[Skiboot] [PATCH 0/4] Improve mbedtls infrastructure

Mauro S. M. Rodrigues maurosr at linux.vnet.ibm.com
Fri Apr 3 03:15:28 AEDT 2020


For further Trusted and Secure boot work, a large mbedtls foundation is
required. Given that need, the troublesome work to collect the right bits of
mbedtls's code and the security aspects of it, like backporting security fixes,
it was decided tho bring its full implementation into skiboot repository.

This series introduces mbedtls as a subtree which diminishes the maintenance
burden at skiboot side, since we can now rely on an stable implementation,
making easier to update the code as needed.

This subtree corresponds to https://github.com/ARMmbed/mbedtls.git tag:
mbedtls-2.16.2

Eric Richter (2):
  crypto/mbedtls: enable/disable unnecessary features to shrink size
  libstb: remove old mbedtls files

Mauro S. M. Rodrigues (2):
  Squashed 'libstb/crypto/mbedtls/' content from commit 7a03e1cbf5
  crypto: add mbedtls build integration via git subtree

 libstb/Makefile.inc            |   8 +-
 libstb/crypto/Makefile.inc     |  47 ++++
 libstb/crypto/mbedtls-config.h |  99 +++++++
 libstb/mbedtls/Makefile.inc    |  11 -
 libstb/mbedtls/sha512.c        | 480 ---------------------------------
 libstb/mbedtls/sha512.h        | 141 ----------
 6 files changed, 152 insertions(+), 634 deletions(-)
 create mode 100644 libstb/crypto/Makefile.inc
 create mode 100644 libstb/crypto/mbedtls-config.h
 delete mode 100644 libstb/mbedtls/Makefile.inc
 delete mode 100644 libstb/mbedtls/sha512.c
 delete mode 100644 libstb/mbedtls/sha512.h

--
2.25.1



More information about the Skiboot mailing list