[edk2-devel] [PATCH 0/5] CryptoPkg: Add additional cipher algos and TLS API to meet WPA3

yi1 li posted 5 patches 1 year, 11 months ago
Failed in applying to current master (apply log)
CryptoPkg/Driver/Crypto.c                     |  97 +++-
CryptoPkg/Include/Library/TlsLib.h            |  93 +++-
.../Pcd/PcdCryptoServiceFamilyEnable.h        |   3 +
.../BaseCryptLibOnProtocolPpi/CryptLib.c      |  97 +++-
CryptoPkg/Library/TlsLib/InternalTlsLib.h     |   5 +
CryptoPkg/Library/TlsLib/TlsConfig.c          | 426 +++++++++++++++++-
CryptoPkg/Library/TlsLib/TlsProcess.c         |  32 ++
CryptoPkg/Library/TlsLibNull/TlsConfigNull.c  |  67 ++-
CryptoPkg/Library/TlsLibNull/TlsProcessNull.c |  23 +
CryptoPkg/Private/Protocol/Crypto.h           |  82 +++-
MdePkg/Include/IndustryStandard/Tls1.h        | 110 +++--
NetworkPkg/TlsDxe/TlsConfigProtocol.c         |   2 +-
12 files changed, 968 insertions(+), 69 deletions(-)
[edk2-devel] [PATCH 0/5] CryptoPkg: Add additional cipher algos and TLS API to meet WPA3
Posted by yi1 li 1 year, 11 months ago
To meet the needs of WPA3 Enterprise, additional cipher algorithms 
and TLS APIs need to be added.
Code branch: https://github.com/liyi77/edk2/tree/Add-TLS
Details as follows:
- TlsShutdown: Shutdown the TLS connection without releasing the resources, 
meaning a new connection can be started without calling TlsNew() and 
without setting certificates etc.
- TlsExportKey: Derive keying material from a TLS connection using the 
mechanism described in RFC 5705 and export the key material (needed 
by EAP methods such as EAP-TTLS and EAP-PEAP).
- TlsSetEcCurve: Set the EC curve to be used for TLS flows.
- TlsSetSignatureAlgoList: Set the signature algorithm list to used by 
the TLS object.
- Additional cipher algorithms: Which are needed for SUITE-B and SUITE-B-192.
- Add implementation for TlsSetHostPrivateKey().

Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>
Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Cc: Liming Gao <gaoliming@byosoft.com.cn>

Yi Li (3):
  MdePkg: Add Tls configuration related define
  CryptoPkg: Add TlsSetConfiguration API
  NetworkPkg/TlsDxe: Sync to new TlsSetHostPrivateKey() API

yi1 li (2):
  CryptoPkg: Add APIs TlsShutdown and TlsExportKey to TlsLib
  CryptoPkg: Add implementation for TlsSetHostPrivateKey()

 CryptoPkg/Driver/Crypto.c                     |  97 +++-
 CryptoPkg/Include/Library/TlsLib.h            |  93 +++-
 .../Pcd/PcdCryptoServiceFamilyEnable.h        |   3 +
 .../BaseCryptLibOnProtocolPpi/CryptLib.c      |  97 +++-
 CryptoPkg/Library/TlsLib/InternalTlsLib.h     |   5 +
 CryptoPkg/Library/TlsLib/TlsConfig.c          | 426 +++++++++++++++++-
 CryptoPkg/Library/TlsLib/TlsProcess.c         |  32 ++
 CryptoPkg/Library/TlsLibNull/TlsConfigNull.c  |  67 ++-
 CryptoPkg/Library/TlsLibNull/TlsProcessNull.c |  23 +
 CryptoPkg/Private/Protocol/Crypto.h           |  82 +++-
 MdePkg/Include/IndustryStandard/Tls1.h        | 110 +++--
 NetworkPkg/TlsDxe/TlsConfigProtocol.c         |   2 +-
 12 files changed, 968 insertions(+), 69 deletions(-)

-- 
2.31.1.windows.1



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#89924): https://edk2.groups.io/g/devel/message/89924
Mute This Topic: https://groups.io/mt/91262937/1787277
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org]
-=-=-=-=-=-=-=-=-=-=-=-
Re: [edk2-devel] [PATCH 0/5] CryptoPkg: Add additional cipher algos and TLS API to meet WPA3
Posted by Maciej Rabeda 1 year, 11 months ago
For NetworkPkg part: Reviewed-by: Maciej Rabeda 
<maciej.rabeda@linux.intel.com>

On 22 maj 2022 03:54, yi1 li wrote:
> To meet the needs of WPA3 Enterprise, additional cipher algorithms
> and TLS APIs need to be added.
> Code branch: https://github.com/liyi77/edk2/tree/Add-TLS
> Details as follows:
> - TlsShutdown: Shutdown the TLS connection without releasing the resources,
> meaning a new connection can be started without calling TlsNew() and
> without setting certificates etc.
> - TlsExportKey: Derive keying material from a TLS connection using the
> mechanism described in RFC 5705 and export the key material (needed
> by EAP methods such as EAP-TTLS and EAP-PEAP).
> - TlsSetEcCurve: Set the EC curve to be used for TLS flows.
> - TlsSetSignatureAlgoList: Set the signature algorithm list to used by
> the TLS object.
> - Additional cipher algorithms: Which are needed for SUITE-B and SUITE-B-192.
> - Add implementation for TlsSetHostPrivateKey().
>
> Cc: Jiewen Yao <jiewen.yao@intel.com>
> Cc: Jian J Wang <jian.j.wang@intel.com>
> Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com>
> Cc: Guomin Jiang <guomin.jiang@intel.com>
> Cc: Maciej Rabeda <maciej.rabeda@linux.intel.com>
> Cc: Jiaxin Wu <jiaxin.wu@intel.com>
> Cc: Siyuan Fu <siyuan.fu@intel.com>
> Cc: Michael D Kinney <michael.d.kinney@intel.com>
> Cc: Liming Gao <gaoliming@byosoft.com.cn>
>
> Yi Li (3):
>    MdePkg: Add Tls configuration related define
>    CryptoPkg: Add TlsSetConfiguration API
>    NetworkPkg/TlsDxe: Sync to new TlsSetHostPrivateKey() API
>
> yi1 li (2):
>    CryptoPkg: Add APIs TlsShutdown and TlsExportKey to TlsLib
>    CryptoPkg: Add implementation for TlsSetHostPrivateKey()
>
>   CryptoPkg/Driver/Crypto.c                     |  97 +++-
>   CryptoPkg/Include/Library/TlsLib.h            |  93 +++-
>   .../Pcd/PcdCryptoServiceFamilyEnable.h        |   3 +
>   .../BaseCryptLibOnProtocolPpi/CryptLib.c      |  97 +++-
>   CryptoPkg/Library/TlsLib/InternalTlsLib.h     |   5 +
>   CryptoPkg/Library/TlsLib/TlsConfig.c          | 426 +++++++++++++++++-
>   CryptoPkg/Library/TlsLib/TlsProcess.c         |  32 ++
>   CryptoPkg/Library/TlsLibNull/TlsConfigNull.c  |  67 ++-
>   CryptoPkg/Library/TlsLibNull/TlsProcessNull.c |  23 +
>   CryptoPkg/Private/Protocol/Crypto.h           |  82 +++-
>   MdePkg/Include/IndustryStandard/Tls1.h        | 110 +++--
>   NetworkPkg/TlsDxe/TlsConfigProtocol.c         |   2 +-
>   12 files changed, 968 insertions(+), 69 deletions(-)
>


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#89969): https://edk2.groups.io/g/devel/message/89969
Mute This Topic: https://groups.io/mt/91262937/1787277
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org]
-=-=-=-=-=-=-=-=-=-=-=-