| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 1 | /** |
| 2 | * \file config-tfm.h |
| 3 | * |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 4 | * \brief TF-M medium profile, adapted to work on other platforms. |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 5 | */ |
| 6 | /* |
| 7 | * Copyright The Mbed TLS Contributors |
| Yanray Wang | 8636d47 | 2023-11-08 10:07:01 +0800 | [diff] [blame^] | 8 | * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 9 | */ |
| 10 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 11 | /* TF-M medium profile: mbedtls legacy configuration */ |
| Yanray Wang | 4419d38 | 2023-09-07 11:28:27 +0800 | [diff] [blame] | 12 | #include "../configs/ext/tfm_mbedcrypto_config_profile_medium.h" |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 13 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 14 | /* TF-M medium profile: PSA crypto configuration */ |
| Yanray Wang | b153aae | 2023-09-06 12:32:10 +0800 | [diff] [blame] | 15 | #define MBEDTLS_PSA_CRYPTO_CONFIG_FILE "../configs/ext/crypto_config_profile_medium.h" |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 16 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 17 | /***********************************************************/ |
| 18 | /* Tweak the configuration to remove dependencies on TF-M. */ |
| 19 | /***********************************************************/ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 20 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 21 | /* MBEDTLS_PSA_CRYPTO_SPM needs third-party files, so disable it. */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 22 | #undef MBEDTLS_PSA_CRYPTO_SPM |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 23 | |
| 24 | /* TF-M provides its own dummy implementations to save code size. |
| 25 | * We don't have any way to disable the tests that need these feature, |
| Yanray Wang | 4419d38 | 2023-09-07 11:28:27 +0800 | [diff] [blame] | 26 | * so we just keep AES decryption enabled. We will resolve this through |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 27 | * an official way to disable AES decryption, then this deviation |
| 28 | * will no longer be needed: |
| 29 | * https://github.com/Mbed-TLS/mbedtls/issues/7368 |
| 30 | */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 31 | #undef MBEDTLS_AES_SETKEY_DEC_ALT |
| 32 | #undef MBEDTLS_AES_DECRYPT_ALT |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 33 | |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 34 | /* Use built-in platform entropy functions (TF-M provides its own). */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 35 | #undef MBEDTLS_NO_PLATFORM_ENTROPY |
| Gilles Peskine | e23fa41 | 2023-09-06 17:16:36 +0200 | [diff] [blame] | 36 | |
| 37 | /* Disable buffer-based memory allocator. This isn't strictly required, |
| 38 | * but using the native allocator is faster and works better with |
| 39 | * memory management analysis frameworks such as ASan. */ |
| Yanray Wang | 0c98f9f | 2023-09-06 15:47:49 +0800 | [diff] [blame] | 40 | #undef MBEDTLS_MEMORY_BUFFER_ALLOC_C |