#
#   Copyright (c) 2021 Project CHIP Authors
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.
#

rsource "../zephyr/Kconfig"

if CHIP
menu "Silabs Matter Config"

# See config/zephyr/Kconfig for full definition
config CHIP_DEVICE_VENDOR_NAME
	string "Vendor Name"
	default "Silicon Laboratories"

# See config/zephyr/Kconfig for full definition
config CHIP_OTA_REQUESTOR
	bool "Enable OTA Requestor"
	default n
	imply DFU_MULTI_IMAGE
	imply DFU_TARGET
	#imply BOOTLOADER_MCUBOOT # TODO MATTER-4888
	imply IMG_MANAGER
	imply STREAM_FLASH
	imply STREAM_FLASH_ERASE

config CHIP_OTA_IMAGE_BUILD
	bool
	default y if CHIP_OTA_REQUESTOR
	depends on SIGN_IMAGES
	select DFU_MULTI_IMAGE_PACKAGE_BUILD

config CHIP_LOG_VERIFY_OR_DIE
	bool "Log source code location on VerifyOrDie failure"
	default y
	help
	  Enables the feature to log the file name and line number where the Matter
	  stack calls the VerifyOrDie macro with the condition evaluating to false.

config CHIP_LOG_FILE_NAME
	bool "Log file name instead of entire file path"
	default y
	help
	  Enables using a file name instead of an entire file path whenever the
	  source code location needs to be logged. This is achieved by overriding
	  the __FILE__ macro with __FILE_NAME__.
	  This reduces the code size in debug configurations that enable verbose
	  assertion macros.

config CHIP_MALLOC_SYS_HEAP
	default n if !ARCH_POSIX

config CHIP_TASK_STACK_SIZE
	int "The Matter thread stack size"
	default 10240
	help
	  Configures the stack size available for the CHIP (Matter) thread.

config CHIP_FACTORY_DATA_BUILD
	bool "Generate factory data contents"
	help
	  Enables generation of the factory data contents during the building. This
	  option requires the factory_data partition in Partition Manager
	  configuration file (pm_static.yml). As a result, a new output file is
	  created (factory_data.hex).

config CHIP_FACTORY_DATA_VERSION
	int
	default 1
	help
	  Provides the version of the generated factory data parameter set. This is
	  a hidden configuration option that the user cannot change. You can use
	  this value in the factory data provider implementation to verify that the
	  factory data saved in the flash memory has the expected version.

config CHIP_FACTORY_DATA_ROTATING_DEVICE_UID_MAX_LEN
	int "Maximum length of rotating device ID unique ID in bytes"
	default 16
	depends on CHIP_FACTORY_DATA
	help
	  Maximum acceptable length of rotating device ID unique ID in bytes.

if CHIP_FACTORY_DATA_BUILD

# Factory data definitions
config CHIP_FACTORY_DATA_MERGE_WITH_FIRMWARE
	bool "Merge generated factory data with merged.hex output build file"
	default y
	help
	  Enables merging the generated factory data with the merged.hex output
	  build file. As a result, the merged.hex build output file, which is used
	  when flashing the firmware using the west tool, includes the factory data
	  as well.

config CHIP_FACTORY_DATA_GENERATE_ONBOARDING_CODES
	bool "Generate onboarding codes during the generation of a factory data set"
	default y
	help
	  Enables generation of onboarding codes (manual pairing code and QR code)
	  during the generation of a factory data set. You can provide the 
	  onboarding codes to a Matter controller to commission a device to a Matter 
	  network.

# Select source of the certificates
choice CHIP_FACTORY_DATA_CERT_SOURCE
	prompt "Attestation certificate file source"
	default CHIP_FACTORY_DATA_USE_DEFAULT_CERTS

	config CHIP_FACTORY_DATA_USE_DEFAULT_CERTS
		bool "Use pre-generated development certificates"
		help
		  Uses pre-generated certificate files from the
		  credentials/development/attestation/ directory that match the
		  configured Product ID. This can be used for development purpose.

	config CHIP_FACTORY_DATA_CERT_SOURCE_GENERATED
		bool "Auto-generate certificates"
		help
		  Generates new certificates instead of using pre-generated ones. The
		  certificates are generated on every build.

	config CHIP_FACTORY_DATA_CERT_SOURCE_USER
		bool "Use user-provided certificate files"
		help
		  Uses user-provided certificate files. The user needs to specify the
		  absolute paths to all necessary files.

endchoice

config CHIP_FACTORY_DATA_GENERATE_CD
	bool "Generates Certification Declaration to the output build directory"
	help
	  Generates the new Certification Declaration and stores it to the output build directory.

if CHIP_FACTORY_DATA_CERT_SOURCE_USER

config CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT
	string "Path to the DAC certificate (DER format)"
	help
	  Provides the absolute path to the DAC certificate file in the DER format.

config CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY
	string "Path to the DAC private key (DER format)"
	help
	  Provides the absolute path to the DAC keypair file in the DER format. Both
	  public and private keys must be present (the private key will be extracted
	  automatically).

config CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT
	string "Path to the PAI certificate (DER format)"
	help
	  Provides the absolute path to the PAI certificate in the DER format.

endif # CHIP_FACTORY_DATA_CERT_SOURCE_USER

# Configs for SPAKE2+ generation
config CHIP_FACTORY_DATA_GENERATE_SPAKE2_VERIFIER
	bool "Generate SPAKE2+ verifier"
	default y
	help
	  Enables the generation of the SPAKE2+ verifier for the configured SPAKE2+
	  passcode, iteration count and salt.

config CHIP_DEVICE_GENERATE_ROTATING_DEVICE_UID
	bool "Generate Rotating device ID unique ID"
	default y
	help
	  Enables the generation of a random Rotating device ID unique ID.

endif # CHIP_FACTORY_DATA_BUILD

# See config/zephyr/Kconfig for full definition
config CHIP_FACTORY_RESET_ERASE_SETTINGS
	default y
	depends on NVS || ZMS

config CHIP_OPENTHREAD_JOINER_ENABLED
	bool "Specify whether the Thread Joiner functionality is used when it is enabled"
	default n
	depends on NET_L2_OPENTHREAD
	depends on OPENTHREAD_JOINER
	help
	  If disabled, it allows to optimize memory usage even if Thread Joiner
	  support is enabled.

config CHIP_MIGRATE_OPERATIONAL_KEYS_TO_ITS
	bool "Operational keys migration feature"
	depends on CHIP_CRYPTO_IMPL_PSA
	help
	  Enables migration of the operational keys stored in the persistent storage to the PSA ITS secure storage.
	  Enable this feature while updating the firmware of in-field devices that run Mbed TLS cryptography backend
	  to the firmware based on PSA Crypto API.

config CHIP_FACTORY_RESET_ON_KEY_MIGRATION_FAILURE
	bool "Perform factory reset if the operational key migration failed"
	default y
	depends on CHIP_MIGRATE_OPERATIONAL_KEYS_TO_ITS
	help
	  Perform factory reset of the device if the operational key for Fabric has not been migrated
	  properly to PSA ITS storage.

config CHIP_PERSISTENT_SUBSCRIPTIONS
	default n
	# selecting experimental for this feature since there is an issue with multiple controllers.
	select EXPERIMENTAL

config CHIP_MAX_FABRICS
	int "Maximum number of Matter fabrics"
	default 5
	help
	  The maximum number of Matter fabrics that device can be joined to.

config CHIP_MAX_ACTIVE_CASE_CLIENTS
	int "Maximum number of outgoing CASE sessions"
	default CHIP_MAX_FABRICS if CHIP_PERSISTENT_SUBSCRIPTIONS
	default 2
	help
	  The maximum number of outgoing CASE sessions that can be simultaneously handled by the end device.

config CHIP_MAX_ACTIVE_DEVICES
	int "Maximum number of simultaneous connections over CASE"
	default CHIP_MAX_FABRICS if CHIP_PERSISTENT_SUBSCRIPTIONS
	default 4
	help
	  The maximum number of devices to which the Server implementers will be able to
	  concurrently connect over CASE and interact with.

config CHIP_SUBSCRIPTION_RESUMPTION_MIN_RETRY_INTERVAL
	int "Minimum subscription resumption interval in seconds"
	default 20
	depends on CHIP_PERSISTENT_SUBSCRIPTIONS
	help
	  The minimum interval in seconds before resuming a subscription that timed out.

config CHIP_SUBSCRIPTION_RESUMPTION_RETRY_MULTIPLIER
	int "The multiplier for subscription resumption retry in seconds"
	default 40
	depends on CHIP_PERSISTENT_SUBSCRIPTIONS
	help
	  The multiplier per subscription resumption retry attempt that is multiplied by the index of Fibonacci sequence
	  and added to CHIP_SUBSCRIPTION_RESUMPTION_MIN_RETRY_INTERVAL to obtain final wait time for next retry.

config CHIP_ENABLE_BDX_LOG_TRANSFER
	bool "Enable BDX transfer for diagnostic logs"
	help
	  Enables the BDX protocol for diagnostics log transfer purposes.

# See config/common/cmake/Kconfig for full definition
config CHIP_WIFI
	select WIFI
	imply NET_STATISTICS
	imply NET_PKT_TXTIME
	imply NET_PKT_TIMESTAMP
	imply BUILD_OUTPUT_META
	imply NET_IPV6_ND # enable Neighbor Discovery to handle Router Advertisements
	imply NET_IPV6_NBR_CACHE
	imply NET_STATISTICS_IPV6
	imply NET_STATISTICS_USER_API

config CHIP_MEMORY_PROFILING
	bool "Enable features for tracking memory usage"
	# Matter stack
	select CHIP_STATISTICS
	# Heap
	select CHIP_MALLOC_SYS_HEAP_WATERMARKS_SUPPORT if CHIP_MALLOC_SYS_HEAP
	select SYS_HEAP_RUNTIME_STATS if CHIP_MALLOC_SYS_HEAP	
	# Crypto
	select MBEDTLS_MEMORY_DEBUG if !CHIP_CRYPTO_IMPL_PSA
	# Network
	select NET_STATISTICS
	select NET_SHELL
	select NET_BUF_POOL_USAGE
	select OPENTHREAD_SHELL if !CHIP_WIFI
	# Settings
	select SETTINGS_SHELL
	# Zephyr
	select KERNEL_SHELL
	help
	  Enables features for tracking memory usage in Matter.

choice CHIP_LAST_FABRIC_REMOVED_ACTION
	prompt "An action to perform after removing the last fabric"
	default CHIP_LAST_FABRIC_REMOVED_ERASE_AND_REBOOT

	config CHIP_LAST_FABRIC_REMOVED_NONE
		bool "After removing the last fabric do not perform any action"
		help
		  After removing the last fabric the device will not perform factory reset
		  or reboot. The current state will be left as it is and the BLE advertising
		  will not start automatically.

	config CHIP_LAST_FABRIC_REMOVED_ERASE_AND_REBOOT
		bool "After removing the last fabric erase NVS and reboot"
		help
		  After removing the last fabric the device will perform the factory reset and
		  then reboot. The current RAM state will be removed and the new commissioning to
		  the new fabric will use the initial fabric index. This option is the most safe.

	config CHIP_LAST_FABRIC_REMOVED_ERASE_AND_PAIRING_START
		bool "After removing the last fabric erase NVS and start Bluetooth LE advertising"
		help
		  After removing the last fabric the device will perform the factory reset without 
		  rebooting and start the Bluetooth LE advertisement automatically.
		  The current RAM state will be saved and the new commissioning to the next 
		  fabric will use the next possible fabric index. This option should not be used for
		  devices that normally do not advertise Bluetooth LE on boot to keep their original 
		  behavior.

	config CHIP_LAST_FABRIC_REMOVED_ERASE_ONLY
		bool "After removing the last fabric erase NVS only"
		help
		  After removing the last fabric the device will perform the factory reset only without
		  rebooting. The current RAM state will be saved and the new commissioning to the next 
		  fabric will use the next possible fabric index.

endchoice

config CHIP_LAST_FABRIC_REMOVED_ACTION_DELAY
	int "After removing the last fabric wait defined time [in milliseconds] to perform an action"
	depends on !CHIP_LAST_FABRIC_REMOVED_NONE
	default 1000
	help
	  After removing the last fabric the device will wait for the defined time and then perform
	  an action chosen by the CHIP_LAST_FABRIC_REMOVED_ACTION option. This schedule will allow for
	  avoiding race conditions before the device removes non-volatile data.

# ==============================================================================
# System configuration
# ==============================================================================

choice LIBC_IMPLEMENTATION
    default NEWLIB_LIBC
endchoice

config ASSERT
    default y

config ASSERT_NO_COND_INFO
    default y

config ASSERT_NO_MSG_INFO
    default y

config HW_STACK_PROTECTION
    default y

config MAIN_STACK_SIZE
	int
    default 6144

config INIT_STACKS
    default y

config SYSTEM_WORKQUEUE_STACK_SIZE
    default 2560 if CHIP_WIFI
    default 2048 if CHIP_ICD_LIT_SUPPORT

config HEAP_MEM_POOL_IGNORE_MIN
    default y if CHIP_WIFI

#We use sys_heap based allocators, so make sure we don't reserve unused libc heap anyway

config NVS_LOOKUP_CACHE_SIZE
    default 512 if NVS

config ZMS_LOOKUP_CACHE_SIZE
    default 512 if ZMS

# ==============================================================================
# Zephyr networking configuration
# ==============================================================================

config NET_IPV6_MLD
    default y

config NET_IPV6_NBR_CACHE
    default y if CHIP_WIFI
    default n if NET_L2_OPENTHREAD

config NET_IF_UNICAST_IPV6_ADDR_COUNT
    default 6

config NET_IF_MCAST_IPV6_ADDR_COUNT
    default 14

config NET_IF_IPV6_PREFIX_COUNT
    default NET_IF_UNICAST_IPV6_ADDR_COUNT if CHIP_WIFI

config NET_PKT_RX_COUNT
    default 8

config NET_PKT_TX_COUNT
    default 8

config NET_BUF_RX_COUNT
    default 16

config NET_BUF_TX_COUNT
    default 16

config NET_SOCKETS_POLL_MAX
    default 6 if CHIP_WIFI

# ==============================================================================
# Bluetooth Low Energy configuration
# ==============================================================================

config BT
    default y

config BT_PERIPHERAL
    default y

config BT_PERIPHERAL_PREF_MIN_INT
    default 36

config BT_PERIPHERAL_PREF_MAX_INT
    default 36

# Increase BT timeout to 5 s to improve connection reliability and avoid fast drop outs.
config BT_PERIPHERAL_PREF_TIMEOUT
    default 500

config BT_GAP_AUTO_UPDATE_CONN_PARAMS
    default y

# Decrease connection parameters update time, as some Matter controllers request
# enabling IP networking faster than BT connection parameters are updated, what may result
# in commissioning instabilities.
config BT_CONN_PARAM_UPDATE_TIMEOUT
    default 1000

config BT_GATT_DYNAMIC_DB
    default y

config BT_DEVICE_NAME_DYNAMIC
    default y

config BT_DEVICE_NAME_MAX
    default 15

config BT_MAX_CONN
    default 1

config BT_L2CAP_TX_MTU
    default 247

config BT_BUF_ACL_RX_SIZE
    default 251

config BT_BUF_ACL_TX_SIZE
    default 251

config BT_RX_STACK_SIZE
    default 1200

config BT_DEVICE_NAME_GATT_WRITABLE
    default n

config BT_GATT_CACHING
    default n

# ==============================================================================
# DFU configuration
# ==============================================================================
config BOOT_IMAGE_ACCESS_HOOKS
    default n 

config UPDATEABLE_IMAGE_NUMBER
    default 2 

config DFU_MULTI_IMAGE_MAX_IMAGE_COUNT
    int "Maximum number of images for multi-image DFU"
    default 2

# ==============================================================================
# OpenThread configuration
# ==============================================================================

config NET_L2_OPENTHREAD
    default y if !CHIP_WIFI

if NET_L2_OPENTHREAD

config OPENTHREAD_THREAD_STACK_SIZE
    default 6144 if (PSA_CRYPTO_DRIVER_CC3XX && PSA_CRYPTO_DRIVER_OBERON) || PSA_CRYPTO_DRIVER_CRACEN
    default 4096

config OPENTHREAD_DEFAULT_TX_POWER
    default 20 if MPSL_FEM

endif # NET_L2_OPENTHREAD

# ==============================================================================
# Crypto configuration
# ==============================================================================

menu "Crypto configuration"

choice CHIP_CRYPTO_IMPL
    prompt "Crypto implementation"
    default CHIP_CRYPTO_IMPL_PSA

config CHIP_CRYPTO_IMPL_MBEDTLS
    bool "mbedtls"

config CHIP_CRYPTO_IMPL_PSA
    bool "psa"
endchoice

config CHIP_CRYPTO
    string
    default "mbedtls" if CHIP_CRYPTO_IMPL_MBEDTLS
    default "psa" if CHIP_CRYPTO_IMPL_PSA
    help
      Configures the cryptographic implementation between PSA or mbedTLS.

config MBEDTLS_ENABLE_HEAP
	bool "Enable MbedTLS heap"
    default y 

config MBEDTLS_HEAP_SIZE
	int "MbedTLS heap size"
    default 8192

config MBEDTLS_ECP_C
    bool
    default y

config MBEDTLS_ECP_DP_SECP256R1_ENABLED
    default y

config MBEDTLS_HMAC_DRBG_ENABLED
    bool
    default y
config MBEDTLS_PKCS1_V15
    bool
    default y


if CHIP_CRYPTO_IMPL_PSA

    config PSA_CRYPTO_SW_ONLY
	bool
	default y if BOARD_SIWX917_RB4338A
	default n

	config PSA_WANT_ALG_SPAKE2P_MATTER
        bool
        default y
    config PSA_WANT_KEY_TYPE_AES
        bool
        default y
    config PSA_WANT_ALG_CCM
        bool
        default y
    config PSA_WANT_ALG_CMAC
        bool
        default y
    config PSA_WANT_ALG_SHA_224
        bool
        default y
    config PSA_WANT_ALG_SHA_256
        bool
        default y
    config PSA_WANT_ALG_ECB_NO_PADDING
        bool
        default y
    config PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
        bool
        default y
    config PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY
        bool
        default y
    config PSA_WANT_ECC_SECP_R1_256
        bool
        default y
    config PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC
        bool
        default y
    config PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT
        bool
        default y
    config PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT
        bool
        default y
    config PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE
        bool
        default y
    config PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128
        bool
        default y
    config PSA_WANT_ALG_ECDH
        bool
        default y
    config PSA_WANT_ALG_ECDSA
        bool
        default y
    config PSA_WANT_ALG_HKDF
        bool
        default y
    config PSA_WANT_ALG_HMAC
        bool
        default y
    config PSA_WANT_KEY_TYPE_HMAC
        bool
        default y
    config PSA_WANT_ALG_JPAKE
        bool
        default y
    config MBEDTLS_PSA_CRYPTO_C
        bool
        default y
    config MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
        bool
        default n
    config MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
        bool
        default n
	config MBEDTLS_RSA_C
		bool
		default n
	config MBEDTLS_CMAC
		bool
		default y		
    config MBEDTLS_USE_PSA_CRYPTO
        bool
        default y

# Extend the maximum number of PSA key slots to fit Matter requirements
config MBEDTLS_PSA_KEY_SLOT_COUNT
    default 64
endif # CHIP_CRYPTO_IMPL_PSA


if CHIP_CRYPTO_IMPL_MBEDTLS
config MBEDTLS_X509_REMOVE_INFO
	bool
	default y
config MBEDTLS_X509_CSR_WRITE_C
	bool
	default y
config MBEDTLS_X509_CRT_WRITE_C
	bool
	default y
config MBEDTLS_X509_CRL_PARSE_C
	bool
	default y
config MBEDTLS_X509_CSR_PARSE_C
	bool
	default y
config MBEDTLS_PKCS5_C
    bool
    default y
config MBEDTLS_PK_WRITE_C
	bool
	default y	
config MBEDTLS_PK_HAVE_ECC_KEYS
    bool "Enable PK Have ECC Keys"
    default y

endif # CHIP_CRYPTO_IMPL_MBEDTLS

config MBEDTLS_ENTROPY_C
    bool
    default y

config MBEDTLS_ECDH_C
    bool "Enable ECDH"
    default y

config MBEDTLS_HKDF_C
    bool "Enable HKDF"
    default y

config MBEDTLS_ECDSA_C
    bool "Enable ECDSA support in MbedTLS"
    default y

config SECURE_STORAGE
    bool "Enable secure storage"
    default y

config MBEDTLS_ECP_NIST_OPTIM
    bool "Enable ECP NIST Optim"
    default y

config MBEDTLS_HAVE_ASM
    bool "Enable ASM"
    default y

config MBEDTLS_CIPHER_CCM_ENABLED
    bool 
    default y

config MBEDTLS_CIPHER_AES_128_CCM
    bool "Enable AES-128-CCM cipher support in MbedTLS"
    default y

config MBEDTLS_SSL_OUT_CONTENT_LEN
    int "Maximum content length for MbedTLS SSL output"
    default 1560

config MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
    bool "Restrict AES to 128-bit key length in MbedTLS"
    default y

if BOARD_SIWX917_RB4338A
config MBEDTLS_AES_ROM_TABLES
    bool 
    default y

config MBEDTLS_AES_FEWER_TABLES
    bool
    default n
endif # BOARD_SIWX917_RB4338A

endmenu


menu "Silabs Demo Interface"

config SILABS_LOW_POWER
	bool "Optimize power usage"
	default n

config SILABS_LED_SUPPORT
	bool "Enable LED support"
	default n if SILABS_LOW_POWER
	default y
config BUTTONS_SUPPORT
	bool "Enable Buttons support"
	default y

config ENABLE_SILABS_LCD
	bool "Enable LCD Support"
	default n if SILABS_LOW_POWER
	default y

endmenu

endmenu
endif # CHIP