blob: 568d8c2bfcc8df8edf5f9361016aa0a17bb8e62e [file] [log] [blame]
John Durkop6e33dbe2020-09-17 21:15:13 -07001/**
2 * \file mbedtls/config_psa.h
3 * \brief PSA crypto configuration options (set of defines)
4 *
John Durkop34818822020-10-12 21:36:22 -07005 * This set of compile-time options takes settings defined in
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02006 * include/mbedtls/mbedtls_config.h and include/psa/crypto_config.h and uses
John Durkop34818822020-10-12 21:36:22 -07007 * those definitions to define symbols used in the library code.
8 *
9 * Users and integrators should not edit this file, please edit
Tom Cosgrove1797b052022-12-04 17:19:59 +000010 * include/mbedtls/mbedtls_config.h for MBEDTLS_XXX settings or
John Durkop34818822020-10-12 21:36:22 -070011 * include/psa/crypto_config.h for PSA_WANT_XXX settings.
John Durkop6e33dbe2020-09-17 21:15:13 -070012 */
13/*
14 * Copyright The Mbed TLS Contributors
15 * SPDX-License-Identifier: Apache-2.0
16 *
17 * Licensed under the Apache License, Version 2.0 (the "License"); you may
18 * not use this file except in compliance with the License.
19 * You may obtain a copy of the License at
20 *
21 * http://www.apache.org/licenses/LICENSE-2.0
22 *
23 * Unless required by applicable law or agreed to in writing, software
24 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
25 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
26 * See the License for the specific language governing permissions and
27 * limitations under the License.
28 */
29
30#ifndef MBEDTLS_CONFIG_PSA_H
31#define MBEDTLS_CONFIG_PSA_H
32
John Durkop714e3a12020-09-29 22:07:04 -070033#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010034#if defined(MBEDTLS_PSA_CRYPTO_CONFIG_FILE)
35#include MBEDTLS_PSA_CRYPTO_CONFIG_FILE
36#else
John Durkop6e33dbe2020-09-17 21:15:13 -070037#include "psa/crypto_config.h"
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010038#endif
John Durkop76228ac2020-09-29 22:33:49 -070039#endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
John Durkop6e33dbe2020-09-17 21:15:13 -070040
Gilles Peskinef4c6eb02022-03-16 17:10:48 +010041#if defined(MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE)
42#include MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE
43#endif
44
John Durkop6e33dbe2020-09-17 21:15:13 -070045#ifdef __cplusplus
46extern "C" {
47#endif
48
Gilles Peskine1231eb52021-04-19 22:24:23 +020049
50
51/****************************************************************/
52/* De facto synonyms */
53/****************************************************************/
54
55#if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA)
56#define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY
57#elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA)
58#define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA
59#endif
60
Gilles Peskine08622b62022-03-15 16:40:59 +010061#if defined(PSA_WANT_ALG_CCM_STAR_NO_TAG) && !defined(PSA_WANT_ALG_CCM)
62#define PSA_WANT_ALG_CCM PSA_WANT_ALG_CCM_STAR_NO_TAG
63#elif !defined(PSA_WANT_ALG_CCM_STAR_NO_TAG) && defined(PSA_WANT_ALG_CCM)
64#define PSA_WANT_ALG_CCM_STAR_NO_TAG PSA_WANT_ALG_CCM
65#endif
66
Gilles Peskine1231eb52021-04-19 22:24:23 +020067#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
68#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW
69#elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
70#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN
71#endif
72
Gilles Peskine44c96aa2021-10-04 18:33:56 +020073#if defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && !defined(PSA_WANT_ALG_RSA_PSS)
74#define PSA_WANT_ALG_RSA_PSS PSA_WANT_ALG_RSA_PSS_ANY_SALT
75#elif !defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && defined(PSA_WANT_ALG_RSA_PSS)
76#define PSA_WANT_ALG_RSA_PSS_ANY_SALT PSA_WANT_ALG_RSA_PSS
77#endif
78
Gilles Peskine1231eb52021-04-19 22:24:23 +020079
80
81/****************************************************************/
82/* Require built-in implementations based on PSA requirements */
83/****************************************************************/
84
John Durkop2dfaf9c2020-09-24 04:30:10 -070085#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
John Durkopd8959392020-09-20 23:09:17 -070086
John Durkopd62b6782020-11-30 21:06:05 -080087#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
88#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
89#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
90#define MBEDTLS_ECDSA_DETERMINISTIC
91#define MBEDTLS_ECDSA_C
92#define MBEDTLS_HMAC_DRBG_C
93#define MBEDTLS_MD_C
94#endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
95#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
96
97#if defined(PSA_WANT_ALG_ECDH)
98#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
99#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
100#define MBEDTLS_ECDH_C
101#define MBEDTLS_ECP_C
102#define MBEDTLS_BIGNUM_C
103#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */
104#endif /* PSA_WANT_ALG_ECDH */
105
106#if defined(PSA_WANT_ALG_ECDSA)
107#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
108#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
109#define MBEDTLS_ECDSA_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200110#define MBEDTLS_ECP_C
111#define MBEDTLS_BIGNUM_C
112#define MBEDTLS_ASN1_PARSE_C
113#define MBEDTLS_ASN1_WRITE_C
John Durkopd62b6782020-11-30 21:06:05 -0800114#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
115#endif /* PSA_WANT_ALG_ECDSA */
116
117#if defined(PSA_WANT_ALG_HKDF)
118#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
119#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
120#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
121#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
122#endif /* PSA_WANT_ALG_HKDF */
123
Przemek Stekiel3e8249c2022-06-03 14:05:07 +0200124#if defined(PSA_WANT_ALG_HKDF_EXTRACT)
125#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT)
126#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
127#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
128#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT */
129#endif /* PSA_WANT_ALG_HKDF_EXTRACT */
130
131#if defined(PSA_WANT_ALG_HKDF_EXPAND)
132#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND)
133#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
134#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
135#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND */
136#endif /* PSA_WANT_ALG_HKDF_EXPAND */
137
John Durkopd62b6782020-11-30 21:06:05 -0800138#if defined(PSA_WANT_ALG_HMAC)
139#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
140#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
141#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
142#endif /* PSA_WANT_ALG_HMAC */
143
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100144#if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
145#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
146#define MBEDTLS_MD5_C
147#endif
148
Neil Armstronga557cb82022-06-10 08:58:32 +0200149#if defined(PSA_WANT_ALG_JPAKE)
Przemek Stekiel4aa99402023-02-27 13:00:57 +0100150#if !defined(MBEDTLS_PSA_ACCEL_ALG_JPAKE)
Neil Armstrong637d0a02022-05-25 11:28:22 +0200151#define MBEDTLS_PSA_BUILTIN_PAKE 1
Neil Armstronga557cb82022-06-10 08:58:32 +0200152#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
Neil Armstronged407822022-06-15 11:21:33 +0200153#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
Neil Armstrong637d0a02022-05-25 11:28:22 +0200154#define MBEDTLS_BIGNUM_C
155#define MBEDTLS_ECP_C
Neil Armstrong637d0a02022-05-25 11:28:22 +0200156#define MBEDTLS_ECJPAKE_C
Przemek Stekiel4aa99402023-02-27 13:00:57 +0100157#endif /* MBEDTLS_PSA_ACCEL_ALG_JPAKE */
Neil Armstronga557cb82022-06-10 08:58:32 +0200158#endif /* PSA_WANT_ALG_JPAKE */
Neil Armstrong637d0a02022-05-25 11:28:22 +0200159
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100160#if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
161#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
162#define MBEDTLS_RIPEMD160_C
163#endif
164
John Durkopd62b6782020-11-30 21:06:05 -0800165#if defined(PSA_WANT_ALG_RSA_OAEP)
166#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
167#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
168#define MBEDTLS_RSA_C
169#define MBEDTLS_BIGNUM_C
170#define MBEDTLS_OID_C
171#define MBEDTLS_PKCS1_V21
John Durkopd62b6782020-11-30 21:06:05 -0800172#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
173#endif /* PSA_WANT_ALG_RSA_OAEP */
174
175#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
176#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
177#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
178#define MBEDTLS_RSA_C
179#define MBEDTLS_BIGNUM_C
180#define MBEDTLS_OID_C
181#define MBEDTLS_PKCS1_V15
182#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
183#endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
184
185#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
186#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
187#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
188#define MBEDTLS_RSA_C
189#define MBEDTLS_BIGNUM_C
190#define MBEDTLS_OID_C
191#define MBEDTLS_PKCS1_V15
John Durkopd62b6782020-11-30 21:06:05 -0800192#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
193#endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
194
195#if defined(PSA_WANT_ALG_RSA_PSS)
196#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
197#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
198#define MBEDTLS_RSA_C
199#define MBEDTLS_BIGNUM_C
200#define MBEDTLS_OID_C
201#define MBEDTLS_PKCS1_V21
John Durkopd62b6782020-11-30 21:06:05 -0800202#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
203#endif /* PSA_WANT_ALG_RSA_PSS */
204
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100205#if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
206#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
207#define MBEDTLS_SHA1_C
208#endif
209
210#if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
211#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200212#define MBEDTLS_SHA224_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100213#endif
214
215#if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
216#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
217#define MBEDTLS_SHA256_C
218#endif
219
220#if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
221#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200222#define MBEDTLS_SHA384_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100223#endif
224
225#if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
226#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
227#define MBEDTLS_SHA512_C
228#endif
229
John Durkop07cc04a2020-11-16 22:08:34 -0800230#if defined(PSA_WANT_ALG_TLS12_PRF)
231#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
John Durkopd62b6782020-11-30 21:06:05 -0800232#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
John Durkop07cc04a2020-11-16 22:08:34 -0800233#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
234#endif /* PSA_WANT_ALG_TLS12_PRF */
235
236#if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
237#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
John Durkopd62b6782020-11-30 21:06:05 -0800238#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
John Durkop07cc04a2020-11-16 22:08:34 -0800239#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
240#endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
241
Andrzej Kurek08d34b82022-07-29 10:00:16 -0400242#if defined(PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS)
243#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS)
244#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
245#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS */
246#endif /* PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS */
247
John Durkop07cc04a2020-11-16 22:08:34 -0800248#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR)
249#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR)
John Durkopd62b6782020-11-30 21:06:05 -0800250#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
John Durkop07cc04a2020-11-16 22:08:34 -0800251#define MBEDTLS_ECP_C
252#define MBEDTLS_BIGNUM_C
253#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR */
254#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR */
255
256#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
257#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800258#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
John Durkop07cc04a2020-11-16 22:08:34 -0800259#define MBEDTLS_ECP_C
260#define MBEDTLS_BIGNUM_C
261#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */
262#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
263
John Durkop9814fa22020-11-04 12:28:15 -0800264#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR)
John Durkop0e005192020-10-31 22:06:54 -0700265#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR)
John Durkopd62b6782020-11-30 21:06:05 -0800266#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
John Durkop0e005192020-10-31 22:06:54 -0700267#define MBEDTLS_RSA_C
268#define MBEDTLS_BIGNUM_C
269#define MBEDTLS_OID_C
270#define MBEDTLS_GENPRIME
John Durkop07cc04a2020-11-16 22:08:34 -0800271#define MBEDTLS_PK_PARSE_C
272#define MBEDTLS_PK_WRITE_C
273#define MBEDTLS_PK_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200274#define MBEDTLS_ASN1_PARSE_C
275#define MBEDTLS_ASN1_WRITE_C
John Durkop0e005192020-10-31 22:06:54 -0700276#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR */
John Durkop9814fa22020-11-04 12:28:15 -0800277#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR */
278
279#if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkop0e005192020-10-31 22:06:54 -0700280#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800281#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
John Durkop0e005192020-10-31 22:06:54 -0700282#define MBEDTLS_RSA_C
283#define MBEDTLS_BIGNUM_C
284#define MBEDTLS_OID_C
John Durkop07cc04a2020-11-16 22:08:34 -0800285#define MBEDTLS_PK_PARSE_C
286#define MBEDTLS_PK_WRITE_C
287#define MBEDTLS_PK_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200288#define MBEDTLS_ASN1_PARSE_C
289#define MBEDTLS_ASN1_WRITE_C
John Durkop0e005192020-10-31 22:06:54 -0700290#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkop9814fa22020-11-04 12:28:15 -0800291#endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkopd0321952020-10-29 21:37:36 -0700292
David Brownb781f752021-02-08 15:44:52 -0700293/* If any of the block modes are requested that don't have an
294 * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
295 * in the block cipher key types. */
296#if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
Bence Szépkúti7921cce2021-02-17 11:46:50 +0100297 (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700298 (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700299 defined(PSA_WANT_ALG_ECB_NO_PADDING) || \
300 (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100301 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
David Brownb781f752021-02-08 15:44:52 -0700302 (defined(PSA_WANT_ALG_CBC_PKCS7) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100303 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100304 (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
David Brownb781f752021-02-08 15:44:52 -0700305#define PSA_HAVE_SOFT_BLOCK_MODE 1
306#endif
307
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100308#if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
309 (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
310#define PSA_HAVE_SOFT_BLOCK_AEAD 1
311#endif
312
David Brown94933082021-01-05 12:03:25 -0700313#if defined(PSA_WANT_KEY_TYPE_AES)
David Browne1f91f02021-02-09 15:56:22 -0700314#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
315#define PSA_HAVE_SOFT_KEY_TYPE_AES 1
316#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
317#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100318 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
319 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700320#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700321#define MBEDTLS_AES_C
David Browne1f91f02021-02-09 15:56:22 -0700322#endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown94933082021-01-05 12:03:25 -0700323#endif /* PSA_WANT_KEY_TYPE_AES */
324
Gilles Peskine09c46da2021-10-08 15:48:16 +0200325#if defined(PSA_WANT_KEY_TYPE_ARIA)
326#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA)
327#define PSA_HAVE_SOFT_KEY_TYPE_ARIA 1
328#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA */
329#if defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
330 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
331 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
332#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
333#define MBEDTLS_ARIA_C
334#endif /* PSA_HAVE_SOFT_KEY_TYPE_ARIA || PSA_HAVE_SOFT_BLOCK_MODE */
335#endif /* PSA_WANT_KEY_TYPE_ARIA */
336
David Brown686e6e82021-01-05 12:03:25 -0700337#if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
David Browne1f91f02021-02-09 15:56:22 -0700338#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
339#define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
340#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
341#if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100342 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
343 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700344#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700345#define MBEDTLS_CAMELLIA_C
David Browne1f91f02021-02-09 15:56:22 -0700346#endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown686e6e82021-01-05 12:03:25 -0700347#endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
348
David Brownb65a7f72021-01-15 12:04:09 -0700349#if defined(PSA_WANT_KEY_TYPE_DES)
David Browne1f91f02021-02-09 15:56:22 -0700350#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
351#define PSA_HAVE_SOFT_KEY_TYPE_DES 1
352#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
353#if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
David Brownb781f752021-02-08 15:44:52 -0700354 defined(PSA_HAVE_SOFT_BLOCK_MODE)
David Brown78a429b2021-01-21 09:48:57 -0700355#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700356#define MBEDTLS_DES_C
David Browne1f91f02021-02-09 15:56:22 -0700357#endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brownb65a7f72021-01-15 12:04:09 -0700358#endif /* PSA_WANT_KEY_TYPE_DES */
359
David Brownb16727a2021-02-08 16:31:46 -0700360#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
361#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20)
362#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
363#define MBEDTLS_CHACHA20_C
364#endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */
365#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
366
David Brownf84a0f62021-02-09 15:59:41 -0700367/* If any of the software block ciphers are selected, define
368 * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
369 * situations. */
370#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200371 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
David Brownf84a0f62021-02-09 15:59:41 -0700372 defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
373 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
374#define PSA_HAVE_SOFT_BLOCK_CIPHER 1
375#endif
376
David Brown99844272021-01-15 12:04:47 -0700377#if defined(PSA_WANT_ALG_STREAM_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700378#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brown99844272021-01-15 12:04:47 -0700379#endif /* PSA_WANT_ALG_STREAM_CIPHER */
380
Ronald Crond85e98d2021-03-25 15:32:32 +0100381#if defined(PSA_WANT_ALG_CBC_MAC)
382#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
383#error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
384#define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
385#endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
386#endif /* PSA_WANT_ALG_CBC_MAC */
387
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100388#if defined(PSA_WANT_ALG_CMAC)
389#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
390 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
391#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
392#define MBEDTLS_CMAC_C
393#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
394#endif /* PSA_WANT_ALG_CMAC */
395
David Brown99844272021-01-15 12:04:47 -0700396#if defined(PSA_WANT_ALG_CTR)
David Brown4b9ec7a2021-02-05 12:47:08 -0700397#if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
David Brownf84a0f62021-02-09 15:59:41 -0700398 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700399#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700400#define MBEDTLS_CIPHER_MODE_CTR
David Brown4b9ec7a2021-02-05 12:47:08 -0700401#endif
David Brown99844272021-01-15 12:04:47 -0700402#endif /* PSA_WANT_ALG_CTR */
403
404#if defined(PSA_WANT_ALG_CFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700405#if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700406 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700407#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700408#define MBEDTLS_CIPHER_MODE_CFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700409#endif
David Brown99844272021-01-15 12:04:47 -0700410#endif /* PSA_WANT_ALG_CFB */
411
412#if defined(PSA_WANT_ALG_OFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700413#if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700414 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700415#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700416#define MBEDTLS_CIPHER_MODE_OFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700417#endif
David Brown99844272021-01-15 12:04:47 -0700418#endif /* PSA_WANT_ALG_OFB */
419
Gilles Peskine7a2e83b2022-03-17 11:09:23 +0100420#if defined(PSA_WANT_ALG_ECB_NO_PADDING) && \
421 !defined(MBEDTLS_PSA_ACCEL_ALG_ECB_NO_PADDING)
David Brownbe380c12021-02-11 10:55:48 -0700422#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700423#endif
424
David Brown12f45f92021-01-26 11:50:36 -0700425#if defined(PSA_WANT_ALG_CBC_NO_PADDING)
David Brown4b9ec7a2021-02-05 12:47:08 -0700426#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
David Brownfc468182021-02-09 16:23:34 -0700427 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700428#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700429#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown4b9ec7a2021-02-05 12:47:08 -0700430#endif
David Brown12f45f92021-01-26 11:50:36 -0700431#endif /* PSA_WANT_ALG_CBC_NO_PADDING */
432
433#if defined(PSA_WANT_ALG_CBC_PKCS7)
David Brown4b9ec7a2021-02-05 12:47:08 -0700434#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
David Brownfc468182021-02-09 16:23:34 -0700435 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700436#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700437#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brownfc468182021-02-09 16:23:34 -0700438#define MBEDTLS_CIPHER_PADDING_PKCS7
David Brown4b9ec7a2021-02-05 12:47:08 -0700439#endif
David Brown12f45f92021-01-26 11:50:36 -0700440#endif /* PSA_WANT_ALG_CBC_PKCS7 */
441
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100442#if defined(PSA_WANT_ALG_CCM)
443#if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
444 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200445 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100446 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
447#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100448#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100449#define MBEDTLS_CCM_C
450#endif
451#endif /* PSA_WANT_ALG_CCM */
452
453#if defined(PSA_WANT_ALG_GCM)
454#if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
455 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200456 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100457 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
458#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
459#define MBEDTLS_GCM_C
460#endif
461#endif /* PSA_WANT_ALG_GCM */
462
David Brownac4fa072021-02-08 16:47:35 -0700463#if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200464#if !defined(MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305)
David Brownac4fa072021-02-08 16:47:35 -0700465#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
466#define MBEDTLS_CHACHAPOLY_C
Summer Qin9f2596f2022-06-17 12:50:32 +0800467#define MBEDTLS_CHACHA20_C
468#define MBEDTLS_POLY1305_C
David Brown86730a82021-02-09 16:24:11 -0700469#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700470#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200471#endif /* !MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305 */
David Brownac4fa072021-02-08 16:47:35 -0700472#endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
473
David Browneed74df2021-03-15 15:53:57 -0600474#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
475#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
476#define MBEDTLS_ECP_DP_BP256R1_ENABLED
477#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
478#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */
479#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
480
481#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
482#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
483#define MBEDTLS_ECP_DP_BP384R1_ENABLED
484#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
485#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */
486#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
487
488#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
489#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
490#define MBEDTLS_ECP_DP_BP512R1_ENABLED
491#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
492#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */
493#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
494
495#if defined(PSA_WANT_ECC_MONTGOMERY_255)
496#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
497#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
498#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
499#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */
500#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
501
502#if defined(PSA_WANT_ECC_MONTGOMERY_448)
503#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
504#define MBEDTLS_ECP_DP_CURVE448_ENABLED
505#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
506#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */
507#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
508
David Brownc7b9b2b2021-02-19 21:05:52 -0700509#if defined(PSA_WANT_ECC_SECP_R1_192)
510#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
511#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
512#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
513#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */
514#endif /* PSA_WANT_ECC_SECP_R1_192 */
515
516#if defined(PSA_WANT_ECC_SECP_R1_224)
517#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
518#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
519#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
520#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */
521#endif /* PSA_WANT_ECC_SECP_R1_224 */
522
523#if defined(PSA_WANT_ECC_SECP_R1_256)
524#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
525#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
526#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
527#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */
528#endif /* PSA_WANT_ECC_SECP_R1_256 */
529
530#if defined(PSA_WANT_ECC_SECP_R1_384)
531#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
532#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
533#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
534#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */
535#endif /* PSA_WANT_ECC_SECP_R1_384 */
536
537#if defined(PSA_WANT_ECC_SECP_R1_521)
538#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
539#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
540#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
541#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */
542#endif /* PSA_WANT_ECC_SECP_R1_521 */
543
544#if defined(PSA_WANT_ECC_SECP_K1_192)
545#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
David Brown8de143e2021-02-19 14:08:00 -0700546#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700547#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
548#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */
549#endif /* PSA_WANT_ECC_SECP_K1_192 */
David Brown8de143e2021-02-19 14:08:00 -0700550
David Brownc7b9b2b2021-02-19 21:05:52 -0700551#if defined(PSA_WANT_ECC_SECP_K1_224)
552#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
Ronald Crone1f55162021-03-25 15:09:47 +0100553/*
554 * SECP224K1 is buggy via the PSA API in Mbed TLS
Dave Rodgman017a1992022-03-31 14:07:01 +0100555 * (https://github.com/Mbed-TLS/mbedtls/issues/3541).
Ronald Crone1f55162021-03-25 15:09:47 +0100556 */
557#error "SECP224K1 is buggy via the PSA API in Mbed TLS."
David Brown8de143e2021-02-19 14:08:00 -0700558#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700559#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
560#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */
561#endif /* PSA_WANT_ECC_SECP_K1_224 */
David Brown8de143e2021-02-19 14:08:00 -0700562
David Brownc7b9b2b2021-02-19 21:05:52 -0700563#if defined(PSA_WANT_ECC_SECP_K1_256)
564#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
David Brown9b178de2021-03-10 13:14:48 -0700565#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700566#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
567#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */
568#endif /* PSA_WANT_ECC_SECP_K1_256 */
David Brown8de143e2021-02-19 14:08:00 -0700569
Gilles Peskine1231eb52021-04-19 22:24:23 +0200570
571
572/****************************************************************/
573/* Infer PSA requirements from Mbed TLS capabilities */
574/****************************************************************/
575
John Durkop714e3a12020-09-29 22:07:04 -0700576#else /* MBEDTLS_PSA_CRYPTO_CONFIG */
577
578/*
579 * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
580 * is not defined
581 */
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100582
Ronald Cron3d471812021-03-18 13:40:31 +0100583#if defined(MBEDTLS_CCM_C)
584#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100585#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
Ronald Cron3d471812021-03-18 13:40:31 +0100586#define PSA_WANT_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100587#define PSA_WANT_ALG_CCM_STAR_NO_TAG 1
Ronald Cron3d471812021-03-18 13:40:31 +0100588#endif /* MBEDTLS_CCM_C */
589
590#if defined(MBEDTLS_CMAC_C)
591#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
592#define PSA_WANT_ALG_CMAC 1
593#endif /* MBEDTLS_CMAC_C */
594
John Durkopd62b6782020-11-30 21:06:05 -0800595#if defined(MBEDTLS_ECDH_C)
596#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
597#define PSA_WANT_ALG_ECDH 1
598#endif /* MBEDTLS_ECDH_C */
599
600#if defined(MBEDTLS_ECDSA_C)
601#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
602#define PSA_WANT_ALG_ECDSA 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200603#define PSA_WANT_ALG_ECDSA_ANY 1
John Durkopd62b6782020-11-30 21:06:05 -0800604
605// Only add in DETERMINISTIC support if ECDSA is also enabled
606#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
607#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
608#define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1
609#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
610
611#endif /* MBEDTLS_ECDSA_C */
612
613#if defined(MBEDTLS_ECP_C)
614#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
615#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
616#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
617#define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
618#endif /* MBEDTLS_ECP_C */
619
Ronald Cron3d471812021-03-18 13:40:31 +0100620#if defined(MBEDTLS_GCM_C)
621#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
622#define PSA_WANT_ALG_GCM 1
623#endif /* MBEDTLS_GCM_C */
624
Przemek Stekiel18399d82022-06-27 13:34:50 +0200625/* Enable PSA HKDF algorithm if mbedtls HKDF is supported.
626 * PSA HKDF EXTRACT and PSA HKDF EXPAND have minimal cost when
627 * PSA HKDF is enabled, so enable both algorithms together
628 * with PSA HKDF. */
John Durkopd62b6782020-11-30 21:06:05 -0800629#if defined(MBEDTLS_HKDF_C)
630#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
631#define PSA_WANT_ALG_HMAC 1
632#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
633#define PSA_WANT_ALG_HKDF 1
Przemek Stekielb33bd192022-06-21 09:58:51 +0200634#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
635#define PSA_WANT_ALG_HKDF_EXTRACT 1
636#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
637#define PSA_WANT_ALG_HKDF_EXPAND 1
John Durkopd62b6782020-11-30 21:06:05 -0800638#endif /* MBEDTLS_HKDF_C */
639
John Durkopd62b6782020-11-30 21:06:05 -0800640#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
641#define PSA_WANT_ALG_HMAC 1
Gilles Peskine47a89332021-01-12 00:00:15 +0100642#define PSA_WANT_KEY_TYPE_HMAC
Andrzej Kurek65bf73e2022-08-31 14:59:31 -0400643
644#if defined(MBEDTLS_MD_C)
John Durkopd62b6782020-11-30 21:06:05 -0800645#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
646#define PSA_WANT_ALG_TLS12_PRF 1
647#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
648#define PSA_WANT_ALG_TLS12_PSK_TO_MS 1
649#endif /* MBEDTLS_MD_C */
650
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100651#if defined(MBEDTLS_MD5_C)
652#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
653#define PSA_WANT_ALG_MD5 1
654#endif
655
Neil Armstrong637d0a02022-05-25 11:28:22 +0200656#if defined(MBEDTLS_ECJPAKE_C)
657#define MBEDTLS_PSA_BUILTIN_PAKE 1
Neil Armstronga557cb82022-06-10 08:58:32 +0200658#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
659#define PSA_WANT_ALG_JPAKE 1
Neil Armstrong637d0a02022-05-25 11:28:22 +0200660#endif
661
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100662#if defined(MBEDTLS_RIPEMD160_C)
663#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
664#define PSA_WANT_ALG_RIPEMD160 1
665#endif
666
John Durkopd62b6782020-11-30 21:06:05 -0800667#if defined(MBEDTLS_RSA_C)
668#if defined(MBEDTLS_PKCS1_V15)
669#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
670#define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
671#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
672#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200673#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1
Yuto Takano7828ca22021-08-10 11:26:15 +0100674#endif /* MBEDTLS_PKCS1_V15 */
John Durkopd62b6782020-11-30 21:06:05 -0800675#if defined(MBEDTLS_PKCS1_V21)
676#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
677#define PSA_WANT_ALG_RSA_OAEP 1
678#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
679#define PSA_WANT_ALG_RSA_PSS 1
680#endif /* MBEDTLS_PKCS1_V21 */
681#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
682#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
683#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
684#define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
685#endif /* MBEDTLS_RSA_C */
686
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100687#if defined(MBEDTLS_SHA1_C)
688#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
689#define PSA_WANT_ALG_SHA_1 1
690#endif
691
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200692#if defined(MBEDTLS_SHA224_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100693#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Gilles Peskineb65db072021-01-12 00:00:53 +0100694#define PSA_WANT_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200695#endif
696
697#if defined(MBEDTLS_SHA256_C)
698#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100699#define PSA_WANT_ALG_SHA_256 1
700#endif
701
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200702#if defined(MBEDTLS_SHA384_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100703#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
704#define PSA_WANT_ALG_SHA_384 1
705#endif
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200706
707#if defined(MBEDTLS_SHA512_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100708#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
709#define PSA_WANT_ALG_SHA_512 1
710#endif
711
David Brown94933082021-01-05 12:03:25 -0700712#if defined(MBEDTLS_AES_C)
713#define PSA_WANT_KEY_TYPE_AES 1
David Brownda7dbb72021-01-26 11:44:15 -0700714#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700715#endif
716
Gilles Peskine09c46da2021-10-08 15:48:16 +0200717#if defined(MBEDTLS_ARIA_C)
718#define PSA_WANT_KEY_TYPE_ARIA 1
719#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
720#endif
721
David Brown686e6e82021-01-05 12:03:25 -0700722#if defined(MBEDTLS_CAMELLIA_C)
723#define PSA_WANT_KEY_TYPE_CAMELLIA 1
David Brownda7dbb72021-01-26 11:44:15 -0700724#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700725#endif
726
David Brownb65a7f72021-01-15 12:04:09 -0700727#if defined(MBEDTLS_DES_C)
728#define PSA_WANT_KEY_TYPE_DES 1
David Brownda7dbb72021-01-26 11:44:15 -0700729#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700730#endif
731
Andrzej Kurekd60907b2022-09-14 10:02:30 -0400732#if defined(MBEDTLS_PSA_BUILTIN_ALG_SHA_256)
733#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
734#define PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS 1
735#endif
736
David Brownb16727a2021-02-08 16:31:46 -0700737#if defined(MBEDTLS_CHACHA20_C)
738#define PSA_WANT_KEY_TYPE_CHACHA20 1
739#define PSA_WANT_ALG_STREAM_CIPHER 1
740#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
741#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brownac4fa072021-02-08 16:47:35 -0700742#if defined(MBEDTLS_CHACHAPOLY_C)
743#define PSA_WANT_ALG_CHACHA20_POLY1305 1
David Brown86730a82021-02-09 16:24:11 -0700744#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700745#endif
David Brownb16727a2021-02-08 16:31:46 -0700746#endif
747
David Brown99844272021-01-15 12:04:47 -0700748#if defined(MBEDTLS_CIPHER_MODE_CBC)
David Brown10cb81c2021-02-09 16:10:29 -0700749#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700750#define PSA_WANT_ALG_CBC_NO_PADDING 1
751#if defined(MBEDTLS_CIPHER_PADDING_PKCS7)
David Brown12f45f92021-01-26 11:50:36 -0700752#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brown99844272021-01-15 12:04:47 -0700753#define PSA_WANT_ALG_CBC_PKCS7 1
754#endif
755#endif
756
757#if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200758 defined(MBEDTLS_ARIA_C) || defined(MBEDTLS_CAMELLIA_C)
David Brown10cb81c2021-02-09 16:10:29 -0700759#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700760#define PSA_WANT_ALG_ECB_NO_PADDING 1
761#endif
762
763#if defined(MBEDTLS_CIPHER_MODE_CFB)
David Brown12f45f92021-01-26 11:50:36 -0700764#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700765#define PSA_WANT_ALG_CFB 1
766#endif
767
768#if defined(MBEDTLS_CIPHER_MODE_CTR)
David Brown12f45f92021-01-26 11:50:36 -0700769#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700770#define PSA_WANT_ALG_CTR 1
771#endif
772
773#if defined(MBEDTLS_CIPHER_MODE_OFB)
David Brown12f45f92021-01-26 11:50:36 -0700774#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700775#define PSA_WANT_ALG_OFB 1
776#endif
777
David Browneed74df2021-03-15 15:53:57 -0600778#if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
779#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
780#define PSA_WANT_ECC_BRAINPOOL_P_R1_256
781#endif
782
783#if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
784#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
785#define PSA_WANT_ECC_BRAINPOOL_P_R1_384
786#endif
787
788#if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
789#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
790#define PSA_WANT_ECC_BRAINPOOL_P_R1_512
791#endif
792
793#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
794#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
795#define PSA_WANT_ECC_MONTGOMERY_255
796#endif
797
Archanaef6aa5c2021-06-08 11:40:10 +0530798#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
David Browneed74df2021-03-15 15:53:57 -0600799#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
800#define PSA_WANT_ECC_MONTGOMERY_448
801#endif
802
David Brown8de143e2021-02-19 14:08:00 -0700803#if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700804#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
805#define PSA_WANT_ECC_SECP_R1_192
David Brown8de143e2021-02-19 14:08:00 -0700806#endif
807
808#if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700809#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
810#define PSA_WANT_ECC_SECP_R1_224
David Brown8de143e2021-02-19 14:08:00 -0700811#endif
812
813#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700814#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
815#define PSA_WANT_ECC_SECP_R1_256
David Brown8de143e2021-02-19 14:08:00 -0700816#endif
817
818#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700819#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
820#define PSA_WANT_ECC_SECP_R1_384
David Brown8de143e2021-02-19 14:08:00 -0700821#endif
822
823#if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700824#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
825#define PSA_WANT_ECC_SECP_R1_521
David Brown8de143e2021-02-19 14:08:00 -0700826#endif
827
828#if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700829#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
830#define PSA_WANT_ECC_SECP_K1_192
David Brown8de143e2021-02-19 14:08:00 -0700831#endif
832
Dave Rodgman017a1992022-03-31 14:07:01 +0100833/* SECP224K1 is buggy via the PSA API (https://github.com/Mbed-TLS/mbedtls/issues/3541) */
Gilles Peskine39841302021-03-23 12:06:45 +0100834#if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700835#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
836#define PSA_WANT_ECC_SECP_K1_224
David Brown8de143e2021-02-19 14:08:00 -0700837#endif
838
David Brown9b178de2021-03-10 13:14:48 -0700839#if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700840#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
841#define PSA_WANT_ECC_SECP_K1_256
David Brown8de143e2021-02-19 14:08:00 -0700842#endif
843
John Durkop2dfaf9c2020-09-24 04:30:10 -0700844#endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
John Durkopd8959392020-09-20 23:09:17 -0700845
Manuel Pégourié-Gonnard45bcb6a2023-03-10 11:40:48 +0100846#if defined(PSA_WANT_ALG_ECDSA) && defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR) && \
847 defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
848#define PSA_HAVE_FULL_ECDSA 1
849#endif
850
Gilles Peskine60b29fe2021-02-16 14:06:50 +0100851/* These features are always enabled. */
852#define PSA_WANT_KEY_TYPE_DERIVE 1
Gilles Peskinebba26302022-12-15 23:25:17 +0100853#define PSA_WANT_KEY_TYPE_PASSWORD 1
854#define PSA_WANT_KEY_TYPE_PASSWORD_HASH 1
Gilles Peskine60b29fe2021-02-16 14:06:50 +0100855#define PSA_WANT_KEY_TYPE_RAW_DATA 1
856
John Durkop6e33dbe2020-09-17 21:15:13 -0700857#ifdef __cplusplus
858}
859#endif
860
861#endif /* MBEDTLS_CONFIG_PSA_H */