18 #ifndef MBEDTLS_CHECK_CONFIG_H
19 #define MBEDTLS_CHECK_CONFIG_H
23 #if !defined(MBEDTLS_CONFIG_IS_FINALIZED)
24 #warning "Do not include mbedtls/check_config.h manually! " \
25 "This may cause spurious errors. " \
26 "It is included automatically at the right point since Mbed TLS 3.0."
35 #error "Mbed TLS requires a platform with 8-bit chars"
40 #if defined(__MINGW32__) || (defined(_MSC_VER) && _MSC_VER <= 1900)
41 #if !defined(MBEDTLS_PLATFORM_C)
42 #error "MBEDTLS_PLATFORM_C is required on Windows"
48 #if defined(TARGET_LIKE_MBED) && defined(MBEDTLS_NET_C)
49 #error "The NET module is not available for mbed OS - please use the network functions provided by Mbed OS"
52 #if defined(MBEDTLS_DEPRECATED_WARNING) && \
53 !defined(__GNUC__) && !defined(__clang__)
54 #error "MBEDTLS_DEPRECATED_WARNING only works with GCC and Clang"
57 #if defined(MBEDTLS_HAVE_TIME_DATE) && !defined(MBEDTLS_HAVE_TIME)
58 #error "MBEDTLS_HAVE_TIME_DATE without MBEDTLS_HAVE_TIME does not make sense"
65 #if defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \
66 defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
67 defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
68 defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
69 #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \
70 !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
71 !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
72 !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
73 #error "Unsupported partial support for ECC key type acceleration, see docs/driver-only-builds.md"
80 #if defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256) || \
81 defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384) || \
82 defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512) || \
83 defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255) || \
84 defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448) || \
85 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192) || \
86 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224) || \
87 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256) || \
88 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192) || \
89 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224) || \
90 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) || \
91 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384) || \
92 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
93 #if defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES)
94 #if defined(MBEDTLS_PK_C) || \
95 defined(MBEDTLS_SSL_TLS_C)
96 #error "Unsupported partial support for ECC curves acceleration, see docs/driver-only-builds.md"
101 #if defined(MBEDTLS_CTR_DRBG_C) && !(defined(MBEDTLS_AES_C) || \
102 (defined(MBEDTLS_PSA_CRYPTO_CLIENT) && defined(PSA_WANT_KEY_TYPE_AES) && \
103 defined(PSA_WANT_ALG_ECB_NO_PADDING)))
104 #error "MBEDTLS_CTR_DRBG_C defined, but not all prerequisites"
107 #if defined(MBEDTLS_DHM_C) && !defined(MBEDTLS_BIGNUM_C)
108 #error "MBEDTLS_DHM_C defined, but not all prerequisites"
111 #if defined(MBEDTLS_CMAC_C) && \
112 ( !defined(MBEDTLS_CIPHER_C ) || ( !defined(MBEDTLS_AES_C) && !defined(MBEDTLS_DES_C) ) )
113 #error "MBEDTLS_CMAC_C defined, but not all prerequisites"
116 #if defined(MBEDTLS_NIST_KW_C) && \
117 ( !defined(MBEDTLS_AES_C) || !defined(MBEDTLS_CIPHER_C) )
118 #error "MBEDTLS_NIST_KW_C defined, but not all prerequisites"
121 #if defined(MBEDTLS_BLOCK_CIPHER_NO_DECRYPT) && defined(MBEDTLS_PSA_CRYPTO_CONFIG)
122 #if defined(PSA_WANT_ALG_CBC_NO_PADDING)
123 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_CBC_NO_PADDING cannot be defined simultaneously"
125 #if defined(PSA_WANT_ALG_CBC_PKCS7)
126 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_CBC_PKCS7 cannot be defined simultaneously"
128 #if defined(PSA_WANT_ALG_ECB_NO_PADDING)
129 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_ECB_NO_PADDING cannot be defined simultaneously"
131 #if defined(PSA_WANT_KEY_TYPE_DES)
132 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_KEY_TYPE_DES cannot be defined simultaneously"
136 #if defined(MBEDTLS_BLOCK_CIPHER_NO_DECRYPT)
137 #if defined(MBEDTLS_CIPHER_MODE_CBC)
138 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_CIPHER_MODE_CBC cannot be defined simultaneously"
140 #if defined(MBEDTLS_CIPHER_MODE_XTS)
141 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_CIPHER_MODE_XTS cannot be defined simultaneously"
143 #if defined(MBEDTLS_DES_C)
144 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_DES_C cannot be defined simultaneously"
146 #if defined(MBEDTLS_NIST_KW_C)
147 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_NIST_KW_C cannot be defined simultaneously"
151 #if defined(MBEDTLS_ECDH_C) && !defined(MBEDTLS_ECP_C)
152 #error "MBEDTLS_ECDH_C defined, but not all prerequisites"
155 #if defined(MBEDTLS_ECDSA_C) && \
156 ( !defined(MBEDTLS_ECP_C) || \
157 !( defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) || \
158 defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) || \
159 defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) || \
160 defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) || \
161 defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) || \
162 defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) || \
163 defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) || \
164 defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) || \
165 defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) || \
166 defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) || \
167 defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) ) || \
168 !defined(MBEDTLS_ASN1_PARSE_C) || \
169 !defined(MBEDTLS_ASN1_WRITE_C) )
170 #error "MBEDTLS_ECDSA_C defined, but not all prerequisites"
173 #if defined(MBEDTLS_PK_C) && defined(MBEDTLS_USE_PSA_CRYPTO)
174 #if defined(MBEDTLS_PK_CAN_ECDSA_SIGN) && !defined(MBEDTLS_ASN1_WRITE_C)
175 #error "MBEDTLS_PK_C with MBEDTLS_USE_PSA_CRYPTO needs MBEDTLS_ASN1_WRITE_C for ECDSA signature"
177 #if defined(MBEDTLS_PK_CAN_ECDSA_VERIFY) && !defined(MBEDTLS_ASN1_PARSE_C)
178 #error "MBEDTLS_PK_C with MBEDTLS_USE_PSA_CRYPTO needs MBEDTLS_ASN1_PARSE_C for ECDSA verification"
182 #if defined(MBEDTLS_ECJPAKE_C) && \
183 !defined(MBEDTLS_ECP_C)
184 #error "MBEDTLS_ECJPAKE_C defined, but not all prerequisites"
187 #if defined(MBEDTLS_ECP_RESTARTABLE) && \
188 ( defined(MBEDTLS_ECDH_COMPUTE_SHARED_ALT) || \
189 defined(MBEDTLS_ECDH_GEN_PUBLIC_ALT) || \
190 defined(MBEDTLS_ECDSA_SIGN_ALT) || \
191 defined(MBEDTLS_ECDSA_VERIFY_ALT) || \
192 defined(MBEDTLS_ECDSA_GENKEY_ALT) || \
193 defined(MBEDTLS_ECP_INTERNAL_ALT) || \
194 defined(MBEDTLS_ECP_ALT) )
195 #error "MBEDTLS_ECP_RESTARTABLE defined, but it cannot coexist with an alternative ECP implementation"
198 #if defined(MBEDTLS_ECP_RESTARTABLE) && \
199 !defined(MBEDTLS_ECP_C)
200 #error "MBEDTLS_ECP_RESTARTABLE defined, but not all prerequisites"
203 #if defined(MBEDTLS_ECDSA_DETERMINISTIC) && !defined(MBEDTLS_HMAC_DRBG_C)
204 #error "MBEDTLS_ECDSA_DETERMINISTIC defined, but not all prerequisites"
207 #if defined(MBEDTLS_ECP_LIGHT) && ( !defined(MBEDTLS_BIGNUM_C) || ( \
208 !defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) && \
209 !defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) && \
210 !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) && \
211 !defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) && \
212 !defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) && \
213 !defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) && \
214 !defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) && \
215 !defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) && \
216 !defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) && \
217 !defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) && \
218 !defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) && \
219 !defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED) && \
220 !defined(MBEDTLS_ECP_DP_CURVE448_ENABLED) ) )
221 #error "MBEDTLS_ECP_C defined (or a subset enabled), but not all prerequisites"
224 #if defined(MBEDTLS_ENTROPY_C) && \
225 !(defined(MBEDTLS_MD_CAN_SHA512) || defined(MBEDTLS_MD_CAN_SHA256))
226 #error "MBEDTLS_ENTROPY_C defined, but not all prerequisites"
228 #if defined(MBEDTLS_ENTROPY_C) && \
229 defined(MBEDTLS_CTR_DRBG_ENTROPY_LEN) && (MBEDTLS_CTR_DRBG_ENTROPY_LEN > 64)
230 #error "MBEDTLS_CTR_DRBG_ENTROPY_LEN value too high"
232 #if defined(MBEDTLS_ENTROPY_C) && \
233 (defined(MBEDTLS_ENTROPY_FORCE_SHA256) || !defined(MBEDTLS_MD_CAN_SHA512)) \
234 && defined(MBEDTLS_CTR_DRBG_ENTROPY_LEN) && (MBEDTLS_CTR_DRBG_ENTROPY_LEN > 32)
235 #error "MBEDTLS_CTR_DRBG_ENTROPY_LEN value too high"
237 #if defined(MBEDTLS_ENTROPY_C) && \
238 defined(MBEDTLS_ENTROPY_FORCE_SHA256) && !defined(MBEDTLS_MD_CAN_SHA256)
239 #error "MBEDTLS_ENTROPY_FORCE_SHA256 defined, but not all prerequisites"
242 #if defined(__has_feature)
243 #if __has_feature(memory_sanitizer)
244 #define MBEDTLS_HAS_MEMSAN
247 #if defined(MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN) && !defined(MBEDTLS_HAS_MEMSAN)
248 #error "MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN requires building with MemorySanitizer"
250 #if defined(MBEDTLS_HAS_MEMSAN) && defined(MBEDTLS_HAVE_ASM)
251 #error "MemorySanitizer does not support assembly implementation"
253 #undef MBEDTLS_HAS_MEMSAN
255 #if defined(MBEDTLS_CCM_C) && \
256 !(defined(MBEDTLS_CCM_GCM_CAN_AES) || defined(MBEDTLS_CCM_GCM_CAN_ARIA) || \
257 defined(MBEDTLS_CCM_GCM_CAN_CAMELLIA))
258 #error "MBEDTLS_CCM_C defined, but not all prerequisites"
261 #if defined(MBEDTLS_GCM_C) && \
262 !(defined(MBEDTLS_CCM_GCM_CAN_AES) || defined(MBEDTLS_CCM_GCM_CAN_ARIA) || \
263 defined(MBEDTLS_CCM_GCM_CAN_CAMELLIA))
264 #error "MBEDTLS_GCM_C defined, but not all prerequisites"
267 #if defined(MBEDTLS_CHACHAPOLY_C) && !defined(MBEDTLS_CHACHA20_C)
268 #error "MBEDTLS_CHACHAPOLY_C defined, but not all prerequisites"
271 #if defined(MBEDTLS_CHACHAPOLY_C) && !defined(MBEDTLS_POLY1305_C)
272 #error "MBEDTLS_CHACHAPOLY_C defined, but not all prerequisites"
275 #if defined(MBEDTLS_ECP_RANDOMIZE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
276 #error "MBEDTLS_ECP_RANDOMIZE_JAC_ALT defined, but not all prerequisites"
279 #if defined(MBEDTLS_ECP_ADD_MIXED_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
280 #error "MBEDTLS_ECP_ADD_MIXED_ALT defined, but not all prerequisites"
283 #if defined(MBEDTLS_ECP_DOUBLE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
284 #error "MBEDTLS_ECP_DOUBLE_JAC_ALT defined, but not all prerequisites"
287 #if defined(MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
288 #error "MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT defined, but not all prerequisites"
291 #if defined(MBEDTLS_ECP_NORMALIZE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
292 #error "MBEDTLS_ECP_NORMALIZE_JAC_ALT defined, but not all prerequisites"
295 #if defined(MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
296 #error "MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT defined, but not all prerequisites"
299 #if defined(MBEDTLS_ECP_RANDOMIZE_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
300 #error "MBEDTLS_ECP_RANDOMIZE_MXZ_ALT defined, but not all prerequisites"
303 #if defined(MBEDTLS_ECP_NORMALIZE_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
304 #error "MBEDTLS_ECP_NORMALIZE_MXZ_ALT defined, but not all prerequisites"
307 #if defined(MBEDTLS_ECP_NO_FALLBACK) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
308 #error "MBEDTLS_ECP_NO_FALLBACK defined, but no alternative implementation enabled"
311 #if defined(MBEDTLS_HKDF_C) && !defined(MBEDTLS_MD_C)
312 #error "MBEDTLS_HKDF_C defined, but not all prerequisites"
315 #if defined(MBEDTLS_HMAC_DRBG_C) && !defined(MBEDTLS_MD_C)
316 #error "MBEDTLS_HMAC_DRBG_C defined, but not all prerequisites"
319 #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED) && \
320 ( !defined(MBEDTLS_CAN_ECDH) || \
321 !defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || \
322 !defined(MBEDTLS_X509_CRT_PARSE_C) )
323 #error "MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED defined, but not all prerequisites"
326 #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED) && \
327 ( !defined(MBEDTLS_CAN_ECDH) || !defined(MBEDTLS_RSA_C) || \
328 !defined(MBEDTLS_X509_CRT_PARSE_C) )
329 #error "MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED defined, but not all prerequisites"
332 #if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED) && !defined(MBEDTLS_DHM_C)
333 #error "MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED defined, but not all prerequisites"
336 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED) && \
337 !defined(MBEDTLS_CAN_ECDH)
338 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED defined, but not all prerequisites"
341 #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) && \
342 ( !defined(MBEDTLS_DHM_C) || !defined(MBEDTLS_RSA_C) || \
343 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_PKCS1_V15) )
344 #error "MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED defined, but not all prerequisites"
347 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) && \
348 ( !defined(MBEDTLS_CAN_ECDH) || !defined(MBEDTLS_RSA_C) || \
349 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_PKCS1_V15) )
350 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED defined, but not all prerequisites"
353 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED) && \
354 ( !defined(MBEDTLS_CAN_ECDH) || \
355 !defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || \
356 !defined(MBEDTLS_X509_CRT_PARSE_C) )
357 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED defined, but not all prerequisites"
360 #if defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) && \
361 ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_X509_CRT_PARSE_C) || \
362 !defined(MBEDTLS_PKCS1_V15) )
363 #error "MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED defined, but not all prerequisites"
366 #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) && \
367 ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_X509_CRT_PARSE_C) || \
368 !defined(MBEDTLS_PKCS1_V15) )
369 #error "MBEDTLS_KEY_EXCHANGE_RSA_ENABLED defined, but not all prerequisites"
372 #if defined(MBEDTLS_USE_PSA_CRYPTO)
373 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
374 ( !defined(PSA_WANT_ALG_JPAKE) || \
375 !defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
376 !defined(PSA_WANT_ECC_SECP_R1_256) )
377 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites"
380 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
381 ( !defined(MBEDTLS_ECJPAKE_C) || \
382 !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) )
383 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites"
388 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \
389 !defined(MBEDTLS_MD_CAN_SHA256)
390 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites"
393 #if defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED) && \
394 !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE) && \
395 !defined(MBEDTLS_MD_CAN_SHA256) && \
396 !defined(MBEDTLS_MD_CAN_SHA512) && \
397 !defined(MBEDTLS_MD_CAN_SHA1)
398 #error "!MBEDTLS_SSL_KEEP_PEER_CERTIFICATE requires SHA-512, SHA-256 or SHA-1".
401 #if defined(MBEDTLS_MD_C) && \
402 !defined(MBEDTLS_MD_CAN_MD5) && \
403 !defined(MBEDTLS_MD_CAN_RIPEMD160) && \
404 !defined(MBEDTLS_MD_CAN_SHA1) && \
405 !defined(MBEDTLS_MD_CAN_SHA224) && \
406 !defined(MBEDTLS_MD_CAN_SHA256) && \
407 !defined(MBEDTLS_MD_CAN_SHA384) && \
408 !defined(MBEDTLS_MD_CAN_SHA512) && \
409 !defined(MBEDTLS_MD_CAN_SHA3_224) && \
410 !defined(MBEDTLS_MD_CAN_SHA3_256) && \
411 !defined(MBEDTLS_MD_CAN_SHA3_384) && \
412 !defined(MBEDTLS_MD_CAN_SHA3_512)
413 #error "MBEDTLS_MD_C defined, but no hash algorithm"
416 #if defined(MBEDTLS_LMS_C) && \
417 ! ( defined(MBEDTLS_PSA_CRYPTO_CLIENT) && defined(PSA_WANT_ALG_SHA_256) )
418 #error "MBEDTLS_LMS_C requires MBEDTLS_PSA_CRYPTO_C and PSA_WANT_ALG_SHA_256"
421 #if defined(MBEDTLS_LMS_PRIVATE) && \
422 ( !defined(MBEDTLS_LMS_C) )
423 #error "MBEDTLS_LMS_PRIVATE requires MBEDTLS_LMS_C"
426 #if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) && \
427 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) )
428 #error "MBEDTLS_MEMORY_BUFFER_ALLOC_C defined, but not all prerequisites"
431 #if defined(MBEDTLS_MEMORY_BACKTRACE) && !defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
432 #error "MBEDTLS_MEMORY_BACKTRACE defined, but not all prerequisites"
435 #if defined(MBEDTLS_MEMORY_DEBUG) && !defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
436 #error "MBEDTLS_MEMORY_DEBUG defined, but not all prerequisites"
439 #if defined(MBEDTLS_PEM_PARSE_C) && !defined(MBEDTLS_BASE64_C)
440 #error "MBEDTLS_PEM_PARSE_C defined, but not all prerequisites"
443 #if defined(MBEDTLS_PEM_WRITE_C) && !defined(MBEDTLS_BASE64_C)
444 #error "MBEDTLS_PEM_WRITE_C defined, but not all prerequisites"
447 #if defined(MBEDTLS_PK_C) && \
448 !defined(MBEDTLS_RSA_C) && !defined(MBEDTLS_PK_HAVE_ECC_KEYS)
449 #error "MBEDTLS_PK_C defined, but not all prerequisites"
452 #if defined(MBEDTLS_PK_PARSE_C) && \
453 (!defined(MBEDTLS_ASN1_PARSE_C) || \
454 !defined(MBEDTLS_OID_C) || \
455 !defined(MBEDTLS_PK_C))
456 #error "MBEDTLS_PK_PARSE_C defined, but not all prerequisites"
459 #if defined(MBEDTLS_PK_WRITE_C) && \
460 (!defined(MBEDTLS_ASN1_WRITE_C) || \
461 !defined(MBEDTLS_OID_C) || \
462 !defined(MBEDTLS_PK_C))
463 #error "MBEDTLS_PK_WRITE_C defined, but not all prerequisites"
466 #if defined(MBEDTLS_PLATFORM_EXIT_ALT) && !defined(MBEDTLS_PLATFORM_C)
467 #error "MBEDTLS_PLATFORM_EXIT_ALT defined, but not all prerequisites"
470 #if defined(MBEDTLS_PLATFORM_EXIT_MACRO) && !defined(MBEDTLS_PLATFORM_C)
471 #error "MBEDTLS_PLATFORM_EXIT_MACRO defined, but not all prerequisites"
474 #if defined(MBEDTLS_PLATFORM_EXIT_MACRO) &&\
475 ( defined(MBEDTLS_PLATFORM_STD_EXIT) ||\
476 defined(MBEDTLS_PLATFORM_EXIT_ALT) )
477 #error "MBEDTLS_PLATFORM_EXIT_MACRO and MBEDTLS_PLATFORM_STD_EXIT/MBEDTLS_PLATFORM_EXIT_ALT cannot be defined simultaneously"
480 #if defined(MBEDTLS_PLATFORM_SETBUF_ALT) && !defined(MBEDTLS_PLATFORM_C)
481 #error "MBEDTLS_PLATFORM_SETBUF_ALT defined, but not all prerequisites"
484 #if defined(MBEDTLS_PLATFORM_SETBUF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
485 #error "MBEDTLS_PLATFORM_SETBUF_MACRO defined, but not all prerequisites"
488 #if defined(MBEDTLS_PLATFORM_SETBUF_MACRO) &&\
489 ( defined(MBEDTLS_PLATFORM_STD_SETBUF) ||\
490 defined(MBEDTLS_PLATFORM_SETBUF_ALT) )
491 #error "MBEDTLS_PLATFORM_SETBUF_MACRO and MBEDTLS_PLATFORM_STD_SETBUF/MBEDTLS_PLATFORM_SETBUF_ALT cannot be defined simultaneously"
494 #if defined(MBEDTLS_PLATFORM_TIME_ALT) &&\
495 ( !defined(MBEDTLS_PLATFORM_C) ||\
496 !defined(MBEDTLS_HAVE_TIME) )
497 #error "MBEDTLS_PLATFORM_TIME_ALT defined, but not all prerequisites"
500 #if defined(MBEDTLS_PLATFORM_TIME_MACRO) &&\
501 ( !defined(MBEDTLS_PLATFORM_C) ||\
502 !defined(MBEDTLS_HAVE_TIME) )
503 #error "MBEDTLS_PLATFORM_TIME_MACRO defined, but not all prerequisites"
506 #if defined(MBEDTLS_PLATFORM_MS_TIME_TYPE_MACRO) &&\
507 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_HAVE_TIME) )
508 #error "MBEDTLS_PLATFORM_MS_TIME_TYPE_MACRO defined, but not all prerequisites"
511 #if defined(MBEDTLS_PLATFORM_MS_TIME_ALT) && \
512 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_HAVE_TIME) )
513 #error "MBEDTLS_PLATFORM_MS_TIME_ALT defined, but not all prerequisites"
516 #if defined(MBEDTLS_PLATFORM_TIME_TYPE_MACRO) &&\
517 ( !defined(MBEDTLS_PLATFORM_C) ||\
518 !defined(MBEDTLS_HAVE_TIME) )
519 #error "MBEDTLS_PLATFORM_TIME_TYPE_MACRO defined, but not all prerequisites"
522 #if defined(MBEDTLS_PLATFORM_TIME_MACRO) &&\
523 ( defined(MBEDTLS_PLATFORM_STD_TIME) ||\
524 defined(MBEDTLS_PLATFORM_TIME_ALT) )
525 #error "MBEDTLS_PLATFORM_TIME_MACRO and MBEDTLS_PLATFORM_STD_TIME/MBEDTLS_PLATFORM_TIME_ALT cannot be defined simultaneously"
528 #if defined(MBEDTLS_PLATFORM_TIME_TYPE_MACRO) &&\
529 ( defined(MBEDTLS_PLATFORM_STD_TIME) ||\
530 defined(MBEDTLS_PLATFORM_TIME_ALT) )
531 #error "MBEDTLS_PLATFORM_TIME_TYPE_MACRO and MBEDTLS_PLATFORM_STD_TIME/MBEDTLS_PLATFORM_TIME_ALT cannot be defined simultaneously"
534 #if defined(MBEDTLS_PLATFORM_FPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
535 #error "MBEDTLS_PLATFORM_FPRINTF_ALT defined, but not all prerequisites"
538 #if defined(MBEDTLS_PLATFORM_FPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
539 #error "MBEDTLS_PLATFORM_FPRINTF_MACRO defined, but not all prerequisites"
542 #if defined(MBEDTLS_PLATFORM_FPRINTF_MACRO) &&\
543 ( defined(MBEDTLS_PLATFORM_STD_FPRINTF) ||\
544 defined(MBEDTLS_PLATFORM_FPRINTF_ALT) )
545 #error "MBEDTLS_PLATFORM_FPRINTF_MACRO and MBEDTLS_PLATFORM_STD_FPRINTF/MBEDTLS_PLATFORM_FPRINTF_ALT cannot be defined simultaneously"
548 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) &&\
549 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) )
550 #error "MBEDTLS_PLATFORM_FREE_MACRO defined, but not all prerequisites"
553 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) &&\
554 defined(MBEDTLS_PLATFORM_STD_FREE)
555 #error "MBEDTLS_PLATFORM_FREE_MACRO and MBEDTLS_PLATFORM_STD_FREE cannot be defined simultaneously"
558 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) && !defined(MBEDTLS_PLATFORM_CALLOC_MACRO)
559 #error "MBEDTLS_PLATFORM_CALLOC_MACRO must be defined if MBEDTLS_PLATFORM_FREE_MACRO is"
562 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) &&\
563 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) )
564 #error "MBEDTLS_PLATFORM_CALLOC_MACRO defined, but not all prerequisites"
567 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) &&\
568 defined(MBEDTLS_PLATFORM_STD_CALLOC)
569 #error "MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_STD_CALLOC cannot be defined simultaneously"
572 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) && !defined(MBEDTLS_PLATFORM_FREE_MACRO)
573 #error "MBEDTLS_PLATFORM_FREE_MACRO must be defined if MBEDTLS_PLATFORM_CALLOC_MACRO is"
576 #if defined(MBEDTLS_PLATFORM_MEMORY) && !defined(MBEDTLS_PLATFORM_C)
577 #error "MBEDTLS_PLATFORM_MEMORY defined, but not all prerequisites"
580 #if defined(MBEDTLS_PLATFORM_PRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
581 #error "MBEDTLS_PLATFORM_PRINTF_ALT defined, but not all prerequisites"
584 #if defined(MBEDTLS_PLATFORM_PRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
585 #error "MBEDTLS_PLATFORM_PRINTF_MACRO defined, but not all prerequisites"
588 #if defined(MBEDTLS_PLATFORM_PRINTF_MACRO) &&\
589 ( defined(MBEDTLS_PLATFORM_STD_PRINTF) ||\
590 defined(MBEDTLS_PLATFORM_PRINTF_ALT) )
591 #error "MBEDTLS_PLATFORM_PRINTF_MACRO and MBEDTLS_PLATFORM_STD_PRINTF/MBEDTLS_PLATFORM_PRINTF_ALT cannot be defined simultaneously"
594 #if defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
595 #error "MBEDTLS_PLATFORM_SNPRINTF_ALT defined, but not all prerequisites"
598 #if defined(MBEDTLS_PLATFORM_SNPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
599 #error "MBEDTLS_PLATFORM_SNPRINTF_MACRO defined, but not all prerequisites"
602 #if defined(MBEDTLS_PLATFORM_SNPRINTF_MACRO) &&\
603 ( defined(MBEDTLS_PLATFORM_STD_SNPRINTF) ||\
604 defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) )
605 #error "MBEDTLS_PLATFORM_SNPRINTF_MACRO and MBEDTLS_PLATFORM_STD_SNPRINTF/MBEDTLS_PLATFORM_SNPRINTF_ALT cannot be defined simultaneously"
608 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
609 #error "MBEDTLS_PLATFORM_VSNPRINTF_ALT defined, but not all prerequisites"
612 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
613 #error "MBEDTLS_PLATFORM_VSNPRINTF_MACRO defined, but not all prerequisites"
616 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_MACRO) &&\
617 ( defined(MBEDTLS_PLATFORM_STD_VSNPRINTF) ||\
618 defined(MBEDTLS_PLATFORM_VSNPRINTF_ALT) )
619 #error "MBEDTLS_PLATFORM_VSNPRINTF_MACRO and MBEDTLS_PLATFORM_STD_VSNPRINTF/MBEDTLS_PLATFORM_VSNPRINTF_ALT cannot be defined simultaneously"
622 #if defined(MBEDTLS_PLATFORM_STD_MEM_HDR) &&\
623 !defined(MBEDTLS_PLATFORM_NO_STD_FUNCTIONS)
624 #error "MBEDTLS_PLATFORM_STD_MEM_HDR defined, but not all prerequisites"
627 #if defined(MBEDTLS_PLATFORM_STD_CALLOC) && !defined(MBEDTLS_PLATFORM_MEMORY)
628 #error "MBEDTLS_PLATFORM_STD_CALLOC defined, but not all prerequisites"
631 #if defined(MBEDTLS_PLATFORM_STD_FREE) && !defined(MBEDTLS_PLATFORM_MEMORY)
632 #error "MBEDTLS_PLATFORM_STD_FREE defined, but not all prerequisites"
635 #if defined(MBEDTLS_PLATFORM_STD_EXIT) &&\
636 !defined(MBEDTLS_PLATFORM_EXIT_ALT)
637 #error "MBEDTLS_PLATFORM_STD_EXIT defined, but not all prerequisites"
640 #if defined(MBEDTLS_PLATFORM_STD_TIME) &&\
641 ( !defined(MBEDTLS_PLATFORM_TIME_ALT) ||\
642 !defined(MBEDTLS_HAVE_TIME) )
643 #error "MBEDTLS_PLATFORM_STD_TIME defined, but not all prerequisites"
646 #if defined(MBEDTLS_PLATFORM_STD_FPRINTF) &&\
647 !defined(MBEDTLS_PLATFORM_FPRINTF_ALT)
648 #error "MBEDTLS_PLATFORM_STD_FPRINTF defined, but not all prerequisites"
651 #if defined(MBEDTLS_PLATFORM_STD_PRINTF) &&\
652 !defined(MBEDTLS_PLATFORM_PRINTF_ALT)
653 #error "MBEDTLS_PLATFORM_STD_PRINTF defined, but not all prerequisites"
656 #if defined(MBEDTLS_PLATFORM_STD_SNPRINTF) &&\
657 !defined(MBEDTLS_PLATFORM_SNPRINTF_ALT)
658 #error "MBEDTLS_PLATFORM_STD_SNPRINTF defined, but not all prerequisites"
661 #if defined(MBEDTLS_ENTROPY_NV_SEED) &&\
662 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_ENTROPY_C) )
663 #error "MBEDTLS_ENTROPY_NV_SEED defined, but not all prerequisites"
666 #if defined(MBEDTLS_PLATFORM_NV_SEED_ALT) &&\
667 !defined(MBEDTLS_ENTROPY_NV_SEED)
668 #error "MBEDTLS_PLATFORM_NV_SEED_ALT defined, but not all prerequisites"
671 #if defined(MBEDTLS_PLATFORM_STD_NV_SEED_READ) &&\
672 !defined(MBEDTLS_PLATFORM_NV_SEED_ALT)
673 #error "MBEDTLS_PLATFORM_STD_NV_SEED_READ defined, but not all prerequisites"
676 #if defined(MBEDTLS_PLATFORM_STD_NV_SEED_WRITE) &&\
677 !defined(MBEDTLS_PLATFORM_NV_SEED_ALT)
678 #error "MBEDTLS_PLATFORM_STD_NV_SEED_WRITE defined, but not all prerequisites"
681 #if defined(MBEDTLS_PLATFORM_NV_SEED_READ_MACRO) &&\
682 ( defined(MBEDTLS_PLATFORM_STD_NV_SEED_READ) ||\
683 defined(MBEDTLS_PLATFORM_NV_SEED_ALT) )
684 #error "MBEDTLS_PLATFORM_NV_SEED_READ_MACRO and MBEDTLS_PLATFORM_STD_NV_SEED_READ cannot be defined simultaneously"
687 #if defined(MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO) &&\
688 ( defined(MBEDTLS_PLATFORM_STD_NV_SEED_WRITE) ||\
689 defined(MBEDTLS_PLATFORM_NV_SEED_ALT) )
690 #error "MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO and MBEDTLS_PLATFORM_STD_NV_SEED_WRITE cannot be defined simultaneously"
693 #if defined(MBEDTLS_PSA_CRYPTO_C) && \
694 !( ( ( defined(MBEDTLS_CTR_DRBG_C) || defined(MBEDTLS_HMAC_DRBG_C) ) && \
695 defined(MBEDTLS_ENTROPY_C) ) || \
696 defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG) )
697 #error "MBEDTLS_PSA_CRYPTO_C defined, but not all prerequisites (missing RNG)"
700 #if defined(MBEDTLS_PSA_CRYPTO_C) && defined(PSA_HAVE_SOFT_BLOCK_MODE) && \
701 defined(PSA_HAVE_SOFT_BLOCK_CIPHER) && !defined(MBEDTLS_CIPHER_C)
702 #error "MBEDTLS_PSA_CRYPTO_C defined, but not all prerequisites"
705 #if defined(MBEDTLS_PSA_CRYPTO_SPM) && !defined(MBEDTLS_PSA_CRYPTO_C)
706 #error "MBEDTLS_PSA_CRYPTO_SPM defined, but not all prerequisites"
709 #if defined(MBEDTLS_PSA_CRYPTO_SE_C) && \
710 ! ( defined(MBEDTLS_PSA_CRYPTO_C) && \
711 defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) )
712 #error "MBEDTLS_PSA_CRYPTO_SE_C defined, but not all prerequisites"
715 #if defined(MBEDTLS_PSA_CRYPTO_SE_C)
716 #if defined(MBEDTLS_DEPRECATED_REMOVED)
717 #error "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS"
718 #elif defined(MBEDTLS_DEPRECATED_WARNING)
719 #warning "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS"
723 #if defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \
724 ! defined(MBEDTLS_PSA_CRYPTO_C)
725 #error "MBEDTLS_PSA_CRYPTO_STORAGE_C defined, but not all prerequisites"
728 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) && \
729 !( defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \
730 defined(MBEDTLS_ENTROPY_NV_SEED) )
731 #error "MBEDTLS_PSA_INJECT_ENTROPY defined, but not all prerequisites"
734 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) && \
735 !defined(MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES)
736 #error "MBEDTLS_PSA_INJECT_ENTROPY is not compatible with actual entropy sources"
739 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) && \
740 defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
741 #error "MBEDTLS_PSA_INJECT_ENTROPY is not compatible with MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG"
744 #if defined(MBEDTLS_PSA_KEY_STORE_DYNAMIC) && \
745 defined(MBEDTLS_PSA_STATIC_KEY_SLOTS)
746 #error "MBEDTLS_PSA_KEY_STORE_DYNAMIC and MBEDTLS_PSA_STATIC_KEY_SLOTS cannot be defined simultaneously"
749 #if defined(MBEDTLS_PSA_ITS_FILE_C) && \
750 !defined(MBEDTLS_FS_IO)
751 #error "MBEDTLS_PSA_ITS_FILE_C defined, but not all prerequisites"
754 #if defined(MBEDTLS_RSA_C) && ( !defined(MBEDTLS_BIGNUM_C) || \
755 !defined(MBEDTLS_OID_C) )
756 #error "MBEDTLS_RSA_C defined, but not all prerequisites"
759 #if defined(MBEDTLS_RSA_C) && ( !defined(MBEDTLS_PKCS1_V21) && \
760 !defined(MBEDTLS_PKCS1_V15) )
761 #error "MBEDTLS_RSA_C defined, but none of the PKCS1 versions enabled"
764 #if defined(MBEDTLS_X509_RSASSA_PSS_SUPPORT) && \
765 ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_PKCS1_V21) )
766 #error "MBEDTLS_X509_RSASSA_PSS_SUPPORT defined, but not all prerequisites"
769 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT) && \
770 defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY)
771 #error "Must only define one of MBEDTLS_SHA512_USE_A64_CRYPTO_*"
774 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT) || \
775 defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY)
776 #if !defined(MBEDTLS_SHA512_C)
777 #error "MBEDTLS_SHA512_USE_A64_CRYPTO_* defined without MBEDTLS_SHA512_C"
779 #if defined(MBEDTLS_SHA512_ALT) || defined(MBEDTLS_SHA512_PROCESS_ALT)
780 #error "MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*"
785 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY) && !defined(__aarch64__)
786 #error "MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY defined on non-Aarch64 system"
789 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT) && \
790 defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY)
791 #error "Must only define one of MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*"
794 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT) || \
795 defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY)
796 #if !defined(MBEDTLS_SHA256_C)
797 #error "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_* defined without MBEDTLS_SHA256_C"
799 #if defined(MBEDTLS_SHA256_ALT) || defined(MBEDTLS_SHA256_PROCESS_ALT)
800 #error "MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*"
805 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY) && !defined(MBEDTLS_ARCH_IS_ARMV8_A)
806 #error "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY defined on non-Armv8-A system"
815 #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \
816 !(defined(MBEDTLS_PSA_CRYPTO_CLIENT) && \
817 defined(PSA_WANT_ALG_HKDF_EXTRACT) && \
818 defined(PSA_WANT_ALG_HKDF_EXPAND) && \
819 (defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_384)))
820 #error "MBEDTLS_SSL_PROTO_TLS1_3 defined, but not all prerequisites"
823 #if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED)
824 #if !( (defined(PSA_WANT_ALG_ECDH) || defined(PSA_WANT_ALG_FFDH)) && \
825 defined(MBEDTLS_X509_CRT_PARSE_C) && \
826 ( defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || defined(MBEDTLS_PKCS1_V21) ) )
827 #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED defined, but not all prerequisites"
831 #if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED)
832 #if !( defined(PSA_WANT_ALG_ECDH) || defined(PSA_WANT_ALG_FFDH) )
833 #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED defined, but not all prerequisites"
840 #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE)
841 #error "MBEDTLS_SSL_PROTO_TLS1_3 defined without MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
844 #if defined(MBEDTLS_SSL_PROTO_TLS1_2) && \
845 !(defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) || \
846 defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) || \
847 defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) || \
848 defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED) || \
849 defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED) || \
850 defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED) || \
851 defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED) || \
852 defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED) || \
853 defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) || \
854 defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED) || \
855 defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) )
856 #error "One or more versions of the TLS protocol are enabled " \
857 "but no key exchange methods defined with MBEDTLS_KEY_EXCHANGE_xxxx"
860 #if defined(MBEDTLS_SSL_EARLY_DATA) && \
861 ( !defined(MBEDTLS_SSL_SESSION_TICKETS) || \
862 ( !defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED) && \
863 !defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED) ) )
864 #error "MBEDTLS_SSL_EARLY_DATA defined, but not all prerequisites"
867 #if defined(MBEDTLS_SSL_EARLY_DATA) && defined(MBEDTLS_SSL_SRV_C) && \
868 defined(MBEDTLS_SSL_MAX_EARLY_DATA_SIZE) && \
869 ((MBEDTLS_SSL_MAX_EARLY_DATA_SIZE < 0) || \
870 (MBEDTLS_SSL_MAX_EARLY_DATA_SIZE > UINT32_MAX))
871 #error "MBEDTLS_SSL_MAX_EARLY_DATA_SIZE must be in the range(0..UINT32_MAX)"
874 #if defined(MBEDTLS_SSL_PROTO_DTLS) && \
875 !defined(MBEDTLS_SSL_PROTO_TLS1_2)
876 #error "MBEDTLS_SSL_PROTO_DTLS defined, but not all prerequisites"
879 #if defined(MBEDTLS_SSL_CLI_C) && !defined(MBEDTLS_SSL_TLS_C)
880 #error "MBEDTLS_SSL_CLI_C defined, but not all prerequisites"
883 #if defined(MBEDTLS_SSL_ASYNC_PRIVATE) && !defined(MBEDTLS_X509_CRT_PARSE_C)
884 #error "MBEDTLS_SSL_ASYNC_PRIVATE defined, but not all prerequisites"
887 #if defined(MBEDTLS_SSL_TLS_C) && !(defined(MBEDTLS_CIPHER_C) || \
888 defined(MBEDTLS_USE_PSA_CRYPTO))
889 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites"
893 #if defined(MBEDTLS_SSL_TLS_C)
894 #if defined(MBEDTLS_USE_PSA_CRYPTO)
895 #if !(defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_384))
896 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites"
899 #if !defined(MBEDTLS_MD_C) || \
900 !(defined(MBEDTLS_MD_CAN_SHA256) || defined(MBEDTLS_MD_CAN_SHA384))
901 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites"
906 #if defined(MBEDTLS_SSL_SRV_C) && !defined(MBEDTLS_SSL_TLS_C)
907 #error "MBEDTLS_SSL_SRV_C defined, but not all prerequisites"
910 #if defined(MBEDTLS_SSL_TLS_C) && \
911 !( defined(MBEDTLS_SSL_PROTO_TLS1_2) || defined(MBEDTLS_SSL_PROTO_TLS1_3) )
912 #error "MBEDTLS_SSL_TLS_C defined, but no protocols are active"
915 #if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY) && !defined(MBEDTLS_SSL_PROTO_DTLS)
916 #error "MBEDTLS_SSL_DTLS_HELLO_VERIFY defined, but not all prerequisites"
919 #if defined(MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE) && \
920 !defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
921 #error "MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE defined, but not all prerequisites"
924 #if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY) && \
925 ( !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) )
926 #error "MBEDTLS_SSL_DTLS_ANTI_REPLAY defined, but not all prerequisites"
929 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) && \
930 ( !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) )
931 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID defined, but not all prerequisites"
934 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) && \
935 defined(MBEDTLS_SSL_CID_IN_LEN_MAX) && \
936 MBEDTLS_SSL_CID_IN_LEN_MAX > 255
937 #error "MBEDTLS_SSL_CID_IN_LEN_MAX too large (max 255)"
940 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) && \
941 defined(MBEDTLS_SSL_CID_OUT_LEN_MAX) && \
942 MBEDTLS_SSL_CID_OUT_LEN_MAX > 255
943 #error "MBEDTLS_SSL_CID_OUT_LEN_MAX too large (max 255)"
946 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT) && \
947 !defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
948 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT defined, but not all prerequisites"
951 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT) && MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT != 0
952 #if defined(MBEDTLS_DEPRECATED_REMOVED)
953 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT is deprecated and will be removed in a future version of Mbed TLS"
954 #elif defined(MBEDTLS_DEPRECATED_WARNING)
955 #warning "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT is deprecated and will be removed in a future version of Mbed TLS"
959 #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) && \
960 !defined(MBEDTLS_SSL_PROTO_TLS1_2)
961 #error "MBEDTLS_SSL_ENCRYPT_THEN_MAC defined, but not all prerequisites"
964 #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) && \
965 !defined(MBEDTLS_SSL_PROTO_TLS1_2)
966 #error "MBEDTLS_SSL_EXTENDED_MASTER_SECRET defined, but not all prerequisites"
969 #if defined(MBEDTLS_SSL_RENEGOTIATION) && \
970 !defined(MBEDTLS_SSL_PROTO_TLS1_2)
971 #error "MBEDTLS_SSL_RENEGOTIATION defined, but not all prerequisites"
974 #if defined(MBEDTLS_SSL_TICKET_C) && ( !defined(MBEDTLS_CIPHER_C) && \
975 !defined(MBEDTLS_USE_PSA_CRYPTO) )
976 #error "MBEDTLS_SSL_TICKET_C defined, but not all prerequisites"
979 #if defined(MBEDTLS_SSL_TICKET_C) && \
980 !( defined(MBEDTLS_SSL_HAVE_CCM) || defined(MBEDTLS_SSL_HAVE_GCM) || \
981 defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) )
982 #error "MBEDTLS_SSL_TICKET_C defined, but not all prerequisites"
985 #if defined(MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH) && \
986 MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH >= 256
987 #error "MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH must be less than 256"
990 #if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && \
991 !defined(MBEDTLS_X509_CRT_PARSE_C)
992 #error "MBEDTLS_SSL_SERVER_NAME_INDICATION defined, but not all prerequisites"
995 #if defined(MBEDTLS_THREADING_PTHREAD)
996 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL)
997 #error "MBEDTLS_THREADING_PTHREAD defined, but not all prerequisites"
999 #define MBEDTLS_THREADING_IMPL
1001 #if defined(MBEDTLS_THREADING_ALT)
1002 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL)
1003 #error "MBEDTLS_THREADING_ALT defined, but not all prerequisites"
1005 #define MBEDTLS_THREADING_IMPL
1007 #if defined(MBEDTLS_THREADING_C) && !defined(MBEDTLS_THREADING_IMPL)
1008 #error "MBEDTLS_THREADING_C defined, single threading implementation required"
1010 #undef MBEDTLS_THREADING_IMPL
1012 #if defined(MBEDTLS_USE_PSA_CRYPTO) && !defined(MBEDTLS_PSA_CRYPTO_CLIENT)
1013 #error "MBEDTLS_USE_PSA_CRYPTO defined, but not all prerequisites"
1016 #if defined(MBEDTLS_VERSION_FEATURES) && !defined(MBEDTLS_VERSION_C)
1017 #error "MBEDTLS_VERSION_FEATURES defined, but not all prerequisites"
1020 #if defined(MBEDTLS_X509_USE_C) && \
1021 (!defined(MBEDTLS_OID_C) || !defined(MBEDTLS_ASN1_PARSE_C) || \
1022 !defined(MBEDTLS_PK_PARSE_C) || \
1023 ( !defined(MBEDTLS_MD_C) && !defined(MBEDTLS_USE_PSA_CRYPTO) ) )
1024 #error "MBEDTLS_X509_USE_C defined, but not all prerequisites"
1027 #if defined(MBEDTLS_X509_CREATE_C) && \
1028 (!defined(MBEDTLS_OID_C) || !defined(MBEDTLS_ASN1_WRITE_C) || \
1029 !defined(MBEDTLS_PK_PARSE_C) || \
1030 ( !defined(MBEDTLS_MD_C) && !defined(MBEDTLS_USE_PSA_CRYPTO) ) )
1031 #error "MBEDTLS_X509_CREATE_C defined, but not all prerequisites"
1034 #if defined(MBEDTLS_X509_CRT_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) )
1035 #error "MBEDTLS_X509_CRT_PARSE_C defined, but not all prerequisites"
1038 #if defined(MBEDTLS_X509_CRL_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) )
1039 #error "MBEDTLS_X509_CRL_PARSE_C defined, but not all prerequisites"
1042 #if defined(MBEDTLS_X509_CSR_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) )
1043 #error "MBEDTLS_X509_CSR_PARSE_C defined, but not all prerequisites"
1046 #if defined(MBEDTLS_X509_CRT_WRITE_C) && ( !defined(MBEDTLS_X509_CREATE_C) )
1047 #error "MBEDTLS_X509_CRT_WRITE_C defined, but not all prerequisites"
1050 #if defined(MBEDTLS_X509_CSR_WRITE_C) && ( !defined(MBEDTLS_X509_CREATE_C) )
1051 #error "MBEDTLS_X509_CSR_WRITE_C defined, but not all prerequisites"
1054 #if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK) && \
1055 ( !defined(MBEDTLS_X509_CRT_PARSE_C) )
1056 #error "MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK defined, but not all prerequisites"
1059 #if defined(MBEDTLS_HAVE_INT32) && defined(MBEDTLS_HAVE_INT64)
1060 #error "MBEDTLS_HAVE_INT32 and MBEDTLS_HAVE_INT64 cannot be defined simultaneously"
1063 #if ( defined(MBEDTLS_HAVE_INT32) || defined(MBEDTLS_HAVE_INT64) ) && \
1064 defined(MBEDTLS_HAVE_ASM)
1065 #error "MBEDTLS_HAVE_INT32/MBEDTLS_HAVE_INT64 and MBEDTLS_HAVE_ASM cannot be defined simultaneously"
1068 #if defined(MBEDTLS_SSL_DTLS_SRTP) && ( !defined(MBEDTLS_SSL_PROTO_DTLS) )
1069 #error "MBEDTLS_SSL_DTLS_SRTP defined, but not all prerequisites"
1072 #if defined(MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH) && ( !defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) )
1073 #error "MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH defined, but not all prerequisites"
1076 #if defined(MBEDTLS_SSL_RECORD_SIZE_LIMIT) && ( !defined(MBEDTLS_SSL_PROTO_TLS1_3) )
1077 #error "MBEDTLS_SSL_RECORD_SIZE_LIMIT defined, but not all prerequisites"
1080 #if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION) && \
1081 !( defined(MBEDTLS_SSL_HAVE_CCM) || defined(MBEDTLS_SSL_HAVE_GCM) || \
1082 defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) )
1083 #error "MBEDTLS_SSL_CONTEXT_SERIALIZATION defined, but not all prerequisites"
1089 #if defined(MBEDTLS_HAVEGE_C)
1090 #error "MBEDTLS_HAVEGE_C was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/2599"
1093 #if defined(MBEDTLS_SSL_HW_RECORD_ACCEL)
1094 #error "MBEDTLS_SSL_HW_RECORD_ACCEL was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1097 #if defined(MBEDTLS_SSL_PROTO_SSL3)
1098 #error "MBEDTLS_SSL_PROTO_SSL3 (SSL v3.0 support) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1101 #if defined(MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO)
1102 #error "MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO (SSL v2 ClientHello support) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1105 #if defined(MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT)
1106 #error "MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT (compatibility with the buggy implementation of truncated HMAC in Mbed TLS up to 2.7) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1109 #if defined(MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES)
1110 #error "MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES was removed in Mbed TLS 3.0. See the ChangeLog entry if you really need SHA-1-signed certificates."
1113 #if defined(MBEDTLS_ZLIB_SUPPORT)
1114 #error "MBEDTLS_ZLIB_SUPPORT was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1117 #if defined(MBEDTLS_CHECK_PARAMS)
1118 #error "MBEDTLS_CHECK_PARAMS was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4313"
1121 #if defined(MBEDTLS_SSL_CID_PADDING_GRANULARITY)
1122 #error "MBEDTLS_SSL_CID_PADDING_GRANULARITY was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4335"
1125 #if defined(MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY)
1126 #error "MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4335"
1129 #if defined(MBEDTLS_SSL_TRUNCATED_HMAC)
1130 #error "MBEDTLS_SSL_TRUNCATED_HMAC was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4341"
1133 #if defined(MBEDTLS_PKCS7_C) && ( ( !defined(MBEDTLS_ASN1_PARSE_C) ) || \
1134 ( !defined(MBEDTLS_OID_C) ) || ( !defined(MBEDTLS_PK_PARSE_C) ) || \
1135 ( !defined(MBEDTLS_X509_CRT_PARSE_C) ) || \
1136 ( !defined(MBEDTLS_X509_CRL_PARSE_C) ) || \
1137 ( !defined(MBEDTLS_MD_C) ) )
1138 #error "MBEDTLS_PKCS7_C is defined, but not all prerequisites"
int mbedtls_iso_c_forbids_empty_translation_units