sync to upstream

.github/workflows/kyber.yml

@@ -0,0 +1,96 @@
+name: Kyber Tests
+
+on:
+ push:
+ branches: [ '*' ]
+ pull_request:
+ branches: [ '*' ]
+
+env:
+ LIBOQS_REF: 0.10.0
+ WOLFSSL_REF: v5.7.0-stable
+ OS_REF: ubuntu-latest
+
+jobs:
+ build_liboqs:
+ name: Build liboqs
+ runs-on: ubuntu-latest
+ timeout-minutes: 4
+ steps:
+ - name: Checking cache for liboqs
+ uses: actions/cache@v4
+ id: cache-liboqs
+ with:
+ path: build-dir/
+ key: wolfssh-kyber-liboqs-${{ env.LIBOQS_REF }}-${{ env.OS_REF }}
+ lookup-only: true
+
+ - name: Checkout liboqs
+ if: steps.cache-liboqs.outputs.cache-hit != 'true'
+ uses: actions/checkout@v4
+ with:
+ repository: open-quantum-safe/liboqs
+ ref: ${{ env.LIBOQS_REF }}
+ path: liboqs
+
+ - name: Build and install liboqs
+ if: steps.cache-liboqs.outputs.cache-hit != 'true'
+ working-directory: liboqs
+ run: |
+ mkdir build
+ cd build
+ cmake -DCMAKE_INSTALL_PREFIX=${{ github.workspace }}/build-dir -DOQS_MINIMAL_BUILD=KEM_kyber_512 -DOQS_USE_OPENSSL=0 ..
+ make
+ make install
+
+ build_wolfssl:
+ name: Build wolfssl
+ runs-on: ubuntu-latest
+ timeout-minutes: 4
+ steps:
+ - name: Checking cache for wolfssl
+ uses: actions/cache@v4
+ id: cache-wolfssl
+ with:
+ path: build-dir/
+ key: wolfssh-kyber-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
+ lookup-only: true
+
+ - name: Checkout, build, and install wolfssl
+ if: steps.cache-wolfssl.outputs.cache-hit != 'true'
+ uses: wolfSSL/actions-build-autotools-project@v1
+ with:
+ repository: wolfssl/wolfssl
+ ref: ${{ env.WOLFSSL_REF }}
+ path: wolfssl
+ configure: --enable-wolfssh --enable-cryptonly --disable-examples --disable-crypttests
+ check: false
+ install: true
+
+ build_wolfssh:
+ name: Build wolfssh
+ runs-on: ubuntu-latest
+ timeout-minutes: 4
+ needs: [build_wolfssl, build_liboqs]
+ steps:
+ - name: Checking cache for liboqs
+ uses: actions/cache@v4
+ with:
+ path: build-dir/
+ key: wolfssh-kyber-liboqs-${{ env.LIBOQS_REF }}-${{ env.OS_REF }}
+ fail-on-cache-miss: true
+
+ - name: Checking cache for wolfssl
+ uses: actions/cache@v4
+ with:
+ path: build-dir/
+ key: wolfssh-kyber-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
+ fail-on-cache-miss: true
+
+ - name: Checkout, build, and test wolfssh
+ uses: wolfSSL/actions-build-autotools-project@v1
+ with:
+ repository: wolfssl/wolfssh
+ path: wolfssh
+ configure: --with-liboqs=${{ github.workspace }}/build-dir --with-wolfssl=${{ github.workspace }}/build-dir
+ check: true

.github/workflows/os-check.yml

@@ -0,0 +1,75 @@
+name: OS Check Test
+
+on:
+ push:
+ branches: [ '*' ]
+ pull_request:
+ branches: [ '*' ]
+
+concurrency:
+ group: ${{ github.workflow }}-${{ github.ref }}
+ cancel-in-progress: true
+
+env:
+ WOLFSSL_REF: v5.7.0-stable
+
+jobs:
+ build_wolfssl:
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ ubuntu-latest, macos-latest ]
+ name: Build wolfssl
+ runs-on: ${{ matrix.os }}
+ timeout-minutes: 4
+ steps:
+ - name: Checking cache for wolfssl
+ uses: actions/cache@v4
+ id: cache-wolfssl
+ with:
+ path: build-dir/
+ key: wolfssh-os-check-wolfssl-${{ env.WOLFSSL_REF }}-${{ matrix.os }}
+ lookup-only: true
+
+ - name: Checkout, build, and install wolfssl
+ if: steps.cache-wolfssl.outputs.cache-hit != 'true'
+ uses: wolfSSL/actions-build-autotools-project@v1
+ with:
+ repository: wolfssl/wolfssl
+ ref: ${{ env.WOLFSSL_REF }}
+ path: wolfssl
+ configure: --enable-all
+ check: false
+ install: true
+
+ build_wolfssh:
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ ubuntu-latest, macos-latest ]
+ config: [
+ '',
+ '--enable-all',
+ '--enable-sftp',
+ '--enable-scp',
+ '--enable-shell',
+ ]
+ name: Build wolfssh
+ runs-on: ${{ matrix.os }}
+ timeout-minutes: 4
+ needs: build_wolfssl
+ steps:
+ - name: Checking cache for wolfssl
+ uses: actions/cache@v4
+ with:
+ path: build-dir/
+ key: wolfssh-os-check-wolfssl-${{ env.WOLFSSL_REF }}-${{ matrix.os }}
+ fail-on-cache-miss: true
+
+ - name: Checkout, build, and test wolfssh
+ uses: wolfSSL/actions-build-autotools-project@v1
+ with:
+ repository: wolfssl/wolfssh
+ path: wolfssh
+ configure: ${{ matrix.config }} LDFLAGS="-L${{ github.workspace }}/build-dir/lib" CPPFLAGS="-I${{ github.workspace }}/build-dir/include"
+ check: true

.github/workflows/singlethread-check.yml

@@ -0,0 +1,75 @@
+name: Single-thread Check Test
+
+on:
+ push:
+ branches: [ '*' ]
+ pull_request:
+ branches: [ '*' ]
+
+concurrency:
+ group: ${{ github.workflow }}-${{ github.ref }}
+ cancel-in-progress: true
+
+env:
+ WOLFSSL_REF: v5.7.0-stable
+
+jobs:
+ build_wolfssl:
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ ubuntu-latest, macos-latest ]
+ name: Build wolfssl
+ runs-on: ${{ matrix.os }}
+ timeout-minutes: 4
+ steps:
+ - name: Checking cache for wolfssl
+ uses: actions/cache@v4
+ id: cache-wolfssl
+ with:
+ path: build-dir/
+ key: wolfssh-singlethread-check-wolfssl-${{ env.WOLFSSL_REF }}-${{ matrix.os }}
+ lookup-only: true
+
+ - name: Checkout, build, and install wolfssl
+ if: steps.cache-wolfssl.outputs.cache-hit != 'true'
+ uses: wolfSSL/actions-build-autotools-project@v1
+ with:
+ repository: wolfssl/wolfssl
+ ref: ${{ env.WOLFSSL_REF }}
+ path: wolfssl
+ configure: --enable-wolfssh --enable-singlethreaded --enable-keygen
+ check: false
+ install: true
+
+ build_wolfssh:
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ ubuntu-latest, macos-latest ]
+ config: [
+ '',
+ '--enable-all',
+ '--enable-sftp',
+ '--enable-scp',
+ '--enable-shell',
+ ]
+ name: Build wolfssh
+ runs-on: ${{ matrix.os }}
+ timeout-minutes: 4
+ needs: build_wolfssl
+ steps:
+ - name: Checking cache for wolfssl
+ uses: actions/cache@v4
+ with:
+ path: build-dir/
+ key: wolfssh-singlethread-check-wolfssl-${{ env.WOLFSSL_REF }}-${{ matrix.os }}
+ fail-on-cache-miss: true
+
+ - name: Checkout, build, and test wolfssh
+ uses: wolfSSL/actions-build-autotools-project@v1
+ with:
+ repository: wolfssl/wolfssh
+ path: wolfssh
+ configure: ${{ matrix.config }} LDFLAGS="-L${{ github.workspace }}/build-dir/lib" CPPFLAGS="-I${{ github.workspace }}/build-dir/include"
+ check: true

.github/workflows/zephyr.yml

@@ -16,7 +16,7 @@ jobs:
  zephyr-sdk: 0.16.1
  runs-on: ubuntu-latest
  # This should be a safe limit for the tests to run.
- timeout-minutes: 15
+ timeout-minutes: 20
  steps:
  - name: Install dependencies
  run: |
@@ -77,6 +77,8 @@ jobs:
  run: |
  ./zephyr/scripts/twister --testsuite-root modules/lib/wolfssh --test zephyr/samples/tests/sample.lib.wolfssh_tests -vvv
  rm -rf zephyr/twister-out
+ ./zephyr/scripts/twister --testsuite-root modules/lib/wolfssh --test zephyr/samples/tests/sample.lib.wolfssh_nofs_tests -vvv
+ rm -rf zephyr/twister-out
 
  - name: Zip failure logs
  if: ${{ failure() && steps.wolfssh-test.outcome == 'failure' }}