| /** |
| * \file mbedtls/config_psa.h |
| * \brief PSA crypto configuration options (set of defines) |
| * |
| * This set of compile-time options takes settings defined in |
| * include/mbedtls/mbedtls_config.h and include/psa/crypto_config.h and uses |
| * those definitions to define symbols used in the library code. |
| * |
| * Users and integrators should not edit this file, please edit |
| * include/mbedtls/mbedtls_config.h for MBETLS_XXX settings or |
| * include/psa/crypto_config.h for PSA_WANT_XXX settings. |
| */ |
| /* |
| * Copyright The Mbed TLS Contributors |
| * SPDX-License-Identifier: Apache-2.0 |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| * not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| #ifndef MBEDTLS_CONFIG_PSA_H |
| #define MBEDTLS_CONFIG_PSA_H |
| |
| #if defined(MBEDTLS_PSA_CRYPTO_CONFIG) |
| #include "psa/crypto_config.h" |
| #endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */ |
| |
| #ifdef __cplusplus |
| extern "C" { |
| #endif |
| |
| |
| |
| /****************************************************************/ |
| /* De facto synonyms */ |
| /****************************************************************/ |
| |
| #if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA) |
| #define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY |
| #elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA) |
| #define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA |
| #endif |
| |
| #if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) |
| #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW |
| #elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) |
| #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN |
| #endif |
| |
| |
| |
| /****************************************************************/ |
| /* Require built-in implementations based on PSA requirements */ |
| /****************************************************************/ |
| |
| #if defined(MBEDTLS_PSA_CRYPTO_CONFIG) |
| |
| #if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA) |
| #define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1 |
| #define MBEDTLS_ECDSA_DETERMINISTIC |
| #define MBEDTLS_ECDSA_C |
| #define MBEDTLS_HMAC_DRBG_C |
| #define MBEDTLS_MD_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */ |
| #endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */ |
| |
| #if defined(PSA_WANT_ALG_ECDH) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH) |
| #define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1 |
| #define MBEDTLS_ECDH_C |
| #define MBEDTLS_ECP_C |
| #define MBEDTLS_BIGNUM_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */ |
| #endif /* PSA_WANT_ALG_ECDH */ |
| |
| #if defined(PSA_WANT_ALG_ECDSA) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA) |
| #define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1 |
| #define MBEDTLS_ECDSA_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */ |
| #endif /* PSA_WANT_ALG_ECDSA */ |
| |
| #if defined(PSA_WANT_ALG_HKDF) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF) |
| #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */ |
| #endif /* PSA_WANT_ALG_HKDF */ |
| |
| #if defined(PSA_WANT_ALG_HMAC) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC) |
| #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */ |
| #endif /* PSA_WANT_ALG_HMAC */ |
| |
| #if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5) |
| #define MBEDTLS_PSA_BUILTIN_ALG_MD5 1 |
| #define MBEDTLS_MD5_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1 |
| #define MBEDTLS_RIPEMD160_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_RSA_OAEP) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1 |
| #define MBEDTLS_RSA_C |
| #define MBEDTLS_BIGNUM_C |
| #define MBEDTLS_OID_C |
| #define MBEDTLS_PKCS1_V21 |
| #define MBEDTLS_MD_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */ |
| #endif /* PSA_WANT_ALG_RSA_OAEP */ |
| |
| #if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1 |
| #define MBEDTLS_RSA_C |
| #define MBEDTLS_BIGNUM_C |
| #define MBEDTLS_OID_C |
| #define MBEDTLS_PKCS1_V15 |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */ |
| #endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */ |
| |
| #if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1 |
| #define MBEDTLS_RSA_C |
| #define MBEDTLS_BIGNUM_C |
| #define MBEDTLS_OID_C |
| #define MBEDTLS_PKCS1_V15 |
| #define MBEDTLS_MD_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */ |
| #endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */ |
| |
| #if defined(PSA_WANT_ALG_RSA_PSS) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1 |
| #define MBEDTLS_RSA_C |
| #define MBEDTLS_BIGNUM_C |
| #define MBEDTLS_OID_C |
| #define MBEDTLS_PKCS1_V21 |
| #define MBEDTLS_MD_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */ |
| #endif /* PSA_WANT_ALG_RSA_PSS */ |
| |
| #if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1 |
| #define MBEDTLS_SHA1_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1 |
| #define MBEDTLS_SHA224_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1 |
| #define MBEDTLS_SHA256_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1 |
| #define MBEDTLS_SHA384_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1 |
| #define MBEDTLS_SHA512_C |
| #endif |
| |
| #if defined(PSA_WANT_ALG_TLS12_PRF) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF) |
| #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */ |
| #endif /* PSA_WANT_ALG_TLS12_PRF */ |
| |
| #if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS) |
| #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */ |
| #endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1 |
| #define MBEDTLS_ECP_C |
| #define MBEDTLS_BIGNUM_C |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR */ |
| #endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1 |
| #define MBEDTLS_ECP_C |
| #define MBEDTLS_BIGNUM_C |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */ |
| #endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1 |
| #define MBEDTLS_RSA_C |
| #define MBEDTLS_BIGNUM_C |
| #define MBEDTLS_OID_C |
| #define MBEDTLS_GENPRIME |
| #define MBEDTLS_PK_PARSE_C |
| #define MBEDTLS_PK_WRITE_C |
| #define MBEDTLS_PK_C |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR */ |
| #endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1 |
| #define MBEDTLS_RSA_C |
| #define MBEDTLS_BIGNUM_C |
| #define MBEDTLS_OID_C |
| #define MBEDTLS_PK_PARSE_C |
| #define MBEDTLS_PK_WRITE_C |
| #define MBEDTLS_PK_C |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */ |
| #endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */ |
| |
| /* If any of the block modes are requested that don't have an |
| * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking |
| * in the block cipher key types. */ |
| #if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \ |
| (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \ |
| (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \ |
| (defined(PSA_WANT_ALG_XTS) && !defined(MBEDTLS_PSA_ACCEL_ALG_XTS)) || \ |
| defined(PSA_WANT_ALG_ECB_NO_PADDING) || \ |
| (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \ |
| !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \ |
| (defined(PSA_WANT_ALG_CBC_PKCS7) && \ |
| !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \ |
| (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC)) |
| #define PSA_HAVE_SOFT_BLOCK_MODE 1 |
| #endif |
| |
| #if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \ |
| (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM)) |
| #define PSA_HAVE_SOFT_BLOCK_AEAD 1 |
| #endif |
| |
| #if defined(PSA_WANT_KEY_TYPE_AES) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES) |
| #define PSA_HAVE_SOFT_KEY_TYPE_AES 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */ |
| #if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_MODE) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_AEAD) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1 |
| #define MBEDTLS_AES_C |
| #endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */ |
| #endif /* PSA_WANT_KEY_TYPE_AES */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_CAMELLIA) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA) |
| #define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */ |
| #if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_MODE) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_AEAD) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1 |
| #define MBEDTLS_CAMELLIA_C |
| #endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */ |
| #endif /* PSA_WANT_KEY_TYPE_CAMELLIA */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_DES) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES) |
| #define PSA_HAVE_SOFT_KEY_TYPE_DES 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */ |
| #if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_MODE) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1 |
| #define MBEDTLS_DES_C |
| #endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */ |
| #endif /* PSA_WANT_KEY_TYPE_DES */ |
| |
| #if defined(PSA_WANT_KEY_TYPE_CHACHA20) |
| #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1 |
| #define MBEDTLS_CHACHA20_C |
| #endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */ |
| #endif /* PSA_WANT_KEY_TYPE_CHACHA20 */ |
| |
| /* If any of the software block ciphers are selected, define |
| * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these |
| * situations. */ |
| #if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \ |
| defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \ |
| defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) |
| #define PSA_HAVE_SOFT_BLOCK_CIPHER 1 |
| #endif |
| |
| #if defined(PSA_WANT_ALG_STREAM_CIPHER) |
| #define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1 |
| #endif /* PSA_WANT_ALG_STREAM_CIPHER */ |
| |
| #if defined(PSA_WANT_ALG_CBC_MAC) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC) |
| #error "CBC-MAC is not yet supported via the PSA API in Mbed TLS." |
| #define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */ |
| #endif /* PSA_WANT_ALG_CBC_MAC */ |
| |
| #if defined(PSA_WANT_ALG_CMAC) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1 |
| #define MBEDTLS_CMAC_C |
| #endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */ |
| #endif /* PSA_WANT_ALG_CMAC */ |
| |
| #if defined(PSA_WANT_ALG_CTR) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CTR 1 |
| #define MBEDTLS_CIPHER_MODE_CTR |
| #endif |
| #endif /* PSA_WANT_ALG_CTR */ |
| |
| #if defined(PSA_WANT_ALG_CFB) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CFB 1 |
| #define MBEDTLS_CIPHER_MODE_CFB |
| #endif |
| #endif /* PSA_WANT_ALG_CFB */ |
| |
| #if defined(PSA_WANT_ALG_OFB) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_PSA_BUILTIN_ALG_OFB 1 |
| #define MBEDTLS_CIPHER_MODE_OFB |
| #endif |
| #endif /* PSA_WANT_ALG_OFB */ |
| |
| #if defined(PSA_WANT_ALG_XTS) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_XTS) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_PSA_BUILTIN_ALG_XTS 1 |
| #define MBEDTLS_CIPHER_MODE_XTS |
| #endif |
| #endif /* PSA_WANT_ALG_XTS */ |
| |
| #if defined(PSA_WANT_ALG_ECB_NO_PADDING) |
| #define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1 |
| #endif |
| |
| #if defined(PSA_WANT_ALG_CBC_NO_PADDING) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_CIPHER_MODE_CBC |
| #define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1 |
| #endif |
| #endif /* PSA_WANT_ALG_CBC_NO_PADDING */ |
| |
| #if defined(PSA_WANT_ALG_CBC_PKCS7) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \ |
| defined(PSA_HAVE_SOFT_BLOCK_CIPHER) |
| #define MBEDTLS_CIPHER_MODE_CBC |
| #define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1 |
| #define MBEDTLS_CIPHER_PADDING_PKCS7 |
| #endif |
| #endif /* PSA_WANT_ALG_CBC_PKCS7 */ |
| |
| #if defined(PSA_WANT_ALG_CCM) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \ |
| defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \ |
| defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CCM 1 |
| #define MBEDTLS_CCM_C |
| #endif |
| #endif /* PSA_WANT_ALG_CCM */ |
| |
| #if defined(PSA_WANT_ALG_GCM) |
| #if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \ |
| defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \ |
| defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) |
| #define MBEDTLS_PSA_BUILTIN_ALG_GCM 1 |
| #define MBEDTLS_GCM_C |
| #endif |
| #endif /* PSA_WANT_ALG_GCM */ |
| |
| #if defined(PSA_WANT_ALG_CHACHA20_POLY1305) |
| #if defined(PSA_WANT_KEY_TYPE_CHACHA20) |
| #define MBEDTLS_CHACHAPOLY_C |
| #define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1 |
| #endif /* PSA_WANT_KEY_TYPE_CHACHA20 */ |
| #endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */ |
| |
| #if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256) |
| #define MBEDTLS_ECP_DP_BP256R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */ |
| #endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */ |
| |
| #if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384) |
| #define MBEDTLS_ECP_DP_BP384R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */ |
| #endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */ |
| |
| #if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512) |
| #define MBEDTLS_ECP_DP_BP512R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */ |
| #endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */ |
| |
| #if defined(PSA_WANT_ECC_MONTGOMERY_255) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255) |
| #define MBEDTLS_ECP_DP_CURVE25519_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */ |
| #endif /* PSA_WANT_ECC_MONTGOMERY_255 */ |
| |
| #if defined(PSA_WANT_ECC_MONTGOMERY_448) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448) |
| /* |
| * Curve448 is not yet supported via the PSA API in Mbed TLS |
| * (https://github.com/ARMmbed/mbedtls/issues/4249). |
| */ |
| #error "Curve448 is not yet supported via the PSA API in Mbed TLS." |
| #define MBEDTLS_ECP_DP_CURVE448_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */ |
| #endif /* PSA_WANT_ECC_MONTGOMERY_448 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_R1_192) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192) |
| #define MBEDTLS_ECP_DP_SECP192R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */ |
| #endif /* PSA_WANT_ECC_SECP_R1_192 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_R1_224) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224) |
| #define MBEDTLS_ECP_DP_SECP224R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */ |
| #endif /* PSA_WANT_ECC_SECP_R1_224 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_R1_256) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) |
| #define MBEDTLS_ECP_DP_SECP256R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */ |
| #endif /* PSA_WANT_ECC_SECP_R1_256 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_R1_384) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384) |
| #define MBEDTLS_ECP_DP_SECP384R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */ |
| #endif /* PSA_WANT_ECC_SECP_R1_384 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_R1_521) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521) |
| #define MBEDTLS_ECP_DP_SECP521R1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */ |
| #endif /* PSA_WANT_ECC_SECP_R1_521 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_K1_192) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192) |
| #define MBEDTLS_ECP_DP_SECP192K1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */ |
| #endif /* PSA_WANT_ECC_SECP_K1_192 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_K1_224) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224) |
| /* |
| * SECP224K1 is buggy via the PSA API in Mbed TLS |
| * (https://github.com/ARMmbed/mbedtls/issues/3541). |
| */ |
| #error "SECP224K1 is buggy via the PSA API in Mbed TLS." |
| #define MBEDTLS_ECP_DP_SECP224K1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */ |
| #endif /* PSA_WANT_ECC_SECP_K1_224 */ |
| |
| #if defined(PSA_WANT_ECC_SECP_K1_256) |
| #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256) |
| #define MBEDTLS_ECP_DP_SECP256K1_ENABLED |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1 |
| #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */ |
| #endif /* PSA_WANT_ECC_SECP_K1_256 */ |
| |
| |
| |
| /****************************************************************/ |
| /* Infer PSA requirements from Mbed TLS capabilities */ |
| /****************************************************************/ |
| |
| #else /* MBEDTLS_PSA_CRYPTO_CONFIG */ |
| |
| /* |
| * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG |
| * is not defined |
| */ |
| |
| #if defined(MBEDTLS_CCM_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CCM 1 |
| #define PSA_WANT_ALG_CCM 1 |
| #endif /* MBEDTLS_CCM_C */ |
| |
| #if defined(MBEDTLS_CMAC_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1 |
| #define PSA_WANT_ALG_CMAC 1 |
| #endif /* MBEDTLS_CMAC_C */ |
| |
| #if defined(MBEDTLS_ECDH_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1 |
| #define PSA_WANT_ALG_ECDH 1 |
| #endif /* MBEDTLS_ECDH_C */ |
| |
| #if defined(MBEDTLS_ECDSA_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1 |
| #define PSA_WANT_ALG_ECDSA 1 |
| #define PSA_WANT_ALG_ECDSA_ANY 1 |
| |
| // Only add in DETERMINISTIC support if ECDSA is also enabled |
| #if defined(MBEDTLS_ECDSA_DETERMINISTIC) |
| #define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1 |
| #define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1 |
| #endif /* MBEDTLS_ECDSA_DETERMINISTIC */ |
| |
| #endif /* MBEDTLS_ECDSA_C */ |
| |
| #if defined(MBEDTLS_ECP_C) |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1 |
| #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1 |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1 |
| #define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1 |
| #endif /* MBEDTLS_ECP_C */ |
| |
| #if defined(MBEDTLS_GCM_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_GCM 1 |
| #define PSA_WANT_ALG_GCM 1 |
| #endif /* MBEDTLS_GCM_C */ |
| |
| #if defined(MBEDTLS_HKDF_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1 |
| #define PSA_WANT_ALG_HMAC 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1 |
| #define PSA_WANT_ALG_HKDF 1 |
| #endif /* MBEDTLS_HKDF_C */ |
| |
| #if defined(MBEDTLS_MD_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1 |
| #define PSA_WANT_ALG_HMAC 1 |
| #define PSA_WANT_KEY_TYPE_HMAC |
| #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1 |
| #define PSA_WANT_ALG_TLS12_PRF 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1 |
| #define PSA_WANT_ALG_TLS12_PSK_TO_MS 1 |
| #endif /* MBEDTLS_MD_C */ |
| |
| #if defined(MBEDTLS_MD5_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_MD5 1 |
| #define PSA_WANT_ALG_MD5 1 |
| #endif |
| |
| #if defined(MBEDTLS_RIPEMD160_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1 |
| #define PSA_WANT_ALG_RIPEMD160 1 |
| #endif |
| |
| #if defined(MBEDTLS_RSA_C) |
| #if defined(MBEDTLS_PKCS1_V15) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1 |
| #define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1 |
| #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1 |
| #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1 |
| #endif /* MBEDTLSS_PKCS1_V15 */ |
| #if defined(MBEDTLS_PKCS1_V21) |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1 |
| #define PSA_WANT_ALG_RSA_OAEP 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1 |
| #define PSA_WANT_ALG_RSA_PSS 1 |
| #endif /* MBEDTLS_PKCS1_V21 */ |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1 |
| #define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1 |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1 |
| #define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1 |
| #endif /* MBEDTLS_RSA_C */ |
| |
| #if defined(MBEDTLS_SHA1_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1 |
| #define PSA_WANT_ALG_SHA_1 1 |
| #endif |
| |
| #if defined(MBEDTLS_SHA224_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1 |
| #define PSA_WANT_ALG_SHA_224 1 |
| #endif |
| |
| #if defined(MBEDTLS_SHA256_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1 |
| #define PSA_WANT_ALG_SHA_256 1 |
| #endif |
| |
| #if defined(MBEDTLS_SHA384_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1 |
| #define PSA_WANT_ALG_SHA_384 1 |
| #endif |
| |
| #if defined(MBEDTLS_SHA512_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1 |
| #define PSA_WANT_ALG_SHA_512 1 |
| #endif |
| |
| #if defined(MBEDTLS_AES_C) |
| #define PSA_WANT_KEY_TYPE_AES 1 |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1 |
| #endif |
| |
| #if defined(MBEDTLS_CAMELLIA_C) |
| #define PSA_WANT_KEY_TYPE_CAMELLIA 1 |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1 |
| #endif |
| |
| #if defined(MBEDTLS_DES_C) |
| #define PSA_WANT_KEY_TYPE_DES 1 |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1 |
| #endif |
| |
| #if defined(MBEDTLS_CHACHA20_C) |
| #define PSA_WANT_KEY_TYPE_CHACHA20 1 |
| #define PSA_WANT_ALG_STREAM_CIPHER 1 |
| #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1 |
| #if defined(MBEDTLS_CHACHAPOLY_C) |
| #define PSA_WANT_ALG_CHACHA20_POLY1305 1 |
| #define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1 |
| #endif |
| #endif |
| |
| #if defined(MBEDTLS_CIPHER_MODE_CBC) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1 |
| #define PSA_WANT_ALG_CBC_NO_PADDING 1 |
| #if defined(MBEDTLS_CIPHER_PADDING_PKCS7) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1 |
| #define PSA_WANT_ALG_CBC_PKCS7 1 |
| #endif |
| #endif |
| |
| #if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \ |
| defined(MBEDTLS_CAMELLIA_C) |
| #define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1 |
| #define PSA_WANT_ALG_ECB_NO_PADDING 1 |
| #endif |
| |
| #if defined(MBEDTLS_CIPHER_MODE_CFB) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CFB 1 |
| #define PSA_WANT_ALG_CFB 1 |
| #endif |
| |
| #if defined(MBEDTLS_CIPHER_MODE_CTR) |
| #define MBEDTLS_PSA_BUILTIN_ALG_CTR 1 |
| #define PSA_WANT_ALG_CTR 1 |
| #endif |
| |
| #if defined(MBEDTLS_CIPHER_MODE_OFB) |
| #define MBEDTLS_PSA_BUILTIN_ALG_OFB 1 |
| #define PSA_WANT_ALG_OFB 1 |
| #endif |
| |
| #if defined(MBEDTLS_CIPHER_MODE_XTS) |
| #define MBEDTLS_PSA_BUILTIN_ALG_XTS 1 |
| #define PSA_WANT_ALG_XTS 1 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1 |
| #define PSA_WANT_ECC_BRAINPOOL_P_R1_256 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1 |
| #define PSA_WANT_ECC_BRAINPOOL_P_R1_384 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1 |
| #define PSA_WANT_ECC_BRAINPOOL_P_R1_512 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1 |
| #define PSA_WANT_ECC_MONTGOMERY_255 |
| #endif |
| |
| /* Curve448 is not yet supported via the PSA API (https://github.com/ARMmbed/mbedtls/issues/4249) */ |
| #if 0 && defined(MBEDTLS_ECP_DP_CURVE448_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1 |
| #define PSA_WANT_ECC_MONTGOMERY_448 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1 |
| #define PSA_WANT_ECC_SECP_R1_192 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1 |
| #define PSA_WANT_ECC_SECP_R1_224 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1 |
| #define PSA_WANT_ECC_SECP_R1_256 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1 |
| #define PSA_WANT_ECC_SECP_R1_384 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1 |
| #define PSA_WANT_ECC_SECP_R1_521 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1 |
| #define PSA_WANT_ECC_SECP_K1_192 |
| #endif |
| |
| /* SECP224K1 is buggy via the PSA API (https://github.com/ARMmbed/mbedtls/issues/3541) */ |
| #if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1 |
| #define PSA_WANT_ECC_SECP_K1_224 |
| #endif |
| |
| #if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) |
| #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1 |
| #define PSA_WANT_ECC_SECP_K1_256 |
| #endif |
| |
| #endif /* MBEDTLS_PSA_CRYPTO_CONFIG */ |
| |
| /* These features are always enabled. */ |
| #define PSA_WANT_KEY_TYPE_DERIVE 1 |
| #define PSA_WANT_KEY_TYPE_RAW_DATA 1 |
| |
| #ifdef __cplusplus |
| } |
| #endif |
| |
| #endif /* MBEDTLS_CONFIG_PSA_H */ |
