commit 24273c06db37ad4fa67cf15b0b5df8645c0fab65
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Jul 16 22:27:09 2025 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Sep 24 17:20:35 2025 +0200
tree e39898c4a3e6a8fa3c96355150d5481c8fb5cc95
parent 24d058bc6c09118d897cef42c0a7f91fbdbd3b07

Checks for crypto options or internal macros set in mbedtls

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

scripts/generate_config_checks.py

diff --git a/scripts/generate_config_checks.py b/scripts/generate_config_checks.py
index b0dc26b..c5d8054 100755
--- a/scripts/generate_config_checks.py
+++ b/scripts/generate_config_checks.py
@@ -7,11 +7,19 @@
 from mbedtls_framework.config_checks_generator import * \
     #pylint: disable=wildcard-import,unused-wildcard-import
 
+class CryptoInternal(SubprojectInternal):
+    SUBPROJECT = 'TF-PSA-Crypto'
+
+class CryptoOption(SubprojectOption):
+    SUBPROJECT = 'psa/crypto_config.h'
+
 MBEDTLS_CHECKS = BranchData(
     header_directory='library',
     header_prefix='mbedtls_',
     project_cpp_prefix='MBEDTLS',
     checkers=[
+        CryptoInternal('MBEDTLS_MD5_C', 'PSA_WANT_ALG_MD5 in psa/crypto_config.h'),
+        CryptoOption('MBEDTLS_BASE64_C'),
         Removed('MBEDTLS_KEY_EXCHANGE_RSA_ENABLED', 'Mbed TLS 4.0'),
         Removed('MBEDTLS_PADLOCK_C', 'Mbed TLS 4.0'),
     ],