TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / f87b505511036400be94ec523029a57191fe4b64 / . / include / mbedtls / config_psa.h
blob: b0c19e565eae21039b3ac844a28575aa09c81e16 [file] [log] [blame]
John Durkop6e33dbe2020-09-17 21:15:13 -0700[diff] [blame]1/**
2 * \file mbedtls/config_psa.h
3 * \brief PSA crypto configuration options (set of defines)
4 *
John Durkop34818822020-10-12 21:36:22 -0700[diff] [blame]5 * This set of compile-time options takes settings defined in
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200[diff] [blame]6 * include/mbedtls/mbedtls_config.h and include/psa/crypto_config.h and uses
John Durkop34818822020-10-12 21:36:22 -0700[diff] [blame]7 * those definitions to define symbols used in the library code.
8 *
9 * Users and integrators should not edit this file, please edit
Tom Cosgrove1797b052022-12-04 17:19:59 +0000[diff] [blame]10 * include/mbedtls/mbedtls_config.h for MBEDTLS_XXX settings or
John Durkop34818822020-10-12 21:36:22 -0700[diff] [blame]11 * include/psa/crypto_config.h for PSA_WANT_XXX settings.
John Durkop6e33dbe2020-09-17 21:15:13 -0700[diff] [blame]12 */
13/*
14 * Copyright The Mbed TLS Contributors
15 * SPDX-License-Identifier: Apache-2.0
16 *
17 * Licensed under the Apache License, Version 2.0 (the "License"); you may
18 * not use this file except in compliance with the License.
19 * You may obtain a copy of the License at
20 *
21 * http://www.apache.org/licenses/LICENSE-2.0
22 *
23 * Unless required by applicable law or agreed to in writing, software
24 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
25 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
26 * See the License for the specific language governing permissions and
27 * limitations under the License.
28 */
29
30#ifndef MBEDTLS_CONFIG_PSA_H
31#define MBEDTLS_CONFIG_PSA_H
32
John Durkop714e3a12020-09-29 22:07:04 -0700[diff] [blame]33#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
Gilles Peskinef4c6eb02022-03-16 17:10:48 +0100[diff] [blame]34#if defined(MBEDTLS_PSA_CRYPTO_CONFIG_FILE)
35#include MBEDTLS_PSA_CRYPTO_CONFIG_FILE
36#else
John Durkop6e33dbe2020-09-17 21:15:13 -0700[diff] [blame]37#include "psa/crypto_config.h"
Gilles Peskinef4c6eb02022-03-16 17:10:48 +0100[diff] [blame]38#endif
John Durkop76228ac2020-09-29 22:33:49 -0700[diff] [blame]39#endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
John Durkop6e33dbe2020-09-17 21:15:13 -0700[diff] [blame]40
Gilles Peskinef4c6eb02022-03-16 17:10:48 +0100[diff] [blame]41#if defined(MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE)
42#include MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE
43#endif
44
John Durkop6e33dbe2020-09-17 21:15:13 -0700[diff] [blame]45#ifdef __cplusplus
46extern "C" {
47#endif
48
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]49
50
51/****************************************************************/
52/* De facto synonyms */
53/****************************************************************/
54
55#if defined(PSA_WANT_ALG_ECDSA_ANY) && !defined(PSA_WANT_ALG_ECDSA)
56#define PSA_WANT_ALG_ECDSA PSA_WANT_ALG_ECDSA_ANY
57#elif !defined(PSA_WANT_ALG_ECDSA_ANY) && defined(PSA_WANT_ALG_ECDSA)
58#define PSA_WANT_ALG_ECDSA_ANY PSA_WANT_ALG_ECDSA
59#endif
60
Gilles Peskine08622b62022-03-15 16:40:59 +0100[diff] [blame]61#if defined(PSA_WANT_ALG_CCM_STAR_NO_TAG) && !defined(PSA_WANT_ALG_CCM)
62#define PSA_WANT_ALG_CCM PSA_WANT_ALG_CCM_STAR_NO_TAG
63#elif !defined(PSA_WANT_ALG_CCM_STAR_NO_TAG) && defined(PSA_WANT_ALG_CCM)
64#define PSA_WANT_ALG_CCM_STAR_NO_TAG PSA_WANT_ALG_CCM
65#endif
66
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]67#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
68#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW
69#elif !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW) && defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
70#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW PSA_WANT_ALG_RSA_PKCS1V15_SIGN
71#endif
72
Gilles Peskine44c96aa2021-10-04 18:33:56 +0200[diff] [blame]73#if defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && !defined(PSA_WANT_ALG_RSA_PSS)
74#define PSA_WANT_ALG_RSA_PSS PSA_WANT_ALG_RSA_PSS_ANY_SALT
75#elif !defined(PSA_WANT_ALG_RSA_PSS_ANY_SALT) && defined(PSA_WANT_ALG_RSA_PSS)
76#define PSA_WANT_ALG_RSA_PSS_ANY_SALT PSA_WANT_ALG_RSA_PSS
77#endif
78
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]79
Manuel Pégourié-Gonnard235a9332023-03-14 18:01:23 +0100[diff] [blame]80/****************************************************************/
81/* Hashes that are built in are also enabled in PSA.
82 * This simplifies dependency declarations especially
83 * for modules that obey MBEDTLS_USE_PSA_CRYPTO. */
84/****************************************************************/
85
86#if defined(MBEDTLS_MD5_C)
87#define PSA_WANT_ALG_MD5 1
88#endif
89
90#if defined(MBEDTLS_RIPEMD160_C)
91#define PSA_WANT_ALG_RIPEMD160 1
92#endif
93
94#if defined(MBEDTLS_SHA1_C)
95#define PSA_WANT_ALG_SHA_1 1
96#endif
97
98#if defined(MBEDTLS_SHA224_C)
99#define PSA_WANT_ALG_SHA_224 1
100#endif
101
102#if defined(MBEDTLS_SHA256_C)
103#define PSA_WANT_ALG_SHA_256 1
104#endif
105
106#if defined(MBEDTLS_SHA384_C)
107#define PSA_WANT_ALG_SHA_384 1
108#endif
109
110#if defined(MBEDTLS_SHA512_C)
111#define PSA_WANT_ALG_SHA_512 1
112#endif
113
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]114
115/****************************************************************/
116/* Require built-in implementations based on PSA requirements */
117/****************************************************************/
118
John Durkop2dfaf9c2020-09-24 04:30:10 -0700[diff] [blame]119#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
John Durkopd8959392020-09-20 23:09:17 -0700[diff] [blame]120
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]121#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
122#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
123#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
124#define MBEDTLS_ECDSA_DETERMINISTIC
125#define MBEDTLS_ECDSA_C
126#define MBEDTLS_HMAC_DRBG_C
127#define MBEDTLS_MD_C
128#endif /* !MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
129#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
130
131#if defined(PSA_WANT_ALG_ECDH)
132#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
133#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
134#define MBEDTLS_ECDH_C
135#define MBEDTLS_ECP_C
136#define MBEDTLS_BIGNUM_C
137#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDH */
138#endif /* PSA_WANT_ALG_ECDH */
139
140#if defined(PSA_WANT_ALG_ECDSA)
141#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
142#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
143#define MBEDTLS_ECDSA_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200[diff] [blame]144#define MBEDTLS_ECP_C
145#define MBEDTLS_BIGNUM_C
146#define MBEDTLS_ASN1_PARSE_C
147#define MBEDTLS_ASN1_WRITE_C
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]148#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
149#endif /* PSA_WANT_ALG_ECDSA */
150
Przemek Stekiel84ee3e22022-12-01 14:22:34 +0100[diff] [blame]151#if defined(PSA_WANT_ALG_FFDH)
152#if !defined(MBEDTLS_PSA_ACCEL_ALG_FFDH)
153#define MBEDTLS_PSA_BUILTIN_ALG_FFDH 1
Przemek Stekiel84ee3e22022-12-01 14:22:34 +0100[diff] [blame]154#define MBEDTLS_BIGNUM_C
155#endif /* !MBEDTLS_PSA_ACCEL_ALG_FFDH */
156#endif /* PSA_WANT_ALG_FFDH */
157
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]158#if defined(PSA_WANT_ALG_HKDF)
159#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
160#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
161#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
162#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
163#endif /* PSA_WANT_ALG_HKDF */
164
Przemek Stekiel3e8249c2022-06-03 14:05:07 +0200[diff] [blame]165#if defined(PSA_WANT_ALG_HKDF_EXTRACT)
166#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT)
167#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
168#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
169#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT */
170#endif /* PSA_WANT_ALG_HKDF_EXTRACT */
171
172#if defined(PSA_WANT_ALG_HKDF_EXPAND)
173#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND)
174#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
175#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
176#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND */
177#endif /* PSA_WANT_ALG_HKDF_EXPAND */
178
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]179#if defined(PSA_WANT_ALG_HMAC)
180#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
181#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
182#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
183#endif /* PSA_WANT_ALG_HMAC */
184
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]185#if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
186#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
187#define MBEDTLS_MD5_C
188#endif
189
Neil Armstronga557cb82022-06-10 08:58:32 +0200[diff] [blame]190#if defined(PSA_WANT_ALG_JPAKE)
Przemek Stekiel4aa99402023-02-27 13:00:57 +0100[diff] [blame]191#if !defined(MBEDTLS_PSA_ACCEL_ALG_JPAKE)
Neil Armstrong637d0a02022-05-25 11:28:22 +0200[diff] [blame]192#define MBEDTLS_PSA_BUILTIN_PAKE 1
Neil Armstronga557cb82022-06-10 08:58:32 +0200[diff] [blame]193#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
Neil Armstronged407822022-06-15 11:21:33 +0200[diff] [blame]194#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
Neil Armstrong637d0a02022-05-25 11:28:22 +0200[diff] [blame]195#define MBEDTLS_BIGNUM_C
196#define MBEDTLS_ECP_C
Neil Armstrong637d0a02022-05-25 11:28:22 +0200[diff] [blame]197#define MBEDTLS_ECJPAKE_C
Przemek Stekiel4aa99402023-02-27 13:00:57 +0100[diff] [blame]198#endif /* MBEDTLS_PSA_ACCEL_ALG_JPAKE */
Neil Armstronga557cb82022-06-10 08:58:32 +0200[diff] [blame]199#endif /* PSA_WANT_ALG_JPAKE */
Neil Armstrong637d0a02022-05-25 11:28:22 +0200[diff] [blame]200
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]201#if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
202#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
203#define MBEDTLS_RIPEMD160_C
204#endif
205
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]206#if defined(PSA_WANT_ALG_RSA_OAEP)
207#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
208#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
209#define MBEDTLS_RSA_C
210#define MBEDTLS_BIGNUM_C
211#define MBEDTLS_OID_C
212#define MBEDTLS_PKCS1_V21
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]213#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
214#endif /* PSA_WANT_ALG_RSA_OAEP */
215
216#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
217#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
218#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
219#define MBEDTLS_RSA_C
220#define MBEDTLS_BIGNUM_C
221#define MBEDTLS_OID_C
222#define MBEDTLS_PKCS1_V15
223#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
224#endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
225
226#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
227#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
228#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
229#define MBEDTLS_RSA_C
230#define MBEDTLS_BIGNUM_C
231#define MBEDTLS_OID_C
232#define MBEDTLS_PKCS1_V15
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]233#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
234#endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
235
236#if defined(PSA_WANT_ALG_RSA_PSS)
237#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
238#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
239#define MBEDTLS_RSA_C
240#define MBEDTLS_BIGNUM_C
241#define MBEDTLS_OID_C
242#define MBEDTLS_PKCS1_V21
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]243#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
244#endif /* PSA_WANT_ALG_RSA_PSS */
245
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]246#if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
247#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
248#define MBEDTLS_SHA1_C
249#endif
250
251#if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
252#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200[diff] [blame]253#define MBEDTLS_SHA224_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]254#endif
255
256#if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
257#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
258#define MBEDTLS_SHA256_C
259#endif
260
261#if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
262#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200[diff] [blame]263#define MBEDTLS_SHA384_C
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]264#endif
265
266#if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
267#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
268#define MBEDTLS_SHA512_C
269#endif
270
Kusumit Ghoderao83baf892023-05-03 11:42:29 +0530[diff] [blame]271#if defined(PSA_WANT_ALG_PBKDF2_HMAC)
272#if !defined(MBEDTLS_PSA_ACCEL_ALG_PBKDF2_HMAC)
273#define MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC 1
Kusumit Ghoderaob9410e82023-05-03 18:36:35 +0530[diff] [blame]274#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
Kusumit Ghoderao83baf892023-05-03 11:42:29 +0530[diff] [blame]275#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
Kusumit Ghoderaob9410e82023-05-03 18:36:35 +0530[diff] [blame]276#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
Kusumit Ghoderao83baf892023-05-03 11:42:29 +0530[diff] [blame]277#endif /* !MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC */
278#endif /* PSA_WANT_ALG_PBKDF2_HMAC */
279
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]280#if defined(PSA_WANT_ALG_TLS12_PRF)
281#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]282#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]283#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
284#endif /* PSA_WANT_ALG_TLS12_PRF */
285
286#if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
287#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]288#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]289#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
290#endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
291
Andrzej Kurek08d34b82022-07-29 10:00:16 -0400[diff] [blame]292#if defined(PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS)
293#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS)
294#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
295#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS */
296#endif /* PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS */
297
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200[diff] [blame]298#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_USE)
299#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_USE)
300#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_USE 1
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]301#define MBEDTLS_ECP_C
302#define MBEDTLS_BIGNUM_C
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200[diff] [blame]303#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_USE */
304#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_USE */
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]305
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200[diff] [blame]306#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT)
307#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT)
308#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
309#define MBEDTLS_ECP_C
Przemek Stekiel84ee3e22022-12-01 14:22:34 +0100[diff] [blame]310#define MBEDTLS_BIGNUM_C
Valerio Setti67a3e3e2023-05-26 13:37:26 +0200[diff] [blame]311#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT */
312#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT */
313
314#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
315#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
316#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT 1
317#define MBEDTLS_ECP_C
318#define MBEDTLS_BIGNUM_C
319#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT */
320#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT */
321
322#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
323#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
324#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
325#define MBEDTLS_ECP_C
326#define MBEDTLS_BIGNUM_C
327#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE */
328#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE */
329
330#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
331#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
332#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_DERIVE 1
333#define MBEDTLS_ECP_C
334#define MBEDTLS_BIGNUM_C
335#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE */
336#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE */
337
338#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_USE)
339#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_USE)
340#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_USE 1
341#define MBEDTLS_RSA_C
342#define MBEDTLS_BIGNUM_C
343#define MBEDTLS_OID_C
344#define MBEDTLS_GENPRIME
345#define MBEDTLS_PK_PARSE_C
346#define MBEDTLS_PK_WRITE_C
347#define MBEDTLS_PK_C
348#define MBEDTLS_ASN1_PARSE_C
349#define MBEDTLS_ASN1_WRITE_C
350#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_USE */
351#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_USE */
352
353#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT)
354#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_IMPORT)
355#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
356#define MBEDTLS_RSA_C
357#define MBEDTLS_BIGNUM_C
358#define MBEDTLS_OID_C
359#define MBEDTLS_PK_PARSE_C
360#define MBEDTLS_PK_WRITE_C
361#define MBEDTLS_PK_C
362#define MBEDTLS_ASN1_PARSE_C
363#define MBEDTLS_ASN1_WRITE_C
364#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_IMPORT */
365#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT */
366
367#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT)
368#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_EXPORT)
369#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
370#define MBEDTLS_RSA_C
371#define MBEDTLS_BIGNUM_C
372#define MBEDTLS_OID_C
373#define MBEDTLS_PK_PARSE_C
374#define MBEDTLS_PK_WRITE_C
375#define MBEDTLS_PK_C
376#define MBEDTLS_ASN1_PARSE_C
377#define MBEDTLS_ASN1_WRITE_C
378#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_EXPORT */
379#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT */
380
381#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
382#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
383#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
384#define MBEDTLS_RSA_C
385#define MBEDTLS_BIGNUM_C
386#define MBEDTLS_OID_C
387#define MBEDTLS_GENPRIME
388#define MBEDTLS_PK_PARSE_C
389#define MBEDTLS_PK_WRITE_C
390#define MBEDTLS_PK_C
391#define MBEDTLS_ASN1_PARSE_C
392#define MBEDTLS_ASN1_WRITE_C
393#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_GENERATE */
394#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE */
395
396#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_USE)
397#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_USE)
398#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_USE 1
399#define MBEDTLS_BIGNUM_C
400#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_USE */
401#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_USE */
402
403#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT)
404#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_IMPORT)
405#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
406#define MBEDTLS_BIGNUM_C
407#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_IMPORT */
408#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT */
409
410#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT)
411#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_EXPORT)
412#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
413#define MBEDTLS_BIGNUM_C
414#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_EXPORT */
415#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT */
416
417#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE)
418#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_GENERATE)
419#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
420#define MBEDTLS_BIGNUM_C
421#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_GENERATE */
422#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE */
423
424#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE)
425#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_DERIVE)
426#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_DERIVE 1
427#define MBEDTLS_BIGNUM_C
428#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_DERIVE */
429#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE */
Przemek Stekiel84ee3e22022-12-01 14:22:34 +0100[diff] [blame]430
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]431#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
432#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]433#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]434#define MBEDTLS_ECP_C
435#define MBEDTLS_BIGNUM_C
436#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY */
437#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
438
Przemek Stekiel6d85afa2023-04-28 11:42:17 +0200[diff] [blame]439#if defined(PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY)
440#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_PUBLIC_KEY)
441#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_PUBLIC_KEY 1
Przemek Stekiel87d9a4a2022-12-15 13:22:11 +0100[diff] [blame]442#define MBEDTLS_BIGNUM_C
Przemek Stekiel6d85afa2023-04-28 11:42:17 +0200[diff] [blame]443#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_PUBLIC_KEY */
444#endif /* PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY */
Przemek Stekiel87d9a4a2022-12-15 13:22:11 +0100[diff] [blame]445
John Durkop9814fa22020-11-04 12:28:15 -0800[diff] [blame]446#if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkop0e005192020-10-31 22:06:54 -0700[diff] [blame]447#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]448#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
John Durkop0e005192020-10-31 22:06:54 -0700[diff] [blame]449#define MBEDTLS_RSA_C
450#define MBEDTLS_BIGNUM_C
451#define MBEDTLS_OID_C
John Durkop07cc04a2020-11-16 22:08:34 -0800[diff] [blame]452#define MBEDTLS_PK_PARSE_C
453#define MBEDTLS_PK_WRITE_C
454#define MBEDTLS_PK_C
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200[diff] [blame]455#define MBEDTLS_ASN1_PARSE_C
456#define MBEDTLS_ASN1_WRITE_C
John Durkop0e005192020-10-31 22:06:54 -0700[diff] [blame]457#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkop9814fa22020-11-04 12:28:15 -0800[diff] [blame]458#endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
John Durkopd0321952020-10-29 21:37:36 -0700[diff] [blame]459
David Brownb781f752021-02-08 15:44:52 -0700[diff] [blame]460/* If any of the block modes are requested that don't have an
461 * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
462 * in the block cipher key types. */
463#if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
Bence Szépkúti7921cce2021-02-17 11:46:50 +0100[diff] [blame]464 (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700[diff] [blame]465 (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
David Brownb781f752021-02-08 15:44:52 -0700[diff] [blame]466 defined(PSA_WANT_ALG_ECB_NO_PADDING) || \
467 (defined(PSA_WANT_ALG_CBC_NO_PADDING) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100[diff] [blame]468 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
David Brownb781f752021-02-08 15:44:52 -0700[diff] [blame]469 (defined(PSA_WANT_ALG_CBC_PKCS7) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100[diff] [blame]470 !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]471 (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
David Brownb781f752021-02-08 15:44:52 -0700[diff] [blame]472#define PSA_HAVE_SOFT_BLOCK_MODE 1
473#endif
474
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]475#if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
476 (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
477#define PSA_HAVE_SOFT_BLOCK_AEAD 1
478#endif
479
David Brown94933082021-01-05 12:03:25 -0700[diff] [blame]480#if defined(PSA_WANT_KEY_TYPE_AES)
David Browne1f91f02021-02-09 15:56:22 -0700[diff] [blame]481#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
482#define PSA_HAVE_SOFT_KEY_TYPE_AES 1
483#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
484#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]485 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
486 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700[diff] [blame]487#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700[diff] [blame]488#define MBEDTLS_AES_C
David Browne1f91f02021-02-09 15:56:22 -0700[diff] [blame]489#endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown94933082021-01-05 12:03:25 -0700[diff] [blame]490#endif /* PSA_WANT_KEY_TYPE_AES */
491
Gilles Peskine09c46da2021-10-08 15:48:16 +0200[diff] [blame]492#if defined(PSA_WANT_KEY_TYPE_ARIA)
493#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA)
494#define PSA_HAVE_SOFT_KEY_TYPE_ARIA 1
495#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA */
496#if defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
497 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
498 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
499#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
500#define MBEDTLS_ARIA_C
501#endif /* PSA_HAVE_SOFT_KEY_TYPE_ARIA || PSA_HAVE_SOFT_BLOCK_MODE */
502#endif /* PSA_WANT_KEY_TYPE_ARIA */
503
David Brown686e6e82021-01-05 12:03:25 -0700[diff] [blame]504#if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
David Browne1f91f02021-02-09 15:56:22 -0700[diff] [blame]505#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
506#define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
507#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
508#if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]509 defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
510 defined(PSA_HAVE_SOFT_BLOCK_AEAD)
David Brown78a429b2021-01-21 09:48:57 -0700[diff] [blame]511#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700[diff] [blame]512#define MBEDTLS_CAMELLIA_C
David Browne1f91f02021-02-09 15:56:22 -0700[diff] [blame]513#endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
David Brown686e6e82021-01-05 12:03:25 -0700[diff] [blame]514#endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
515
David Brownb65a7f72021-01-15 12:04:09 -0700[diff] [blame]516#if defined(PSA_WANT_KEY_TYPE_DES)
David Browne1f91f02021-02-09 15:56:22 -0700[diff] [blame]517#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
518#define PSA_HAVE_SOFT_KEY_TYPE_DES 1
519#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
520#if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
David Brownb781f752021-02-08 15:44:52 -0700[diff] [blame]521 defined(PSA_HAVE_SOFT_BLOCK_MODE)
David Brown78a429b2021-01-21 09:48:57 -0700[diff] [blame]522#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700[diff] [blame]523#define MBEDTLS_DES_C
David Browne1f91f02021-02-09 15:56:22 -0700[diff] [blame]524#endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
David Brownb65a7f72021-01-15 12:04:09 -0700[diff] [blame]525#endif /* PSA_WANT_KEY_TYPE_DES */
526
David Brownb16727a2021-02-08 16:31:46 -0700[diff] [blame]527#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
528#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20)
529#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
530#define MBEDTLS_CHACHA20_C
531#endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */
532#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
533
David Brownf84a0f62021-02-09 15:59:41 -0700[diff] [blame]534/* If any of the software block ciphers are selected, define
535 * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
536 * situations. */
537#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200[diff] [blame]538 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
David Brownf84a0f62021-02-09 15:59:41 -0700[diff] [blame]539 defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
540 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
541#define PSA_HAVE_SOFT_BLOCK_CIPHER 1
542#endif
543
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]544#if defined(PSA_WANT_ALG_STREAM_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]545#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]546#endif /* PSA_WANT_ALG_STREAM_CIPHER */
547
Ronald Crond85e98d2021-03-25 15:32:32 +0100[diff] [blame]548#if defined(PSA_WANT_ALG_CBC_MAC)
549#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
550#error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
551#define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
552#endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
553#endif /* PSA_WANT_ALG_CBC_MAC */
554
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]555#if defined(PSA_WANT_ALG_CMAC)
556#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
557 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
558#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
559#define MBEDTLS_CMAC_C
560#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
561#endif /* PSA_WANT_ALG_CMAC */
562
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]563#if defined(PSA_WANT_ALG_CTR)
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]564#if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
David Brownf84a0f62021-02-09 15:59:41 -0700[diff] [blame]565 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]566#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]567#define MBEDTLS_CIPHER_MODE_CTR
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]568#endif
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]569#endif /* PSA_WANT_ALG_CTR */
570
571#if defined(PSA_WANT_ALG_CFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]572#if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700[diff] [blame]573 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]574#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]575#define MBEDTLS_CIPHER_MODE_CFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]576#endif
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]577#endif /* PSA_WANT_ALG_CFB */
578
579#if defined(PSA_WANT_ALG_OFB)
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]580#if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
David Brownf84a0f62021-02-09 15:59:41 -0700[diff] [blame]581 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]582#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]583#define MBEDTLS_CIPHER_MODE_OFB
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]584#endif
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]585#endif /* PSA_WANT_ALG_OFB */
586
Gilles Peskine7a2e83b2022-03-17 11:09:23 +0100[diff] [blame]587#if defined(PSA_WANT_ALG_ECB_NO_PADDING) && \
588 !defined(MBEDTLS_PSA_ACCEL_ALG_ECB_NO_PADDING)
David Brownbe380c12021-02-11 10:55:48 -0700[diff] [blame]589#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]590#endif
591
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]592#if defined(PSA_WANT_ALG_CBC_NO_PADDING)
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]593#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
David Brownfc468182021-02-09 16:23:34 -0700[diff] [blame]594 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700[diff] [blame]595#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]596#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]597#endif
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]598#endif /* PSA_WANT_ALG_CBC_NO_PADDING */
599
600#if defined(PSA_WANT_ALG_CBC_PKCS7)
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]601#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
David Brownfc468182021-02-09 16:23:34 -0700[diff] [blame]602 defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
David Brown8de64372021-02-11 10:53:23 -0700[diff] [blame]603#define MBEDTLS_CIPHER_MODE_CBC
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]604#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brownfc468182021-02-09 16:23:34 -0700[diff] [blame]605#define MBEDTLS_CIPHER_PADDING_PKCS7
David Brown4b9ec7a2021-02-05 12:47:08 -0700[diff] [blame]606#endif
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]607#endif /* PSA_WANT_ALG_CBC_PKCS7 */
608
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]609#if defined(PSA_WANT_ALG_CCM)
610#if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
611 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200[diff] [blame]612 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]613 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
614#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100[diff] [blame]615#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]616#define MBEDTLS_CCM_C
617#endif
618#endif /* PSA_WANT_ALG_CCM */
619
620#if defined(PSA_WANT_ALG_GCM)
621#if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
622 defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200[diff] [blame]623 defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
Ronald Cronb9df5ce2021-03-25 09:25:38 +0100[diff] [blame]624 defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
625#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
626#define MBEDTLS_GCM_C
627#endif
628#endif /* PSA_WANT_ALG_GCM */
629
David Brownac4fa072021-02-08 16:47:35 -0700[diff] [blame]630#if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200[diff] [blame]631#if !defined(MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305)
David Brownac4fa072021-02-08 16:47:35 -0700[diff] [blame]632#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
633#define MBEDTLS_CHACHAPOLY_C
Summer Qin9f2596f2022-06-17 12:50:32 +0800[diff] [blame]634#define MBEDTLS_CHACHA20_C
635#define MBEDTLS_POLY1305_C
David Brown86730a82021-02-09 16:24:11 -0700[diff] [blame]636#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700[diff] [blame]637#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
Ronald Crond4c2c9b2021-04-28 18:28:46 +0200[diff] [blame]638#endif /* !MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305 */
David Brownac4fa072021-02-08 16:47:35 -0700[diff] [blame]639#endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
640
David Browneed74df2021-03-15 15:53:57 -0600[diff] [blame]641#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
642#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
643#define MBEDTLS_ECP_DP_BP256R1_ENABLED
644#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
645#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256 */
646#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
647
648#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
649#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
650#define MBEDTLS_ECP_DP_BP384R1_ENABLED
651#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
652#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384 */
653#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
654
655#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
656#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
657#define MBEDTLS_ECP_DP_BP512R1_ENABLED
658#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
659#endif /* !MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512 */
660#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
661
662#if defined(PSA_WANT_ECC_MONTGOMERY_255)
663#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
664#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
665#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
666#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255 */
667#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
668
669#if defined(PSA_WANT_ECC_MONTGOMERY_448)
670#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
671#define MBEDTLS_ECP_DP_CURVE448_ENABLED
672#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
673#endif /* !MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448 */
674#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
675
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]676#if defined(PSA_WANT_ECC_SECP_R1_192)
677#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
678#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
679#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
680#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192 */
681#endif /* PSA_WANT_ECC_SECP_R1_192 */
682
683#if defined(PSA_WANT_ECC_SECP_R1_224)
684#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
685#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
686#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
687#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224 */
688#endif /* PSA_WANT_ECC_SECP_R1_224 */
689
690#if defined(PSA_WANT_ECC_SECP_R1_256)
691#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
692#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
693#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
694#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256 */
695#endif /* PSA_WANT_ECC_SECP_R1_256 */
696
697#if defined(PSA_WANT_ECC_SECP_R1_384)
698#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
699#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
700#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
701#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384 */
702#endif /* PSA_WANT_ECC_SECP_R1_384 */
703
704#if defined(PSA_WANT_ECC_SECP_R1_521)
705#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
706#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
707#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
708#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521 */
709#endif /* PSA_WANT_ECC_SECP_R1_521 */
710
711#if defined(PSA_WANT_ECC_SECP_K1_192)
712#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]713#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]714#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
715#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192 */
716#endif /* PSA_WANT_ECC_SECP_K1_192 */
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]717
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]718#if defined(PSA_WANT_ECC_SECP_K1_224)
719#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
Ronald Crone1f55162021-03-25 15:09:47 +0100[diff] [blame]720/*
721 * SECP224K1 is buggy via the PSA API in Mbed TLS
Dave Rodgman017a1992022-03-31 14:07:01 +0100[diff] [blame]722 * (https://github.com/Mbed-TLS/mbedtls/issues/3541).
Ronald Crone1f55162021-03-25 15:09:47 +0100[diff] [blame]723 */
724#error "SECP224K1 is buggy via the PSA API in Mbed TLS."
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]725#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]726#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
727#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224 */
728#endif /* PSA_WANT_ECC_SECP_K1_224 */
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]729
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]730#if defined(PSA_WANT_ECC_SECP_K1_256)
731#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
David Brown9b178de2021-03-10 13:14:48 -0700[diff] [blame]732#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]733#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
734#endif /* !MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256 */
735#endif /* PSA_WANT_ECC_SECP_K1_256 */
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]736
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]737
738
739/****************************************************************/
740/* Infer PSA requirements from Mbed TLS capabilities */
741/****************************************************************/
742
John Durkop714e3a12020-09-29 22:07:04 -0700[diff] [blame]743#else /* MBEDTLS_PSA_CRYPTO_CONFIG */
744
745/*
746 * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
747 * is not defined
748 */
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]749
Ronald Cron3d471812021-03-18 13:40:31 +0100[diff] [blame]750#if defined(MBEDTLS_CCM_C)
751#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100[diff] [blame]752#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
Ronald Cron3d471812021-03-18 13:40:31 +0100[diff] [blame]753#define PSA_WANT_ALG_CCM 1
Gilles Peskine08622b62022-03-15 16:40:59 +0100[diff] [blame]754#define PSA_WANT_ALG_CCM_STAR_NO_TAG 1
Ronald Cron3d471812021-03-18 13:40:31 +0100[diff] [blame]755#endif /* MBEDTLS_CCM_C */
756
757#if defined(MBEDTLS_CMAC_C)
758#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
759#define PSA_WANT_ALG_CMAC 1
760#endif /* MBEDTLS_CMAC_C */
761
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]762#if defined(MBEDTLS_ECDH_C)
763#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
764#define PSA_WANT_ALG_ECDH 1
765#endif /* MBEDTLS_ECDH_C */
766
767#if defined(MBEDTLS_ECDSA_C)
768#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
769#define PSA_WANT_ALG_ECDSA 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]770#define PSA_WANT_ALG_ECDSA_ANY 1
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]771
772// Only add in DETERMINISTIC support if ECDSA is also enabled
773#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
774#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
775#define PSA_WANT_ALG_DETERMINISTIC_ECDSA 1
776#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
777
778#endif /* MBEDTLS_ECDSA_C */
779
780#if defined(MBEDTLS_ECP_C)
Valerio Settif87b5052023-05-26 13:47:09 +0200[diff] [blame^]781#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_LEGACY 1
782#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_USE 1
783#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
784#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT 1
785#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE 1
786#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]787#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
788#define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
789#endif /* MBEDTLS_ECP_C */
790
Przemek Stekiel746dfae2023-05-04 09:14:08 +0200[diff] [blame]791#if defined(MBEDTLS_DHM_C)
Valerio Settif87b5052023-05-26 13:47:09 +0200[diff] [blame^]792#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_USE 1
793#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
794#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
795#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE 1
796#define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
Przemek Stekiel746dfae2023-05-04 09:14:08 +0200[diff] [blame]797#define PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY 1
798#define PSA_WANT_ALG_FFDH 1
799#define PSA_WANT_DH_FAMILY_RFC7919 1
800#define MBEDTLS_PSA_BUILTIN_ALG_FFDH 1
Valerio Settif87b5052023-05-26 13:47:09 +0200[diff] [blame^]801#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_USE 1
802#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
803#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
804#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
805#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_DERIVE 1
Przemek Stekiel746dfae2023-05-04 09:14:08 +0200[diff] [blame]806#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_PUBLIC_KEY 1
807#endif /* MBEDTLS_DHM_C */
808
Ronald Cron3d471812021-03-18 13:40:31 +0100[diff] [blame]809#if defined(MBEDTLS_GCM_C)
810#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
811#define PSA_WANT_ALG_GCM 1
812#endif /* MBEDTLS_GCM_C */
813
Przemek Stekiel18399d82022-06-27 13:34:50 +0200[diff] [blame]814/* Enable PSA HKDF algorithm if mbedtls HKDF is supported.
815 * PSA HKDF EXTRACT and PSA HKDF EXPAND have minimal cost when
816 * PSA HKDF is enabled, so enable both algorithms together
817 * with PSA HKDF. */
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]818#if defined(MBEDTLS_HKDF_C)
819#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
820#define PSA_WANT_ALG_HMAC 1
821#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
822#define PSA_WANT_ALG_HKDF 1
Przemek Stekielb33bd192022-06-21 09:58:51 +0200[diff] [blame]823#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
824#define PSA_WANT_ALG_HKDF_EXTRACT 1
825#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
826#define PSA_WANT_ALG_HKDF_EXPAND 1
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]827#endif /* MBEDTLS_HKDF_C */
828
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]829#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
830#define PSA_WANT_ALG_HMAC 1
Gilles Peskine47a89332021-01-12 00:00:15 +0100[diff] [blame]831#define PSA_WANT_KEY_TYPE_HMAC
Andrzej Kurek65bf73e2022-08-31 14:59:31 -0400[diff] [blame]832
833#if defined(MBEDTLS_MD_C)
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]834#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
835#define PSA_WANT_ALG_TLS12_PRF 1
836#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
837#define PSA_WANT_ALG_TLS12_PSK_TO_MS 1
838#endif /* MBEDTLS_MD_C */
839
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]840#if defined(MBEDTLS_MD5_C)
841#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
842#define PSA_WANT_ALG_MD5 1
843#endif
844
Neil Armstrong637d0a02022-05-25 11:28:22 +0200[diff] [blame]845#if defined(MBEDTLS_ECJPAKE_C)
846#define MBEDTLS_PSA_BUILTIN_PAKE 1
Neil Armstronga557cb82022-06-10 08:58:32 +0200[diff] [blame]847#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
848#define PSA_WANT_ALG_JPAKE 1
Neil Armstrong637d0a02022-05-25 11:28:22 +0200[diff] [blame]849#endif
850
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]851#if defined(MBEDTLS_RIPEMD160_C)
852#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
853#define PSA_WANT_ALG_RIPEMD160 1
854#endif
855
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]856#if defined(MBEDTLS_RSA_C)
857#if defined(MBEDTLS_PKCS1_V15)
858#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
859#define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
860#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
861#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
Gilles Peskine1231eb52021-04-19 22:24:23 +0200[diff] [blame]862#define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW 1
Yuto Takano7828ca22021-08-10 11:26:15 +0100[diff] [blame]863#endif /* MBEDTLS_PKCS1_V15 */
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]864#if defined(MBEDTLS_PKCS1_V21)
865#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
866#define PSA_WANT_ALG_RSA_OAEP 1
867#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
868#define PSA_WANT_ALG_RSA_PSS 1
869#endif /* MBEDTLS_PKCS1_V21 */
Valerio Settif87b5052023-05-26 13:47:09 +0200[diff] [blame^]870#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_USE 1
871#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
872#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
873#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
874#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_USE 1
875#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
876#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
877#define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
John Durkopd62b6782020-11-30 21:06:05 -0800[diff] [blame]878#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
879#define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
880#endif /* MBEDTLS_RSA_C */
881
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]882#if defined(MBEDTLS_SHA1_C)
883#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
884#define PSA_WANT_ALG_SHA_1 1
885#endif
886
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200[diff] [blame]887#if defined(MBEDTLS_SHA224_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]888#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
Gilles Peskineb65db072021-01-12 00:00:53 +0100[diff] [blame]889#define PSA_WANT_ALG_SHA_224 1
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200[diff] [blame]890#endif
891
892#if defined(MBEDTLS_SHA256_C)
893#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]894#define PSA_WANT_ALG_SHA_256 1
895#endif
896
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200[diff] [blame]897#if defined(MBEDTLS_SHA384_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]898#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
899#define PSA_WANT_ALG_SHA_384 1
900#endif
Mateusz Starzyk3352a532021-04-06 14:28:22 +0200[diff] [blame]901
902#if defined(MBEDTLS_SHA512_C)
Gilles Peskine2cecfba2020-11-25 00:07:04 +0100[diff] [blame]903#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
904#define PSA_WANT_ALG_SHA_512 1
905#endif
906
David Brown94933082021-01-05 12:03:25 -0700[diff] [blame]907#if defined(MBEDTLS_AES_C)
908#define PSA_WANT_KEY_TYPE_AES 1
David Brownda7dbb72021-01-26 11:44:15 -0700[diff] [blame]909#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
David Brown94933082021-01-05 12:03:25 -0700[diff] [blame]910#endif
911
Gilles Peskine09c46da2021-10-08 15:48:16 +0200[diff] [blame]912#if defined(MBEDTLS_ARIA_C)
913#define PSA_WANT_KEY_TYPE_ARIA 1
914#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
915#endif
916
David Brown686e6e82021-01-05 12:03:25 -0700[diff] [blame]917#if defined(MBEDTLS_CAMELLIA_C)
918#define PSA_WANT_KEY_TYPE_CAMELLIA 1
David Brownda7dbb72021-01-26 11:44:15 -0700[diff] [blame]919#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
David Brown686e6e82021-01-05 12:03:25 -0700[diff] [blame]920#endif
921
David Brownb65a7f72021-01-15 12:04:09 -0700[diff] [blame]922#if defined(MBEDTLS_DES_C)
923#define PSA_WANT_KEY_TYPE_DES 1
David Brownda7dbb72021-01-26 11:44:15 -0700[diff] [blame]924#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
David Brownb65a7f72021-01-15 12:04:09 -0700[diff] [blame]925#endif
926
Andrzej Kurekd60907b2022-09-14 10:02:30 -0400[diff] [blame]927#if defined(MBEDTLS_PSA_BUILTIN_ALG_SHA_256)
928#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
929#define PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS 1
930#endif
931
David Brownb16727a2021-02-08 16:31:46 -0700[diff] [blame]932#if defined(MBEDTLS_CHACHA20_C)
933#define PSA_WANT_KEY_TYPE_CHACHA20 1
934#define PSA_WANT_ALG_STREAM_CIPHER 1
935#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
936#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
David Brownac4fa072021-02-08 16:47:35 -0700[diff] [blame]937#if defined(MBEDTLS_CHACHAPOLY_C)
938#define PSA_WANT_ALG_CHACHA20_POLY1305 1
David Brown86730a82021-02-09 16:24:11 -0700[diff] [blame]939#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
David Brownac4fa072021-02-08 16:47:35 -0700[diff] [blame]940#endif
David Brownb16727a2021-02-08 16:31:46 -0700[diff] [blame]941#endif
942
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]943#if defined(MBEDTLS_CIPHER_MODE_CBC)
David Brown10cb81c2021-02-09 16:10:29 -0700[diff] [blame]944#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]945#define PSA_WANT_ALG_CBC_NO_PADDING 1
946#if defined(MBEDTLS_CIPHER_PADDING_PKCS7)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]947#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]948#define PSA_WANT_ALG_CBC_PKCS7 1
949#endif
950#endif
951
952#if defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \
Gilles Peskine09c46da2021-10-08 15:48:16 +0200[diff] [blame]953 defined(MBEDTLS_ARIA_C) || defined(MBEDTLS_CAMELLIA_C)
David Brown10cb81c2021-02-09 16:10:29 -0700[diff] [blame]954#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]955#define PSA_WANT_ALG_ECB_NO_PADDING 1
956#endif
957
958#if defined(MBEDTLS_CIPHER_MODE_CFB)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]959#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]960#define PSA_WANT_ALG_CFB 1
961#endif
962
963#if defined(MBEDTLS_CIPHER_MODE_CTR)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]964#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]965#define PSA_WANT_ALG_CTR 1
966#endif
967
968#if defined(MBEDTLS_CIPHER_MODE_OFB)
David Brown12f45f92021-01-26 11:50:36 -0700[diff] [blame]969#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
David Brown99844272021-01-15 12:04:47 -0700[diff] [blame]970#define PSA_WANT_ALG_OFB 1
971#endif
972
David Browneed74df2021-03-15 15:53:57 -0600[diff] [blame]973#if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
974#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
975#define PSA_WANT_ECC_BRAINPOOL_P_R1_256
976#endif
977
978#if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
979#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
980#define PSA_WANT_ECC_BRAINPOOL_P_R1_384
981#endif
982
983#if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
984#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
985#define PSA_WANT_ECC_BRAINPOOL_P_R1_512
986#endif
987
988#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
989#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
990#define PSA_WANT_ECC_MONTGOMERY_255
991#endif
992
Archanaef6aa5c2021-06-08 11:40:10 +0530[diff] [blame]993#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
David Browneed74df2021-03-15 15:53:57 -0600[diff] [blame]994#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
995#define PSA_WANT_ECC_MONTGOMERY_448
996#endif
997
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]998#if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]999#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
1000#define PSA_WANT_ECC_SECP_R1_192
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1001#endif
1002
1003#if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1004#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
1005#define PSA_WANT_ECC_SECP_R1_224
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1006#endif
1007
1008#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1009#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
1010#define PSA_WANT_ECC_SECP_R1_256
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1011#endif
1012
1013#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1014#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
1015#define PSA_WANT_ECC_SECP_R1_384
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1016#endif
1017
1018#if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1019#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
1020#define PSA_WANT_ECC_SECP_R1_521
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1021#endif
1022
1023#if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1024#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
1025#define PSA_WANT_ECC_SECP_K1_192
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1026#endif
1027
Dave Rodgman017a1992022-03-31 14:07:01 +0100[diff] [blame]1028/* SECP224K1 is buggy via the PSA API (https://github.com/Mbed-TLS/mbedtls/issues/3541) */
Gilles Peskine39841302021-03-23 12:06:45 +0100[diff] [blame]1029#if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1030#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
1031#define PSA_WANT_ECC_SECP_K1_224
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1032#endif
1033
David Brown9b178de2021-03-10 13:14:48 -0700[diff] [blame]1034#if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
David Brownc7b9b2b2021-02-19 21:05:52 -0700[diff] [blame]1035#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
1036#define PSA_WANT_ECC_SECP_K1_256
David Brown8de143e2021-02-19 14:08:00 -0700[diff] [blame]1037#endif
1038
John Durkop2dfaf9c2020-09-24 04:30:10 -0700[diff] [blame]1039#endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
John Durkopd8959392020-09-20 23:09:17 -0700[diff] [blame]1040
Tom Cosgrove6d62fac2023-05-10 14:40:05 +0100[diff] [blame]1041#if defined(PSA_WANT_ALG_JPAKE)
1042#define PSA_WANT_ALG_SOME_PAKE 1
1043#endif
1044
Valerio Setti8d6e98c2023-05-26 13:46:13 +0200[diff] [blame]1045/* Backward compatibility */
1046#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_USE) && \
1047 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT) && \
1048 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT) && \
1049 defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
1050//defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE) /* Not supported yet */
1051#define MBEDTLS_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_LEGACY
1052#endif
1053
1054/* Backward compatibility */
1055#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_USE) && \
1056 defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT) && \
1057 defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT) && \
1058 defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
1059#define MBEDTLS_PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_LEGACY
1060#endif
1061
1062/* Backward compatibility */
1063#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_USE) && \
1064 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT) && \
1065 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT) && \
1066 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE) && \
1067 defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE)
1068#define MBEDTLS_PSA_WANT_KEY_TYPE_DH_KEY_PAIR_LEGACY
1069#endif
1070
1071/* Backward compatibility */
1072#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_USE) && \
1073 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT) && \
1074 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT) && \
1075 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE) && \
1076 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
1077#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_LEGACY
1078#endif
1079
1080/* Backward compatibility */
1081#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_USE) && \
1082 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT) && \
1083 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT) && \
1084 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
1085#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_LEGACY
1086#endif
1087
1088/* Backward compatibility */
1089#if defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_USE) && \
1090 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT) && \
1091 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT) && \
1092 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE) && \
1093 defined(MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_DERIVE)
1094#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_LEGACY
1095#endif
1096
Gilles Peskine60b29fe2021-02-16 14:06:50 +0100[diff] [blame]1097/* These features are always enabled. */
1098#define PSA_WANT_KEY_TYPE_DERIVE 1
Gilles Peskinebba26302022-12-15 23:25:17 +0100[diff] [blame]1099#define PSA_WANT_KEY_TYPE_PASSWORD 1
1100#define PSA_WANT_KEY_TYPE_PASSWORD_HASH 1
Gilles Peskine60b29fe2021-02-16 14:06:50 +0100[diff] [blame]1101#define PSA_WANT_KEY_TYPE_RAW_DATA 1
1102
John Durkop6e33dbe2020-09-17 21:15:13 -0700[diff] [blame]1103#ifdef __cplusplus
1104}
1105#endif
1106
1107#endif /* MBEDTLS_CONFIG_PSA_H */