Skip to content

uadk_provider: adapt uadk_provider with tls 1.3#255

Open
patch-king wants to merge 16 commits intoLinaro:masterfrom
patch-king:master
Open

uadk_provider: adapt uadk_provider with tls 1.3#255
patch-king wants to merge 16 commits intoLinaro:masterfrom
patch-king:master

Conversation

@patch-king
Copy link

No description provided.

Weili Qian and others added 16 commits February 26, 2026 16:53
…ovider

Set the default provider when initializing the uadk provider
to avoid data races that may occur when setting the default
provider during business operations.

Signed-off-by: Weili Qian <qianweili@huawei.com>
…hm resources

To avoid accessing resources after algorithm resources have been
released, first stop the poll thread and release asynchronous resources,
and finally destroy the algorithm resources.

Signed-off-by: Weili Qian <qianweili@huawei.com>
…ithm resources

To avoid accessing resources after algorithm resources have been
released, first stop the poll thread and release asynchronous resources,
and finally destroy the algorithm resources.

Signed-off-by: Weili Qian <qianweili@huawei.com>
To improve performance, the lock scope is narrowed,
and the mb() operation is added to ensure the visibility
and ordering of shared data, thereby avoiding data races.

Signed-off-by: Zhushuai Yin <yinzhushuai@huawei.com>
To improve performance, the lock scope is narrowed,
and the mb() operation is added to ensure the visibility
and ordering of shared data, thereby avoiding data races.

Signed-off-by: Zhushuai Yin <yinzhushuai@huawei.com>
The uadk_prov_sm2.c file is too large, so separate the key generation
code from it into a separate file. No functional changes.

Signed-off-by: Weili Qian <qianweili@huawei.com>
If the user has not set to retrieve the public and private keys,
return ec key directly instead of a null pointer to avoid failure
when using ec key.

Signed-off-by: Weili Qian <qianweili@huawei.com>
The implementation in uadk_prov_sm2_check_priv_key() is
meaningless, remove it.

Signed-off-by: Weili Qian <qianweili@huawei.com>
The implementation in eckey_create_key() is meaningless,
remove it.

Signed-off-by: Weili Qian <qianweili@huawei.com>
The `async_poll_task_free()` function has been renamed,
but its declaration was not removed. The redundant
declaration needs to be deleted.

Signed-off-by: Zhushuai Yin <yinzhushuai@huawei.com>
Add support for OSSL_FUNC_PROVIDER_GET_CAPABILITIES to enable
TLS 1.3 compatibility.

Signed-off-by: lizhi <lizhi206@huawei.com>
Add support for RSA key management with pss padding mode.

Test with:
openssl3 genpkey  -provider uadk_provider -algorithm RSA-PSS

Signed-off-by: lizhi <lizhi206@huawei.com>
…figuration

Adapt rsa pss key management with algorithm enable configuration.
Since RSA and RSA-PSS share a similar implementation, the RSA enable flag
also controls the enablement or disablement of the RSA-PSS algorithm.

Signed-off-by: lizhi <lizhi206@huawei.com>
Memory alloced in ecx derive function should be released
before returning keysize to OpenSSL.

Signed-off-by: lizhi <lizhi206@huawei.com>
1. uadk_digest.c:953:1: warning: label 'clear' defined
   but not used [-Wunused-label].
2. uadk_cipher_adapter.c:142:5: warning: no previous
   prototype for 'uadk_e_ciphers' [-Wmissing-prototypes].
3. uadk_aead.c:335:6: warning: unused variable
   'ret' [-Wunused-variable].
4.uadk_ec.c:499:31: warning: passing argument 2 of 'ecc_alloc_sess'
  discards 'const' qualifier from pointer target
  type [-Wdiscarded-qualifiers].

Signed-off-by: Weili Qian <qianweili@huawei.com>
Split uadk_prov_sm2.c into 2 files based on the
signing/verification and encryption/decryption
functionalities to avoid the file being too large.

Signed-off-by: Weili Qian <qianweili@huawei.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant