mbed TLS v2.28.1
Loading...
Searching...
No Matches
config_psa.h
Go to the documentation of this file.
1
13/*
14 * Copyright The Mbed TLS Contributors
15 * SPDX-License-Identifier: Apache-2.0
16 *
17 * Licensed under the Apache License, Version 2.0 (the "License"); you may
18 * not use this file except in compliance with the License.
19 * You may obtain a copy of the License at
20 *
21 * http://www.apache.org/licenses/LICENSE-2.0
22 *
23 * Unless required by applicable law or agreed to in writing, software
24 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
25 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
26 * See the License for the specific language governing permissions and
27 * limitations under the License.
28 */
29
30#ifndef MBEDTLS_CONFIG_PSA_H
31#define MBEDTLS_CONFIG_PSA_H
32
33#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
34#if defined(MBEDTLS_PSA_CRYPTO_CONFIG_FILE)
35#include MBEDTLS_PSA_CRYPTO_CONFIG_FILE
36#else
37#include "psa/crypto_config.h"
38#endif
39#endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
40
41#if defined(MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE)
42#include MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE
43#endif
44
45#ifdef __cplusplus
46extern "C" {
47#endif
48
49
50
51/****************************************************************/
52/* De facto synonyms */
53/****************************************************************/
54
55#if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA)
56#define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY
57#elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA)
58#define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA
59#endif
60
61#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
62#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW
63#elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
64#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN
65#endif
66
67#if defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && !defined(PSA_WANT_ALG_RSA_PSS)
68#define PSA_WANT_ALG_RSA_PSS PSA_WANT_ALG_RSA_PSS_ANY_SALT
69#elif !defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && defined(PSA_WANT_ALG_RSA_PSS)
70#define PSA_WANT_ALG_RSA_PSS_ANY_SALT PSA_WANT_ALG_RSA_PSS
71#endif
72
73
74
75/****************************************************************/
76/* Require built-in implementations based on PSA requirements */
77/****************************************************************/
78
79#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
80
81#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
82#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
83#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
84#define MBEDTLS_ECDSA_DETERMINISTIC
85#define MBEDTLS_ECDSA_C
86#define MBEDTLS_HMAC_DRBG_C
87#define MBEDTLS_MD_C
88#endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
89#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
90
91#if defined(PSA_WANT_ALG_ECDH)
92#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
93#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
94#define MBEDTLS_ECDH_C
95#define MBEDTLS_ECP_C
96#define MBEDTLS_BIGNUM_C
97#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */
98#endif /* PSA_WANT_ALG_ECDH */
99
100#if defined(PSA_WANT_ALG_ECDSA)
101#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
102#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
103#define MBEDTLS_ECDSA_C
104#define MBEDTLS_ECP_C
105#define MBEDTLS_BIGNUM_C
106#define MBEDTLS_ASN1_PARSE_C
107#define MBEDTLS_ASN1_WRITE_C
108#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
109#endif /* PSA_WANT_ALG_ECDSA */
110
111#if defined(PSA_WANT_ALG_HKDF)
112#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
113#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
114#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
115#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
116#endif /* PSA_WANT_ALG_HKDF */
117
118#if defined(PSA_WANT_ALG_HMAC)
119#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
120#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
121#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
122#endif /* PSA_WANT_ALG_HMAC */
123
124#if defined(PSA_WANT_ALG_MD2) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD2)
125#define MBEDTLS_PSA_BUILTIN_ALG_MD2 1
126#define MBEDTLS_MD2_C
127#endif
128
129#if defined(PSA_WANT_ALG_MD4) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD4)
130#define MBEDTLS_PSA_BUILTIN_ALG_MD4 1
131#define MBEDTLS_MD4_C
132#endif
133
134#if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
135#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
136#define MBEDTLS_MD5_C
137#endif
138
139#if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
140#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
141#define MBEDTLS_RIPEMD160_C
142#endif
143
144#if defined(PSA_WANT_ALG_RSA_OAEP)
145#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
146#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
147#define MBEDTLS_RSA_C
148#define MBEDTLS_BIGNUM_C
149#define MBEDTLS_OID_C
150#define MBEDTLS_PKCS1_V21
151#define MBEDTLS_MD_C
152#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
153#endif /* PSA_WANT_ALG_RSA_OAEP */
154
155#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
156#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
157#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
158#define MBEDTLS_RSA_C
159#define MBEDTLS_BIGNUM_C
160#define MBEDTLS_OID_C
161#define MBEDTLS_PKCS1_V15
162#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
163#endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
164
165#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
166#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
167#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
168#define MBEDTLS_RSA_C
169#define MBEDTLS_BIGNUM_C
170#define MBEDTLS_OID_C
171#define MBEDTLS_PKCS1_V15
172#define MBEDTLS_MD_C
173#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
174#endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
175
176#if defined(PSA_WANT_ALG_RSA_PSS)
177#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
178#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
179#define MBEDTLS_RSA_C
180#define MBEDTLS_BIGNUM_C
181#define MBEDTLS_OID_C
182#define MBEDTLS_PKCS1_V21
183#define MBEDTLS_MD_C
184#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
185#endif /* PSA_WANT_ALG_RSA_PSS */
186
187#if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
188#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
189#define MBEDTLS_SHA1_C
190#endif
191
192#if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
193#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
194#define MBEDTLS_SHA256_C
195#endif
196
197#if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
198#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
199#define MBEDTLS_SHA256_C
200#endif
201
202#if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
203#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
204#define MBEDTLS_SHA512_C
205#endif
206
207#if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
208#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
209#define MBEDTLS_SHA512_C
210#endif
211
212#if defined(PSA_WANT_ALG_TLS12_PRF)
213#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
214#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
215#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
216#endif /* PSA_WANT_ALG_TLS12_PRF */
217
218#if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
219#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
220#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
221#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
222#endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
223
224#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR)
225#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR)
226#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
227#define MBEDTLS_ECP_C
228#define MBEDTLS_BIGNUM_C
229#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR */
230#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR */
231
232#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
233#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
234#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
235#define MBEDTLS_ECP_C
236#define MBEDTLS_BIGNUM_C
237#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */
238#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
239
240#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR)
241#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR)
242#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
243#define MBEDTLS_RSA_C
244#define MBEDTLS_BIGNUM_C
245#define MBEDTLS_OID_C
246#define MBEDTLS_GENPRIME
247#define MBEDTLS_PK_PARSE_C
248#define MBEDTLS_PK_WRITE_C
249#define MBEDTLS_PK_C
250#define MBEDTLS_ASN1_PARSE_C
251#define MBEDTLS_ASN1_WRITE_C
252#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR */
253#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR */
254
255#if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
256#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
257#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
258#define MBEDTLS_RSA_C
259#define MBEDTLS_BIGNUM_C
260#define MBEDTLS_OID_C
261#define MBEDTLS_PK_PARSE_C
262#define MBEDTLS_PK_WRITE_C
263#define MBEDTLS_PK_C
264#define MBEDTLS_ASN1_PARSE_C
265#define MBEDTLS_ASN1_WRITE_C
266#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
267#endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
268
269/* If any of the block modes are requested that don't have an
270 * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
271 * in the block cipher key types. */
272#if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
273 (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
274 (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
275 defined(PSA_WANT_ALG_ECB_NO_PADDING) || \
276 (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
277 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
278 (defined(PSA_WANT_ALG_CBC_PKCS7) && \
279 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
280 (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
281#define PSA_HAVE_SOFT_BLOCK_MODE 1
282#endif
283
284#if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
285 (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
286#define PSA_HAVE_SOFT_BLOCK_AEAD 1
287#endif
288
289#if defined(PSA_WANT_KEY_TYPE_AES)
290#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
291#define PSA_HAVE_SOFT_KEY_TYPE_AES 1
292#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
293#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
294 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
295 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
296#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
297#define MBEDTLS_AES_C
298#endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
299#endif /* PSA_WANT_KEY_TYPE_AES */
300
301#if defined(PSA_WANT_KEY_TYPE_ARC4)
302#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARC4)
303#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARC4 1
304#define MBEDTLS_ARC4_C
305#endif
306#endif /* PSA_WANT_KEY_TYPE_ARC4 */
307
308#if defined(PSA_WANT_KEY_TYPE_ARIA)
309#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA)
310#define PSA_HAVE_SOFT_KEY_TYPE_ARIA 1
311#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA */
312#if defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
313 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
314 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
315#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
316#define MBEDTLS_ARIA_C
317#endif /* PSA_HAVE_SOFT_KEY_TYPE_ARIA || PSA_HAVE_SOFT_BLOCK_MODE */
318#endif /* PSA_WANT_KEY_TYPE_ARIA */
319
320#if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
321#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
322#define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
323#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
324#if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
325 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
326 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
327#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
328#define MBEDTLS_CAMELLIA_C
329#endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
330#endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
331
332#if defined(PSA_WANT_KEY_TYPE_DES)
333#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
334#define PSA_HAVE_SOFT_KEY_TYPE_DES 1
335#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
336#if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
337 defined(PSA_HAVE_SOFT_BLOCK_MODE)
338#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
339#define MBEDTLS_DES_C
340#endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
341#endif /* PSA_WANT_KEY_TYPE_DES */
342
343#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
344#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20)
345#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
346#define MBEDTLS_CHACHA20_C
347#endif
348#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
349
350/* If any of the software block ciphers are selected, define
351 * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
352 * situations. */
353#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
354 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
355 defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
356 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
357#define PSA_HAVE_SOFT_BLOCK_CIPHER 1
358#endif
359
360#if defined(PSA_WANT_ALG_STREAM_CIPHER)
361#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
362#endif /* PSA_WANT_ALG_STREAM_CIPHER */
363
364#if defined(PSA_WANT_ALG_CBC_MAC)
365#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
366#error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
367#define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
368#endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
369#endif /* PSA_WANT_ALG_CBC_MAC */
370
371#if defined(PSA_WANT_ALG_CMAC)
372#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
373 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
374#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
375#define MBEDTLS_CMAC_C
376#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
377#endif /* PSA_WANT_ALG_CMAC */
378
379#if defined(PSA_WANT_ALG_CTR)
380#if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
381 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
382#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
383#define MBEDTLS_CIPHER_MODE_CTR
384#endif
385#endif /* PSA_WANT_ALG_CTR */
386
387#if defined(PSA_WANT_ALG_CFB)
388#if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
389 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
390#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
391#define MBEDTLS_CIPHER_MODE_CFB
392#endif
393#endif /* PSA_WANT_ALG_CFB */
394
395#if defined(PSA_WANT_ALG_OFB)
396#if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
397 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
398#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
399#define MBEDTLS_CIPHER_MODE_OFB
400#endif
401#endif /* PSA_WANT_ALG_OFB */
402
403#if defined(PSA_WANT_ALG_ECB_NO_PADDING) && \
404 !defined(MBEDTLS_PSA_ACCEL_ALG_ECB_NO_PADDING)
405#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
406#endif
407
408#if defined(PSA_WANT_ALG_CBC_NO_PADDING)
409#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
410 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
411#define MBEDTLS_CIPHER_MODE_CBC
412#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
413#endif
414#endif /* PSA_WANT_ALG_CBC_NO_PADDING */
415
416#if defined(PSA_WANT_ALG_CBC_PKCS7)
417#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
418 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
419#define MBEDTLS_CIPHER_MODE_CBC
420#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
421#define MBEDTLS_CIPHER_PADDING_PKCS7
422#endif
423#endif /* PSA_WANT_ALG_CBC_PKCS7 */
424
425#if defined(PSA_WANT_ALG_CCM)
426#if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
427 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
428 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
429 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
430#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
431#define MBEDTLS_CCM_C
432#endif
433#endif /* PSA_WANT_ALG_CCM */
434
435#if defined(PSA_WANT_ALG_GCM)
436#if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
437 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
438 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
439 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
440#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
441#define MBEDTLS_GCM_C
442#endif
443#endif /* PSA_WANT_ALG_GCM */
444
445#if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
446#if !defined(MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305)
447#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
448#define MBEDTLS_CHACHAPOLY_C
449#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
450#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
451#endif /* !MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305 */
452#endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
453
454#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
455#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
456#define MBEDTLS_ECP_DP_BP256R1_ENABLED
457#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
458#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */
459#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
460
461#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
462#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
463#define MBEDTLS_ECP_DP_BP384R1_ENABLED
464#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
465#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */
466#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
467
468#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
469#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
470#define MBEDTLS_ECP_DP_BP512R1_ENABLED
471#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
472#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */
473#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
474
475#if defined(PSA_WANT_ECC_MONTGOMERY_255)
476#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
477#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
478#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
479#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */
480#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
481
482#if defined(PSA_WANT_ECC_MONTGOMERY_448)
483#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
484/*
485 * Curve448 is not yet supported via the PSA API in Mbed TLS
486 * (https://github.com/Mbed-TLS/mbedtls/issues/4249).
487 */
488#error "Curve448 is not yet supported via the PSA API in Mbed TLS."
489#define MBEDTLS_ECP_DP_CURVE448_ENABLED
490#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
491#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */
492#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
493
494#if defined(PSA_WANT_ECC_SECP_R1_192)
495#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
496#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
497#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
498#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */
499#endif /* PSA_WANT_ECC_SECP_R1_192 */
500
501#if defined(PSA_WANT_ECC_SECP_R1_224)
502#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
503#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
504#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
505#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */
506#endif /* PSA_WANT_ECC_SECP_R1_224 */
507
508#if defined(PSA_WANT_ECC_SECP_R1_256)
509#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
510#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
511#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
512#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */
513#endif /* PSA_WANT_ECC_SECP_R1_256 */
514
515#if defined(PSA_WANT_ECC_SECP_R1_384)
516#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
517#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
518#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
519#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */
520#endif /* PSA_WANT_ECC_SECP_R1_384 */
521
522#if defined(PSA_WANT_ECC_SECP_R1_521)
523#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
524#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
525#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
526#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */
527#endif /* PSA_WANT_ECC_SECP_R1_521 */
528
529#if defined(PSA_WANT_ECC_SECP_K1_192)
530#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
531#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
532#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
533#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */
534#endif /* PSA_WANT_ECC_SECP_K1_192 */
535
536#if defined(PSA_WANT_ECC_SECP_K1_224)
537#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
538/*
539 * SECP224K1 is buggy via the PSA API in Mbed TLS
540 * (https://github.com/Mbed-TLS/mbedtls/issues/3541).
541 */
542#error "SECP224K1 is buggy via the PSA API in Mbed TLS."
543#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
544#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
545#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */
546#endif /* PSA_WANT_ECC_SECP_K1_224 */
547
548#if defined(PSA_WANT_ECC_SECP_K1_256)
549#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
550#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
551#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
552#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */
553#endif /* PSA_WANT_ECC_SECP_K1_256 */
554
555
556
557/****************************************************************/
558/* Infer PSA requirements from Mbed TLS capabilities */
559/****************************************************************/
560
561#else /* MBEDTLS_PSA_CRYPTO_CONFIG */
562
563/*
564 * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
565 * is not defined
566 */
567
568#if defined(MBEDTLS_CCM_C)
569#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
570#define PSA_WANT_ALG_CCM 1
571#endif /* MBEDTLS_CCM_C */
572
573#if defined(MBEDTLS_CMAC_C)
574#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
575#define PSA_WANT_ALG_CMAC 1
576#endif /* MBEDTLS_CMAC_C */
577
578#if defined(MBEDTLS_ECDH_C)
579#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
580#define PSA_WANT_ALG_ECDH 1
581#endif /* MBEDTLS_ECDH_C */
582
583#if defined(MBEDTLS_ECDSA_C)
584#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
585#define PSA_WANT_ALG_ECDSA 1
586#define PSA_WANT_ALG_ECDSA_ANY 1
587
588// Only add in DETERMINISTIC support if ECDSA is also enabled
589#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
590#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
591#define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1
592#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
593
594#endif /* MBEDTLS_ECDSA_C */
595
596#if defined(MBEDTLS_ECP_C)
597#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR 1
598#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
599#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
600#define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
601#endif /* MBEDTLS_ECP_C */
602
603#if defined(MBEDTLS_GCM_C)
604#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
605#define PSA_WANT_ALG_GCM 1
606#endif /* MBEDTLS_GCM_C */
607
608#if defined(MBEDTLS_HKDF_C)
609#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
610#define PSA_WANT_ALG_HMAC 1
611#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
612#define PSA_WANT_ALG_HKDF 1
613#endif /* MBEDTLS_HKDF_C */
614
615#if defined(MBEDTLS_MD_C)
616#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
617#define PSA_WANT_ALG_HMAC 1
618#define PSA_WANT_KEY_TYPE_HMAC
619#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
620#define PSA_WANT_ALG_TLS12_PRF 1
621#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
622#define PSA_WANT_ALG_TLS12_PSK_TO_MS 1
623#endif /* MBEDTLS_MD_C */
624
625#if defined(MBEDTLS_MD2_C)
626#define MBEDTLS_PSA_BUILTIN_ALG_MD2 1
627#define PSA_WANT_ALG_MD2 1
628#endif
629
630#if defined(MBEDTLS_MD4_C)
631#define MBEDTLS_PSA_BUILTIN_ALG_MD4 1
632#define PSA_WANT_ALG_MD4 1
633#endif
634
635#if defined(MBEDTLS_MD5_C)
636#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
637#define PSA_WANT_ALG_MD5 1
638#endif
639
640#if defined(MBEDTLS_RIPEMD160_C)
641#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
642#define PSA_WANT_ALG_RIPEMD160 1
643#endif
644
645#if defined(MBEDTLS_RSA_C)
646#if defined(MBEDTLS_PKCS1_V15)
647#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
648#define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
649#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
650#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
651#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1
652#endif /* MBEDTLS_PKCS1_V15 */
653#if defined(MBEDTLS_PKCS1_V21)
654#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
655#define PSA_WANT_ALG_RSA_OAEP 1
656#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
657#define PSA_WANT_ALG_RSA_PSS 1
658#endif /* MBEDTLS_PKCS1_V21 */
659#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR 1
660#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
661#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
662#define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
663#endif /* MBEDTLS_RSA_C */
664
665#if defined(MBEDTLS_SHA1_C)
666#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
667#define PSA_WANT_ALG_SHA_1 1
668#endif
669
670#if defined(MBEDTLS_SHA256_C)
671#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
672#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
673#define PSA_WANT_ALG_SHA_224 1
674#define PSA_WANT_ALG_SHA_256 1
675#endif
676
677#if defined(MBEDTLS_SHA512_C)
678#if !defined(MBEDTLS_SHA512_NO_SHA384)
679#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
680#define PSA_WANT_ALG_SHA_384 1
681#endif
682#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
683#define PSA_WANT_ALG_SHA_512 1
684#endif
685
686#if defined(MBEDTLS_AES_C)
687#define PSA_WANT_KEY_TYPE_AES 1
688#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
689#endif
690
691#if defined(MBEDTLS_ARC4_C)
692#define PSA_WANT_KEY_TYPE_ARC4 1
693#define PSA_WANT_ALG_STREAM_CIPHER 1
694#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARC4 1
695#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
696#endif
697
698#if defined(MBEDTLS_ARIA_C)
699#define PSA_WANT_KEY_TYPE_ARIA 1
700#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
701#endif
702
703#if defined(MBEDTLS_CAMELLIA_C)
704#define PSA_WANT_KEY_TYPE_CAMELLIA 1
705#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
706#endif
707
708#if defined(MBEDTLS_DES_C)
709#define PSA_WANT_KEY_TYPE_DES 1
710#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
711#endif
712
713#if defined(MBEDTLS_CHACHA20_C)
714#define PSA_WANT_KEY_TYPE_CHACHA20 1
715#define PSA_WANT_ALG_STREAM_CIPHER 1
716#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
717#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
718#if defined(MBEDTLS_CHACHAPOLY_C)
719#define PSA_WANT_ALG_CHACHA20_POLY1305 1
720#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
721#endif
722#endif
723
724#if defined(MBEDTLS_CIPHER_MODE_CBC)
725#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
726#define PSA_WANT_ALG_CBC_NO_PADDING 1
727#if defined(MBEDTLS_CIPHER_PADDING_PKCS7)
728#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
729#define PSA_WANT_ALG_CBC_PKCS7 1
730#endif
731#endif
732
733#if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \
734 defined(MBEDTLS_ARIA_C) || defined(MBEDTLS_CAMELLIA_C)
735#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
736#define PSA_WANT_ALG_ECB_NO_PADDING 1
737#endif
738
739#if defined(MBEDTLS_CIPHER_MODE_CFB)
740#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
741#define PSA_WANT_ALG_CFB 1
742#endif
743
744#if defined(MBEDTLS_CIPHER_MODE_CTR)
745#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
746#define PSA_WANT_ALG_CTR 1
747#endif
748
749#if defined(MBEDTLS_CIPHER_MODE_OFB)
750#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
751#define PSA_WANT_ALG_OFB 1
752#endif
753
754#if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
755#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
756#define PSA_WANT_ECC_BRAINPOOL_P_R1_256
757#endif
758
759#if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
760#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
761#define PSA_WANT_ECC_BRAINPOOL_P_R1_384
762#endif
763
764#if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
765#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
766#define PSA_WANT_ECC_BRAINPOOL_P_R1_512
767#endif
768
769#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
770#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
771#define PSA_WANT_ECC_MONTGOMERY_255
772#endif
773
774/* Curve448 is not yet supported via the PSA API (https://github.com/Mbed-TLS/mbedtls/issues/4249) */
775#if 0 && defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
776#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
777#define PSA_WANT_ECC_MONTGOMERY_448
778#endif
779
780#if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
781#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
782#define PSA_WANT_ECC_SECP_R1_192
783#endif
784
785#if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
786#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
787#define PSA_WANT_ECC_SECP_R1_224
788#endif
789
790#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
791#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
792#define PSA_WANT_ECC_SECP_R1_256
793#endif
794
795#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
796#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
797#define PSA_WANT_ECC_SECP_R1_384
798#endif
799
800#if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
801#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
802#define PSA_WANT_ECC_SECP_R1_521
803#endif
804
805#if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
806#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
807#define PSA_WANT_ECC_SECP_K1_192
808#endif
809
810/* SECP224K1 is buggy via the PSA API (https://github.com/Mbed-TLS/mbedtls/issues/3541) */
811#if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
812#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
813#define PSA_WANT_ECC_SECP_K1_224
814#endif
815
816#if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
817#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
818#define PSA_WANT_ECC_SECP_K1_256
819#endif
820
821#endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
822
823/* These features are always enabled. */
824#define PSA_WANT_KEY_TYPE_DERIVE 1
825#define PSA_WANT_KEY_TYPE_RAW_DATA 1
826
827#ifdef __cplusplus
828}
829#endif
830
831#endif /* MBEDTLS_CONFIG_PSA_H */
PSA crypto configuration options (set of defines)