yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
mbedtls/tests/suites/test_suite_ssl.data

3453 lines
208 KiB
Text
Raw Normal View History

Test new semantics for static PSK configuration Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-04-19 22:59:22 +02:00
Attempt to register multiple PSKs
test_multiple_psks:
Attempt to register multiple PSKS, incl. opaque PSK, #0
test_multiple_psks_opaque:0
Attempt to register multiple PSKs, incl. opaque PSK, #1
test_multiple_psks_opaque:1
Attempt to register multiple PSKs, incl. opaque PSK, #2
test_multiple_psks_opaque:2
Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. Signed-off-by: Shaun Case <warmsocks@gmail.com> Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
2021-12-21 06:14:10 +01:00
Test callback buffer sanity
Add mbedtls_test_buffer to SSL unit tests In a unit test we want to avoid accessing the network. To test the handshake in the unit test suite we need to implement a connection between the server and the client. This ring buffer implementation will serve as the said connection.
2019-11-26 12:11:15 +01:00
test_callback_buffer_sanity:
Callback buffer test: Exercise simple write/read
test_callback_buffer:50:25:25:25:25:0:0:0:0
Callback buffer test: Filling up the buffer
test_callback_buffer:50:50:50:50:50:0:0:0:0
Callback buffer test: Filling up the buffer in two steps
test_callback_buffer:50:20:20:0:0:30:30:50:50
Callback buffer test: Reading out the buffer in two steps
test_callback_buffer:50:50:50:30:30:0:0:20:20
Callback buffer test: Data wraps in buffer
test_callback_buffer:50:45:45:10:10:10:10:45:45
Callback buffer test: Data starts at the end
test_callback_buffer:50:50:50:49:49:10:10:11:11
Callback buffer test: Can write less than requested
test_callback_buffer:50:75:50:30:30:25:25:45:45
Callback buffer test: Can read less than requested
test_callback_buffer:50:25:25:30:25:5:5:5:5
Callback buffer test: Writing to full buffer
test_callback_buffer:50:50:50:0:0:10:0:60:50
Callback buffer test: Reading from empty buffer
test_callback_buffer:50:0:0:10:0:0:0:0:0
Break up the ssl_mock_tcp unit test Break the test up to three different tests for the sake of better readability and maintainability.
2019-12-02 16:47:26 +01:00
Test mock socket sanity
ssl_mock_sanity:
Add non-blocking mock TCP callbacks to SSL tests
2019-11-27 14:31:42 +01:00
Test mock blocking TCP connection
Change non-blocking read/write in TCP mock socket Previously mocked non-blocking read/write was returning 0 when buffer was empty/full. That was causing ERR_SSL_CONN_EOF error in tests which was using these mocked callbacks. Beside that non-blocking read/write was returning ERR_SSL_WANT_READ/_WRITE depending on block pattern set by test design. Such behavior forced to redesign of these functions so that they could be used in other tests 
2020-01-15 16:19:07 +01:00
ssl_mock_tcp:1
Add non-blocking mock TCP callbacks to SSL tests
2019-11-27 14:31:42 +01:00
Change non-blocking read/write in TCP mock socket Previously mocked non-blocking read/write was returning 0 when buffer was empty/full. That was causing ERR_SSL_CONN_EOF error in tests which was using these mocked callbacks. Beside that non-blocking read/write was returning ERR_SSL_WANT_READ/_WRITE depending on block pattern set by test design. Such behavior forced to redesign of these functions so that they could be used in other tests 
2020-01-15 16:19:07 +01:00
Test mock non-blocking TCP connection
ssl_mock_tcp:0
Add mbedtls_mock_socket to SSL unit tests In a unit test we want to avoid accessing the network. To test the handshake in the unit test suite we need to implement a connection between the server and the client. This socket implementation uses two ring buffers to mock the transport layer.
2019-11-27 12:12:14 +01:00
Break up the ssl_mock_tcp unit test Break the test up to three different tests for the sake of better readability and maintainability.
2019-12-02 16:47:26 +01:00
Test mock blocking TCP connection (interleaving)
Change non-blocking read/write in TCP mock socket Previously mocked non-blocking read/write was returning 0 when buffer was empty/full. That was causing ERR_SSL_CONN_EOF error in tests which was using these mocked callbacks. Beside that non-blocking read/write was returning ERR_SSL_WANT_READ/_WRITE depending on block pattern set by test design. Such behavior forced to redesign of these functions so that they could be used in other tests 
2020-01-15 16:19:07 +01:00
ssl_mock_tcp_interleaving:1
Break up the ssl_mock_tcp unit test Break the test up to three different tests for the sake of better readability and maintainability.
2019-12-02 16:47:26 +01:00
Change non-blocking read/write in TCP mock socket Previously mocked non-blocking read/write was returning 0 when buffer was empty/full. That was causing ERR_SSL_CONN_EOF error in tests which was using these mocked callbacks. Beside that non-blocking read/write was returning ERR_SSL_WANT_READ/_WRITE depending on block pattern set by test design. Such behavior forced to redesign of these functions so that they could be used in other tests 
2020-01-15 16:19:07 +01:00
Test mock non-blocking TCP connection (interleaving)
ssl_mock_tcp_interleaving:0
Break up the ssl_mock_tcp unit test Break the test up to three different tests for the sake of better readability and maintainability.
2019-12-02 16:47:26 +01:00
Add a message metadata queue in ssl tests Add a metadata queue that will be used on top of the ring buffer callbacks. Add normal and negative tests.
2020-01-22 12:36:39 +01:00
Message queue - sanity
ssl_message_queue_sanity:
Message queue - basic test
ssl_message_queue_basic:
Message queue - overflow/underflow
ssl_message_queue_overflow_underflow:
Message queue - interleaved
ssl_message_queue_interleaved:
Message queue - insufficient buffer
ssl_message_queue_insufficient_buffer:
Add a message-based socket mock connection to the ssl tests The connection will send/receive full messages.
2020-01-22 09:40:00 +01:00
Message transport mock - uninitialized structures
ssl_message_mock_uninitialized:
Message transport mock - basic test
ssl_message_mock_basic:
Message transport mock - queue overflow/underflow
ssl_message_mock_queue_overflow_underflow:
Message transport mock - socket overflow
ssl_message_mock_socket_overflow:
Message transport mock - truncated message
ssl_message_mock_truncated:
Message transport mock - socket read error
ssl_message_mock_socket_read_error:
Message transport mock - one-way interleaved sends/reads
ssl_message_mock_interleaved_one_way:
Message transport mock - two-way interleaved sends/reads
ssl_message_mock_interleaved_two_ways:
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
Test mbedtls_endpoint sanity for the client
mbedtls_endpoint_sanity:MBEDTLS_SSL_IS_CLIENT
Test mbedtls_endpoint sanity for the server
ssl_tls.c: Reject TLS 1.3 version configuration for server Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-15 15:18:51 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
mbedtls_endpoint_sanity:MBEDTLS_SSL_IS_SERVER
Test moving clients handshake to state: HELLO_REQUEST
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_HELLO_REQUEST:1
Test moving clients handshake to state: CLIENT_HELLO
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CLIENT_HELLO:1
Test moving clients handshake to state: SERVER_HELLO
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_HELLO:1
Test moving clients handshake to state: SERVER_CERTIFICATE
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_CERTIFICATE:1
Test moving clients handshake to state: SERVER_KEY_EXCHANGE
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_KEY_EXCHANGE:1
Test moving clients handshake to state: CERTIFICATE_REQUEST
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CERTIFICATE_REQUEST:1
Test moving clients handshake to state: SERVER_HELLO_DONE
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_HELLO_DONE:1
Test moving clients handshake to state: CLIENT_CERTIFICATE
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CLIENT_CERTIFICATE:1
Test moving clients handshake to state: CLIENT_KEY_EXCHANGE
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CLIENT_KEY_EXCHANGE:1
Test moving clients handshake to state: CERTIFICATE_VERIFY
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CERTIFICATE_VERIFY:1
Test moving clients handshake to state: CLIENT_CHANGE_CIPHER_SPEC
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CLIENT_CHANGE_CIPHER_SPEC:1
Test moving clients handshake to state: CLIENT_FINISHED
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CLIENT_FINISHED:1
Test moving clients handshake to state: SERVER_CHANGE_CIPHER_SPEC
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_CHANGE_CIPHER_SPEC:1
Test moving clients handshake to state: SERVER_FINISHED
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_FINISHED:1
Test moving clients handshake to state: FLUSH_BUFFERS
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_FLUSH_BUFFERS:1
Test moving clients handshake to state: HANDSHAKE_WRAPUP
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_HANDSHAKE_WRAPUP:1
Test moving clients handshake to state: HANDSHAKE_OVER
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_HANDSHAKE_OVER:1
Test moving servers handshake to state: HELLO_REQUEST
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_HELLO_REQUEST:1
Test moving servers handshake to state: CLIENT_HELLO
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CLIENT_HELLO:1
Test moving servers handshake to state: SERVER_HELLO
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_HELLO:1
Test moving servers handshake to state: SERVER_CERTIFICATE
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_CERTIFICATE:1
Test moving servers handshake to state: SERVER_KEY_EXCHANGE
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_KEY_EXCHANGE:1
Test moving servers handshake to state: CERTIFICATE_REQUEST
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CERTIFICATE_REQUEST:1
Test moving servers handshake to state: SERVER_HELLO_DONE
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_HELLO_DONE:1
Test moving servers handshake to state: CLIENT_CERTIFICATE
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CLIENT_CERTIFICATE:1
Test moving servers handshake to state: CLIENT_KEY_EXCHANGE
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CLIENT_KEY_EXCHANGE:1
Test moving servers handshake to state: CERTIFICATE_VERIFY
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CERTIFICATE_VERIFY:1
Test moving servers handshake to state: CLIENT_CHANGE_CIPHER_SPEC
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CLIENT_CHANGE_CIPHER_SPEC:1
Test moving servers handshake to state: CLIENT_FINISHED
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CLIENT_FINISHED:1
Test moving servers handshake to state: SERVER_CHANGE_CIPHER_SPEC
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_CHANGE_CIPHER_SPEC:1
Test moving servers handshake to state: SERVER_FINISHED
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_FINISHED:1
Test moving servers handshake to state: FLUSH_BUFFERS
fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-01 12:05:18 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_FLUSH_BUFFERS:1
Test moving servers handshake to state: HANDSHAKE_WRAPUP
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_HANDSHAKE_WRAPUP:1
Test moving servers handshake to state: HANDSHAKE_OVER
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_HANDSHAKE_OVER:1
Negative test moving clients ssl to state: VERIFY_REQUEST_SENT
remove tls1.3 dependancy Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-05-31 13:51:38 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_SERVER_HELLO_VERIFY_REQUEST_SENT:0
Negative test moving servers ssl to state: NEW_SESSION_TICKET
remove tls1.3 dependancy Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-05-31 13:51:38 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Add test for prescribed states of handshake with the custom IO callbacks
2020-01-13 09:42:10 +01:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_SERVER_NEW_SESSION_TICKET:0
fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-06 05:25:28 +02:00
TLS 1.3:Test moving clients handshake to state: ENCRYPTED_EXTENSIONS
Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-04-30 09:15:34 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_3:!MBEDTLS_SSL_PROTO_TLS1_2
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_ENCRYPTED_EXTENSIONS:1
fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-06 05:25:28 +02:00
TLS 1.3:Test moving servers handshake to state: ENCRYPTED_EXTENSIONS
Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-04-30 09:15:34 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_3:!MBEDTLS_SSL_PROTO_TLS1_2
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_ENCRYPTED_EXTENSIONS:1
fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-06 05:25:28 +02:00
TLS 1.3:Test moving clients handshake to state: CLIENT_CERTIFICATE_VERIFY
Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-04-30 09:15:34 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_3:!MBEDTLS_SSL_PROTO_TLS1_2
test: ssl: Enable client authentication in handshake state tests The endpoint initialization function was setting up a certificate but the client certificate was not used because client authentication was not enabled (not enabled in the default SSL server configuration). Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-06-07 10:34:59 +02:00
move_handshake_to_state:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY:1
Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-04-30 09:15:34 +02:00
fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-06 05:25:28 +02:00
TLS 1.3:Test moving servers handshake to state: CLIENT_CERTIFICATE_VERIFY
Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-04-30 09:15:34 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_3:!MBEDTLS_SSL_PROTO_TLS1_2
test: ssl: Enable client authentication in handshake state tests The endpoint initialization function was setting up a certificate but the client certificate was not used because client authentication was not enabled (not enabled in the default SSL server configuration). Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-06-07 10:34:59 +02:00
move_handshake_to_state:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY:1
Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-04-30 09:15:34 +02:00
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Handshake, tls1_2
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
handshake_version:0:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Add handshake version test Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-05-26 04:43:30 +02:00
Handshake, tls1_3
fix handshake_version test fail. when both tls13 and tls12 are enabled, the test will fail. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-06-24 11:04:12 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_3:!MBEDTLS_SSL_PROTO_TLS1_2
Add handshake version test Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-05-26 04:43:30 +02:00
handshake_version:0:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Handshake, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
handshake_cipher:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:0
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Handshake, RSA-WITH-AES-128-CCM
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
handshake_cipher:"TLS-RSA-WITH-AES-128-CCM":MBEDTLS_PK_RSA:0
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Handshake, DHE-RSA-WITH-AES-256-CBC-SHA256
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED
handshake_cipher:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256":MBEDTLS_PK_RSA:0
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Handshake, ECDHE-ECDSA-WITH-AES-256-CCM
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED
handshake_cipher:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:0
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Handshake, ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
handshake_cipher:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:0
Add a PSK test to the mocked ssl handshake tests
2020-02-04 15:04:56 +01:00
Handshake, PSK-WITH-AES-128-CBC-SHA
tests: ssl: Add misssing dependencies on SHA-1 Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-10-18 10:18:46 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SHA1_C
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
handshake_psk_cipher:"TLS-PSK-WITH-AES-128-CBC-SHA":MBEDTLS_PK_RSA:"abc123":0
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
Added mis-removed test and removed unneeded tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-07-09 16:57:20 +02:00
DTLS Handshake, tls1_2
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_PROTO_DTLS
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
handshake_version:1:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2
Added mis-removed test and removed unneeded tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-07-09 16:57:20 +02:00
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
DTLS Handshake, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_SSL_PROTO_DTLS
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
handshake_cipher:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:1
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
DTLS Handshake, RSA-WITH-AES-128-CCM
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SSL_PROTO_DTLS
handshake_cipher:"TLS-RSA-WITH-AES-128-CCM":MBEDTLS_PK_RSA:1
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
DTLS Handshake, DHE-RSA-WITH-AES-256-CBC-SHA256
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SSL_PROTO_DTLS
handshake_cipher:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256":MBEDTLS_PK_RSA:1
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
DTLS Handshake, ECDHE-ECDSA-WITH-AES-256-CCM
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SSL_PROTO_DTLS
handshake_cipher:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:1
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
DTLS Handshake, ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_DTLS
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
handshake_cipher:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:1
Add DTLS handshake tests for the mocked ssl test suite Starting with TLS 1.1
2020-02-07 15:20:32 +01:00
DTLS Handshake, PSK-WITH-AES-128-CBC-SHA
tests: ssl: Add misssing dependencies on SHA-1 Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-10-18 10:18:46 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SSL_PROTO_DTLS:MBEDTLS_SHA1_C
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
handshake_psk_cipher:"TLS-PSK-WITH-AES-128-CBC-SHA":MBEDTLS_PK_RSA:"abc123":1
Add a dtls handshake test with context serialization Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-12 13:56:36 +01:00
DTLS Handshake with serialization, tls1_2
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_SSL_PROTO_DTLS
handshake_serialization
Add version & ciphersuite tests to ssl handshake Add tests exercising various protocol versions and ciphersuites in the mocked ssl handshake.
2020-02-04 15:00:01 +01:00
Add DTLS handshake fragmentation test For this test it is good to have a handshake messages length as big as possible, so for the server the certificate verification mode is changed from default NONE to REQUIRED. It requires the client to send certificate date to the server during handshake Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-21 10:59:50 +01:00
DTLS Handshake fragmentation, MFL=512
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_DTLS
Add DTLS handshake fragmentation test For this test it is good to have a handshake messages length as big as possible, so for the server the certificate verification mode is changed from default NONE to REQUIRED. It requires the client to send certificate date to the server during handshake Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-21 10:59:50 +01:00
handshake_fragmentation:MBEDTLS_SSL_MAX_FRAG_LEN_512:1:1
DTLS Handshake fragmentation, MFL=1024
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_DTLS
Add DTLS handshake fragmentation test For this test it is good to have a handshake messages length as big as possible, so for the server the certificate verification mode is changed from default NONE to REQUIRED. It requires the client to send certificate date to the server during handshake Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-21 10:59:50 +01:00
handshake_fragmentation:MBEDTLS_SSL_MAX_FRAG_LEN_1024:0:1
Add min/max version negotiation to unit tests Add the min/max version negotiation tests from ssl-opt.sh as unit tests for the sake of utility and easier running of tests during development Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2020-04-15 18:00:50 +02:00
Handshake min/max version check, all -> 1.2
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
handshake_version:0:MBEDTLS_SSL_VERSION_UNKNOWN:MBEDTLS_SSL_VERSION_UNKNOWN:MBEDTLS_SSL_VERSION_UNKNOWN:MBEDTLS_SSL_VERSION_UNKNOWN:MBEDTLS_SSL_VERSION_TLS1_2
Add min/max version negotiation to unit tests Add the min/max version negotiation tests from ssl-opt.sh as unit tests for the sake of utility and easier running of tests during development Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2020-04-15 18:00:50 +02:00
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
Handshake, select RSA-WITH-AES-256-CBC-SHA256, non-opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-WITH-AES-256-CBC-SHA256":MBEDTLS_PK_RSA:"":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256
Handshake, select RSA-WITH-AES-256-CBC-SHA256, opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-WITH-AES-256-CBC-SHA256":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_CRYPT:PSA_ALG_NONE:PSA_KEY_USAGE_DECRYPT:0:MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256
Handshake, select RSA-WITH-AES-256-CBC-SHA256, opaque, bad alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-WITH-AES-256-CBC-SHA256":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_DECRYPT:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select RSA-WITH-AES-256-CBC-SHA256, opaque, bad usage
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-WITH-AES-256-CBC-SHA256":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_CRYPT:PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, non-opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-PSK-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_RSA:"abc123":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-PSK-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_RSA:"abc123":PSA_ALG_RSA_PKCS1V15_CRYPT:PSA_ALG_NONE:PSA_KEY_USAGE_DECRYPT:0:MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque, bad alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-PSK-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_RSA:"abc123":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_DECRYPT:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque, bad usage
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-PSK-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_RSA:"abc123":PSA_ALG_RSA_PKCS1V15_CRYPT:PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque, no psk
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-RSA-PSK-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_CRYPT:PSA_ALG_NONE:PSA_KEY_USAGE_DECRYPT:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, non-opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-DHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_ALG_ANY_HASH
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-DHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:0:MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_ALG_SHA_384
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-DHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_SHA_384):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:0:MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, invalid alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-DHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_SHA_256):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-DHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_CRYPT:PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad usage
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-DHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, non-opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_ALG_ANY_HASH
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:0:MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_ALG_SHA_384
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_SHA_384):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:0:MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, invalid alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_SHA_256):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PSS(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad usage
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_RSA_C:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384":MBEDTLS_PK_RSA:"":PSA_ALG_RSA_PKCS1V15_SIGN(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, non-opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:"":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, PSA_ALG_ANY_HASH
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:0:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, PSA_ALG_SHA_256
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_SHA_256):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:0:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, bad alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDH:PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, bad usage
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA256_C:MBEDTLS_AES_C:MBEDTLS_CCM_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDHE-ECDSA-WITH-AES-256-CCM":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, non-opaque
Fix Handshake select ECDH-RSA- test dependencies Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-07-01 18:30:10 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, opaque
Fix Handshake select ECDH-RSA- test dependencies Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-07-01 18:30:10 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDH:PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:0:MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, opaque, bad alg
Fix Handshake select ECDH-RSA- test dependencies Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-07-01 18:30:10 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, opaque, bad usage
Fix Handshake select ECDH-RSA- test dependencies Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-07-01 18:30:10 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_RSA_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDH:PSA_ALG_NONE:PSA_KEY_USAGE_DECRYPT:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, non-opaque
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C:MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_NONE:PSA_ALG_NONE:0:0:MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque, PSA_ALG_ANY_HASH
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C:MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_ANY_HASH):PSA_ALG_ECDH:PSA_KEY_USAGE_SIGN_HASH|PSA_KEY_USAGE_DERIVE:0:MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque, PSA_ALG_SHA_384
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C:MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_SHA_384):PSA_ALG_ECDH:PSA_KEY_USAGE_SIGN_HASH|PSA_KEY_USAGE_DERIVE:0:MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque, missing alg
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C:MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_ANY_HASH):PSA_ALG_NONE:PSA_KEY_USAGE_SIGN_HASH|PSA_KEY_USAGE_DERIVE:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque, missing usage
Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 10:49:04 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_ECP_DP_SECP384R1_ENABLED:MBEDTLS_CAMELLIA_C:MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED:MBEDTLS_USE_PSA_CRYPTO
Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>
2022-06-30 09:06:28 +02:00
handshake_ciphersuite_select:"TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384":MBEDTLS_PK_ECDSA:"":PSA_ALG_ECDSA(PSA_ALG_ANY_HASH):PSA_ALG_ECDH:PSA_KEY_USAGE_SIGN_HASH:MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE:0
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=512 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_512:400:512:1:1
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=512 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_512:513:1536:2:3
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=1024 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_1024:1000:1024:1:1
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=1024 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_1024:1025:5120:2:5
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=2048 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_2048:2000:2048:1:1
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=2048 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_2048:2049:8192:2:4
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=4096 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_4096:4000:4096:1:1
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS, MFL=4096 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_4096:4097:12288:2:3
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS without MFL and without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_NONE:16001:16384:1:1
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via TLS without MFL and with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
app_data_tls:MBEDTLS_SSL_MAX_FRAG_LEN_NONE:16385:100000:2:7
Add tests with sending application data to test_suite_ssl
2020-01-30 15:33:42 +01:00
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=512 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_512:400:512:1:1
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=512 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_512:513:1536:0:0
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=1024 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_1024:1000:1024:1:1
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=1024 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_1024:1025:5120:0:0
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=2048 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_2048:2000:2048:1:1
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=2048 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_2048:2049:8192:0:0
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=4096 without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_4096:4000:4096:1:1
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, MFL=4096 with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
depends_on:MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_4096:4097:12288:0:0
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, without MFL and without fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_NONE:16001:16384:1:1
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Sending app data via DTLS, without MFL and with fragmentation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
app_data_dtls:MBEDTLS_SSL_MAX_FRAG_LEN_NONE:16385:100000:0:0
Add test with sending application data via DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-12 13:53:36 +01:00
Add test for renegotiation in DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-14 11:33:34 +01:00
DTLS renegotiation: no legacy renegotiation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
renegotiation:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION
Add test for renegotiation in DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-14 11:33:34 +01:00
DTLS renegotiation: legacy renegotiation
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
renegotiation:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION
Add test for renegotiation in DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-14 11:33:34 +01:00
DTLS renegotiation: legacy break handshake
test_suite_ssl refactoring: provide default options structure for tests Create and provide a structure with default options so that the caller won't have to pass all of the parameters each time the handshake is called. In the future this can be improved so that the options are passed as a string, just like in ssl-opt.sh. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-02-26 15:10:14 +01:00
renegotiation:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE
Add test for renegotiation in DTLS Signed-off-by: Piotr Nowicki <piotr.nowicki@arm.com>
2020-02-14 11:33:34 +01:00
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS serialization with MFL=512
resize_buffers_serialize_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512
DTLS serialization with MFL=1024
resize_buffers_serialize_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024
DTLS serialization with MFL=2048
resize_buffers_serialize_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048
DTLS serialization with MFL=4096
resize_buffers_serialize_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096
DTLS no legacy renegotiation with MFL=512
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS no legacy renegotiation with MFL=1024
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS no legacy renegotiation with MFL=2048
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS no legacy renegotiation with MFL=4096
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy allow renegotiation with MFL=512
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy allow renegotiation with MFL=1024
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy allow renegotiation with MFL=2048
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy allow renegotiation with MFL=4096
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy break handshake renegotiation with MFL=512
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy break handshake renegotiation with MFL=1024
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy break handshake renegotiation with MFL=2048
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:""
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
DTLS legacy break handshake renegotiation with MFL=4096
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:""
DTLS no legacy renegotiation with MFL=512, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS no legacy renegotiation with MFL=1024, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS no legacy renegotiation with MFL=2048, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS no legacy renegotiation with MFL=4096, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy allow renegotiation with MFL=512, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy allow renegotiation with MFL=1024, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy allow renegotiation with MFL=2048, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy allow renegotiation with MFL=4096, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy break handshake renegotiation with MFL=512, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy break handshake renegotiation with MFL=1024, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy break handshake renegotiation with MFL=2048, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS legacy break handshake renegotiation with MFL=4096, ECDHE-RSA-WITH-AES-256-GCM-SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_AES_C:MBEDTLS_GCM_C:MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Improve pointer calculations when resizing I/O buffers This commit introduces two changes: - Add in_msg and out_msg calculations for buffer upsizing. This was previously considered as unnecessary, but renegotiation using certain ciphersuites needs this. - Improving the way out_msg and in_msg pointers are calculated, so that even if no resizing is introduced, the pointers remain the same; New tests added: - various renegotiation schemes with a range of MFL's and ciphersuites; - an ssl-opt.sh test exercising two things that were problematic: renegotiation with TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 and a server MFL that's smaller than the one negotiated by the client. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-04-03 12:40:47 +02:00
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"
DTLS no legacy renegotiation with MFL=512, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS no legacy renegotiation with MFL=1024, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS no legacy renegotiation with MFL=2048, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS no legacy renegotiation with MFL=4096, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy allow renegotiation with MFL=512, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy allow renegotiation with MFL=1024, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy allow renegotiation with MFL=2048, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy allow renegotiation with MFL=4096, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy break handshake renegotiation with MFL=512, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy break handshake renegotiation with MFL=1024, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy break handshake renegotiation with MFL=2048, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-RSA-WITH-AES-128-CCM"
DTLS legacy break handshake renegotiation with MFL=4096, RSA-WITH-AES-128-CCM
depends_on:MBEDTLS_CCM_C:MBEDTLS_AES_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-RSA-WITH-AES-128-CCM"
DTLS no legacy renegotiation with MFL=512, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS no legacy renegotiation with MFL=1024, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS no legacy renegotiation with MFL=2048, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS no legacy renegotiation with MFL=4096, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy allow renegotiation with MFL=512, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy allow renegotiation with MFL=1024, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy allow renegotiation with MFL=2048, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy allow renegotiation with MFL=4096, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy break handshake renegotiation with MFL=512, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_512:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy break handshake renegotiation with MFL=1024, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_1024:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy break handshake renegotiation with MFL=2048, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_2048:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
DTLS legacy break handshake renegotiation with MFL=4096, DHE-RSA-WITH-AES-256-CBC-SHA256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SHA256_C
resize_buffers_renegotiate_mfl:MBEDTLS_SSL_MAX_FRAG_LEN_4096:MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE:"TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"
Add I/O buffer resizing in handshake init and free Add a conditional buffer resizing feature. Introduce tests exercising it in various setups (serialization, renegotiation, mfl manipulations). Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2020-03-03 16:39:58 +01:00
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: initial state, seqnum 0
ssl_dtls_replay:"":"000000000000":0
SSL DTLS replay: 0 seen, 1 arriving
ssl_dtls_replay:"000000000000":"000000000001":0
SSL DTLS replay: 0 seen, 0 replayed
ssl_dtls_replay:"000000000000":"000000000000":-1
SSL DTLS replay: 0-1 seen, 2 arriving
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"000000000000000000000001":"000000000002":0
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: 0-1 seen, 1 replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"000000000000000000000001":"000000000001":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: 0-1 seen, 0 replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"000000000000000000000001":"000000000000":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: new
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340001abcd12340003":"abcd12340004":0
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: way new
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340001abcd12340003":"abcd12350000":0
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: delayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340001abcd12340003":"abcd12340002":0
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
Minor spelling / grammar improvements Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
2022-04-22 15:52:41 +02:00
SSL DTLS replay: last replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340001abcd12340003":"abcd12340003":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: older replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340001abcd12340003":"abcd12340001":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: most recent in window, replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340002abcd12340003":"abcd12340002":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: oldest in window, replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340001abcd1234003f":"abcd12340000":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: oldest in window, not replayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340001abcd12340002abcd1234003f":"abcd12340000":0
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: just out of the window
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340001abcd12340002abcd1234003f":"abcd1233ffff":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: way out of the window
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340001abcd12340002abcd1234003f":"abcd12330000":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: big jump then replay
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340100":"abcd12340100":-1
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: big jump then new
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340100":"abcd12340101":0
Test and fix anti-replay functions
2014-09-24 11:13:44 +02:00
SSL DTLS replay: big jump then just delayed
Combine hex parameters in a struct
2017-06-09 05:32:58 +02:00
ssl_dtls_replay:"abcd12340000abcd12340100":"abcd123400ff":0
Add test case calling ssl_set_hostname twice Add a test case calling ssl_set_hostname twice to test_suite_ssl. When run in CMake build mode ASan, this catches the current leak, but will hopefully be fine with the new version.
2017-05-05 12:24:30 +02:00
SSL SET_HOSTNAME memory leak: call ssl_set_hostname twice
ssl_set_hostname_twice:"server0":"server1"
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Add negative tests for unexpected ver/cfg in session deserialization
2019-05-21 17:39:30 +02:00
SSL session serialization: Wrong major version
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
ssl_session_serialize_version_check:1:0:0:0
Add negative tests for unexpected ver/cfg in session deserialization
2019-05-21 17:39:30 +02:00
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
SSL session serialization: Wrong minor version
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
ssl_session_serialize_version_check:0:1:0:0
Add negative tests for unexpected ver/cfg in session deserialization
2019-05-21 17:39:30 +02:00
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
SSL session serialization: Wrong patch version
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
ssl_session_serialize_version_check:0:0:1:0
Add negative tests for unexpected ver/cfg in session deserialization
2019-05-21 17:39:30 +02:00
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
SSL session serialization: Wrong config
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Use US spelling 'serialize' instead of UK spelling 'serialise'
2019-05-29 13:44:28 +02:00
ssl_session_serialize_version_check:0:0:0:1
Add negative tests for unexpected ver/cfg in session deserialization
2019-05-21 17:39:30 +02:00
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-128-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, ARIA-256-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Remove all TLS 1.0 and 1.1 instances and add some compatibility tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-06-25 14:40:09 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Remove all TLS 1.0 and 1.1 instances and add some compatibility tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-06-25 14:40:09 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+4
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Remove all TLS 1.0 and 1.1 instances and add some compatibility tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-06-25 14:40:09 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+0
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Remove all TLS 1.0 and 1.1 instances and add some compatibility tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-06-25 14:40:09 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Remove all TLS 1.0 and 1.1 instances and add some compatibility tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-06-25 14:40:09 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, CID 4+4
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Remove all TLS 1.0 and 1.1 instances and add some compatibility tests Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
2021-06-25 14:40:09 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, CID 4+0
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-GCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, AES-128-GCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-192-GCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, AES-192-GCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-192-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-192-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-GCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Fix copy-pasta in TLS 1.3 record protection unit test names Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-28 16:41:44 +02:00
Record crypt, AES-256-GCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-GCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-192-GCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-192-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-192-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-GCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, AES-128-CCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-128-CCM, 1.2, short tag
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-128-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-192-CCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, AES-192-CCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-192-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-192-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-192-CCM, 1.2, short tag
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-192-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-192-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, AES-256-CCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, AES-256-CCM, 1.2, short tag
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, AES-256-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-128-CCM, 1.2, short tag
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-128-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-192-CCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-192-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-192-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-192-CCM, 1.2, short tag
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-192-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-192-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, CAMELLIA-256-CCM, 1.2, short tag
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, CAMELLIA-256-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, MD5
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, NULL cipher, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add tests for record encryption/decryption This commit adds tests exercising mutually inverse pairs of record encryption and decryption transformations for the various transformation types allowed in TLS: Stream, CBC, and AEAD.
2018-01-03 15:27:32 +01:00
Record crypt, ChachaPoly
depends_on:MBEDTLS_CHACHAPOLY_C:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CHACHA20_POLY1305:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, ChachaPoly, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_CHACHAPOLY_C:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record:MBEDTLS_CIPHER_CHACHA20_POLY1305:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, ChachaPoly
depends_on:MBEDTLS_CHACHAPOLY_C:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CHACHA20_POLY1305:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, ChachaPoly, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_CHACHAPOLY_C:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CHACHA20_POLY1305:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ChachaPoly, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CHACHAPOLY_C:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CHACHA20_POLY1305:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ChachaPoly, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CHACHAPOLY_C:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CHACHA20_POLY1305:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-1
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, EtM
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, MD5
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, MD5, EtM
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
test_suite_ssl.data: remove redundant test cases Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
2022-01-19 16:19:40 +01:00
Record crypt, little space, AES-128-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_ARIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_ARIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add record encryption/decryption tests for ARIA to SSL test suite
2018-10-18 16:40:08 +02:00
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, CID 4+4
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, CID 4+0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CIPHER_MODE_CBC:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CBC:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-GCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, AES-128-GCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-192-GCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, AES-192-GCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-192-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-192-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-GCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, AES-256-GCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-GCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-192-GCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-192-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-192-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-GCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-GCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-GCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_GCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_GCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-CCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, AES-128-CCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-128-CCM, 1.2, short tag
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-128-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-192-CCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, AES-192-CCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-192-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-192-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-192-CCM, 1.2, short tag
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-192-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-192-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CCM, 1.2
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Record crypt, little space, AES-256-CCM, 1.3
Rename MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL to MBEDTLS_SSL_PROTO_TLS1_3 As we have now a minimal viable implementation of TLS 1.3, let's remove EXPERIMENTAL from the config option enabling it. Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2021-12-08 16:57:54 +01:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_3:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_3:0:0
Add unit tests for TLS 1.3 record encryption Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-05-07 15:54:07 +02:00
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, AES-256-CCM, 1.2, short tag
depends_on:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, AES-256-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_AES_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_AES_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-128-CCM, 1.2, short tag
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-128-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_128_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-192-CCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-192-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-192-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-192-CCM, 1.2, short tag
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-192-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-192-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_192_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CCM, 1.2
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CCM, 1.2, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CCM, 1.2, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, CAMELLIA-256-CCM, 1.2, short tag
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CCM, 1.2, short tag, CID 4+4
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:4
Add unit tests for record protection using CID
2019-04-29 18:30:59 +02:00
Record crypt, little space, CAMELLIA-256-CCM, 1.2, short tag, CID 4+0
Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite
2019-05-20 16:40:23 +02:00
depends_on:MBEDTLS_SSL_DTLS_CONNECTION_ID:MBEDTLS_CAMELLIA_C:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_CCM_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_CAMELLIA_256_CCM:MBEDTLS_MD_MD5:0:1:MBEDTLS_SSL_VERSION_TLS1_2:4:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, SHA-384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA384:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, SHA-384, EtM
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA384_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA384:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, SHA-256
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA256:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, SHA-256, EtM
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA256_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA256:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, SHA-1
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA1:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, SHA-1, EtM
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SHA1_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_SHA1:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, MD5
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_MD5:0:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Record crypt, little space, NULL cipher, 1.2, MD5, EtM
depends_on:MBEDTLS_CIPHER_NULL_CIPHER:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_MD5_C:MBEDTLS_SSL_ENCRYPT_THEN_MAC
Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-11 19:33:16 +02:00
ssl_crypt_record_small:MBEDTLS_CIPHER_NULL:MBEDTLS_MD_MD5:1:0:MBEDTLS_SSL_VERSION_TLS1_2:0:0
Add encryption/decryption tests for small records This commit adds tests to check the behavior of the record encryption routine `ssl_encrypt_buf` when the buffer surrounding the plaintext is too small to hold the expansion in the beginning and end (due to IV's, padding, and MAC). Each test starts successively increases the space available at the beginning, end, or both, of the record buffer, and checks that the record encryption either fails with a BUFFER_TOO_SMALL error, or that it succeeds. Moreover, if it succeeds, it is checked that decryption succeeds, too, and results in the original record.
2018-01-05 16:20:24 +01:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, empty plaintext, minpad
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:-1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, empty plaintext, maxpad
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:-2
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, padlen=0
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:0
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, padlen=240
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:240
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, padlen=1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, padlen=241
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:241
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, padlen=15
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:15
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES MD5 !trunc, padlen=255
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_MD5:0:255
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, empty plaintext, minpad
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:-1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, empty plaintext, maxpad
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:-2
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, padlen=0
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:0
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, padlen=240
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:240
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, padlen=1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, padlen=241
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:241
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, padlen=15
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:15
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA1 !trunc, padlen=255
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA1:0:255
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, empty plaintext, minpad
TLS: Add negative tests for non-EtM CBC decryption Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-03 12:49:10 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:-1
TLS: Add negative tests for non-EtM CBC decryption Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-03 12:49:10 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, empty plaintext, maxpad
TLS: Add negative tests for non-EtM CBC decryption Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-03 12:49:10 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:-2
TLS: Add negative tests for non-EtM CBC decryption Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-03 12:49:10 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, padlen=0
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:0
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, padlen=240
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:240
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, padlen=1
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:1
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, padlen=241
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:241
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, padlen=15
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:15
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA256 !trunc, padlen=255
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA256:0:255
Add test cases with various record sizes - plaintext length = 0 or 1 - plaintext length + MAC length = -1 or 0 mod block_size (using the minimum plaintext length that works) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:02:59 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, empty plaintext, minpad
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:-1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, empty plaintext, maxpad
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:-2
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, padlen=0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:0
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, padlen=240
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:240
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, padlen=1
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:1
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, padlen=241
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:241
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, padlen=15
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:15
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, AES SHA384 !trunc, padlen=255
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_AES_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_AES_128_CBC:MBEDTLS_MD_SHA384:0:255
Add test cases with MD5, SHA1, SHA384 All started from a copy of the SHA256 block and modified as follows: - for MD5, just s/SHA256/MD5/ - for SHA384, adapt the dependency line then s/SHA256/SHA384 - for SHA1, s/SHA256/SHA1/ then manually adapt the plaintext length for the cases with "!trunc, B-1" and "!trunc, B", as the MAC length (20) is not a multiple of the block size (16) for this hash Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:20:32 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, empty plaintext, minpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, empty plaintext, maxpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, padlen=0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, padlen=240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, padlen=1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, padlen=241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, padlen=15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA MD5 !trunc, padlen=255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_MD5:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, empty plaintext, minpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, empty plaintext, maxpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, padlen=0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, padlen=240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, padlen=1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, padlen=241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, padlen=15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA1 !trunc, padlen=255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA1:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, empty plaintext, minpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, empty plaintext, maxpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, padlen=0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, padlen=240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, padlen=1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, padlen=241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, padlen=15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA256 !trunc, padlen=255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA256:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, empty plaintext, minpad
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, empty plaintext, maxpad
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, padlen=0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, padlen=240
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, padlen=1
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, padlen=241
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, padlen=15
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, ARIA SHA384 !trunc, padlen=255
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_ARIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_ARIA_128_CBC:MBEDTLS_MD_SHA384:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, empty plaintext, minpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, empty plaintext, maxpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, padlen=0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, padlen=240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, padlen=1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, padlen=241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, padlen=15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA MD5 !trunc, padlen=255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_MD5_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_MD5:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, empty plaintext, minpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, empty plaintext, maxpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, padlen=0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, padlen=240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, padlen=1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, padlen=241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, padlen=15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA1 !trunc, padlen=255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA1_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA1:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, empty plaintext, minpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, empty plaintext, maxpad
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, padlen=0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, padlen=240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, padlen=1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, padlen=241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, padlen=15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA256 !trunc, padlen=255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA256_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA256:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, empty plaintext, minpad
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:-1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, empty plaintext, maxpad
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:-2
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, padlen=0
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:0
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, padlen=240
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:240
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, padlen=1
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:1
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, padlen=241
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:241
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, padlen=15
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:15
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
Decrypt CBC !EtM, CAMELLIA SHA384 !trunc, padlen=255
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_CAMELLIA_C:MBEDTLS_SHA384_C
Rework how lengths are expressed in CBC test This is hopefully more readable in the .data file. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-21 10:37:14 +02:00
ssl_decrypt_non_etm_cbc:MBEDTLS_CIPHER_CAMELLIA_128_CBC:MBEDTLS_MD_SHA384:0:255
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Add tests for TLS 1.3 key evolution function Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-20 15:54:24 +02:00
SSL TLS 1.3 Key schedule: Secret evolution #1
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Initial secret to Early Secret
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_key_evolution:PSA_ALG_SHA_256:"":"":"33ad0a1c607ec03b09e6cd9893680ce210adf300aa1f2660e1b22e10f170f92a"
Add tests for TLS 1.3 key evolution function Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-20 15:54:24 +02:00
SSL TLS 1.3 Key schedule: Secret evolution #2
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Early secret to Handshake Secret
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_key_evolution:PSA_ALG_SHA_256:"33ad0a1c607ec03b09e6cd9893680ce210adf300aa1f2660e1b22e10f170f92a":"df4a291baa1eb7cfa6934b29b474baad2697e29f1f920dcc77c8a0a088447624":"fb9fc80689b3a5d02c33243bf69a1b1b20705588a794304a6e7120155edf149a"
Add tests for TLS 1.3 key evolution function Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-20 15:54:24 +02:00
SSL TLS 1.3 Key schedule: Secret evolution #3
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Handshake secret to Master Secret
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_key_evolution:PSA_ALG_SHA_256:"fb9fc80689b3a5d02c33243bf69a1b1b20705588a794304a6e7120155edf149a":"":"7f2882bb9b9a46265941653e9c2f19067118151e21d12e57a7b6aca1f8150c8d"
Add tests for TLS 1.3 key evolution function Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-20 15:54:24 +02:00
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #1
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Server handshake traffic secret -> Server traffic key
# HKDF-Expand-Label(server_handshake_secret, "key", "", 16)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"a2067265e7f0652a923d5d72ab0467c46132eeb968b6a32d311c805868548814":tls13_label_key:"":16:"844780a7acad9f980fa25c114e43402a"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #2
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Server handshake traffic secret -> Server traffic IV
# HKDF-Expand-Label(server_handshake_secret, "iv", "", 12)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"a2067265e7f0652a923d5d72ab0467c46132eeb968b6a32d311c805868548814":tls13_label_iv:"":12:"4c042ddc120a38d1417fc815"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #3
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Client handshake traffic secret -> Client traffic key
# HKDF-Expand-Label(client_handshake_secret, "key", "", 16)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"ff0e5b965291c608c1e8cd267eefc0afcc5e98a2786373f0db47b04786d72aea":tls13_label_key:"":16:"7154f314e6be7dc008df2c832baa1d39"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #4
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Client handshake traffic secret -> Client traffic IV
# HKDF-Expand-Label(client_handshake_secret, "iv", "", 12)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"ff0e5b965291c608c1e8cd267eefc0afcc5e98a2786373f0db47b04786d72aea":tls13_label_iv:"":12:"71abc2cae4c699d47c600268"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #5 (RFC 8448)
# Vector from RFC 8448
# Server handshake traffic secret -> Server traffic IV
# HKDF-Expand-Label(server_handshake_secret, "iv", "", 12)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"b67b7d690cc16c4e75e54213cb2d37b4e9c912bcded9105d42befd59d391ad38":tls13_label_iv:"":12:"5d313eb2671276ee13000b30"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #6 (RFC 8448)
# Vector from RFC 8448
# Server handshake traffic secret -> Server traffic Key
# HKDF-Expand-Label(server_handshake_secret, "key", "", 16)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"b67b7d690cc16c4e75e54213cb2d37b4e9c912bcded9105d42befd59d391ad38":tls13_label_key:"":16:"3fce516009c21727d0f2e4e86ee403bc"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #7 (RFC 8448)
# Vector from RFC 8448
# Client handshake traffic secret -> Client traffic IV
# HKDF-Expand-Label(client_handshake_secret, "iv", "", 12)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"b3eddb126e067f35a780b3abf45e2d8f3b1a950738f52e9600746a0e27a55a21":tls13_label_iv:"":12:"5bd3c71b836e0b76bb73265f"
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
Fix TLS 1.3 key schedule unit test case name Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 13:47:56 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #8 (RFC 8448)
Add test vectors for TLS 1.3 HKDF-Expand-Label Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:36:56 +02:00
# Vector from RFC 8448
# Client handshake traffic secret -> Client traffic Key
# HKDF-Expand-Label(client_handshake_secret, "key", "", 16)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"b3eddb126e067f35a780b3abf45e2d8f3b1a950738f52e9600746a0e27a55a21":tls13_label_key:"":16:"dbfaa693d1762c5b666af5d950258d01"
Add tests with ARIA, Camellia, 3DES Started as copies of the AES block, then: - for ARIA, just s/AES/ARIA/ - for Camellia, just s/AES/Camellia/ - for 3DES, s/AES/3DES/ then s/3DES_128_CBC/DES_EDE3_CBC/ then manually subtract 8 to all plaintext lengths that were > 8. This accounts for the fact that the block size of DES is 8 not 16. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-07 11:40:38 +02:00
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #9 (RFC 8448)
# Calculation of finished_key
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"2faac08f851d35fea3604fcb4de82dc62c9b164a70974d0462e27f1ab278700f":tls13_label_finished:"":32:"5ace394c26980d581243f627d1150ae27e37fa52364e0a7f20ac686d09cd0e8e"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: HKDF Expand Label #10 (RFC 8448)
# Calculation of resumption key
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_hkdf_expand_label:PSA_ALG_SHA_256:"7df235f2031d2a051287d02b0241b0bfdaf86cc856231f2d5aba46c434ec196c":tls13_label_resumption:"0000":32:"4ecd0eb6ec3b4d87f5d6028f922ca4c5851a277fd41311c9e62d2c9492e1c4f3"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
Add test vectors for TLS 1.3 traffic key generation Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:37:08 +02:00
SSL TLS 1.3 Key schedule: Traffic key generation #1
Fix typo in SSL test suite Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-08 12:09:32 +02:00
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
Add test vectors for TLS 1.3 traffic key generation Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:37:08 +02:00
# Client/Server handshake traffic secrets -> Client/Server traffic {Key,IV}
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_traffic_key_generation:PSA_ALG_SHA_256:"a2067265e7f0652a923d5d72ab0467c46132eeb968b6a32d311c805868548814":"ff0e5b965291c608c1e8cd267eefc0afcc5e98a2786373f0db47b04786d72aea":12:16:"844780a7acad9f980fa25c114e43402a":"4c042ddc120a38d1417fc815":"7154f314e6be7dc008df2c832baa1d39":"71abc2cae4c699d47c600268"
Add test vectors for TLS 1.3 traffic key generation Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:37:08 +02:00
SSL TLS 1.3 Key schedule: Traffic key generation #2 (RFC 8448)
# Vector RFC 8448
# Client/Server handshake traffic secrets -> Client/Server traffic {Key,IV}
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_traffic_key_generation:PSA_ALG_SHA_256:"a2067265e7f0652a923d5d72ab0467c46132eeb968b6a32d311c805868548814":"ff0e5b965291c608c1e8cd267eefc0afcc5e98a2786373f0db47b04786d72aea":12:16:"844780a7acad9f980fa25c114e43402a":"4c042ddc120a38d1417fc815":"7154f314e6be7dc008df2c832baa1d39":"71abc2cae4c699d47c600268"
Add test vectors for TLS 1.3 traffic key generation Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 14:37:08 +02:00
Add test vectors for TLS 1.3 Derive-Secret Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 15:14:14 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "derived", "")
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Derive-Secret( Early-Secret, "derived", "")
# Tests the case where context isn't yet hashed (empty string here,
# but still needs to be hashed)
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"33ad0a1c607ec03b09e6cd9893680ce210adf300aa1f2660e1b22e10f170f92a":tls13_label_derived:"":32:MBEDTLS_SSL_TLS1_3_CONTEXT_UNHASHED:"6f2615a108c702c5678f54fc9dbab69716c076189c48250cebeac3576c3611ba"
Add test vectors for TLS 1.3 Derive-Secret Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 15:14:14 +02:00
Avoid duplicated test case names in TLS 1.3 key schedule unit tests Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 14:52:40 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "s ap traffic", hash) #1
Add test vectors for TLS 1.3 Derive-Secret Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 15:14:14 +02:00
# Vector from TLS 1.3 Byte by Byte (https://tls13.ulfheim.net/)
# Derive-Secret( MasterSecret, "s ap traffic", hash)
# Tests the case where context is already hashed
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"7f2882bb9b9a46265941653e9c2f19067118151e21d12e57a7b6aca1f8150c8d":tls13_label_s_ap_traffic:"22844b930e5e0a59a09d5ac35fc032fc91163b193874a265236e568077378d8b":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"3fc35ea70693069a277956afa23b8f4543ce68ac595f2aace05cd7a1c92023d5"
Add test vectors for TLS 1.3 Derive-Secret Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-08-21 15:14:14 +02:00
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "c e traffic", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"9b2188e9b2fc6d64d71dc329900e20bb41915000f678aa839cbb797cb7d8332c":tls13_label_c_e_traffic:"08ad0fa05d7c7233b1775ba2ff9f4c5b8b59276b7f227f13a976245f5d960913":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"3fbbe6a60deb66c30a32795aba0eff7eaa10105586e7be5c09678d63b6caab62"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "e exp master", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"9b2188e9b2fc6d64d71dc329900e20bb41915000f678aa839cbb797cb7d8332c":tls13_label_e_exp_master:"08ad0fa05d7c7233b1775ba2ff9f4c5b8b59276b7f227f13a976245f5d960913":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"b2026866610937d7423e5be90862ccf24c0e6091186d34f812089ff5be2ef7df"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "c hs traffic", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"005cb112fd8eb4ccc623bb88a07c64b3ede1605363fc7d0df8c7ce4ff0fb4ae6":tls13_label_c_hs_traffic:"f736cb34fe25e701551bee6fd24c1cc7102a7daf9405cb15d97aafe16f757d03":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"2faac08f851d35fea3604fcb4de82dc62c9b164a70974d0462e27f1ab278700f"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "s hs traffic", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"005cb112fd8eb4ccc623bb88a07c64b3ede1605363fc7d0df8c7ce4ff0fb4ae6":tls13_label_s_hs_traffic:"f736cb34fe25e701551bee6fd24c1cc7102a7daf9405cb15d97aafe16f757d03":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"fe927ae271312e8bf0275b581c54eef020450dc4ecffaa05a1a35d27518e7803"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "c ap traffic", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"e2d32d4ed66dd37897a0e80c84107503ce58bf8aad4cb55a5002d77ecb890ece":tls13_label_c_ap_traffic:"b0aeffc46a2cfe33114e6fd7d51f9f04b1ca3c497dab08934a774a9d9ad7dbf3":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"2abbf2b8e381d23dbebe1dd2a7d16a8bf484cb4950d23fb7fb7fa8547062d9a1"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
Avoid duplicated test case names in TLS 1.3 key schedule unit tests Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 14:52:40 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "s ap traffic", hash) #2
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"e2d32d4ed66dd37897a0e80c84107503ce58bf8aad4cb55a5002d77ecb890ece":tls13_label_s_ap_traffic:"b0aeffc46a2cfe33114e6fd7d51f9f04b1ca3c497dab08934a774a9d9ad7dbf3":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"cc21f1bf8feb7dd5fa505bd9c4b468a9984d554a993dc49e6d285598fb672691"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "exp master", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"e2d32d4ed66dd37897a0e80c84107503ce58bf8aad4cb55a5002d77ecb890ece":tls13_label_exp_master:"b0aeffc46a2cfe33114e6fd7d51f9f04b1ca3c497dab08934a774a9d9ad7dbf3":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"3fd93d4ffddc98e64b14dd107aedf8ee4add23f4510f58a4592d0b201bee56b4"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
SSL TLS 1.3 Key schedule: Derive-Secret( ., "res master", hash)
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_secret:PSA_ALG_SHA_256:"e2d32d4ed66dd37897a0e80c84107503ce58bf8aad4cb55a5002d77ecb890ece":tls13_label_res_master:"c3c122e0bd907a4a3ff6112d8fd53dbf89c773d9552e8b6b9d56d361b3a97bf6":32:MBEDTLS_SSL_TLS1_3_CONTEXT_HASHED:"5e95bdf1f89005ea2e9aa0ba85e728e3c19c5fe0c699e3f5bee59faebd0b5406"
Add further unit tests for TLS 1.3 key schedule Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2020-09-09 11:41:43 +02:00
Test TLS 1.3 second level key derivation helpers Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:42:11 +02:00
SSL TLS 1.3 Key schedule: Early secrets derivation helper
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_early_secrets:PSA_ALG_SHA_256:"9b2188e9b2fc6d64d71dc329900e20bb41915000f678aa839cbb797cb7d8332c":"08ad0fa05d7c7233b1775ba2ff9f4c5b8b59276b7f227f13a976245f5d960913":"3fbbe6a60deb66c30a32795aba0eff7eaa10105586e7be5c09678d63b6caab62":"b2026866610937d7423e5be90862ccf24c0e6091186d34f812089ff5be2ef7df"
Test TLS 1.3 second level key derivation helpers Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:42:11 +02:00
SSL TLS 1.3 Key schedule: Handshake secrets derivation helper
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_handshake_secrets:PSA_ALG_SHA_256:"005cb112fd8eb4ccc623bb88a07c64b3ede1605363fc7d0df8c7ce4ff0fb4ae6":"f736cb34fe25e701551bee6fd24c1cc7102a7daf9405cb15d97aafe16f757d03":"2faac08f851d35fea3604fcb4de82dc62c9b164a70974d0462e27f1ab278700f":"fe927ae271312e8bf0275b581c54eef020450dc4ecffaa05a1a35d27518e7803"
Test TLS 1.3 second level key derivation helpers Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:42:11 +02:00
Add known answer tests for TLS 1.3 record protection This commit adds four known answer tests for TLS 1.3 record protection from the following sources: - RFC 8448 "Example Handshake Traces for TLS 1.3" - tls13.ulfheim.net "The New Illustrated TLS Connection" It extends the test coverage of the existing record protection tests in the following ways: - The existing record protection tests hand-craft record transform structures; the new tests use the function mbedtls_ssl_tls13_populate_transform() from library source to create an TLS 1.3 transform from raw key material and connection information. - The existing record protection tests only check that encryption and decryption are inverse to each other; as such, they don't catch non-compliant implementations of encryption and decryption which happen to be inverse to each other. By adding a known answer test for TLS 1.3 record protection, can gain confidence that our implementation is indeed standards-compliant. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-03-22 16:16:33 +01:00
SSL TLS 1.3 Record Encryption, tls13.ulfheim.net Example #1
# - Server App Key: 0b6d22c8ff68097ea871c672073773bf
# - Server App IV: 1b13dd9f8d8f17091d34b349
# - Client App Key: 49134b95328f279f0183860589ac6707
# - Client App IV: bc4dd5f7b98acff85466261d
# - App data payload: 70696e67
# - Complete record: 1703030015c74061535eb12f5f25a781957874742ab7fb305dd5
Specify padding granularity in TLS 1.3 record protection KATs Still check that encryption and decryption are inverse to each other if the granularity does not match the one used in the KAT. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-08-01 20:18:28 +02:00
# - Padding used: No (== granularity 1)
Fix 1_3/13 usages in macros and function names Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
2021-11-12 09:53:56 +01:00
ssl_tls13_record_protection:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:MBEDTLS_SSL_IS_CLIENT:0:1:"0b6d22c8ff68097ea871c672073773bf":"1b13dd9f8d8f17091d34b349":"49134b95328f279f0183860589ac6707":"bc4dd5f7b98acff85466261d":"70696e67":"c74061535eb12f5f25a781957874742ab7fb305dd5"
Add known answer tests for TLS 1.3 record protection This commit adds four known answer tests for TLS 1.3 record protection from the following sources: - RFC 8448 "Example Handshake Traces for TLS 1.3" - tls13.ulfheim.net "The New Illustrated TLS Connection" It extends the test coverage of the existing record protection tests in the following ways: - The existing record protection tests hand-craft record transform structures; the new tests use the function mbedtls_ssl_tls13_populate_transform() from library source to create an TLS 1.3 transform from raw key material and connection information. - The existing record protection tests only check that encryption and decryption are inverse to each other; as such, they don't catch non-compliant implementations of encryption and decryption which happen to be inverse to each other. By adding a known answer test for TLS 1.3 record protection, can gain confidence that our implementation is indeed standards-compliant. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-03-22 16:16:33 +01:00
SSL TLS 1.3 Record Encryption, tls13.ulfheim.net Example #2
# - Server App Key: 0b6d22c8ff68097ea871c672073773bf
# - Server App IV: 1b13dd9f8d8f17091d34b349
# - Client App Key: 49134b95328f279f0183860589ac6707
# - Client App IV: bc4dd5f7b98acff85466261d
# - App data payload: 706f6e67
# - Complete record: 1703030015370e5f168afa7fb16b663ecdfca3dbb81931a90ca7
Specify padding granularity in TLS 1.3 record protection KATs Still check that encryption and decryption are inverse to each other if the granularity does not match the one used in the KAT. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-08-01 20:18:28 +02:00
# - Padding used: No (== granularity 1)
Fix 1_3/13 usages in macros and function names Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
2021-11-12 09:53:56 +01:00
ssl_tls13_record_protection:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:MBEDTLS_SSL_IS_SERVER:1:1:"0b6d22c8ff68097ea871c672073773bf":"1b13dd9f8d8f17091d34b349":"49134b95328f279f0183860589ac6707":"bc4dd5f7b98acff85466261d":"706f6e67":"370e5f168afa7fb16b663ecdfca3dbb81931a90ca7"
Add known answer tests for TLS 1.3 record protection This commit adds four known answer tests for TLS 1.3 record protection from the following sources: - RFC 8448 "Example Handshake Traces for TLS 1.3" - tls13.ulfheim.net "The New Illustrated TLS Connection" It extends the test coverage of the existing record protection tests in the following ways: - The existing record protection tests hand-craft record transform structures; the new tests use the function mbedtls_ssl_tls13_populate_transform() from library source to create an TLS 1.3 transform from raw key material and connection information. - The existing record protection tests only check that encryption and decryption are inverse to each other; as such, they don't catch non-compliant implementations of encryption and decryption which happen to be inverse to each other. By adding a known answer test for TLS 1.3 record protection, can gain confidence that our implementation is indeed standards-compliant. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-03-22 16:16:33 +01:00
SSL TLS 1.3 Record Encryption RFC 8448 Example #1
# Application Data record sent by Client in 1-RTT example of RFC 8448, Section 3
# - Server App Key: 9f 02 28 3b 6c 9c 07 ef c2 6b b9 f2 ac 92 e3 56
# - Server App IV: cf 78 2b 88 dd 83 54 9a ad f1 e9 84
# - Client App Key: 17 42 2d da 59 6e d5 d9 ac d8 90 e3 c6 3f 50 51
# - Client App IV: 5b 78 92 3d ee 08 57 90 33 e5 23 d9
# - App data payload: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
# 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f
# 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f
# 30 31
# - Complete record: 17 03 03 00 43 a2 3f 70 54 b6 2c 94 d0 af fa fe
# 82 28 ba 55 cb ef ac ea 42 f9 14 aa 66 bc ab 3f
# 2b 98 19 a8 a5 b4 6b 39 5b d5 4a 9a 20 44 1e 2b
# 62 97 4e 1f 5a 62 92 a2 97 70 14 bd 1e 3d ea e6
# 3a ee bb 21 69 49 15 e4
Specify padding granularity in TLS 1.3 record protection KATs Still check that encryption and decryption are inverse to each other if the granularity does not match the one used in the KAT. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-08-01 20:18:28 +02:00
# - Padding used: No (== granularity 1)
Fix 1_3/13 usages in macros and function names Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
2021-11-12 09:53:56 +01:00
ssl_tls13_record_protection:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:MBEDTLS_SSL_IS_CLIENT:0:1:"9f02283b6c9c07efc26bb9f2ac92e356":"cf782b88dd83549aadf1e984":"17422dda596ed5d9acd890e3c63f5051":"5b78923dee08579033e523d9":"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f3031":"a23f7054b62c94d0affafe8228ba55cbefacea42f914aa66bcab3f2b9819a8a5b46b395bd54a9a20441e2b62974e1f5a6292a2977014bd1e3deae63aeebb21694915e4"
Add known answer tests for TLS 1.3 record protection This commit adds four known answer tests for TLS 1.3 record protection from the following sources: - RFC 8448 "Example Handshake Traces for TLS 1.3" - tls13.ulfheim.net "The New Illustrated TLS Connection" It extends the test coverage of the existing record protection tests in the following ways: - The existing record protection tests hand-craft record transform structures; the new tests use the function mbedtls_ssl_tls13_populate_transform() from library source to create an TLS 1.3 transform from raw key material and connection information. - The existing record protection tests only check that encryption and decryption are inverse to each other; as such, they don't catch non-compliant implementations of encryption and decryption which happen to be inverse to each other. By adding a known answer test for TLS 1.3 record protection, can gain confidence that our implementation is indeed standards-compliant. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-03-22 16:16:33 +01:00
SSL TLS 1.3 Record Encryption RFC 8448 Example #2
# Application Data record sent by Server in 1-RTT example of RFC 8448, Section 3
# - Server App Key: 9f 02 28 3b 6c 9c 07 ef c2 6b b9 f2 ac 92 e3 56
# - Server App IV: cf 78 2b 88 dd 83 54 9a ad f1 e9 84
# - Client App Key: 17 42 2d da 59 6e d5 d9 ac d8 90 e3 c6 3f 50 51
# - Client App IV: 5b 78 92 3d ee 08 57 90 33 e5 23 d9
# - App data payload: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
# 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f
# 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f
# 30 31
# - Complete record: 17 03 03 00 43 2e 93 7e 11 ef 4a c7 40 e5 38 ad
# 36 00 5f c4 a4 69 32 fc 32 25 d0 5f 82 aa 1b 36
# e3 0e fa f9 7d 90 e6 df fc 60 2d cb 50 1a 59 a8
# fc c4 9c 4b f2 e5 f0 a2 1c 00 47 c2 ab f3 32 54
# 0d d0 32 e1 67 c2 95 5d
Specify padding granularity in TLS 1.3 record protection KATs Still check that encryption and decryption are inverse to each other if the granularity does not match the one used in the KAT. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-08-01 20:18:28 +02:00
# - Padding used: No (== granularity 1)
Fix 1_3/13 usages in macros and function names Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
2021-11-12 09:53:56 +01:00
ssl_tls13_record_protection:MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:MBEDTLS_SSL_IS_SERVER:1:1:"9f02283b6c9c07efc26bb9f2ac92e356":"cf782b88dd83549aadf1e984":"17422dda596ed5d9acd890e3c63f5051":"5b78923dee08579033e523d9":"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f3031":"2e937e11ef4ac740e538ad36005fc4a46932fc3225d05f82aa1b36e30efaf97d90e6dffc602dcb501a59a8fcc49c4bf2e5f0a21c0047c2abf332540dd032e167c2955d"
Add known answer tests for TLS 1.3 record protection This commit adds four known answer tests for TLS 1.3 record protection from the following sources: - RFC 8448 "Example Handshake Traces for TLS 1.3" - tls13.ulfheim.net "The New Illustrated TLS Connection" It extends the test coverage of the existing record protection tests in the following ways: - The existing record protection tests hand-craft record transform structures; the new tests use the function mbedtls_ssl_tls13_populate_transform() from library source to create an TLS 1.3 transform from raw key material and connection information. - The existing record protection tests only check that encryption and decryption are inverse to each other; as such, they don't catch non-compliant implementations of encryption and decryption which happen to be inverse to each other. By adding a known answer test for TLS 1.3 record protection, can gain confidence that our implementation is indeed standards-compliant. Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-03-22 16:16:33 +01:00
Test TLS 1.3 second level key derivation helpers Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:42:11 +02:00
SSL TLS 1.3 Key schedule: Application secrets derivation helper
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_application_secrets:PSA_ALG_SHA_256:"e2d32d4ed66dd37897a0e80c84107503ce58bf8aad4cb55a5002d77ecb890ece":"b0aeffc46a2cfe33114e6fd7d51f9f04b1ca3c497dab08934a774a9d9ad7dbf3":"2abbf2b8e381d23dbebe1dd2a7d16a8bf484cb4950d23fb7fb7fa8547062d9a1":"cc21f1bf8feb7dd5fa505bd9c4b468a9984d554a993dc49e6d285598fb672691":"3fd93d4ffddc98e64b14dd107aedf8ee4add23f4510f58a4592d0b201bee56b4"
Test TLS 1.3 second level key derivation helpers Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:42:11 +02:00
SSL TLS 1.3 Key schedule: Resumption secrets derivation helper
# Vector from RFC 8448
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_derive_resumption_secrets:PSA_ALG_SHA_256:"e2d32d4ed66dd37897a0e80c84107503ce58bf8aad4cb55a5002d77ecb890ece":"c3c122e0bd907a4a3ff6112d8fd53dbf89c773d9552e8b6b9d56d361b3a97bf6":"5e95bdf1f89005ea2e9aa0ba85e728e3c19c5fe0c699e3f5bee59faebd0b5406"
Test TLS 1.3 second level key derivation helpers Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:42:11 +02:00
Test TLS 1.3 PSK binder calculation helper Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:53:52 +02:00
SSL TLS 1.3 Key schedule: PSK binder
# Vector from RFC 8448
# For the resumption PSK, see Section 3, 'generate resumption secret "tls13 resumption"'
# For all other data, see Section 4, 'construct a ClientHello handshake message:'
Translate from mbedtls_md_type_t to psa_algorithm_t Do the translation as early as possible from mbedtls_md_type_t to psa_algorithm_t. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
2022-03-26 17:04:19 +01:00
depends_on:PSA_WANT_ALG_SHA_256
ssl_tls13_create_psk_binder:PSA_ALG_SHA_256:"4ecd0eb6ec3b4d87f5d6028f922ca4c5851a277fd41311c9e62d2c9492e1c4f3":MBEDTLS_SSL_TLS1_3_PSK_RESUMPTION:"63224b2e4573f2d3454ca84b9d009a04f6be9e05711a8396473aefa01e924a14":"3add4fb2d8fdf822a0ca3cf7678ef5e88dae990141c5924d57bb6fa31b9e5f9d"
Test TLS 1.3 PSK binder calculation helper Signed-off-by: Hanno Becker <hanno.becker@arm.com>
2021-05-24 07:53:52 +02:00
Add tests for the public tls_prf API Add tests for `mbedtls_ssl_tls_prf` wiht and without the function types dependencies.
2019-05-13 13:09:00 +02:00
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_NONE
ssl_tls_prf:MBEDTLS_SSL_TLS_PRF_NONE:"":"":"test tls_prf label":"":MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C:MBEDTLS_SSL_PROTO_TLS1_2
Add tests for the public tls_prf API Add tests for `mbedtls_ssl_tls_prf` wiht and without the function types dependencies.
2019-05-13 13:09:00 +02:00
ssl_tls_prf:MBEDTLS_SSL_TLS_PRF_SHA384:"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"test tls_prf label":"a4206a36eef93f496611c2b7806625c3":0
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA256
depends_on:MBEDTLS_SHA256_C:MBEDTLS_SSL_PROTO_TLS1_2
ssl_tls_prf:MBEDTLS_SSL_TLS_PRF_SHA256:"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"test tls_prf label":"7f9998393198a02c8d731ccc2ef90b2c":0
Fix test data description Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-20 11:16:59 +02:00
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA384 SHA-384 not enabled
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
depends_on:!MBEDTLS_SHA384_C
Add tests for the public tls_prf API Add tests for `mbedtls_ssl_tls_prf` wiht and without the function types dependencies.
2019-05-13 13:09:00 +02:00
ssl_tls_prf:MBEDTLS_SSL_TLS_PRF_SHA384:"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"test tls_prf label":"a4206a36eef93f496611c2b7806625c3":MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
Fix missing tls version test failures Add checks for tls_prf tests with the relevant tls version configuration.
2019-05-15 13:54:22 +02:00
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA256 SHA-256 not enabled
Add tests for the public tls_prf API Add tests for `mbedtls_ssl_tls_prf` wiht and without the function types dependencies.
2019-05-13 13:09:00 +02:00
depends_on:!MBEDTLS_SHA256_C
ssl_tls_prf:MBEDTLS_SSL_TLS_PRF_SHA256:"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef":"test tls_prf label":"7f9998393198a02c8d731ccc2ef90b2c":MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
Start adding unit test for session serialisation This initial test ensures that a load-save function is the identity. It is so far incomplete in that it only tests sessions without tickets or certificate. This will be improved in the next commits.
2019-05-23 09:30:55 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save-load: no ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_load:0:""
Add test that save-load is the identity This test works regardless of the serialisation format and embedded pointers in it, contrary to the load-save test, though it requires more maintenance of the test code (sync the member list with the struct definition).
2019-05-24 09:41:39 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save-load: small ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_load:42:""
Add test that save-load is the identity This test works regardless of the serialisation format and embedded pointers in it, contrary to the load-save test, though it requires more maintenance of the test code (sync the member list with the struct definition).
2019-05-24 09:41:39 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save-load: large ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_load:1023:""
Add test that save-load is the identity This test works regardless of the serialisation format and embedded pointers in it, contrary to the load-save test, though it requires more maintenance of the test code (sync the member list with the struct definition).
2019-05-24 09:41:39 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save-load: no ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_load:0:"data_files/server5.crt"
Add test that save-load is the identity This test works regardless of the serialisation format and embedded pointers in it, contrary to the load-save test, though it requires more maintenance of the test code (sync the member list with the struct definition).
2019-05-24 09:41:39 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save-load: small ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_load:42:"data_files/server5.crt"
Add test that save-load is the identity This test works regardless of the serialisation format and embedded pointers in it, contrary to the load-save test, though it requires more maintenance of the test code (sync the member list with the struct definition).
2019-05-24 09:41:39 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save-load: large ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_load:1023:"data_files/server5.crt"
Add test that save-load is the identity This test works regardless of the serialisation format and embedded pointers in it, contrary to the load-save test, though it requires more maintenance of the test code (sync the member list with the struct definition).
2019-05-24 09:41:39 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load-save: no ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_save:0:""
Improve load-save test with tickets and certs
2019-05-23 10:06:14 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load-save: small ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_save:42:""
Improve load-save test with tickets and certs
2019-05-23 10:06:14 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load-save: large ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_save:1023:""
Improve load-save test with tickets and certs
2019-05-23 10:06:14 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load-save: no ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_save:0:"data_files/server5.crt"
Improve load-save test with tickets and certs
2019-05-23 10:06:14 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load-save: small ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_save:42:"data_files/server5.crt"
Improve load-save test with tickets and certs
2019-05-23 10:06:14 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load-save: large ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_save:1023:"data_files/server5.crt"
Add test for session_save() on small buffers
2019-05-23 10:38:11 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save buffer size: no ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_buf_size:0:""
Add test for session_save() on small buffers
2019-05-23 10:38:11 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save buffer size: small ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_buf_size:42:""
Add test for session_save() on small buffers
2019-05-23 10:38:11 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save buffer size: large ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_buf_size:1023:""
Add test for session_save() on small buffers
2019-05-23 10:38:11 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save buffer size: no ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_buf_size:0:"data_files/server5.crt"
Add test for session_save() on small buffers
2019-05-23 10:38:11 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save buffer size: small ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_buf_size:42:"data_files/server5.crt"
Add test for session_save() on small buffers
2019-05-23 10:38:11 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, save buffer size: large ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_save_buf_size:1023:"data_files/server5.crt"
Add test for session_load() from small buffers This uncovered a bug that led to a double-free (in practice, in general could be free() on any invalid value): initially the session structure is loaded with `memcpy()` which copies the previous values of pointers peer_cert and ticket to heap-allocated buffers (or any other value if the input is attacker-controlled). Now if we exit before we got a chance to replace those invalid values with valid ones (for example because the input buffer is too small, or because the second malloc() failed), then the next call to session_free() is going to call free() on invalid pointers. This bug is fixed in this commit by always setting the pointers to NULL right after they've been read from the serialised state, so that the invalid values can never be used. (An alternative would be to NULL-ify them when writing, which was rejected mostly because we need to do it when reading anyway (as the consequences of free(invalid) are too severe to take any risk), so doing it when writing as well is redundant and a waste of code size.) Also, while thinking about what happens in case of errors, it became apparent to me that it was bad practice to leave the session structure in an half-initialised state and rely on the caller to call session_free(), so this commit also ensures we always clear the structure when loading failed.
2019-05-23 12:28:45 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load buffer size: no ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_buf_size:0:""
Add test for session_load() from small buffers This uncovered a bug that led to a double-free (in practice, in general could be free() on any invalid value): initially the session structure is loaded with `memcpy()` which copies the previous values of pointers peer_cert and ticket to heap-allocated buffers (or any other value if the input is attacker-controlled). Now if we exit before we got a chance to replace those invalid values with valid ones (for example because the input buffer is too small, or because the second malloc() failed), then the next call to session_free() is going to call free() on invalid pointers. This bug is fixed in this commit by always setting the pointers to NULL right after they've been read from the serialised state, so that the invalid values can never be used. (An alternative would be to NULL-ify them when writing, which was rejected mostly because we need to do it when reading anyway (as the consequences of free(invalid) are too severe to take any risk), so doing it when writing as well is redundant and a waste of code size.) Also, while thinking about what happens in case of errors, it became apparent to me that it was bad practice to leave the session structure in an half-initialised state and rely on the caller to call session_free(), so this commit also ensures we always clear the structure when loading failed.
2019-05-23 12:28:45 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load buffer size: small ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_buf_size:42:""
Add test for session_load() from small buffers This uncovered a bug that led to a double-free (in practice, in general could be free() on any invalid value): initially the session structure is loaded with `memcpy()` which copies the previous values of pointers peer_cert and ticket to heap-allocated buffers (or any other value if the input is attacker-controlled). Now if we exit before we got a chance to replace those invalid values with valid ones (for example because the input buffer is too small, or because the second malloc() failed), then the next call to session_free() is going to call free() on invalid pointers. This bug is fixed in this commit by always setting the pointers to NULL right after they've been read from the serialised state, so that the invalid values can never be used. (An alternative would be to NULL-ify them when writing, which was rejected mostly because we need to do it when reading anyway (as the consequences of free(invalid) are too severe to take any risk), so doing it when writing as well is redundant and a waste of code size.) Also, while thinking about what happens in case of errors, it became apparent to me that it was bad practice to leave the session structure in an half-initialised state and rely on the caller to call session_free(), so this commit also ensures we always clear the structure when loading failed.
2019-05-23 12:28:45 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load buffer size: large ticket, no cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_buf_size:1023:""
Add test for session_load() from small buffers This uncovered a bug that led to a double-free (in practice, in general could be free() on any invalid value): initially the session structure is loaded with `memcpy()` which copies the previous values of pointers peer_cert and ticket to heap-allocated buffers (or any other value if the input is attacker-controlled). Now if we exit before we got a chance to replace those invalid values with valid ones (for example because the input buffer is too small, or because the second malloc() failed), then the next call to session_free() is going to call free() on invalid pointers. This bug is fixed in this commit by always setting the pointers to NULL right after they've been read from the serialised state, so that the invalid values can never be used. (An alternative would be to NULL-ify them when writing, which was rejected mostly because we need to do it when reading anyway (as the consequences of free(invalid) are too severe to take any risk), so doing it when writing as well is redundant and a waste of code size.) Also, while thinking about what happens in case of errors, it became apparent to me that it was bad practice to leave the session structure in an half-initialised state and rely on the caller to call session_free(), so this commit also ensures we always clear the structure when loading failed.
2019-05-23 12:28:45 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load buffer size: no ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_buf_size:0:"data_files/server5.crt"
Add test for session_load() from small buffers This uncovered a bug that led to a double-free (in practice, in general could be free() on any invalid value): initially the session structure is loaded with `memcpy()` which copies the previous values of pointers peer_cert and ticket to heap-allocated buffers (or any other value if the input is attacker-controlled). Now if we exit before we got a chance to replace those invalid values with valid ones (for example because the input buffer is too small, or because the second malloc() failed), then the next call to session_free() is going to call free() on invalid pointers. This bug is fixed in this commit by always setting the pointers to NULL right after they've been read from the serialised state, so that the invalid values can never be used. (An alternative would be to NULL-ify them when writing, which was rejected mostly because we need to do it when reading anyway (as the consequences of free(invalid) are too severe to take any risk), so doing it when writing as well is redundant and a waste of code size.) Also, while thinking about what happens in case of errors, it became apparent to me that it was bad practice to leave the session structure in an half-initialised state and rely on the caller to call session_free(), so this commit also ensures we always clear the structure when loading failed.
2019-05-23 12:28:45 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load buffer size: small ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_buf_size:42:"data_files/server5.crt"
Add test for session_load() from small buffers This uncovered a bug that led to a double-free (in practice, in general could be free() on any invalid value): initially the session structure is loaded with `memcpy()` which copies the previous values of pointers peer_cert and ticket to heap-allocated buffers (or any other value if the input is attacker-controlled). Now if we exit before we got a chance to replace those invalid values with valid ones (for example because the input buffer is too small, or because the second malloc() failed), then the next call to session_free() is going to call free() on invalid pointers. This bug is fixed in this commit by always setting the pointers to NULL right after they've been read from the serialised state, so that the invalid values can never be used. (An alternative would be to NULL-ify them when writing, which was rejected mostly because we need to do it when reading anyway (as the consequences of free(invalid) are too severe to take any risk), so doing it when writing as well is redundant and a waste of code size.) Also, while thinking about what happens in case of errors, it became apparent to me that it was bad practice to leave the session structure in an half-initialised state and rely on the caller to call session_free(), so this commit also ensures we always clear the structure when loading failed.
2019-05-23 12:28:45 +02:00
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
Session serialization, load buffer size: large ticket, cert
Add check tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-02-15 03:26:40 +01:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_SESSION_TICKETS:MBEDTLS_SSL_CLI_C:MBEDTLS_X509_USE_C:MBEDTLS_PEM_PARSE_C:MBEDTLS_ECDSA_C:MBEDTLS_ECP_DP_SECP256R1_ENABLED:MBEDTLS_SHA256_C:MBEDTLS_FS_IO
Normalize spelling to serialiZation We have explicit recommendations to use US spelling for technical writing, so let's apply this to code as well for uniformity. (My fingers tend to prefer UK spelling, so this needs to be fixed in many places.) sed -i 's/\([Ss]eriali\)s/\1z/g' **/*.[ch] **/*.function **/*.data ChangeLog
2019-06-03 09:55:16 +02:00
ssl_serialize_session_load_buf_size:1023:"data_files/server5.crt"
Add dummy constant-flow HMAC function with tests The dummy implementation is not constant-flow at all for now, it's just here as a starting point and a support for developing the tests and putting the infrastructure in place. Depending on the implementation strategy, there might be various corner cases depending on where the lengths fall relative to block boundaries. So it seems safer to just test all possible lengths in a given range than to use only a few randomly-chosen values. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-02 11:34:02 +02:00
Constant-flow HMAC: MD5
depends_on:MBEDTLS_MD5_C
ssl_cf_hmac:MBEDTLS_MD_MD5
Constant-flow HMAC: SHA1
depends_on:MBEDTLS_SHA1_C
ssl_cf_hmac:MBEDTLS_MD_SHA1
Constant-flow HMAC: SHA256
depends_on:MBEDTLS_SHA256_C
ssl_cf_hmac:MBEDTLS_MD_SHA256
Constant-flow HMAC: SHA384
Modify config option for SHA384. Although SHA512 is currently required to enable SHA384, this is expected to change in the future. This commit is an intermediate step towards fully separating SHA384 and SHA512. check_config is the only module which enforces that SHA512 is enabled together with SHA384. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-04-06 14:28:22 +02:00
depends_on:MBEDTLS_SHA384_C
Add dummy constant-flow HMAC function with tests The dummy implementation is not constant-flow at all for now, it's just here as a starting point and a support for developing the tests and putting the infrastructure in place. Depending on the implementation strategy, there might be various corner cases depending on where the lengths fall relative to block boundaries. So it seems safer to just test all possible lengths in a given range than to use only a few randomly-chosen values. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-07-02 11:34:02 +02:00
ssl_cf_hmac:MBEDTLS_MD_SHA384
Add mbedtls_ssl_cf_memcpy_offset() with tests The tests are supposed to be failing now (in all.sh component test_memsan_constant_flow), but they don't as apparently MemSan doesn't complain when the src argument of memcpy() is uninitialized, see https://github.com/google/sanitizers/issues/1296 The next commit will add an option to test constant flow with valgrind, which will hopefully correctly flag the current non-constant-flow implementation. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-08-18 12:02:54 +02:00
# these are the numbers we'd get with an empty plaintext and truncated HMAC
Constant-flow memcpy from offset: small
ssl_cf_memcpy_offset:0:5:10
# we could get this with 255-bytes plaintext and untruncated SHA-256
Constant-flow memcpy from offset: medium
ssl_cf_memcpy_offset:0:255:32
# we could get this with 255-bytes plaintext and untruncated SHA-384
Constant-flow memcpy from offset: large
ssl_cf_memcpy_offset:100:339:48
add group api tests Signed-off-by: Brett Warren <brett.warren@arm.com>
2021-10-21 00:08:38 +02:00
Test configuration of groups for DHE through mbedtls_ssl_conf_curves()
conf_curve:
Test configuration of groups for DHE through mbedtls_ssl_conf_groups()
conf_group:
Add simple test to ensure accessor is working Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2022-03-10 19:37:22 +01:00
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid client TLS 1.2 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid client DTLS 1.2 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid server TLS 1.2 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid server DTLS 1.2 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid client TLS 1.2 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid client DTLS 1.2 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid server TLS 1.2 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid server DTLS 1.2 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid client TLS 1.3 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported client DTLS 1.3 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Update code to align with tls13 coding standard Change-Id: I3c98b7d0db63aecc712a67f4e8da2cb9945c8f17 Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
2022-04-22 04:34:40 +02:00
Version config: valid server TLS 1.3 only
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
depends_on:MBEDTLS_SSL_PROTO_TLS1_3
Rebase and solve conflicts Change-Id: I7f838ff5b607fe5e6b68d74d0edc1def8fc9a744 Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
2022-04-20 10:49:42 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server DTLS 1.3 only
depends_on:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid client TLS 1.3 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid client DTLS 1.3 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid server TLS 1.3 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid server DTLS 1.3 only
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid client hybrid TLS 1.2/3
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:0
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported client hybrid DTLS 1.2/3
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server hybrid TLS 1.2/3
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server hybrid DTLS 1.2/3
depends_on:MBEDTLS_SSL_PROTO_TLS1_2:MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid client hybrid TLS 1.2/3, no TLS 1.2
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported client hybrid DTLS 1.2/3, no TLS 1.2
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server hybrid TLS 1.2/3, no TLS 1.2
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server hybrid DTLS 1.2/3, no TLS 1.2
depends_on:!MBEDTLS_SSL_PROTO_TLS1_2
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: valid client hybrid TLS 1.2/3, no TLS 1.3
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported client hybrid DTLS 1.2/3, no TLS 1.3
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server hybrid TLS 1.2/3, no TLS 1.3
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: unsupported server hybrid DTLS 1.2/3, no TLS 1.3
depends_on:!MBEDTLS_SSL_PROTO_TLS1_3
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_SERVER:MBEDTLS_SSL_TRANSPORT_DATAGRAM:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_SSL_VERSION_TLS1_3:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid minimum version
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:770:MBEDTLS_SSL_VERSION_TLS1_2:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Version config: invalid maximum version
Convert tests to use mbedtls_ssl_conf_(min|max)_tls_version() Replace use of mbedtls_ssl_conf_(min/max)_version() (PR feedback from @ronald-cron-arm) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-04-12 13:10:06 +02:00
conf_version:MBEDTLS_SSL_IS_CLIENT:MBEDTLS_SSL_TRANSPORT_STREAM:MBEDTLS_SSL_VERSION_TLS1_3:773:MBEDTLS_ERR_SSL_BAD_CONFIG
tls: Simplify the logic of the config version check and test it Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-03-30 16:45:51 +02:00
Add simple test to ensure accessor is working Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2022-03-10 19:37:22 +01:00
Test accessor into timing_delay_context
Make test function name more accurate Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2022-03-24 20:41:28 +01:00
timing_final_delay_accessor
Add tls CID tests Add tests to test tls coneection id functionality, including the new 'own cid' accessor. Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2022-03-16 15:32:33 +01:00
Sanity test cid functions
cid_sanity:
Test failing raw_key_agreement in ssl mock tests Force a bitflip in server key to make the raw key agreement fail, and then verify that no key slots are left open at the end. Use a Weierstrass curve to have a high chance of failure upon encountering such bitflip. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2022-03-08 12:55:42 +01:00
raw_key_agreement_fail: Add a nominal run Ensure that the nominal run works properly, so that it's apparent that the injected failure is responsible for the failure of the handshake. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-04-08 22:48:09 +02:00
Raw key agreement: nominal
raw_key_agreement_fail:0
Raw key agreement: bad server key
raw_key_agreement_fail:1
Add a test with a bad session_id_len that makes cache setting fail Force a bad session_id_len before handshake wrapup. This should result in a forced jump to a clean up of a serialized session. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2022-06-10 16:33:05 +02:00
Force a bad session id length
force_bad_session_id_len
Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr
2022-07-08 18:56:49 +02:00
Add cookie parsing tests to test_suite_ssl Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2022-06-06 19:08:23 +02:00
Cookie parsing: nominal run
cookie_parsing:"16fefd0000000000000000002F010000de000000000000011efefd7b7272727272727272727272727272727272727272727272727272727272727d00200000000000000000000000000000000000000000000000000000000000000000":MBEDTLS_ERR_SSL_INTERNAL_ERROR
Cookie parsing: cookie_len overflow
cookie_parsing:"16fefd000000000000000000ea010000de000000000000011efefd7b7272727272727272727272727272727272727272727272727272727272727db97b7373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737373737db963":MBEDTLS_ERR_SSL_DECODE_ERROR
Cookie parsing: non-zero fragment offset
cookie_parsing:"16fefd00000000000000000032010000de000072000000011efefd7b7272727272727272727272727272727272727272727272727272727272727d01730143":MBEDTLS_ERR_SSL_DECODE_ERROR
Cookie parsing: sid_len overflow
cookie_parsing:"16fefd00000000000000000032010000de000000000000011efefd7b7272727272727272727272727272727272727272727272727272727272727dFF730143":MBEDTLS_ERR_SSL_DECODE_ERROR
Cookie parsing: record too short
test_suite_ssl: Use a zero fragment offset in a test with a too short record Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2022-06-15 13:19:40 +02:00
cookie_parsing:"16fefd0000000000000000002f010000de000000000000011efefd7b7272727272727272727272727272727272727272727272727272727272727dFF":MBEDTLS_ERR_SSL_DECODE_ERROR
Add cookie parsing tests to test_suite_ssl Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2022-06-06 19:08:23 +02:00
Cookie parsing: one byte overread
cookie_parsing:"16fefd0000000000000000002F010000de000000000000011efefd7b7272727272727272727272727272727272727272727272727272727272727d0001":MBEDTLS_ERR_SSL_DECODE_ERROR
tls13: Add Certificate msg parsing tests with invalid vector lengths Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2022-06-10 17:21:51 +02:00
TLS 1.3 srv Certificate msg - wrong vector lengths
tls13_server_certificate_msg_invalid_vector_len
Reference in a new issue Copy permalink