Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport 2.28: Bug Fix: mbedtls_ecdsa_verify_restartable fails with ECDSA_SIGN_ALT #8279

Merged

Conversation

gilles-peskine-arm
Copy link
Contributor

@gilles-peskine-arm gilles-peskine-arm commented Sep 29, 2023

Straightforward backport of #7499

PR checklist

Please tick as appropriate and edit the reasons (e.g.: "backport: not needed because this is a new feature")

Testing manually:

./config.py set MBEDTLS_ECDSA_SIGN_ALT
make -C programs pkey/ecdsa

Expected: a link error about missing mbedtls_ecdsa_sign (when you enable MBEDTLS_ECDSA_SIGN_ALT, you have to provide that function).
Actual before this fix: also missing mbedtls_ecdsa_can_do

When ECDSA_SIGN_ALT but not ECDSA_VERIFY_ALT, mbedtls_ecdsa_can_do was not being defined causing mbedtls_ecdsa_verify_restartable to always fail

Signed-off-by: JonathanWitthoeft <[email protected]>
Signed-off-by: JonathanWitthoeft <[email protected]>
@gilles-peskine-arm gilles-peskine-arm added needs-review Every commit must be reviewed by at least two team members, needs-reviewer This PR needs someone to pick it up for review priority-very-high Highest priority - prioritise this over other review work labels Sep 29, 2023
@gilles-peskine-arm gilles-peskine-arm added the size-xs Estimated task size: extra small (a few hours at most) label Sep 29, 2023
@gabor-mezei-arm gabor-mezei-arm self-requested a review September 29, 2023 11:40
Copy link
Contributor

@gabor-mezei-arm gabor-mezei-arm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@tom-cosgrove-arm tom-cosgrove-arm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - faithful backport, and makes mbedtls_ecdsa_can_do() visible even when MBEDTLS_ECDSA_SIGN_ALT defined

@tom-cosgrove-arm tom-cosgrove-arm added approved Design and code approved - may be waiting for CI or backports and removed needs-review Every commit must be reviewed by at least two team members, needs-reviewer This PR needs someone to pick it up for review labels Sep 29, 2023
@daverodgman daverodgman added this pull request to the merge queue Sep 29, 2023
Merged via the queue into Mbed-TLS:mbedtls-2.28 with commit 8c28032 Sep 29, 2023
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Design and code approved - may be waiting for CI or backports priority-very-high Highest priority - prioritise this over other review work size-xs Estimated task size: extra small (a few hours at most)
Projects
Development

Successfully merging this pull request may close these issues.

5 participants