| Jianliang Shen | f6d1fab | 2023-02-20 14:57:53 +0800 | [diff] [blame] | 1 | #------------------------------------------------------------------------------- |
| 2 | # Copyright (c) 2023, Arm Limited. All rights reserved. |
| 3 | # |
| 4 | # SPDX-License-Identifier: BSD-3-Clause |
| 5 | # |
| 6 | #------------------------------------------------------------------------------- |
| 7 | |
| 8 | config TFM_CODE_SHARING |
| 9 | bool "Enable code sharing between MCUboot and secure firmware" |
| 10 | #FIXME: Shall check IAR |
| 11 | default n |
| 12 | depends on !CRYPTO_HW_ACCELERATOR |
| 13 | help |
| 14 | This feature is only officially tested on AN521 and Musca-B1 platforms. |
| 15 | |
| 16 | ################################# NS ########################################### |
| 17 | |
| 18 | menu "NS support" |
| 19 | config NS |
| 20 | bool "NS app" |
| 21 | default y |
| 22 | |
| 23 | config TFM_NS_MANAGE_NSID |
| 24 | bool "Support NSPE OS providing NSPE client_id" |
| 25 | depends on !TFM_MULTI_CORE_TOPOLOGY |
| 26 | help |
| 27 | An NSPE client_id is provided by the NSPE OS via the SPM or directly |
| 28 | by the SPM. When `TFM_NS_MANAGE_NSID` is `ON`, TF-M supports NSPE OS |
| 29 | providing NSPE client_id. |
| 30 | |
| 31 | config NS_EVALUATION_APP_PATH |
| 32 | string "Path to TFM NS Evaluation Application" |
| 33 | default "" |
| 34 | endmenu |
| 35 | |
| 36 | ################################# Mbedcrypto ################################### |
| 37 | |
| 38 | menu "Mbedcrypto profile" |
| 39 | |
| 40 | config MBEDCRYPTO_BUILD_TYPE |
| 41 | string "Mbedcrypto build type" |
| 42 | default "$(CMAKE_BUILD_TYPE)" |
| 43 | |
| 44 | config TFM_MBEDCRYPTO_CONFIG_PATH |
| 45 | string "Mbedtls config path" |
| 46 | default "$(TFM_SOURCE_DIR)/lib/ext/mbedcrypto/mbedcrypto_config/tfm_mbedcrypto_config_default.h" |
| 47 | help |
| 48 | Config to use for Mbed Crypto. For increased flexibility when |
| 49 | pointing to a file, set the type of this setting to 'STRING' by |
| 50 | passing the :<type> portion when specifying the setting value in |
| 51 | the command line. E.g. |
| 52 | '-DTFM_MBEDCRYPTO_CONFIG_PATH:STRING=some_file_which_is_generated.h' |
| 53 | This can be useful if the config file is generated and placed |
| 54 | inside a directory already added to the include path of mbedtls. |
| 55 | |
| 56 | config TFM_MBEDCRYPTO_PSA_CRYPTO_CONFIG_PATH |
| 57 | string "Mbedtls psa crypto config path" |
| 58 | default "$(TFM_SOURCE_DIR)/lib/ext/mbedcrypto/mbedcrypto_config/crypto_config_default.h" |
| 59 | help |
| 60 | Config to use psa crypto setting for Mbed Crypto |
| 61 | |
| 62 | config TFM_MBEDCRYPTO_PLATFORM_EXTRA_CONFIG_PATH |
| 63 | string "Mbedtls platform crypto config path" |
| 64 | default "" |
| 65 | help |
| 66 | Config to append to standard Mbed Crypto config, used by platforms |
| 67 | to configure feature support |
| 68 | |
| 69 | endmenu |
| 70 | |
| 71 | ################################# Manifest ##################################### |
| 72 | |
| Jianliang Shen | f6d1fab | 2023-02-20 14:57:53 +0800 | [diff] [blame] | 73 | config TFM_MANIFEST_LIST |
| 74 | string "TF-M native Secure Partition manifests list file" |
| 75 | default "$(TFM_SOURCE_DIR)/tools/tfm_manifest_list.yaml" |
| 76 | help |
| 77 | TF-M native Secure Partition manifests list file |