commit d0e66b00fbf588b4fee72df7ee3f226b2a431163
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Jul 24 13:52:51 2019 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Jul 24 13:52:51 2019 +0200
tree cd98cfdc5db06ac560d664850c0e4dfe58293ed6
parent 105736653ffcfa530fe989b81880acffc2c02441

Turn off secure element support by default

Secure element support is not yet usable in the real world. Only part
of the feature is implemented and the part that's implemented is not
sufficient for real-world uses. A lot of error handling is missing,
and there are no tests.

This commit should be reverted once the feature has stabilized.

include/mbedtls/config.h

diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 0e8d755..bd6f7b6 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1715,12 +1715,15 @@
  * Enable secure element support in the Platform Security Architecture
  * cryptography API.
  *
+ * \warning This feature is not yet suitable for production. It is provided
+ *          for API evaluation and testing purposes only.
+ *
  * Module:  library/psa_crypto_se.c
  *
  * Requires: MBEDTLS_PSA_CRYPTO_C, MBEDTLS_PSA_CRYPTO_STORAGE_C
  *
  */
-#define MBEDTLS_PSA_CRYPTO_SE_C
+//#define MBEDTLS_PSA_CRYPTO_SE_C
 
 /**
  * \def MBEDTLS_PSA_CRYPTO_STORAGE_C