Tianocore/edk2.git/CryptoPkg/Library/BaseCryptLibMbedTls, branch master

CryptoPkg: Add Pkcs7Decrypt API

2026-08-28T12:37:18+00:00

Add support for a Pkcs7Decrypt API, mirroring the Pkcs7Encrypt API. I expect that the primary use of Pkcs7Decrypt would be for testing the Pkcs7Encrypt API, but maybe somebody will need it for real work someday. Signed-off-by: Doug Cook Committed-by: Doug Flick

CryptoPkg: Add Pkcs7Encrypt for BaseCryptLibMbedTls

2026-08-28T12:37:18+00:00

Add CryptPkcs7Encrypt.c with an MbedTLS-based Pkcs7Encrypt() implementation. Update BaseCryptLibMbedTls INF files (BaseCryptLib.inf, SmmCryptLib.inf, UnitTestHostBaseCryptLib.inf) to include the new source file, and update CryptoPkg/Readme.md accordingly. Signed-off-by: Doug Flick

CryptoPkg: Add Pkcs7Encrypt OpenSSL and null implementations

2026-08-28T12:37:18+00:00

Add CryptPkcs7Encrypt.c with OpenSSL-based Pkcs7Encrypt() implementation using PKCS7_encrypt API. Add null stub implementations for library instances that do not support this function (PEI, Runtime, SEC, MbedTLS, Null). Update all BaseCryptLib INF files to include the new source files. Signed-off-by: Doug Flick

CryptoPkg: Merge CryptoPkgMbedTls into CryptoPkg DSC file

2026-08-28T07:30:11+00:00

Merge CryptoPkgMbedTls into CryptoPkg DSC. Null instances for SlhDsa, MlDsa, EdDsa since mbebtls not support. Fixing build error for mbedtls BaseCryptLib. Signed-off-by: Longhaox Lee

CryptoPkg/BaseCryptLib: Add ML-DSA Support

2026-07-14T03:26:52+00:00

Created ML-DSA API functions to configure public and private keys for ML-DSA algorithm. This will allow users to sign and verify with ML-DSA. Unit tests were add to confirm operation of the API. Signed-off-by: Michael G.A. Holland

CryptoPkg/BaseCryptLib: Add ED448 verification and signature fcns

2026-07-01T01:26:24+00:00

Implemented signature and verification functions for ED448; Updated documentation and unit tests to cover new verification functions Signed-off-by: Michael G.A. Holland

CryptoPkg: Add digest-based RSA-PSS sign and verify APIs

2026-04-07T12:26:54+00:00

Add RsaPssSignDigest() and RsaPssVerifyDigest() to BaseCryptLib for signing/verifying precomputed digests. Provide OpenSSL/MbedTLS/Null implementations, expose via EDKII_CRYPTO_PROTOCOL (v24), and add PCD controls for independent service enabling. Include unit tests. Signed-off-by: Anbazhagan Baraneedharan

CryptoPkg: add/modify EC interfaces for TPM TCG library

2026-02-24T13:49:35+00:00

This is prepartion patch to build TCG TPM v2.0 Reference Library[0]. TCG TPM v2.0 implementation[0] uses below additional interfaces: - EC_GROUP_new_curve_GFp() - EC_GROUP_set_generator() - EC_POINTs_mul() and require EC_POINT_mul()'s n arguments (Scalar multiplier for the generator G) but EDKII's EcPointMul() interface always fix this value as NULL. For TCG TPM v2.0 implementation, add new interfaces. Link: https://github.com/TrustedComputingGroup/TPM [0] Signed-off-by: Yeoreum Yun

CryptoPkg: add some Bn interfaces to build TCG TPM library

2026-02-24T13:49:35+00:00

This is preparation patch for build TCG TPM v2.0 implementation[0]. To build TCG TPM v2.0 implementation[0], below Bn interfaces are required: - BN_CTX_start() -> BigNumContextStart() - BN_CTX_end() -> BigNumContextEnd() - BN_CTX_get() -> BigNumContextGet() - BN_mul() -> BigNumMul() - BN_Gcd() -> BigNumGcd() and add BigNumDiv2() to receive remain too. Link: https://github.com/TrustedComputingGroup/TPM[0] Signed-off-by: Yeoreum Yun

CryptoPkg: add CAMELLIA APIs for TCG TPM reference library

2026-02-24T13:49:35+00:00

This is preparation patch to build TCG TPM v2.0 implementation [0]. TCG TPM v2.0 uses below Camellia APIs: - Camellia_set_key() - Camellia_encrypt() - Camellia_decrypt() To support these CAMELLIA interfaces, add related wrapper in BaseCryptLib. Link: https://github.com/TrustedComputingGroup/TPM [0] Signed-off-by: Yeoreum Yun