Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1834 commits
Select commit Hold shift + click to select a range
dea75cb
Set verify_result to failure by default
davidhorstmann-arm Sep 3, 2025
0ecde06
Add non-regression test for verify_result init
davidhorstmann-arm Oct 7, 2025
e29d7be
Add ChangeLog entry for verify_result hardening
davidhorstmann-arm Oct 8, 2025
687a1ba
Switch to a default value of -1u
davidhorstmann-arm Jan 28, 2026
ff51a1a
Initialize verify_result in session free
davidhorstmann-arm Feb 5, 2026
4cce035
Remove unused variable
gilles-peskine-arm Feb 10, 2026
05d8c71
Don't treat --help as an error
gilles-peskine-arm Feb 10, 2026
f7b4b5a
Add malicious ip test for inet_pton
yanesca Oct 2, 2025
346720d
Add ASan to test_sw_inet_pton
yanesca Oct 2, 2025
d5e7465
inet_pton: help ASan find the underflow
yanesca Jan 20, 2026
1a127e3
inet_pton: fix buggy condition
yanesca Jan 20, 2026
57f1898
Add ChangeLog entry
yanesca Jan 21, 2026
5037692
inet_pton: simplify IPv4 walkback loop
yanesca Jan 21, 2026
d3a8582
Actually check committed generated files
gilles-peskine-arm Feb 12, 2026
384a167
library: check_config: remove redundant check on hash algorithms for …
valeriosetti Feb 11, 2026
4602f36
Merge pull request #10596 from gilles-peskine-arm/check_committed_gen…
gilles-peskine-arm Feb 12, 2026
607f725
Set verify_result in non-verification cases
davidhorstmann-arm Feb 16, 2026
5e54829
Merge pull request #1471 from yanesca/1427_buffer_underflow
davidhorstmann-arm Feb 16, 2026
24c80cc
Update tf-psa-crypto with mldsa-native
gilles-peskine-arm Feb 16, 2026
26e1a7c
Update framework with XOF support in psasim
gilles-peskine-arm Feb 16, 2026
37e3dcf
Reword ChangeLog entry
davidhorstmann-arm Feb 16, 2026
bac74a0
Merge pull request #10593 from gilles-peskine-arm/bump-version-202602…
davidhorstmann-arm Feb 16, 2026
059fe77
Fix missing type conversion in the TLS-Exporter
davidhorstmann-arm Feb 16, 2026
4398e83
Merge pull request #10600 from gilles-peskine-arm/update-submodules-2…
valeriosetti Feb 17, 2026
3f2a8b0
Merge pull request #10601 from davidhorstmann-arm/fix-missing-type-co…
davidhorstmann-arm Feb 17, 2026
29eb988
Update framework pointer
ronald-cron-arm Jan 14, 2026
57b29c2
Introduce branch specific make_generated_files.py
ronald-cron-arm Jan 20, 2026
1b5a0b1
Add branch specific generate_tls_handshake_tests.py file
ronald-cron-arm Jan 20, 2026
8ab1440
ssl_server2.c: Flush stdout to improve logs timeliness
ronald-cron-arm Jan 29, 2026
86b7df5
ssl_tls.c: Rename and expand ssl_tls13_get_hs_msg_name
ronald-cron-arm Feb 3, 2026
7fe38dd
ssl_msg.c: Improve HS message reassembly completed message
ronald-cron-arm Feb 3, 2026
8f0240c
ssl-opt.sh: Remove CH reassembly unsupported test
ronald-cron-arm Jan 14, 2026
cad9c8a
ssl-opt.sh: Remove DTLS reassembly redundant test
ronald-cron-arm Feb 3, 2026
addf640
ssl-opt.sh: Improve DTLS reassembly tests
ronald-cron-arm Feb 3, 2026
b952ba0
ssl-opt.sh: Improve DTLS proxy 3d tests
ronald-cron-arm Feb 3, 2026
4f07414
ssl_msg.c: Improve handshake message fragmenting message
ronald-cron-arm Feb 3, 2026
076ddc3
tests: cmake: Fix dependency on generate_tls_handshake_tests.py
ronald-cron-arm Feb 13, 2026
73be048
ssl-opt.sh: Revert leftover debug level increase
ronald-cron-arm Feb 13, 2026
86eac79
Have MBEDTLS_TIMING_C require MBEDTLS_HAVE_TIME
gilles-peskine-arm Feb 19, 2026
137b5b7
Simplify MBEDTLS_TIMING_C to use mbedtls_ms_time()
gilles-peskine-arm Feb 18, 2026
7ea3182
Fix build error when MBEDTLS_TIMING_C and MBEDTLS_HAVE_TIME are both …
gilles-peskine-arm Feb 19, 2026
5890b22
Fix a build error with MSVC
gilles-peskine-arm Feb 19, 2026
e2b04b6
Don't use printf("%llu")
gilles-peskine-arm Feb 19, 2026
ed642ca
Fix inclusion of <time.h> when MBEDTLS_HAVE_TIME is disabled
gilles-peskine-arm Feb 19, 2026
3b49842
Merge pull request #10595 from valeriosetti/fix-tls12-sha-guards
valeriosetti Feb 20, 2026
d507b46
Remove DriverVsReference tasks from analyze_outcomes.py
Feb 19, 2026
f004998
Add issue number
gilles-peskine-arm Feb 21, 2026
99c4159
Disable Unix-like integration code in baremetal builds in all.sh
gilles-peskine-arm Feb 21, 2026
bbf8bbb
Merge pull request #10575 from ronald-cron-arm/dtls-client-hello-defr…
bensze01 Feb 22, 2026
b41c8f6
Merge pull request #10608 from bjwtaylor/DriverVsReference_removal
valeriosetti Feb 23, 2026
3981396
ssl_tls.c: Allow client hello fragmentation
ronald-cron-arm Jan 13, 2026
fa5e75d
ssl-opt.sh: Relax deps of handshake defrag tests
ronald-cron-arm Jan 14, 2026
2e9b968
ssl_server2.c: DTLS: Attempt to read the response to the close notifi…
ronald-cron-arm Jan 21, 2026
516e74c
ssl_tls12_server.c: Document replay check and update in ssl_parse_cli…
ronald-cron-arm Jan 12, 2026
a50110b
ssl_tls12_server.c: Use mbedtls_ssl_read_record() only to read the Cl…
ronald-cron-arm Jan 14, 2026
943c107
ssl_tls12_server.c: Move ClientHello message_seq adjustment
ronald-cron-arm Jan 8, 2026
00160b9
ssl_tls12_server.c: Move ClientHello record sequence_number init
ronald-cron-arm Jan 22, 2026
0db3a49
ssl_tls12_server.c: parse_client_hello: Remove remaining record level…
ronald-cron-arm Jan 22, 2026
d718a35
ssl_msg.c: Remove some now unnecessary code
ronald-cron-arm Jan 23, 2026
c1cbfdd
ssl-opt.sh: Add interop test of DTLS defragmentation on server side
ronald-cron-arm Jan 14, 2026
6e270c0
ssl-opt.sh: Add tests with CH fragmented with DTLS in default config
ronald-cron-arm Jan 16, 2026
e436f74
ssl-opt.sh: Fix/improve comments
ronald-cron-arm Feb 10, 2026
3ddc63d
ssl-opt.sh: DTLS reassembly: Improve max_content_len requirements
ronald-cron-arm Feb 11, 2026
814f5da
ssl-opt.sh: Use more diverse MTUs
ronald-cron-arm Feb 11, 2026
3771c17
Update mbedtls_ssl_handshake() documentation
ronald-cron-arm Feb 13, 2026
a5f45bb
Add change log
ronald-cron-arm Feb 13, 2026
9394d25
Merge pull request #10584 from davidhorstmann-arm/add-link-to-crypto-…
yanesca Feb 24, 2026
53dd7d0
ssl_tls12_server.c: Update hs status after some validations of the Cl…
ronald-cron-arm Feb 23, 2026
64898a5
Add warning in mbedtls_ssl_context_save/load documentation
ronald-cron-arm Feb 25, 2026
d5d7131
Add warning in mbedtls_ssl_session_load/save documentation
ronald-cron-arm Feb 25, 2026
027ed1f
Reduce duplication between save/load documentations
ronald-cron-arm Feb 25, 2026
75b8b0f
Add unit test with TLS 1.2 nego after HRR
ronald-cron-arm Feb 17, 2026
f549fc7
Fix null pointer dereference in string to names
davidhorstmann-arm Feb 26, 2026
2acb9a2
Add ChangeLog entry for NULL dereference fix
davidhorstmann-arm Feb 26, 2026
ed767ba
tls13: Do not negotiate TLS 1.2 after an HRR
ronald-cron-arm Feb 19, 2026
8731587
tls13: Commit to session resume only when we actually do it
ronald-cron-arm Feb 26, 2026
c2cb856
Merge pull request #10607 from gilles-peskine-arm/timing-use-mstime
bensze01 Feb 26, 2026
29d00fa
Create a mbedtls_common.h for the project
gilles-peskine-arm Jan 29, 2026
3a98885
Create a header to declare platform requirements
gilles-peskine-arm Jan 29, 2026
7af09b4
Add a few more test cases for printf formats
gilles-peskine-arm Jan 26, 2026
3c67824
test_suite_debug: test the printf used by debug.c
gilles-peskine-arm Feb 17, 2026
cdf3b0a
MingW: insist on standard-compliant printf() and friends
gilles-peskine-arm Jan 30, 2026
64ff7fc
Stop using MBEDTLS_PRINTF_SIZET
gilles-peskine-arm Feb 20, 2026
4ec9536
Temporarily force standard *printf functions on MingW
gilles-peskine-arm Feb 26, 2026
eb13282
Update framework with support for standard printf on MinGW
gilles-peskine-arm Feb 28, 2026
a3d55d9
Document the purpose of mbedtls_common.h
gilles-peskine-arm Mar 2, 2026
436f1e3
Include the config in mbedtls_commmon.h as promised
gilles-peskine-arm Mar 2, 2026
29192f0
Use the mbedtls_common.h in generated library .c files as well
gilles-peskine-arm Mar 2, 2026
1d088bb
Merge pull request #10625 from gilles-peskine-arm/unix-detection-2026…
bensze01 Mar 2, 2026
3d4b7cd
Merge remote-tracking branch 'development' into development-restricted
gilles-peskine-arm Mar 3, 2026
5d479d8
Update tf-psa-crypto with unified Unix detection
gilles-peskine-arm Feb 17, 2026
e8dec9c
Unify the detection of Unix-like platforms
gilles-peskine-arm Jan 16, 2026
37fd7d5
Start from a clean baseline for C11 ext1 and POSIX features
gilles-peskine-arm Jan 30, 2026
037f3c6
Tell MSVC to allow non-s functions where needed
gilles-peskine-arm Feb 21, 2026
b38e28d
Make sure we declare TF-PSA-Crypto platform requirements before inclu…
gilles-peskine-arm Mar 4, 2026
73639eb
Merge pull request #1494 from gilles-peskine-arm/merge-development-re…
mpg Mar 4, 2026
68c44a4
Update attribution to conform to contributor's request
gilles-peskine-arm Mar 5, 2026
dba3c2d
Merge pull request #1499 from gilles-peskine-arm/inet_pton-changelog-…
davidhorstmann-arm Mar 5, 2026
65da2a3
Merge pull request #10606 from gilles-peskine-arm/unix-detection-2026…
gilles-peskine-arm Mar 6, 2026
cf02249
Merge remote-tracking branch 'development' into merge-development-res…
gilles-peskine-arm Mar 8, 2026
ba57743
Update framework with psasim serialise supporting unsigned and crypto…
gilles-peskine-arm Mar 8, 2026
1ef64a7
programs: metatest: Remove include path duplication
ronald-cron-arm Feb 13, 2026
ae82217
programs: metatest: Add tf-psa-crypto/platform as include dir
ronald-cron-arm Feb 14, 2026
03ee085
Remove duplicated recursion tests
ronald-cron-arm Feb 14, 2026
24bf981
components*.sh: Handle current and upcoming object paths
ronald-cron-arm Feb 14, 2026
325170b
legacy.make: Add globs and paths for tags and cscope
ronald-cron-arm Feb 14, 2026
f3a20d2
Prepare libtestdriver1 build for upcoming directory changes
ronald-cron-arm Feb 14, 2026
a400a3b
Adapt list_internal_identifiers.py for upcoming directory changes
ronald-cron-arm Feb 14, 2026
32479c6
cmake: Introduce TF_PSA_CRYPTO_PRIVATE_INCLUDE_DIRS
ronald-cron-arm Feb 14, 2026
aa02425
tests: make: Fix spaces instead of tab
ronald-cron-arm Feb 27, 2026
269b390
components-platform.sh: Fix path of compiler directory
ronald-cron-arm Mar 9, 2026
bef136e
Update framework pointer to the merge of PR 280
ronald-cron-arm Mar 9, 2026
b6c3aa7
Merge pull request #1502 from gilles-peskine-arm/merge-development-re…
mpg Mar 9, 2026
fe2599e
Merge pull request #1487 from davidhorstmann-arm/fix-null-pointer-der…
mpg Mar 9, 2026
109ce5e
Merge pull request #10617 from ronald-cron-arm/tf-psa-crypto-reorg-prep
valeriosetti Mar 9, 2026
11d1f51
Merge pull request #10464 from bensze01/abicheck-port
gilles-peskine-arm Mar 9, 2026
65a0381
Improve comments
ronald-cron-arm Mar 9, 2026
7f40da1
ssl_tls12_server.c: Move back the digest update
ronald-cron-arm Mar 10, 2026
09210ea
Restore seq number check of post-handshake ClientHello msg
ronald-cron-arm Mar 10, 2026
e051abd
tls13_hrr_then_tls12_second_client_hello: Various improvements
ronald-cron-arm Mar 10, 2026
b5749b8
Merge pull request #10576 from ronald-cron-arm/dtls-client-hello-defr…
ronald-cron-arm Mar 10, 2026
624fc2e
Move TLS 1.3 verify-result setting for PSK
davidhorstmann-arm Mar 10, 2026
139ac45
tls13_hrr_then_tls12_second_client_hello: Improve some comments
ronald-cron-arm Mar 10, 2026
759895e
tls13_hrr_then_tls12_second_client_hello: Improve client and server s…
ronald-cron-arm Mar 10, 2026
622b69d
Add change log
ronald-cron-arm Mar 10, 2026
c6e1d67
ssl-opt.sh: Check for cert verify skipped
davidhorstmann-arm Mar 11, 2026
b9ff81c
Merge remote-tracking branch 'development' into merge-development-res…
gilles-peskine-arm Mar 11, 2026
f51e72a
Update tf-psa-crypto to development
gilles-peskine-arm Mar 11, 2026
708b401
ssl-opt.sh Check for cert verify skipped
davidhorstmann-arm Mar 11, 2026
cb4d172
Merge pull request #1507 from gilles-peskine-arm/merge-development-re…
gilles-peskine-arm Mar 11, 2026
23318bd
Remove PSA status coverage log test
gilles-peskine-arm Mar 3, 2026
326fb18
Move some scripts from mbedtls into the framework
gilles-peskine-arm Mar 3, 2026
702b389
Update framework with moved scripts
gilles-peskine-arm Mar 3, 2026
c4d40c2
Move requirements to the framework for scripts in the framework
gilles-peskine-arm Feb 26, 2026
f840cb1
Update paths after moving some scripts to the framework
gilles-peskine-arm Feb 26, 2026
931fc8c
Update massif_max.pl location
gilles-peskine-arm Mar 12, 2026
95f0885
library: x509: fix guard in mbedtls_x509_crt_profile_next
valeriosetti Mar 13, 2026
488dbf8
Merge pull request #10638 from valeriosetti/x509-fix-ecp-guard
valeriosetti Mar 13, 2026
868bea4
Only check for verify skipped if we have certs
davidhorstmann-arm Mar 12, 2026
22245cb
Add unused fields to SSL structs
davidhorstmann-arm Mar 13, 2026
a9ba597
Add unused field to mbedtls_x509_crt structure
davidhorstmann-arm Mar 13, 2026
937c70a
Do not check fail cases for verify skipped
davidhorstmann-arm Mar 13, 2026
d8868c4
Merge pull request #1486 from ronald-cron-arm/tls12-2nd-client-hello
mpg Mar 16, 2026
d7b85b7
sig_algs: fix typo in client's sig_algs check
yanesca Jan 23, 2026
01f6ccf
Fix root cert prerequisites
yanesca Feb 18, 2026
bab37f6
Fix mbedtls_test_free_handshake_options
yanesca Feb 18, 2026
475ac34
sig_algs: Add non-regression test
yanesca Jan 23, 2026
f68d402
sig_algs: add ChangeLog
yanesca Jan 23, 2026
e889497
Reintroduce ssl_parse_signature_algorithm
yanesca Mar 10, 2026
25f971d
Fix the MBEDTLS_TEST_HAS_ADDITIONAL_HASH macro
yanesca Mar 10, 2026
971309a
Use API function to set sig_alg config in test
yanesca Mar 10, 2026
305aef1
send_invalid_sig_alg: check logs
yanesca Mar 10, 2026
6cb0d86
Fix some compile time guards
yanesca Mar 10, 2026
c139e44
Fix typos
yanesca Mar 10, 2026
6394676
Fix test case dependency
yanesca Mar 11, 2026
75092c8
send_invalid_sig_alg: add baseline test
yanesca Mar 11, 2026
3d02353
Fix code style
yanesca Mar 11, 2026
8d21dbf
Fix dependencies
yanesca Mar 11, 2026
c46eccf
ssl_parse_signature_algorithm: caller to get bytes
yanesca Mar 11, 2026
862c191
send_invalid_sig_alg: reduce debug dependency
yanesca Mar 11, 2026
7b255e3
ssl_parse_signature_algorithm: match error codes
yanesca Mar 11, 2026
5ffef28
Fix code style
yanesca Mar 12, 2026
703c2a6
Fix a typo and an oversight
yanesca Mar 13, 2026
6714b39
Improve ssl_parse_signature_algorithm
yanesca Mar 13, 2026
ae88559
library: bulk replace MBEDTLS_RSA_C with PSA_WANT_KEY_TYPE_RSA_KEY_PA…
valeriosetti Feb 10, 2026
ff26306
tests: bulk replace MBEDTLS_RSA_C with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
valeriosetti Feb 10, 2026
2fab513
tests: bulk replace MBEDTLS_RSA_C with PSA_HAVE_ALG_SOME_RSA_VERIFY
valeriosetti Feb 10, 2026
ed0aebd
tests: bulk replace MBEDTLS_RSA_C with PSA_HAVE_ALG_SOME_RSA_SIGN
valeriosetti Feb 10, 2026
0dfc52e
tests: ssl: replace remaining occurrences of legacy RSA algorithms
valeriosetti Mar 3, 2026
2258cb7
tests: pkcs7: ease requirements for parse tests
valeriosetti Mar 11, 2026
894cea1
Add change log
ronald-cron-arm Mar 16, 2026
0862cf3
Merge pull request #10640 from davidhorstmann-arm/add-unused-fields-t…
davidhorstmann-arm Mar 16, 2026
e4d2126
tests: ssl: replace dependency from RSA PSS to PKCS v1.5 in one hands…
valeriosetti Mar 11, 2026
ccea2fd
Improve change log
ronald-cron-arm Mar 17, 2026
d7f2a4c
Merge pull request #10591 from valeriosetti/replace-legacy-rsa-symbols
mpg Mar 17, 2026
cb0b594
Merge pull request #10442 from davidhorstmann-arm/verify-result-defau…
ronald-cron-arm Mar 17, 2026
a08cff3
Merge pull request #1483 from ronald-cron-arm/context_load_and_sessio…
ronald-cron-arm Mar 17, 2026
9f19fe1
Merge pull request #1466 from yanesca/1445_fix_signature_algorithm_in…
ronald-cron-arm Mar 17, 2026
831ea1e
Updated tf-psa-crypto pointer
minosgalanakis Mar 17, 2026
497abfa
Merge pull request #10644 from minosgalanakis/mbedtls-release-sync
ronald-cron-arm Mar 17, 2026
7f4fe39
Merge pull request #10624 from gilles-peskine-arm/audit_validity_date…
gilles-peskine-arm Mar 19, 2026
72330ca
Add 4.1 backport line to the PR template
gilles-peskine-arm Mar 19, 2026
10988b0
Clarify prerequisite, consuming or side PR
gilles-peskine-arm Mar 19, 2026
c2139f8
Add repository shortcut suggestion
gilles-peskine-arm Mar 19, 2026
4a21496
Prepare to generalize check_option_lists.py
gilles-peskine-arm Feb 11, 2026
260992c
check_committed_generated_files.py: use the new generate_files_helper…
gilles-peskine-arm Feb 11, 2026
61cf7bd
Add Python requirements from framework/util
gilles-peskine-arm Feb 11, 2026
aa40ca9
Move check_committed_generated_files to its own component
gilles-peskine-arm Feb 26, 2026
92cfa4e
cmake: make Threads package search quiet
valeriosetti Mar 23, 2026
63d1f7f
Merge pull request #10649 from valeriosetti/skip-thread-cmake-search
valeriosetti Mar 23, 2026
ade5655
Revert "ssl_server2.c: DTLS: Attempt to read the response to the clos…
ronald-cron-arm Mar 24, 2026
315c970
dtls: Fix debug log
ronald-cron-arm Mar 20, 2026
676d74e
dtls: Error out on invalid/unexpected record header
ronald-cron-arm Mar 20, 2026
16c5dd9
Introduce ssl_buffering_shift_slots
ronald-cron-arm Mar 18, 2026
912ef74
Update buffering when adapting to ClientHello message_seq
ronald-cron-arm Mar 18, 2026
0c301a6
dtls: Improve comment
ronald-cron-arm Mar 23, 2026
f9b7441
dtls: Keep invalid/unexpected record header error code
ronald-cron-arm Mar 23, 2026
140ebea
dtls: parse_client_hello: Adapt mbedtls_ssl_read_record() error code
ronald-cron-arm Mar 23, 2026
c9264ad
dtls: Fix log level
ronald-cron-arm Mar 23, 2026
f285018
Disable "DTLS proxy: 3d, (openssl|gnutls) client, fragmentation" tests
ronald-cron-arm Mar 24, 2026
fbe388d
ssl-opt.sh: Fix log checks in some "DTLS reassembly" tests
ronald-cron-arm Mar 24, 2026
f2f44a9
Restrict mapping of UNEXPECTED_RECORD to UNEXPECTED_MESSAGE
ronald-cron-arm Mar 24, 2026
1141cd0
Improve comments
ronald-cron-arm Mar 24, 2026
7a8fbc2
Remove debug leftover
ronald-cron-arm Mar 24, 2026
1330606
dtls: Fix adaptation to first ClientHello
ronald-cron-arm Mar 24, 2026
5baf688
Merge pull request #1529 from ronald-cron-arm/dtls
minosgalanakis Mar 25, 2026
f3f2707
Added attributions & CVE
minosgalanakis Mar 26, 2026
feb0dd0
Extended attributions & CVE
minosgalanakis Mar 26, 2026
fc31714
Merge pull request #1534 from Mbed-TLS/release/changelog_fixes_4.1.0
minosgalanakis Mar 26, 2026
308e7fb
Merge remote-tracking branch 'restricted/development-restricted' into…
minosgalanakis Mar 26, 2026
43b8954
Updated framework submodule
minosgalanakis Mar 26, 2026
83d1ebc
Updated tf psa-crypto submodule
minosgalanakis Mar 26, 2026
e89565f
Bump version
minosgalanakis Mar 26, 2026
641fa26
Assemble ChangeLog
minosgalanakis Mar 26, 2026
0fe989b
Update BRANCHES.md
minosgalanakis Mar 18, 2026
32a3d52
Merge pull request #10626 from gilles-peskine-arm/check_committed_gen…
valeriosetti Mar 30, 2026
6804c92
Merge tag 'mbedtls-4.1.0' into mbedtls-4.1.0_mergeback
minosgalanakis Mar 31, 2026
0cfd964
Updated tf-psa-crypto submodule
minosgalanakis Mar 31, 2026
be18f3f
Add a section about compiler-introduced timing side channels
gilles-peskine-arm Nov 20, 2025
54ebb9b
Mention the new advice about compiler options in the changelog
gilles-peskine-arm Nov 20, 2025
d1f0ce8
Be more specific about what compiler options we consider legitimate
gilles-peskine-arm Feb 26, 2026
0333486
Merge pull request #10670 from gilles-peskine-arm/security-md-mention…
davidhorstmann-arm Apr 1, 2026
619f1ac
Update framework with UNCOVERED_TESTS in outcome analysis
gilles-peskine-arm Apr 5, 2026
68d6b07
Rename IGNORED_TESTS to UNCOVERED_TESTS
gilles-peskine-arm Apr 5, 2026
bb5cfbb
Move _has_word_re to the framework
gilles-peskine-arm Apr 5, 2026
1978e1b
Ignore test cases that TF-PSA-Crypto tells us to ignore
gilles-peskine-arm Apr 6, 2026
667a3f6
Move test currently covered by crypto from uncovered list to ignored …
gilles-peskine-arm Apr 7, 2026
16a90a5
Add copyright line
gilles-peskine-arm Apr 8, 2026
d25f039
INTERNAL_TEST_CASES moved to a separate data-only module
gilles-peskine-arm Apr 8, 2026
806e1d3
Documentation improvements
gilles-peskine-arm Apr 8, 2026
9248af9
Create a directory for maintainer-only Python scripts
gilles-peskine-arm Mar 31, 2026
cc134b0
Update crypto submodule with analyze_outcomes.py
gilles-peskine-arm Apr 10, 2026
2a7d1ec
Merge pull request #10676 from gilles-peskine-arm/analyze_outcomes-re…
gilles-peskine-arm Apr 13, 2026
6b31bc6
Unify TF-PSA-Crypto and mbedtls templates
gilles-peskine-arm Apr 13, 2026
8bf8941
Merge pull request #10647 from gilles-peskine-arm/github-pr-template-…
gilles-peskine-arm Apr 15, 2026
8426c9b
Merge pull request #10684 from gilles-peskine-arm/maintainer-scripts-…
gilles-peskine-arm Apr 15, 2026
ab99f98
Merge remote-tracking branch 'mbedtls/development' into conf-crypto-c…
ronald-cron-arm Apr 17, 2026
5b3df6f
Remove component_test_psa_crypto_config_(accel|reference)_* components
ronald-cron-arm Apr 17, 2026
a0adc1c
Remove remaining MbedTLS libtestdriver1 components
ronald-cron-arm Apr 17, 2026
698939c
Remove various config crypto components
ronald-cron-arm Apr 17, 2026
363c004
Add CMAKE_EXTRAS_BUILD_DIR
ronald-cron-arm Apr 16, 2026
cd2a977
Remove TLS related code, comments
ronald-cron-arm Apr 16, 2026
65c7f1c
Fix file paths
ronald-cron-arm Apr 16, 2026
141ce56
Fix build targets
ronald-cron-arm Apr 16, 2026
40d40f3
Fix config preset
ronald-cron-arm Apr 16, 2026
651ba80
Remove call to run-metatests.sh
ronald-cron-arm Apr 16, 2026
1f073e6
Remove calls to selftest program
ronald-cron-arm Apr 16, 2026
f5bec0d
Fix armcc support check
ronald-cron-arm Apr 17, 2026
1a30681
Fix armc6 build helper
ronald-cron-arm Apr 17, 2026
c0ea3da
analyze_outcomes.py: Update IGNORED_TESTS
ronald-cron-arm Apr 17, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
67 changes: 8 additions & 59 deletions tests/scripts/analyze_outcomes.py
Original file line number Diff line number Diff line change
Expand Up @@ -25,93 +25,42 @@ class CoverageTask(outcome_analysis.CoverageTask):
# covered by Mbed TLS testing.
# https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/740
IGNORED_TESTS = {
'test_suite_aes.xts': [
re.compile('.*'),
],
'test_suite_block_cipher': [
re.compile('.*'),
],
'test_suite_cipher.aes': [
re.compile('.*XTS.*'),
],
'test_suite_config.psa_boolean': [
re.compile('.* !.*'),
'Config: MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH',
'Config: MBEDTLS_BLOCK_CIPHER_NO_DECRYPT',
'Config: !MBEDTLS_PLATFORM_C',
'Config: !MBEDTLS_PSA_CRYPTO_C',
'Config: !PSA_WANT_ALG_HKDF',
'Config: !PSA_WANT_ALG_SHA_224',
'Config: !PSA_WANT_ALG_SHA_256',
'Config: !PSA_WANT_ALG_TLS12_PRF',
'Config: !PSA_WANT_ALG_TLS12_PSK_TO_MS',
'Config: !PSA_WANT_KEY_TYPE_AES',
'Config: MBEDTLS_DEPRECATED_WARNING',
'Config: MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED',
'Config: MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS',
'Config: MBEDTLS_PSA_CRYPTO_CLIENT',
'Config: MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG',
'Config: MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER',
'Config: MBEDTLS_PSA_P256M_DRIVER_ENABLED',
'Config: MBEDTLS_PSA_STATIC_KEY_SLOTS',
'Config: MBEDTLS_RSA_NO_CRT',
],
'test_suite_config.psa_combinations': [
'Config: PSA_WANT_ALG_ECDSA without PSA_WANT_ALG_DETERMINISTIC_ECDSA',
],
'test_suite_ctr_drbg': [
re.compile('.*AES-128.*'),
'CTR_DRBG entropy strength: 128 bits',
],
'test_suite_pk': [
'PK size macro: MBEDTLS_PK_ECP_PRV_DER_MAX_BYTES: only curve is P-256',
'PK size macro: MBEDTLS_PK_ECP_PUB_DER_MAX_BYTES: only curve is P-256',
'PK size macro: MBEDTLS_PK_MAX_PUBKEY_RAW_LEN: RSA, !ECC',
],
'test_suite_psa_crypto': [
'PSA MAC setup: algorithm known but not supported, long key',
'PSA MAC setup: algorithm known but not supported, short key',
'PSA MAC setup: bad algorithm (unsupported HMAC hash algorithm)',
'PSA generate key custom: RSA, e=3 with driver and no fallback (not yet supported)',
'PSA generate key: RSA, key pair size does not fit in static key buffer',
'PSA generate key: RSA, key pair size fits in static key buffer',
'PSA sign hash int (ops=inf): det ECDSA not supported',
'PSA sign hash int (ops=min): det ECDSA not supported',
'PSA sign hash int: ECDSA not supported',
'PSA sign hash: deterministic ECDSA not supported',
'PSA sign message: deterministic ECDSA not supported',
'PSA verify hash with keypair: deterministic ECDSA SECP256R1, only randomized supported', #pylint: disable=line-too-long
'PSA verify hash: deterministic ECDSA SECP256R1, only randomized supported',
],
'test_suite_psa_crypto_driver_wrappers': [
re.compile('PSA MAC .*'),
re.compile('PSA decrypt transparent driver: .*'),
re.compile('PSA encrypt transparent driver: .*'),
re.compile('PSA encrypt-decrypt transparent driver: .*'),
],
'test_suite_psa_crypto_entropy': [
'Fake entropy: more than one block in two steps',
'Fake entropy: one block eventually',
'Fake entropy: one block in two steps',
re.compile('PSA external RNG failure: .*'),
],
'test_suite_psa_crypto_not_supported.generated': [
re.compile('.*'),
],
'test_suite_psa_crypto_op_fail.generated': [
re.compile('.* !.*'),
],
'test_suite_psa_crypto_op_fail.misc': [
'PSA sign DETERMINISTIC_ECDSA(SHA_256): !DETERMINISTIC_ECDSA but ECDSA with ECC_KEY_PAIR(SECP_R1)', #pylint: disable=line-too-long
'PSA sign RSA_PSS(SHA_256): RSA_PSS not enabled, key pair',
],
'test_suite_psa_crypto_persistent_key': [
re.compile('Load key: owner=[^0].*'),
],
'test_suite_psa_crypto_slot_management': [
'Copy persistent to persistent, same id but different owner',
'Create not supported',
'Non reusable key slots integrity in case of key slot starvation',
],
'test_suite_psa_crypto_storage_format.misc': [
'PSA storage read: key larger than MBEDTLS_PSA_STATIC_KEY_SLOT_BUFFER_SIZE',
],
'test_suite_random': [
'PSA classic wrapper: HMAC_DRBG max',
'PSA classic wrapper: external RNG large',
],
}

# Tests that are not covered for a tracked reason, and that
Expand Down
Loading