| #------------------------------------------------------------------------------- |
| # Copyright (c) 2019-2020, Arm Limited. All rights reserved. |
| # |
| # SPDX-License-Identifier: BSD-3-Clause |
| # |
| #------------------------------------------------------------------------------- |
| |
| # This file holds information of the configuration for TF-M Profile Small with |
| # regression tests. |
| |
| if(NOT DEFINED TFM_ROOT_DIR) |
| message(FATAL_ERROR "Variable TFM_ROOT_DIR is not set!") |
| endif() |
| |
| #Include board specific config (CPU, etc...), select platform specific build |
| #system settings file |
| if(NOT DEFINED TARGET_PLATFORM) |
| message(FATAL_ERROR "ERROR: TARGET_PLATFORM is not set in command line") |
| elseif(${TARGET_PLATFORM} STREQUAL "AN521") |
| set(PLATFORM_CMAKE_FILE "${TFM_ROOT_DIR}/platform/ext/Mps2AN521.cmake") |
| elseif(${TARGET_PLATFORM} STREQUAL "AN519") |
| set (PLATFORM_CMAKE_FILE "${TFM_ROOT_DIR}/platform/ext/Mps2AN519.cmake") |
| else() |
| message(FATAL_ERROR "ERROR: Target \"${TARGET_PLATFORM}\" is not supported.") |
| endif() |
| |
| # These variables select the default setting of this TF-M Profile Small. |
| # The settings can be overwritten by the customized platform specific settings |
| |
| # Library model |
| set(CORE_IPC False) |
| # TF-M isolation level: 1 |
| set(TFM_LVL 1) |
| |
| # BL2 settings can be overwritten in the profile extension configuration |
| # or in platform specific cmake file. |
| if(NOT DEFINED BL2) |
| set(BL2 True) |
| endif() |
| |
| if(BL2) |
| # Single binary boot |
| set(MCUBOOT_IMAGE_NUMBER 1 CACHE STRING "Single binary boot by default") |
| endif() |
| |
| # Enable Internal Trusted Storage service |
| set(TFM_PARTITION_INTERNAL_TRUSTED_STORAGE ON) |
| # Use the real Flash for Internal Trusted Storage |
| set(ITS_RAM_FS OFF) |
| # Decrease the transient internal buffer size to 32 bytes |
| set(ITS_BUF_SIZE 32) |
| |
| # Enable Crypto service |
| set(TFM_PARTITION_CRYPTO ON) |
| set(CRYPTO_ASYMMETRIC_MODULE_DISABLED ON) |
| set(CRYPTO_KEY_DERIVATION_MODULE_DISABLED ON) |
| # Set the dedicated mbed-crypto default config file |
| set(MBEDTLS_CONFIG_FILE "tfm_profile_s_mbedcrypto_config.h") |
| |
| # Disable Audit Logging service |
| set(TFM_PARTITION_AUDIT_LOG OFF) |
| |
| # Disable Platform service |
| set(TFM_PARTITION_PLATFORM OFF) |
| |
| # Disable Protected Storage service |
| set(TFM_PARTITION_PROTECTED_STORAGE OFF) |
| |
| # Disable Initial Attestation service temporarily |
| set(TFM_PARTITION_INITIAL_ATTESTATION OFF) |
| |
| # Configure the test cases |
| set(REGRESSION True) |
| set(CORE_TEST True) |
| set(PSA_API_TEST False) |
| # Configure Crypto test cases |
| set(TFM_CRYPTO_TEST_ALG_CBC OFF) |
| # Select AES-CCM by default |
| set(TFM_CRYPTO_TEST_ALG_CCM ON) |
| set(TFM_CRYPTO_TEST_ALG_CFB OFF) |
| set(TFM_CRYPTO_TEST_ALG_CTR OFF) |
| set(TFM_CRYPTO_TEST_ALG_GCM OFF) |
| set(TFM_CRYPTO_TEST_ALG_SHA_512 OFF) |
| |
| # Include platform specific profile configuration extension file if it is |
| # provided via argument TFM_PROFILE_CONFIG_EXT in command line. |
| # The configuration extension file can be specified as an absolute path or a |
| # relative path to TF-M root folder. |
| if(TFM_PROFILE_CONFIG_EXT) |
| get_filename_component(TFM_PROFILE_CONFIG_EXT ${TFM_PROFILE_CONFIG_EXT} |
| ABSOLUTE BASE_DIR ${TFM_ROOT_DIR}) |
| |
| if(NOT EXISTS ${TFM_PROFILE_CONFIG_EXT}) |
| message(FATAL_ERROR "The config extension ${TFM_PROFILE_CONFIG_EXT} is not found") |
| endif() |
| |
| include(${TFM_PROFILE_CONFIG_EXT}) |
| message("The config extension ${TFM_PROFILE_CONFIG_EXT} is included") |
| endif() |
| |
| include("${TFM_ROOT_DIR}/CommonConfig.cmake") |