[edk2-devel] [edk2-staging/OpenSSL11_EOL PATCH 0/7] Enable MbedTLS for CryptoPkg update Mar 17
Wenxing Hou
wenxing.hou at intel.com
Fri Mar 17 09:00:46 UTC 2023
The POC is to explore mbedtls as a smaller alternative to OpenSSL.
The Patch enable EC/X509/Pkcs7 base on Mbedtls for CryptoPkg.
Cc: Jiewen Yao <jiewen.yao at intel.com>
Cc: Yi Li <yi1.li at intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou at intel.com>
Wenxing Hou (7):
Update ReadmeMbedtls
Clear unnecessary API in DH
Make all BaseCryptLibMbedTls inf files consistent with BaseCryptLib
Update Pkcs7 api based on MbedTlsLib for CryptoPkg
Update EC api based on MbedTlsLib for CryptoPkg
Update X509 api based on MbedTlsLib for CryptoPkg
Clean SysCall api by adding platform_util.c
.../BaseCryptLibMbedTls/BaseCryptLib.inf | 8 +
.../BaseCryptLibMbedTls/InternalCryptLib.h | 32 +
.../Library/BaseCryptLibMbedTls/Pk/CryptDh.c | 73 --
.../Library/BaseCryptLibMbedTls/Pk/CryptEc.c | 634 +++++++++++++++++-
.../BaseCryptLibMbedTls/Pk/CryptPkcs7Sign.c | 5 +-
.../Pk/CryptPkcs7VerifyBase.c | 40 +-
.../Pk/CryptPkcs7VerifyCommon.c | 338 +++++++++-
.../Pk/CryptPkcs7VerifyEku.c | 454 +------------
.../BaseCryptLibMbedTls/Pk/CryptX509.c | 163 ++++-
.../BaseCryptLibMbedTls/Rand/CryptRandTsc.c | 7 +
.../BaseCryptLibMbedTls/RuntimeCryptLib.inf | 2 +-
.../BaseCryptLibMbedTls/SmmCryptLib.inf | 4 +-
.../SysCall/ConstantTimeClock.c | 14 -
.../BaseCryptLibMbedTls/SysCall/CrtWrapper.c | 5 -
.../SysCall/TimerWrapper.c | 14 -
.../BaseCryptLibMbedTls/TestBaseCryptLib.inf | 4 +-
CryptoPkg/Library/MbedTlsLib/MbedTlsLib.inf | 2 +
CryptoPkg/ReadmeMbedtls.md | 55 +-
18 files changed, 1264 insertions(+), 590 deletions(-)
--
2.26.2.windows.1
-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#101317): https://edk2.groups.io/g/devel/message/101317
Mute This Topic: https://groups.io/mt/97669074/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-
More information about the edk2-devel-archive
mailing list