Crypto: Add config check for mbedtls
Add dependency configuration checks between tfm crypto service
switch and mbedcrypto switch.
Change-Id: I86c516fcf486f68ef7571516437a057c1f7085aa
Signed-off-by: Summer Qin <summer.qin@arm.com>
diff --git a/secure_fw/partitions/crypto/crypto_check_config.h b/secure_fw/partitions/crypto/crypto_check_config.h
new file mode 100644
index 0000000..a763be6
--- /dev/null
+++ b/secure_fw/partitions/crypto/crypto_check_config.h
@@ -0,0 +1,71 @@
+/*
+ * Copyright (c) 2022, Arm Limited. All rights reserved.
+ *
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ */
+#ifndef __CRYPTO_CHECK_CONFIG_H__
+#define __CRYPTO_CHECK_CONFIG_H__
+
+#if !defined(TFM_CRYPTO_RNG_MODULE_DISABLED) && \
+ (!defined(MBEDTLS_CTR_DRBG_C) && \
+ !defined(MBEDTLS_HMAC_DRBG_C) && \
+ !defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG))
+#error "TFM_CRYPTO_RNG_MODULE enables, but not all prerequisites (missing RNG)!"
+#endif
+
+#if !defined(TFM_CRYPTO_AEAD_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_ALG_CCM) && !defined(PSA_WANT_ALG_GCM) && \
+ !defined(PSA_WANT_ALG_CHACHA20_POLY1305))
+#error "TFM_CRYPTO_AEAD_MODULE enables, but not all prerequisites (missing AEAD algorithms)!"
+#endif
+
+#if !defined(TFM_CRYPTO_MAC_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_ALG_CMAC) && !defined(PSA_WANT_ALG_HMAC))
+#error "TFM_CRYPTO_MAC_MODULE enables, but not all prerequisites (missing MAC algorithms)!"
+#endif
+
+#if !defined(TFM_CRYPTO_CIPHER_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_KEY_TYPE_AES) && \
+ !defined(PSA_WANT_KEY_TYPE_CHACHA20) && \
+ !defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
+ !defined(PSA_WANT_ALG_CBC_PKCS7) && \
+ !defined(PSA_WANT_ALG_CCM) && \
+ !defined(PSA_WANT_ALG_GCM))
+#error "TFM_CRYPTO_CIPHER_MODULE enables, but not all prerequisites (missing CIPHER algorithms)!"
+#endif
+
+#if !defined(TFM_CRYPTO_HASH_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_ALG_RIPEMD160) && \
+ !defined(PSA_WANT_ALG_SHA_224) && \
+ !defined(PSA_WANT_ALG_SHA_256) && \
+ !defined(PSA_WANT_ALG_SHA_384) && \
+ !defined(PSA_WANT_ALG_SHA_512))
+#error "TFM_CRYPTO_HASH_MODULE enables, but not all prerequisites (missing HASH algorithms)!"
+#endif
+
+#if !defined(TFM_CRYPTO_ASYM_SIGN_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) && \
+ !defined(PSA_WANT_ALG_RSA_PSS) && \
+ !defined(PSA_WANT_ALG_ECDSA) && \
+ !defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA))
+#error "TFM_CRYPTO_ASYM_SIGN_MODULE enables, but not all prerequisites \
+(missing asymmetric sign algorithms)!"
+#endif
+
+#if !defined(TFM_CRYPTO_ASYM_ENCRYPT_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT) && \
+ !defined(PSA_WANT_ALG_RSA_OAEP))
+#error "TFM_CRYPTO_ASYM_ENCRYPT_MODULE enables, but not all prerequisites \
+(missing asymmetric encryption algorithms)!"
+#endif
+
+#if !defined(TFM_CRYPTO_KEY_DERIVATION_MODULE_DISABLED) && \
+ (!defined(PSA_WANT_ALG_HKDF) && \
+ !defined(PSA_WANT_ALG_TLS12_PRF) && \
+ !defined(PSA_WANT_ALG_TLS12_PSK_TO_MS))
+#error "TFM_CRYPTO_KEY_DERIVATION_MODULE_DISABLED enables, but not all prerequisites \
+(missing key derivation algorithms)!"
+#endif
+
+#endif /* __CRYPTO_CHECK_CONFIG_H__ */
diff --git a/secure_fw/partitions/crypto/crypto_init.c b/secure_fw/partitions/crypto/crypto_init.c
index 6a27117..a13348e 100644
--- a/secure_fw/partitions/crypto/crypto_init.c
+++ b/secure_fw/partitions/crypto/crypto_init.c
@@ -11,6 +11,7 @@
#include "tfm_crypto_api.h"
#include "tfm_crypto_defs.h"
#include "tfm_sp_log.h"
+#include "crypto_check_config.h"
/*
* \brief This Mbed TLS include is needed to initialise the memory allocator