commit 28ee5b0ea93d8934c92cee8091e988828fb7c07e
author Fabio Utzig <utzig@apache.org> Tue Dec 12 08:10:40 2017 -0200
committer David Brown <davidb@davidb.org> Thu Dec 21 13:32:59 2017 -0700
tree 4b52c4b35e7f4c5913e5e5f20e72ea64465bd145
parent ac18eec7731fb3615c749fee616bff795cbefa47

Add Zephyr support for bundled mbed-tls ASN1 parser

When using EC256 for signing, Zephyr now uses the bundled tinycrypt
and mbed-tls ASN1 parser instead of relying on the one provided by
the OS.

Signed-off-by: Fabio Utzig <utzig@apache.org>

boot/zephyr/CMakeLists.txt

diff --git a/boot/zephyr/CMakeLists.txt b/boot/zephyr/CMakeLists.txt
index e303421..8c623be 100644
--- a/boot/zephyr/CMakeLists.txt
+++ b/boot/zephyr/CMakeLists.txt
@@ -131,12 +131,18 @@
 get_filename_component(MCUBOOT_DIR ${BOOT_DIR} DIRECTORY)
 # Path to tinycrypt library source subdirectory of MCUBOOT_DIR.
 set(TINYCRYPT_DIR "${MCUBOOT_DIR}/ext/tinycrypt/lib")
-
-# Zephyr's mbedTLS needs this.
-zephyr_include_directories(include)
+# Path to mbed-tls' asn1 parser library.
+set(MBEDTLS_ASN1_DIR "${MCUBOOT_DIR}/ext/mbedtls")
 
 # Zephyr application include directories.
-target_include_directories(app PRIVATE $ENV{ZEPHYR_BASE}/ext/lib/crypto/mbedtls/include)
+if (NOT NEED_TINYCRYPT)
+  # Zephyr's mbedTLS needs this.
+  zephyr_include_directories(include)
+
+  # Use full mbedtls provided by OS for RSA
+  target_include_directories(app PRIVATE $ENV{ZEPHYR_BASE}/ext/lib/crypto/mbedtls/include)
+endif()
+
 target_include_directories(app PRIVATE include)
 target_include_directories(app PRIVATE targets)
 if(EXISTS "${APPLICATION_SOURCE_DIR}/targets/${BOARD}.h")
@@ -164,12 +170,16 @@
 
 # Tinycrypt sources and includes, if needed.
 if (NEED_TINYCRYPT)
+  target_include_directories(app PRIVATE "${BOOT_DIR}/zephyr/include")
   target_include_directories(app PRIVATE "${TINYCRYPT_DIR}/include")
+  target_include_directories(app PRIVATE "${MBEDTLS_ASN1_DIR}/include")
 
   target_sources(app PRIVATE "${TINYCRYPT_DIR}/source/ecc.c")
   target_sources(app PRIVATE "${TINYCRYPT_DIR}/source/ecc_dsa.c")
   target_sources(app PRIVATE "${TINYCRYPT_DIR}/source/sha256.c")
   target_sources(app PRIVATE "${TINYCRYPT_DIR}/source/utils.c")
+
+  target_sources(app PRIVATE "${MBEDTLS_ASN1_DIR}/src/asn1parse.c")
 endif()
 
 if (CONFIG_MCUBOOT_SERIAL)