| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 1 | /** |
| 2 | * \file config-tfm.h |
| 3 | * |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 4 | * \brief TF-M medium profile, adapted to work on other platforms. |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 5 | */ |
| 6 | /* |
| 7 | * Copyright The Mbed TLS Contributors |
| Yanray Wang | 8636d47 | 2023-11-08 10:07:01 +0800 | [diff] [blame] | 8 | * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 9 | */ |
| 10 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 11 | /* TF-M medium profile: mbedtls legacy configuration */ |
| Yanray Wang | 4419d38 | 2023-09-07 11:28:27 +0800 | [diff] [blame] | 12 | #include "../configs/ext/tfm_mbedcrypto_config_profile_medium.h" |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 13 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 14 | /* TF-M medium profile: PSA crypto configuration */ |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 15 | #define MBEDTLS_PSA_CRYPTO_CONFIG_FILE "../configs/ext/crypto_config_profile_medium.h" |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 16 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 17 | /***********************************************************/ |
| 18 | /* Tweak the configuration to remove dependencies on TF-M. */ |
| 19 | /***********************************************************/ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 20 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 21 | /* MBEDTLS_PSA_CRYPTO_SPM needs third-party files, so disable it. */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 22 | #undef MBEDTLS_PSA_CRYPTO_SPM |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 23 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 24 | /* Use built-in platform entropy functions (TF-M provides its own). */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 25 | #undef MBEDTLS_NO_PLATFORM_ENTROPY |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 26 | |
| 27 | /* Disable buffer-based memory allocator. This isn't strictly required, |
| 28 | * but using the native allocator is faster and works better with |
| 29 | * memory management analysis frameworks such as ASan. */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 30 | #undef MBEDTLS_MEMORY_BUFFER_ALLOC_C |
| Dave Rodgman | 4edcf69 | 2023-11-15 12:23:29 +0000 | [diff] [blame^] | 31 | |
| 32 | // This macro is enabled in TFM Medium but is disabled here because it is |
| 33 | // incompatible with baremetal builds in Mbed TLS. |
| 34 | #undef MBEDTLS_PSA_CRYPTO_STORAGE_C |
| 35 | |
| 36 | // This macro is enabled in TFM Medium but is disabled here because it is |
| 37 | // incompatible with baremetal builds in Mbed TLS. |
| 38 | #undef MBEDTLS_ENTROPY_NV_SEED |
| 39 | |
| 40 | // These platform-related TF-M settings are not useful here. |
| 41 | #undef MBEDTLS_PLATFORM_NO_STD_FUNCTIONS |
| 42 | #undef MBEDTLS_PLATFORM_STD_MEM_HDR |
| 43 | #undef MBEDTLS_PLATFORM_SNPRINTF_MACRO |
| 44 | #undef MBEDTLS_PLATFORM_PRINTF_ALT |
| 45 | #undef MBEDTLS_PLATFORM_STD_EXIT_SUCCESS |
| 46 | #undef MBEDTLS_PLATFORM_STD_EXIT_FAILURE |
| 47 | |
| 48 | // We expect TF-M to pick this up soon |
| 49 | #define MBEDTLS_BLOCK_CIPHER_NO_DECRYPT |
| 50 | |
| 51 | /*********************************************************************** |
| 52 | * Local changes to crypto config below this delimiter |
| 53 | **********************************************************************/ |
| 54 | |
| 55 | /* Between Mbed TLS 3.4 and 3.5, the PSA_WANT_KEY_TYPE_RSA_KEY_PAIR macro |
| 56 | * (commented-out above) has been replaced with the following new macros: */ |
| 57 | //#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1 |
| 58 | //#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1 |
| 59 | //#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1 |
| 60 | //#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1 |
| 61 | //#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_DERIVE 1 /* Not supported */ |
| 62 | |
| 63 | /* Between Mbed TLS 3.4 and 3.5, the following macros have been added: */ |
| 64 | //#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC 1 |
| 65 | //#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT 1 |
| 66 | //#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT 1 |
| 67 | //#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE 1 |
| 68 | //#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE 1 // Not supported |