blob: 13e64dd78222f97e7252c8bb581e63a73be87710 [file] [log] [blame]
John Durkop6e33dbe2020-09-17 21:15:13 -07001/**
2 * \file mbedtls/config_psa.h
3 * \brief PSA crypto configuration options (set of defines)
4 *
John Durkop34818822020-10-12 21:36:22 -07005 * This set of compile-time options takes settings defined in
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02006 * include/mbedtls/mbedtls_config.h and include/psa/crypto_config.h and uses
John Durkop34818822020-10-12 21:36:22 -07007 * those definitions to define symbols used in the library code.
8 *
9 * Users and integrators should not edit this file, please edit
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020010 * include/mbedtls/mbedtls_config.h for MBETLS_XXX settings or
John Durkop34818822020-10-12 21:36:22 -070011 * include/psa/crypto_config.h for PSA_WANT_XXX settings.
John Durkop6e33dbe2020-09-17 21:15:13 -070012 */
13/*
14 * Copyright The Mbed TLS Contributors
15 * SPDX-License-Identifier: Apache-2.0
16 *
17 * Licensed under the Apache License, Version 2.0 (the "License"); you may
18 * not use this file except in compliance with the License.
19 * You may obtain a copy of the License at
20 *
21 * http://www.apache.org/licenses/LICENSE-2.0
22 *
23 * Unless required by applicable law or agreed to in writing, software
24 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
25 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
26 * See the License for the specific language governing permissions and
27 * limitations under the License.
28 */
29
30#ifndef MBEDTLS_CONFIG_PSA_H
31#define MBEDTLS_CONFIG_PSA_H
32
John Durkop714e3a12020-09-29 22:07:04 -070033#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010034#if defined(MBEDTLS_PSA_CRYPTO_CONFIG_FILE)
35#include MBEDTLS_PSA_CRYPTO_CONFIG_FILE
36#else
John Durkop6e33dbe2020-09-17 21:15:13 -070037#include "psa/crypto_config.h"
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010038#endif
John Durkop76228ac2020-09-29 22:33:49 -070039#endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
John Durkop6e33dbe2020-09-17 21:15:13 -070040
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010041#if defined(MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE)
42#include MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE
43#endif
44
John Durkop6e33dbe2020-09-17 21:15:13 -070045#ifdef __cplusplus
46extern "C" {
47#endif
48
Gilles Peskine1231eb52021-04-19 22:24:23 +020049
50
51/****************************************************************/
52/* De facto synonyms */
53/****************************************************************/
54
55#if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA)
56#define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY
57#elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA)
58#define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA
59#endif
60
61#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
62#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW
63#elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
64#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN
65#endif
66
Gilles Peskine44c96aa2021-10-04 18:33:56 +020067#if defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && !defined(PSA_WANT_ALG_RSA_PSS)
68#define PSA_WANT_ALG_RSA_PSS PSA_WANT_ALG_RSA_PSS_ANY_SALT
69#elif !defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && defined(PSA_WANT_ALG_RSA_PSS)
70#define PSA_WANT_ALG_RSA_PSS_ANY_SALT PSA_WANT_ALG_RSA_PSS
71#endif
72
Gilles Peskine1231eb52021-04-19 22:24:23 +020073
74
75/****************************************************************/
76/* Require built-in implementations based on PSA requirements */
77/****************************************************************/
78
John Durkop2dfaf9c2020-09-24 04:30:10 -070079#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
John Durkopd8959392020-09-20 23:09:17 -070080
John Durkopd62b6782020-11-30 21:06:05 -080081#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
82#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
83#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
84#define MBEDTLS_ECDSA_DETERMINISTIC
85#define MBEDTLS_ECDSA_C
86#define MBEDTLS_HMAC_DRBG_C
87#define MBEDTLS_MD_C
88#endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
89#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
90
91#if defined(PSA_WANT_ALG_ECDH)
92#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
93#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
94#define MBEDTLS_ECDH_C
95#define MBEDTLS_ECP_C
96#define MBEDTLS_BIGNUM_C
97#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */
98#endif /* PSA_WANT_ALG_ECDH */
99
100#if defined(PSA_WANT_ALG_ECDSA)
101#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
102#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
103#define MBEDTLS_ECDSA_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200104#define MBEDTLS_ECP_C
105#define MBEDTLS_BIGNUM_C
106#define MBEDTLS_ASN1_PARSE_C
107#define MBEDTLS_ASN1_WRITE_C
John Durkopd62b6782020-11-30 21:06:05 -0800108#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
109#endif /* PSA_WANT_ALG_ECDSA */
110
111#if defined(PSA_WANT_ALG_HKDF)
112#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
113#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
114#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
115#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
116#endif /* PSA_WANT_ALG_HKDF */
117
118#if defined(PSA_WANT_ALG_HMAC)
119#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
120#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
121#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
122#endif /* PSA_WANT_ALG_HMAC */
123
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100124#if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
125#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
126#define MBEDTLS_MD5_C
127#endif
128
129#if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
130#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
131#define MBEDTLS_RIPEMD160_C
132#endif
133
John Durkopd62b6782020-11-30 21:06:05 -0800134#if defined(PSA_WANT_ALG_RSA_OAEP)
135#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
136#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
137#define MBEDTLS_RSA_C
138#define MBEDTLS_BIGNUM_C
139#define MBEDTLS_OID_C
140#define MBEDTLS_PKCS1_V21
141#define MBEDTLS_MD_C
142#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
143#endif /* PSA_WANT_ALG_RSA_OAEP */
144
145#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
146#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
147#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
148#define MBEDTLS_RSA_C
149#define MBEDTLS_BIGNUM_C
150#define MBEDTLS_OID_C
151#define MBEDTLS_PKCS1_V15
152#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
153#endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
154
155#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
156#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
157#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
158#define MBEDTLS_RSA_C
159#define MBEDTLS_BIGNUM_C
160#define MBEDTLS_OID_C
161#define MBEDTLS_PKCS1_V15
162#define MBEDTLS_MD_C
163#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
164#endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
165
166#if defined(PSA_WANT_ALG_RSA_PSS)
167#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
168#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
169#define MBEDTLS_RSA_C
170#define MBEDTLS_BIGNUM_C
171#define MBEDTLS_OID_C
172#define MBEDTLS_PKCS1_V21
173#define MBEDTLS_MD_C
174#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
175#endif /* PSA_WANT_ALG_RSA_PSS */
176
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100177#if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
178#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
179#define MBEDTLS_SHA1_C
180#endif
181
182#if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
183#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200184#define MBEDTLS_SHA224_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100185#endif
186
187#if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
188#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
189#define MBEDTLS_SHA256_C
190#endif
191
192#if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
193#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200194#define MBEDTLS_SHA384_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100195#endif
196
197#if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
198#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
199#define MBEDTLS_SHA512_C
200#endif
201
John Durkop07cc04a2020-11-16 22:08:34 -0800202#if defined(PSA_WANT_ALG_TLS12_PRF)
203#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
John Durkopd62b6782020-11-30 21:06:05 -0800204#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
John Durkop07cc04a2020-11-16 22:08:34 -0800205#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
206#endif /* PSA_WANT_ALG_TLS12_PRF */
207
208#if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
209#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
John Durkopd62b6782020-11-30 21:06:05 -0800210#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
John Durkop07cc04a2020-11-16 22:08:34 -0800211#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
212#endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
213
214#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR)
215#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR)
John Durkopd62b6782020-11-30 21:06:05 -0800216#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
John Durkop07cc04a2020-11-16 22:08:34 -0800217#define MBEDTLS_ECP_C
218#define MBEDTLS_BIGNUM_C
219#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR */
220#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR */
221
222#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
223#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800224#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
John Durkop07cc04a2020-11-16 22:08:34 -0800225#define MBEDTLS_ECP_C
226#define MBEDTLS_BIGNUM_C
227#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */
228#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
229
John Durkop9814fa22020-11-04 12:28:15 -0800230#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR)
John Durkop0e005192020-10-31 22:06:54 -0700231#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR)
John Durkopd62b6782020-11-30 21:06:05 -0800232#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
John Durkop0e005192020-10-31 22:06:54 -0700233#define MBEDTLS_RSA_C
234#define MBEDTLS_BIGNUM_C
235#define MBEDTLS_OID_C
236#define MBEDTLS_GENPRIME
John Durkop07cc04a2020-11-16 22:08:34 -0800237#define MBEDTLS_PK_PARSE_C
238#define MBEDTLS_PK_WRITE_C
239#define MBEDTLS_PK_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200240#define MBEDTLS_ASN1_PARSE_C
241#define MBEDTLS_ASN1_WRITE_C
John Durkop0e005192020-10-31 22:06:54 -0700242#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR */
John Durkop9814fa22020-11-04 12:28:15 -0800243#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR */
244
245#if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkop0e005192020-10-31 22:06:54 -0700246#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800247#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
John Durkop0e005192020-10-31 22:06:54 -0700248#define MBEDTLS_RSA_C
249#define MBEDTLS_BIGNUM_C
250#define MBEDTLS_OID_C
John Durkop07cc04a2020-11-16 22:08:34 -0800251#define MBEDTLS_PK_PARSE_C
252#define MBEDTLS_PK_WRITE_C
253#define MBEDTLS_PK_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200254#define MBEDTLS_ASN1_PARSE_C
255#define MBEDTLS_ASN1_WRITE_C
John Durkop0e005192020-10-31 22:06:54 -0700256#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkop9814fa22020-11-04 12:28:15 -0800257#endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkopd0321952020-10-29 21:37:36 -0700258
David Brownb781f752021-02-08 15:44:52 -0700259/* If any of the block modes are requested that don't have an
260 * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
261 * in the block cipher key types. */
262#if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
Bence Szépkúti7921cce2021-02-17 11:46:50 +0100263 (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700264 (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
265 (defined(PSA_WANT_ALG_XTS) && !defined(MBEDTLS_PSA_ACCEL_ALG_XTS)) || \
266 defined(PSA_WANT_ALG_ECB_NO_PADDING) || \
267 (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
268 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
269 (defined(PSA_WANT_ALG_CBC_PKCS7) && \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100270 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
271 (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
David Brownb781f752021-02-08 15:44:52 -0700272#define PSA_HAVE_SOFT_BLOCK_MODE 1
273#endif
274
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100275#if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
276 (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
277#define PSA_HAVE_SOFT_BLOCK_AEAD 1
278#endif
279
David Brown94933082021-01-05 12:03:25 -0700280#if defined(PSA_WANT_KEY_TYPE_AES)
David Browne1f91f02021-02-09 15:56:22 -0700281#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
282#define PSA_HAVE_SOFT_KEY_TYPE_AES 1
283#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
284#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100285 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
286 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700287#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700288#define MBEDTLS_AES_C
David Browne1f91f02021-02-09 15:56:22 -0700289#endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown94933082021-01-05 12:03:25 -0700290#endif /* PSA_WANT_KEY_TYPE_AES */
291
Gilles Peskine09c46da2021-10-08 15:48:16 +0200292#if defined(PSA_WANT_KEY_TYPE_ARIA)
293#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA)
294#define PSA_HAVE_SOFT_KEY_TYPE_ARIA 1
295#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA */
296#if defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
297 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
298 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
299#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
300#define MBEDTLS_ARIA_C
301#endif /* PSA_HAVE_SOFT_KEY_TYPE_ARIA || PSA_HAVE_SOFT_BLOCK_MODE */
302#endif /* PSA_WANT_KEY_TYPE_ARIA */
303
David Brown686e6e82021-01-05 12:03:25 -0700304#if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
David Browne1f91f02021-02-09 15:56:22 -0700305#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
306#define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
307#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
308#if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100309 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
310 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700311#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700312#define MBEDTLS_CAMELLIA_C
David Browne1f91f02021-02-09 15:56:22 -0700313#endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown686e6e82021-01-05 12:03:25 -0700314#endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
315
David Brownb65a7f72021-01-15 12:04:09 -0700316#if defined(PSA_WANT_KEY_TYPE_DES)
David Browne1f91f02021-02-09 15:56:22 -0700317#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
318#define PSA_HAVE_SOFT_KEY_TYPE_DES 1
319#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
320#if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
David Brownb781f752021-02-08 15:44:52 -0700321 defined(PSA_HAVE_SOFT_BLOCK_MODE)
David Brown78a429b2021-01-21 09:48:57 -0700322#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700323#define MBEDTLS_DES_C
David Browne1f91f02021-02-09 15:56:22 -0700324#endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brownb65a7f72021-01-15 12:04:09 -0700325#endif /* PSA_WANT_KEY_TYPE_DES */
326
David Brownb16727a2021-02-08 16:31:46 -0700327#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
328#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20)
329#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
330#define MBEDTLS_CHACHA20_C
331#endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */
332#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
333
David Brownf84a0f62021-02-09 15:59:41 -0700334/* If any of the software block ciphers are selected, define
335 * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
336 * situations. */
337#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200338 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
David Brownf84a0f62021-02-09 15:59:41 -0700339 defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
340 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
341#define PSA_HAVE_SOFT_BLOCK_CIPHER 1
342#endif
343
David Brown99844272021-01-15 12:04:47 -0700344#if defined(PSA_WANT_ALG_STREAM_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700345#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brown99844272021-01-15 12:04:47 -0700346#endif /* PSA_WANT_ALG_STREAM_CIPHER */
347
Ronald Crond85e98d2021-03-25 15:32:32 +0100348#if defined(PSA_WANT_ALG_CBC_MAC)
349#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
350#error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
351#define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
352#endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
353#endif /* PSA_WANT_ALG_CBC_MAC */
354
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100355#if defined(PSA_WANT_ALG_CMAC)
356#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
357 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
358#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
359#define MBEDTLS_CMAC_C
360#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
361#endif /* PSA_WANT_ALG_CMAC */
362
David Brown99844272021-01-15 12:04:47 -0700363#if defined(PSA_WANT_ALG_CTR)
David Brown4b9ec7a2021-02-05 12:47:08 -0700364#if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
David Brownf84a0f62021-02-09 15:59:41 -0700365 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700366#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700367#define MBEDTLS_CIPHER_MODE_CTR
David Brown4b9ec7a2021-02-05 12:47:08 -0700368#endif
David Brown99844272021-01-15 12:04:47 -0700369#endif /* PSA_WANT_ALG_CTR */
370
371#if defined(PSA_WANT_ALG_CFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700372#if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700373 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700374#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700375#define MBEDTLS_CIPHER_MODE_CFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700376#endif
David Brown99844272021-01-15 12:04:47 -0700377#endif /* PSA_WANT_ALG_CFB */
378
379#if defined(PSA_WANT_ALG_OFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700380#if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700381 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700382#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700383#define MBEDTLS_CIPHER_MODE_OFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700384#endif
David Brown99844272021-01-15 12:04:47 -0700385#endif /* PSA_WANT_ALG_OFB */
386
387#if defined(PSA_WANT_ALG_XTS)
David Brown4b9ec7a2021-02-05 12:47:08 -0700388#if !defined(MBEDTLS_PSA_ACCEL_ALG_XTS) || \
David Brownf84a0f62021-02-09 15:59:41 -0700389 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700390#define MBEDTLS_PSA_BUILTIN_ALG_XTS 1
David Brown99844272021-01-15 12:04:47 -0700391#define MBEDTLS_CIPHER_MODE_XTS
David Brown4b9ec7a2021-02-05 12:47:08 -0700392#endif
David Brown99844272021-01-15 12:04:47 -0700393#endif /* PSA_WANT_ALG_XTS */
394
395#if defined(PSA_WANT_ALG_ECB_NO_PADDING)
David Brownbe380c12021-02-11 10:55:48 -0700396#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700397#endif
398
David Brown12f45f92021-01-26 11:50:36 -0700399#if defined(PSA_WANT_ALG_CBC_NO_PADDING)
David Brown4b9ec7a2021-02-05 12:47:08 -0700400#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
David Brownfc468182021-02-09 16:23:34 -0700401 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700402#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700403#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown4b9ec7a2021-02-05 12:47:08 -0700404#endif
David Brown12f45f92021-01-26 11:50:36 -0700405#endif /* PSA_WANT_ALG_CBC_NO_PADDING */
406
407#if defined(PSA_WANT_ALG_CBC_PKCS7)
David Brown4b9ec7a2021-02-05 12:47:08 -0700408#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
David Brownfc468182021-02-09 16:23:34 -0700409 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700410#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700411#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brownfc468182021-02-09 16:23:34 -0700412#define MBEDTLS_CIPHER_PADDING_PKCS7
David Brown4b9ec7a2021-02-05 12:47:08 -0700413#endif
David Brown12f45f92021-01-26 11:50:36 -0700414#endif /* PSA_WANT_ALG_CBC_PKCS7 */
415
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100416#if defined(PSA_WANT_ALG_CCM)
417#if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
418 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200419 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100420 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
421#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
422#define MBEDTLS_CCM_C
423#endif
424#endif /* PSA_WANT_ALG_CCM */
425
426#if defined(PSA_WANT_ALG_GCM)
427#if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
428 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200429 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100430 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
431#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
432#define MBEDTLS_GCM_C
433#endif
434#endif /* PSA_WANT_ALG_GCM */
435
David Brownac4fa072021-02-08 16:47:35 -0700436#if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200437#if !defined(MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305)
David Brownac4fa072021-02-08 16:47:35 -0700438#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
439#define MBEDTLS_CHACHAPOLY_C
David Brown86730a82021-02-09 16:24:11 -0700440#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700441#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200442#endif /* !MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305 */
David Brownac4fa072021-02-08 16:47:35 -0700443#endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
444
David Browneed74df2021-03-15 15:53:57 -0600445#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
446#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
447#define MBEDTLS_ECP_DP_BP256R1_ENABLED
448#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
449#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */
450#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
451
452#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
453#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
454#define MBEDTLS_ECP_DP_BP384R1_ENABLED
455#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
456#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */
457#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
458
459#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
460#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
461#define MBEDTLS_ECP_DP_BP512R1_ENABLED
462#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
463#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */
464#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
465
466#if defined(PSA_WANT_ECC_MONTGOMERY_255)
467#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
468#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
469#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
470#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */
471#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
472
473#if defined(PSA_WANT_ECC_MONTGOMERY_448)
474#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
475#define MBEDTLS_ECP_DP_CURVE448_ENABLED
476#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
477#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */
478#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
479
David Brownc7b9b2b2021-02-19 21:05:52 -0700480#if defined(PSA_WANT_ECC_SECP_R1_192)
481#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
482#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
483#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
484#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */
485#endif /* PSA_WANT_ECC_SECP_R1_192 */
486
487#if defined(PSA_WANT_ECC_SECP_R1_224)
488#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
489#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
490#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
491#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */
492#endif /* PSA_WANT_ECC_SECP_R1_224 */
493
494#if defined(PSA_WANT_ECC_SECP_R1_256)
495#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
496#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
497#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
498#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */
499#endif /* PSA_WANT_ECC_SECP_R1_256 */
500
501#if defined(PSA_WANT_ECC_SECP_R1_384)
502#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
503#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
504#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
505#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */
506#endif /* PSA_WANT_ECC_SECP_R1_384 */
507
508#if defined(PSA_WANT_ECC_SECP_R1_521)
509#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
510#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
511#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
512#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */
513#endif /* PSA_WANT_ECC_SECP_R1_521 */
514
515#if defined(PSA_WANT_ECC_SECP_K1_192)
516#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
David Brown8de143e2021-02-19 14:08:00 -0700517#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700518#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
519#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */
520#endif /* PSA_WANT_ECC_SECP_K1_192 */
David Brown8de143e2021-02-19 14:08:00 -0700521
David Brownc7b9b2b2021-02-19 21:05:52 -0700522#if defined(PSA_WANT_ECC_SECP_K1_224)
523#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
Ronald Crone1f55162021-03-25 15:09:47 +0100524/*
525 * SECP224K1 is buggy via the PSA API in Mbed TLS
526 * (https://github.com/ARMmbed/mbedtls/issues/3541).
527 */
528#error "SECP224K1 is buggy via the PSA API in Mbed TLS."
David Brown8de143e2021-02-19 14:08:00 -0700529#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700530#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
531#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */
532#endif /* PSA_WANT_ECC_SECP_K1_224 */
David Brown8de143e2021-02-19 14:08:00 -0700533
David Brownc7b9b2b2021-02-19 21:05:52 -0700534#if defined(PSA_WANT_ECC_SECP_K1_256)
535#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
David Brown9b178de2021-03-10 13:14:48 -0700536#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700537#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
538#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */
539#endif /* PSA_WANT_ECC_SECP_K1_256 */
David Brown8de143e2021-02-19 14:08:00 -0700540
Gilles Peskine1231eb52021-04-19 22:24:23 +0200541
542
543/****************************************************************/
544/* Infer PSA requirements from Mbed TLS capabilities */
545/****************************************************************/
546
John Durkop714e3a12020-09-29 22:07:04 -0700547#else /* MBEDTLS_PSA_CRYPTO_CONFIG */
548
549/*
550 * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
551 * is not defined
552 */
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100553
Ronald Cron3d471812021-03-18 13:40:31 +0100554#if defined(MBEDTLS_CCM_C)
555#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
556#define PSA_WANT_ALG_CCM 1
557#endif /* MBEDTLS_CCM_C */
558
559#if defined(MBEDTLS_CMAC_C)
560#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
561#define PSA_WANT_ALG_CMAC 1
562#endif /* MBEDTLS_CMAC_C */
563
John Durkopd62b6782020-11-30 21:06:05 -0800564#if defined(MBEDTLS_ECDH_C)
565#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
566#define PSA_WANT_ALG_ECDH 1
567#endif /* MBEDTLS_ECDH_C */
568
569#if defined(MBEDTLS_ECDSA_C)
570#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
571#define PSA_WANT_ALG_ECDSA 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200572#define PSA_WANT_ALG_ECDSA_ANY 1
John Durkopd62b6782020-11-30 21:06:05 -0800573
574// Only add in DETERMINISTIC support if ECDSA is also enabled
575#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
576#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
577#define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1
578#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
579
580#endif /* MBEDTLS_ECDSA_C */
581
582#if defined(MBEDTLS_ECP_C)
583#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
584#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
585#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
586#define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
587#endif /* MBEDTLS_ECP_C */
588
Ronald Cron3d471812021-03-18 13:40:31 +0100589#if defined(MBEDTLS_GCM_C)
590#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
591#define PSA_WANT_ALG_GCM 1
592#endif /* MBEDTLS_GCM_C */
593
John Durkopd62b6782020-11-30 21:06:05 -0800594#if defined(MBEDTLS_HKDF_C)
595#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
596#define PSA_WANT_ALG_HMAC 1
597#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
598#define PSA_WANT_ALG_HKDF 1
599#endif /* MBEDTLS_HKDF_C */
600
601#if defined(MBEDTLS_MD_C)
602#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
603#define PSA_WANT_ALG_HMAC 1
Gilles Peskine47a89332021-01-12 00:00:15 +0100604#define PSA_WANT_KEY_TYPE_HMAC
John Durkopd62b6782020-11-30 21:06:05 -0800605#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
606#define PSA_WANT_ALG_TLS12_PRF 1
607#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
608#define PSA_WANT_ALG_TLS12_PSK_TO_MS 1
609#endif /* MBEDTLS_MD_C */
610
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100611#if defined(MBEDTLS_MD5_C)
612#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
613#define PSA_WANT_ALG_MD5 1
614#endif
615
616#if defined(MBEDTLS_RIPEMD160_C)
617#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
618#define PSA_WANT_ALG_RIPEMD160 1
619#endif
620
John Durkopd62b6782020-11-30 21:06:05 -0800621#if defined(MBEDTLS_RSA_C)
622#if defined(MBEDTLS_PKCS1_V15)
623#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
624#define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
625#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
626#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200627#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1
Yuto Takano7828ca22021-08-10 11:26:15 +0100628#endif /* MBEDTLS_PKCS1_V15 */
John Durkopd62b6782020-11-30 21:06:05 -0800629#if defined(MBEDTLS_PKCS1_V21)
630#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
631#define PSA_WANT_ALG_RSA_OAEP 1
632#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
633#define PSA_WANT_ALG_RSA_PSS 1
634#endif /* MBEDTLS_PKCS1_V21 */
635#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
636#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
637#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
638#define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
639#endif /* MBEDTLS_RSA_C */
640
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100641#if defined(MBEDTLS_SHA1_C)
642#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
643#define PSA_WANT_ALG_SHA_1 1
644#endif
645
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200646#if defined(MBEDTLS_SHA224_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100647#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Gilles Peskineb65db072021-01-12 00:00:53 +0100648#define PSA_WANT_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200649#endif
650
651#if defined(MBEDTLS_SHA256_C)
652#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100653#define PSA_WANT_ALG_SHA_256 1
654#endif
655
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200656#if defined(MBEDTLS_SHA384_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100657#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
658#define PSA_WANT_ALG_SHA_384 1
659#endif
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200660
661#if defined(MBEDTLS_SHA512_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100662#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
663#define PSA_WANT_ALG_SHA_512 1
664#endif
665
David Brown94933082021-01-05 12:03:25 -0700666#if defined(MBEDTLS_AES_C)
667#define PSA_WANT_KEY_TYPE_AES 1
David Brownda7dbb72021-01-26 11:44:15 -0700668#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700669#endif
670
Gilles Peskine09c46da2021-10-08 15:48:16 +0200671#if defined(MBEDTLS_ARIA_C)
672#define PSA_WANT_KEY_TYPE_ARIA 1
673#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
674#endif
675
David Brown686e6e82021-01-05 12:03:25 -0700676#if defined(MBEDTLS_CAMELLIA_C)
677#define PSA_WANT_KEY_TYPE_CAMELLIA 1
David Brownda7dbb72021-01-26 11:44:15 -0700678#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700679#endif
680
David Brownb65a7f72021-01-15 12:04:09 -0700681#if defined(MBEDTLS_DES_C)
682#define PSA_WANT_KEY_TYPE_DES 1
David Brownda7dbb72021-01-26 11:44:15 -0700683#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700684#endif
685
David Brownb16727a2021-02-08 16:31:46 -0700686#if defined(MBEDTLS_CHACHA20_C)
687#define PSA_WANT_KEY_TYPE_CHACHA20 1
688#define PSA_WANT_ALG_STREAM_CIPHER 1
689#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
690#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brownac4fa072021-02-08 16:47:35 -0700691#if defined(MBEDTLS_CHACHAPOLY_C)
692#define PSA_WANT_ALG_CHACHA20_POLY1305 1
David Brown86730a82021-02-09 16:24:11 -0700693#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700694#endif
David Brownb16727a2021-02-08 16:31:46 -0700695#endif
696
David Brown99844272021-01-15 12:04:47 -0700697#if defined(MBEDTLS_CIPHER_MODE_CBC)
David Brown10cb81c2021-02-09 16:10:29 -0700698#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700699#define PSA_WANT_ALG_CBC_NO_PADDING 1
700#if defined(MBEDTLS_CIPHER_PADDING_PKCS7)
David Brown12f45f92021-01-26 11:50:36 -0700701#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brown99844272021-01-15 12:04:47 -0700702#define PSA_WANT_ALG_CBC_PKCS7 1
703#endif
704#endif
705
706#if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200707 defined(MBEDTLS_ARIA_C) || defined(MBEDTLS_CAMELLIA_C)
David Brown10cb81c2021-02-09 16:10:29 -0700708#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700709#define PSA_WANT_ALG_ECB_NO_PADDING 1
710#endif
711
712#if defined(MBEDTLS_CIPHER_MODE_CFB)
David Brown12f45f92021-01-26 11:50:36 -0700713#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700714#define PSA_WANT_ALG_CFB 1
715#endif
716
717#if defined(MBEDTLS_CIPHER_MODE_CTR)
David Brown12f45f92021-01-26 11:50:36 -0700718#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700719#define PSA_WANT_ALG_CTR 1
720#endif
721
722#if defined(MBEDTLS_CIPHER_MODE_OFB)
David Brown12f45f92021-01-26 11:50:36 -0700723#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700724#define PSA_WANT_ALG_OFB 1
725#endif
726
727#if defined(MBEDTLS_CIPHER_MODE_XTS)
David Brown12f45f92021-01-26 11:50:36 -0700728#define MBEDTLS_PSA_BUILTIN_ALG_XTS 1
David Brown99844272021-01-15 12:04:47 -0700729#define PSA_WANT_ALG_XTS 1
730#endif
731
David Browneed74df2021-03-15 15:53:57 -0600732#if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
733#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
734#define PSA_WANT_ECC_BRAINPOOL_P_R1_256
735#endif
736
737#if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
738#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
739#define PSA_WANT_ECC_BRAINPOOL_P_R1_384
740#endif
741
742#if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
743#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
744#define PSA_WANT_ECC_BRAINPOOL_P_R1_512
745#endif
746
747#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
748#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
749#define PSA_WANT_ECC_MONTGOMERY_255
750#endif
751
Archanaef6aa5c2021-06-08 11:40:10 +0530752#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
David Browneed74df2021-03-15 15:53:57 -0600753#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
754#define PSA_WANT_ECC_MONTGOMERY_448
755#endif
756
David Brown8de143e2021-02-19 14:08:00 -0700757#if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700758#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
759#define PSA_WANT_ECC_SECP_R1_192
David Brown8de143e2021-02-19 14:08:00 -0700760#endif
761
762#if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700763#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
764#define PSA_WANT_ECC_SECP_R1_224
David Brown8de143e2021-02-19 14:08:00 -0700765#endif
766
767#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700768#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
769#define PSA_WANT_ECC_SECP_R1_256
David Brown8de143e2021-02-19 14:08:00 -0700770#endif
771
772#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700773#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
774#define PSA_WANT_ECC_SECP_R1_384
David Brown8de143e2021-02-19 14:08:00 -0700775#endif
776
777#if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700778#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
779#define PSA_WANT_ECC_SECP_R1_521
David Brown8de143e2021-02-19 14:08:00 -0700780#endif
781
782#if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700783#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
784#define PSA_WANT_ECC_SECP_K1_192
David Brown8de143e2021-02-19 14:08:00 -0700785#endif
786
Gilles Peskine39841302021-03-23 12:06:45 +0100787/* SECP224K1 is buggy via the PSA API (https://github.com/ARMmbed/mbedtls/issues/3541) */
788#if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700789#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
790#define PSA_WANT_ECC_SECP_K1_224
David Brown8de143e2021-02-19 14:08:00 -0700791#endif
792
David Brown9b178de2021-03-10 13:14:48 -0700793#if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700794#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
795#define PSA_WANT_ECC_SECP_K1_256
David Brown8de143e2021-02-19 14:08:00 -0700796#endif
797
John Durkop2dfaf9c2020-09-24 04:30:10 -0700798#endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
John Durkopd8959392020-09-20 23:09:17 -0700799
Gilles Peskine60b29fe2021-02-16 14:06:50 +0100800/* These features are always enabled. */
801#define PSA_WANT_KEY_TYPE_DERIVE 1
802#define PSA_WANT_KEY_TYPE_RAW_DATA 1
803
John Durkop6e33dbe2020-09-17 21:15:13 -0700804#ifdef __cplusplus
805}
806#endif
807
808#endif /* MBEDTLS_CONFIG_PSA_H */