commit 3aa79691fc8cc960123eacd519c2dfcd595404fb
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Sep 20 20:54:50 2023 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Sep 20 20:54:50 2023 +0200
tree 6fb68b615775df8f6b1e73cdd3f1faad5d8f754b
parent 08b66cd7d7124cf5437f4e5422f304e8cedac81d

Add a note about p256m near the option to enable secp256r1

Only document it with the PSA configuration, not for
MBEDTLS_ECP_DP_SECP256R1_ENABLED, since p256m can't be used with the classic
API.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

include/psa/crypto_config.h

diff --git a/include/psa/crypto_config.h b/include/psa/crypto_config.h
index 4e7a71e..d34cbf3 100644
--- a/include/psa/crypto_config.h
+++ b/include/psa/crypto_config.h
@@ -115,6 +115,8 @@
 #define PSA_WANT_ECC_SECP_K1_256                1
 #define PSA_WANT_ECC_SECP_R1_192                1
 #define PSA_WANT_ECC_SECP_R1_224                1
+/* For secp256r1, consider enabling #MBEDTLS_PSA_P256M_DRIVER_ENABLED
+ * (see the description in mbedtls/mbedtls_config.h for details). */
 #define PSA_WANT_ECC_SECP_R1_256                1
 #define PSA_WANT_ECC_SECP_R1_384                1
 #define PSA_WANT_ECC_SECP_R1_521                1