Tianocore/edk2.git - EDK II (mirror)

Age	Commit message (Collapse)	Author	Files	Lines
2026-08-28	CryptoPkg: Add Pkcs7Decrypt API	Doug Cook	1	-0/+1
	Add support for a Pkcs7Decrypt API, mirroring the Pkcs7Encrypt API. I expect that the primary use of Pkcs7Decrypt would be for testing the Pkcs7Encrypt API, but maybe somebody will need it for real work someday. Signed-off-by: Doug Cook <dcook@microsoft.com> Committed-by: Doug Flick <dougflick@microsoft.com>
2026-08-28	CryptoPkg: Add Pkcs7Encrypt smoke tests	Doug Flick	1	-0/+1
	These don't actually decrypt anything, so calling them "unit tests" was a stretch. They're smoke tests: build an envelopedData ContentInfo for a recipient cert, then walk the DER and check the shape looks right (id-envelopedData, CMSVersion, the right number of RecipientInfo entries, the expected content-encryption OID). Covered: * AES-128/192/256-CBC happy paths. * Two recipients, just to confirm the SET grows. * The parameter-validation contract from BaseCryptLib.h (NULL stack/InData/output pointers, bogus CipherNid, bogus Flags). The DER walker is hand-rolled in the test file so we don't have to pull OpenSSL or mbedtls headers into a unit test that has to compile against both. It catches obvious shape regressions but won't notice if the CEK, IV, or PKCS#7 padding are wrong - a real round-trip needs a Pkcs7Decrypt API we don't have yet. Signed-off-by: Doug Flick <dougflick@microsoft.com>
2025-11-24	CryptoPkg/BaseCryptLibUnitTest: Separate MbedTls UnitTest Library.	Longhaox Lee	1	-0/+54
	Separate Unit test functions for MbedTls. BaseCryptLibMbedTls does not support all Crypto services So deprecate below function for MbedTls Unit test: TestVerifyEKUsWith3CertsInSignature() TestVerifyEKUsWith2CertsInSignature() TestNoEKUsInSignature() TestVerifyRsaCertPkcs1SignVerify TestVerifyPkcs7SignVerifyNonSelfIssued() TestVerifyDhGenerateKey() Pkcs1v2Decrypt Pkcs1v2EncryptDecrypt RsaOaepEncrypt (Interface) RsaOaepEncrypt (NoSeed) RsaOaepEncrypt (Seeded) RsaOaepDecrypt RsaOaepEncryptDecrypt RsaOaepEncryptPkcs1v2Decrypt Pkcs1v2EncryptRsaOaepDecrypt RsaOaepEncrypt (MdDefaultMgf1Default) RsaOaepDecrypt (MdDefaultMgf1Default) RsaOaepEncryptDecrypt (MdDefaultMgf1Default) RsaOaepEncrypt (MdSha1Bgf1Sha1 RsaOaepDecrypt (MdSha1Bgf1Sha1) RsaOaepEncryptDecrypt (MdSha1Bgf1Sha1) RsaOaepEncrypt (MdSha256Bgf1Sha256) RsaOaepDecrypt (MdSha256Bgf1Sha256) RsaOaepEncryptDecrypt (MdSha256Bgf1Sha256) TestVerifyBn() TestVerifyEcKey() TestPkcs7Attached() TestPkcs7Detached() TestVerifyPkcs7ContentData() REF: https://github.com/tianocore/edk2/issues/11605 Signed-off-by: Longhaox Lee <longhaox.lee@intel.com>