| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800 |
- /**
- * \file mbedtls/config_psa.h
- * \brief PSA crypto configuration options (set of defines)
- *
- * This set of compile-time options takes settings defined in
- * include/mbedtls/config.h and include/psa/crypto_config.h and uses
- * those definitions to define symbols used in the library code.
- *
- * Users and integrators should not edit this file, please edit
- * include/mbedtls/config.h for MBETLS_XXX settings or
- * include/psa/crypto_config.h for PSA_WANT_XXX settings.
- */
- /*
- * Copyright The Mbed TLS Contributors
- * SPDX-License-Identifier: Apache-2.0
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may
- * not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
- #ifndef MBEDTLS_CONFIG_PSA_H
- #define MBEDTLS_CONFIG_PSA_H
- #if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
- #include "psa/crypto_config.h"
- #endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
- #ifdef __cplusplus
- extern "C" {
- #endif
- /****************************************************************/
- /* De facto synonyms */
- /****************************************************************/
- #if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA)
- #define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY
- #elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA)
- #define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA
- #endif
- #if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
- #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW
- #elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
- #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN
- #endif
- /****************************************************************/
- /* Require built-in implementations based on PSA requirements */
- /****************************************************************/
- #if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
- #if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
- #define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
- #define MBEDTLS_ECDSA_DETERMINISTIC
- #define MBEDTLS_ECDSA_C
- #define MBEDTLS_HMAC_DRBG_C
- #define MBEDTLS_MD_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
- #endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
- #if defined(PSA_WANT_ALG_ECDH)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
- #define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
- #define MBEDTLS_ECDH_C
- #define MBEDTLS_ECP_C
- #define MBEDTLS_BIGNUM_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */
- #endif /* PSA_WANT_ALG_ECDH */
- #if defined(PSA_WANT_ALG_ECDSA)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
- #define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
- #define MBEDTLS_ECDSA_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
- #endif /* PSA_WANT_ALG_ECDSA */
- #if defined(PSA_WANT_ALG_HKDF)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
- #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
- #define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
- #endif /* PSA_WANT_ALG_HKDF */
- #if defined(PSA_WANT_ALG_HMAC)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
- #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
- #endif /* PSA_WANT_ALG_HMAC */
- #if defined(PSA_WANT_ALG_MD2) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD2)
- #define MBEDTLS_PSA_BUILTIN_ALG_MD2 1
- #define MBEDTLS_MD2_C
- #endif
- #if defined(PSA_WANT_ALG_MD4) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD4)
- #define MBEDTLS_PSA_BUILTIN_ALG_MD4 1
- #define MBEDTLS_MD4_C
- #endif
- #if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
- #define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
- #define MBEDTLS_MD5_C
- #endif
- #if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
- #define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
- #define MBEDTLS_RIPEMD160_C
- #endif
- #if defined(PSA_WANT_ALG_RSA_OAEP)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
- #define MBEDTLS_RSA_C
- #define MBEDTLS_BIGNUM_C
- #define MBEDTLS_OID_C
- #define MBEDTLS_PKCS1_V21
- #define MBEDTLS_MD_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
- #endif /* PSA_WANT_ALG_RSA_OAEP */
- #if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
- #define MBEDTLS_RSA_C
- #define MBEDTLS_BIGNUM_C
- #define MBEDTLS_OID_C
- #define MBEDTLS_PKCS1_V15
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
- #endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
- #if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
- #define MBEDTLS_RSA_C
- #define MBEDTLS_BIGNUM_C
- #define MBEDTLS_OID_C
- #define MBEDTLS_PKCS1_V15
- #define MBEDTLS_MD_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
- #endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
- #if defined(PSA_WANT_ALG_RSA_PSS)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
- #define MBEDTLS_RSA_C
- #define MBEDTLS_BIGNUM_C
- #define MBEDTLS_OID_C
- #define MBEDTLS_PKCS1_V21
- #define MBEDTLS_MD_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
- #endif /* PSA_WANT_ALG_RSA_PSS */
- #if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
- #define MBEDTLS_SHA1_C
- #endif
- #if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
- #define MBEDTLS_SHA256_C
- #endif
- #if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
- #define MBEDTLS_SHA256_C
- #endif
- #if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
- #define MBEDTLS_SHA512_C
- #endif
- #if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
- #define MBEDTLS_SHA512_C
- #endif
- #if defined(PSA_WANT_ALG_TLS12_PRF)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
- #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
- #endif /* PSA_WANT_ALG_TLS12_PRF */
- #if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
- #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
- #endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
- #if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
- #define MBEDTLS_ECP_C
- #define MBEDTLS_BIGNUM_C
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR */
- #endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR */
- #if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
- #define MBEDTLS_ECP_C
- #define MBEDTLS_BIGNUM_C
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */
- #endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
- #if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
- #define MBEDTLS_RSA_C
- #define MBEDTLS_BIGNUM_C
- #define MBEDTLS_OID_C
- #define MBEDTLS_GENPRIME
- #define MBEDTLS_PK_PARSE_C
- #define MBEDTLS_PK_WRITE_C
- #define MBEDTLS_PK_C
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR */
- #endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR */
- #if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
- #define MBEDTLS_RSA_C
- #define MBEDTLS_BIGNUM_C
- #define MBEDTLS_OID_C
- #define MBEDTLS_PK_PARSE_C
- #define MBEDTLS_PK_WRITE_C
- #define MBEDTLS_PK_C
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
- #endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
- /* If any of the block modes are requested that don't have an
- * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
- * in the block cipher key types. */
- #if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
- (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
- (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
- (defined(PSA_WANT_ALG_XTS) && !defined(MBEDTLS_PSA_ACCEL_ALG_XTS)) || \
- defined(PSA_WANT_ALG_ECB_NO_PADDING) || \
- (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
- !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
- (defined(PSA_WANT_ALG_CBC_PKCS7) && \
- !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
- (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
- #define PSA_HAVE_SOFT_BLOCK_MODE 1
- #endif
- #if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
- (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
- #define PSA_HAVE_SOFT_BLOCK_AEAD 1
- #endif
- #if defined(PSA_WANT_KEY_TYPE_AES)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
- #define PSA_HAVE_SOFT_KEY_TYPE_AES 1
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
- #if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
- defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
- defined(PSA_HAVE_SOFT_BLOCK_AEAD)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
- #define MBEDTLS_AES_C
- #endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
- #endif /* PSA_WANT_KEY_TYPE_AES */
- #if defined(PSA_WANT_KEY_TYPE_ARC4)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARC4)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARC4 1
- #define MBEDTLS_ARC4_C
- #endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_ARC4 */
- #endif /* PSA_WANT_KEY_TYPE_ARC4 */
- #if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
- #define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
- #if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
- defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
- defined(PSA_HAVE_SOFT_BLOCK_AEAD)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
- #define MBEDTLS_CAMELLIA_C
- #endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
- #endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
- #if defined(PSA_WANT_KEY_TYPE_DES)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
- #define PSA_HAVE_SOFT_KEY_TYPE_DES 1
- #endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
- #if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
- defined(PSA_HAVE_SOFT_BLOCK_MODE)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
- #define MBEDTLS_DES_C
- #endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
- #endif /* PSA_WANT_KEY_TYPE_DES */
- #if defined(PSA_WANT_KEY_TYPE_CHACHA20)
- #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
- #define MBEDTLS_CHACHA20_C
- #endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */
- #endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
- /* If any of the software block ciphers are selected, define
- * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
- * situations. */
- #if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
- defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
- defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
- #define PSA_HAVE_SOFT_BLOCK_CIPHER 1
- #endif
- #if defined(PSA_WANT_ALG_STREAM_CIPHER)
- #define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
- #endif /* PSA_WANT_ALG_STREAM_CIPHER */
- #if defined(PSA_WANT_ALG_CBC_MAC)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
- #error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
- #define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
- #endif /* PSA_WANT_ALG_CBC_MAC */
- #if defined(PSA_WANT_ALG_CMAC)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
- #define MBEDTLS_CMAC_C
- #endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
- #endif /* PSA_WANT_ALG_CMAC */
- #if defined(PSA_WANT_ALG_CTR)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
- #define MBEDTLS_CIPHER_MODE_CTR
- #endif
- #endif /* PSA_WANT_ALG_CTR */
- #if defined(PSA_WANT_ALG_CFB)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
- #define MBEDTLS_CIPHER_MODE_CFB
- #endif
- #endif /* PSA_WANT_ALG_CFB */
- #if defined(PSA_WANT_ALG_OFB)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
- #define MBEDTLS_CIPHER_MODE_OFB
- #endif
- #endif /* PSA_WANT_ALG_OFB */
- #if defined(PSA_WANT_ALG_XTS)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_XTS) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_PSA_BUILTIN_ALG_XTS 1
- #define MBEDTLS_CIPHER_MODE_XTS
- #endif
- #endif /* PSA_WANT_ALG_XTS */
- #if defined(PSA_WANT_ALG_ECB_NO_PADDING)
- #define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
- #endif
- #if defined(PSA_WANT_ALG_CBC_NO_PADDING)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_CIPHER_MODE_CBC
- #define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
- #endif
- #endif /* PSA_WANT_ALG_CBC_NO_PADDING */
- #if defined(PSA_WANT_ALG_CBC_PKCS7)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
- defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
- #define MBEDTLS_CIPHER_MODE_CBC
- #define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
- #define MBEDTLS_CIPHER_PADDING_PKCS7
- #endif
- #endif /* PSA_WANT_ALG_CBC_PKCS7 */
- #if defined(PSA_WANT_ALG_CCM)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
- defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
- defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
- #define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
- #define MBEDTLS_CCM_C
- #endif
- #endif /* PSA_WANT_ALG_CCM */
- #if defined(PSA_WANT_ALG_GCM)
- #if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
- defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
- defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
- #define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
- #define MBEDTLS_GCM_C
- #endif
- #endif /* PSA_WANT_ALG_GCM */
- #if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
- #if defined(PSA_WANT_KEY_TYPE_CHACHA20)
- #define MBEDTLS_CHACHAPOLY_C
- #define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
- #endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
- #endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
- #if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
- #define MBEDTLS_ECP_DP_BP256R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */
- #endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
- #if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
- #define MBEDTLS_ECP_DP_BP384R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */
- #endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
- #if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
- #define MBEDTLS_ECP_DP_BP512R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */
- #endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
- #if defined(PSA_WANT_ECC_MONTGOMERY_255)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
- #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */
- #endif /* PSA_WANT_ECC_MONTGOMERY_255 */
- #if defined(PSA_WANT_ECC_MONTGOMERY_448)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
- /*
- * Curve448 is not yet supported via the PSA API in Mbed TLS
- * (https://github.com/ARMmbed/mbedtls/issues/4249).
- */
- #error "Curve448 is not yet supported via the PSA API in Mbed TLS."
- #define MBEDTLS_ECP_DP_CURVE448_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */
- #endif /* PSA_WANT_ECC_MONTGOMERY_448 */
- #if defined(PSA_WANT_ECC_SECP_R1_192)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
- #define MBEDTLS_ECP_DP_SECP192R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */
- #endif /* PSA_WANT_ECC_SECP_R1_192 */
- #if defined(PSA_WANT_ECC_SECP_R1_224)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
- #define MBEDTLS_ECP_DP_SECP224R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */
- #endif /* PSA_WANT_ECC_SECP_R1_224 */
- #if defined(PSA_WANT_ECC_SECP_R1_256)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
- #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */
- #endif /* PSA_WANT_ECC_SECP_R1_256 */
- #if defined(PSA_WANT_ECC_SECP_R1_384)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
- #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */
- #endif /* PSA_WANT_ECC_SECP_R1_384 */
- #if defined(PSA_WANT_ECC_SECP_R1_521)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
- #define MBEDTLS_ECP_DP_SECP521R1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */
- #endif /* PSA_WANT_ECC_SECP_R1_521 */
- #if defined(PSA_WANT_ECC_SECP_K1_192)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
- #define MBEDTLS_ECP_DP_SECP192K1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */
- #endif /* PSA_WANT_ECC_SECP_K1_192 */
- #if defined(PSA_WANT_ECC_SECP_K1_224)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
- /*
- * SECP224K1 is buggy via the PSA API in Mbed TLS
- * (https://github.com/ARMmbed/mbedtls/issues/3541).
- */
- #error "SECP224K1 is buggy via the PSA API in Mbed TLS."
- #define MBEDTLS_ECP_DP_SECP224K1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */
- #endif /* PSA_WANT_ECC_SECP_K1_224 */
- #if defined(PSA_WANT_ECC_SECP_K1_256)
- #if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
- #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
- #endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */
- #endif /* PSA_WANT_ECC_SECP_K1_256 */
- /****************************************************************/
- /* Infer PSA requirements from Mbed TLS capabilities */
- /****************************************************************/
- #else /* MBEDTLS_PSA_CRYPTO_CONFIG */
- /*
- * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
- * is not defined
- */
- #if defined(MBEDTLS_CCM_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
- #define PSA_WANT_ALG_CCM 1
- #endif /* MBEDTLS_CCM_C */
- #if defined(MBEDTLS_CMAC_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
- #define PSA_WANT_ALG_CMAC 1
- #endif /* MBEDTLS_CMAC_C */
- #if defined(MBEDTLS_ECDH_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
- #define PSA_WANT_ALG_ECDH 1
- #endif /* MBEDTLS_ECDH_C */
- #if defined(MBEDTLS_ECDSA_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
- #define PSA_WANT_ALG_ECDSA 1
- #define PSA_WANT_ALG_ECDSA_ANY 1
- // Only add in DETERMINISTIC support if ECDSA is also enabled
- #if defined(MBEDTLS_ECDSA_DETERMINISTIC)
- #define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
- #define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1
- #endif /* MBEDTLS_ECDSA_DETERMINISTIC */
- #endif /* MBEDTLS_ECDSA_C */
- #if defined(MBEDTLS_ECP_C)
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
- #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
- #define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
- #endif /* MBEDTLS_ECP_C */
- #if defined(MBEDTLS_GCM_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
- #define PSA_WANT_ALG_GCM 1
- #endif /* MBEDTLS_GCM_C */
- #if defined(MBEDTLS_HKDF_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
- #define PSA_WANT_ALG_HMAC 1
- #define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
- #define PSA_WANT_ALG_HKDF 1
- #endif /* MBEDTLS_HKDF_C */
- #if defined(MBEDTLS_MD_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
- #define PSA_WANT_ALG_HMAC 1
- #define PSA_WANT_KEY_TYPE_HMAC
- #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
- #define PSA_WANT_ALG_TLS12_PRF 1
- #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
- #define PSA_WANT_ALG_TLS12_PSK_TO_MS 1
- #endif /* MBEDTLS_MD_C */
- #if defined(MBEDTLS_MD2_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_MD2 1
- #define PSA_WANT_ALG_MD2 1
- #endif
- #if defined(MBEDTLS_MD4_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_MD4 1
- #define PSA_WANT_ALG_MD4 1
- #endif
- #if defined(MBEDTLS_MD5_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
- #define PSA_WANT_ALG_MD5 1
- #endif
- #if defined(MBEDTLS_RIPEMD160_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
- #define PSA_WANT_ALG_RIPEMD160 1
- #endif
- #if defined(MBEDTLS_RSA_C)
- #if defined(MBEDTLS_PKCS1_V15)
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
- #define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
- #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
- #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1
- #endif /* MBEDTLSS_PKCS1_V15 */
- #if defined(MBEDTLS_PKCS1_V21)
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
- #define PSA_WANT_ALG_RSA_OAEP 1
- #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
- #define PSA_WANT_ALG_RSA_PSS 1
- #endif /* MBEDTLS_PKCS1_V21 */
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
- #define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
- #define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
- #endif /* MBEDTLS_RSA_C */
- #if defined(MBEDTLS_SHA1_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
- #define PSA_WANT_ALG_SHA_1 1
- #endif
- #if defined(MBEDTLS_SHA256_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
- #define PSA_WANT_ALG_SHA_224 1
- #define PSA_WANT_ALG_SHA_256 1
- #endif
- #if defined(MBEDTLS_SHA512_C)
- #if !defined(MBEDTLS_SHA512_NO_SHA384)
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
- #define PSA_WANT_ALG_SHA_384 1
- #endif
- #define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
- #define PSA_WANT_ALG_SHA_512 1
- #endif
- #if defined(MBEDTLS_AES_C)
- #define PSA_WANT_KEY_TYPE_AES 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
- #endif
- #if defined(MBEDTLS_ARC4_C)
- #define PSA_WANT_KEY_TYPE_ARC4 1
- #define PSA_WANT_ALG_STREAM_CIPHER 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARC4 1
- #define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
- #endif
- #if defined(MBEDTLS_CAMELLIA_C)
- #define PSA_WANT_KEY_TYPE_CAMELLIA 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
- #endif
- #if defined(MBEDTLS_DES_C)
- #define PSA_WANT_KEY_TYPE_DES 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
- #endif
- #if defined(MBEDTLS_CHACHA20_C)
- #define PSA_WANT_KEY_TYPE_CHACHA20 1
- #define PSA_WANT_ALG_STREAM_CIPHER 1
- #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
- #define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
- #if defined(MBEDTLS_CHACHAPOLY_C)
- #define PSA_WANT_ALG_CHACHA20_POLY1305 1
- #define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
- #endif
- #endif
- #if defined(MBEDTLS_CIPHER_MODE_CBC)
- #define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
- #define PSA_WANT_ALG_CBC_NO_PADDING 1
- #if defined(MBEDTLS_CIPHER_PADDING_PKCS7)
- #define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
- #define PSA_WANT_ALG_CBC_PKCS7 1
- #endif
- #endif
- #if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \
- defined(MBEDTLS_CAMELLIA_C)
- #define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
- #define PSA_WANT_ALG_ECB_NO_PADDING 1
- #endif
- #if defined(MBEDTLS_CIPHER_MODE_CFB)
- #define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
- #define PSA_WANT_ALG_CFB 1
- #endif
- #if defined(MBEDTLS_CIPHER_MODE_CTR)
- #define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
- #define PSA_WANT_ALG_CTR 1
- #endif
- #if defined(MBEDTLS_CIPHER_MODE_OFB)
- #define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
- #define PSA_WANT_ALG_OFB 1
- #endif
- #if defined(MBEDTLS_CIPHER_MODE_XTS)
- #define MBEDTLS_PSA_BUILTIN_ALG_XTS 1
- #define PSA_WANT_ALG_XTS 1
- #endif
- #if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
- #define PSA_WANT_ECC_BRAINPOOL_P_R1_256
- #endif
- #if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
- #define PSA_WANT_ECC_BRAINPOOL_P_R1_384
- #endif
- #if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
- #define PSA_WANT_ECC_BRAINPOOL_P_R1_512
- #endif
- #if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
- #define PSA_WANT_ECC_MONTGOMERY_255
- #endif
- /* Curve448 is not yet supported via the PSA API (https://github.com/ARMmbed/mbedtls/issues/4249) */
- #if 0 && defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
- #define PSA_WANT_ECC_MONTGOMERY_448
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
- #define PSA_WANT_ECC_SECP_R1_192
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
- #define PSA_WANT_ECC_SECP_R1_224
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
- #define PSA_WANT_ECC_SECP_R1_256
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
- #define PSA_WANT_ECC_SECP_R1_384
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
- #define PSA_WANT_ECC_SECP_R1_521
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
- #define PSA_WANT_ECC_SECP_K1_192
- #endif
- /* SECP224K1 is buggy via the PSA API (https://github.com/ARMmbed/mbedtls/issues/3541) */
- #if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
- #define PSA_WANT_ECC_SECP_K1_224
- #endif
- #if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
- #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
- #define PSA_WANT_ECC_SECP_K1_256
- #endif
- #endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
- /* These features are always enabled. */
- #define PSA_WANT_KEY_TYPE_DERIVE 1
- #define PSA_WANT_KEY_TYPE_RAW_DATA 1
- #ifdef __cplusplus
- }
- #endif
- #endif /* MBEDTLS_CONFIG_PSA_H */
|