blob: 3eb41617fa6851e1b6bf13607cda3559a17004b3 [file] [log] [blame]
Juan Castilloa57a4d52015-04-02 15:44:20 +01001#
Manish V Badarkheabf1b8d2022-01-27 13:50:23 +00002# Copyright (c) 2015-2022, Arm Limited. All rights reserved.
Juan Castilloa57a4d52015-04-02 15:44:20 +01003#
dp-armfa3cf0b2017-05-03 09:38:09 +01004# SPDX-License-Identifier: BSD-3-Clause
Juan Castilloa57a4d52015-04-02 15:44:20 +01005#
6
7ifneq (${MBEDTLS_COMMON_MK},1)
8MBEDTLS_COMMON_MK := 1
9
Juan Castillobae6b2a2015-11-05 09:24:53 +000010# MBEDTLS_DIR must be set to the mbed TLS main directory (it must contain
Juan Castilloa57a4d52015-04-02 15:44:20 +010011# the 'include' and 'library' subdirectories).
12ifeq (${MBEDTLS_DIR},)
13 $(error Error: MBEDTLS_DIR not set)
14endif
15
Roberto Vargasd51207e2018-06-04 15:15:04 +010016MBEDTLS_INC = -I${MBEDTLS_DIR}/include
Juan Castilloa57a4d52015-04-02 15:44:20 +010017
Juan Castillobae6b2a2015-11-05 09:24:53 +000018# Specify mbed TLS configuration file
Manish V Badarkheabf1b8d2022-01-27 13:50:23 +000019MBEDTLS_CONFIG_FILE ?= "<drivers/auth/mbedtls/mbedtls_config.h>"
Juan Castillobae6b2a2015-11-05 09:24:53 +000020$(eval $(call add_define,MBEDTLS_CONFIG_FILE))
Juan Castilloa57a4d52015-04-02 15:44:20 +010021
Roberto Vargas502290b2018-05-08 10:27:10 +010022MBEDTLS_SOURCES += drivers/auth/mbedtls/mbedtls_common.c
23
24
25LIBMBEDTLS_SRCS := $(addprefix ${MBEDTLS_DIR}/library/, \
Sumit Garg392e4df2019-11-15 10:43:00 +053026 aes.c \
Roberto Vargas502290b2018-05-08 10:27:10 +010027 asn1parse.c \
28 asn1write.c \
Sumit Garg392e4df2019-11-15 10:43:00 +053029 cipher.c \
30 cipher_wrap.c \
Roberto Vargas502290b2018-05-08 10:27:10 +010031 memory_buffer_alloc.c \
32 oid.c \
33 platform.c \
34 platform_util.c \
35 bignum.c \
Sumit Garg392e4df2019-11-15 10:43:00 +053036 gcm.c \
Roberto Vargas502290b2018-05-08 10:27:10 +010037 md.c \
Roberto Vargas502290b2018-05-08 10:27:10 +010038 pk.c \
39 pk_wrap.c \
40 pkparse.c \
41 pkwrite.c \
42 sha256.c \
43 sha512.c \
44 ecdsa.c \
45 ecp_curves.c \
46 ecp.c \
47 rsa.c \
48 rsa_internal.c \
49 x509.c \
50 x509_crt.c \
Sandrine Bailleux88746ca2022-04-21 10:21:29 +020051 constant_time.c \
Roberto Vargas502290b2018-05-08 10:27:10 +010052 )
53
54# The platform may define the variable 'TF_MBEDTLS_KEY_ALG' to select the key
Justin Chadwell3168a202019-09-09 15:24:31 +010055# algorithm to use. If the variable is not defined, select it based on
56# algorithm used for key generation `KEY_ALG`. If `KEY_ALG` is not defined,
57# then it is set to `rsa`.
Roberto Vargas502290b2018-05-08 10:27:10 +010058ifeq (${TF_MBEDTLS_KEY_ALG},)
59 ifeq (${KEY_ALG}, ecdsa)
60 TF_MBEDTLS_KEY_ALG := ecdsa
61 else
62 TF_MBEDTLS_KEY_ALG := rsa
63 endif
64endif
65
Justin Chadwellf9b32c12019-07-29 17:13:10 +010066ifeq (${TF_MBEDTLS_KEY_SIZE},)
67 ifneq ($(findstring rsa,${TF_MBEDTLS_KEY_ALG}),)
68 ifeq (${KEY_SIZE},)
69 TF_MBEDTLS_KEY_SIZE := 2048
70 else
71 TF_MBEDTLS_KEY_SIZE := ${KEY_SIZE}
72 endif
73 endif
74endif
75
Roberto Vargas502290b2018-05-08 10:27:10 +010076ifeq (${HASH_ALG}, sha384)
77 TF_MBEDTLS_HASH_ALG_ID := TF_MBEDTLS_SHA384
78else ifeq (${HASH_ALG}, sha512)
Alexei Fedorov25d7c882020-03-20 18:38:55 +000079 TF_MBEDTLS_HASH_ALG_ID := TF_MBEDTLS_SHA512
Roberto Vargas502290b2018-05-08 10:27:10 +010080else
81 TF_MBEDTLS_HASH_ALG_ID := TF_MBEDTLS_SHA256
82endif
83
84ifeq (${TF_MBEDTLS_KEY_ALG},ecdsa)
85 TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_ECDSA
86else ifeq (${TF_MBEDTLS_KEY_ALG},rsa)
87 TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_RSA
88else ifeq (${TF_MBEDTLS_KEY_ALG},rsa+ecdsa)
89 TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_RSA_AND_ECDSA
90else
91 $(error "TF_MBEDTLS_KEY_ALG=${TF_MBEDTLS_KEY_ALG} not supported on mbed TLS")
92endif
93
Sumit Garg392e4df2019-11-15 10:43:00 +053094ifeq (${DECRYPTION_SUPPORT}, aes_gcm)
95 TF_MBEDTLS_USE_AES_GCM := 1
96else
97 TF_MBEDTLS_USE_AES_GCM := 0
98endif
99
Manish V Badarkhee112a5a2021-10-06 23:41:50 +0100100ifeq ($(MEASURED_BOOT),1)
101 ifeq (${TPM_HASH_ALG}, sha256)
102 TF_MBEDTLS_TPM_HASH_ALG_ID := TF_MBEDTLS_SHA256
103 else ifeq (${TPM_HASH_ALG}, sha384)
104 TF_MBEDTLS_TPM_HASH_ALG_ID := TF_MBEDTLS_SHA384
105 else ifeq (${TPM_HASH_ALG}, sha512)
106 TF_MBEDTLS_TPM_HASH_ALG_ID := TF_MBEDTLS_SHA512
107 else
108 $(error "TPM_HASH_ALG not defined.")
109 endif
110endif
111
Roberto Vargas502290b2018-05-08 10:27:10 +0100112# Needs to be set to drive mbed TLS configuration correctly
Leonardo Sandoval65fca7c2020-09-10 12:18:27 -0500113$(eval $(call add_defines,\
114 $(sort \
115 TF_MBEDTLS_KEY_ALG_ID \
116 TF_MBEDTLS_KEY_SIZE \
117 TF_MBEDTLS_HASH_ALG_ID \
118 TF_MBEDTLS_USE_AES_GCM \
119)))
Roberto Vargas502290b2018-05-08 10:27:10 +0100120
Manish V Badarkhee112a5a2021-10-06 23:41:50 +0100121ifeq ($(MEASURED_BOOT),1)
122 $(eval $(call add_define,TF_MBEDTLS_TPM_HASH_ALG_ID))
123endif
124
Roberto Vargas502290b2018-05-08 10:27:10 +0100125$(eval $(call MAKE_LIB,mbedtls))
Juan Castilloa57a4d52015-04-02 15:44:20 +0100126
Juan Castilloa57a4d52015-04-02 15:44:20 +0100127endif