +0100 | [diff] [blame] | 3568 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3569 | # Start from default config (no TLS 1.3, no USE_PSA) |
| 3570 | helper_libtestdriver1_adjust_config "default" |
Manuel Pégourié-Gonnard | 9b14639 | 2023-03-09 15:56:14 +0100 | [diff] [blame] | 3571 | |
Manuel Pégourié-Gonnard | 31639e4 | 2023-05-25 10:07:31 +0200 | [diff] [blame] | 3572 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
Manuel Pégourié-Gonnard | 9b14639 | 2023-03-09 15:56:14 +0100 | [diff] [blame] | 3573 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3574 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | 9b14639 | 2023-03-09 15:56:14 +0100 | [diff] [blame] | 3575 | |
| 3576 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated+builtin hash" |
| 3577 | make test |
| 3578 | } |
| 3579 | |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3580 | # Auxiliary function to build config for hashes with and without drivers |
| 3581 | config_psa_crypto_hash_use_psa () { |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3582 | driver_only="$1" |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3583 | # start with config full for maximum coverage (also enables USE_PSA) |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3584 | helper_libtestdriver1_adjust_config "full" |
Manuel Pégourié-Gonnard | 6be64f7 | 2023-09-28 09:08:04 +0200 | [diff] [blame] | 3585 | if [ "$driver_only" -eq 1 ]; then |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3586 | # disable the built-in implementation of hashes |
| 3587 | scripts/config.py unset MBEDTLS_MD5_C |
| 3588 | scripts/config.py unset MBEDTLS_RIPEMD160_C |
| 3589 | scripts/config.py unset MBEDTLS_SHA1_C |
| 3590 | scripts/config.py unset MBEDTLS_SHA224_C |
| 3591 | scripts/config.py unset MBEDTLS_SHA256_C # see external RNG below |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 3592 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3593 | scripts/config.py unset MBEDTLS_SHA384_C |
| 3594 | scripts/config.py unset MBEDTLS_SHA512_C |
| 3595 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
Manuel Pégourié-Gonnard | cc21ad4 | 2023-09-22 09:46:14 +0200 | [diff] [blame] | 3596 | scripts/config.py unset MBEDTLS_SHA3_C |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3597 | fi |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3598 | } |
| 3599 | |
Przemek Stekiel | 120ed8f | 2022-10-27 10:29:15 +0200 | [diff] [blame] | 3600 | # Note that component_test_psa_crypto_config_reference_hash_use_psa |
| 3601 | # is related to this component and both components need to be kept in sync. |
| 3602 | # For details please see comments for component_test_psa_crypto_config_reference_hash_use_psa. |
Manuel Pégourié-Gonnard | 525add6 | 2022-07-06 13:06:57 +0200 | [diff] [blame] | 3603 | component_test_psa_crypto_config_accel_hash_use_psa () { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3604 | msg "test: full with accelerated hashes" |
Manuel Pégourié-Gonnard | 525add6 | 2022-07-06 13:06:57 +0200 | [diff] [blame] | 3605 | |
Manuel Pégourié-Gonnard | cc21ad4 | 2023-09-22 09:46:14 +0200 | [diff] [blame] | 3606 | loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 \ |
| 3607 | ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512 \ |
| 3608 | ALG_SHA3_224 ALG_SHA3_256 ALG_SHA3_384 ALG_SHA3_512" |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3609 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3610 | # Configure |
| 3611 | # --------- |
Manuel Pégourié-Gonnard | 525add6 | 2022-07-06 13:06:57 +0200 | [diff] [blame] | 3612 | |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3613 | config_psa_crypto_hash_use_psa 1 |
Manuel Pégourié-Gonnard | f0f63bc | 2022-07-08 19:12:33 +0200 | [diff] [blame] | 3614 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3615 | # Build |
| 3616 | # ----- |
| 3617 | |
| 3618 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 3619 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3620 | helper_libtestdriver1_make_main "$loc_accel_list" |
Manuel Pégourié-Gonnard | 525add6 | 2022-07-06 13:06:57 +0200 | [diff] [blame] | 3621 | |
Manuel Pégourié-Gonnard | f0f63bc | 2022-07-08 19:12:33 +0200 | [diff] [blame] | 3622 | # There's a risk of something getting re-enabled via config_psa.h; |
Manuel Pégourié-Gonnard | 49e67f8 | 2023-03-16 11:39:20 +0100 | [diff] [blame] | 3623 | # make sure it did not happen. Note: it's OK for MD_C to be enabled. |
Manuel Pégourié-Gonnard | f0f63bc | 2022-07-08 19:12:33 +0200 | [diff] [blame] | 3624 | not grep mbedtls_md5 library/md5.o |
| 3625 | not grep mbedtls_sha1 library/sha1.o |
Manuel Pégourié-Gonnard | 7b0825d | 2022-07-11 11:06:09 +0200 | [diff] [blame] | 3626 | not grep mbedtls_sha256 library/sha256.o |
Manuel Pégourié-Gonnard | f0f63bc | 2022-07-08 19:12:33 +0200 | [diff] [blame] | 3627 | not grep mbedtls_sha512 library/sha512.o |
| 3628 | not grep mbedtls_ripemd160 library/ripemd160.o |
| 3629 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3630 | # Run the tests |
| 3631 | # ------------- |
| 3632 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3633 | msg "test: full with accelerated hashes" |
Manuel Pégourié-Gonnard | 525add6 | 2022-07-06 13:06:57 +0200 | [diff] [blame] | 3634 | make test |
Andrzej Kurek | 07e3570 | 2022-09-05 15:39:23 -0400 | [diff] [blame] | 3635 | |
Manuel Pégourié-Gonnard | 30d9466 | 2022-11-29 12:37:53 +0100 | [diff] [blame] | 3636 | # This is mostly useful so that we can later compare outcome files with |
| 3637 | # the reference config in analyze_outcomes.py, to check that the |
| 3638 | # dependency declarations in ssl-opt.sh and in TLS code are correct. |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3639 | msg "test: ssl-opt.sh, full with accelerated hashes" |
Przemek Stekiel | 5f6f32a | 2022-10-27 08:24:43 +0200 | [diff] [blame] | 3640 | tests/ssl-opt.sh |
Andrzej Kurek | 07e3570 | 2022-09-05 15:39:23 -0400 | [diff] [blame] | 3641 | |
Manuel Pégourié-Gonnard | 30d9466 | 2022-11-29 12:37:53 +0100 | [diff] [blame] | 3642 | # This is to make sure all ciphersuites are exercised, but we don't need |
| 3643 | # interop testing (besides, we already got some from ssl-opt.sh). |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3644 | msg "test: compat.sh, full with accelerated hashes" |
Manuel Pégourié-Gonnard | 30d9466 | 2022-11-29 12:37:53 +0100 | [diff] [blame] | 3645 | tests/compat.sh -p mbedTLS -V YES |
Manuel Pégourié-Gonnard | 525add6 | 2022-07-06 13:06:57 +0200 | [diff] [blame] | 3646 | } |
| 3647 | |
Przemek Stekiel | 120ed8f | 2022-10-27 10:29:15 +0200 | [diff] [blame] | 3648 | # This component provides reference configuration for test_psa_crypto_config_accel_hash_use_psa |
| 3649 | # without accelerated hash. The outcome from both components are used by the analyze_outcomes.py |
| 3650 | # script to find regression in test coverage when accelerated hash is used (tests and ssl-opt). |
| 3651 | # Both components need to be kept in sync. |
Przemek Stekiel | 01df9dd | 2022-10-20 14:21:21 +0200 | [diff] [blame] | 3652 | component_test_psa_crypto_config_reference_hash_use_psa() { |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3653 | msg "test: full without accelerated hashes" |
Przemek Stekiel | aa88e0b | 2022-11-15 13:21:14 +0100 | [diff] [blame] | 3654 | |
| 3655 | config_psa_crypto_hash_use_psa 0 |
Przemek Stekiel | 01df9dd | 2022-10-20 14:21:21 +0200 | [diff] [blame] | 3656 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3657 | make |
Przemek Stekiel | ab0451b | 2022-10-24 11:29:35 +0200 | [diff] [blame] | 3658 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3659 | msg "test: full without accelerated hashes" |
Przemek Stekiel | 01df9dd | 2022-10-20 14:21:21 +0200 | [diff] [blame] | 3660 | make test |
| 3661 | |
Gilles Peskine | 14302ed | 2023-07-19 19:30:04 +0200 | [diff] [blame] | 3662 | msg "test: ssl-opt.sh, full without accelerated hashes" |
Przemek Stekiel | 5f6f32a | 2022-10-27 08:24:43 +0200 | [diff] [blame] | 3663 | tests/ssl-opt.sh |
Ronald Cron | 3a8714d | 2021-10-18 11:26:01 +0200 | [diff] [blame] | 3664 | } |
Manuel Pégourié-Gonnard | 97ab2a3 | 2022-07-06 10:46:57 +0200 | [diff] [blame] | 3665 | |
Valerio Setti | 9da01a7 | 2023-12-18 17:38:18 +0100 | [diff] [blame] | 3666 | component_test_psa_crypto_config_accel_des () { |
Valerio Setti | b9f4bfc | 2023-12-28 11:07:48 +0100 | [diff] [blame] | 3667 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated DES" |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 3668 | |
Valerio Setti | 9da01a7 | 2023-12-18 17:38:18 +0100 | [diff] [blame] | 3669 | # Albeit this components aims at accelerating DES which should only support |
| 3670 | # CBC and ECB modes, we need to accelerate more than that otherwise DES_C |
| 3671 | # would automatically be re-enabled by "config_adjust_legacy_from_psa.c" |
Valerio Setti | 0244fbb | 2023-10-19 10:42:31 +0200 | [diff] [blame] | 3672 | loc_accel_list="ALG_ECB_NO_PADDING ALG_CBC_NO_PADDING ALG_CBC_PKCS7 \ |
| 3673 | ALG_CTR ALG_CFB ALG_OFB ALG_XTS ALG_CMAC \ |
| 3674 | KEY_TYPE_DES" |
John Durkop | d895939 | 2020-09-20 23:09:17 -0700 | [diff] [blame] | 3675 | |
Valerio Setti | 9da01a7 | 2023-12-18 17:38:18 +0100 | [diff] [blame] | 3676 | # Note: we cannot accelerate all ciphers' key types otherwise we would also |
| 3677 | # have to either disable CCM/GCM or accelerate them, but that's out of scope |
| 3678 | # of this component. This limitation will be addressed by #8598. |
| 3679 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3680 | # Configure |
| 3681 | # --------- |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 3682 | |
Valerio Setti | 9a42730 | 2023-10-17 11:40:42 +0200 | [diff] [blame] | 3683 | # Start from the full config |
Valerio Setti | a797ce3 | 2023-10-03 15:16:38 +0200 | [diff] [blame] | 3684 | helper_libtestdriver1_adjust_config "full" |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 3685 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3686 | # Disable the things that are being accelerated |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 3687 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
| 3688 | scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7 |
| 3689 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR |
| 3690 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB |
| 3691 | scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB |
| 3692 | scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS |
| 3693 | scripts/config.py unset MBEDTLS_DES_C |
Yanray Wang | af5003a | 2023-10-11 11:57:10 +0800 | [diff] [blame] | 3694 | scripts/config.py unset MBEDTLS_CMAC_C |
Ronald Cron | 067de3b | 2021-03-11 11:49:03 +0100 | [diff] [blame] | 3695 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3696 | # Build |
| 3697 | # ----- |
Gilles Peskine | 3587dfd | 2021-09-20 19:20:04 +0200 | [diff] [blame] | 3698 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3699 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 3700 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3701 | helper_libtestdriver1_make_main "$loc_accel_list" |
Gilles Peskine | 3587dfd | 2021-09-20 19:20:04 +0200 | [diff] [blame] | 3702 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3703 | # Make sure this was not re-enabled by accident (additive config) |
Gilles Peskine | 3587dfd | 2021-09-20 19:20:04 +0200 | [diff] [blame] | 3704 | not grep mbedtls_des* library/des.o |
Ronald Cron | 17b3afc | 2020-12-10 18:17:09 +0100 | [diff] [blame] | 3705 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3706 | # Run the tests |
| 3707 | # ------------- |
| 3708 | |
Valerio Setti | b9f4bfc | 2023-12-28 11:07:48 +0100 | [diff] [blame] | 3709 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated DES" |
John Durkop | 4377bf7 | 2020-10-23 01:26:57 -0700 | [diff] [blame] | 3710 | make test |
| 3711 | } |
| 3712 | |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3713 | component_test_psa_crypto_config_accel_aead () { |
| 3714 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD" |
| 3715 | |
Valerio Setti | 3f02bb7 | 2023-10-02 15:57:33 +0200 | [diff] [blame] | 3716 | loc_accel_list="ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 \ |
| 3717 | KEY_TYPE_AES KEY_TYPE_CHACHA20 KEY_TYPE_ARIA KEY_TYPE_CAMELLIA" |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3718 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3719 | # Configure |
| 3720 | # --------- |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3721 | |
Valerio Setti | 3f02bb7 | 2023-10-02 15:57:33 +0200 | [diff] [blame] | 3722 | # Start from full config |
| 3723 | helper_libtestdriver1_adjust_config "full" |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3724 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3725 | # Disable things that are being accelerated |
Przemek Stekiel | ee1bb41 | 2022-10-11 11:52:25 +0200 | [diff] [blame] | 3726 | scripts/config.py unset MBEDTLS_GCM_C |
| 3727 | scripts/config.py unset MBEDTLS_CCM_C |
| 3728 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3729 | |
Valerio Setti | a50b89e | 2023-11-08 15:58:47 +0100 | [diff] [blame] | 3730 | # Disable CCM_STAR_NO_TAG because this re-enables CCM_C. |
| 3731 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3732 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3733 | # Build |
| 3734 | # ----- |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3735 | |
Manuel Pégourié-Gonnard | 8df87bf | 2023-06-12 17:09:38 +0200 | [diff] [blame] | 3736 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 3737 | |
Manuel Pégourié-Gonnard | 27dd73f | 2023-05-25 10:39:23 +0200 | [diff] [blame] | 3738 | helper_libtestdriver1_make_main "$loc_accel_list" |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3739 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3740 | # Make sure this was not re-enabled by accident (additive config) |
Przemek Stekiel | ee1bb41 | 2022-10-11 11:52:25 +0200 | [diff] [blame] | 3741 | not grep mbedtls_ccm library/ccm.o |
| 3742 | not grep mbedtls_gcm library/gcm.o |
| 3743 | not grep mbedtls_chachapoly library/chachapoly.o |
| 3744 | |
Manuel Pégourié-Gonnard | 239094d | 2023-05-31 12:51:50 +0200 | [diff] [blame] | 3745 | # Run the tests |
| 3746 | # ------------- |
| 3747 | |
Przemek Stekiel | e290f2e | 2022-10-02 20:58:39 +0200 | [diff] [blame] | 3748 | msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated AEAD" |
| 3749 | make test |
| 3750 | } |
| 3751 | |
Valerio Setti | b680fc4 | 2023-10-13 09:29:37 +0200 | [diff] [blame] | 3752 | # This is a common configuration function used in: |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3753 | # - component_test_psa_crypto_config_accel_cipher_aead_cmac |
| 3754 | # - component_test_psa_crypto_config_reference_cipher_aead_cmac |
| 3755 | common_psa_crypto_config_accel_cipher_aead_cmac() { |
Pengyu Lv | 78657d0 | 2023-10-27 11:00:32 +0800 | [diff] [blame] | 3756 | # Start from the full config |
| 3757 | helper_libtestdriver1_adjust_config "full" |
| 3758 | |
Valerio Setti | b680fc4 | 2023-10-13 09:29:37 +0200 | [diff] [blame] | 3759 | scripts/config.py unset MBEDTLS_NIST_KW_C |
| 3760 | } |
| 3761 | |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3762 | # The 2 following test components, i.e. |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3763 | # - component_test_psa_crypto_config_accel_cipher_aead_cmac |
| 3764 | # - component_test_psa_crypto_config_reference_cipher_aead_cmac |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3765 | # are meant to be used together in analyze_outcomes.py script in order to test |
| 3766 | # driver's coverage for ciphers and AEADs. |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3767 | component_test_psa_crypto_config_accel_cipher_aead_cmac () { |
| 3768 | msg "build: full config with accelerated cipher inc. AEAD and CMAC" |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3769 | |
Valerio Setti | ad8b7f0 | 2023-10-25 12:39:50 +0200 | [diff] [blame] | 3770 | loc_accel_list="ALG_ECB_NO_PADDING ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB \ |
Valerio Setti | 51d5b19 | 2023-11-08 10:56:54 +0100 | [diff] [blame] | 3771 | ALG_OFB ALG_XTS ALG_STREAM_CIPHER ALG_CCM_STAR_NO_TAG \ |
Valerio Setti | 97454fd | 2023-10-25 12:27:12 +0200 | [diff] [blame] | 3772 | ALG_GCM ALG_CCM ALG_CHACHA20_POLY1305 ALG_CMAC \ |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3773 | KEY_TYPE_DES KEY_TYPE_AES KEY_TYPE_ARIA KEY_TYPE_CHACHA20 KEY_TYPE_CAMELLIA" |
| 3774 | |
| 3775 | # Configure |
| 3776 | # --------- |
| 3777 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3778 | common_psa_crypto_config_accel_cipher_aead_cmac |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3779 | |
| 3780 | # Disable the things that are being accelerated |
| 3781 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
| 3782 | scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7 |
| 3783 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR |
| 3784 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB |
| 3785 | scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB |
| 3786 | scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS |
| 3787 | scripts/config.py unset MBEDTLS_GCM_C |
| 3788 | scripts/config.py unset MBEDTLS_CCM_C |
| 3789 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Valerio Setti | 97454fd | 2023-10-25 12:27:12 +0200 | [diff] [blame] | 3790 | scripts/config.py unset MBEDTLS_CMAC_C |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3791 | scripts/config.py unset MBEDTLS_DES_C |
| 3792 | scripts/config.py unset MBEDTLS_AES_C |
| 3793 | scripts/config.py unset MBEDTLS_ARIA_C |
| 3794 | scripts/config.py unset MBEDTLS_CHACHA20_C |
| 3795 | scripts/config.py unset MBEDTLS_CAMELLIA_C |
| 3796 | |
Valerio Setti | ec9b258 | 2023-11-08 16:50:54 +0100 | [diff] [blame] | 3797 | # Disable CIPHER_C entirely as all ciphers/AEADs are accelerated and PSA |
| 3798 | # does not depend on it. |
| 3799 | scripts/config.py unset MBEDTLS_CIPHER_C |
| 3800 | |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3801 | # Build |
| 3802 | # ----- |
| 3803 | |
| 3804 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 3805 | |
| 3806 | helper_libtestdriver1_make_main "$loc_accel_list" |
| 3807 | |
| 3808 | # Make sure this was not re-enabled by accident (additive config) |
Valerio Setti | ec9b258 | 2023-11-08 16:50:54 +0100 | [diff] [blame] | 3809 | not grep mbedtls_cipher library/cipher.o |
Valerio Setti | 58d2b1a | 2023-10-12 15:24:12 +0200 | [diff] [blame] | 3810 | not grep mbedtls_des library/des.o |
| 3811 | not grep mbedtls_aes library/aes.o |
| 3812 | not grep mbedtls_aria library/aria.o |
| 3813 | not grep mbedtls_camellia library/camellia.o |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3814 | not grep mbedtls_ccm library/ccm.o |
| 3815 | not grep mbedtls_gcm library/gcm.o |
| 3816 | not grep mbedtls_chachapoly library/chachapoly.o |
| 3817 | not grep mbedtls_cmac library/cmac.o |
| 3818 | |
| 3819 | # Run the tests |
| 3820 | # ------------- |
| 3821 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3822 | msg "test: full config with accelerated cipher inc. AEAD and CMAC" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3823 | make test |
Valerio Setti | f941455 | 2023-11-09 10:43:20 +0100 | [diff] [blame] | 3824 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3825 | msg "ssl-opt: full config with accelerated cipher inc. AEAD and CMAC" |
Valerio Setti | f941455 | 2023-11-09 10:43:20 +0100 | [diff] [blame] | 3826 | tests/ssl-opt.sh |
Pengyu Lv | f561ed8 | 2023-11-14 17:33:32 +0800 | [diff] [blame] | 3827 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3828 | msg "compat.sh: full config with accelerated cipher inc. AEAD and CMAC" |
Pengyu Lv | f561ed8 | 2023-11-14 17:33:32 +0800 | [diff] [blame] | 3829 | tests/compat.sh -V NO -p mbedTLS |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3830 | } |
| 3831 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3832 | component_test_psa_crypto_config_reference_cipher_aead_cmac () { |
| 3833 | msg "build: full config with non-accelerated cipher inc. AEAD and CMAC" |
| 3834 | common_psa_crypto_config_accel_cipher_aead_cmac |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3835 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3836 | make |
Valerio Setti | f941455 | 2023-11-09 10:43:20 +0100 | [diff] [blame] | 3837 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3838 | msg "test: full config with non-accelerated cipher inc. AEAD and CMAC" |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3839 | make test |
Valerio Setti | f941455 | 2023-11-09 10:43:20 +0100 | [diff] [blame] | 3840 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3841 | msg "ssl-opt: full config with non-accelerated cipher inc. AEAD and CMAC" |
Valerio Setti | f941455 | 2023-11-09 10:43:20 +0100 | [diff] [blame] | 3842 | tests/ssl-opt.sh |
Pengyu Lv | f561ed8 | 2023-11-14 17:33:32 +0800 | [diff] [blame] | 3843 | |
Manuel Pégourié-Gonnard | 7f48d5e | 2024-01-08 10:55:09 +0100 | [diff] [blame] | 3844 | msg "compat.sh: full config with non-accelerated cipher inc. AEAD and CMAC" |
Pengyu Lv | f561ed8 | 2023-11-14 17:33:32 +0800 | [diff] [blame] | 3845 | tests/compat.sh -V NO -p mbedTLS |
Valerio Setti | b6b301f | 2023-10-04 12:05:05 +0200 | [diff] [blame] | 3846 | } |
| 3847 | |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3848 | common_block_cipher_dispatch() { |
| 3849 | TEST_WITH_DRIVER="$1" |
| 3850 | |
| 3851 | # Start from the full config |
| 3852 | helper_libtestdriver1_adjust_config "full" |
| 3853 | |
| 3854 | if [ "$TEST_WITH_DRIVER" -eq 1 ]; then |
| 3855 | # Disable key types that are accelerated (there is no legacy equivalent |
| 3856 | # symbol for ECB) |
| 3857 | scripts/config.py unset MBEDTLS_AES_C |
| 3858 | scripts/config.py unset MBEDTLS_ARIA_C |
| 3859 | scripts/config.py unset MBEDTLS_CAMELLIA_C |
| 3860 | fi |
| 3861 | |
Valerio Setti | 8c8b4da | 2024-01-02 11:44:30 +0100 | [diff] [blame] | 3862 | # Disable cipher's modes that, when not accelerated, cause |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3863 | # legacy key types to be re-enabled in "config_adjust_legacy_from_psa.h". |
Valerio Setti | cd21d4e | 2023-12-28 16:00:55 +0100 | [diff] [blame] | 3864 | # Keep this also in the reference component in order to skip the same tests |
| 3865 | # that were skipped in the accelerated one. |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3866 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR |
| 3867 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB |
| 3868 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB |
| 3869 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING |
| 3870 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7 |
| 3871 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CMAC |
| 3872 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3873 | |
| 3874 | # Disable direct dependency on AES_C |
| 3875 | scripts/config.py unset MBEDTLS_NIST_KW_C |
| 3876 | |
| 3877 | # Prevent the cipher module from using deprecated PSA path. The reason is |
| 3878 | # that otherwise there will be tests relying on "aes_info" (defined in |
| 3879 | # "cipher_wrap.c") whose functions are not available when AES_C is |
| 3880 | # not defined. ARIA and Camellia are not a problem in this case because |
| 3881 | # the PSA path is not tested for these key types. |
| 3882 | scripts/config.py set MBEDTLS_DEPRECATED_REMOVED |
| 3883 | } |
| 3884 | |
Valerio Setti | f8e6cba | 2023-12-12 11:53:39 +0100 | [diff] [blame] | 3885 | component_test_full_block_cipher_psa_dispatch () { |
| 3886 | msg "build: full + PSA dispatch in block_cipher" |
| 3887 | |
| 3888 | loc_accel_list="ALG_ECB_NO_PADDING \ |
| 3889 | KEY_TYPE_AES KEY_TYPE_ARIA KEY_TYPE_CAMELLIA" |
| 3890 | |
| 3891 | # Configure |
| 3892 | # --------- |
| 3893 | |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3894 | common_block_cipher_dispatch 1 |
Valerio Setti | f8e6cba | 2023-12-12 11:53:39 +0100 | [diff] [blame] | 3895 | |
Valerio Setti | f8e6cba | 2023-12-12 11:53:39 +0100 | [diff] [blame] | 3896 | # Build |
| 3897 | # ----- |
| 3898 | |
| 3899 | helper_libtestdriver1_make_drivers "$loc_accel_list" |
| 3900 | |
| 3901 | helper_libtestdriver1_make_main "$loc_accel_list" |
| 3902 | |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3903 | # Make sure disabled components were not re-enabled by accident (additive |
| 3904 | # config) |
| 3905 | not grep mbedtls_aes_ library/aes.o |
| 3906 | not grep mbedtls_aria_ library/aria.o |
| 3907 | not grep mbedtls_camellia_ library/camellia.o |
| 3908 | |
Valerio Setti | f8e6cba | 2023-12-12 11:53:39 +0100 | [diff] [blame] | 3909 | # Run the tests |
| 3910 | # ------------- |
| 3911 | |
| 3912 | msg "test: full + PSA dispatch in block_cipher" |
| 3913 | make test |
| 3914 | } |
| 3915 | |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3916 | # This is the reference component of component_test_full_block_cipher_psa_dispatch |
| 3917 | component_test_full_block_cipher_legacy_dispatch () { |
| 3918 | msg "build: full + legacy dispatch in block_cipher" |
| 3919 | |
| 3920 | common_block_cipher_dispatch 0 |
| 3921 | |
Valerio Setti | 4a8ef7c | 2023-12-19 11:16:27 +0100 | [diff] [blame] | 3922 | make |
| 3923 | |
| 3924 | msg "test: full + legacy dispatch in block_cipher" |
| 3925 | make test |
| 3926 | } |
| 3927 | |
Gilles Peskine | 36dea15 | 2023-07-20 22:19:45 +0200 | [diff] [blame] | 3928 | component_test_aead_chachapoly_disabled() { |
| 3929 | msg "build: full minus CHACHAPOLY" |
Przemyslaw Stekiel | 1ecfdea | 2021-10-13 11:09:44 +0200 | [diff] [blame] | 3930 | scripts/config.py full |
| 3931 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 3932 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305 |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3933 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Przemyslaw Stekiel | 1ecfdea | 2021-10-13 11:09:44 +0200 | [diff] [blame] | 3934 | |
Gilles Peskine | 36dea15 | 2023-07-20 22:19:45 +0200 | [diff] [blame] | 3935 | msg "test: full minus CHACHAPOLY" |
| 3936 | make test |
| 3937 | } |
| 3938 | |
| 3939 | component_test_aead_only_ccm() { |
| 3940 | msg "build: full minus CHACHAPOLY and GCM" |
| 3941 | scripts/config.py full |
| 3942 | scripts/config.py unset MBEDTLS_CHACHAPOLY_C |
| 3943 | scripts/config.py unset MBEDTLS_GCM_C |
| 3944 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305 |
| 3945 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_GCM |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3946 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | 36dea15 | 2023-07-20 22:19:45 +0200 | [diff] [blame] | 3947 | |
| 3948 | msg "test: full minus CHACHAPOLY and GCM" |
Przemyslaw Stekiel | 1ecfdea | 2021-10-13 11:09:44 +0200 | [diff] [blame] | 3949 | make test |
| 3950 | } |
| 3951 | |
Ronald Cron | e501d0e | 2023-07-10 08:31:19 +0200 | [diff] [blame] | 3952 | component_test_ccm_aes_sha256() { |
| 3953 | msg "build: CCM + AES + SHA256 configuration" |
| 3954 | |
Ronald Cron | 7612d8c | 2023-07-20 10:03:54 +0200 | [diff] [blame] | 3955 | cp "$CONFIG_TEST_DRIVER_H" "$CONFIG_H" |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 3956 | cp configs/crypto-config-ccm-aes-sha256.h "$CRYPTO_CONFIG_H" |
Ronald Cron | e501d0e | 2023-07-10 08:31:19 +0200 | [diff] [blame] | 3957 | |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 3958 | make |
Ronald Cron | e501d0e | 2023-07-10 08:31:19 +0200 | [diff] [blame] | 3959 | |
| 3960 | msg "test: CCM + AES + SHA256 configuration" |
| 3961 | make test |
| 3962 | } |
| 3963 | |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3964 | # This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 3965 | component_build_psa_accel_alg_ecdh() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 3966 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3967 | scripts/config.py full |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3968 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 3969 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3970 | scripts/config.py unset MBEDTLS_ECDH_C |
| 3971 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
| 3972 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
| 3973 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED |
| 3974 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED |
| 3975 | scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 3976 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3977 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3978 | } |
| 3979 | |
| 3980 | # This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 3981 | component_build_psa_accel_alg_hmac() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 3982 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_HMAC" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3983 | scripts/config.py full |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3984 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 3985 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3986 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 3987 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3988 | } |
| 3989 | |
| 3990 | # This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 3991 | component_build_psa_accel_alg_hkdf() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 3992 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3993 | scripts/config.py full |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3994 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 3995 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3996 | scripts/config.py unset MBEDTLS_HKDF_C |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 3997 | # Make sure to unset TLS1_3 since it requires HKDF_C and will not build properly without it. |
| 3998 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 3999 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4000 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 4001 | } |
| 4002 | |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4003 | # This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test. |
| 4004 | component_build_psa_accel_alg_md5() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4005 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_MD5 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4006 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4007 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4008 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4009 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160 |
| 4010 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1 |
| 4011 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224 |
| 4012 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256 |
| 4013 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384 |
| 4014 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512 |
| 4015 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS |
Gilles Peskine | fa65237 | 2022-10-13 22:05:38 +0200 | [diff] [blame] | 4016 | scripts/config.py unset MBEDTLS_LMS_C |
| 4017 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4018 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4019 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4020 | } |
| 4021 | |
| 4022 | # This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test. |
| 4023 | component_build_psa_accel_alg_ripemd160() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4024 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RIPEMD160 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4025 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4026 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4027 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4028 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5 |
| 4029 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1 |
| 4030 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224 |
| 4031 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256 |
| 4032 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384 |
| 4033 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512 |
| 4034 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS |
Gilles Peskine | fa65237 | 2022-10-13 22:05:38 +0200 | [diff] [blame] | 4035 | scripts/config.py unset MBEDTLS_LMS_C |
| 4036 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4037 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4038 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4039 | } |
| 4040 | |
| 4041 | # This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test. |
| 4042 | component_build_psa_accel_alg_sha1() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4043 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_1 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4044 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4045 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4046 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4047 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5 |
| 4048 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160 |
| 4049 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224 |
| 4050 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256 |
| 4051 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384 |
| 4052 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512 |
| 4053 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS |
Gilles Peskine | fa65237 | 2022-10-13 22:05:38 +0200 | [diff] [blame] | 4054 | scripts/config.py unset MBEDTLS_LMS_C |
| 4055 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4056 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4057 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4058 | } |
| 4059 | |
| 4060 | # This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test. |
| 4061 | component_build_psa_accel_alg_sha224() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4062 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_224 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4063 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4064 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4065 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4066 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5 |
| 4067 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160 |
| 4068 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1 |
| 4069 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384 |
| 4070 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512 |
| 4071 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4072 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4073 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4074 | } |
| 4075 | |
| 4076 | # This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test. |
| 4077 | component_build_psa_accel_alg_sha256() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4078 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_256 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4079 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4080 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4081 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4082 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5 |
| 4083 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160 |
| 4084 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1 |
| 4085 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224 |
| 4086 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384 |
| 4087 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512 |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4088 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4089 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4090 | } |
| 4091 | |
| 4092 | # This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test. |
| 4093 | component_build_psa_accel_alg_sha384() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4094 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_384 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4095 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4096 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4097 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4098 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5 |
| 4099 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160 |
| 4100 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1 |
| 4101 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224 |
| 4102 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256 |
| 4103 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS |
Gilles Peskine | fa65237 | 2022-10-13 22:05:38 +0200 | [diff] [blame] | 4104 | scripts/config.py unset MBEDTLS_LMS_C |
| 4105 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4106 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4107 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4108 | } |
| 4109 | |
| 4110 | # This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test. |
| 4111 | component_build_psa_accel_alg_sha512() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4112 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_SHA_512 - other hashes" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4113 | scripts/config.py full |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4114 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4115 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4116 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5 |
| 4117 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160 |
| 4118 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1 |
| 4119 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224 |
| 4120 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256 |
| 4121 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384 |
| 4122 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS |
Gilles Peskine | fa65237 | 2022-10-13 22:05:38 +0200 | [diff] [blame] | 4123 | scripts/config.py unset MBEDTLS_LMS_C |
| 4124 | scripts/config.py unset MBEDTLS_LMS_PRIVATE |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4125 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4126 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | 1b7ee05 | 2020-11-27 08:51:22 -0800 | [diff] [blame] | 4127 | } |
| 4128 | |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 4129 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 4130 | component_build_psa_accel_alg_rsa_pkcs1v15_crypt() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4131 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 4132 | scripts/config.py full |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 4133 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4134 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4135 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1 |
| 4136 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| 4137 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP |
| 4138 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 4139 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4140 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4141 | } |
| 4142 | |
| 4143 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 4144 | component_build_psa_accel_alg_rsa_pkcs1v15_sign() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4145 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4146 | scripts/config.py full |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4147 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4148 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4149 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1 |
| 4150 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 4151 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP |
| 4152 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4153 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4154 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4155 | } |
| 4156 | |
| 4157 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 4158 | component_build_psa_accel_alg_rsa_oaep() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4159 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4160 | scripts/config.py full |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4161 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4162 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4163 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_OAEP 1 |
| 4164 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 4165 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| 4166 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4167 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4168 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4169 | } |
| 4170 | |
| 4171 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 4172 | component_build_psa_accel_alg_rsa_pss() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4173 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4174 | scripts/config.py full |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4175 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4176 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4177 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1 |
| 4178 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT |
| 4179 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| 4180 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4181 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4182 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4183 | } |
| 4184 | |
| 4185 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 4186 | component_build_psa_accel_key_type_rsa_key_pair() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4187 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_xxx + PSA_WANT_ALG_RSA_PSS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4188 | scripts/config.py full |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4189 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4190 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4191 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1 |
| 4192 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1 |
| 4193 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1 |
| 4194 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1 |
| 4195 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4196 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4197 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4198 | } |
| 4199 | |
| 4200 | # This should be renamed to test and updated once the accelerator RSA code is in place and ready to test. |
John Durkop | 6ba40d1 | 2020-11-10 08:50:04 -0800 | [diff] [blame] | 4201 | component_build_psa_accel_key_type_rsa_public_key() { |
Gilles Peskine | eb41e0d | 2023-07-19 19:36:55 +0200 | [diff] [blame] | 4202 | msg "build: full - MBEDTLS_USE_PSA_CRYPTO + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS" |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4203 | scripts/config.py full |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4204 | scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO |
Ronald Cron | f660655 | 2022-03-15 11:23:25 +0100 | [diff] [blame] | 4205 | scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | 6b49b55 | 2023-07-20 09:57:54 +0200 | [diff] [blame] | 4206 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1 |
| 4207 | scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1 |
John Durkop | bd069d3 | 2020-10-31 22:14:03 -0700 | [diff] [blame] | 4208 | # Need to define the correct symbol and include the test driver header path in order to build with the test driver |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4209 | make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include" LDFLAGS="$ASAN_CFLAGS" |
John Durkop | d032195 | 2020-10-29 21:37:36 -0700 | [diff] [blame] | 4210 | } |
| 4211 | |
Dave Rodgman | c164c07 | 2023-06-28 09:43:23 +0100 | [diff] [blame] | 4212 | |
Dave Rodgman | 904c589 | 2023-06-28 17:36:02 +0100 | [diff] [blame] | 4213 | support_build_tfm_armcc () { |
Yanray Wang | 799bd84 | 2023-11-10 12:21:35 +0800 | [diff] [blame] | 4214 | support_build_armcc |
Dave Rodgman | c164c07 | 2023-06-28 09:43:23 +0100 | [diff] [blame] | 4215 | } |
| 4216 | |
Dave Rodgman | 904c589 | 2023-06-28 17:36:02 +0100 | [diff] [blame] | 4217 | component_build_tfm_armcc() { |
| 4218 | # test the TF-M configuration can build cleanly with various warning flags enabled |
Dave Rodgman | 82d7a87 | 2023-11-28 10:06:33 +0000 | [diff] [blame] | 4219 | cp configs/config-tfm.h "$CONFIG_H" |
Dave Rodgman | c164c07 | 2023-06-28 09:43:23 +0100 | [diff] [blame] | 4220 | |
Dave Rodgman | 88651c4 | 2023-06-29 12:35:51 +0100 | [diff] [blame] | 4221 | msg "build: TF-M config, armclang armv7-m thumb2" |
Gilles Peskine | c1bedfe | 2023-09-27 15:53:08 +0200 | [diff] [blame] | 4222 | armc6_build_test "--target=arm-arm-none-eabi -march=armv7-m -mthumb -Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused -I../tests/include/spe" |
Dave Rodgman | fb374e6 | 2023-06-29 11:58:16 +0100 | [diff] [blame] | 4223 | } |
| 4224 | |
| 4225 | component_build_tfm() { |
Gilles Peskine | eaa1c56 | 2023-09-06 16:23:13 +0200 | [diff] [blame] | 4226 | # Check that the TF-M configuration can build cleanly with various |
| 4227 | # warning flags enabled. We don't build or run tests, since the |
| 4228 | # TF-M configuration needs a TF-M platform. A tweaked version of |
| 4229 | # the configuration that works on mainstream platforms is in |
| 4230 | # configs/config-tfm.h, tested via test-ref-configs.pl. |
Dave Rodgman | 82d7a87 | 2023-11-28 10:06:33 +0000 | [diff] [blame] | 4231 | cp configs/config-tfm.h "$CONFIG_H" |
Dave Rodgman | fb374e6 | 2023-06-29 11:58:16 +0100 | [diff] [blame] | 4232 | |
Dave Rodgman | 88651c4 | 2023-06-29 12:35:51 +0100 | [diff] [blame] | 4233 | msg "build: TF-M config, clang, armv7-m thumb2" |
Gilles Peskine | c1bedfe | 2023-09-27 15:53:08 +0200 | [diff] [blame] | 4234 | make lib CC="clang" CFLAGS="--target=arm-linux-gnueabihf -march=armv7-m -mthumb -Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused -I../tests/include/spe" |
Dave Rodgman | c164c07 | 2023-06-28 09:43:23 +0100 | [diff] [blame] | 4235 | |
Dave Rodgman | 904c589 | 2023-06-28 17:36:02 +0100 | [diff] [blame] | 4236 | msg "build: TF-M config, gcc native build" |
| 4237 | make clean |
Gilles Peskine | c1bedfe | 2023-09-27 15:53:08 +0200 | [diff] [blame] | 4238 | make lib CC="gcc" CFLAGS="-Os -std=c99 -Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wformat-signedness -Wlogical-op -I../tests/include/spe" |
Dave Rodgman | c164c07 | 2023-06-28 09:43:23 +0100 | [diff] [blame] | 4239 | } |
| 4240 | |
Dave Rodgman | 54ada8b | 2023-10-04 11:55:25 +0100 | [diff] [blame] | 4241 | # Test that the given .o file builds with all (valid) combinations of the given options. |
| 4242 | # |
| 4243 | # Syntax: build_test_config_combos FILE VALIDATOR_FUNCTION OPT1 OPT2 ... |
| 4244 | # |
| 4245 | # The validator function is the name of a function to validate the combination of options. |
| 4246 | # It may be "" if all combinations are valid. |
| 4247 | # It receives a string containing a combination of options, as passed to the compiler, |
Dave Rodgman | f3803a1 | 2023-10-16 13:47:15 +0100 | [diff] [blame] | 4248 | # e.g. "-DOPT1 -DOPT2 ...". It must return 0 iff the combination is valid, non-zero if invalid. |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4249 | build_test_config_combos() { |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4250 | file=$1 |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4251 | shift |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4252 | validate_options=$1 |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4253 | shift |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4254 | options=("$@") |
Dave Rodgman | 0f0f769 | 2023-06-29 12:10:45 +0100 | [diff] [blame] | 4255 | |
Dave Rodgman | 4243610 | 2023-10-03 15:47:05 +0100 | [diff] [blame] | 4256 | # clear all of the options so that they can be overridden on the clang commandline |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4257 | for opt in "${options[@]}"; do |
| 4258 | ./scripts/config.py unset ${opt} |
Dave Rodgman | 4243610 | 2023-10-03 15:47:05 +0100 | [diff] [blame] | 4259 | done |
| 4260 | |
| 4261 | # enter the directory containing the target file & strip the dir from the filename |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4262 | cd $(dirname ${file}) |
| 4263 | file=$(basename ${file}) |
Dave Rodgman | 4243610 | 2023-10-03 15:47:05 +0100 | [diff] [blame] | 4264 | |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4265 | # The most common issue is unused variables/functions, so ensure -Wunused is set. |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4266 | warning_flags="-Werror -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wimplicit-fallthrough -Wshadow -Wvla -Wformat=2 -Wno-format-nonliteral -Wshadow -Wasm-operand-widths -Wunused" |
Dave Rodgman | 9728562 | 2023-09-29 17:32:06 +0100 | [diff] [blame] | 4267 | |
Dave Rodgman | 4243610 | 2023-10-03 15:47:05 +0100 | [diff] [blame] | 4268 | # Extract the command generated by the Makefile to build the target file. |
| 4269 | # This ensures that we have any include paths, macro definitions, etc |
| 4270 | # that may be applied by make. |
| 4271 | # Add -fsyntax-only as we only want a syntax check and don't need to generate a file. |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4272 | compile_cmd="clang \$(LOCAL_CFLAGS) ${warning_flags} -fsyntax-only -c" |
Dave Rodgman | 4243610 | 2023-10-03 15:47:05 +0100 | [diff] [blame] | 4273 | |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4274 | makefile=$(TMPDIR=. mktemp) |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4275 | deps="" |
Dave Rodgman | 9728562 | 2023-09-29 17:32:06 +0100 | [diff] [blame] | 4276 | |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4277 | len=${#options[@]} |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4278 | source_file=${file%.o}.c |
| 4279 | |
| 4280 | targets=0 |
| 4281 | echo 'include Makefile' >${makefile} |
Dave Rodgman | 9728562 | 2023-09-29 17:32:06 +0100 | [diff] [blame] | 4282 | |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4283 | for ((i = 0; i < $((2**${len})); i++)); do |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4284 | # generate each of 2^n combinations of options |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4285 | # each bit of $i is used to determine if options[i] will be set or not |
| 4286 | target="t" |
| 4287 | clang_args="" |
| 4288 | for ((j = 0; j < ${len}; j++)); do |
Dave Rodgman | b1107ae | 2023-10-04 12:30:23 +0100 | [diff] [blame] | 4289 | if (((i >> j) & 1)); then |
Dave Rodgman | a7127eb | 2023-10-04 13:38:41 +0100 | [diff] [blame] | 4290 | opt=-D${options[$j]} |
Dave Rodgman | 7a8a249 | 2023-10-04 13:14:20 +0100 | [diff] [blame] | 4291 | clang_args="${clang_args} ${opt}" |
| 4292 | target="${target}${opt}" |
Dave Rodgman | b1107ae | 2023-10-04 12:30:23 +0100 | [diff] [blame] | 4293 | fi |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4294 | done |
| 4295 | |
Dave Rodgman | b1107ae | 2023-10-04 12:30:23 +0100 | [diff] [blame] | 4296 | # if combination is not known to be invalid, add it to the makefile |
Dave Rodgman | f3803a1 | 2023-10-16 13:47:15 +0100 | [diff] [blame] | 4297 | if [[ -z $validate_options ]] || $validate_options "${clang_args}"; then |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4298 | cmd="${compile_cmd} ${clang_args}" |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4299 | echo "${target}: ${source_file}; $cmd ${source_file}" >> ${makefile} |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4300 | |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4301 | deps="${deps} ${target}" |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4302 | ((++targets)) |
Dave Rodgman | 745af9f | 2023-09-29 15:47:07 +0100 | [diff] [blame] | 4303 | fi |
Dave Rodgman | 9728562 | 2023-09-29 17:32:06 +0100 | [diff] [blame] | 4304 | done |
Dave Rodgman | 6001fb2 | 2023-06-29 09:29:00 +0100 | [diff] [blame] | 4305 | |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4306 | echo "build_test_config_combos: ${deps}" >> ${makefile} |
Dave Rodgman | aea01c9 | 2023-09-29 18:54:49 +0100 | [diff] [blame] | 4307 | |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4308 | # execute all of the commands via Make (probably in parallel) |
Dave Rodgman | cc88ccd | 2023-10-13 10:33:15 +0100 | [diff] [blame] | 4309 | make -s -f ${makefile} build_test_config_combos |
| 4310 | echo "$targets targets checked" |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4311 | |
| 4312 | # clean up the temporary makefile |
Dave Rodgman | 28e38d8 | 2023-10-04 11:50:30 +0100 | [diff] [blame] | 4313 | rm ${makefile} |
Dave Rodgman | 6001fb2 | 2023-06-29 09:29:00 +0100 | [diff] [blame] | 4314 | } |
| 4315 | |
Dave Rodgman | 43a5ce8 | 2023-10-02 17:09:37 +0100 | [diff] [blame] | 4316 | validate_aes_config_variations() { |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4317 | if [[ "$1" == *"MBEDTLS_AES_USE_HARDWARE_ONLY"* ]]; then |
| 4318 | if [[ "$1" == *"MBEDTLS_PADLOCK_C"* ]]; then |
Dave Rodgman | 41bc798 | 2023-10-16 14:04:21 +0100 | [diff] [blame] | 4319 | return 1 |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4320 | fi |
| 4321 | if [[ !(("$HOSTTYPE" == "aarch64" && "$1" != *"MBEDTLS_AESCE_C"*) || \ |
| 4322 | ("$HOSTTYPE" == "x86_64" && "$1" != *"MBEDTLS_AESNI_C"*)) ]]; then |
Dave Rodgman | 41bc798 | 2023-10-16 14:04:21 +0100 | [diff] [blame] | 4323 | return 1 |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4324 | fi |
| 4325 | fi |
Dave Rodgman | 41bc798 | 2023-10-16 14:04:21 +0100 | [diff] [blame] | 4326 | return 0 |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4327 | } |
| 4328 | |
| 4329 | component_build_aes_variations() { |
| 4330 | # 18s - around 90ms per clang invocation on M1 Pro |
| 4331 | # |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4332 | # aes.o has many #if defined(...) guards that intersect in complex ways. |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4333 | # Test that all the combinations build cleanly. |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4334 | |
Yanray Wang | bc29aef | 2023-11-06 11:08:17 +0800 | [diff] [blame] | 4335 | MBEDTLS_ROOT_DIR="$PWD" |
Gilles Peskine | 32e889d | 2020-04-12 23:43:28 +0200 | [diff] [blame] | 4336 | msg "build: aes.o for all combinations of relevant config options" |
Gilles Peskine | f4d2fd4 | 2021-10-08 11:45:47 +0200 | [diff] [blame] | 4337 | |
Dave Rodgman | 4243610 | 2023-10-03 15:47:05 +0100 | [diff] [blame] | 4338 | build_test_config_combos library/aes.o validate_aes_config_variations \ |
Dave Rodgman | 920343a | 2023-10-01 18:41:09 +0100 | [diff] [blame] | 4339 | "MBEDTLS_AES_SETKEY_ENC_ALT" "MBEDTLS_AES_DECRYPT_ALT" \ |
| 4340 | "MBEDTLS_AES_ROM_TABLES" "MBEDTLS_AES_ENCRYPT_ALT" "MBEDTLS_AES_SETKEY_DEC_ALT" \ |
| 4341 | "MBEDTLS_AES_FEWER_TABLES" "MBEDTLS_PADLOCK_C" "MBEDTLS_AES_USE_HARDWARE_ONLY" \ |
| 4342 | "MBEDTLS_AESNI_C" "MBEDTLS_AESCE_C" "MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH" |
Yanray Wang | bc29aef | 2023-11-06 11:08:17 +0800 | [diff] [blame] | 4343 | |
| 4344 | cd "$MBEDTLS_ROOT_DIR" |
| 4345 | msg "build: aes.o for all combinations of relevant config options + BLOCK_CIPHER_NO_DECRYPT" |
| 4346 | |
Yanray Wang | 42be1ba | 2023-11-23 14:28:47 +0800 | [diff] [blame] | 4347 | # MBEDTLS_BLOCK_CIPHER_NO_DECRYPT is incompatible with ECB in PSA, CBC/XTS/NIST_KW/DES, |
Yanray Wang | bc29aef | 2023-11-06 11:08:17 +0800 | [diff] [blame] | 4348 | # manually set or unset those configurations to check |
| 4349 | # MBEDTLS_BLOCK_CIPHER_NO_DECRYPT with various combinations in aes.o. |
Yanray Wang | bc29aef | 2023-11-06 11:08:17 +0800 | [diff] [blame] | 4350 | scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT |
| 4351 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
| 4352 | scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS |
| 4353 | scripts/config.py unset MBEDTLS_DES_C |
| 4354 | scripts/config.py unset MBEDTLS_NIST_KW_C |
| 4355 | build_test_config_combos library/aes.o validate_aes_config_variations \ |
| 4356 | "MBEDTLS_AES_SETKEY_ENC_ALT" "MBEDTLS_AES_DECRYPT_ALT" \ |
| 4357 | "MBEDTLS_AES_ROM_TABLES" "MBEDTLS_AES_ENCRYPT_ALT" "MBEDTLS_AES_SETKEY_DEC_ALT" \ |
| 4358 | "MBEDTLS_AES_FEWER_TABLES" "MBEDTLS_PADLOCK_C" "MBEDTLS_AES_USE_HARDWARE_ONLY" \ |
| 4359 | "MBEDTLS_AESNI_C" "MBEDTLS_AESCE_C" "MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4360 | } |
Gilles Peskine | e7fc7ef | 2021-10-19 21:33:32 +0200 | [diff] [blame] | 4361 | |
Andrzej Kurek | 69f20aa | 2019-09-05 09:27:47 -0400 | [diff] [blame] | 4362 | component_test_no_platform () { |
| 4363 | # Full configuration build, without platform support, file IO and net sockets. |
| 4364 | # This should catch missing mbedtls_printf definitions, and by disabling file |
| 4365 | # IO, it should catch missing '#include <stdio.h>' |
| 4366 | msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s |
Paul Elliott | fb81f77 | 2023-10-18 17:44:59 +0100 | [diff] [blame] | 4367 | scripts/config.py full_no_platform |
Simon Butcher | f95c176 | 2016-11-10 17:25:58 +0000 | [diff] [blame] | 4368 | scripts/config.py unset MBEDTLS_PLATFORM_C |
| 4369 | scripts/config.py unset MBEDTLS_NET_C |
Manuel Pégourié-Gonnard | 3d4755b | 2015-06-03 14:03:17 +0100 | [diff] [blame] | 4370 | scripts/config.py unset MBEDTLS_FS_IO |
| 4371 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C |
Simon Butcher | b928343 | 2016-07-13 11:02:41 +0100 | [diff] [blame] | 4372 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C |
Manuel Pégourié-Gonnard | 3d4755b | 2015-06-03 14:03:17 +0100 | [diff] [blame] | 4373 | scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C |
Paul Elliott | fb81f77 | 2023-10-18 17:44:59 +0100 | [diff] [blame] | 4374 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
Simon Butcher | 284b4c9 | 2016-06-26 13:10:00 +0100 | [diff] [blame] | 4375 | # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 4376 | # to re-enable platform integration features otherwise disabled in C99 builds |
| 4377 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4378 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test |
Simon Butcher | cb58700 | 2017-01-06 16:14:44 +0000 | [diff] [blame] | 4379 | } |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 4380 | |
| 4381 | component_build_no_std_function () { |
Manuel Pégourié-Gonnard | a71780e | 2015-02-13 13:56:55 +0000 | [diff] [blame] | 4382 | # catch compile bugs in _uninit functions |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4383 | msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s |
| 4384 | scripts/config.py full |
| 4385 | scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4386 | scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED |
| 4387 | scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT |
| 4388 | CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check . |
| 4389 | make |
| 4390 | } |
Manuel Pégourié-Gonnard | dccb80b | 2015-06-03 10:20:33 +0100 | [diff] [blame] | 4391 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4392 | component_build_no_ssl_srv () { |
| 4393 | msg "build: full config except SSL server, make, gcc" # ~ 30s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4394 | scripts/config.py full |
| 4395 | scripts/config.py unset MBEDTLS_SSL_SRV_C |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4396 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4397 | } |
Manuel Pégourié-Gonnard | 66b8e95 | 2015-05-20 11:13:56 +0200 | [diff] [blame] | 4398 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4399 | component_build_no_ssl_cli () { |
| 4400 | msg "build: full config except SSL client, make, gcc" # ~ 30s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4401 | scripts/config.py full |
| 4402 | scripts/config.py unset MBEDTLS_SSL_CLI_C |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4403 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4404 | } |
Manuel Pégourié-Gonnard | 66b8e95 | 2015-05-20 11:13:56 +0200 | [diff] [blame] | 4405 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4406 | component_build_no_sockets () { |
| 4407 | # Note, C99 compliance can also be tested with the sockets support disabled, |
| 4408 | # as that requires a POSIX platform (which isn't the same as C99). |
| 4409 | msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4410 | scripts/config.py full |
| 4411 | scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc. |
| 4412 | scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux |
| 4413 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib |
| 4414 | } |
Manuel Pégourié-Gonnard | 009a264 | 2015-05-29 10:31:13 +0200 | [diff] [blame] | 4415 | |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 4416 | component_test_memory_buffer_allocator_backtrace () { |
Hanno Becker | 0fb9ba2 | 2019-02-26 14:34:13 +0000 | [diff] [blame] | 4417 | msg "build: default config with memory buffer allocator and backtrace enabled" |
| 4418 | scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 4419 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
| 4420 | scripts/config.py set MBEDTLS_MEMORY_BACKTRACE |
Andrzej Kurek | 69f20aa | 2019-09-05 09:27:47 -0400 | [diff] [blame] | 4421 | scripts/config.py set MBEDTLS_MEMORY_DEBUG |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 4422 | cmake -DCMAKE_BUILD_TYPE:String=Release . |
Andrzej Kurek | 69f20aa | 2019-09-05 09:27:47 -0400 | [diff] [blame] | 4423 | make |
| 4424 | |
| 4425 | msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE" |
| 4426 | make test |
| 4427 | } |
| 4428 | |
| 4429 | component_test_memory_buffer_allocator () { |
| 4430 | msg "build: default config with memory buffer allocator" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4431 | scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 4432 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 4433 | cmake -DCMAKE_BUILD_TYPE:String=Release . |
Hanno Becker | 0fb9ba2 | 2019-02-26 14:34:13 +0000 | [diff] [blame] | 4434 | make |
| 4435 | |
| 4436 | msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C" |
| 4437 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 4438 | |
| 4439 | msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C" |
| 4440 | # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4441 | tests/ssl-opt.sh -e '^DTLS proxy' |
Hanno Becker | 0fb9ba2 | 2019-02-26 14:34:13 +0000 | [diff] [blame] | 4442 | } |
| 4443 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4444 | component_test_no_max_fragment_length () { |
| 4445 | # Run max fragment length tests with MFL disabled |
| 4446 | msg "build: default config except MFL extension (ASan build)" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4447 | scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 4448 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4449 | make |
Hanno Becker | 5175ac6 | 2017-09-18 15:36:25 +0100 | [diff] [blame] | 4450 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4451 | msg "test: ssl-opt.sh, MFL-related tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4452 | tests/ssl-opt.sh -f "Max fragment length" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4453 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 4454 | |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 4455 | component_test_asan_remove_peer_certificate () { |
| 4456 | msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4457 | scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 4458 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 4459 | make |
| 4460 | |
| 4461 | msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
| 4462 | make test |
| 4463 | |
| 4464 | msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4465 | tests/ssl-opt.sh |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 4466 | |
| 4467 | msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4468 | tests/compat.sh |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 4469 | |
| 4470 | msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4471 | tests/context-info.sh |
Hanno Becker | 545ced4 | 2019-02-19 11:10:48 +0000 | [diff] [blame] | 4472 | } |
| 4473 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4474 | component_test_no_max_fragment_length_small_ssl_out_content_len () { |
| 4475 | msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4476 | scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH |
| 4477 | scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384 |
| 4478 | scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 4479 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4480 | make |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 4481 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4482 | msg "test: MFL tests (disabled MFL extension case) & large packet tests" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4483 | tests/ssl-opt.sh -f "Max fragment length\|Large buffer" |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 4484 | |
| 4485 | msg "test: context-info.sh (disabled MFL extension case)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4486 | tests/context-info.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4487 | } |
Angus Gratton | c4dd073 | 2018-04-11 16:28:39 +1000 | [diff] [blame] | 4488 | |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4489 | component_test_variable_ssl_in_out_buffer_len () { |
| 4490 | msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)" |
| 4491 | scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 4492 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4493 | make |
| 4494 | |
| 4495 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled" |
| 4496 | make test |
| 4497 | |
| 4498 | msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4499 | tests/ssl-opt.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4500 | |
| 4501 | msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4502 | tests/compat.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4503 | } |
| 4504 | |
Manuel Pégourié-Gonnard | 6a543ba | 2022-11-25 11:30:10 +0100 | [diff] [blame] | 4505 | component_test_dtls_cid_legacy () { |
Hannes Tschofenig | df84bb3 | 2022-11-23 11:14:03 +0100 | [diff] [blame] | 4506 | msg "build: MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled (ASan build)" |
Hannes Tschofenig | fd6cca4 | 2021-10-12 09:22:33 +0200 | [diff] [blame] | 4507 | scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT 1 |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4508 | |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 4509 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4510 | make |
| 4511 | |
Hannes Tschofenig | df84bb3 | 2022-11-23 11:14:03 +0100 | [diff] [blame] | 4512 | msg "test: MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy)" |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4513 | make test |
| 4514 | |
Hannes Tschofenig | df84bb3 | 2022-11-23 11:14:03 +0100 | [diff] [blame] | 4515 | msg "test: ssl-opt.sh, MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4516 | tests/ssl-opt.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4517 | |
Manuel Pégourié-Gonnard | 6a543ba | 2022-11-25 11:30:10 +0100 | [diff] [blame] | 4518 | msg "test: compat.sh, MBEDTLS_SSL_DTLS_CONNECTION_ID (legacy) enabled" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4519 | tests/compat.sh |
Darryl Green | aad82f9 | 2019-12-02 10:53:11 +0000 | [diff] [blame] | 4520 | } |
| 4521 | |
Piotr Nowicki | 0937ed2 | 2019-11-26 16:32:40 +0100 | [diff] [blame] | 4522 | component_test_ssl_alloc_buffer_and_mfl () { |
| 4523 | msg "build: default config with memory buffer allocator and MFL extension" |
| 4524 | scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 4525 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
| 4526 | scripts/config.py set MBEDTLS_MEMORY_DEBUG |
| 4527 | scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH |
| 4528 | scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 4529 | cmake -DCMAKE_BUILD_TYPE:String=Release . |
Piotr Nowicki | 0937ed2 | 2019-11-26 16:32:40 +0100 | [diff] [blame] | 4530 | make |
| 4531 | |
| 4532 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH" |
| 4533 | make test |
| 4534 | |
| 4535 | msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4536 | tests/ssl-opt.sh -f "Handshake memory usage" |
Piotr Nowicki | 0937ed2 | 2019-11-26 16:32:40 +0100 | [diff] [blame] | 4537 | } |
| 4538 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 4539 | component_test_when_no_ciphersuites_have_mac () { |
| 4540 | msg "build: when no ciphersuites have MAC" |
| 4541 | scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 4542 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
TRodziewicz | 2add5c1 | 2021-04-28 16:50:20 +0200 | [diff] [blame] | 4543 | scripts/config.py unset MBEDTLS_CMAC_C |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 4544 | make |
| 4545 | |
| 4546 | msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC" |
| 4547 | make test |
| 4548 | |
| 4549 | msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4550 | tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM' |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 4551 | } |
| 4552 | |
Raoul Strackx | a4e8614 | 2020-06-15 17:03:13 +0200 | [diff] [blame] | 4553 | component_test_no_date_time () { |
| 4554 | msg "build: default config without MBEDTLS_HAVE_TIME_DATE" |
| 4555 | scripts/config.py unset MBEDTLS_HAVE_TIME_DATE |
Dave Rodgman | ea03ef9 | 2023-12-19 12:19:59 +0000 | [diff] [blame] | 4556 | cmake -D CMAKE_BUILD_TYPE:String=Check . |
Raoul Strackx | a4e8614 | 2020-06-15 17:03:13 +0200 | [diff] [blame] | 4557 | make |
| 4558 | |
| 4559 | msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites" |
| 4560 | make test |
| 4561 | } |
| 4562 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4563 | component_test_platform_calloc_macro () { |
| 4564 | msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4565 | scripts/config.py set MBEDTLS_PLATFORM_MEMORY |
| 4566 | scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc |
| 4567 | scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 4568 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4569 | make |
Hanno Becker | e5fecec | 2018-10-11 11:02:52 +0100 | [diff] [blame] | 4570 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4571 | msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)" |
| 4572 | make test |
| 4573 | } |
Hanno Becker | e5fecec | 2018-10-11 11:02:52 +0100 | [diff] [blame] | 4574 | |
Gilles Peskine | c4ef7a9 | 2019-09-17 19:04:38 +0200 | [diff] [blame] | 4575 | component_test_malloc_0_null () { |
| 4576 | msg "build: malloc(0) returns NULL (ASan+UBSan build)" |
Manuel Pégourié-Gonnard | 68192fc | 2020-03-04 10:34:47 +0100 | [diff] [blame] | 4577 | scripts/config.py full |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 4578 | make CC=$ASAN_CC CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"$PWD/tests/configs/user-config-malloc-0-null.h\"' $ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | c4ef7a9 | 2019-09-17 19:04:38 +0200 | [diff] [blame] | 4579 | |
| 4580 | msg "test: malloc(0) returns NULL (ASan+UBSan build)" |
| 4581 | make test |
| 4582 | |
| 4583 | msg "selftest: malloc(0) returns NULL (ASan+UBSan build)" |
| 4584 | # Just the calloc selftest. "make test" ran the others as part of the |
| 4585 | # test suites. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4586 | programs/test/selftest calloc |
Gilles Peskine | 765d240 | 2020-02-11 18:26:34 +0100 | [diff] [blame] | 4587 | |
| 4588 | msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)" |
| 4589 | # Run a subset of the tests. The choice is a balance between coverage |
| 4590 | # and time (including time indirectly wasted due to flaky tests). |
| 4591 | # The current choice is to skip tests whose description includes |
| 4592 | # "proxy", which is an approximation of skipping tests that use the |
| 4593 | # UDP proxy, which tend to be slower and flakier. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 4594 | tests/ssl-opt.sh -e 'proxy' |
Gilles Peskine | c4ef7a9 | 2019-09-17 19:04:38 +0200 | [diff] [blame] | 4595 | } |
| 4596 | |
Dave Rodgman | 6a08b68 | 2023-06-19 11:51:33 +0100 | [diff] [blame] | 4597 | support_test_aesni() { |
| 4598 | # Check that gcc targets x86_64 (we can build AESNI), and check for |
| 4599 | # AESNI support on the host (we can run AESNI). |
| 4600 | # |
| 4601 | # The name of this function is possibly slightly misleading, but needs to align |
| 4602 | # with the name of the corresponding test, component_test_aesni. |
Dave Rodgman | f8986e3 | 2023-06-19 10:55:59 +0100 | [diff] [blame] | 4603 | # |
| 4604 | # In principle 32-bit x86 can support AESNI, but our implementation does not |
| 4605 | # support 32-bit x86, so we check for x86-64. |
| 4606 | # We can only grep /proc/cpuinfo on Linux, so this also checks for Linux |
Dave Rodgman | 6a08b68 | 2023-06-19 11:51:33 +0100 | [diff] [blame] | 4607 | (gcc -v 2>&1 | grep Target | grep -q x86_64) && |
| 4608 | [[ "$HOSTTYPE" == "x86_64" && "$OSTYPE" == "linux-gnu" ]] && |
Jerry Yu | a7de78d | 2023-08-08 12:57:35 +0800 | [diff] [blame] | 4609 | (lscpu | grep -qw aes) |
Dave Rodgman | f8986e3 | 2023-06-19 10:55:59 +0100 | [diff] [blame] | 4610 | } |
| 4611 | |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4612 | component_test_aesni () { # ~ 60s |
| 4613 | # This tests the two AESNI implementations (intrinsics and assembly), and also the plain C |
| 4614 | # fallback. It also tests the logic that is used to select which implementation(s) to build. |
| 4615 | # |
| 4616 | # This test does not require the host to have support for AESNI (if it doesn't, the run-time |
| 4617 | # AESNI detection will fallback to the plain C implementation, so the tests will instead |
| 4618 | # exercise the plain C impl). |
| 4619 | |
Dave Rodgman | be60fcc | 2023-06-16 17:04:52 +0100 | [diff] [blame] | 4620 | msg "build: default config with different AES implementations" |
Dave Rodgman | 838dc46 | 2023-06-16 13:18:19 +0100 | [diff] [blame] | 4621 | scripts/config.py set MBEDTLS_AESNI_C |
Jerry Yu | 17a9d2e | 2023-08-03 16:14:18 +0800 | [diff] [blame] | 4622 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
Dave Rodgman | 838dc46 | 2023-06-16 13:18:19 +0100 | [diff] [blame] | 4623 | scripts/config.py set MBEDTLS_HAVE_ASM |
| 4624 | |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4625 | # test the intrinsics implementation |
| 4626 | msg "AES tests, test intrinsics" |
Dave Rodgman | 838dc46 | 2023-06-16 13:18:19 +0100 | [diff] [blame] | 4627 | make clean |
Jerry Yu | a7de78d | 2023-08-08 12:57:35 +0800 | [diff] [blame] | 4628 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -mpclmul -msse2 -maes' |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4629 | # check that we built intrinsics - this should be used by default when supported by the compiler |
Jerry Yu | 1221a31 | 2023-08-03 16:09:07 +0800 | [diff] [blame] | 4630 | ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics" |
Dave Rodgman | be60fcc | 2023-06-16 17:04:52 +0100 | [diff] [blame] | 4631 | |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4632 | # test the asm implementation |
| 4633 | msg "AES tests, test assembly" |
| 4634 | make clean |
Jerry Yu | a7de78d | 2023-08-08 12:57:35 +0800 | [diff] [blame] | 4635 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -mno-pclmul -mno-sse2 -mno-aes' |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4636 | # check that we built assembly - this should be built if the compiler does not support intrinsics |
Jerry Yu | 1221a31 | 2023-08-03 16:09:07 +0800 | [diff] [blame] | 4637 | ./programs/test/selftest aes | grep "AESNI code" | grep -q "assembly" |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4638 | |
| 4639 | # test the plain C implementation |
Dave Rodgman | be60fcc | 2023-06-16 17:04:52 +0100 | [diff] [blame] | 4640 | scripts/config.py unset MBEDTLS_AESNI_C |
Jerry Yu | 17a9d2e | 2023-08-03 16:14:18 +0800 | [diff] [blame] | 4641 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
Dave Rodgman | be60fcc | 2023-06-16 17:04:52 +0100 | [diff] [blame] | 4642 | msg "AES tests, plain C" |
| 4643 | make clean |
Jerry Yu | a7de78d | 2023-08-08 12:57:35 +0800 | [diff] [blame] | 4644 | make CC=gcc CFLAGS='-O2 -Werror' |
Dave Rodgman | 96a9e6a | 2023-06-16 20:18:36 +0100 | [diff] [blame] | 4645 | # check that there is no AESNI code present |
Jerry Yu | 1221a31 | 2023-08-03 16:09:07 +0800 | [diff] [blame] | 4646 | ./programs/test/selftest aes | not grep -q "AESNI code" |
Jerry Yu | 76a51b9 | 2023-08-08 16:03:55 +0800 | [diff] [blame] | 4647 | not grep -q "AES note: using AESNI" ./programs/test/selftest |
| 4648 | grep -q "AES note: built-in implementation." ./programs/test/selftest |
Jerry Yu | 8a599c0 | 2023-08-03 17:01:02 +0800 | [diff] [blame] | 4649 | |
| 4650 | # test the intrinsics implementation |
| 4651 | scripts/config.py set MBEDTLS_AESNI_C |
| 4652 | scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4653 | msg "AES tests, test AESNI only" |
| 4654 | make clean |
Jerry Yu | a7de78d | 2023-08-08 12:57:35 +0800 | [diff] [blame] | 4655 | make CC=gcc CFLAGS='-Werror -Wall -Wextra -mpclmul -msse2 -maes' |
Jerry Yu | a7de78d | 2023-08-08 12:57:35 +0800 | [diff] [blame] | 4656 | ./programs/test/selftest aes | grep -q "AES note: using AESNI" |
| 4657 | ./programs/test/selftest aes | not grep -q "AES note: built-in implementation." |
Jerry Yu | 76a51b9 | 2023-08-08 16:03:55 +0800 | [diff] [blame] | 4658 | grep -q "AES note: using AESNI" ./programs/test/selftest |
| 4659 | not grep -q "AES note: built-in implementation." ./programs/test/selftest |
Dave Rodgman | 838dc46 | 2023-06-16 13:18:19 +0100 | [diff] [blame] | 4660 | } |
| 4661 | |
Jerry Yu | b6d39c2 | 2023-08-16 15:11:48 +0800 | [diff] [blame] | 4662 | support_test_aesni_m32() { |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 4663 | support_test_m32_no_asm && (lscpu | grep -qw aes) |
Jerry Yu | b6d39c2 | 2023-08-16 15:11:48 +0800 | [diff] [blame] | 4664 | } |
| 4665 | |
| 4666 | component_test_aesni_m32 () { # ~ 60s |
| 4667 | # This tests are duplicated from component_test_aesni for i386 target |
| 4668 | # |
| 4669 | # AESNI intrinsic code supports i386 and assembly code does not support it. |
| 4670 | |
| 4671 | msg "build: default config with different AES implementations" |
| 4672 | scripts/config.py set MBEDTLS_AESNI_C |
| 4673 | scripts/config.py set MBEDTLS_PADLOCK_C |
| 4674 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4675 | scripts/config.py set MBEDTLS_HAVE_ASM |
| 4676 | |
Beniamin Sandu | 3bca781 | 2023-10-24 18:55:36 +0100 | [diff] [blame] | 4677 | # test the intrinsics implementation with gcc |
| 4678 | msg "AES tests, test intrinsics (gcc)" |
Jerry Yu | b6d39c2 | 2023-08-16 15:11:48 +0800 | [diff] [blame] | 4679 | make clean |
Beniamin Sandu | 3bca781 | 2023-10-24 18:55:36 +0100 | [diff] [blame] | 4680 | make CC=gcc CFLAGS='-m32 -Werror -Wall -Wextra' LDFLAGS='-m32' |
Jerry Yu | b6d39c2 | 2023-08-16 15:11:48 +0800 | [diff] [blame] | 4681 | # check that we built intrinsics - this should be used by default when supported by the compiler |
| 4682 | ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics" |
| 4683 | grep -q "AES note: using AESNI" ./programs/test/selftest |
| 4684 | grep -q "AES note: built-in implementation." ./programs/test/selftest |
| 4685 | grep -q "AES note: using VIA Padlock" ./programs/test/selftest |
| 4686 | grep -q mbedtls_aesni_has_support ./programs/test/selftest |
| 4687 | |
| 4688 | scripts/config.py set MBEDTLS_AESNI_C |
Jerry Yu | b6d39c2 | 2023-08-16 15:11:48 +0800 | [diff] [blame] | 4689 | scripts/config.py unset MBEDTLS_PADLOCK_C |
| 4690 | scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4691 | msg "AES tests, test AESNI only" |
| 4692 | make clean |
| 4693 | make CC=gcc CFLAGS='-m32 -Werror -Wall -Wextra -mpclmul -msse2 -maes' LDFLAGS='-m32' |
| 4694 | ./programs/test/selftest aes | grep -q "AES note: using AESNI" |
| 4695 | ./programs/test/selftest aes | not grep -q "AES note: built-in implementation." |
| 4696 | grep -q "AES note: using AESNI" ./programs/test/selftest |
| 4697 | not grep -q "AES note: built-in implementation." ./programs/test/selftest |
| 4698 | not grep -q "AES note: using VIA Padlock" ./programs/test/selftest |
| 4699 | not grep -q mbedtls_aesni_has_support ./programs/test/selftest |
| 4700 | } |
| 4701 | |
Beniamin Sandu | 3bca781 | 2023-10-24 18:55:36 +0100 | [diff] [blame] | 4702 | support_test_aesni_m32_clang() { |
Tom Cosgrove | d4c373a | 2024-01-30 13:56:38 +0000 | [diff] [blame^] | 4703 | # clang >= 4 is required to build with target attributes |
| 4704 | support_test_aesni_m32 && [[ $(clang_version) -ge 4 ]] |
Beniamin Sandu | 3bca781 | 2023-10-24 18:55:36 +0100 | [diff] [blame] | 4705 | } |
| 4706 | |
| 4707 | component_test_aesni_m32_clang() { |
| 4708 | |
| 4709 | scripts/config.py set MBEDTLS_AESNI_C |
| 4710 | scripts/config.py set MBEDTLS_PADLOCK_C |
| 4711 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4712 | scripts/config.py set MBEDTLS_HAVE_ASM |
| 4713 | |
| 4714 | # test the intrinsics implementation with clang |
| 4715 | msg "AES tests, test intrinsics (clang)" |
| 4716 | make clean |
| 4717 | make CC=clang CFLAGS='-m32 -Werror -Wall -Wextra' LDFLAGS='-m32' |
| 4718 | # check that we built intrinsics - this should be used by default when supported by the compiler |
| 4719 | ./programs/test/selftest aes | grep "AESNI code" | grep -q "intrinsics" |
| 4720 | grep -q "AES note: using AESNI" ./programs/test/selftest |
| 4721 | grep -q "AES note: built-in implementation." ./programs/test/selftest |
| 4722 | grep -q "AES note: using VIA Padlock" ./programs/test/selftest |
| 4723 | grep -q mbedtls_aesni_has_support ./programs/test/selftest |
| 4724 | } |
| 4725 | |
Jerry Yu | 193cbc0 | 2023-08-03 17:06:29 +0800 | [diff] [blame] | 4726 | # For timebeing, no aarch64 gcc available in CI and no arm64 CI node. |
| 4727 | component_build_aes_aesce_armcc () { |
| 4728 | msg "Build: AESCE test on arm64 platform without plain C." |
| 4729 | scripts/config.py baremetal |
| 4730 | |
| 4731 | # armc[56] don't support SHA-512 intrinsics |
| 4732 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
| 4733 | |
| 4734 | # Stop armclang warning about feature detection for A64_CRYPTO. |
| 4735 | # With this enabled, the library does build correctly under armclang, |
| 4736 | # but in baremetal builds (as tested here), feature detection is |
| 4737 | # unavailable, and the user is notified via a #warning. So enabling |
| 4738 | # this feature would prevent us from building with -Werror on |
| 4739 | # armclang. Tracked in #7198. |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 4740 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
Jerry Yu | 193cbc0 | 2023-08-03 17:06:29 +0800 | [diff] [blame] | 4741 | scripts/config.py set MBEDTLS_HAVE_ASM |
| 4742 | |
| 4743 | msg "AESCE, build with default configuration." |
| 4744 | scripts/config.py set MBEDTLS_AESCE_C |
| 4745 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4746 | armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto" |
| 4747 | |
| 4748 | msg "AESCE, build AESCE only" |
| 4749 | scripts/config.py set MBEDTLS_AESCE_C |
| 4750 | scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4751 | armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto" |
| 4752 | } |
| 4753 | |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4754 | support_build_aes_armce() { |
Tom Cosgrove | 9e4eeff | 2024-01-30 13:51:18 +0000 | [diff] [blame] | 4755 | # clang >= 11 is required to build with AES extensions |
Tom Cosgrove | d4c373a | 2024-01-30 13:56:38 +0000 | [diff] [blame^] | 4756 | [[ $(clang_version) -ge 11 ]] |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4757 | } |
| 4758 | |
| 4759 | component_build_aes_armce () { |
| 4760 | # Test variations of AES with Armv8 crypto extensions |
| 4761 | scripts/config.py set MBEDTLS_AESCE_C |
| 4762 | scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4763 | |
| 4764 | msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, aarch64" |
Dave Rodgman | b622ff8 | 2023-10-08 22:25:16 +0100 | [diff] [blame] | 4765 | make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a+crypto" |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4766 | |
| 4767 | msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, arm" |
| 4768 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm" |
| 4769 | |
| 4770 | msg "MBEDTLS_AES_USE_HARDWARE_ONLY, clang, thumb" |
| 4771 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb" |
| 4772 | |
Dave Rodgman | 5e41937 | 2023-10-23 15:30:20 +0100 | [diff] [blame] | 4773 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4774 | |
Dave Rodgman | 5e41937 | 2023-10-23 15:30:20 +0100 | [diff] [blame] | 4775 | msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, aarch64" |
| 4776 | make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a+crypto" |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4777 | |
Dave Rodgman | 5e41937 | 2023-10-23 15:30:20 +0100 | [diff] [blame] | 4778 | msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, arm" |
| 4779 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm" |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4780 | |
Dave Rodgman | 5e41937 | 2023-10-23 15:30:20 +0100 | [diff] [blame] | 4781 | msg "no MBEDTLS_AES_USE_HARDWARE_ONLY, clang, thumb" |
| 4782 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb" |
Dave Rodgman | f3501b4 | 2023-10-11 16:21:25 +0100 | [diff] [blame] | 4783 | |
| 4784 | # test for presence of AES instructions |
| 4785 | scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4786 | msg "clang, test A32 crypto instructions built" |
| 4787 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S" |
| 4788 | grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o |
| 4789 | msg "clang, test T32 crypto instructions built" |
| 4790 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S" |
| 4791 | grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o |
| 4792 | msg "clang, test aarch64 crypto instructions built" |
| 4793 | make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S" |
| 4794 | grep -E 'aes[a-z]+\s*[qv]' library/aesce.o |
| 4795 | |
| 4796 | # test for absence of AES instructions |
| 4797 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
| 4798 | scripts/config.py unset MBEDTLS_AESCE_C |
| 4799 | msg "clang, test A32 crypto instructions not built" |
| 4800 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S" |
| 4801 | not grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o |
| 4802 | msg "clang, test T32 crypto instructions not built" |
| 4803 | make -B library/aesce.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S" |
| 4804 | not grep -E 'aes[0-9a-z]+.[0-9]\s*[qv]' library/aesce.o |
| 4805 | msg "clang, test aarch64 crypto instructions not built" |
| 4806 | make -B library/aesce.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S" |
| 4807 | not grep -E 'aes[a-z]+\s*[qv]' library/aesce.o |
Dave Rodgman | 0c58403 | 2023-10-08 12:26:54 +0100 | [diff] [blame] | 4808 | } |
| 4809 | |
Dave Rodgman | 9ed1853 | 2023-10-05 00:06:47 +0100 | [diff] [blame] | 4810 | support_build_sha_armce() { |
Tom Cosgrove | d4c373a | 2024-01-30 13:56:38 +0000 | [diff] [blame^] | 4811 | # clang >= 4 is required to build with SHA extensions |
| 4812 | [[ $(clang_version) -ge 4 ]] |
Dave Rodgman | 9ed1853 | 2023-10-05 00:06:47 +0100 | [diff] [blame] | 4813 | } |
| 4814 | |
Dave Rodgman | d9e8083 | 2023-10-04 17:17:46 +0100 | [diff] [blame] | 4815 | component_build_sha_armce () { |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 4816 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
Dave Rodgman | f4b415c | 2023-10-11 16:11:42 +0100 | [diff] [blame] | 4817 | |
| 4818 | |
| 4819 | # Test variations of SHA256 Armv8 crypto extensions |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 4820 | scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY |
Dave Rodgman | f4b415c | 2023-10-11 16:11:42 +0100 | [diff] [blame] | 4821 | msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY clang, aarch64" |
| 4822 | make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a" |
| 4823 | msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY clang, arm" |
| 4824 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm" |
| 4825 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY |
Dave Rodgman | d9e8083 | 2023-10-04 17:17:46 +0100 | [diff] [blame] | 4826 | |
Dave Rodgman | d9e8083 | 2023-10-04 17:17:46 +0100 | [diff] [blame] | 4827 | |
Dave Rodgman | 94a634d | 2023-10-10 12:59:29 +0100 | [diff] [blame] | 4828 | # test the deprecated form of the config option |
Dave Rodgman | 94a634d | 2023-10-10 12:59:29 +0100 | [diff] [blame] | 4829 | scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY |
Dave Rodgman | f4b415c | 2023-10-11 16:11:42 +0100 | [diff] [blame] | 4830 | msg "MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY clang, thumb" |
| 4831 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb" |
| 4832 | scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY |
Dave Rodgman | d9e8083 | 2023-10-04 17:17:46 +0100 | [diff] [blame] | 4833 | |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 4834 | scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
Dave Rodgman | f4b415c | 2023-10-11 16:11:42 +0100 | [diff] [blame] | 4835 | msg "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT clang, aarch64" |
| 4836 | make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a" |
| 4837 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
Dave Rodgman | d9e8083 | 2023-10-04 17:17:46 +0100 | [diff] [blame] | 4838 | |
Dave Rodgman | cd65400 | 2023-10-05 09:40:07 +0100 | [diff] [blame] | 4839 | |
Dave Rodgman | 94a634d | 2023-10-10 12:59:29 +0100 | [diff] [blame] | 4840 | # test the deprecated form of the config option |
Dave Rodgman | 94a634d | 2023-10-10 12:59:29 +0100 | [diff] [blame] | 4841 | scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT |
Dave Rodgman | f4b415c | 2023-10-11 16:11:42 +0100 | [diff] [blame] | 4842 | msg "MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT clang, arm" |
| 4843 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -std=c99" |
| 4844 | msg "MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT clang, thumb" |
| 4845 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb" |
| 4846 | scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT |
Dave Rodgman | 94a634d | 2023-10-10 12:59:29 +0100 | [diff] [blame] | 4847 | |
Dave Rodgman | cd65400 | 2023-10-05 09:40:07 +0100 | [diff] [blame] | 4848 | |
Dave Rodgman | f4b415c | 2023-10-11 16:11:42 +0100 | [diff] [blame] | 4849 | # examine the disassembly for presence of SHA instructions |
| 4850 | for opt in MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT; do |
| 4851 | scripts/config.py set ${opt} |
| 4852 | msg "${opt} clang, test A32 crypto instructions built" |
| 4853 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S" |
| 4854 | grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o |
| 4855 | |
| 4856 | msg "${opt} clang, test T32 crypto instructions built" |
| 4857 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S" |
| 4858 | grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o |
| 4859 | |
| 4860 | msg "${opt} clang, test aarch64 crypto instructions built" |
| 4861 | make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S" |
| 4862 | grep -E 'sha256[a-z0-9]+\s+[qv]' library/sha256.o |
| 4863 | scripts/config.py unset ${opt} |
| 4864 | done |
| 4865 | |
| 4866 | |
| 4867 | # examine the disassembly for absence of SHA instructions |
| 4868 | msg "clang, test A32 crypto instructions not built" |
| 4869 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a72+crypto -marm -S" |
| 4870 | not grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o |
| 4871 | |
| 4872 | msg "clang, test T32 crypto instructions not built" |
| 4873 | make -B library/sha256.o CC=clang CFLAGS="--target=arm-linux-gnueabihf -mcpu=cortex-a32+crypto -mthumb -S" |
| 4874 | not grep -E 'sha256[a-z0-9]+.32\s+[qv]' library/sha256.o |
| 4875 | |
| 4876 | msg "clang, test aarch64 crypto instructions not built" |
| 4877 | make -B library/sha256.o CC=clang CFLAGS="--target=aarch64-linux-gnu -march=armv8-a -S" |
| 4878 | not grep -E 'sha256[a-z0-9]+\s+[qv]' library/sha256.o |
Dave Rodgman | d9e8083 | 2023-10-04 17:17:46 +0100 | [diff] [blame] | 4879 | } |
| 4880 | |
Jerry Yu | c935aa6 | 2023-08-03 17:08:27 +0800 | [diff] [blame] | 4881 | # For timebeing, no VIA Padlock platform available. |
| 4882 | component_build_aes_via_padlock () { |
| 4883 | |
| 4884 | msg "AES:VIA PadLock, build with default configuration." |
Jerry Yu | 506759f | 2023-08-16 17:11:22 +0800 | [diff] [blame] | 4885 | scripts/config.py unset MBEDTLS_AESNI_C |
Jerry Yu | c935aa6 | 2023-08-03 17:08:27 +0800 | [diff] [blame] | 4886 | scripts/config.py set MBEDTLS_PADLOCK_C |
| 4887 | scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY |
Dave Rodgman | b90f87b | 2023-12-14 23:27:33 +0000 | [diff] [blame] | 4888 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS" |
Jerry Yu | 506759f | 2023-08-16 17:11:22 +0800 | [diff] [blame] | 4889 | grep -q mbedtls_padlock_has_support ./programs/test/selftest |
Jerry Yu | c935aa6 | 2023-08-03 17:08:27 +0800 | [diff] [blame] | 4890 | |
| 4891 | } |
| 4892 | |
| 4893 | support_build_aes_via_padlock_only () { |
| 4894 | ( [ "$MBEDTLS_TEST_PLATFORM" == "Linux-x86_64" ] || \ |
| 4895 | [ "$MBEDTLS_TEST_PLATFORM" == "Linux-amd64" ] ) && \ |
| 4896 | [ "`dpkg --print-foreign-architectures`" == "i386" ] |
| 4897 | } |
| 4898 | |
Jerry Yu | 193cbc0 | 2023-08-03 17:06:29 +0800 | [diff] [blame] | 4899 | support_build_aes_aesce_armcc () { |
| 4900 | support_build_armcc |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4901 | } |
| 4902 | |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4903 | component_test_aes_only_128_bit_keys () { |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4904 | msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH" |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 4905 | scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4906 | scripts/config.py unset MBEDTLS_PADLOCK_C |
| 4907 | |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 4908 | make CFLAGS='-O2 -Werror -Wall -Wextra' |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 4909 | |
| 4910 | msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH" |
| 4911 | make test |
| 4912 | } |
| 4913 | |
| 4914 | component_test_no_ctr_drbg_aes_only_128_bit_keys () { |
| 4915 | msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C" |
| 4916 | scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4917 | scripts/config.py unset MBEDTLS_CTR_DRBG_C |
| 4918 | scripts/config.py unset MBEDTLS_PADLOCK_C |
| 4919 | |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 4920 | make CC=clang CFLAGS='-Werror -Wall -Wextra' |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4921 | |
| 4922 | msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 4923 | make test |
| 4924 | } |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4925 | |
Hanno Becker | 83ebf78 | 2017-07-07 12:29:15 +0100 | [diff] [blame] | 4926 | component_test_aes_only_128_bit_keys_have_builtins () { |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4927 | msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C" |
| 4928 | scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH |
| 4929 | scripts/config.py unset MBEDTLS_PADLOCK_C |
| 4930 | scripts/config.py unset MBEDTLS_AESNI_C |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 4931 | scripts/config.py unset MBEDTLS_AESCE_C |
| 4932 | |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 4933 | make CFLAGS='-O2 -Werror -Wall -Wextra' |
Gilles Peskine | 3b46cd3 | 2020-02-18 17:56:33 +0100 | [diff] [blame] | 4934 | |
| 4935 | msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C" |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 4936 | make test |
| 4937 | |
| 4938 | msg "selftest: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C" |
| 4939 | programs/test/selftest |
| 4940 | } |
| 4941 | |
| 4942 | component_test_aes_fewer_tables () { |
| 4943 | msg "build: default config with AES_FEWER_TABLES enabled" |
| 4944 | scripts/config.py set MBEDTLS_AES_FEWER_TABLES |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 4945 | make CFLAGS='-O2 -Werror -Wall -Wextra' |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 4946 | |
Gilles Peskine | 7c65216 | 2017-12-11 00:01:40 +0100 | [diff] [blame] | 4947 | msg "test: AES_FEWER_TABLES" |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 4948 | make test |
Andres Amaya Garcia | f4fbdda | 2017-05-08 11:19:19 +0100 | [diff] [blame] | 4949 | } |
| 4950 | |
| 4951 | component_test_aes_rom_tables () { |
| 4952 | msg "build: default config with AES_ROM_TABLES enabled" |
| 4953 | scripts/config.py set MBEDTLS_AES_ROM_TABLES |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 4954 | make CFLAGS='-O2 -Werror -Wall -Wextra' |
Andres Amaya Garcia | f4fbdda | 2017-05-08 11:19:19 +0100 | [diff] [blame] | 4955 | |
| 4956 | msg "test: AES_ROM_TABLES" |
| 4957 | make test |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 4958 | } |
| 4959 | |
Gilles Peskine | 14c3c06 | 2018-01-29 21:25:12 +0100 | [diff] [blame] | 4960 | component_test_aes_fewer_tables_and_rom_tables () { |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 4961 | msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled" |
| 4962 | scripts/config.py set MBEDTLS_AES_FEWER_TABLES |
| 4963 | scripts/config.py set MBEDTLS_AES_ROM_TABLES |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 4964 | make CFLAGS='-O2 -Werror -Wall -Wextra' |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 4965 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 4966 | msg "test: AES_FEWER_TABLES + AES_ROM_TABLES" |
| 4967 | make test |
| 4968 | } |
| 4969 | |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 4970 | # helper for common_block_cipher_no_decrypt() which: |
| 4971 | # - enable/disable the list of config options passed from -s/-u respectively. |
| 4972 | # - build |
| 4973 | # - test for tests_suite_xxx |
| 4974 | # - selftest |
| 4975 | # |
| 4976 | # Usage: helper_block_cipher_no_decrypt_build_test |
| 4977 | # [-s set_opts] [-u unset_opts] [-c cflags] [-l ldflags] [option [...]] |
| 4978 | # Options: -s set_opts the list of config options to enable |
| 4979 | # -u unset_opts the list of config options to disable |
| 4980 | # -c cflags the list of options passed to CFLAGS |
| 4981 | # -l ldflags the list of options passed to LDFLAGS |
| 4982 | helper_block_cipher_no_decrypt_build_test () { |
| 4983 | while [ $# -gt 0 ]; do |
| 4984 | case "$1" in |
| 4985 | -s) |
| 4986 | shift; local set_opts="$1";; |
| 4987 | -u) |
| 4988 | shift; local unset_opts="$1";; |
| 4989 | -c) |
Yanray Wang | 07e663d | 2023-11-13 17:15:39 +0800 | [diff] [blame] | 4990 | shift; local cflags="-Werror -Wall -Wextra $1";; |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 4991 | -l) |
| 4992 | shift; local ldflags="$1";; |
| 4993 | esac |
| 4994 | shift |
| 4995 | done |
| 4996 | set_opts="${set_opts:-}" |
| 4997 | unset_opts="${unset_opts:-}" |
| 4998 | cflags="${cflags:-}" |
| 4999 | ldflags="${ldflags:-}" |
| 5000 | |
Yanray Wang | b2d6e52 | 2023-11-13 16:57:47 +0800 | [diff] [blame] | 5001 | [ -n "$set_opts" ] && echo "Enabling: $set_opts" && scripts/config.py set-all $set_opts |
| 5002 | [ -n "$unset_opts" ] && echo "Disabling: $unset_opts" && scripts/config.py unset-all $unset_opts |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5003 | |
| 5004 | msg "build: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}" |
| 5005 | make clean |
Dave Rodgman | dfe5ce8 | 2023-12-19 11:47:18 +0000 | [diff] [blame] | 5006 | make CFLAGS="-O2 $cflags" LDFLAGS="$ldflags" |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5007 | |
| 5008 | # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA |
| 5009 | not grep mbedtls_aes_setkey_dec library/aes.o |
| 5010 | not grep mbedtls_aria_setkey_dec library/aria.o |
| 5011 | not grep mbedtls_camellia_setkey_dec library/camellia.o |
| 5012 | # Make sure we don't have mbedtls_internal_aes_decrypt in AES |
| 5013 | not grep mbedtls_internal_aes_decrypt library/aes.o |
Yanray Wang | 85b7465 | 2023-11-13 16:48:36 +0800 | [diff] [blame] | 5014 | # Make sure we don't have mbedtls_aesni_inverse_key in AESNI |
| 5015 | not grep mbedtls_aesni_inverse_key library/aesni.o |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5016 | |
| 5017 | msg "test: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}" |
| 5018 | make test |
| 5019 | |
| 5020 | msg "selftest: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}" |
| 5021 | programs/test/selftest |
| 5022 | } |
| 5023 | |
| 5024 | # This is a common configuration function used in: |
| 5025 | # - component_test_block_cipher_no_decrypt_aesni_legacy() |
| 5026 | # - component_test_block_cipher_no_decrypt_aesni_use_psa() |
| 5027 | # in order to test BLOCK_CIPHER_NO_DECRYPT with AESNI intrinsics, |
| 5028 | # AESNI assembly and AES C implementation on x86_64 and with AESNI intrinsics |
| 5029 | # on x86. |
| 5030 | common_block_cipher_no_decrypt () { |
| 5031 | # test AESNI intrinsics |
| 5032 | helper_block_cipher_no_decrypt_build_test \ |
| 5033 | -s "MBEDTLS_AESNI_C" \ |
Yanray Wang | 07e663d | 2023-11-13 17:15:39 +0800 | [diff] [blame] | 5034 | -c "-mpclmul -msse2 -maes" |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5035 | |
| 5036 | # test AESNI assembly |
| 5037 | helper_block_cipher_no_decrypt_build_test \ |
| 5038 | -s "MBEDTLS_AESNI_C" \ |
Yanray Wang | 07e663d | 2023-11-13 17:15:39 +0800 | [diff] [blame] | 5039 | -c "-mno-pclmul -mno-sse2 -mno-aes" |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5040 | |
| 5041 | # test AES C implementation |
| 5042 | helper_block_cipher_no_decrypt_build_test \ |
Yanray Wang | 07e663d | 2023-11-13 17:15:39 +0800 | [diff] [blame] | 5043 | -u "MBEDTLS_AESNI_C" |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5044 | |
| 5045 | # test AESNI intrinsics for i386 target |
| 5046 | helper_block_cipher_no_decrypt_build_test \ |
| 5047 | -s "MBEDTLS_AESNI_C" \ |
Yanray Wang | 07e663d | 2023-11-13 17:15:39 +0800 | [diff] [blame] | 5048 | -c "-m32 -mpclmul -msse2 -maes" \ |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5049 | -l "-m32" |
| 5050 | } |
| 5051 | |
Yanray Wang | 3ae1199 | 2023-11-13 17:32:09 +0800 | [diff] [blame] | 5052 | # This is a configuration function used in component_test_block_cipher_no_decrypt_xxx: |
| 5053 | # usage: 0: no PSA crypto configuration |
| 5054 | # 1: use PSA crypto configuration |
| 5055 | config_block_cipher_no_decrypt () { |
| 5056 | use_psa=$1 |
| 5057 | |
Yanray Wang | 6611139 | 2023-10-31 18:54:54 +0800 | [diff] [blame] | 5058 | scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT |
Yanray Wang | a8ac23a | 2023-05-15 18:03:10 +0800 | [diff] [blame] | 5059 | scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC |
| 5060 | scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS |
Yanray Wang | 3caaf0c | 2023-09-07 17:50:14 +0800 | [diff] [blame] | 5061 | scripts/config.py unset MBEDTLS_DES_C |
Yanray Wang | a8ac23a | 2023-05-15 18:03:10 +0800 | [diff] [blame] | 5062 | scripts/config.py unset MBEDTLS_NIST_KW_C |
| 5063 | |
Yanray Wang | 3ae1199 | 2023-11-13 17:32:09 +0800 | [diff] [blame] | 5064 | if [ "$use_psa" -eq 1 ]; then |
| 5065 | # Enable support for cryptographic mechanisms through the PSA API. |
| 5066 | # Note: XTS, KW are not yet supported via the PSA API in Mbed TLS. |
| 5067 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 5068 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING |
| 5069 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7 |
| 5070 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING |
| 5071 | scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_DES |
| 5072 | fi |
| 5073 | } |
| 5074 | |
| 5075 | component_test_block_cipher_no_decrypt_aesni () { |
Dave Rodgman | c393222 | 2023-12-19 17:51:51 +0000 | [diff] [blame] | 5076 | # This consistently causes an llvm crash on clang 3.8, so use gcc |
| 5077 | export CC=gcc |
Yanray Wang | 3ae1199 | 2023-11-13 17:32:09 +0800 | [diff] [blame] | 5078 | config_block_cipher_no_decrypt 0 |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5079 | common_block_cipher_no_decrypt |
Yanray Wang | a8ac23a | 2023-05-15 18:03:10 +0800 | [diff] [blame] | 5080 | } |
| 5081 | |
Yanray Wang | f149640 | 2023-11-01 18:55:13 +0800 | [diff] [blame] | 5082 | component_test_block_cipher_no_decrypt_aesni_use_psa () { |
Dave Rodgman | c393222 | 2023-12-19 17:51:51 +0000 | [diff] [blame] | 5083 | # This consistently causes an llvm crash on clang 3.8, so use gcc |
| 5084 | export CC=gcc |
Yanray Wang | 3ae1199 | 2023-11-13 17:32:09 +0800 | [diff] [blame] | 5085 | config_block_cipher_no_decrypt 1 |
Yanray Wang | 49cd4b5 | 2023-11-10 11:58:37 +0800 | [diff] [blame] | 5086 | common_block_cipher_no_decrypt |
Yanray Wang | 7821904 | 2023-08-31 15:00:57 +0800 | [diff] [blame] | 5087 | } |
| 5088 | |
Yanray Wang | 6611139 | 2023-10-31 18:54:54 +0800 | [diff] [blame] | 5089 | support_test_block_cipher_no_decrypt_aesce_armcc () { |
Yanray Wang | 799bd84 | 2023-11-10 12:21:35 +0800 | [diff] [blame] | 5090 | support_build_armcc |
Yanray Wang | bf66ef9 | 2023-08-31 14:47:01 +0800 | [diff] [blame] | 5091 | } |
| 5092 | |
Yanray Wang | 6611139 | 2023-10-31 18:54:54 +0800 | [diff] [blame] | 5093 | component_test_block_cipher_no_decrypt_aesce_armcc () { |
Yanray Wang | bf66ef9 | 2023-08-31 14:47:01 +0800 | [diff] [blame] | 5094 | scripts/config.py baremetal |
| 5095 | |
| 5096 | # armc[56] don't support SHA-512 intrinsics |
| 5097 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
| 5098 | |
| 5099 | # Stop armclang warning about feature detection for A64_CRYPTO. |
| 5100 | # With this enabled, the library does build correctly under armclang, |
| 5101 | # but in baremetal builds (as tested here), feature detection is |
| 5102 | # unavailable, and the user is notified via a #warning. So enabling |
| 5103 | # this feature would prevent us from building with -Werror on |
| 5104 | # armclang. Tracked in #7198. |
| 5105 | scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT |
| 5106 | scripts/config.py set MBEDTLS_HAVE_ASM |
| 5107 | |
Yanray Wang | 3ae1199 | 2023-11-13 17:32:09 +0800 | [diff] [blame] | 5108 | config_block_cipher_no_decrypt 1 |
Yanray Wang | bf66ef9 | 2023-08-31 14:47:01 +0800 | [diff] [blame] | 5109 | |
| 5110 | # test AESCE baremetal build |
| 5111 | scripts/config.py set MBEDTLS_AESCE_C |
Yanray Wang | 6611139 | 2023-10-31 18:54:54 +0800 | [diff] [blame] | 5112 | msg "build: default config + BLOCK_CIPHER_NO_DECRYPT with AESCE" |
Yanray Wang | c434791 | 2023-11-14 10:10:49 +0800 | [diff] [blame] | 5113 | armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto -Werror -Wall -Wextra" |
Yanray Wang | bf66ef9 | 2023-08-31 14:47:01 +0800 | [diff] [blame] | 5114 | |
Yanray Wang | ef1b04d | 2023-09-08 11:09:26 +0800 | [diff] [blame] | 5115 | # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA |
| 5116 | not grep mbedtls_aes_setkey_dec library/aes.o |
| 5117 | not grep mbedtls_aria_setkey_dec library/aria.o |
| 5118 | not grep mbedtls_camellia_setkey_dec library/camellia.o |
| 5119 | # Make sure we don't have mbedtls_internal_aes_decrypt in AES |
| 5120 | not grep mbedtls_internal_aes_decrypt library/aes.o |
Yanray Wang | 85b7465 | 2023-11-13 16:48:36 +0800 | [diff] [blame] | 5121 | # Make sure we don't have mbedtls_aesce_inverse_key and aesce_decrypt_block in AESCE |
Yanray Wang | 4cd1b16 | 2023-11-10 12:18:29 +0800 | [diff] [blame] | 5122 | not grep mbedtls_aesce_inverse_key library/aesce.o |
| 5123 | not grep aesce_decrypt_block library/aesce.o |
Yanray Wang | bf66ef9 | 2023-08-31 14:47:01 +0800 | [diff] [blame] | 5124 | } |
| 5125 | |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 5126 | component_test_ctr_drbg_aes_256_sha_256 () { |
| 5127 | msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
| 5128 | scripts/config.py full |
| 5129 | scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 5130 | scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 5131 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 5132 | make |
| 5133 | |
| 5134 | msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
| 5135 | make test |
| 5136 | } |
| 5137 | |
| 5138 | component_test_ctr_drbg_aes_128_sha_512 () { |
| 5139 | msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)" |
Gilles Peskine | 3b46cd3 | 2020-02-18 17:56:33 +0100 | [diff] [blame] | 5140 | scripts/config.py full |
| 5141 | scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 5142 | scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 5143 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 5144 | make |
| 5145 | |
| 5146 | msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)" |
| 5147 | make test |
| 5148 | } |
| 5149 | |
| 5150 | component_test_ctr_drbg_aes_128_sha_256 () { |
| 5151 | msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
Gilles Peskine | 3b46cd3 | 2020-02-18 17:56:33 +0100 | [diff] [blame] | 5152 | scripts/config.py full |
| 5153 | scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| 5154 | scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY |
| 5155 | scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 5156 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Gilles Peskine | 592f591 | 2019-10-07 18:49:32 +0200 | [diff] [blame] | 5157 | make |
| 5158 | |
| 5159 | msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)" |
| 5160 | make test |
| 5161 | } |
| 5162 | |
Gilles Peskine | f96aefe | 2019-07-24 14:58:38 +0200 | [diff] [blame] | 5163 | component_test_se_default () { |
| 5164 | msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5165 | scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C |
Gilles Peskine | 004206c | 2019-10-21 17:11:33 +0200 | [diff] [blame] | 5166 | make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS" |
Gilles Peskine | f96aefe | 2019-07-24 14:58:38 +0200 | [diff] [blame] | 5167 | |
| 5168 | msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C" |
| 5169 | make test |
| 5170 | } |
| 5171 | |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 5172 | component_test_psa_crypto_drivers () { |
Gilles Peskine | 1997f30 | 2023-07-26 18:45:20 +0200 | [diff] [blame] | 5173 | msg "build: full + test drivers dispatching to builtins" |
Steven Cooreman | 753f973 | 2021-03-15 11:38:44 +0100 | [diff] [blame] | 5174 | scripts/config.py full |
Gilles Peskine | 1997f30 | 2023-07-26 18:45:20 +0200 | [diff] [blame] | 5175 | scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG |
Gilles Peskine | 3587dfd | 2021-09-20 19:20:04 +0200 | [diff] [blame] | 5176 | loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL" |
| 5177 | loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'" |
Ronald Cron | 17b3afc | 2020-12-10 18:17:09 +0100 | [diff] [blame] | 5178 | loc_cflags="${loc_cflags} -I../tests/include -O2" |
| 5179 | |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5180 | make CC=$ASAN_CC CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS" |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 5181 | |
Gilles Peskine | 1997f30 | 2023-07-26 18:45:20 +0200 | [diff] [blame] | 5182 | msg "test: full + test drivers dispatching to builtins" |
Steven Cooreman | d57203d | 2020-07-16 20:28:59 +0200 | [diff] [blame] | 5183 | make test |
| 5184 | } |
| 5185 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5186 | component_test_make_shared () { |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5187 | msg "build/test: make shared" # ~ 40s |
Andrzej Kurek | 232e8f9 | 2019-10-03 03:18:01 -0400 | [diff] [blame] | 5188 | make SHARED=1 all check |
Gilles Peskine | 56c0161 | 2019-07-03 20:43:32 +0200 | [diff] [blame] | 5189 | ldd programs/util/strerror | grep libmbedcrypto |
Gilles Peskine | ca14459 | 2021-11-04 12:52:14 +0100 | [diff] [blame] | 5190 | programs/test/dlopen_demo.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5191 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5192 | |
Gilles Peskine | cf74050 | 2019-07-03 20:43:05 +0200 | [diff] [blame] | 5193 | component_test_cmake_shared () { |
| 5194 | msg "build/test: cmake shared" # ~ 2min |
| 5195 | cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On . |
| 5196 | make |
Gilles Peskine | 56c0161 | 2019-07-03 20:43:32 +0200 | [diff] [blame] | 5197 | ldd programs/util/strerror | grep libmbedcrypto |
Gilles Peskine | cf74050 | 2019-07-03 20:43:05 +0200 | [diff] [blame] | 5198 | make test |
Gilles Peskine | ca14459 | 2021-11-04 12:52:14 +0100 | [diff] [blame] | 5199 | programs/test/dlopen_demo.sh |
Gilles Peskine | cf74050 | 2019-07-03 20:43:05 +0200 | [diff] [blame] | 5200 | } |
| 5201 | |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 5202 | test_build_opt () { |
| 5203 | info=$1 cc=$2; shift 2 |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5204 | $cc --version |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 5205 | for opt in "$@"; do |
| 5206 | msg "build/test: $cc $opt, $info" # ~ 30s |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5207 | make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror" |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 5208 | # We're confident enough in compilers to not run _all_ the tests, |
| 5209 | # but at least run the unit tests. In particular, runs with |
| 5210 | # optimizations use inline assembly whereas runs with -O0 |
| 5211 | # skip inline assembly. |
| 5212 | make test # ~30s |
| 5213 | make clean |
| 5214 | done |
| 5215 | } |
| 5216 | |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5217 | # For FreeBSD we invoke the function by name so this condition is added |
| 5218 | # to disable the existing test_clang_opt function for linux. |
| 5219 | if [[ $(uname) != "Linux" ]]; then |
| 5220 | component_test_clang_opt () { |
| 5221 | scripts/config.py full |
| 5222 | test_build_opt 'full config' clang -O0 -Os -O2 |
| 5223 | } |
| 5224 | fi |
| 5225 | |
| 5226 | component_test_clang_latest_opt () { |
Manuel Pégourié-Gonnard | 68192fc | 2020-03-04 10:34:47 +0100 | [diff] [blame] | 5227 | scripts/config.py full |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5228 | test_build_opt 'full config' "$CLANG_LATEST" -O0 -Os -O2 |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5229 | } |
| 5230 | support_test_clang_latest_opt () { |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5231 | type "$CLANG_LATEST" >/dev/null 2>/dev/null |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 5232 | } |
| 5233 | |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5234 | component_test_clang_earliest_opt () { |
Manuel Pégourié-Gonnard | 68192fc | 2020-03-04 10:34:47 +0100 | [diff] [blame] | 5235 | scripts/config.py full |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5236 | test_build_opt 'full config' "$CLANG_EARLIEST" -O0 |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5237 | } |
| 5238 | support_test_clang_earliest_opt () { |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5239 | type "$CLANG_EARLIEST" >/dev/null 2>/dev/null |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5240 | } |
| 5241 | |
| 5242 | component_test_gcc_latest_opt () { |
| 5243 | scripts/config.py full |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5244 | test_build_opt 'full config' "$GCC_LATEST" -O0 -Os -O2 |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5245 | } |
| 5246 | support_test_gcc_latest_opt () { |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5247 | type "$GCC_LATEST" >/dev/null 2>/dev/null |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5248 | } |
| 5249 | |
| 5250 | component_test_gcc_earliest_opt () { |
| 5251 | scripts/config.py full |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5252 | test_build_opt 'full config' "$GCC_EARLIEST" -O0 |
Gowtham Suresh Kumar | a12baf8 | 2023-07-19 08:39:20 +0100 | [diff] [blame] | 5253 | } |
| 5254 | support_test_gcc_earliest_opt () { |
Gowtham Suresh Kumar | 6f1977b | 2023-07-28 17:04:47 +0100 | [diff] [blame] | 5255 | type "$GCC_EARLIEST" >/dev/null 2>/dev/null |
Gilles Peskine | ec10bf1 | 2019-09-20 19:56:06 +0200 | [diff] [blame] | 5256 | } |
| 5257 | |
Gilles Peskine | abf9b4d | 2019-07-03 20:42:16 +0200 | [diff] [blame] | 5258 | component_build_mbedtls_config_file () { |
| 5259 | msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s |
Gilles Peskine | 2003c2f | 2022-04-07 20:55:57 +0200 | [diff] [blame] | 5260 | scripts/config.py -w full_config.h full |
Gilles Peskine | abf9b4d | 2019-07-03 20:42:16 +0200 | [diff] [blame] | 5261 | echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H" |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5262 | make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'" |
Gilles Peskine | 45e680e | 2022-04-13 23:23:21 +0200 | [diff] [blame] | 5263 | # Make sure this feature is enabled. We'll disable it in the next phase. |
Gilles Peskine | e10df77 | 2022-04-07 21:06:41 +0200 | [diff] [blame] | 5264 | programs/test/query_compile_time_config MBEDTLS_NIST_KW_C |
| 5265 | make clean |
| 5266 | |
| 5267 | msg "build: make with MBEDTLS_CONFIG_FILE + MBEDTLS_USER_CONFIG_FILE" |
| 5268 | # In the user config, disable one feature (for simplicity, pick a feature |
| 5269 | # that nothing else depends on). |
| 5270 | echo '#undef MBEDTLS_NIST_KW_C' >user_config.h |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5271 | make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"' -DMBEDTLS_USER_CONFIG_FILE='\"user_config.h\"'" |
Gilles Peskine | e10df77 | 2022-04-07 21:06:41 +0200 | [diff] [blame] | 5272 | not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C |
| 5273 | |
| 5274 | rm -f user_config.h full_config.h |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5275 | } |
| 5276 | |
Gilles Peskine | 7d904e7 | 2022-04-07 21:59:14 +0200 | [diff] [blame] | 5277 | component_build_psa_config_file () { |
| 5278 | msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE" # ~40s |
| 5279 | scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG |
| 5280 | cp "$CRYPTO_CONFIG_H" psa_test_config.h |
| 5281 | echo '#error "MBEDTLS_PSA_CRYPTO_CONFIG_FILE is not working"' >"$CRYPTO_CONFIG_H" |
| 5282 | make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"'" |
Gilles Peskine | 45e680e | 2022-04-13 23:23:21 +0200 | [diff] [blame] | 5283 | # Make sure this feature is enabled. We'll disable it in the next phase. |
Gilles Peskine | 7d904e7 | 2022-04-07 21:59:14 +0200 | [diff] [blame] | 5284 | programs/test/query_compile_time_config MBEDTLS_CMAC_C |
| 5285 | make clean |
| 5286 | |
| 5287 | msg "build: make with MBEDTLS_PSA_CRYPTO_CONFIG_FILE + MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE" # ~40s |
| 5288 | # In the user config, disable one feature, which will reflect on the |
| 5289 | # mbedtls configuration so we can query it with query_compile_time_config. |
| 5290 | echo '#undef PSA_WANT_ALG_CMAC' >psa_user_config.h |
| 5291 | scripts/config.py unset MBEDTLS_CMAC_C |
| 5292 | make CFLAGS="-I '$PWD' -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE='\"psa_test_config.h\"' -DMBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE='\"psa_user_config.h\"'" |
| 5293 | not programs/test/query_compile_time_config MBEDTLS_CMAC_C |
| 5294 | |
| 5295 | rm -f psa_test_config.h psa_user_config.h |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5296 | } |
| 5297 | |
Gilles Peskine | df6e84a | 2023-02-22 22:09:51 +0100 | [diff] [blame] | 5298 | component_build_psa_alt_headers () { |
| 5299 | msg "build: make with PSA alt headers" # ~20s |
| 5300 | |
| 5301 | # Generate alternative versions of the substitutable headers with the |
| 5302 | # same content except different include guards. |
| 5303 | make -C tests include/alt-extra/psa/crypto_platform_alt.h include/alt-extra/psa/crypto_struct_alt.h |
| 5304 | |
| 5305 | # Build the library and some programs. |
| 5306 | # Don't build the fuzzers to avoid having to go through hoops to set |
| 5307 | # a correct include path for programs/fuzz/Makefile. |
| 5308 | make CFLAGS="-I ../tests/include/alt-extra -DMBEDTLS_PSA_CRYPTO_PLATFORM_FILE='\"psa/crypto_platform_alt.h\"' -DMBEDTLS_PSA_CRYPTO_STRUCT_FILE='\"psa/crypto_struct_alt.h\"'" lib |
| 5309 | make -C programs -o fuzz CFLAGS="-I ../tests/include/alt-extra -DMBEDTLS_PSA_CRYPTO_PLATFORM_FILE='\"psa/crypto_platform_alt.h\"' -DMBEDTLS_PSA_CRYPTO_STRUCT_FILE='\"psa/crypto_struct_alt.h\"'" |
| 5310 | |
| 5311 | # Check that we're getting the alternative include guards and not the |
| 5312 | # original include guards. |
| 5313 | programs/test/query_included_headers | grep -x PSA_CRYPTO_PLATFORM_ALT_H |
| 5314 | programs/test/query_included_headers | grep -x PSA_CRYPTO_STRUCT_ALT_H |
| 5315 | programs/test/query_included_headers | not grep -x PSA_CRYPTO_PLATFORM_H |
| 5316 | programs/test/query_included_headers | not grep -x PSA_CRYPTO_STRUCT_H |
| 5317 | } |
| 5318 | |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5319 | component_test_m32_no_asm () { |
| 5320 | # Build without assembly, so as to use portable C code (in a 32-bit |
Gilles Peskine | 77f0535 | 2021-10-07 19:27:16 +0200 | [diff] [blame] | 5321 | # build) and not the i386-specific inline assembly. |
Dave Rodgman | a2cf240 | 2023-12-15 11:04:13 +0000 | [diff] [blame] | 5322 | # |
| 5323 | # Note that we require gcc, because clang Asan builds fail to link for |
| 5324 | # this target (cannot find libclang_rt.lsan-i386.a - this is a known clang issue). |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5325 | msg "build: i386, make, gcc, no asm (ASan build)" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5326 | scripts/config.py full |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5327 | scripts/config.py unset MBEDTLS_HAVE_ASM |
| 5328 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Pengyu Lv | 1322613 | 2023-10-16 14:03:29 +0800 | [diff] [blame] | 5329 | scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32 |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5330 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS" |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5331 | |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5332 | msg "test: i386, make, gcc, no asm (ASan build)" |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 5333 | make test |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5334 | } |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5335 | support_test_m32_no_asm () { |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 5336 | case $(uname -m) in |
Pengyu Lv | c92df3b | 2022-10-21 10:50:26 +0000 | [diff] [blame] | 5337 | amd64|x86_64) true;; |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 5338 | *) false;; |
| 5339 | esac |
| 5340 | } |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 5341 | |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 5342 | component_test_m32_o2 () { |
| 5343 | # Build with optimization, to use the i386 specific inline assembly |
| 5344 | # and go faster for tests. |
| 5345 | msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5346 | scripts/config.py full |
Pengyu Lv | 1322613 | 2023-10-16 14:03:29 +0800 | [diff] [blame] | 5347 | scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32 |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5348 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS" |
Simon Butcher | 8e6a22a | 2018-07-20 21:27:33 +0100 | [diff] [blame] | 5349 | |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 5350 | msg "test: i386, make, gcc -O2 (ASan build)" |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5351 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 5352 | |
Gilles Peskine | ff0aee0 | 2021-10-05 09:36:03 +0200 | [diff] [blame] | 5353 | msg "test ssl-opt.sh, i386, make, gcc-O2" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5354 | tests/ssl-opt.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5355 | } |
Gilles Peskine | cf52222 | 2021-10-07 19:25:29 +0200 | [diff] [blame] | 5356 | support_test_m32_o2 () { |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5357 | support_test_m32_no_asm "$@" |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 5358 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5359 | |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 5360 | component_test_m32_everest () { |
| 5361 | msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5362 | scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED |
Pengyu Lv | 1322613 | 2023-10-16 14:03:29 +0800 | [diff] [blame] | 5363 | scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32 |
Dave Rodgman | b90f87b | 2023-12-14 23:27:33 +0000 | [diff] [blame] | 5364 | make CC=gcc CFLAGS="$ASAN_CFLAGS -m32" LDFLAGS="-m32 $ASAN_CFLAGS" |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 5365 | |
| 5366 | msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s |
| 5367 | make test |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 5368 | |
| 5369 | msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5370 | tests/ssl-opt.sh -f ECDH |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 5371 | |
| 5372 | msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min |
| 5373 | # Exclude some symmetric ciphers that are redundant here to gain time. |
Manuel Pégourié-Gonnard | 296787f | 2022-04-06 13:28:27 +0200 | [diff] [blame] | 5374 | tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA' |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 5375 | } |
| 5376 | support_test_m32_everest () { |
Dave Rodgman | 852de3c | 2023-12-14 14:46:45 +0000 | [diff] [blame] | 5377 | support_test_m32_no_asm "$@" |
Gilles Peskine | 0c6b799 | 2019-04-12 20:29:48 +0200 | [diff] [blame] | 5378 | } |
| 5379 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5380 | component_test_mx32 () { |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5381 | msg "build: 64-bit ILP32, make, gcc" # ~ 30s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5382 | scripts/config.py full |
Dave Rodgman | 84125a1 | 2024-01-02 11:42:38 +0000 | [diff] [blame] | 5383 | make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -mx32' LDFLAGS='-mx32' |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5384 | |
| 5385 | msg "test: 64-bit ILP32, make, gcc" |
| 5386 | make test |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5387 | } |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 5388 | support_test_mx32 () { |
| 5389 | case $(uname -m) in |
| 5390 | amd64|x86_64) true;; |
| 5391 | *) false;; |
| 5392 | esac |
| 5393 | } |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 5394 | |
Peter Kolbus | 60c6da2 | 2018-12-27 06:59:04 -0600 | [diff] [blame] | 5395 | component_test_min_mpi_window_size () { |
| 5396 | msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5397 | scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1 |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 5398 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Peter Kolbus | 60c6da2 | 2018-12-27 06:59:04 -0600 | [diff] [blame] | 5399 | make |
| 5400 | |
| 5401 | msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s |
| 5402 | make test |
| 5403 | } |
| 5404 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5405 | component_test_have_int32 () { |
| 5406 | msg "build: gcc, force 32-bit bignum limbs" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5407 | scripts/config.py unset MBEDTLS_HAVE_ASM |
| 5408 | scripts/config.py unset MBEDTLS_AESNI_C |
| 5409 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Jerry Yu | e51eddc | 2023-01-11 14:16:08 +0800 | [diff] [blame] | 5410 | scripts/config.py unset MBEDTLS_AESCE_C |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 5411 | make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32' |
Andres Amaya Garcia | 84e6ce8 | 2017-05-04 11:35:51 +0100 | [diff] [blame] | 5412 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5413 | msg "test: gcc, force 32-bit bignum limbs" |
| 5414 | make test |
| 5415 | } |
Andres Amaya Garcia | fe843a3 | 2017-07-20 13:21:34 +0100 | [diff] [blame] | 5416 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5417 | component_test_have_int64 () { |
| 5418 | msg "build: gcc, force 64-bit bignum limbs" |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5419 | scripts/config.py unset MBEDTLS_HAVE_ASM |
| 5420 | scripts/config.py unset MBEDTLS_AESNI_C |
| 5421 | scripts/config.py unset MBEDTLS_PADLOCK_C |
Jerry Yu | e51eddc | 2023-01-11 14:16:08 +0800 | [diff] [blame] | 5422 | scripts/config.py unset MBEDTLS_AESCE_C |
Dave Rodgman | d8d6451 | 2023-12-19 12:20:21 +0000 | [diff] [blame] | 5423 | make CC=gcc CFLAGS='-O2 -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64' |
Gilles Peskine | 14c3c06 | 2018-01-29 21:25:12 +0100 | [diff] [blame] | 5424 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5425 | msg "test: gcc, force 64-bit bignum limbs" |
| 5426 | make test |
| 5427 | } |
Manuel Pégourié-Gonnard | edb2dc9 | 2015-02-10 14:36:31 +0000 | [diff] [blame] | 5428 | |
Gabor Mezei | e256cc1 | 2023-07-26 17:28:48 +0200 | [diff] [blame] | 5429 | component_test_have_int32_cmake_new_bignum () { |
| 5430 | msg "build: gcc, force 32-bit bignum limbs, new bignum interface, test hooks (ASan build)" |
| 5431 | scripts/config.py unset MBEDTLS_HAVE_ASM |
| 5432 | scripts/config.py unset MBEDTLS_AESNI_C |
| 5433 | scripts/config.py unset MBEDTLS_PADLOCK_C |
| 5434 | scripts/config.py unset MBEDTLS_AESCE_C |
| 5435 | scripts/config.py set MBEDTLS_TEST_HOOKS |
Janos Follath | 2f04582 | 2023-07-31 10:57:16 +0100 | [diff] [blame] | 5436 | scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT |
Janos Follath | f3135af | 2023-07-31 10:07:57 +0100 | [diff] [blame] | 5437 | make CC=gcc CFLAGS="$ASAN_CFLAGS -Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32" LDFLAGS="$ASAN_CFLAGS" |
Gabor Mezei | e256cc1 | 2023-07-26 17:28:48 +0200 | [diff] [blame] | 5438 | |
| 5439 | msg "test: gcc, force 32-bit bignum limbs, new bignum interface, test hooks (ASan build)" |
| 5440 | make test |
| 5441 | } |
| 5442 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5443 | component_test_no_udbl_division () { |
| 5444 | msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5445 | scripts/config.py full |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5446 | scripts/config.py set MBEDTLS_NO_UDBL_DIVISION |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5447 | make CFLAGS='-Werror -O1' |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5448 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5449 | msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s |
| 5450 | make test |
| 5451 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5452 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5453 | component_test_no_64bit_multiplication () { |
| 5454 | msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5455 | scripts/config.py full |
Gilles Peskine | 3bdd412 | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5456 | scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5457 | make CFLAGS='-Werror -O1' |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5458 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5459 | msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s |
| 5460 | make test |
| 5461 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5462 | |
Gilles Peskine | 3809f5f | 2020-11-09 15:40:05 +0100 | [diff] [blame] | 5463 | component_test_no_strings () { |
| 5464 | msg "build: no strings" # ~10s |
| 5465 | scripts/config.py full |
| 5466 | # Disable options that activate a large amount of string constants. |
| 5467 | scripts/config.py unset MBEDTLS_DEBUG_C |
| 5468 | scripts/config.py unset MBEDTLS_ERROR_C |
| 5469 | scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY |
| 5470 | scripts/config.py unset MBEDTLS_VERSION_FEATURES |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5471 | make CFLAGS='-Werror -Os' |
Gilles Peskine | 3809f5f | 2020-11-09 15:40:05 +0100 | [diff] [blame] | 5472 | |
| 5473 | msg "test: no strings" # ~ 10s |
| 5474 | make test |
| 5475 | } |
| 5476 | |
Hanno Becker | c5722d1 | 2020-10-09 11:10:42 +0100 | [diff] [blame] | 5477 | component_test_no_x509_info () { |
| 5478 | msg "build: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s |
| 5479 | scripts/config.pl full |
| 5480 | scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests |
| 5481 | scripts/config.pl set MBEDTLS_X509_REMOVE_INFO |
Gilles Peskine | 21570cf | 2023-12-22 11:49:50 +0100 | [diff] [blame] | 5482 | make CFLAGS='-Werror -O2' |
Hanno Becker | c5722d1 | 2020-10-09 11:10:42 +0100 | [diff] [blame] | 5483 | |
| 5484 | msg "test: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s |
| 5485 | make test |
| 5486 | |
| 5487 | msg "test: ssl-opt.sh, full + MBEDTLS_X509_REMOVE_INFO" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5488 | tests/ssl-opt.sh |
Hanno Becker | c5722d1 | 2020-10-09 11:10:42 +0100 | [diff] [blame] | 5489 | } |
| 5490 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5491 | component_build_arm_none_eabi_gcc () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5492 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5493 | scripts/config.py baremetal |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 5494 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 5495 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5496 | msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" |
Manuel Pégourié-Gonnard | a14b8f0 | 2023-03-28 12:49:39 +0200 | [diff] [blame] | 5497 | ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5498 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5499 | |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 5500 | component_build_arm_linux_gnueabi_gcc_arm5vte () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5501 | msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5502 | scripts/config.py baremetal |
Gilles Peskine | 2c897d7 | 2019-08-09 16:05:05 +0200 | [diff] [blame] | 5503 | # Build for a target platform that's close to what Debian uses |
| 5504 | # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort). |
Dave Rodgman | 017a199 | 2022-03-31 14:07:01 +0100 | [diff] [blame] | 5505 | # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments. |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 5506 | # Build everything including programs, see for example |
Dave Rodgman | 017a199 | 2022-03-31 14:07:01 +0100 | [diff] [blame] | 5507 | # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720 |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 5508 | make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' |
| 5509 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5510 | msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug" |
Manuel Pégourié-Gonnard | a14b8f0 | 2023-03-28 12:49:39 +0200 | [diff] [blame] | 5511 | ${ARM_LINUX_GNUEABI_GCC_PREFIX}size -t library/*.o |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 5512 | } |
| 5513 | support_build_arm_linux_gnueabi_gcc_arm5vte () { |
| 5514 | type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1 |
| 5515 | } |
| 5516 | |
| 5517 | component_build_arm_none_eabi_gcc_arm5vte () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5518 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s |
Manuel Pégourié-Gonnard | 3a6c769 | 2020-08-18 10:28:51 +0200 | [diff] [blame] | 5519 | scripts/config.py baremetal |
| 5520 | # This is an imperfect substitute for |
| 5521 | # component_build_arm_linux_gnueabi_gcc_arm5vte |
Manuel Pégourié-Gonnard | ae505ee | 2021-07-06 09:44:59 +0200 | [diff] [blame] | 5522 | # in case the gcc-arm-linux-gnueabi toolchain is not available |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 5523 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 5524 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5525 | msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug" |
Manuel Pégourié-Gonnard | a14b8f0 | 2023-03-28 12:49:39 +0200 | [diff] [blame] | 5526 | ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o |
Gilles Peskine | 93e4e03 | 2019-08-05 11:34:25 +0200 | [diff] [blame] | 5527 | } |
| 5528 | |
Gilles Peskine | 6e2fb86 | 2020-04-30 23:00:53 +0200 | [diff] [blame] | 5529 | component_build_arm_none_eabi_gcc_m0plus () { |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5530 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s |
| 5531 | scripts/config.py baremetal_size |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 5532 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 5533 | |
Gilles Peskine | e36fe81 | 2021-09-01 20:00:33 +0200 | [diff] [blame] | 5534 | msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size" |
Manuel Pégourié-Gonnard | a14b8f0 | 2023-03-28 12:49:39 +0200 | [diff] [blame] | 5535 | ${ARM_NONE_EABI_GCC_PREFIX}size -t library/*.o |
Manuel Pégourié-Gonnard | 67f8037 | 2023-06-06 13:01:18 +0200 | [diff] [blame] | 5536 | for lib in library/*.a; do |
| 5537 | echo "$lib:" |
| 5538 | ${ARM_NONE_EABI_GCC_PREFIX}size -t $lib | grep TOTALS |
| 5539 | done |
Gilles Peskine | 6e2fb86 | 2020-04-30 23:00:53 +0200 | [diff] [blame] | 5540 | } |
| 5541 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5542 | component_build_arm_none_eabi_gcc_no_udbl_division () { |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 5543 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5544 | scripts/config.py baremetal |
| 5545 | scripts/config.py set MBEDTLS_NO_UDBL_DIVISION |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 5546 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5547 | echo "Checking that software 64-bit division is not required" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5548 | not grep __aeabi_uldiv library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5549 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5550 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5551 | component_build_arm_none_eabi_gcc_no_64bit_multiplication () { |
Gilles Peskine | 6d06134 | 2020-04-30 18:19:32 +0200 | [diff] [blame] | 5552 | msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5553 | scripts/config.py baremetal |
| 5554 | scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION |
Gilles Peskine | aeedd74 | 2020-09-02 11:03:04 +0200 | [diff] [blame] | 5555 | make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5556 | echo "Checking that software 64-bit multiplication is not required" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5557 | not grep __aeabi_lmul library/*.o |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5558 | } |
Manuel Pégourié-Gonnard | 2adb375 | 2018-06-07 10:51:44 +0200 | [diff] [blame] | 5559 | |
Dave Rodgman | 8c315f2 | 2023-06-02 10:26:24 -0400 | [diff] [blame] | 5560 | component_build_arm_clang_thumb () { |
| 5561 | # ~ 30s |
| 5562 | |
| 5563 | scripts/config.py baremetal |
| 5564 | |
| 5565 | msg "build: clang thumb 2, make" |
| 5566 | make clean |
| 5567 | make CC="clang" CFLAGS='-std=c99 -Werror -Os --target=arm-linux-gnueabihf -march=armv7-m -mthumb' lib |
| 5568 | |
| 5569 | # Some Thumb 1 asm is sensitive to optimisation level, so test both -O0 and -Os |
| 5570 | msg "build: clang thumb 1 -O0, make" |
| 5571 | make clean |
| 5572 | make CC="clang" CFLAGS='-std=c99 -Werror -O0 --target=arm-linux-gnueabihf -mcpu=arm1136j-s -mthumb' lib |
| 5573 | |
| 5574 | msg "build: clang thumb 1 -Os, make" |
| 5575 | make clean |
| 5576 | make CC="clang" CFLAGS='-std=c99 -Werror -Os --target=arm-linux-gnueabihf -mcpu=arm1136j-s -mthumb' lib |
| 5577 | } |
| 5578 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5579 | component_build_armcc () { |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 5580 | msg "build: ARM Compiler 5" |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5581 | scripts/config.py baremetal |
Tom Cosgrove | 87fbfb5 | 2022-03-15 10:51:52 +0000 | [diff] [blame] | 5582 | # armc[56] don't support SHA-512 intrinsics |
| 5583 | scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT |
Dave Rodgman | 2f386c5 | 2023-03-02 13:38:33 +0000 | [diff] [blame] | 5584 | |
Dave Rodgman | 4b8e8dc | 2023-10-08 21:41:40 +0100 | [diff] [blame] | 5585 | # older versions of armcc/armclang don't support AESCE_C on 32-bit Arm |
| 5586 | scripts/config.py unset MBEDTLS_AESCE_C |
| 5587 | |
Dave Rodgman | 0fddf82 | 2023-03-02 15:32:12 +0000 | [diff] [blame] | 5588 | # Stop armclang warning about feature detection for A64_CRYPTO. |
| 5589 | # With this enabled, the library does build correctly under armclang, |
| 5590 | # but in baremetal builds (as tested here), feature detection is |
| 5591 | # unavailable, and the user is notified via a #warning. So enabling |
| 5592 | # this feature would prevent us from building with -Werror on |
| 5593 | # armclang. Tracked in #7198. |
Dave Rodgman | 5b89c55 | 2023-10-10 14:59:02 +0100 | [diff] [blame] | 5594 | scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT |
Dave Rodgman | 2f386c5 | 2023-03-02 13:38:33 +0000 | [diff] [blame] | 5595 | |
Hanno Becker | f0762e9 | 2022-07-15 12:08:19 +0100 | [diff] [blame] | 5596 | scripts/config.py set MBEDTLS_HAVE_ASM |
Tom Cosgrove | 87fbfb5 | 2022-03-15 10:51:52 +0000 | [diff] [blame] | 5597 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 5598 | make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib |
Gilles Peskine | 18487f6 | 2020-04-30 23:11:54 +0200 | [diff] [blame] | 5599 | |
| 5600 | msg "size: ARM Compiler 5" |
| 5601 | "$ARMC5_FROMELF" -z library/*.o |
| 5602 | |
Dave Rodgman | b45d58b | 2023-06-02 13:54:00 -0400 | [diff] [blame] | 5603 | # Compile mostly with -O1 since some Arm inline assembly is disabled for -O0. |
Hanno Becker | f0762e9 | 2022-07-15 12:08:19 +0100 | [diff] [blame] | 5604 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 5605 | # ARM Compiler 6 - Target ARMv7-A |
Dave Rodgman | 03f7a6e | 2022-08-17 14:35:29 +0100 | [diff] [blame] | 5606 | armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-a" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 5607 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 5608 | # ARM Compiler 6 - Target ARMv7-M |
Dave Rodgman | 03f7a6e | 2022-08-17 14:35:29 +0100 | [diff] [blame] | 5609 | armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m" |
| 5610 | |
| 5611 | # ARM Compiler 6 - Target ARMv7-M+DSP |
| 5612 | armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv7-m+dsp" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 5613 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 5614 | # ARM Compiler 6 - Target ARMv8-A - AArch32 |
Dave Rodgman | 03f7a6e | 2022-08-17 14:35:29 +0100 | [diff] [blame] | 5615 | armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8.2-a" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 5616 | |
Gilles Peskine | bca6ab9 | 2017-12-19 18:24:31 +0100 | [diff] [blame] | 5617 | # ARM Compiler 6 - Target ARMv8-M |
Dave Rodgman | 03f7a6e | 2022-08-17 14:35:29 +0100 | [diff] [blame] | 5618 | armc6_build_test "-O1 --target=arm-arm-none-eabi -march=armv8-m.main" |
Simon Butcher | 940737f | 2017-07-23 13:42:36 +0200 | [diff] [blame] | 5619 | |
Dave Rodgman | b45d58b | 2023-06-02 13:54:00 -0400 | [diff] [blame] | 5620 | # ARM Compiler 6 - Target Cortex-M0 - no optimisation |
| 5621 | armc6_build_test "-O0 --target=arm-arm-none-eabi -mcpu=cortex-m0" |
| 5622 | |
Dave Rodgman | 99318e6 | 2023-05-24 12:27:42 +0100 | [diff] [blame] | 5623 | # ARM Compiler 6 - Target Cortex-M0 |
| 5624 | armc6_build_test "-Os --target=arm-arm-none-eabi -mcpu=cortex-m0" |
Dave Rodgman | 4b8e8dc | 2023-10-08 21:41:40 +0100 | [diff] [blame] | 5625 | |
| 5626 | # ARM Compiler 6 - Target ARMv8.2-A - AArch64 |
| 5627 | # |
| 5628 | # Re-enable MBEDTLS_AESCE_C as this should be supported by the version of armclang |
| 5629 | # that we have in our CI |
| 5630 | scripts/config.py set MBEDTLS_AESCE_C |
| 5631 | armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8.2-a+crypto" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5632 | } |
Tom Cosgrove | 6ec39ca | 2023-06-09 15:34:31 +0100 | [diff] [blame] | 5633 | |
Pengyu Lv | df07003 | 2023-02-24 16:03:31 +0800 | [diff] [blame] | 5634 | support_build_armcc () { |
Pengyu Lv | c6298ad | 2023-03-01 10:31:29 +0800 | [diff] [blame] | 5635 | armc5_cc="$ARMC5_BIN_DIR/armcc" |
| 5636 | armc6_cc="$ARMC6_BIN_DIR/armclang" |
| 5637 | (check_tools "$armc5_cc" "$armc6_cc" > /dev/null 2>&1) |
Pengyu Lv | df07003 | 2023-02-24 16:03:31 +0800 | [diff] [blame] | 5638 | } |
Manuel Pégourié-Gonnard | c5c5939 | 2015-02-10 17:38:54 +0100 | [diff] [blame] | 5639 | |
Jerry Yu | 81d5e1f | 2022-01-27 13:01:01 +0800 | [diff] [blame] | 5640 | component_test_tls13_only () { |
| 5641 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3, without MBEDTLS_SSL_PROTO_TLS1_2" |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5642 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Waleed Elmelegy | e840263 | 2024-01-09 17:21:20 +0000 | [diff] [blame] | 5643 | scripts/config.py set MBEDTLS_SSL_RECORD_SIZE_LIMIT |
Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 5644 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5645 | |
Gilles Peskine | 4bb369c | 2022-10-29 17:44:19 +0200 | [diff] [blame] | 5646 | msg "test: TLS 1.3 only, all key exchange modes enabled" |
| 5647 | make test |
Jerry Yu | baa4934 | 2022-02-15 10:26:40 +0800 | [diff] [blame] | 5648 | |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5649 | msg "ssl-opt.sh: TLS 1.3 only, all key exchange modes enabled" |
| 5650 | tests/ssl-opt.sh |
Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 5651 | } |
| 5652 | |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5653 | component_test_tls13_only_psk () { |
| 5654 | msg "build: TLS 1.3 only from default, only PSK key exchange mode" |
| 5655 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 5656 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| 5657 | scripts/config.py unset MBEDTLS_ECDH_C |
Przemek Stekiel | 0c23147 | 2023-06-14 11:12:45 +0200 | [diff] [blame] | 5658 | scripts/config.py unset MBEDTLS_DHM_C |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5659 | scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C |
| 5660 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 5661 | scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION |
| 5662 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 5663 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
Dave Rodgman | 71565cf | 2022-11-11 10:37:38 +0000 | [diff] [blame] | 5664 | scripts/config.py unset MBEDTLS_PKCS7_C |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5665 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Ronald Cron | e3dac4a | 2022-06-10 17:21:51 +0200 | [diff] [blame] | 5666 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5667 | |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5668 | msg "test_suite_ssl: TLS 1.3 only, only PSK key exchange mode enabled" |
| 5669 | cd tests; ./test_suite_ssl; cd .. |
Ronald Cron | e3dac4a | 2022-06-10 17:21:51 +0200 | [diff] [blame] | 5670 | |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5671 | msg "ssl-opt.sh: TLS 1.3 only, only PSK key exchange mode enabled" |
| 5672 | tests/ssl-opt.sh |
| 5673 | } |
| 5674 | |
| 5675 | component_test_tls13_only_ephemeral () { |
| 5676 | msg "build: TLS 1.3 only from default, only ephemeral key exchange mode" |
| 5677 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 5678 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
Xiaokang Qian | 2dbfeda | 2022-11-15 10:52:57 +0000 | [diff] [blame] | 5679 | scripts/config.py unset MBEDTLS_SSL_EARLY_DATA |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5680 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5681 | |
| 5682 | msg "test_suite_ssl: TLS 1.3 only, only ephemeral key exchange mode" |
| 5683 | cd tests; ./test_suite_ssl; cd .. |
| 5684 | |
| 5685 | msg "ssl-opt.sh: TLS 1.3 only, only ephemeral key exchange mode" |
| 5686 | tests/ssl-opt.sh |
| 5687 | } |
| 5688 | |
Przemek Stekiel | a01c242 | 2023-06-13 10:46:48 +0200 | [diff] [blame] | 5689 | component_test_tls13_only_ephemeral_ffdh () { |
| 5690 | msg "build: TLS 1.3 only from default, only ephemeral ffdh key exchange mode" |
| 5691 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 5692 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| 5693 | scripts/config.py unset MBEDTLS_SSL_EARLY_DATA |
Przemek Stekiel | ce05f54 | 2023-06-15 16:44:08 +0200 | [diff] [blame] | 5694 | scripts/config.py unset MBEDTLS_ECDH_C |
| 5695 | |
Przemek Stekiel | a01c242 | 2023-06-13 10:46:48 +0200 | [diff] [blame] | 5696 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5697 | |
| 5698 | msg "test_suite_ssl: TLS 1.3 only, only ephemeral ffdh key exchange mode" |
| 5699 | cd tests; ./test_suite_ssl; cd .. |
| 5700 | |
| 5701 | msg "ssl-opt.sh: TLS 1.3 only, only ephemeral ffdh key exchange mode" |
| 5702 | tests/ssl-opt.sh |
| 5703 | } |
| 5704 | |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5705 | component_test_tls13_only_psk_ephemeral () { |
| 5706 | msg "build: TLS 1.3 only from default, only PSK ephemeral key exchange mode" |
| 5707 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 5708 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 5709 | scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C |
| 5710 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 5711 | scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION |
| 5712 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 5713 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
Dave Rodgman | 71565cf | 2022-11-11 10:37:38 +0000 | [diff] [blame] | 5714 | scripts/config.py unset MBEDTLS_PKCS7_C |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5715 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5716 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5717 | |
| 5718 | msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral key exchange mode" |
| 5719 | cd tests; ./test_suite_ssl; cd .. |
| 5720 | |
| 5721 | msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral key exchange mode" |
| 5722 | tests/ssl-opt.sh |
| 5723 | } |
| 5724 | |
Przemek Stekiel | a01c242 | 2023-06-13 10:46:48 +0200 | [diff] [blame] | 5725 | component_test_tls13_only_psk_ephemeral_ffdh () { |
| 5726 | msg "build: TLS 1.3 only from default, only PSK ephemeral ffdh key exchange mode" |
| 5727 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 5728 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 5729 | scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C |
| 5730 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 5731 | scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION |
| 5732 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 5733 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
| 5734 | scripts/config.py unset MBEDTLS_PKCS7_C |
| 5735 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Przemek Stekiel | ce05f54 | 2023-06-15 16:44:08 +0200 | [diff] [blame] | 5736 | scripts/config.py unset MBEDTLS_ECDH_C |
Przemek Stekiel | a01c242 | 2023-06-13 10:46:48 +0200 | [diff] [blame] | 5737 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5738 | |
| 5739 | msg "test_suite_ssl: TLS 1.3 only, only PSK ephemeral ffdh key exchange mode" |
| 5740 | cd tests; ./test_suite_ssl; cd .. |
| 5741 | |
| 5742 | msg "ssl-opt.sh: TLS 1.3 only, only PSK ephemeral ffdh key exchange mode" |
| 5743 | tests/ssl-opt.sh |
| 5744 | } |
| 5745 | |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5746 | component_test_tls13_only_psk_all () { |
| 5747 | msg "build: TLS 1.3 only from default, without ephemeral key exchange mode" |
| 5748 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 5749 | scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C |
| 5750 | scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
| 5751 | scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION |
| 5752 | scripts/config.py unset MBEDTLS_ECDSA_C |
| 5753 | scripts/config.py unset MBEDTLS_PKCS1_V21 |
Dave Rodgman | 71565cf | 2022-11-11 10:37:38 +0000 | [diff] [blame] | 5754 | scripts/config.py unset MBEDTLS_PKCS7_C |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5755 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5756 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5757 | |
| 5758 | msg "test_suite_ssl: TLS 1.3 only, PSK and PSK ephemeral key exchange modes" |
| 5759 | cd tests; ./test_suite_ssl; cd .. |
| 5760 | |
| 5761 | msg "ssl-opt.sh: TLS 1.3 only, PSK and PSK ephemeral key exchange modes" |
| 5762 | tests/ssl-opt.sh |
| 5763 | } |
| 5764 | |
| 5765 | component_test_tls13_only_ephemeral_all () { |
| 5766 | msg "build: TLS 1.3 only from default, without PSK key exchange mode" |
| 5767 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5768 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Ronald Cron | c3f43b6 | 2022-10-17 17:35:32 +0200 | [diff] [blame] | 5769 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 5770 | |
| 5771 | msg "test_suite_ssl: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes" |
| 5772 | cd tests; ./test_suite_ssl; cd .. |
| 5773 | |
| 5774 | msg "ssl-opt.sh: TLS 1.3 only, ephemeral and PSK ephemeral key exchange modes" |
| 5775 | tests/ssl-opt.sh |
Ronald Cron | e3dac4a | 2022-06-10 17:21:51 +0200 | [diff] [blame] | 5776 | } |
| 5777 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 5778 | component_test_tls13 () { |
| 5779 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
| 5780 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 5781 | scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 5782 | scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1 |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5783 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 5784 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 5785 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 5786 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 5787 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 5788 | msg "ssl-opt.sh (TLS 1.3)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 5789 | tests/ssl-opt.sh |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 5790 | } |
| 5791 | |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 5792 | component_test_tls13_no_compatibility_mode () { |
| 5793 | msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
| 5794 | scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3 |
Ronald Cron | fdb0e3f | 2021-12-09 10:39:19 +0100 | [diff] [blame] | 5795 | scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 5796 | scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1 |
Ronald Cron | c2e110f | 2022-11-22 09:01:46 +0100 | [diff] [blame] | 5797 | scripts/config.py set MBEDTLS_SSL_EARLY_DATA |
Dave Rodgman | 17127e9 | 2023-12-14 16:42:48 +0000 | [diff] [blame] | 5798 | CC=$ASAN_CC cmake -D CMAKE_BUILD_TYPE:String=Asan . |
Hanno Becker | a711f6e | 2020-05-04 12:03:51 +0100 | [diff] [blame] | 5799 | make |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 5800 | msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding" |
Hanno Becker | 6c53ecc | 2021-08-01 19:20:10 +0100 | [diff] [blame] | 5801 | make test |
Ronald Cron | 6f135e1 | 2021-12-08 16:57:54 +0100 | [diff] [blame] | 5802 | msg "ssl-opt.sh (TLS 1.3 no compatibility mode)" |
Gilles Peskine | 827dbd9 | 2022-02-04 00:30:54 +0100 | [diff] [blame] | 5803 | tests/ssl-opt.sh |
Hanno Becker | 6c53ecc | 2021-08-01 19:20:10 +0100 | [diff] [blame] | 5804 | } |
| 5805 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5806 | component_build_mingw () { |
| 5807 | msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s |
Pengyu Lv | 64cca2f | 2023-10-10 18:22:24 +0800 | [diff] [blame] | 5808 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 lib programs |
Hanno Becker | e963efa | 2018-01-03 10:03:43 +0000 | [diff] [blame] | 5809 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5810 | # note Make tests only builds the tests, but doesn't run them |
Pengyu Lv | 64cca2f | 2023-10-10 18:22:24 +0800 | [diff] [blame] | 5811 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -maes -msse2 -mpclmul' WINDOWS_BUILD=1 tests |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5812 | make WINDOWS_BUILD=1 clean |
Gilles Peskine | 2a458da | 2017-05-12 15:26:58 +0200 | [diff] [blame] | 5813 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5814 | msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s |
Pengyu Lv | 64cca2f | 2023-10-10 18:22:24 +0800 | [diff] [blame] | 5815 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 SHARED=1 lib programs |
| 5816 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra -maes -msse2 -mpclmul' WINDOWS_BUILD=1 SHARED=1 tests |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5817 | make WINDOWS_BUILD=1 clean |
Pengyu Lv | bb4f63c | 2023-10-19 10:38:58 +0800 | [diff] [blame] | 5818 | |
Pengyu Lv | 158eead | 2023-10-19 11:27:05 +0800 | [diff] [blame] | 5819 | msg "build: Windows cross build - mingw64, make (Library only, default config without MBEDTLS_AESNI_C)" # ~ 30s |
Pengyu Lv | bb4f63c | 2023-10-19 10:38:58 +0800 | [diff] [blame] | 5820 | ./scripts/config.py unset MBEDTLS_AESNI_C # |
Pengyu Lv | 158eead | 2023-10-19 11:27:05 +0800 | [diff] [blame] | 5821 | make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5822 | make WINDOWS_BUILD=1 clean |
| 5823 | } |
Jaeden Amero | 117b8a4 | 2019-04-17 15:19:26 +0100 | [diff] [blame] | 5824 | support_build_mingw() { |
Pengyu Lv | 51b5f00 | 2023-02-24 15:38:52 +0800 | [diff] [blame] | 5825 | case $(i686-w64-mingw32-gcc -dumpversion 2>/dev/null) in |
| 5826 | [0-5]*|"") false;; |
Jaeden Amero | 117b8a4 | 2019-04-17 15:19:26 +0100 | [diff] [blame] | 5827 | *) true;; |
| 5828 | esac |
| 5829 | } |
Simon Butcher | 91aef33 | 2016-11-17 09:20:50 +0000 | [diff] [blame] | 5830 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5831 | component_test_memsan () { |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5832 | msg "build: MSan (clang)" # ~ 1 min 20s |
Gilles Peskine | 5d46f6a | 2019-07-27 23:52:53 +0200 | [diff] [blame] | 5833 | scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5834 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan . |
| 5835 | make |
Manuel Pégourié-Gonnard | 4a9dc2a | 2014-05-09 13:46:59 +0200 | [diff] [blame] | 5836 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5837 | msg "test: main suites (MSan)" # ~ 10s |
| 5838 | make test |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 5839 | |
Gilles Peskine | 6848d17 | 2023-11-02 19:58:03 +0100 | [diff] [blame] | 5840 | msg "test: metatests (MSan)" |
| 5841 | tests/scripts/run-metatests.sh any msan |
| 5842 | |
Gilles Peskine | 82b2727 | 2019-06-14 18:27:03 +0200 | [diff] [blame] | 5843 | msg "program demos (MSan)" # ~20s |
| 5844 | tests/scripts/run_demos.py |
| 5845 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5846 | msg "test: ssl-opt.sh (MSan)" # ~ 1 min |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5847 | tests/ssl-opt.sh |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 5848 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5849 | # Optional part(s) |
Manuel Pégourié-Gonnard | 9bda9b3 | 2014-11-20 13:10:22 +0100 | [diff] [blame] | 5850 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5851 | if [ "$MEMORY" -gt 0 ]; then |
| 5852 | msg "test: compat.sh (MSan)" # ~ 6 min 20s |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5853 | tests/compat.sh |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5854 | fi |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5855 | } |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 5856 | |
Bence Szépkúti | 0354d04 | 2023-12-06 16:14:37 +0100 | [diff] [blame] | 5857 | component_release_test_valgrind () { |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5858 | msg "build: Release (clang)" |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5859 | # default config, in particular without MBEDTLS_USE_PSA_CRYPTO |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5860 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 5861 | make |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 5862 | |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5863 | msg "test: main suites, Valgrind (default config)" |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5864 | make memcheck |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 5865 | |
Gilles Peskine | 636c26a | 2020-03-04 20:46:15 +0100 | [diff] [blame] | 5866 | # Optional parts (slow; currently broken on OS X because programs don't |
| 5867 | # seem to receive signals under valgrind on OS X). |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5868 | # These optional parts don't run on the CI. |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5869 | if [ "$MEMORY" -gt 0 ]; then |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5870 | msg "test: ssl-opt.sh --memcheck (default config)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5871 | tests/ssl-opt.sh --memcheck |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5872 | fi |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 5873 | |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5874 | if [ "$MEMORY" -gt 1 ]; then |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5875 | msg "test: compat.sh --memcheck (default config)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5876 | tests/compat.sh --memcheck |
Gilles Peskine | 7ad603e | 2017-12-10 23:22:20 +0100 | [diff] [blame] | 5877 | fi |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 5878 | |
| 5879 | if [ "$MEMORY" -gt 0 ]; then |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5880 | msg "test: context-info.sh --memcheck (default config)" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5881 | tests/context-info.sh --memcheck |
Piotr Nowicki | 9978e6e | 2020-04-07 16:07:05 +0200 | [diff] [blame] | 5882 | fi |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5883 | } |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 5884 | |
Bence Szépkúti | 0354d04 | 2023-12-06 16:14:37 +0100 | [diff] [blame] | 5885 | component_release_test_valgrind_psa () { |
Gilles Peskine | df3dd4c | 2022-11-29 16:45:30 +0100 | [diff] [blame] | 5886 | msg "build: Release, full (clang)" |
| 5887 | # full config, in particular with MBEDTLS_USE_PSA_CRYPTO |
| 5888 | scripts/config.py full |
| 5889 | CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release . |
| 5890 | make |
| 5891 | |
| 5892 | msg "test: main suites, Valgrind (full config)" |
| 5893 | make memcheck |
| 5894 | } |
| 5895 | |
Paul Elliott | 62dc392 | 2021-11-25 17:29:40 +0000 | [diff] [blame] | 5896 | support_test_cmake_out_of_source () { |
| 5897 | distrib_id="" |
| 5898 | distrib_ver="" |
| 5899 | distrib_ver_minor="" |
| 5900 | distrib_ver_major="" |
| 5901 | |
| 5902 | # Attempt to parse lsb-release to find out distribution and version. If not |
| 5903 | # found this should fail safe (test is supported). |
| 5904 | if [[ -f /etc/lsb-release ]]; then |
| 5905 | |
| 5906 | while read -r lsb_line; do |
| 5907 | case "$lsb_line" in |
| 5908 | "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};; |
| 5909 | "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};; |
| 5910 | esac |
| 5911 | done < /etc/lsb-release |
| 5912 | |
| 5913 | distrib_ver_major="${distrib_ver%%.*}" |
| 5914 | distrib_ver="${distrib_ver#*.}" |
| 5915 | distrib_ver_minor="${distrib_ver%%.*}" |
| 5916 | fi |
| 5917 | |
| 5918 | # Running the out of source CMake test on Ubuntu 16.04 using more than one |
| 5919 | # processor (as the CI does) can create a race condition whereby the build |
| 5920 | # fails to see a generated file, despite that file actually having been |
| 5921 | # generated. This problem appears to go away with 18.04 or newer, so make |
| 5922 | # the out of source tests unsupported on Ubuntu 16.04. |
| 5923 | [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ] |
| 5924 | } |
| 5925 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5926 | component_test_cmake_out_of_source () { |
David Horstmann | 862abe2 | 2023-09-28 10:42:10 +0100 | [diff] [blame] | 5927 | # Remove existing generated files so that we use the ones cmake |
David Horstmann | 9f48fff | 2023-09-27 15:53:54 +0100 | [diff] [blame] | 5928 | # generates |
| 5929 | make neat |
| 5930 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5931 | msg "build: cmake 'out-of-source' build" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5932 | MBEDTLS_ROOT_DIR="$PWD" |
| 5933 | mkdir "$OUT_OF_SOURCE_DIR" |
| 5934 | cd "$OUT_OF_SOURCE_DIR" |
David Horstmann | 9f48fff | 2023-09-27 15:53:54 +0100 | [diff] [blame] | 5935 | # Note: Explicitly generate files as these are turned off in releases |
| 5936 | cmake -D CMAKE_BUILD_TYPE:String=Check -D GEN_FILES=ON "$MBEDTLS_ROOT_DIR" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5937 | make |
Manuel Pégourié-Gonnard | 392d3dd | 2015-01-26 14:03:56 +0000 | [diff] [blame] | 5938 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5939 | msg "test: cmake 'out-of-source' build" |
| 5940 | make test |
Gilles Peskine | a841c2a | 2022-04-16 11:31:25 +0200 | [diff] [blame] | 5941 | # Check that ssl-opt.sh can find the test programs. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5942 | # Also ensure that there are no error messages such as |
| 5943 | # "No such file or directory", which would indicate that some required |
| 5944 | # file is missing (ssl-opt.sh tolerates the absence of some files so |
| 5945 | # may exit with status 0 but emit errors). |
Gilles Peskine | a841c2a | 2022-04-16 11:31:25 +0200 | [diff] [blame] | 5946 | ./tests/ssl-opt.sh -f 'Default' >ssl-opt.out 2>ssl-opt.err |
Gilles Peskine | 7393ec5 | 2022-04-15 22:43:38 +0200 | [diff] [blame] | 5947 | grep PASS ssl-opt.out |
Gilles Peskine | f7e956c | 2020-03-28 18:56:09 +0100 | [diff] [blame] | 5948 | cat ssl-opt.err >&2 |
| 5949 | # If ssl-opt.err is non-empty, record an error and keep going. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5950 | [ ! -s ssl-opt.err ] |
Gilles Peskine | 7393ec5 | 2022-04-15 22:43:38 +0200 | [diff] [blame] | 5951 | rm ssl-opt.out ssl-opt.err |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5952 | cd "$MBEDTLS_ROOT_DIR" |
| 5953 | rm -rf "$OUT_OF_SOURCE_DIR" |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 5954 | } |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 5955 | |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 5956 | component_test_cmake_as_subdirectory () { |
David Horstmann | 9f48fff | 2023-09-27 15:53:54 +0100 | [diff] [blame] | 5957 | # Remove existing generated files so that we use the ones CMake |
| 5958 | # generates |
| 5959 | make neat |
| 5960 | |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 5961 | msg "build: cmake 'as-subdirectory' build" |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 5962 | cd programs/test/cmake_subproject |
David Horstmann | 9f48fff | 2023-09-27 15:53:54 +0100 | [diff] [blame] | 5963 | # Note: Explicitly generate files as these are turned off in releases |
| 5964 | cmake -D GEN_FILES=ON . |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 5965 | make |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5966 | ./cmake_subproject |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 5967 | } |
Gilles Peskine | a300099 | 2022-02-04 00:21:12 +0100 | [diff] [blame] | 5968 | support_test_cmake_as_subdirectory () { |
| 5969 | support_test_cmake_out_of_source |
Jaeden Amero | ab83fdf | 2019-06-20 17:38:22 +0100 | [diff] [blame] | 5970 | } |
| 5971 | |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5972 | component_test_cmake_as_package () { |
David Horstmann | 6c97985 | 2023-09-28 10:40:22 +0100 | [diff] [blame] | 5973 | # Remove existing generated files so that we use the ones CMake |
| 5974 | # generates |
| 5975 | make neat |
| 5976 | |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5977 | msg "build: cmake 'as-package' build" |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5978 | cd programs/test/cmake_package |
| 5979 | cmake . |
| 5980 | make |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5981 | ./cmake_package |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5982 | } |
Gilles Peskine | a300099 | 2022-02-04 00:21:12 +0100 | [diff] [blame] | 5983 | support_test_cmake_as_package () { |
| 5984 | support_test_cmake_out_of_source |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5985 | } |
| 5986 | |
| 5987 | component_test_cmake_as_package_install () { |
David Horstmann | 6c97985 | 2023-09-28 10:40:22 +0100 | [diff] [blame] | 5988 | # Remove existing generated files so that we use the ones CMake |
| 5989 | # generates |
| 5990 | make neat |
| 5991 | |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5992 | msg "build: cmake 'as-installed-package' build" |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5993 | cd programs/test/cmake_package_install |
| 5994 | cmake . |
| 5995 | make |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 5996 | ./cmake_package_install |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 5997 | } |
Gilles Peskine | a300099 | 2022-02-04 00:21:12 +0100 | [diff] [blame] | 5998 | support_test_cmake_as_package_install () { |
| 5999 | support_test_cmake_out_of_source |
Chris Kay | d259e34 | 2021-03-25 16:03:25 +0000 | [diff] [blame] | 6000 | } |
| 6001 | |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6002 | component_build_cmake_custom_config_file () { |
David Horstmann | 969c145 | 2023-01-31 10:34:44 +0000 | [diff] [blame] | 6003 | # Make a copy of config file to use for the in-tree test |
| 6004 | cp "$CONFIG_H" include/mbedtls_config_in_tree_copy.h |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6005 | |
| 6006 | MBEDTLS_ROOT_DIR="$PWD" |
| 6007 | mkdir "$OUT_OF_SOURCE_DIR" |
| 6008 | cd "$OUT_OF_SOURCE_DIR" |
| 6009 | |
David Horstmann | 969c145 | 2023-01-31 10:34:44 +0000 | [diff] [blame] | 6010 | # Build once to get the generated files (which need an intact config file) |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6011 | cmake "$MBEDTLS_ROOT_DIR" |
| 6012 | make |
| 6013 | |
| 6014 | msg "build: cmake with -DMBEDTLS_CONFIG_FILE" |
| 6015 | scripts/config.py -w full_config.h full |
David Horstmann | 969c145 | 2023-01-31 10:34:44 +0000 | [diff] [blame] | 6016 | echo '#error "cmake -DMBEDTLS_CONFIG_FILE is not working."' > "$MBEDTLS_ROOT_DIR/$CONFIG_H" |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6017 | cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h "$MBEDTLS_ROOT_DIR" |
| 6018 | make |
| 6019 | |
| 6020 | msg "build: cmake with -DMBEDTLS_CONFIG_FILE + -DMBEDTLS_USER_CONFIG_FILE" |
| 6021 | # In the user config, disable one feature (for simplicity, pick a feature |
| 6022 | # that nothing else depends on). |
| 6023 | echo '#undef MBEDTLS_NIST_KW_C' >user_config.h |
| 6024 | |
| 6025 | cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h -DMBEDTLS_USER_CONFIG_FILE=user_config.h "$MBEDTLS_ROOT_DIR" |
| 6026 | make |
| 6027 | not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C |
| 6028 | |
| 6029 | rm -f user_config.h full_config.h |
| 6030 | |
| 6031 | cd "$MBEDTLS_ROOT_DIR" |
| 6032 | rm -rf "$OUT_OF_SOURCE_DIR" |
| 6033 | |
| 6034 | # Now repeat the test for an in-tree build: |
| 6035 | |
David Horstmann | 969c145 | 2023-01-31 10:34:44 +0000 | [diff] [blame] | 6036 | # Restore config for the in-tree test |
| 6037 | mv include/mbedtls_config_in_tree_copy.h "$CONFIG_H" |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6038 | |
David Horstmann | 969c145 | 2023-01-31 10:34:44 +0000 | [diff] [blame] | 6039 | # Build once to get the generated files (which need an intact config) |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6040 | cmake . |
| 6041 | make |
| 6042 | |
| 6043 | msg "build: cmake (in-tree) with -DMBEDTLS_CONFIG_FILE" |
| 6044 | scripts/config.py -w full_config.h full |
David Horstmann | 969c145 | 2023-01-31 10:34:44 +0000 | [diff] [blame] | 6045 | echo '#error "cmake -DMBEDTLS_CONFIG_FILE is not working."' > "$MBEDTLS_ROOT_DIR/$CONFIG_H" |
David Horstmann | 20550e3 | 2023-01-12 14:17:01 +0000 | [diff] [blame] | 6046 | cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h . |
| 6047 | make |
| 6048 | |
| 6049 | msg "build: cmake (in-tree) with -DMBEDTLS_CONFIG_FILE + -DMBEDTLS_USER_CONFIG_FILE" |
| 6050 | # In the user config, disable one feature (for simplicity, pick a feature |
| 6051 | # that nothing else depends on). |
| 6052 | echo '#undef MBEDTLS_NIST_KW_C' >user_config.h |
| 6053 | |
| 6054 | cmake -DGEN_FILES=OFF -DMBEDTLS_CONFIG_FILE=full_config.h -DMBEDTLS_USER_CONFIG_FILE=user_config.h . |
| 6055 | make |
| 6056 | not programs/test/query_compile_time_config MBEDTLS_NIST_KW_C |
| 6057 | |
| 6058 | rm -f user_config.h full_config.h |
| 6059 | } |
| 6060 | support_build_cmake_custom_config_file () { |
| 6061 | support_test_cmake_out_of_source |
| 6062 | } |
| 6063 | |
| 6064 | |
Tom Cosgrove | daddf11 | 2023-09-01 10:40:15 +0100 | [diff] [blame] | 6065 | component_build_zeroize_checks () { |
| 6066 | msg "build: check for obviously wrong calls to mbedtls_platform_zeroize()" |
| 6067 | |
| 6068 | scripts/config.py full |
| 6069 | |
| 6070 | # Only compile - we're looking for sizeof-pointer-memaccess warnings |
Dave Rodgman | 84125a1 | 2024-01-02 11:42:38 +0000 | [diff] [blame] | 6071 | make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-zeroize-memset.h\"' -DMBEDTLS_TEST_DEFINES_ZEROIZE -Werror -Wsizeof-pointer-memaccess" |
Tom Cosgrove | daddf11 | 2023-09-01 10:40:15 +0100 | [diff] [blame] | 6072 | } |
| 6073 | |
| 6074 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6075 | component_test_zeroize () { |
| 6076 | # Test that the function mbedtls_platform_zeroize() is not optimized away by |
| 6077 | # different combinations of compilers and optimization flags by using an |
| 6078 | # auxiliary GDB script. Unfortunately, GDB does not return error values to the |
| 6079 | # system in all cases that the script fails, so we must manually search the |
| 6080 | # output to check whether the pass string is present and no failure strings |
| 6081 | # were printed. |
Andres AG | dc19221 | 2016-08-31 17:33:13 +0100 | [diff] [blame] | 6082 | |
Gilles Peskine | 4976e82 | 2019-01-06 19:52:22 +0000 | [diff] [blame] | 6083 | # Don't try to disable ASLR. We don't care about ASLR here. We do care |
| 6084 | # about a spurious message if Gdb tries and fails, so suppress that. |
| 6085 | gdb_disable_aslr= |
| 6086 | if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then |
| 6087 | gdb_disable_aslr='set disable-randomization off' |
| 6088 | fi |
| 6089 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6090 | for optimization_flag in -O2 -O3 -Ofast -Os; do |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 6091 | for compiler in clang gcc; do |
| 6092 | msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()" |
| 6093 | make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 6094 | gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log |
| 6095 | grep "The buffer was correctly zeroized" test_zeroize.log |
| 6096 | not grep -i "error" test_zeroize.log |
Gilles Peskine | 55f7c94 | 2019-01-09 22:28:21 +0100 | [diff] [blame] | 6097 | rm -f test_zeroize.log |
| 6098 | make clean |
| 6099 | done |
Andres Amaya Garcia | 2967381 | 2017-10-25 10:35:51 +0100 | [diff] [blame] | 6100 | done |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6101 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 6102 | |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 6103 | component_test_psa_compliance () { |
Dave Rodgman | 932ce85 | 2023-12-18 19:55:40 +0000 | [diff] [blame] | 6104 | # The arch tests build with gcc, so require use of gcc here to link properly |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 6105 | msg "build: make, default config (out-of-box), libmbedcrypto.a only" |
Dave Rodgman | 932ce85 | 2023-12-18 19:55:40 +0000 | [diff] [blame] | 6106 | CC=gcc make -C library libmbedcrypto.a |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 6107 | |
| 6108 | msg "unit test: test_psa_compliance.py" |
Dave Rodgman | d0a594d | 2023-12-18 22:29:56 +0000 | [diff] [blame] | 6109 | CC=gcc ./tests/scripts/test_psa_compliance.py |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 6110 | } |
| 6111 | |
| 6112 | support_test_psa_compliance () { |
Bence Szépkúti | ef0d02e | 2021-11-03 11:36:09 +0100 | [diff] [blame] | 6113 | # psa-compliance-tests only supports CMake >= 3.10.0 |
Bence Szépkúti | ca9236b | 2021-10-25 19:29:07 +0200 | [diff] [blame] | 6114 | ver="$(cmake --version)" |
| 6115 | ver="${ver#cmake version }" |
| 6116 | ver_major="${ver%%.*}" |
| 6117 | |
| 6118 | ver="${ver#*.}" |
| 6119 | ver_minor="${ver%%.*}" |
| 6120 | |
| 6121 | [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ] |
Bence Szépkúti | 80b31c5 | 2021-10-19 15:05:36 +0200 | [diff] [blame] | 6122 | } |
| 6123 | |
Gilles Peskine | c848d22 | 2022-12-09 12:23:35 +0100 | [diff] [blame] | 6124 | component_check_code_style () { |
| 6125 | msg "Check C code style" |
| 6126 | ./scripts/code_style.py |
David Horstmann | 92b5ac1 | 2022-11-10 18:30:52 +0000 | [diff] [blame] | 6127 | } |
| 6128 | |
Gilles Peskine | c848d22 | 2022-12-09 12:23:35 +0100 | [diff] [blame] | 6129 | support_check_code_style() { |
David Horstmann | 92b5ac1 | 2022-11-10 18:30:52 +0000 | [diff] [blame] | 6130 | case $(uncrustify --version) in |
| 6131 | *0.75.1*) true;; |
| 6132 | *) false;; |
| 6133 | esac |
| 6134 | } |
| 6135 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6136 | component_check_python_files () { |
| 6137 | msg "Lint: Python scripts" |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 6138 | tests/scripts/check-python-files.sh |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6139 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 6140 | |
Joe Subbiani | d614c0b | 2021-07-29 11:18:29 +0100 | [diff] [blame] | 6141 | component_check_test_helpers () { |
| 6142 | msg "unit test: generate_test_code.py" |
Manuel Pégourié-Gonnard | dfb114a | 2020-06-02 11:40:08 +0200 | [diff] [blame] | 6143 | # unittest writes out mundane stuff like number or tests run on stderr. |
| 6144 | # Our convention is to reserve stderr for actual errors, and write |
| 6145 | # harmless info on stdout so it can be suppress with --quiet. |
Gilles Peskine | 1f0cdaf | 2021-07-08 18:41:16 +0200 | [diff] [blame] | 6146 | ./tests/scripts/test_generate_test_code.py 2>&1 |
Joe Subbiani | d614c0b | 2021-07-29 11:18:29 +0100 | [diff] [blame] | 6147 | |
Joe Subbiani | a25ffab | 2021-08-06 09:41:27 +0100 | [diff] [blame] | 6148 | msg "unit test: translate_ciphers.py" |
| 6149 | python3 -m unittest tests/scripts/translate_ciphers.py 2>&1 |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6150 | } |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 6151 | |
Jerry Yu | d767cc4 | 2023-03-31 15:03:55 +0800 | [diff] [blame] | 6152 | |
Gilles Peskine | 192c72f | 2017-12-21 15:59:21 +0100 | [diff] [blame] | 6153 | ################################################################ |
| 6154 | #### Termination |
| 6155 | ################################################################ |
| 6156 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6157 | post_report () { |
| 6158 | msg "Done, cleaning up" |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 6159 | final_cleanup |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 6160 | |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6161 | final_report |
| 6162 | } |
| 6163 | |
| 6164 | |
| 6165 | |
| 6166 | ################################################################ |
| 6167 | #### Run all the things |
| 6168 | ################################################################ |
| 6169 | |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6170 | # Function invoked by --error-test to test error reporting. |
| 6171 | pseudo_component_error_test () { |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 6172 | msg "Testing error reporting $error_test_i" |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6173 | if [ $KEEP_GOING -ne 0 ]; then |
| 6174 | echo "Expect three failing commands." |
| 6175 | fi |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 6176 | # If the component doesn't run in a subshell, changing error_test_i to an |
| 6177 | # invalid integer will cause an error in the loop that runs this function. |
| 6178 | error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 6179 | # Expected error: 'grep non_existent /dev/null -> 1' |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6180 | grep non_existent /dev/null |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 6181 | # Expected error: '! grep -q . tests/scripts/all.sh -> 1' |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6182 | not grep -q . "$0" |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 6183 | # Expected error: 'make unknown_target -> 2' |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6184 | make unknown_target |
| 6185 | false "this should not be executed" |
| 6186 | } |
| 6187 | |
Gilles Peskine | e48351a | 2018-11-27 16:06:30 +0100 | [diff] [blame] | 6188 | # Run one component and clean up afterwards. |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6189 | run_component () { |
Gilles Peskine | ffcdeff | 2018-12-04 12:49:28 +0100 | [diff] [blame] | 6190 | current_component="$1" |
Gilles Peskine | 9004a17 | 2019-09-16 15:20:36 +0200 | [diff] [blame] | 6191 | export MBEDTLS_TEST_CONFIGURATION="$current_component" |
Gilles Peskine | 2ef377d | 2019-10-07 18:44:21 +0200 | [diff] [blame] | 6192 | |
| 6193 | # Unconditionally create a seedfile that's sufficiently long. |
| 6194 | # Do this before each component, because a previous component may |
| 6195 | # have messed it up or shortened it. |
Gilles Peskine | 88a0745 | 2021-07-08 19:03:50 +0200 | [diff] [blame] | 6196 | local dd_cmd |
| 6197 | dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1) |
| 6198 | case $OSTYPE in |
Tom Cosgrove | 226aca1 | 2022-03-16 14:11:07 +0000 | [diff] [blame] | 6199 | linux*|freebsd*|openbsd*) dd_cmd+=(status=none) |
Gilles Peskine | 88a0745 | 2021-07-08 19:03:50 +0200 | [diff] [blame] | 6200 | esac |
| 6201 | "${dd_cmd[@]}" |
Gilles Peskine | 2ef377d | 2019-10-07 18:44:21 +0200 | [diff] [blame] | 6202 | |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 6203 | # Run the component in a subshell, with error trapping and output |
| 6204 | # redirection set up based on the relevant options. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 6205 | if [ $KEEP_GOING -eq 1 ]; then |
Gilles Peskine | ec13554 | 2021-08-02 23:14:03 +0200 | [diff] [blame] | 6206 | # We want to keep running if the subshell fails, so 'set -e' must |
| 6207 | # be off when the subshell runs. |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 6208 | set +e |
Manuel Pégourié-Gonnard | 2b2bdaa | 2020-06-02 11:28:07 +0200 | [diff] [blame] | 6209 | fi |
Gilles Peskine | ce266c4 | 2020-03-28 18:50:43 +0100 | [diff] [blame] | 6210 | ( |
| 6211 | if [ $QUIET -eq 1 ]; then |
| 6212 | # msg() will be silenced, so just print the component name here. |
| 6213 | echo "${current_component#component_}" |
| 6214 | exec >/dev/null |
| 6215 | fi |
| 6216 | if [ $KEEP_GOING -eq 1 ]; then |
| 6217 | # Keep "set -e" off, and run an ERR trap instead to record failures. |
| 6218 | set -E |
| 6219 | trap err_trap ERR |
| 6220 | fi |
| 6221 | # The next line is what runs the component |
| 6222 | "$@" |
| 6223 | if [ $KEEP_GOING -eq 1 ]; then |
| 6224 | trap - ERR |
| 6225 | exit $last_failure_status |
| 6226 | fi |
| 6227 | ) |
| 6228 | component_status=$? |
| 6229 | if [ $KEEP_GOING -eq 1 ]; then |
| 6230 | set -e |
| 6231 | if [ $component_status -ne 0 ]; then |
| 6232 | failure_count=$((failure_count + 1)) |
| 6233 | fi |
| 6234 | fi |
Gilles Peskine | 2ef377d | 2019-10-07 18:44:21 +0200 | [diff] [blame] | 6235 | |
| 6236 | # Restore the build tree to a clean state. |
Gilles Peskine | e48351a | 2018-11-27 16:06:30 +0100 | [diff] [blame] | 6237 | cleanup |
Manuel Pégourié-Gonnard | 304b099 | 2020-06-08 10:59:41 +0200 | [diff] [blame] | 6238 | unset current_component |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6239 | } |
| 6240 | |
| 6241 | # Preliminary setup |
| 6242 | pre_check_environment |
| 6243 | pre_initialize_variables |
| 6244 | pre_parse_command_line "$@" |
Gilles Peskine | 348fb9a | 2018-11-27 17:04:29 +0100 | [diff] [blame] | 6245 | |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 6246 | pre_check_git |
Gilles Peskine | 568f53a | 2021-07-12 18:16:01 +0200 | [diff] [blame] | 6247 | pre_restore_files |
Gilles Peskine | f83eb82 | 2020-03-30 20:11:39 +0200 | [diff] [blame] | 6248 | pre_back_up |
Andrzej Kurek | eb50871 | 2019-02-14 07:18:59 -0500 | [diff] [blame] | 6249 | |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 6250 | build_status=0 |
| 6251 | if [ $KEEP_GOING -eq 1 ]; then |
| 6252 | pre_setup_keep_going |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6253 | fi |
Gilles Peskine | 67ffdaf | 2019-09-16 15:55:46 +0200 | [diff] [blame] | 6254 | pre_prepare_outcome_file |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 6255 | pre_print_configuration |
| 6256 | pre_check_tools |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 6257 | cleanup |
David Horstmann | 76a7738 | 2023-08-17 17:32:26 +0100 | [diff] [blame] | 6258 | if in_mbedtls_repo; then |
David Horstmann | 9a6c45b | 2023-07-14 12:30:00 +0100 | [diff] [blame] | 6259 | pre_generate_files |
| 6260 | fi |
Manuel Pégourié-Gonnard | 80955ee | 2014-03-19 18:29:01 +0100 | [diff] [blame] | 6261 | |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 6262 | # Run the requested tests. |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 6263 | for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6264 | run_component pseudo_component_error_test |
Gilles Peskine | 5d99682 | 2020-03-28 21:09:21 +0100 | [diff] [blame] | 6265 | done |
Gilles Peskine | 88a7c2b | 2021-08-02 23:28:00 +0200 | [diff] [blame] | 6266 | unset error_test_i |
Gilles Peskine | beb3a81 | 2019-01-06 22:11:25 +0000 | [diff] [blame] | 6267 | for component in $RUN_COMPONENTS; do |
| 6268 | run_component "component_$component" |
| 6269 | done |
Gilles Peskine | 8f07312 | 2018-11-27 15:58:47 +0100 | [diff] [blame] | 6270 | |
| 6271 | # We're done. |
Gilles Peskine | 878cf60 | 2019-01-06 20:50:38 +0000 | [diff] [blame] | 6272 | post_report |