Tianocore/edk2.git/CryptoPkg/Library, branch dependabot/github_actions/actions/github-script-9

CryptoPkg/Library/MbedTlsLib: Update mbedtls submodule to v3.6.6

2026-04-27T02:11:29+00:00

Update the mbedtls submodule from v3.6.5 to v3.6.6 to mitigate the CVEs CVE-2026-25833, CVE-2026-25834, CVE-2026-25835 CVE-2026-34874. Signed-off-by: Richard Lyu

CryptoPkg: Add digest-based RSA-PSS sign and verify APIs

2026-04-07T12:26:54+00:00

Add RsaPssSignDigest() and RsaPssVerifyDigest() to BaseCryptLib for signing/verifying precomputed digests. Provide OpenSSL/MbedTLS/Null implementations, expose via EDKII_CRYPTO_PROTOCOL (v24), and add PCD controls for independent service enabling. Include unit tests. Signed-off-by: Anbazhagan Baraneedharan

CryptoPkg: BaseCryptLib: Reject empty X.509 cert when retrieving public key

2026-03-10T06:33:40+00:00

Explicitly reject zero-length X.509 certificate buffers when retrieving a public key. For this invalid case, the input context pointer is set to NULL as a defensive measure. Signed-off-by: Kun Qin

CryptoPkg/Library/OpensslLib: Remove GCC5 build options

2026-02-26T15:30:52+00:00

Signed-off-by: Mike Beaton

CryptoPkg: add EC algorithm for SmmCryptLib

2026-02-24T13:49:35+00:00

This patch prepares the build infrastructure for the TCG TPM 2.0 implementation [0]. By default, it uses the OpenSSL EC_* APIs. When the TCG TPM 2.0 implementation [0] is used in StandaloneMm, EC algorithm support is required in SmmCryptLib. Link: https://github.com/TrustedComputingGroup/TPM [0] Signed-off-by: Yeoreum Yun

CryptoPkg: add/modify EC interfaces for TPM TCG library

2026-02-24T13:49:35+00:00

This is prepartion patch to build TCG TPM v2.0 Reference Library[0]. TCG TPM v2.0 implementation[0] uses below additional interfaces: - EC_GROUP_new_curve_GFp() - EC_GROUP_set_generator() - EC_POINTs_mul() and require EC_POINT_mul()'s n arguments (Scalar multiplier for the generator G) but EDKII's EcPointMul() interface always fix this value as NULL. For TCG TPM v2.0 implementation, add new interfaces. Link: https://github.com/TrustedComputingGroup/TPM [0] Signed-off-by: Yeoreum Yun

CryptoPkg: add some Bn interfaces to build TCG TPM library

2026-02-24T13:49:35+00:00

This is preparation patch for build TCG TPM v2.0 implementation[0]. To build TCG TPM v2.0 implementation[0], below Bn interfaces are required: - BN_CTX_start() -> BigNumContextStart() - BN_CTX_end() -> BigNumContextEnd() - BN_CTX_get() -> BigNumContextGet() - BN_mul() -> BigNumMul() - BN_Gcd() -> BigNumGcd() and add BigNumDiv2() to receive remain too. Link: https://github.com/TrustedComputingGroup/TPM[0] Signed-off-by: Yeoreum Yun

CryptoPkg: add CAMELLIA APIs for TCG TPM reference library

2026-02-24T13:49:35+00:00

This is preparation patch to build TCG TPM v2.0 implementation [0]. TCG TPM v2.0 uses below Camellia APIs: - Camellia_set_key() - Camellia_encrypt() - Camellia_decrypt() To support these CAMELLIA interfaces, add related wrapper in BaseCryptLib. Link: https://github.com/TrustedComputingGroup/TPM [0] Signed-off-by: Yeoreum Yun

CryptoPkg: add AES_encrypt/AES_decrpyt for TPM reference library

2026-02-24T13:49:35+00:00

This is preparation patch to build TCG TPM v2.0 implementation [0]. TCG TPM v2.0 uses AES_encrypt()/AES_decrpyt() in openssl library to implement its crypto operation. For this, add wrapper for AES_encrypt()/AES_decrpyt(). Link: https://github.com/TrustedComputingGroup/TPM[0] Signed-off-by: Yeoreum Yun

CryptoPkg: preparation to build TPM reference library

2026-02-24T13:49:35+00:00

To build TPM reference library[0] with CryptoPkg, belows are required: - define memcpy as a function instead of a macro because memcpy is used as a function pointer in TPM reference library - definitions of INT16_MAX/UINT16_MAX Link: https://github.com/TrustedComputingGroup/TPM [0] Signed-off-by: Yeoreum Yun