Now that p256-m is officially a production feature and not just an example,
give it a more suitable name.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

Test TF-M config with p256-m driver

Work around a race condition in parallel builds

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

TLS: Clean up ECDSA dependencies

Declare p256-m as ready for production

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

CORRUPTION_DETECTED should be reserved for cases that are impossible,
short of physical corruption during execution or a major bug in the
code. We shouldn't use this for the kind of mistakes that can happen
during configuration or integration, such as calling a driver on a key
type that it doesn't support.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Generated files off in release

Reduce code size in mbedtls_asn1_write_len

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Enable MBEDTLS_PSA_CRYPTO_CONFIG in the full config

Remove unneeded setting of ret from ssl programs

Fix issue #8215 : add missing requires documentation in mbedtls_config.h

Not sure how it happened, but this block was not just duplicated, but
triplicated. Keep only the first copy: the one before the code that uses
the macro being defined.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Ranging from typos to outdated comment contradicting the code.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

Add missing requirements MBEDTLS_SSL_PROTO_TLS1_2 to option MBEDTLS_SSL_RENEGOTIATION documentation.

Signed-off-by: jnmeurisse <88129653+jnmeurisse@users.noreply.github.com>

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>

Remove coverity warnings on unused values.

Signed-off-by: Paul Elliott <paul.elliott@arm.com>

Fixes log level for got supported group message

MBEDTLS_SSL_MAX_EARLY_DATA_SIZE: default value should be commented out in config

Signed-off-by: mcagriaksoy <mcagriaksoy@yandex.com>

Fix some clang-18 warnings

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>

Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>

Numeric options should be commented out with their default values in the config
file, and a separate header file should set the default value if necessary.
This was done for most other options in #8161; do it here for
MBEDTLS_SSL_MAX_EARLY_DATA_SIZE.

Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>

Test with ECC and FFDH accelerated and no bignum

Signed-off-by: mcagriaksoy <mcagriaksoy@yandex.com>

Fix llvm error: variable 'default_iv_length' and other may be used uninitialized

Signed-off-by: Paul Elliott <paul.elliott@arm.com>

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

Add some guidance as to whether and how to enable it.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>