blob: ce34386a210a77dbfac8253742da5ea880cd2d89 [file] [log] [blame]
John Durkop6e33dbe2020-09-17 21:15:13 -07001/**
2 * \file mbedtls/config_psa.h
3 * \brief PSA crypto configuration options (set of defines)
4 *
John Durkop34818822020-10-12 21:36:22 -07005 * This set of compile-time options takes settings defined in
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02006 * include/mbedtls/mbedtls_config.h and include/psa/crypto_config.h and uses
John Durkop34818822020-10-12 21:36:22 -07007 * those definitions to define symbols used in the library code.
8 *
9 * Users and integrators should not edit this file, please edit
Tom Cosgrove1797b052022-12-04 17:19:59 +000010 * include/mbedtls/mbedtls_config.h for MBEDTLS_XXX settings or
John Durkop34818822020-10-12 21:36:22 -070011 * include/psa/crypto_config.h for PSA_WANT_XXX settings.
John Durkop6e33dbe2020-09-17 21:15:13 -070012 */
13/*
14 * Copyright The Mbed TLS Contributors
15 * SPDX-License-Identifier: Apache-2.0
16 *
17 * Licensed under the Apache License, Version 2.0 (the "License"); you may
18 * not use this file except in compliance with the License.
19 * You may obtain a copy of the License at
20 *
21 * http://www.apache.org/licenses/LICENSE-2.0
22 *
23 * Unless required by applicable law or agreed to in writing, software
24 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
25 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
26 * See the License for the specific language governing permissions and
27 * limitations under the License.
28 */
29
30#ifndef MBEDTLS_CONFIG_PSA_H
31#define MBEDTLS_CONFIG_PSA_H
32
John Durkop714e3a12020-09-29 22:07:04 -070033#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010034#if defined(MBEDTLS_PSA_CRYPTO_CONFIG_FILE)
35#include MBEDTLS_PSA_CRYPTO_CONFIG_FILE
36#else
John Durkop6e33dbe2020-09-17 21:15:13 -070037#include "psa/crypto_config.h"
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010038#endif
John Durkop76228ac2020-09-29 22:33:49 -070039#endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
John Durkop6e33dbe2020-09-17 21:15:13 -070040
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010041#if defined(MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE)
42#include MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE
43#endif
44
Valerio Settib7ef51a2023-06-06 14:32:58 +020045#include "psa/crypto_legacy.h"
46
John Durkop6e33dbe2020-09-17 21:15:13 -070047#ifdef __cplusplus
48extern "C" {
49#endif
50
Gilles Peskine1231eb52021-04-19 22:24:23 +020051
52
53/****************************************************************/
54/* De facto synonyms */
55/****************************************************************/
56
57#if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA)
58#define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY
59#elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA)
60#define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA
61#endif
62
Gilles Peskine08622b62022-03-15 16:40:59 +010063#if defined(PSA_WANT_ALG_CCM_STAR_NO_TAG) && !defined(PSA_WANT_ALG_CCM)
64#define PSA_WANT_ALG_CCM PSA_WANT_ALG_CCM_STAR_NO_TAG
65#elif !defined(PSA_WANT_ALG_CCM_STAR_NO_TAG) && defined(PSA_WANT_ALG_CCM)
66#define PSA_WANT_ALG_CCM_STAR_NO_TAG PSA_WANT_ALG_CCM
67#endif
68
Gilles Peskine1231eb52021-04-19 22:24:23 +020069#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
70#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW
71#elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
72#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN
73#endif
74
Gilles Peskine44c96aa2021-10-04 18:33:56 +020075#if defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && !defined(PSA_WANT_ALG_RSA_PSS)
76#define PSA_WANT_ALG_RSA_PSS PSA_WANT_ALG_RSA_PSS_ANY_SALT
77#elif !defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && defined(PSA_WANT_ALG_RSA_PSS)
78#define PSA_WANT_ALG_RSA_PSS_ANY_SALT PSA_WANT_ALG_RSA_PSS
79#endif
80
Gilles Peskine1231eb52021-04-19 22:24:23 +020081
Manuel Pégourié-Gonnard235a9332023-03-14 18:01:23 +010082/****************************************************************/
83/* Hashes that are built in are also enabled in PSA.
84 * This simplifies dependency declarations especially
85 * for modules that obey MBEDTLS_USE_PSA_CRYPTO. */
86/****************************************************************/
87
88#if defined(MBEDTLS_MD5_C)
89#define PSA_WANT_ALG_MD5 1
90#endif
91
92#if defined(MBEDTLS_RIPEMD160_C)
93#define PSA_WANT_ALG_RIPEMD160 1
94#endif
95
96#if defined(MBEDTLS_SHA1_C)
97#define PSA_WANT_ALG_SHA_1 1
98#endif
99
100#if defined(MBEDTLS_SHA224_C)
101#define PSA_WANT_ALG_SHA_224 1
102#endif
103
104#if defined(MBEDTLS_SHA256_C)
105#define PSA_WANT_ALG_SHA_256 1
106#endif
107
108#if defined(MBEDTLS_SHA384_C)
109#define PSA_WANT_ALG_SHA_384 1
110#endif
111
112#if defined(MBEDTLS_SHA512_C)
113#define PSA_WANT_ALG_SHA_512 1
114#endif
115
Gilles Peskine1231eb52021-04-19 22:24:23 +0200116
117/****************************************************************/
118/* Require built-in implementations based on PSA requirements */
119/****************************************************************/
120
John Durkop2dfaf9c2020-09-24 04:30:10 -0700121#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
John Durkopd8959392020-09-20 23:09:17 -0700122
John Durkopd62b6782020-11-30 21:06:05 -0800123#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
124#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
125#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
126#define MBEDTLS_ECDSA_DETERMINISTIC
127#define MBEDTLS_ECDSA_C
128#define MBEDTLS_HMAC_DRBG_C
129#define MBEDTLS_MD_C
130#endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
131#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
132
133#if defined(PSA_WANT_ALG_ECDH)
134#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
135#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
136#define MBEDTLS_ECDH_C
137#define MBEDTLS_ECP_C
138#define MBEDTLS_BIGNUM_C
139#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */
140#endif /* PSA_WANT_ALG_ECDH */
141
142#if defined(PSA_WANT_ALG_ECDSA)
143#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
144#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
145#define MBEDTLS_ECDSA_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200146#define MBEDTLS_ECP_C
147#define MBEDTLS_BIGNUM_C
148#define MBEDTLS_ASN1_PARSE_C
149#define MBEDTLS_ASN1_WRITE_C
John Durkopd62b6782020-11-30 21:06:05 -0800150#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
151#endif /* PSA_WANT_ALG_ECDSA */
152
Przemek Stekiel84ee3e22022-12-01 14:22:34 +0100153#if defined(PSA_WANT_ALG_FFDH)
154#if !defined(MBEDTLS_PSA_ACCEL_ALG_FFDH)
155#define MBEDTLS_PSA_BUILTIN_ALG_FFDH 1
Przemek Stekiel84ee3e22022-12-01 14:22:34 +0100156#define MBEDTLS_BIGNUM_C
157#endif /* !MBEDTLS_PSA_ACCEL_ALG_FFDH */
158#endif /* PSA_WANT_ALG_FFDH */
159
John Durkopd62b6782020-11-30 21:06:05 -0800160#if defined(PSA_WANT_ALG_HKDF)
161#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
162#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
163#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
164#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
165#endif /* PSA_WANT_ALG_HKDF */
166
Przemek Stekiel3e8249c2022-06-03 14:05:07 +0200167#if defined(PSA_WANT_ALG_HKDF_EXTRACT)
168#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT)
169#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
170#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
171#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT */
172#endif /* PSA_WANT_ALG_HKDF_EXTRACT */
173
174#if defined(PSA_WANT_ALG_HKDF_EXPAND)
175#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND)
176#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
177#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
178#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND */
179#endif /* PSA_WANT_ALG_HKDF_EXPAND */
180
John Durkopd62b6782020-11-30 21:06:05 -0800181#if defined(PSA_WANT_ALG_HMAC)
182#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
183#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
184#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
185#endif /* PSA_WANT_ALG_HMAC */
186
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100187#if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
188#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
189#define MBEDTLS_MD5_C
190#endif
191
Neil Armstronga557cb82022-06-10 08:58:32 +0200192#if defined(PSA_WANT_ALG_JPAKE)
Przemek Stekiel4aa99402023-02-27 13:00:57 +0100193#if !defined(MBEDTLS_PSA_ACCEL_ALG_JPAKE)
Neil Armstrong637d0a02022-05-25 11:28:22 +0200194#define MBEDTLS_PSA_BUILTIN_PAKE 1
Neil Armstronga557cb82022-06-10 08:58:32 +0200195#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
Neil Armstronged407822022-06-15 11:21:33 +0200196#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
Neil Armstrong637d0a02022-05-25 11:28:22 +0200197#define MBEDTLS_BIGNUM_C
198#define MBEDTLS_ECP_C
Neil Armstrong637d0a02022-05-25 11:28:22 +0200199#define MBEDTLS_ECJPAKE_C
Przemek Stekiel4aa99402023-02-27 13:00:57 +0100200#endif /* MBEDTLS_PSA_ACCEL_ALG_JPAKE */
Neil Armstronga557cb82022-06-10 08:58:32 +0200201#endif /* PSA_WANT_ALG_JPAKE */
Neil Armstrong637d0a02022-05-25 11:28:22 +0200202
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100203#if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
204#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
205#define MBEDTLS_RIPEMD160_C
206#endif
207
John Durkopd62b6782020-11-30 21:06:05 -0800208#if defined(PSA_WANT_ALG_RSA_OAEP)
209#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
210#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
211#define MBEDTLS_RSA_C
212#define MBEDTLS_BIGNUM_C
213#define MBEDTLS_OID_C
214#define MBEDTLS_PKCS1_V21
John Durkopd62b6782020-11-30 21:06:05 -0800215#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
216#endif /* PSA_WANT_ALG_RSA_OAEP */
217
218#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
219#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
220#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
221#define MBEDTLS_RSA_C
222#define MBEDTLS_BIGNUM_C
223#define MBEDTLS_OID_C
224#define MBEDTLS_PKCS1_V15
225#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
226#endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
227
228#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
229#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
230#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
231#define MBEDTLS_RSA_C
232#define MBEDTLS_BIGNUM_C
233#define MBEDTLS_OID_C
234#define MBEDTLS_PKCS1_V15
John Durkopd62b6782020-11-30 21:06:05 -0800235#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
236#endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
237
238#if defined(PSA_WANT_ALG_RSA_PSS)
239#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
240#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
241#define MBEDTLS_RSA_C
242#define MBEDTLS_BIGNUM_C
243#define MBEDTLS_OID_C
244#define MBEDTLS_PKCS1_V21
John Durkopd62b6782020-11-30 21:06:05 -0800245#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
246#endif /* PSA_WANT_ALG_RSA_PSS */
247
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100248#if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
249#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
250#define MBEDTLS_SHA1_C
251#endif
252
253#if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
254#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200255#define MBEDTLS_SHA224_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100256#endif
257
258#if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
259#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
260#define MBEDTLS_SHA256_C
261#endif
262
263#if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
264#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200265#define MBEDTLS_SHA384_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100266#endif
267
268#if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
269#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
270#define MBEDTLS_SHA512_C
271#endif
272
Kusumit Ghoderao83baf892023-05-03 11:42:29 +0530273#if defined(PSA_WANT_ALG_PBKDF2_HMAC)
274#if !defined(MBEDTLS_PSA_ACCEL_ALG_PBKDF2_HMAC)
275#define MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC 1
Kusumit Ghoderao105f7722023-07-27 21:03:06 +0530276#define PSA_HAVE_SOFT_PBKDF2_HMAC
Kusumit Ghoderaob9410e82023-05-03 18:36:35 +0530277#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
Kusumit Ghoderao83baf892023-05-03 11:42:29 +0530278#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
Kusumit Ghoderaob9410e82023-05-03 18:36:35 +0530279#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
Kusumit Ghoderao83baf892023-05-03 11:42:29 +0530280#endif /* !MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC */
281#endif /* PSA_WANT_ALG_PBKDF2_HMAC */
282
John Durkop07cc04a2020-11-16 22:08:34 -0800283#if defined(PSA_WANT_ALG_TLS12_PRF)
284#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
John Durkopd62b6782020-11-30 21:06:05 -0800285#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
John Durkop07cc04a2020-11-16 22:08:34 -0800286#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
287#endif /* PSA_WANT_ALG_TLS12_PRF */
288
289#if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
290#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
John Durkopd62b6782020-11-30 21:06:05 -0800291#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
John Durkop07cc04a2020-11-16 22:08:34 -0800292#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
293#endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
294
Andrzej Kurek08d34b82022-07-29 10:00:16 -0400295#if defined(PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS)
296#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS)
297#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
298#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS */
299#endif /* PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS */
300
Valerio Setti4520a8f2023-06-13 12:34:12 +0200301#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200302#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200303#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT)
304#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
305#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT */
306#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT */
307
308#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200309#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200310#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
311#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT 1
312#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT */
313#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT */
314
315#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200316#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200317#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
318#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
319#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE */
320#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE */
321
322#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200323#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200324#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
325#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_DERIVE 1
326#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE */
327#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE */
328
Valerio Setti01cc88a2023-06-15 11:53:08 +0200329#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC)
Valerio Settiaac957b2023-06-09 16:59:00 +0200330#define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
Valerio Setti01cc88a2023-06-15 11:53:08 +0200331#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC)
332#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
333#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC */
334#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC */
John Durkop07cc04a2020-11-16 22:08:34 -0800335
Valerio Setti4520a8f2023-06-13 12:34:12 +0200336#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200337#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200338#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_IMPORT)
339#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
340#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_IMPORT */
341#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200342
Valerio Setti4520a8f2023-06-13 12:34:12 +0200343#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200344#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200345#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_EXPORT)
346#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
347#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_EXPORT */
348#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200349
Valerio Setti4520a8f2023-06-13 12:34:12 +0200350#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200351#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200352#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
353#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
354#define MBEDTLS_GENPRIME
355#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_GENERATE */
356#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200357
Valerio Setti01cc88a2023-06-15 11:53:08 +0200358#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC)
Valerio Settiaac957b2023-06-09 16:59:00 +0200359#define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
Valerio Setti01cc88a2023-06-15 11:53:08 +0200360#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_BASIC)
361#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
362#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_BASIC */
363#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200364
Valerio Setti4520a8f2023-06-13 12:34:12 +0200365#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200366#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200367#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_IMPORT)
368#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
369#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_IMPORT */
370#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200371
Valerio Setti4520a8f2023-06-13 12:34:12 +0200372#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200373#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200374#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_EXPORT)
375#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
376#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_EXPORT */
377#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200378
Valerio Setti4520a8f2023-06-13 12:34:12 +0200379#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200380#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC 1
Valerio Setti4520a8f2023-06-13 12:34:12 +0200381#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_GENERATE)
382#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
383#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_GENERATE */
384#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200385
Valerio Setti01cc88a2023-06-15 11:53:08 +0200386#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC)
Valerio Settiaac957b2023-06-09 16:59:00 +0200387#define PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY 1
Valerio Setti01cc88a2023-06-15 11:53:08 +0200388#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_BASIC)
389#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_BASIC 1
390#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_BASIC */
391#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC */
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200392
John Durkop07cc04a2020-11-16 22:08:34 -0800393#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
394#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800395#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
John Durkop07cc04a2020-11-16 22:08:34 -0800396#define MBEDTLS_ECP_C
397#define MBEDTLS_BIGNUM_C
398#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */
399#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
400
Przemek Stekiel6d85afa2023-04-28 11:42:17 +0200401#if defined(PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY)
402#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_PUBLIC_KEY)
403#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_PUBLIC_KEY 1
Przemek Stekiel87d9a4a2022-12-15 13:22:11 +0100404#define MBEDTLS_BIGNUM_C
Przemek Stekiel6d85afa2023-04-28 11:42:17 +0200405#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_PUBLIC_KEY */
406#endif /* PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY */
Przemek Stekiel87d9a4a2022-12-15 13:22:11 +0100407
John Durkop9814fa22020-11-04 12:28:15 -0800408#if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkop0e005192020-10-31 22:06:54 -0700409#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800410#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
John Durkop0e005192020-10-31 22:06:54 -0700411#define MBEDTLS_RSA_C
412#define MBEDTLS_BIGNUM_C
413#define MBEDTLS_OID_C
John Durkop07cc04a2020-11-16 22:08:34 -0800414#define MBEDTLS_PK_PARSE_C
415#define MBEDTLS_PK_WRITE_C
416#define MBEDTLS_PK_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200417#define MBEDTLS_ASN1_PARSE_C
418#define MBEDTLS_ASN1_WRITE_C
John Durkop0e005192020-10-31 22:06:54 -0700419#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkop9814fa22020-11-04 12:28:15 -0800420#endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkopd0321952020-10-29 21:37:36 -0700421
David Brownb781f752021-02-08 15:44:52 -0700422/* If any of the block modes are requested that don't have an
423 * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
424 * in the block cipher key types. */
425#if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
Bence Szépkúti7921cce2021-02-17 11:46:50 +0100426 (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700427 (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700428 defined(PSA_WANT_ALG_ECB_NO_PADDING) || \
429 (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100430 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
David Brownb781f752021-02-08 15:44:52 -0700431 (defined(PSA_WANT_ALG_CBC_PKCS7) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100432 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100433 (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
David Brownb781f752021-02-08 15:44:52 -0700434#define PSA_HAVE_SOFT_BLOCK_MODE 1
435#endif
436
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100437#if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
438 (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
439#define PSA_HAVE_SOFT_BLOCK_AEAD 1
440#endif
441
David Brown94933082021-01-05 12:03:25 -0700442#if defined(PSA_WANT_KEY_TYPE_AES)
David Browne1f91f02021-02-09 15:56:22 -0700443#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
444#define PSA_HAVE_SOFT_KEY_TYPE_AES 1
445#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
446#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100447 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
448 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700449#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700450#define MBEDTLS_AES_C
David Browne1f91f02021-02-09 15:56:22 -0700451#endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown94933082021-01-05 12:03:25 -0700452#endif /* PSA_WANT_KEY_TYPE_AES */
453
Gilles Peskine09c46da2021-10-08 15:48:16 +0200454#if defined(PSA_WANT_KEY_TYPE_ARIA)
455#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA)
456#define PSA_HAVE_SOFT_KEY_TYPE_ARIA 1
457#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA */
458#if defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
459 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
460 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
461#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
462#define MBEDTLS_ARIA_C
463#endif /* PSA_HAVE_SOFT_KEY_TYPE_ARIA || PSA_HAVE_SOFT_BLOCK_MODE */
464#endif /* PSA_WANT_KEY_TYPE_ARIA */
465
David Brown686e6e82021-01-05 12:03:25 -0700466#if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
David Browne1f91f02021-02-09 15:56:22 -0700467#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
468#define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
469#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
470#if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100471 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
472 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700473#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700474#define MBEDTLS_CAMELLIA_C
David Browne1f91f02021-02-09 15:56:22 -0700475#endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown686e6e82021-01-05 12:03:25 -0700476#endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
477
David Brownb65a7f72021-01-15 12:04:09 -0700478#if defined(PSA_WANT_KEY_TYPE_DES)
David Browne1f91f02021-02-09 15:56:22 -0700479#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
480#define PSA_HAVE_SOFT_KEY_TYPE_DES 1
481#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
482#if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
David Brownb781f752021-02-08 15:44:52 -0700483 defined(PSA_HAVE_SOFT_BLOCK_MODE)
David Brown78a429b2021-01-21 09:48:57 -0700484#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700485#define MBEDTLS_DES_C
David Browne1f91f02021-02-09 15:56:22 -0700486#endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brownb65a7f72021-01-15 12:04:09 -0700487#endif /* PSA_WANT_KEY_TYPE_DES */
488
David Brownb16727a2021-02-08 16:31:46 -0700489#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
490#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20)
491#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
492#define MBEDTLS_CHACHA20_C
493#endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */
494#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
495
David Brownf84a0f62021-02-09 15:59:41 -0700496/* If any of the software block ciphers are selected, define
497 * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
498 * situations. */
499#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200500 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
David Brownf84a0f62021-02-09 15:59:41 -0700501 defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
502 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
503#define PSA_HAVE_SOFT_BLOCK_CIPHER 1
504#endif
505
David Brown99844272021-01-15 12:04:47 -0700506#if defined(PSA_WANT_ALG_STREAM_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700507#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brown99844272021-01-15 12:04:47 -0700508#endif /* PSA_WANT_ALG_STREAM_CIPHER */
509
Ronald Crond85e98d2021-03-25 15:32:32 +0100510#if defined(PSA_WANT_ALG_CBC_MAC)
511#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
512#error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
513#define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
514#endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
515#endif /* PSA_WANT_ALG_CBC_MAC */
516
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100517#if defined(PSA_WANT_ALG_CMAC)
518#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
519 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
520#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
521#define MBEDTLS_CMAC_C
522#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
Kusumit Ghoderaoce38db12023-07-27 21:01:03 +0530523#endif /* PSA_WANT_ALG_CMAC */
524
Kusumit Ghoderaob3042c32023-06-27 10:39:47 +0530525#if defined(PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128)
526#if !defined(MBEDTLS_PSA_ACCEL_ALG_PBKDF2_AES_CMAC_PRF_128)
527#define MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_AES_CMAC_PRF_128 1
Kusumit Ghoderao105f7722023-07-27 21:03:06 +0530528#define PSA_HAVE_SOFT_PBKDF2_CMAC
Kusumit Ghoderaoce38db12023-07-27 21:01:03 +0530529#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
530#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
531#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
532#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC)
533#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
534#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
Kusumit Ghoderaob3042c32023-06-27 10:39:47 +0530535#endif /* !MBEDTLS_PSA_ACCEL_ALG_PBKDF2_AES_CMAC_PRF_128 */
536#endif /* PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128 */
Kusumit Ghoderaoce38db12023-07-27 21:01:03 +0530537
Kusumit Ghoderao105f7722023-07-27 21:03:06 +0530538#if defined(PSA_HAVE_SOFT_PBKDF2_HMAC) || \
539 defined(PSA_HAVE_SOFT_PBKDF2_CMAC)
540#define PSA_HAVE_SOFT_PBKDF2 1
541#endif /* PSA_HAVE_SOFT_PBKDF2_HMAC || PSA_HAVE_SOFT_PBKDF2_CMAC */
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100542
David Brown99844272021-01-15 12:04:47 -0700543#if defined(PSA_WANT_ALG_CTR)
David Brown4b9ec7a2021-02-05 12:47:08 -0700544#if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
David Brownf84a0f62021-02-09 15:59:41 -0700545 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700546#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700547#define MBEDTLS_CIPHER_MODE_CTR
David Brown4b9ec7a2021-02-05 12:47:08 -0700548#endif
David Brown99844272021-01-15 12:04:47 -0700549#endif /* PSA_WANT_ALG_CTR */
550
551#if defined(PSA_WANT_ALG_CFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700552#if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700553 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700554#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700555#define MBEDTLS_CIPHER_MODE_CFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700556#endif
David Brown99844272021-01-15 12:04:47 -0700557#endif /* PSA_WANT_ALG_CFB */
558
559#if defined(PSA_WANT_ALG_OFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700560#if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700561 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700562#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700563#define MBEDTLS_CIPHER_MODE_OFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700564#endif
David Brown99844272021-01-15 12:04:47 -0700565#endif /* PSA_WANT_ALG_OFB */
566
Gilles Peskine7a2e83b2022-03-17 11:09:23 +0100567#if defined(PSA_WANT_ALG_ECB_NO_PADDING) && \
568 !defined(MBEDTLS_PSA_ACCEL_ALG_ECB_NO_PADDING)
David Brownbe380c12021-02-11 10:55:48 -0700569#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700570#endif
571
David Brown12f45f92021-01-26 11:50:36 -0700572#if defined(PSA_WANT_ALG_CBC_NO_PADDING)
David Brown4b9ec7a2021-02-05 12:47:08 -0700573#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
David Brownfc468182021-02-09 16:23:34 -0700574 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700575#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700576#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown4b9ec7a2021-02-05 12:47:08 -0700577#endif
David Brown12f45f92021-01-26 11:50:36 -0700578#endif /* PSA_WANT_ALG_CBC_NO_PADDING */
579
580#if defined(PSA_WANT_ALG_CBC_PKCS7)
David Brown4b9ec7a2021-02-05 12:47:08 -0700581#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
David Brownfc468182021-02-09 16:23:34 -0700582 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700583#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700584#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brownfc468182021-02-09 16:23:34 -0700585#define MBEDTLS_CIPHER_PADDING_PKCS7
David Brown4b9ec7a2021-02-05 12:47:08 -0700586#endif
David Brown12f45f92021-01-26 11:50:36 -0700587#endif /* PSA_WANT_ALG_CBC_PKCS7 */
588
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100589#if defined(PSA_WANT_ALG_CCM)
590#if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
591 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200592 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100593 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
594#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100595#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100596#define MBEDTLS_CCM_C
597#endif
598#endif /* PSA_WANT_ALG_CCM */
599
600#if defined(PSA_WANT_ALG_GCM)
601#if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
602 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200603 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100604 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
605#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
606#define MBEDTLS_GCM_C
607#endif
608#endif /* PSA_WANT_ALG_GCM */
609
David Brownac4fa072021-02-08 16:47:35 -0700610#if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200611#if !defined(MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305)
David Brownac4fa072021-02-08 16:47:35 -0700612#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
613#define MBEDTLS_CHACHAPOLY_C
Summer Qin9f2596f2022-06-17 12:50:32 +0800614#define MBEDTLS_CHACHA20_C
615#define MBEDTLS_POLY1305_C
David Brown86730a82021-02-09 16:24:11 -0700616#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700617#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200618#endif /* !MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305 */
David Brownac4fa072021-02-08 16:47:35 -0700619#endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
620
David Browneed74df2021-03-15 15:53:57 -0600621#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
622#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
623#define MBEDTLS_ECP_DP_BP256R1_ENABLED
624#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
625#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */
626#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
627
628#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
629#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
630#define MBEDTLS_ECP_DP_BP384R1_ENABLED
631#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
632#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */
633#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
634
635#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
636#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
637#define MBEDTLS_ECP_DP_BP512R1_ENABLED
638#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
639#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */
640#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
641
642#if defined(PSA_WANT_ECC_MONTGOMERY_255)
643#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
644#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
645#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
646#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */
647#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
648
649#if defined(PSA_WANT_ECC_MONTGOMERY_448)
650#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
651#define MBEDTLS_ECP_DP_CURVE448_ENABLED
652#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
653#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */
654#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
655
David Brownc7b9b2b2021-02-19 21:05:52 -0700656#if defined(PSA_WANT_ECC_SECP_R1_192)
657#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
658#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
659#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
660#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */
661#endif /* PSA_WANT_ECC_SECP_R1_192 */
662
663#if defined(PSA_WANT_ECC_SECP_R1_224)
664#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
665#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
666#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
667#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */
668#endif /* PSA_WANT_ECC_SECP_R1_224 */
669
670#if defined(PSA_WANT_ECC_SECP_R1_256)
671#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
672#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
673#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
674#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */
675#endif /* PSA_WANT_ECC_SECP_R1_256 */
676
677#if defined(PSA_WANT_ECC_SECP_R1_384)
678#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
679#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
680#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
681#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */
682#endif /* PSA_WANT_ECC_SECP_R1_384 */
683
684#if defined(PSA_WANT_ECC_SECP_R1_521)
685#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
686#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
687#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
688#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */
689#endif /* PSA_WANT_ECC_SECP_R1_521 */
690
691#if defined(PSA_WANT_ECC_SECP_K1_192)
692#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
David Brown8de143e2021-02-19 14:08:00 -0700693#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700694#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
695#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */
696#endif /* PSA_WANT_ECC_SECP_K1_192 */
David Brown8de143e2021-02-19 14:08:00 -0700697
David Brownc7b9b2b2021-02-19 21:05:52 -0700698#if defined(PSA_WANT_ECC_SECP_K1_224)
699#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
Ronald Crone1f55162021-03-25 15:09:47 +0100700/*
701 * SECP224K1 is buggy via the PSA API in Mbed TLS
Dave Rodgman017a1992022-03-31 14:07:01 +0100702 * (https://github.com/Mbed-TLS/mbedtls/issues/3541).
Ronald Crone1f55162021-03-25 15:09:47 +0100703 */
704#error "SECP224K1 is buggy via the PSA API in Mbed TLS."
David Brown8de143e2021-02-19 14:08:00 -0700705#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700706#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
707#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */
708#endif /* PSA_WANT_ECC_SECP_K1_224 */
David Brown8de143e2021-02-19 14:08:00 -0700709
David Brownc7b9b2b2021-02-19 21:05:52 -0700710#if defined(PSA_WANT_ECC_SECP_K1_256)
711#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
David Brown9b178de2021-03-10 13:14:48 -0700712#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700713#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
714#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */
715#endif /* PSA_WANT_ECC_SECP_K1_256 */
David Brown8de143e2021-02-19 14:08:00 -0700716
Gilles Peskine1231eb52021-04-19 22:24:23 +0200717
718
719/****************************************************************/
720/* Infer PSA requirements from Mbed TLS capabilities */
721/****************************************************************/
722
John Durkop714e3a12020-09-29 22:07:04 -0700723#else /* MBEDTLS_PSA_CRYPTO_CONFIG */
724
725/*
726 * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
727 * is not defined
728 */
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100729
Ronald Cron3d471812021-03-18 13:40:31 +0100730#if defined(MBEDTLS_CCM_C)
731#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100732#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
Ronald Cron3d471812021-03-18 13:40:31 +0100733#define PSA_WANT_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100734#define PSA_WANT_ALG_CCM_STAR_NO_TAG 1
Ronald Cron3d471812021-03-18 13:40:31 +0100735#endif /* MBEDTLS_CCM_C */
736
737#if defined(MBEDTLS_CMAC_C)
738#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
739#define PSA_WANT_ALG_CMAC 1
740#endif /* MBEDTLS_CMAC_C */
741
John Durkopd62b6782020-11-30 21:06:05 -0800742#if defined(MBEDTLS_ECDH_C)
743#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
744#define PSA_WANT_ALG_ECDH 1
745#endif /* MBEDTLS_ECDH_C */
746
747#if defined(MBEDTLS_ECDSA_C)
748#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
749#define PSA_WANT_ALG_ECDSA 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200750#define PSA_WANT_ALG_ECDSA_ANY 1
John Durkopd62b6782020-11-30 21:06:05 -0800751
752// Only add in DETERMINISTIC support if ECDSA is also enabled
753#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
754#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
755#define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1
756#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
757
758#endif /* MBEDTLS_ECDSA_C */
759
760#if defined(MBEDTLS_ECP_C)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200761#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
Valerio Settif87b5052023-05-26 13:47:09 +0200762#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
763#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT 1
Valerio Settif87b5052023-05-26 13:47:09 +0200764#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
Valerio Setti01cc88a2023-06-15 11:53:08 +0200765#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
Valerio Settiddb57762023-06-06 14:17:15 +0200766#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
767#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT 1
768#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
John Durkopd62b6782020-11-30 21:06:05 -0800769#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
770#define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
771#endif /* MBEDTLS_ECP_C */
772
Przemek Stekiel746dfae2023-05-04 09:14:08 +0200773#if defined(MBEDTLS_DHM_C)
Valerio Setti01cc88a2023-06-15 11:53:08 +0200774#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC 1
Valerio Settif87b5052023-05-26 13:47:09 +0200775#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
776#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
Valerio Settif87b5052023-05-26 13:47:09 +0200777#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
Przemek Stekiel746dfae2023-05-04 09:14:08 +0200778#define PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY 1
779#define PSA_WANT_ALG_FFDH 1
780#define PSA_WANT_DH_FAMILY_RFC7919 1
781#define MBEDTLS_PSA_BUILTIN_ALG_FFDH 1
Valerio Setti01cc88a2023-06-15 11:53:08 +0200782#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_BASIC 1
Valerio Settif87b5052023-05-26 13:47:09 +0200783#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
784#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
785#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
Przemek Stekiel746dfae2023-05-04 09:14:08 +0200786#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_PUBLIC_KEY 1
787#endif /* MBEDTLS_DHM_C */
788
Ronald Cron3d471812021-03-18 13:40:31 +0100789#if defined(MBEDTLS_GCM_C)
790#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
791#define PSA_WANT_ALG_GCM 1
792#endif /* MBEDTLS_GCM_C */
793
Przemek Stekiel18399d82022-06-27 13:34:50 +0200794/* Enable PSA HKDF algorithm if mbedtls HKDF is supported.
795 * PSA HKDF EXTRACT and PSA HKDF EXPAND have minimal cost when
796 * PSA HKDF is enabled, so enable both algorithms together
797 * with PSA HKDF. */
John Durkopd62b6782020-11-30 21:06:05 -0800798#if defined(MBEDTLS_HKDF_C)
799#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
800#define PSA_WANT_ALG_HMAC 1
801#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
802#define PSA_WANT_ALG_HKDF 1
Przemek Stekielb33bd192022-06-21 09:58:51 +0200803#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
804#define PSA_WANT_ALG_HKDF_EXTRACT 1
805#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
806#define PSA_WANT_ALG_HKDF_EXPAND 1
John Durkopd62b6782020-11-30 21:06:05 -0800807#endif /* MBEDTLS_HKDF_C */
808
John Durkopd62b6782020-11-30 21:06:05 -0800809#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
810#define PSA_WANT_ALG_HMAC 1
Gilles Peskine47a89332021-01-12 00:00:15 +0100811#define PSA_WANT_KEY_TYPE_HMAC
Andrzej Kurek65bf73e2022-08-31 14:59:31 -0400812
813#if defined(MBEDTLS_MD_C)
John Durkopd62b6782020-11-30 21:06:05 -0800814#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
815#define PSA_WANT_ALG_TLS12_PRF 1
816#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
817#define PSA_WANT_ALG_TLS12_PSK_TO_MS 1
818#endif /* MBEDTLS_MD_C */
819
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100820#if defined(MBEDTLS_MD5_C)
821#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
822#define PSA_WANT_ALG_MD5 1
823#endif
824
Neil Armstrong637d0a02022-05-25 11:28:22 +0200825#if defined(MBEDTLS_ECJPAKE_C)
826#define MBEDTLS_PSA_BUILTIN_PAKE 1
Neil Armstronga557cb82022-06-10 08:58:32 +0200827#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
828#define PSA_WANT_ALG_JPAKE 1
Neil Armstrong637d0a02022-05-25 11:28:22 +0200829#endif
830
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100831#if defined(MBEDTLS_RIPEMD160_C)
832#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
833#define PSA_WANT_ALG_RIPEMD160 1
834#endif
835
John Durkopd62b6782020-11-30 21:06:05 -0800836#if defined(MBEDTLS_RSA_C)
837#if defined(MBEDTLS_PKCS1_V15)
838#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
839#define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
840#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
841#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200842#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1
Yuto Takano7828ca22021-08-10 11:26:15 +0100843#endif /* MBEDTLS_PKCS1_V15 */
John Durkopd62b6782020-11-30 21:06:05 -0800844#if defined(MBEDTLS_PKCS1_V21)
845#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
846#define PSA_WANT_ALG_RSA_OAEP 1
847#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
848#define PSA_WANT_ALG_RSA_PSS 1
849#endif /* MBEDTLS_PKCS1_V21 */
Valerio Setti01cc88a2023-06-15 11:53:08 +0200850#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
Valerio Settif87b5052023-05-26 13:47:09 +0200851#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
852#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
853#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
Valerio Setti01cc88a2023-06-15 11:53:08 +0200854#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
Valerio Settif87b5052023-05-26 13:47:09 +0200855#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
856#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
857#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
John Durkopd62b6782020-11-30 21:06:05 -0800858#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
859#define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
860#endif /* MBEDTLS_RSA_C */
861
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100862#if defined(MBEDTLS_SHA1_C)
863#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
864#define PSA_WANT_ALG_SHA_1 1
865#endif
866
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200867#if defined(MBEDTLS_SHA224_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100868#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Gilles Peskineb65db072021-01-12 00:00:53 +0100869#define PSA_WANT_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200870#endif
871
872#if defined(MBEDTLS_SHA256_C)
873#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100874#define PSA_WANT_ALG_SHA_256 1
875#endif
876
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200877#if defined(MBEDTLS_SHA384_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100878#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
879#define PSA_WANT_ALG_SHA_384 1
880#endif
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200881
882#if defined(MBEDTLS_SHA512_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100883#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
884#define PSA_WANT_ALG_SHA_512 1
885#endif
886
David Brown94933082021-01-05 12:03:25 -0700887#if defined(MBEDTLS_AES_C)
888#define PSA_WANT_KEY_TYPE_AES 1
David Brownda7dbb72021-01-26 11:44:15 -0700889#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700890#endif
891
Gilles Peskine09c46da2021-10-08 15:48:16 +0200892#if defined(MBEDTLS_ARIA_C)
893#define PSA_WANT_KEY_TYPE_ARIA 1
894#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
895#endif
896
David Brown686e6e82021-01-05 12:03:25 -0700897#if defined(MBEDTLS_CAMELLIA_C)
898#define PSA_WANT_KEY_TYPE_CAMELLIA 1
David Brownda7dbb72021-01-26 11:44:15 -0700899#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700900#endif
901
David Brownb65a7f72021-01-15 12:04:09 -0700902#if defined(MBEDTLS_DES_C)
903#define PSA_WANT_KEY_TYPE_DES 1
David Brownda7dbb72021-01-26 11:44:15 -0700904#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700905#endif
906
Andrzej Kurekd60907b2022-09-14 10:02:30 -0400907#if defined(MBEDTLS_PSA_BUILTIN_ALG_SHA_256)
908#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
909#define PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS 1
910#endif
911
David Brownb16727a2021-02-08 16:31:46 -0700912#if defined(MBEDTLS_CHACHA20_C)
913#define PSA_WANT_KEY_TYPE_CHACHA20 1
914#define PSA_WANT_ALG_STREAM_CIPHER 1
915#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
916#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brownac4fa072021-02-08 16:47:35 -0700917#if defined(MBEDTLS_CHACHAPOLY_C)
918#define PSA_WANT_ALG_CHACHA20_POLY1305 1
David Brown86730a82021-02-09 16:24:11 -0700919#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700920#endif
David Brownb16727a2021-02-08 16:31:46 -0700921#endif
922
David Brown99844272021-01-15 12:04:47 -0700923#if defined(MBEDTLS_CIPHER_MODE_CBC)
David Brown10cb81c2021-02-09 16:10:29 -0700924#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700925#define PSA_WANT_ALG_CBC_NO_PADDING 1
926#if defined(MBEDTLS_CIPHER_PADDING_PKCS7)
David Brown12f45f92021-01-26 11:50:36 -0700927#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brown99844272021-01-15 12:04:47 -0700928#define PSA_WANT_ALG_CBC_PKCS7 1
929#endif
930#endif
931
932#if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200933 defined(MBEDTLS_ARIA_C) || defined(MBEDTLS_CAMELLIA_C)
David Brown10cb81c2021-02-09 16:10:29 -0700934#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700935#define PSA_WANT_ALG_ECB_NO_PADDING 1
936#endif
937
938#if defined(MBEDTLS_CIPHER_MODE_CFB)
David Brown12f45f92021-01-26 11:50:36 -0700939#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700940#define PSA_WANT_ALG_CFB 1
941#endif
942
943#if defined(MBEDTLS_CIPHER_MODE_CTR)
David Brown12f45f92021-01-26 11:50:36 -0700944#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700945#define PSA_WANT_ALG_CTR 1
946#endif
947
948#if defined(MBEDTLS_CIPHER_MODE_OFB)
David Brown12f45f92021-01-26 11:50:36 -0700949#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700950#define PSA_WANT_ALG_OFB 1
951#endif
952
David Browneed74df2021-03-15 15:53:57 -0600953#if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
954#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
955#define PSA_WANT_ECC_BRAINPOOL_P_R1_256
956#endif
957
958#if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
959#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
960#define PSA_WANT_ECC_BRAINPOOL_P_R1_384
961#endif
962
963#if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
964#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
965#define PSA_WANT_ECC_BRAINPOOL_P_R1_512
966#endif
967
968#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
969#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
970#define PSA_WANT_ECC_MONTGOMERY_255
971#endif
972
Archanaef6aa5c2021-06-08 11:40:10 +0530973#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
David Browneed74df2021-03-15 15:53:57 -0600974#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
975#define PSA_WANT_ECC_MONTGOMERY_448
976#endif
977
David Brown8de143e2021-02-19 14:08:00 -0700978#if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700979#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
980#define PSA_WANT_ECC_SECP_R1_192
David Brown8de143e2021-02-19 14:08:00 -0700981#endif
982
983#if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700984#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
985#define PSA_WANT_ECC_SECP_R1_224
David Brown8de143e2021-02-19 14:08:00 -0700986#endif
987
988#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700989#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
990#define PSA_WANT_ECC_SECP_R1_256
David Brown8de143e2021-02-19 14:08:00 -0700991#endif
992
993#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700994#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
995#define PSA_WANT_ECC_SECP_R1_384
David Brown8de143e2021-02-19 14:08:00 -0700996#endif
997
998#if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700999#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
1000#define PSA_WANT_ECC_SECP_R1_521
David Brown8de143e2021-02-19 14:08:00 -07001001#endif
1002
1003#if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -07001004#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
1005#define PSA_WANT_ECC_SECP_K1_192
David Brown8de143e2021-02-19 14:08:00 -07001006#endif
1007
Dave Rodgman017a1992022-03-31 14:07:01 +01001008/* SECP224K1 is buggy via the PSA API (https://github.com/Mbed-TLS/mbedtls/issues/3541) */
Gilles Peskine39841302021-03-23 12:06:45 +01001009#if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -07001010#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
1011#define PSA_WANT_ECC_SECP_K1_224
David Brown8de143e2021-02-19 14:08:00 -07001012#endif
1013
David Brown9b178de2021-03-10 13:14:48 -07001014#if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -07001015#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
1016#define PSA_WANT_ECC_SECP_K1_256
David Brown8de143e2021-02-19 14:08:00 -07001017#endif
1018
John Durkop2dfaf9c2020-09-24 04:30:10 -07001019#endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
John Durkopd8959392020-09-20 23:09:17 -07001020
Tom Cosgrove6d62fac2023-05-10 14:40:05 +01001021#if defined(PSA_WANT_ALG_JPAKE)
1022#define PSA_WANT_ALG_SOME_PAKE 1
1023#endif
1024
Valerio Setti89cb1442023-06-06 14:12:17 +02001025/* Temporary internal migration helpers */
Valerio Setti01cc88a2023-06-15 11:53:08 +02001026#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
Valerio Settif4d7ede2023-06-09 12:10:33 +02001027 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
1028 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT) || \
1029 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE) || \
valerio36befce2023-05-31 14:43:06 +02001030 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
Valerio Setti8d6e98c2023-05-26 13:46:13 +02001031#define MBEDTLS_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_LEGACY
1032#endif
1033
Valerio Setti89cb1442023-06-06 14:12:17 +02001034/* Temporary internal migration helpers */
Valerio Setti01cc88a2023-06-15 11:53:08 +02001035#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
Valerio Settif4d7ede2023-06-09 12:10:33 +02001036 defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT) || \
1037 defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT) || \
Valerio Setti8d6e98c2023-05-26 13:46:13 +02001038 defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
1039#define MBEDTLS_PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_LEGACY
1040#endif
1041
Valerio Setti89cb1442023-06-06 14:12:17 +02001042/* Temporary internal migration helpers */
Valerio Setti01cc88a2023-06-15 11:53:08 +02001043#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC) || \
Valerio Settif4d7ede2023-06-09 12:10:33 +02001044 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT) || \
1045 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT) || \
Valerio Setti602ee2e2023-06-06 14:10:15 +02001046 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE)
Valerio Setti8d6e98c2023-05-26 13:46:13 +02001047#define MBEDTLS_PSA_WANT_KEY_TYPE_DH_KEY_PAIR_LEGACY
1048#endif
1049
Valerio Setti89cb1442023-06-06 14:12:17 +02001050/* Temporary internal migration helpers */
Valerio Setti01cc88a2023-06-15 11:53:08 +02001051#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
Valerio Settif4d7ede2023-06-09 12:10:33 +02001052 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
1053 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT) || \
1054 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE) || \
Valerio Setti8d6e98c2023-05-26 13:46:13 +02001055 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
1056#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_LEGACY
1057#endif
1058
Valerio Setti89cb1442023-06-06 14:12:17 +02001059/* Temporary internal migration helpers */
Valerio Setti01cc88a2023-06-15 11:53:08 +02001060#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
Valerio Settif4d7ede2023-06-09 12:10:33 +02001061 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT) || \
1062 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT) || \
Valerio Setti8d6e98c2023-05-26 13:46:13 +02001063 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
1064#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_LEGACY
1065#endif
1066
Valerio Setti89cb1442023-06-06 14:12:17 +02001067/* Temporary internal migration helpers */
Valerio Setti01cc88a2023-06-15 11:53:08 +02001068#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_BASIC) || \
Valerio Settif4d7ede2023-06-09 12:10:33 +02001069 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT) || \
1070 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT) || \
Valerio Setti602ee2e2023-06-06 14:10:15 +02001071 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE)
Valerio Setti8d6e98c2023-05-26 13:46:13 +02001072#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_LEGACY
1073#endif
1074
Gilles Peskine60b29fe2021-02-16 14:06:50 +01001075/* These features are always enabled. */
1076#define PSA_WANT_KEY_TYPE_DERIVE 1
Gilles Peskinebba26302022-12-15 23:25:17 +01001077#define PSA_WANT_KEY_TYPE_PASSWORD 1
1078#define PSA_WANT_KEY_TYPE_PASSWORD_HASH 1
Gilles Peskine60b29fe2021-02-16 14:06:50 +01001079#define PSA_WANT_KEY_TYPE_RAW_DATA 1
1080
John Durkop6e33dbe2020-09-17 21:15:13 -07001081#ifdef __cplusplus
1082}
1083#endif
1084
1085#endif /* MBEDTLS_CONFIG_PSA_H */