Tianocore/edk2.git/CryptoPkg/Test, branch masterEDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=master2026-09-06T10:12:38+00:00CryptoPkg: Test: Add AArch64 support for host based unit tests2026-09-06T10:12:38+00:00Kun Qinkuqin@microsoft.com2026-07-27T19:32:07+00:00urn:sha1:261a8d215e3374cbd3343bbf6dcd1a0b7db88dd5
This change updates the host based units for AArch64 systems.
The RngLib is updated to use timer based , rather hardware based library
to allow usage on various host systems.
Signed-off-by: Kun Qin <kun.qin@microsoft.com>
CryptoPkg: MockBaseCryptLib: Use #pragma once2026-09-06T10:12:38+00:00Kun Qinkuqin@microsoft.com2026-07-30T04:40:39+00:00urn:sha1:727910611ebff74da143ed36c58454cb698b07fa
This change updates the header file guard to #pragma once to adhere to
the coding convention of this repository.
Signed-off-by: Kun Qin <kun.qin@microsoft.com>
CryptoPkg: Add Pkcs7Decrypt API2026-08-28T12:37:18+00:00Doug Cookdcook@microsoft.com2026-07-27T23:15:09+00:00urn:sha1:5337420d7c59b446a4ec9f1348bc75e47de8299d
Add support for a Pkcs7Decrypt API, mirroring the Pkcs7Encrypt API.
I expect that the primary use of Pkcs7Decrypt would be for testing the
Pkcs7Encrypt API, but maybe somebody will need it for real work someday.
Signed-off-by: Doug Cook <dcook@microsoft.com>
Committed-by: Doug Flick <dougflick@microsoft.com>
CryptoPkg: Add Pkcs7Encrypt smoke tests2026-08-28T12:37:18+00:00Doug Flickdougflick@microsoft.com2026-06-03T22:08:07+00:00urn:sha1:07a37d45eef9972b7fc3deb761d5c24527a17387
These don't actually decrypt anything, so calling them "unit tests"
was a stretch. They're smoke tests: build an envelopedData ContentInfo
for a recipient cert, then walk the DER and check the shape looks
right (id-envelopedData, CMSVersion, the right number of
RecipientInfo entries, the expected content-encryption OID).
Covered:
* AES-128/192/256-CBC happy paths.
* Two recipients, just to confirm the SET grows.
* The parameter-validation contract from BaseCryptLib.h
(NULL stack/InData/output pointers, bogus CipherNid, bogus Flags).
The DER walker is hand-rolled in the test file so we don't have to
pull OpenSSL or mbedtls headers into a unit test that has to compile
against both. It catches obvious shape regressions but won't notice
if the CEK, IV, or PKCS#7 padding are wrong - a real round-trip needs
a Pkcs7Decrypt API we don't have yet.
Signed-off-by: Doug Flick <dougflick@microsoft.com>
CryptoPkg/BaseCryptLib: Add SLH-DSA Support2026-07-21T09:17:50+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-14T14:34:04+00:00urn:sha1:2b842a2081613684117fb1f924eb27a05a112e5d
Created SLH-DSA API functions to configure public and private keys for
SLH-DSA algorithm. This will allow users to sign and verify with
SLH-DSA. Unit tests were added to confirm operation of the API.
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: EdDsa updates2026-07-20T03:23:22+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-17T17:39:18+00:00urn:sha1:5309cdb92c5552e64fce7648ec15d0ab497b1161
Include validation checks for Context and ContextSize in
sign and verify functions.
Returned FALSE for EdDsaGeneratePubKey.
Updated ReadMe to show EdDsa support
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: Add ML-DSA Support2026-07-14T03:26:52+00:00Michael G.A. Hollandmichael.holland@intel.com2026-07-01T22:20:56+00:00urn:sha1:0f07c187d016bd63098a5bf3e2b12c51ca9d4bb3
Created ML-DSA API functions to configure public and private keys for
ML-DSA algorithm. This will allow users to sign and verify with ML-DSA.
Unit tests were add to confirm operation of the API.
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg/BaseCryptLib: Add ED448 verification and signature fcns2026-07-01T01:26:24+00:00Michael G.A. Hollandmichael.holland@intel.com2026-06-22T15:29:36+00:00urn:sha1:7bd23c60e83d1746a3574b5a855c4689b8d25e9d
Implemented signature and verification functions for ED448;
Updated documentation and unit tests to cover new verification functions
Signed-off-by: Michael G.A. Holland <michael.holland@intel.com>
CryptoPkg: Add digest-based RSA-PSS sign and verify APIs2026-04-07T12:26:54+00:00Baraneedharan Anbazhagananbazhagan@hp.com2026-03-17T12:19:12+00:00urn:sha1:b3fdc0994db62b72a8b56ea25ffd024ab5e4e017
Add RsaPssSignDigest() and RsaPssVerifyDigest() to BaseCryptLib for
signing/verifying precomputed digests. Provide OpenSSL/MbedTLS/Null
implementations, expose via EDKII_CRYPTO_PROTOCOL (v24), and add PCD
controls for independent service enabling. Include unit tests.
Signed-off-by: Anbazhagan Baraneedharan <anbazhagan@hp.com>
CryptoPkg: Added MockBaseCryptLib for google test2026-04-02T03:27:19+00:00PaddyDengpaddydeng@ami.com2026-02-23T08:28:26+00:00urn:sha1:e9f03fca2859a821af277356eeb757a3efd1f1f7
Added BaseCryptLib's mock library for google test so one can make google test
drives consuming it
Signed-off-by: Paddy Deng <PaddyDeng@ami.com>