Skip to content

Conversation

@gabor-mezei-arm
Copy link
Contributor

With the removal of MBEDTLS_SHA3_C the test cases with disabled SHA3 dependency are never executed. Adding a temporary all.sh component which disabling the PSA_WANT_ALG_SHA3_* macros to cover these test cases.

Prerequisite for Mbed-TLS/TF-PSA-Crypto#266

PR checklist

Please remove the segment/s on either side of the | symbol as appropriate, and add any relevant link/s to the end of the line.
If the provided content is part of the present PR remove the # symbol.

  • changelog not required because: only testing changes
  • development PR provided: this is
  • TF-PSA-Crypto PR not required because: testing only for repo
  • framework PR not required
  • 3.6 PR not required because: 4.0/1.0 related changes
  • tests provided

@gabor-mezei-arm gabor-mezei-arm self-assigned this Jun 2, 2025
@gabor-mezei-arm gabor-mezei-arm added needs-review Every commit must be reviewed by at least two team members, needs-ci Needs to pass CI tests needs-reviewer This PR needs someone to pick it up for review component-test Test framework and CI scripts priority-high High priority - will be reviewed soon labels Jun 2, 2025
@gabor-mezei-arm gabor-mezei-arm added the size-xs Estimated task size: extra small (a few hours at most) label Jun 2, 2025
With the removal of MBEDTLS_SHA3_C the test cases with disabled SHA3
dependency are never executed. Adding a temporary `all.sh` component
which disabling the `PSA_WANT_ALG_SHA3_*` macros to cover
these test cases.

Signed-off-by: Gabor Mezei <[email protected]>
Copy link
Contributor

@gilles-peskine-arm gilles-peskine-arm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please link to the issue for the removal of the temporary thing. Other than that LGTM

}

# Temporary component for SHA3 config option removal
# Must be removed when SHA3 removal is merged
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please link to the issue? “Temporary” things tend to last when we reach the end of a quarter and stuff gets forgotten for the new priority.

component_test_full_no_sha3 () {
msg "build: full config without SHA3"
scripts/config.py full
scripts/config.py unset-all PSA_WANT_ALG_SHA3_*
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To avoid breaking if someone has a weird file name:

Suggested change
scripts/config.py unset-all PSA_WANT_ALG_SHA3_*
scripts/config.py unset-all 'PSA_WANT_ALG_SHA3_*'

Copy link
Contributor

@gilles-peskine-arm gilles-peskine-arm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the update, LGTM

@github-project-automation github-project-automation bot moved this from In Development to Has Approval in Roadmap pull requests (new board) Jun 2, 2025
@bensze01 bensze01 enabled auto-merge June 2, 2025 15:34
@bensze01 bensze01 removed the request for review from mpg June 2, 2025 15:35
@bensze01 bensze01 added approved Design and code approved - may be waiting for CI or backports and removed needs-review Every commit must be reviewed by at least two team members, needs-reviewer This PR needs someone to pick it up for review labels Jun 2, 2025
@bensze01 bensze01 added this pull request to the merge queue Jun 2, 2025
Merged via the queue into Mbed-TLS:development with commit 591d854 Jun 2, 2025
4 checks passed
@github-project-automation github-project-automation bot moved this from Has Approval to Done in Roadmap pull requests (new board) Jun 2, 2025
@mpg
Copy link
Contributor

mpg commented Jun 3, 2025

Question: why add this new component on the mbedtls side rather than on the crypto side?

@gilles-peskine-arm
Copy link
Contributor

@mpg Because as I understand it, a crypto component is not enough because analyze_outcomes from mbedtls only gets the outcomes from mbedtls's all.sh.

@gabor-mezei-arm
Copy link
Contributor Author

Question: why add this new component on the mbedtls side rather than on the crypto side?

See Mbed-TLS/TF-PSA-Crypto#266 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Design and code approved - may be waiting for CI or backports component-test Test framework and CI scripts enhancement priority-high High priority - will be reviewed soon size-xs Estimated task size: extra small (a few hours at most)

Development

Successfully merging this pull request may close these issues.

4 participants