Lines Matching refs:config
146 # Files clobbered by config.py
311 # Remove built files as well as the cmake cache/config.
857 # can be either "default" to start with the default config, or a name
858 # supported by scripts/config.py (for example, "full"). This selects
868 # 2d. On top of psa/crypto_config.h, the driver library uses its own config
872 # calling scripts/config.py on this file remains the only option.
894 scripts/config.py "$base_config"
897 # Enable PSA-based config (necessary to use drivers)
898 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
902 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
906 if scripts/config.py get MBEDTLS_THREADING_C; then
907 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_THREADING_C
910 if scripts/config.py get MBEDTLS_THREADING_PTHREAD; then
911 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_THREADING_PTHREAD
920 scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED"
923 scripts/config.py set $curve
1142 msg "build: make, default config (out-of-box)" # ~1min
1147 msg "test: main suites make, default config (out-of-box)" # ~10s
1150 msg "selftest: make, default config (out-of-box)" # ~10s
1153 msg "program demos: make, default config (out-of-box)" # ~10s
1186 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
1207 msg "build: full config, cmake, gcc, ASan"
1208 scripts/config.py full
1212 msg "test: main suites (inc. selftests) (full config, ASan build)"
1218 msg "test: ssl-opt.sh (full config, ASan build)"
1221 msg "test: compat.sh (full config, ASan build)"
1224 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
1230 msg "build: full config, cmake, gcc, ASan"
1231 scripts/config.py full
1232 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
1236 msg "test: main suites (inc. selftests) (full config, ASan build)"
1242 msg "test: ssl-opt.sh (full config, ASan build)"
1245 msg "test: compat.sh (full config, ASan build)"
1248 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
1253 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
1254 scripts/config.py full
1255 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1259 msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
1264 msg "build: full config + MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS, cmake, gcc, ASan"
1265 scripts/config.py full
1266 scripts/config.py set MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS
1270 msg "test: full config + MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS, cmake, gcc, ASan"
1283 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc"
1284 scripts/config.py full
1285 scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
1286 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
1287 scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM
1314 msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT"
1316 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1317 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
1318 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
1319 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1320 scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT
1321 scripts/config.py unset MBEDTLS_LMS_C
1325 msg "check missing symbols: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT"
1328 msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT"
1333 msg "build: full config - PSA_CRYPTO_C"
1335 # Use full config which includes USE_PSA and CRYPTO_CLIENT.
1336 scripts/config.py full
1338 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1339 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
1342 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
1350 msg "check missing symbols: full config - PSA_CRYPTO_C"
1362 msg "build: default config minus MBEDTLS_GENPRIME"
1363 scripts/config.py unset MBEDTLS_GENPRIME
1366 msg "test: default config minus MBEDTLS_GENPRIME"
1387 scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION
1400 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1401 scripts/config.py unset MBEDTLS_FS_IO
1402 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem
1403 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS
1416 scripts/config.py set MBEDTLS_RSA_NO_CRT
1435 scripts/config.py full
1436 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1437 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1438 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1458 scripts/config.py full
1459 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1460 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1480 scripts/config.py full
1481 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1482 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1483 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1484 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1508 scripts/config.py full
1509 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1510 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1511 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1535 scripts/config.py full
1536 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1537 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1538 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1539 scripts/config.py unset MBEDTLS_ENTROPY_C
1540 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1541 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
1542 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1543 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1544 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1559 scripts/config.py full
1560 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1561 scripts/config.py unset MBEDTLS_ENTROPY_C
1562 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1563 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
1564 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1565 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1566 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1578 scripts/config.py full
1579 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1580 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1581 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1593 scripts/config.py full
1594 scripts/config.py set MBEDTLS_PSA_INJECT_ENTROPY
1595 scripts/config.py set MBEDTLS_ENTROPY_NV_SEED
1596 scripts/config.py set MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
1597 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
1598 scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_READ
1599 scripts/config.py unset MBEDTLS_PLATFORM_STD_NV_SEED_WRITE
1600 make CC=$ASAN_CC CFLAGS="$ASAN_CFLAGS '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'" LDFLAGS="$ASAN_CFLAGS"
1610 scripts/config.py set MBEDTLS_TEST_HOOKS
1620 scripts/config.py crypto_full
1621 scripts/config.py unset MBEDTLS_PK_PARSE_C
1622 scripts/config.py unset MBEDTLS_PK_WRITE_C
1626 # Ensure that PK_[PARSE|WRITE]_C were not re-enabled accidentally (additive config).
1636 scripts/config.py crypto_full
1637 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
1639 scripts/config.py unset MBEDTLS_MD_C
1641 scripts/config.py unset MBEDTLS_HKDF_C
1642 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1643 scripts/config.py unset MBEDTLS_PKCS7_C
1645 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # needs HMAC_DRBG
1647 scripts/config.py unset MBEDTLS_PKCS5_C
1663 scripts/config.py full
1664 scripts/config.py unset MBEDTLS_CIPHER_C
1667 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
1669 scripts/config.py unset MBEDTLS_CMAC_C
1670 scripts/config.py unset MBEDTLS_NIST_KW_C
1671 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1672 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CLIENT
1673 scripts/config.py unset MBEDTLS_SSL_TLS_C
1674 scripts/config.py unset MBEDTLS_SSL_TICKET_C
1676 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
1677 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
1678 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1679 scripts/config.py unset MBEDTLS_LMS_C
1680 scripts/config.py unset MBEDTLS_LMS_PRIVATE
1698 scripts/config.py full
1699 scripts/config.py unset MBEDTLS_CIPHER_C
1706 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CCM_STAR_NO_TAG
1707 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CMAC
1708 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_NO_PADDING
1709 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CBC_PKCS7
1710 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CFB
1711 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_CTR
1712 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_ECB_NO_PADDING
1713 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_OFB
1714 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_ALG_STREAM_CIPHER
1715 scripts/config.py -f $CRYPTO_CONFIG_H unset PSA_WANT_KEY_TYPE_DES
1718 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
1721 scripts/config.py unset-all MBEDTLS_CIPHER_MODE
1724 scripts/config.py unset MBEDTLS_CMAC_C
1725 scripts/config.py unset MBEDTLS_NIST_KW_C
1747 # Full config enables:
1749 # - CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated
1750 scripts/config.py full
1758 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM
1769 # Full config enables CRYPTO_CONFIG so that PSA_WANT config symbols are evaluated
1770 scripts/config.py full
1779 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
1780 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_STREAM_CIPHER
1781 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR
1782 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB
1783 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB
1784 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING
1785 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
1786 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
1799 scripts/config.py full
1800 scripts/config.py unset MBEDTLS_BIGNUM_C
1802 scripts/config.py unset MBEDTLS_ECP_C
1803 scripts/config.py unset MBEDTLS_RSA_C
1804 scripts/config.py unset MBEDTLS_DHM_C
1806 scripts/config.py unset MBEDTLS_ECDH_C
1807 scripts/config.py unset MBEDTLS_ECDSA_C
1808 scripts/config.py unset MBEDTLS_ECJPAKE_C
1809 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
1811 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
1812 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
1814 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1815 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1816 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1817 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1818 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1819 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
1820 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1821 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
1823 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
1825 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
1826 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
1827 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1828 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
1830 scripts/config.py unset MBEDTLS_PK_C
1831 scripts/config.py unset MBEDTLS_PK_PARSE_C
1832 scripts/config.py unset MBEDTLS_PK_WRITE_C
1833 scripts/config.py unset MBEDTLS_X509_USE_C
1834 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
1835 scripts/config.py unset MBEDTLS_X509_CRL_PARSE_C
1836 scripts/config.py unset MBEDTLS_X509_CSR_PARSE_C
1837 scripts/config.py unset MBEDTLS_X509_CREATE_C
1838 scripts/config.py unset MBEDTLS_X509_CRT_WRITE_C
1839 scripts/config.py unset MBEDTLS_X509_CSR_WRITE_C
1840 scripts/config.py unset MBEDTLS_PKCS7_C
1841 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
1842 scripts/config.py unset MBEDTLS_SSL_ASYNC_PRIVATE
1843 scripts/config.py unset MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1855 scripts/config.py unset MBEDTLS_GCM_C
1856 scripts/config.py unset MBEDTLS_CCM_C
1857 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1859 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1861 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
1863 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
1865 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
1867 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
1868 scripts/config.py unset MBEDTLS_SSL_TICKET_C
1881 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1883 scripts/config.py unset MBEDTLS_GCM_C
1884 scripts/config.py unset MBEDTLS_CCM_C
1885 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1887 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1889 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
1891 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
1893 scripts/config.py set MBEDTLS_CIPHER_NULL_CIPHER
1895 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
1896 scripts/config.py unset MBEDTLS_SSL_TICKET_C
1910 scripts/config.py unset MBEDTLS_GCM_C
1911 scripts/config.py unset MBEDTLS_CCM_C
1912 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1914 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1916 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1918 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
1920 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
1922 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
1923 scripts/config.py unset MBEDTLS_SSL_TICKET_C
1937 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1939 scripts/config.py unset MBEDTLS_GCM_C
1940 scripts/config.py unset MBEDTLS_CCM_C
1941 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1943 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1945 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1947 scripts/config.py unset MBEDTLS_SSL_ENCRYPT_THEN_MAC
1949 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
1951 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
1952 scripts/config.py unset MBEDTLS_SSL_TICKET_C
1967 scripts/config.py unset MBEDTLS_GCM_C
1968 scripts/config.py unset MBEDTLS_CCM_C
1969 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1971 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
1973 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
1975 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
1977 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
1979 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
1980 scripts/config.py unset MBEDTLS_SSL_TICKET_C
1994 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1996 scripts/config.py unset MBEDTLS_GCM_C
1997 scripts/config.py unset MBEDTLS_CCM_C
1998 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
2000 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
2002 scripts/config.py set MBEDTLS_CIPHER_MODE_CBC
2004 scripts/config.py set MBEDTLS_SSL_ENCRYPT_THEN_MAC
2006 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
2008 scripts/config.py unset MBEDTLS_SSL_CONTEXT_SERIALIZATION
2009 scripts/config.py unset MBEDTLS_SSL_TICKET_C
2026 scripts/config.py set MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
2035 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
2055 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
2075 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
2076 scripts/config.py unset MBEDTLS_ECDSA_C
2077 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2078 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2079 scripts/config.py unset MBEDTLS_ECJPAKE_C
2081 scripts/config.py unset-all "MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED"
2082 scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED
2092 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
2093 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
2103 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096
2104 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384
2114 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000
2124 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190
2134 scripts/config.py full
2142 msg "build: cmake, full config, clang" # ~ 50s
2143 scripts/config.py full
2147 msg "test: main suites (full config, clang)" # ~ 5s
2150 msg "test: cpp_dummy_build (full config, clang)" # ~ 1s
2156 msg "program demos (full config, clang)" # ~10s
2159 msg "test: psa_constant_names (full config, clang)" # ~ 1s
2162 msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s
2165 msg "test: compat.sh NULL (full config)" # ~ 2 min
2200 msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
2201 scripts/config.py full
2202 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
2203 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2204 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
2219 msg "build: cmake MSan (clang), full config with constant flow testing"
2220 scripts/config.py full
2221 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
2222 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
2240 msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
2241 scripts/config.py full
2242 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
2243 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2256 scripts/config.py --force set MBEDTLS_TEST_CONSTANT_FLOW_ASM
2274 msg "build: cmake release GCC, full config with constant flow testing"
2275 scripts/config.py full
2276 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
2289 scripts/config.py full
2290 scripts/config.py set MBEDTLS_THREADING_C
2291 scripts/config.py set MBEDTLS_THREADING_PTHREAD
2293 scripts/config.py unset MBEDTLS_SELF_TEST
2296 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
2309 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
2317 msg "build: make, full_no_deprecated config" # ~ 30s
2318 scripts/config.py full_no_deprecated
2321 msg "test: make, full_no_deprecated config" # ~ 5s
2332 msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s
2333 scripts/config.py full_no_deprecated
2334 scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED
2335 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
2338 msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s
2345 msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
2346 scripts/config.py full
2347 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
2353 msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
2360 msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s
2363 msg "program demos: full config + MBEDTLS_TEST_DEPRECATED" # ~10s
2375 scripts/config.py crypto
2381 msg "build: make, crypto only, full config"
2382 scripts/config.py crypto_full
2388 msg "build: make, config for PSA crypto service"
2389 scripts/config.py crypto
2390 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
2395 scripts/config.py unset MBEDTLS_ERROR_C
2396 scripts/config.py unset MBEDTLS_TIMING_C
2397 scripts/config.py unset MBEDTLS_VERSION_FEATURES
2399 scripts/config.py unset MBEDTLS_BASE64_C
2401 scripts/config.py unset MBEDTLS_HKDF_C # PSA's HKDF is independent
2403 scripts/config.py unset MBEDTLS_NIST_KW_C
2404 scripts/config.py unset MBEDTLS_PEM_PARSE_C
2405 scripts/config.py unset MBEDTLS_PEM_WRITE_C
2406 scripts/config.py unset MBEDTLS_PKCS12_C
2407 scripts/config.py unset MBEDTLS_PKCS5_C
2411 scripts/config.py unset MBEDTLS_PK_C
2412 scripts/config.py unset MBEDTLS_PK_PARSE_C
2413 scripts/config.py unset MBEDTLS_PK_WRITE_C
2419 msg "build: make, crypto only, baremetal config"
2420 scripts/config.py crypto_baremetal
2429 msg "build: make, baremetal config"
2430 scripts/config.py baremetal
2513 msg "build: full config - only DH 2048"
2515 scripts/config.py full
2518 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_DH_RFC7919_3072
2519 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_DH_RFC7919_4096
2520 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_DH_RFC7919_6144
2521 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_DH_RFC7919_8192
2525 msg "test: full config - only DH 2048"
2528 msg "ssl-opt: full config - only DH 2048"
2535 scripts/config.py full
2536 scripts/config.py unset MBEDTLS_PK_RSA_ALT_SUPPORT
2537 scripts/config.py set MBEDTLS_RSA_C
2538 scripts/config.py set MBEDTLS_X509_CRT_WRITE_C
2546 scripts/config.py full
2550 scripts/config.py unset MBEDTLS_AESNI_C
2551 scripts/config.py unset MBEDTLS_PADLOCK_C
2552 scripts/config.py unset MBEDTLS_AESCE_C
2554 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2556 scripts/config.py unset MBEDTLS_THREADING_PTHREAD
2559 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
2561 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
2562 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
2564 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
2565 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
2569 scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT'
2570 scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C
2579 scripts/config.py full
2580 scripts/config.py set MBEDTLS_DHM_ALT
2582 scripts/config.py unset MBEDTLS_DEBUG_C
2590 msg "build: cmake, full config minus PSA crypto, ASan"
2591 scripts/config.py full
2592 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
2593 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CLIENT
2594 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
2595 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
2596 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
2597 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
2598 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
2599 scripts/config.py unset MBEDTLS_LMS_C
2600 scripts/config.py unset MBEDTLS_LMS_PRIVATE
2634 # Start from default config (no USE_PSA) + TLS 1.3
2638 scripts/config.py unset MBEDTLS_ECDSA_C
2641 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2642 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2655 # Make sure this was not re-enabled by accident (additive config)
2676 # Start from default config (no USE_PSA)
2680 scripts/config.py unset MBEDTLS_ECDH_C
2683 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
2684 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
2685 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2686 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
2687 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2696 # Make sure this was not re-enabled by accident (additive config)
2721 scripts/config.py unset MBEDTLS_DHM_C
2724 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
2725 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
2734 # Make sure this was not re-enabled by accident (additive config)
2754 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
2755 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
2778 scripts/config.py unset MBEDTLS_ECJPAKE_C
2779 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
2788 # Make sure this was not re-enabled by accident (additive config)
2815 # start with config full for maximum coverage (also enables USE_PSA)
2819 scripts/config.py unset MBEDTLS_ECDSA_C
2820 scripts/config.py unset MBEDTLS_ECDH_C
2821 scripts/config.py unset MBEDTLS_ECJPAKE_C
2822 scripts/config.py unset MBEDTLS_ECP_C
2830 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2833 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
2905 # Start with config crypto_full and remove PK_C:
2908 scripts/config.py unset MBEDTLS_PK_C
2909 scripts/config.py unset MBEDTLS_PK_PARSE_C
2910 scripts/config.py unset MBEDTLS_PK_WRITE_C
2913 scripts/config.py unset MBEDTLS_ECDSA_C
2914 scripts/config.py unset MBEDTLS_ECDH_C
2915 scripts/config.py unset MBEDTLS_ECJPAKE_C
2916 scripts/config.py unset MBEDTLS_ECP_C
2924 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2927 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
2978 # Auxiliary function to build config for all EC based algorithms (EC-JPAKE,
2985 # same config, except for the use of driver or built-in EC algorithms:
2991 # start with config full for maximum coverage (also enables USE_PSA)
2995 scripts/config.py unset MBEDTLS_ECDSA_C
2996 scripts/config.py unset MBEDTLS_ECDH_C
2997 scripts/config.py unset MBEDTLS_ECJPAKE_C
2998 scripts/config.py unset MBEDTLS_ECP_C
3004 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
3021 # Use the same config as reference, only without built-in EC algs
3038 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3084 # start with full config for maximum coverage (also enables USE_PSA)
3089 scripts/config.py unset MBEDTLS_ECDSA_C
3090 scripts/config.py unset MBEDTLS_ECDH_C
3091 scripts/config.py unset MBEDTLS_ECJPAKE_C
3093 scripts/config.py unset MBEDTLS_ECP_C
3097 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
3098 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
3099 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
3104 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
3142 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3199 # start with full config for maximum coverage (also enables USE_PSA)
3204 scripts/config.py unset MBEDTLS_ECDSA_C
3205 scripts/config.py unset MBEDTLS_ECDH_C
3206 scripts/config.py unset MBEDTLS_ECJPAKE_C
3208 scripts/config.py unset MBEDTLS_ECP_C
3210 scripts/config.py unset MBEDTLS_BIGNUM_C
3214 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
3215 scripts/config.py unset MBEDTLS_PK_PARSE_EC_COMPRESSED
3216 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
3220 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_RSA_[0-9A-Z_a-z]*"
3221 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_ALG_RSA_[0-9A-Z_a-z]*"
3222 scripts/config.py unset MBEDTLS_RSA_C
3223 scripts/config.py unset MBEDTLS_PKCS1_V15
3224 scripts/config.py unset MBEDTLS_PKCS1_V21
3225 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3227 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
3228 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
3229 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3230 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3231 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3236 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_FFDH
3237 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_KEY_TYPE_DH_[0-9A-Z_a-z]*"
3238 scripts/config.py -f "$CRYPTO_CONFIG_H" unset-all "PSA_WANT_DH_RFC7919_[0-9]*"
3239 scripts/config.py unset MBEDTLS_DHM_C
3240 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
3241 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3246 scripts/config.py unset MBEDTLS_DHM_C
3247 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
3248 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3255 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
3317 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3392 # Enable TF-M config
3393 cp configs/config-tfm.h "$CONFIG_H"
3397 # Other config adjustment to make the tests pass.
3413 msg "build: TF-M config + p256m driver + accel ECDH(E)/ECDSA"
3420 # Make sure any built-in EC alg was not re-enabled by accident (additive config)
3432 # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration
3437 msg "test: TF-M config + p256m driver + accel ECDH(E)/ECDSA"
3451 msg "build: TF-M config"
3457 # In "config-tfm.h" we disabled CIPHER_C tweaking TF-M's configuration
3461 msg "test: TF-M config"
3476 scripts/config.py full
3479 scripts/config.py unset $sym
3513 scripts/config.py full
3514 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
3515 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
3519 scripts/config.py -f "$CRYPTO_CONFIG_H" unset "$disabled_psa_want"
3538 # Start from crypto_full config (no X.509, no TLS)
3543 scripts/config.py unset MBEDTLS_RSA_C
3544 scripts/config.py unset MBEDTLS_PKCS1_V15
3545 scripts/config.py unset MBEDTLS_PKCS1_V21
3549 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_PEM_PARSE_C
3550 scripts/config.py -f "$CONFIG_TEST_DRIVER_H" set MBEDTLS_BASE64_C
3580 # Make sure this was not re-enabled by accident (additive config)
3610 msg "Build: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC"
3622 scripts/config.py crypto
3625 scripts/config.py unset MBEDTLS_PKCS1_V15
3626 scripts/config.py unset MBEDTLS_PKCS1_V21
3627 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
3628 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
3629 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
3630 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
3631 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
3632 scripts/config.py unset MBEDTLS_RSA_C
3633 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
3636 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
3640 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT
3641 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT
3642 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE
3646 msg "Test: crypto config - MBEDTLS_RSA_C + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC"
3669 # Start from default config (no USE_PSA)
3673 scripts/config.py unset MBEDTLS_MD5_C
3674 scripts/config.py unset MBEDTLS_RIPEMD160_C
3675 scripts/config.py unset MBEDTLS_SHA1_C
3676 scripts/config.py unset MBEDTLS_SHA224_C
3677 scripts/config.py unset MBEDTLS_SHA256_C
3678 scripts/config.py unset MBEDTLS_SHA384_C
3679 scripts/config.py unset MBEDTLS_SHA512_C
3680 scripts/config.py unset MBEDTLS_SHA3_C
3713 # Start from default config (no USE_PSA)
3724 # Auxiliary function to build config for hashes with and without drivers
3727 # start with config full for maximum coverage (also enables USE_PSA)
3731 scripts/config.py unset MBEDTLS_MD5_C
3732 scripts/config.py unset MBEDTLS_RIPEMD160_C
3733 scripts/config.py unset MBEDTLS_SHA1_C
3734 scripts/config.py unset MBEDTLS_SHA224_C
3735 scripts/config.py unset MBEDTLS_SHA256_C # see external RNG below
3736 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
3737 scripts/config.py unset MBEDTLS_SHA384_C
3738 scripts/config.py unset MBEDTLS_SHA512_C
3739 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
3740 scripts/config.py unset MBEDTLS_SHA3_C
3781 # the reference config in analyze_outcomes.py, to check that the
3810 # Auxiliary function to build config for hashes with and without drivers
3813 # start with config full for maximum coverage (also enables USE_PSA)
3819 scripts/config.py unset MBEDTLS_MD_C
3822 scripts/config.py unset-all MBEDTLS_SHA
3823 scripts/config.py unset MBEDTLS_MD5_C
3824 scripts/config.py unset MBEDTLS_RIPEMD160_C
3829 scripts/config.py unset MBEDTLS_PKCS7_C
3830 scripts/config.py unset MBEDTLS_PKCS5_C
3831 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
3832 scripts/config.py unset MBEDTLS_HKDF_C
3834 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC
3835 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_DETERMINISTIC_ECDSA
3896 # Start from the full config
3900 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
3901 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
3902 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
3903 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
3904 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
3905 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
3906 scripts/config.py unset MBEDTLS_DES_C
3907 scripts/config.py unset MBEDTLS_CMAC_C
3916 # Make sure this was not re-enabled by accident (additive config)
3935 # Start from full config
3939 scripts/config.py unset MBEDTLS_GCM_C
3940 scripts/config.py unset MBEDTLS_CCM_C
3941 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
3944 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
3953 # Make sure this was not re-enabled by accident (additive config)
3969 # Start from the full config
3972 scripts/config.py unset MBEDTLS_NIST_KW_C
3981 msg "build: full config with accelerated cipher inc. AEAD and CMAC"
3994 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
3995 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
3996 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
3997 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
3998 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
3999 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
4000 scripts/config.py unset MBEDTLS_GCM_C
4001 scripts/config.py unset MBEDTLS_CCM_C
4002 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
4003 scripts/config.py unset MBEDTLS_CMAC_C
4004 scripts/config.py unset MBEDTLS_DES_C
4005 scripts/config.py unset MBEDTLS_AES_C
4006 scripts/config.py unset MBEDTLS_ARIA_C
4007 scripts/config.py unset MBEDTLS_CHACHA20_C
4008 scripts/config.py unset MBEDTLS_CAMELLIA_C
4012 scripts/config.py unset MBEDTLS_CIPHER_C
4021 # Make sure this was not re-enabled by accident (additive config)
4035 msg "test: full config with accelerated cipher inc. AEAD and CMAC"
4038 msg "ssl-opt: full config with accelerated cipher inc. AEAD and CMAC"
4041 msg "compat.sh: full config with accelerated cipher inc. AEAD and CMAC"
4046 msg "build: full config with non-accelerated cipher inc. AEAD and CMAC"
4051 msg "test: full config with non-accelerated cipher inc. AEAD and CMAC"
4054 msg "ssl-opt: full config with non-accelerated cipher inc. AEAD and CMAC"
4057 msg "compat.sh: full config with non-accelerated cipher inc. AEAD and CMAC"
4064 # Start from the full config
4070 scripts/config.py unset MBEDTLS_AES_C
4071 scripts/config.py unset MBEDTLS_ARIA_C
4072 scripts/config.py unset MBEDTLS_CAMELLIA_C
4079 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CTR
4080 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CFB
4081 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_OFB
4082 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
4083 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
4084 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CMAC
4085 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CCM_STAR_NO_TAG
4088 scripts/config.py unset MBEDTLS_NIST_KW_C
4095 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
4117 # config)
4143 scripts/config.py full
4144 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
4145 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305
4154 scripts/config.py full
4155 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
4156 scripts/config.py unset MBEDTLS_GCM_C
4157 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CHACHA20_POLY1305
4158 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_GCM
4169 cp configs/crypto-config-ccm-aes-sha256.h "$CRYPTO_CONFIG_H"
4180 scripts/config.py full
4181 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4182 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4183 scripts/config.py unset MBEDTLS_ECDH_C
4184 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
4185 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
4186 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
4187 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
4188 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
4196 scripts/config.py full
4197 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4198 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4206 scripts/config.py full
4207 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4208 scripts/config.py unset MBEDTLS_HKDF_C
4210 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4218 scripts/config.py full
4219 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4220 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4221 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4222 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4223 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4224 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4225 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4226 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4227 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
4228 scripts/config.py unset MBEDTLS_LMS_C
4229 scripts/config.py unset MBEDTLS_LMS_PRIVATE
4237 scripts/config.py full
4238 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4239 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4240 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4241 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4242 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4243 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4244 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4245 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4246 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
4247 scripts/config.py unset MBEDTLS_LMS_C
4248 scripts/config.py unset MBEDTLS_LMS_PRIVATE
4256 scripts/config.py full
4257 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4258 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4259 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4260 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4261 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4262 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4263 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4264 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4265 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
4266 scripts/config.py unset MBEDTLS_LMS_C
4267 scripts/config.py unset MBEDTLS_LMS_PRIVATE
4275 scripts/config.py full
4276 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4277 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4278 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4279 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4280 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4281 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4282 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4283 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
4291 scripts/config.py full
4292 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4293 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4294 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4295 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4296 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4297 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4298 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4299 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_512
4307 scripts/config.py full
4308 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4309 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4310 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4311 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4312 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4313 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4314 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4315 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
4316 scripts/config.py unset MBEDTLS_LMS_C
4317 scripts/config.py unset MBEDTLS_LMS_PRIVATE
4325 scripts/config.py full
4326 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4327 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4328 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_MD5
4329 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RIPEMD160
4330 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_1
4331 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_224
4332 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_256
4333 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_SHA_384
4334 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS
4335 scripts/config.py unset MBEDTLS_LMS_C
4336 scripts/config.py unset MBEDTLS_LMS_PRIVATE
4344 scripts/config.py full
4345 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4346 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4347 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
4348 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4349 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4350 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
4358 scripts/config.py full
4359 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4360 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4361 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
4362 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4363 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4364 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
4372 scripts/config.py full
4373 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4374 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4375 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_OAEP 1
4376 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4377 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4378 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PSS
4386 scripts/config.py full
4387 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4388 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4389 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4390 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
4391 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
4392 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_RSA_OAEP
4400 scripts/config.py full
4401 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4402 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4403 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4404 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
4405 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
4406 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
4407 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
4415 scripts/config.py full
4416 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
4417 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4418 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_ALG_RSA_PSS 1
4419 scripts/config.py -f "$CRYPTO_CONFIG_H" set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
4431 cp configs/config-tfm.h "$CONFIG_H"
4433 msg "build: TF-M config, armclang armv7-m thumb2"
4442 # configs/config-tfm.h, tested via test-ref-configs.pl.
4443 cp configs/config-tfm.h "$CONFIG_H"
4445 msg "build: TF-M config, clang, armv7-m thumb2"
4448 msg "build: TF-M config, gcc native build"
4470 ./scripts/config.py unset ${opt}
4548 msg "build: aes.o for all combinations of relevant config options"
4557 msg "build: aes.o for all combinations of relevant config options + BLOCK_CIPHER_NO_DECRYPT"
4562 scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
4563 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
4564 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
4565 scripts/config.py unset MBEDTLS_DES_C
4566 scripts/config.py unset MBEDTLS_NIST_KW_C
4578 msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s
4579 scripts/config.py full_no_platform
4580 scripts/config.py unset MBEDTLS_PLATFORM_C
4581 scripts/config.py unset MBEDTLS_NET_C
4582 scripts/config.py unset MBEDTLS_FS_IO
4583 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
4584 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
4585 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
4586 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
4595 msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s
4596 scripts/config.py full
4597 scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
4598 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
4599 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
4605 msg "build: full config except SSL server, make, gcc" # ~ 30s
4606 scripts/config.py full
4607 scripts/config.py unset MBEDTLS_SSL_SRV_C
4612 msg "build: full config except SSL client, make, gcc" # ~ 30s
4613 scripts/config.py full
4614 scripts/config.py unset MBEDTLS_SSL_CLI_C
4621 msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s
4622 scripts/config.py full
4623 scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc.
4624 scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux
4629 msg "build: default config with memory buffer allocator and backtrace enabled"
4630 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4631 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4632 scripts/config.py set MBEDTLS_MEMORY_BACKTRACE
4633 scripts/config.py set MBEDTLS_MEMORY_DEBUG
4642 msg "build: default config with memory buffer allocator"
4643 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4644 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4658 msg "build: default config except MFL extension (ASan build)" # ~ 30s
4659 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4668 msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)"
4669 scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
4670 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
4689 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4690 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
4691 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
4704 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
4720 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT 1
4736 msg "build: default config with memory buffer allocator and MFL extension"
4737 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
4738 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4739 scripts/config.py set MBEDTLS_MEMORY_DEBUG
4740 scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4741 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
4754 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
4755 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
4756 scripts/config.py unset MBEDTLS_CMAC_C
4767 msg "build: default config without MBEDTLS_HAVE_TIME_DATE"
4768 scripts/config.py unset MBEDTLS_HAVE_TIME_DATE
4778 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
4779 scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc
4780 scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free
4790 scripts/config.py full
4791 make CC=$ASAN_CC CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"$PWD/tests/configs/user-config-malloc-0-null.h\"' $ASAN_CFLAGS" LDFLAGS="$ASAN_CFLAGS"
4833 msg "build: default config with different AES implementations"
4834 scripts/config.py set MBEDTLS_AESNI_C
4835 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4836 scripts/config.py set MBEDTLS_HAVE_ASM
4853 scripts/config.py unset MBEDTLS_AESNI_C
4854 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4864 scripts/config.py set MBEDTLS_AESNI_C
4865 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4878 # define minimal config sufficient to test SHA3
4904 msg "build: default config with different AES implementations"
4905 scripts/config.py set MBEDTLS_AESNI_C
4906 scripts/config.py set MBEDTLS_PADLOCK_C
4907 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4908 scripts/config.py set MBEDTLS_HAVE_ASM
4921 scripts/config.py set MBEDTLS_AESNI_C
4922 scripts/config.py unset MBEDTLS_PADLOCK_C
4923 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4942 scripts/config.py set MBEDTLS_AESNI_C
4943 scripts/config.py set MBEDTLS_PADLOCK_C
4944 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4945 scripts/config.py set MBEDTLS_HAVE_ASM
4962 scripts/config.py baremetal
4965 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
4973 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
4974 scripts/config.py set MBEDTLS_HAVE_ASM
4977 scripts/config.py set MBEDTLS_AESCE_C
4978 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
4982 scripts/config.py set MBEDTLS_AESCE_C
4983 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
4994 scripts/config.py set MBEDTLS_AESCE_C
4995 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
5006 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
5018 scripts/config.py set MBEDTLS_AES_USE_HARDWARE_ONLY
5030 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
5031 scripts/config.py unset MBEDTLS_AESCE_C
5049 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
5053 scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
5058 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY
5061 # test the deprecated form of the config option
5062 scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
5065 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
5067 scripts/config.py set MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
5070 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
5073 # test the deprecated form of the config option
5074 scripts/config.py set MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
5079 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
5084 scripts/config.py set ${opt}
5096 scripts/config.py unset ${opt}
5118 scripts/config.py unset MBEDTLS_AESNI_C
5119 scripts/config.py set MBEDTLS_PADLOCK_C
5120 scripts/config.py unset MBEDTLS_AES_USE_HARDWARE_ONLY
5137 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH"
5138 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
5139 scripts/config.py unset MBEDTLS_PADLOCK_C
5143 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH"
5148 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C"
5149 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
5150 scripts/config.py unset MBEDTLS_CTR_DRBG_C
5151 scripts/config.py unset MBEDTLS_PADLOCK_C
5155 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - CTR_DRBG_C"
5160 msg "build: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
5161 scripts/config.py set MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
5162 scripts/config.py unset MBEDTLS_PADLOCK_C
5163 scripts/config.py unset MBEDTLS_AESNI_C
5164 scripts/config.py unset MBEDTLS_AESCE_C
5168 msg "test: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
5171 msg "selftest: default config + AES_ONLY_128_BIT_KEY_LENGTH - AESNI_C - AESCE_C"
5176 msg "build: default config + GCM_LARGE_TABLE - AESNI_C - AESCE_C"
5177 scripts/config.py set MBEDTLS_GCM_LARGE_TABLE
5178 scripts/config.py unset MBEDTLS_PADLOCK_C
5179 scripts/config.py unset MBEDTLS_AESNI_C
5180 scripts/config.py unset MBEDTLS_AESCE_C
5184 msg "test: default config - GCM_LARGE_TABLE - AESNI_C - AESCE_C"
5189 msg "build: default config with AES_FEWER_TABLES enabled"
5190 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
5198 msg "build: default config with AES_ROM_TABLES enabled"
5199 scripts/config.py set MBEDTLS_AES_ROM_TABLES
5207 msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled"
5208 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
5209 scripts/config.py set MBEDTLS_AES_ROM_TABLES
5217 # - enable/disable the list of config options passed from -s/-u respectively.
5224 # Options: -s set_opts the list of config options to enable
5225 # -u unset_opts the list of config options to disable
5247 [ -n "$set_opts" ] && echo "Enabling: $set_opts" && scripts/config.py set-all $set_opts
5248 [ -n "$unset_opts" ] && echo "Disabling: $unset_opts" && scripts/config.py unset-all $unset_opts
5250 msg "build: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5263 msg "test: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5266 msg "selftest: default config + BLOCK_CIPHER_NO_DECRYPT${set_opts:+ + $set_opts}${unset_opts:+ - $unset_opts} with $cflags${ldflags:+, $ldflags}"
5304 scripts/config.py set MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
5305 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
5306 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
5307 scripts/config.py unset MBEDTLS_DES_C
5308 scripts/config.py unset MBEDTLS_NIST_KW_C
5313 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
5314 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_NO_PADDING
5315 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_CBC_PKCS7
5316 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_ALG_ECB_NO_PADDING
5317 scripts/config.py -f "$CRYPTO_CONFIG_H" unset PSA_WANT_KEY_TYPE_DES
5340 scripts/config.py baremetal
5343 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
5351 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
5352 scripts/config.py set MBEDTLS_HAVE_ASM
5357 scripts/config.py set MBEDTLS_AESCE_C
5358 msg "build: default config + BLOCK_CIPHER_NO_DECRYPT with AESCE"
5374 scripts/config.py full
5375 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5376 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
5386 scripts/config.py full
5387 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5388 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
5398 scripts/config.py full
5399 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
5400 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
5401 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
5410 msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C"
5411 scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C
5414 msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C"
5420 scripts/config.py full
5421 scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
5423 loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'"
5467 scripts/config.py full
5468 test_build_opt 'full config' clang -O0 -Os -O2
5473 scripts/config.py full
5474 test_build_opt 'full config' "$CLANG_LATEST" -O0 -Os -O2
5481 scripts/config.py full
5482 test_build_opt 'full config' "$CLANG_EARLIEST" -O0
5489 scripts/config.py full
5490 test_build_opt 'full config' "$GCC_LATEST" -O0 -Os -O2
5497 scripts/config.py full
5498 test_build_opt 'full config' "$GCC_EARLIEST" -O0
5506 scripts/config.py -w full_config.h full
5514 # In the user config, disable one feature (for simplicity, pick a feature
5525 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
5534 # In the user config, disable one feature, which will reflect on the
5537 scripts/config.py unset MBEDTLS_CMAC_C
5572 scripts/config.py full
5573 scripts/config.py unset MBEDTLS_HAVE_ASM
5574 scripts/config.py unset MBEDTLS_PADLOCK_C
5575 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
5592 scripts/config.py full
5593 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
5608 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
5609 scripts/config.py unset MBEDTLS_AESNI_C # AESNI for 32-bit is tested in test_aesni_m32
5628 scripts/config.py full
5643 scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1
5653 scripts/config.py unset MBEDTLS_HAVE_ASM
5654 scripts/config.py unset MBEDTLS_AESNI_C
5655 scripts/config.py unset MBEDTLS_PADLOCK_C
5656 scripts/config.py unset MBEDTLS_AESCE_C
5665 scripts/config.py unset MBEDTLS_HAVE_ASM
5666 scripts/config.py unset MBEDTLS_AESNI_C
5667 scripts/config.py unset MBEDTLS_PADLOCK_C
5668 scripts/config.py unset MBEDTLS_AESCE_C
5677 scripts/config.py unset MBEDTLS_HAVE_ASM
5678 scripts/config.py unset MBEDTLS_AESNI_C
5679 scripts/config.py unset MBEDTLS_PADLOCK_C
5680 scripts/config.py unset MBEDTLS_AESCE_C
5681 scripts/config.py set MBEDTLS_TEST_HOOKS
5682 scripts/config.py set MBEDTLS_ECP_WITH_MPI_UINT
5691 scripts/config.py full
5692 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
5701 scripts/config.py full
5702 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
5711 scripts/config.py full
5713 scripts/config.py unset MBEDTLS_DEBUG_C
5714 scripts/config.py unset MBEDTLS_ERROR_C
5715 scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY
5716 scripts/config.py unset MBEDTLS_VERSION_FEATURES
5725 scripts/config.pl full
5726 scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests
5727 scripts/config.pl set MBEDTLS_X509_REMOVE_INFO
5739 scripts/config.py baremetal
5748 scripts/config.py baremetal
5765 scripts/config.py baremetal
5777 scripts/config.py baremetal_size
5790 scripts/config.py baremetal
5791 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
5799 scripts/config.py baremetal
5800 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
5809 scripts/config.py baremetal
5827 scripts/config.py baremetal
5829 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
5832 scripts/config.py unset MBEDTLS_AESCE_C
5840 scripts/config.py unset MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
5842 scripts/config.py set MBEDTLS_HAVE_ASM
5876 scripts/config.py set MBEDTLS_AESCE_C
5887 msg "build: default config without MBEDTLS_SSL_PROTO_TLS1_3, cmake, gcc, ASan"
5888 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
5903 msg "build: default config without MBEDTLS_SSL_PROTO_TLS1_2"
5904 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
5905 scripts/config.py set MBEDTLS_SSL_RECORD_SIZE_LIMIT
5917 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5918 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5919 scripts/config.py unset MBEDTLS_ECDH_C
5920 scripts/config.py unset MBEDTLS_DHM_C
5921 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5922 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5923 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5924 scripts/config.py unset MBEDTLS_ECDSA_C
5925 scripts/config.py unset MBEDTLS_PKCS1_V21
5926 scripts/config.py unset MBEDTLS_PKCS7_C
5927 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
5939 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5940 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5941 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
5953 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5954 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
5955 scripts/config.py unset MBEDTLS_SSL_EARLY_DATA
5956 scripts/config.py unset MBEDTLS_ECDH_C
5969 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5970 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5971 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5972 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5973 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5974 scripts/config.py unset MBEDTLS_ECDSA_C
5975 scripts/config.py unset MBEDTLS_PKCS1_V21
5976 scripts/config.py unset MBEDTLS_PKCS7_C
5977 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
5989 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
5990 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5991 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
5992 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
5993 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
5994 scripts/config.py unset MBEDTLS_ECDSA_C
5995 scripts/config.py unset MBEDTLS_PKCS1_V21
5996 scripts/config.py unset MBEDTLS_PKCS7_C
5997 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
5998 scripts/config.py unset MBEDTLS_ECDH_C
6010 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6011 scripts/config.py unset MBEDTLS_X509_CRT_PARSE_C
6012 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
6013 scripts/config.py unset MBEDTLS_SSL_SERVER_NAME_INDICATION
6014 scripts/config.py unset MBEDTLS_ECDSA_C
6015 scripts/config.py unset MBEDTLS_PKCS1_V21
6016 scripts/config.py unset MBEDTLS_PKCS7_C
6017 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
6029 scripts/config.py unset MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
6030 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
6041 msg "build: default config plus early data minus padding"
6042 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
6043 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
6046 msg "test: default config plus early data minus padding"
6053 msg "build: default config plus early data minus middlebox compatibility mode"
6054 scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6055 scripts/config.py set MBEDTLS_SSL_EARLY_DATA
6058 msg "test: default config plus early data minus middlebox compatibility mode"
6077 msg "build: Windows cross build - mingw64, make (Library only, default config without MBEDTLS_AESNI_C)" # ~ 30s
6078 ./scripts/config.py unset MBEDTLS_AESNI_C #
6091 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
6117 # default config, in particular without MBEDTLS_USE_PSA_CRYPTO
6121 msg "test: main suites, Valgrind (default config)"
6128 msg "test: ssl-opt.sh --memcheck (default config)"
6133 msg "test: compat.sh --memcheck (default config)"
6138 msg "test: context-info.sh --memcheck (default config)"
6145 # full config, in particular with MBEDTLS_USE_PSA_CRYPTO
6146 scripts/config.py full
6150 msg "test: main suites, Valgrind (full config)"
6261 # Make a copy of config file to use for the in-tree test
6268 # Build once to get the generated files (which need an intact config file)
6273 scripts/config.py -w full_config.h full
6279 # In the user config, disable one feature (for simplicity, pick a feature
6294 # Restore config for the in-tree test
6297 # Build once to get the generated files (which need an intact config)
6302 scripts/config.py -w full_config.h full
6308 # In the user config, disable one feature (for simplicity, pick a feature
6326 scripts/config.py full
6329 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-zeroize-memset.h\"' -DMBEDTLS_TEST_DEFINES_ZEROIZE -Werror -Wsizeof-pointer-memaccess"
6363 msg "build: make, default config (out-of-box), libmbedcrypto.a only"