commit 82e57d1611877b7d27f7194cb34528b8eca54ea2
author Gilles Peskine <Gilles.Peskine@arm.com> Fri Nov 13 21:31:17 2020 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Mon Nov 23 17:42:54 2020 +0100
tree c8a8b79805d85ce265fef1e9196268acd2553d2c
parent 4fc21fdeb6ecff1165b1a7e77cea5676b8058ee0

PSA: support HMAC_DRBG

Support using HMAC_DRBG instead of CTR_DRBG in the PSA subsystem.

Use HMAC_DRBG if CTR_DRBG is available. Choose between SHA-256 and
SHA-512 based on availability.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

include/mbedtls/config.h

diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 58d7807..c022a61 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -3146,6 +3146,7 @@
  * Module:  library/psa_crypto.c
  *
  * Requires: either MBEDTLS_CTR_DRBG_C and MBEDTLS_ENTROPY_C,
+ *           or MBEDTLS_HMAC_DRBG_C and MBEDTLS_ENTROPY_C,
  *           or MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG.
  *
  */