Build: Enable symmetric initial attestation in Profile S Default config
Setup SYMMETRIC_INITIAL_ATTESTATION in CommonConfig.cmake.
Enable Initial Attestation service and symmetric key algorithm
based Initial Attestation in TF-M Profile Small Default config.
Change-Id: I728d968108eb3e7050ca2e2522191f005ac489b4
Signed-off-by: David Hu <david.hu@arm.com>
diff --git a/CommonConfig.cmake b/CommonConfig.cmake
index d5b589e..62a6dc1 100644
--- a/CommonConfig.cmake
+++ b/CommonConfig.cmake
@@ -341,6 +341,14 @@
if (TFM_PARTITION_INITIAL_ATTESTATION)
add_definitions(-DTFM_PARTITION_INITIAL_ATTESTATION)
+
+ if (NOT DEFINED SYMMETRIC_INITIAL_ATTESTATION)
+ set(SYMMETRIC_INITIAL_ATTESTATION OFF)
+ endif()
+
+ if (SYMMETRIC_INITIAL_ATTESTATION)
+ add_definitions(-DSYMMETRIC_INITIAL_ATTESTATION)
+ endif()
endif()
if (TFM_PARTITION_TEST_CORE)
diff --git a/configs/ConfigDefaultProfileS.cmake b/configs/ConfigDefaultProfileS.cmake
index aa54ead..8274044 100644
--- a/configs/ConfigDefaultProfileS.cmake
+++ b/configs/ConfigDefaultProfileS.cmake
@@ -63,8 +63,10 @@
# Disable Protected Storage service
set(TFM_PARTITION_PROTECTED_STORAGE OFF)
-# Disable Initial Attestation service temporarily
-set(TFM_PARTITION_INITIAL_ATTESTATION OFF)
+# Enable Initial Attestation service
+set(TFM_PARTITION_INITIAL_ATTESTATION ON)
+# Enable Initial Attestation based on symmetric key algorithm
+set(SYMMETRIC_INITIAL_ATTESTATION ON)
# Disable all the test cases
set(REGRESSION False)