fvp: Add switch to enable internal Mbed TLS
Add TS_UEFI_INTERNAL_CRYPTO compile switch to include an MBED TLS
instance inside smm-gateway SP instead of using crypto SP.
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Signed-off-by: Gabor Toth <gabor.toth2@arm.com>
diff --git a/fvp-psa-sp.mk b/fvp-psa-sp.mk
index 213e8fb..73c3e33 100644
--- a/fvp-psa-sp.mk
+++ b/fvp-psa-sp.mk
@@ -7,6 +7,7 @@
TS_UEFI_TESTS ?= n
TS_FW_UPDATE ?= n
TS_UEFI_AUTH_VAR ?= y
+TS_UEFI_INTERNAL_CRYPTO ?= n
# Supported values: embedded, fip
SP_PACKAGING_METHOD ?= embedded
SPMC_TESTS ?= n
@@ -16,6 +17,10 @@
TS_APP_UEFI_TEST_EXTRA_FLAGS += -DUEFI_AUTH_VAR=OFF
endif
+ifeq ($(TS_UEFI_INTERNAL_CRYPTO),y)
+SP_SMM_GATEWAY_EXTRA_FLAGS += -DUEFI_INTERNAL_CRYPTO=ON
+endif
+
# Enable the "HArdware Volatile Entropy Gathering and Expansion" daemon to
# overcome low-entropy conditions in the FVP
BR2_PACKAGE_HAVEGED ?= y