Tianocore/edk2.git/CryptoPkg/Library/BaseCryptLib, branch masterEDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=master2026-08-28T12:37:18+00:00CryptoPkg: Add Pkcs7Decrypt API2026-08-28T12:37:18+00:00Doug Cookdcook@microsoft.com2026-07-27T23:15:09+00:00urn:sha1:5337420d7c59b446a4ec9f1348bc75e47de8299d
Add support for a Pkcs7Decrypt API, mirroring the Pkcs7Encrypt API.
I expect that the primary use of Pkcs7Decrypt would be for testing the
Pkcs7Encrypt API, but maybe somebody will need it for real work someday.
Signed-off-by: Doug Cook <dcook@microsoft.com>
Committed-by: Doug Flick <dougflick@microsoft.com>
CryptoPkg: Add Pkcs7Encrypt OpenSSL and null implementations2026-08-28T12:37:18+00:00Doug Flickdougflick@microsoft.com2026-04-29T18:50:26+00:00urn:sha1:8b9b3808e1720f6be3aa2b6410bc817e9cfc62df
Add CryptPkcs7Encrypt.c with OpenSSL-based Pkcs7Encrypt()
implementation using PKCS7_encrypt API. Add null stub
implementations for library instances that do not support
this function (PEI, Runtime, SEC, MbedTLS, Null). Update all
BaseCryptLib INF files to include the new source files.
Signed-off-by: Doug Flick <dougflick@microsoft.com>
CryptoPkg/BaseCryptLib: add AARCH64 host unit test Rand source2026-07-31T15:16:47+00:00Jeff Brasenjbrasen@nvidia.com2026-07-02T03:04:35+00:00urn:sha1:158c70987bb3c919a3b4e91236e9dd9bd37b8f4b
The host-based BaseCryptLib instance (UnitTestHostBaseCryptLib.inf) built
Rand/CryptRandTsc.c only for IA32/X64. Add Rand/CryptRand.c for AARCH64 so
the openssl-backed RandomSeed() is available when linking AARCH64 host
tests, and advertise AARCH64 in VALID_ARCHITECTURES.
Signed-off-by: Jeff Brasen <jbrasen@nvidia.com>
CryptoPkg/BaseCryptLib: Add SLH-DSA Support2026-07-21T09:17:50+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-14T14:34:04+00:00urn:sha1:2b842a2081613684117fb1f924eb27a05a112e5d
Created SLH-DSA API functions to configure public and private keys for
SLH-DSA algorithm. This will allow users to sign and verify with
SLH-DSA. Unit tests were added to confirm operation of the API.
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: ML-DSA updates2026-07-20T11:34:40+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-17T18:00:08+00:00urn:sha1:264f812b70c8941e449740dbc1ae528620089f78
Include validation check for Context and ContextSize in signature
function.
Updated ReadMe to show ML-DSA support
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: EdDsa updates2026-07-20T03:23:22+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-17T17:39:18+00:00urn:sha1:5309cdb92c5552e64fce7648ec15d0ab497b1161
Include validation checks for Context and ContextSize in
sign and verify functions.
Returned FALSE for EdDsaGeneratePubKey.
Updated ReadMe to show EdDsa support
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: Add ML-DSA Support2026-07-14T03:26:52+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-01T22:20:56+00:00urn:sha1:0f07c187d016bd63098a5bf3e2b12c51ca9d4bb3
Created ML-DSA API functions to configure public and private keys for
ML-DSA algorithm. This will allow users to sign and verify with ML-DSA.
Unit tests were add to confirm operation of the API.
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: Add ED448 verification and signature fcns2026-07-01T01:26:24+00:00Michael G.A. Hollandmichael.holland@intel.com2026-06-22T15:29:36+00:00urn:sha1:7bd23c60e83d1746a3574b5a855c4689b8d25e9d
Implemented signature and verification functions for ED448;
Updated documentation and unit tests to cover new verification functions
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg: Enable SHA256 hash in SecCryptLib2026-06-25T16:53:36+00:00Sami Mujawarsami.mujawar@arm.com2025-09-18T15:44:06+00:00urn:sha1:5f389e499c8dcca66b1c5680cb874c7fc50c5859
Enable CryptSha256 hash in SecCryptLib as this
is required by Arm CCA.
The hash algorithm used by the Arm CCA Realm
Extensible Measurement (REM) registers is
either SHA256 or SHA512.
To enable measurements in the early boot phase
enable SHA256 hash algorithm in SecCryptLib.
Signed-off-by: Sami Mujawar <sami.mujawar@arm.com>
CryptoPkg: Added lite version openssl library2026-06-15T08:54:47+00:00Lee LonghaoXlonghaox.lee@intel.com2026-04-15T06:31:23+00:00urn:sha1:eaa1e19c7a039b3d178ac960c33dc057c4d75243
Lite version OpensslLib
base on OpensslLibFull but no-camellia, no -ecx and no-dh.
It save the size about ~192KB.
REF:
Signed-off-by: Lee LonghaoX <longhaox.lee@intel.com>