[edk2-devel] [PATCH 0/5] CryptoPkg: Add additional cipher algos and TLS API to meet WPA3

yi1 li yi1.li at intel.com
Sun May 22 01:54:14 UTC 2022


To meet the needs of WPA3 Enterprise, additional cipher algorithms 
and TLS APIs need to be added.
Code branch: https://github.com/liyi77/edk2/tree/Add-TLS
Details as follows:
- TlsShutdown: Shutdown the TLS connection without releasing the resources, 
meaning a new connection can be started without calling TlsNew() and 
without setting certificates etc.
- TlsExportKey: Derive keying material from a TLS connection using the 
mechanism described in RFC 5705 and export the key material (needed 
by EAP methods such as EAP-TTLS and EAP-PEAP).
- TlsSetEcCurve: Set the EC curve to be used for TLS flows.
- TlsSetSignatureAlgoList: Set the signature algorithm list to used by 
the TLS object.
- Additional cipher algorithms: Which are needed for SUITE-B and SUITE-B-192.
- Add implementation for TlsSetHostPrivateKey().

Cc: Jiewen Yao <jiewen.yao at intel.com>
Cc: Jian J Wang <jian.j.wang at intel.com>
Cc: Xiaoyu Lu <xiaoyu1.lu at intel.com>
Cc: Guomin Jiang <guomin.jiang at intel.com>
Cc: Maciej Rabeda <maciej.rabeda at linux.intel.com>
Cc: Jiaxin Wu <jiaxin.wu at intel.com>
Cc: Siyuan Fu <siyuan.fu at intel.com>
Cc: Michael D Kinney <michael.d.kinney at intel.com>
Cc: Liming Gao <gaoliming at byosoft.com.cn>

Yi Li (3):
  MdePkg: Add Tls configuration related define
  CryptoPkg: Add TlsSetConfiguration API
  NetworkPkg/TlsDxe: Sync to new TlsSetHostPrivateKey() API

yi1 li (2):
  CryptoPkg: Add APIs TlsShutdown and TlsExportKey to TlsLib
  CryptoPkg: Add implementation for TlsSetHostPrivateKey()

 CryptoPkg/Driver/Crypto.c                     |  97 +++-
 CryptoPkg/Include/Library/TlsLib.h            |  93 +++-
 .../Pcd/PcdCryptoServiceFamilyEnable.h        |   3 +
 .../BaseCryptLibOnProtocolPpi/CryptLib.c      |  97 +++-
 CryptoPkg/Library/TlsLib/InternalTlsLib.h     |   5 +
 CryptoPkg/Library/TlsLib/TlsConfig.c          | 426 +++++++++++++++++-
 CryptoPkg/Library/TlsLib/TlsProcess.c         |  32 ++
 CryptoPkg/Library/TlsLibNull/TlsConfigNull.c  |  67 ++-
 CryptoPkg/Library/TlsLibNull/TlsProcessNull.c |  23 +
 CryptoPkg/Private/Protocol/Crypto.h           |  82 +++-
 MdePkg/Include/IndustryStandard/Tls1.h        | 110 +++--
 NetworkPkg/TlsDxe/TlsConfigProtocol.c         |   2 +-
 12 files changed, 968 insertions(+), 69 deletions(-)

-- 
2.31.1.windows.1



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#89924): https://edk2.groups.io/g/devel/message/89924
Mute This Topic: https://groups.io/mt/91262937/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-




More information about the edk2-devel-archive mailing list