blob: f8f260808b2a0432ff9f2cc2c8ce7cbf9547b74d [file] [log] [blame]
Juan Castilloa57a4d52015-04-02 15:44:20 +01001/*
dp-arm52b1fe52017-03-07 10:08:42 +00002 * Copyright (c) 2015-2017, ARM Limited and Contributors. All rights reserved.
Juan Castilloa57a4d52015-04-02 15:44:20 +01003 *
dp-armfa3cf0b2017-05-03 09:38:09 +01004 * SPDX-License-Identifier: BSD-3-Clause
Juan Castilloa57a4d52015-04-02 15:44:20 +01005 */
6#ifndef __MBEDTLS_CONFIG_H__
7#define __MBEDTLS_CONFIG_H__
8
9/*
Juan Castillobae6b2a2015-11-05 09:24:53 +000010 * Key algorithms currently supported on mbed TLS libraries
Juan Castilloa57a4d52015-04-02 15:44:20 +010011 */
Qixiang Xu1c2aef12017-08-24 15:12:20 +080012#define TF_MBEDTLS_RSA 1
13#define TF_MBEDTLS_ECDSA 2
Qixiang Xuaa05eea2017-08-24 15:26:39 +080014#define TF_MBEDTLS_RSA_AND_ECDSA 3
Juan Castilloa57a4d52015-04-02 15:44:20 +010015
16/*
Qixiang Xu1a1f2912017-11-09 13:56:29 +080017 * Hash algorithms currently supported on mbed TLS libraries
18 */
19#define TF_MBEDTLS_SHA256 1
20#define TF_MBEDTLS_SHA384 2
21#define TF_MBEDTLS_SHA512 3
22
23/*
Juan Castillobae6b2a2015-11-05 09:24:53 +000024 * Configuration file to build mbed TLS with the required features for
Juan Castilloa57a4d52015-04-02 15:44:20 +010025 * Trusted Boot
26 */
27
Juan Castillobae6b2a2015-11-05 09:24:53 +000028#define MBEDTLS_PLATFORM_MEMORY
29#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
Antonio Nino Diaz6b90f5e2017-05-19 11:37:22 +010030/* Prevent mbed TLS from using snprintf so that it can use tf_snprintf. */
31#define MBEDTLS_PLATFORM_SNPRINTF_ALT
Juan Castilloa57a4d52015-04-02 15:44:20 +010032
Soby Mathew0a68d132017-05-31 10:35:27 +010033#if !ERROR_DEPRECATED
Juan Castillobae6b2a2015-11-05 09:24:53 +000034#define MBEDTLS_PKCS1_V15
Soby Mathew0a68d132017-05-31 10:35:27 +010035#endif
Juan Castillobae6b2a2015-11-05 09:24:53 +000036#define MBEDTLS_PKCS1_V21
Juan Castilloa57a4d52015-04-02 15:44:20 +010037
Juan Castillobae6b2a2015-11-05 09:24:53 +000038#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
39#define MBEDTLS_X509_CHECK_KEY_USAGE
40#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
Juan Castilloa57a4d52015-04-02 15:44:20 +010041
Juan Castillobae6b2a2015-11-05 09:24:53 +000042#define MBEDTLS_ASN1_PARSE_C
43#define MBEDTLS_ASN1_WRITE_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010044
Juan Castillobae6b2a2015-11-05 09:24:53 +000045#define MBEDTLS_BASE64_C
46#define MBEDTLS_BIGNUM_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010047
Juan Castillobae6b2a2015-11-05 09:24:53 +000048#define MBEDTLS_ERROR_C
49#define MBEDTLS_MD_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010050
Juan Castillobae6b2a2015-11-05 09:24:53 +000051#define MBEDTLS_MEMORY_BUFFER_ALLOC_C
52#define MBEDTLS_OID_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010053
Juan Castillobae6b2a2015-11-05 09:24:53 +000054#define MBEDTLS_PK_C
55#define MBEDTLS_PK_PARSE_C
56#define MBEDTLS_PK_WRITE_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010057
Juan Castillobae6b2a2015-11-05 09:24:53 +000058#define MBEDTLS_PLATFORM_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010059
David Cunadoc7a1b192017-05-10 16:38:44 +010060#if (TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_ECDSA)
Juan Castillobae6b2a2015-11-05 09:24:53 +000061#define MBEDTLS_ECDSA_C
62#define MBEDTLS_ECP_C
63#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
David Cunadoc7a1b192017-05-10 16:38:44 +010064#elif (TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_RSA)
Juan Castillobae6b2a2015-11-05 09:24:53 +000065#define MBEDTLS_RSA_C
Qixiang Xu1c2aef12017-08-24 15:12:20 +080066#define MBEDTLS_X509_RSASSA_PSS_SUPPORT
Qixiang Xuaa05eea2017-08-24 15:26:39 +080067#elif (TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_RSA_AND_ECDSA)
68#define MBEDTLS_RSA_C
69#define MBEDTLS_X509_RSASSA_PSS_SUPPORT
70#define MBEDTLS_ECDSA_C
71#define MBEDTLS_ECP_C
72#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
Juan Castilloa57a4d52015-04-02 15:44:20 +010073#endif
74
Juan Castillobae6b2a2015-11-05 09:24:53 +000075#define MBEDTLS_SHA256_C
Qixiang Xu1a1f2912017-11-09 13:56:29 +080076#if (TF_MBEDTLS_HASH_ALG_ID != TF_MBEDTLS_SHA256)
77#define MBEDTLS_SHA512_C
78#endif
Juan Castilloa57a4d52015-04-02 15:44:20 +010079
Juan Castillobae6b2a2015-11-05 09:24:53 +000080#define MBEDTLS_VERSION_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010081
Juan Castillobae6b2a2015-11-05 09:24:53 +000082#define MBEDTLS_X509_USE_C
83#define MBEDTLS_X509_CRT_PARSE_C
Juan Castilloa57a4d52015-04-02 15:44:20 +010084
85/* MPI / BIGNUM options */
Juan Castillobae6b2a2015-11-05 09:24:53 +000086#define MBEDTLS_MPI_WINDOW_SIZE 2
87#define MBEDTLS_MPI_MAX_SIZE 256
Juan Castilloa57a4d52015-04-02 15:44:20 +010088
89/* Memory buffer allocator options */
Juan Castillobae6b2a2015-11-05 09:24:53 +000090#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 8
Juan Castilloa57a4d52015-04-02 15:44:20 +010091
Qixiang Xude431b12017-10-13 09:23:42 +080092#ifndef __ASSEMBLY__
93/* System headers required to build mbed TLS with the current configuration */
94#include <stdlib.h>
Juan Castillobae6b2a2015-11-05 09:24:53 +000095#include "mbedtls/check_config.h"
Qixiang Xude431b12017-10-13 09:23:42 +080096#endif
Juan Castilloa57a4d52015-04-02 15:44:20 +010097
Juan Castilloa57a4d52015-04-02 15:44:20 +010098#endif /* __MBEDTLS_CONFIG_H__ */