Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Always build with MBEDTLS_USE_PSA_CRYPTO and MBEDTLS_PSA_CRYPTO_CLIENT enabled #9630

Open
gilles-peskine-arm opened this issue Sep 24, 2024 · 0 comments · May be fixed by #9610
Open

Always build with MBEDTLS_USE_PSA_CRYPTO and MBEDTLS_PSA_CRYPTO_CLIENT enabled #9630

gilles-peskine-arm opened this issue Sep 24, 2024 · 0 comments · May be fixed by #9610
Labels
api-break This issue/PR breaks the API and must wait for a new major version component-crypto Crypto primitives and low-level interfaces component-tls component-x509 size-s Estimated task size: small (~2d)

Comments

@gilles-peskine-arm
Copy link
Contributor

gilles-peskine-arm commented Sep 24, 2024 •
edited
Loading

The goal of this issue is to always have MBEDTLS_USE_PSA_CRYPTO and MBEDTLS_PSA_CRYPTO_CLIENT (or MBEDTLS_PSA_CRYPTO_SPM) enabled no matter how the library is built.

Definition of done:

  • MBEDTLS_USE_PSA_CRYPTO_ENABLED is no longer a selectable option in mbedtls_config.h, but an internal symbol that is auto-enabled during a transition period.
  • !MBEDTLS_PSA_CRYPTO_CLIENT is no longer tested, except possibly in builds that focus on low-level crypto.

Any reduction in test coverage should be justified.
@gilles-peskine-arm gilles-peskine-arm added component-tls component-x509 component-crypto Crypto primitives and low-level interfaces api-break This issue/PR breaks the API and must wait for a new major version labels Sep 24, 2024
@gilles-peskine-arm gilles-peskine-arm linked a pull request Sep 24, 2024 that will close this issue
Open
5 tasks
@gilles-peskine-arm gilles-peskine-arm added the size-xs Estimated task size: extra small (a few hours at most) label Sep 24, 2024
This was referenced Sep 24, 2024
Open
Open
@gilles-peskine-arm gilles-peskine-arm changed the title Always build with MBEDTLS_USE_PSA_CRYPTO enabled Always build with MBEDTLS_USE_PSA_CRYPTO and MBEDTLS_PSA_CRYPTO_CLIENT enabled Sep 24, 2024
@gilles-peskine-arm gilles-peskine-arm mentioned this issue Sep 24, 2024
Closed
5 tasks
@gilles-peskine-arm gilles-peskine-arm added size-s Estimated task size: small (~2d) and removed size-xs Estimated task size: extra small (a few hours at most) labels Sep 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
api-break This issue/PR breaks the API and must wait for a new major version component-crypto Crypto primitives and low-level interfaces component-tls component-x509 size-s Estimated task size: small (~2d)
Projects
Mbed TLS 4.0 planning
Status: Implementation in progress
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Don't test with MBEDTLS_USE_PSA_CRYPTO explicitly disabled gilles-peskine-arm/mbedtls
1 participant
@gilles-peskine-arm