blob: 50bee106bd189face541175c9f1b9f3de78dc9f4 [file] [log] [blame]
David Browne7c66632017-01-10 09:51:39 -07001/*
2 * Minimal configuration for using TLS in the bootloader
3 *
4 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
5 * Copyright (C) 2016, Linaro Ltd
6 * SPDX-License-Identifier: Apache-2.0
7 *
8 * Licensed under the Apache License, Version 2.0 (the "License"); you may
9 * not use this file except in compliance with the License.
10 * You may obtain a copy of the License at
11 *
12 * http://www.apache.org/licenses/LICENSE-2.0
13 *
14 * Unless required by applicable law or agreed to in writing, software
15 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 * See the License for the specific language governing permissions and
18 * limitations under the License.
19 *
20 * This file is part of mbed TLS (https://tls.mbed.org)
21 */
22
23/*
24 * Minimal configuration for using TLS in the bootloader
25 *
26 * - RSA or ECDSA signature verification
27 */
28
David Brownd7e350d2017-04-24 13:29:28 -060029#ifndef MBEDTLS_CONFIG_BOOT_H
30#define MBEDTLS_CONFIG_BOOT_H
David Browne7c66632017-01-10 09:51:39 -070031
Andrzej Puzdrowski8e96b832017-09-08 16:49:14 +020032#ifdef CONFIG_MCUBOOT_SERIAL
33/* Mcuboot uses mbedts-base64 for serial protocol encoding. */
34#define MBEDTLS_BASE64_C
35#endif
36
David Browne7c66632017-01-10 09:51:39 -070037/* System support */
38#define MBEDTLS_PLATFORM_C
39#define MBEDTLS_PLATFORM_MEMORY
40#define MBEDTLS_MEMORY_BUFFER_ALLOC_C
41#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
42#define MBEDTLS_PLATFORM_EXIT_ALT
43#define MBEDTLS_NO_PLATFORM_ENTROPY
44#define MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
45#define MBEDTLS_PLATFORM_PRINTF_ALT
46
47#if !defined(CONFIG_ARM)
48#define MBEDTLS_HAVE_ASM
49#endif
50
51#if defined(CONFIG_MBEDTLS_TEST)
52#define MBEDTLS_SELF_TEST
53#define MBEDTLS_DEBUG_C
54#else
55#define MBEDTLS_ENTROPY_C
56#define MBEDTLS_TEST_NULL_ENTROPY
57#endif
58
59/* mbed TLS feature support */
Fabio Utzigc7865402017-12-05 08:50:52 -020060#ifdef MCUBOOT_SIGN_EC
David Browne7c66632017-01-10 09:51:39 -070061#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
62#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
63#define MBEDTLS_ECP_NIST_OPTIM
64#define MBEDTLS_ECDSA_C
65#define MBEDTLS_ECDH_C
66#define MBEDTLS_ECP_C
67#endif
68
Fabio Utzigc7865402017-12-05 08:50:52 -020069#ifdef MCUBOOT_SIGN_RSA
David Browne7c66632017-01-10 09:51:39 -070070#define MBEDTLS_RSA_C
David Brown3f9ec902018-02-23 08:51:12 -070071#define MBEDTLS_PKCS1_V21
David Browne7c66632017-01-10 09:51:39 -070072#endif
73
74/* mbed TLS modules */
75#define MBEDTLS_ASN1_PARSE_C
76#define MBEDTLS_ASN1_WRITE_C
77#define MBEDTLS_BIGNUM_C
78#define MBEDTLS_MD_C
79#define MBEDTLS_OID_C
80#define MBEDTLS_SHA256_C
81
82/* Save RAM by adjusting to our exact needs */
Fabio Utzigc7865402017-12-05 08:50:52 -020083#ifdef MCUBOOT_SIGN_RSA
David Browne7c66632017-01-10 09:51:39 -070084#define MBEDTLS_ECP_MAX_BITS 2048
85#define MBEDTLS_MPI_MAX_SIZE 256
86#else
87#define MBEDTLS_ECP_MAX_BITS 256
88#define MBEDTLS_MPI_MAX_SIZE 32 // 256 bits is 32 bytes
89#endif
90
91#define MBEDTLS_SSL_MAX_CONTENT_LEN 1024
92
93/* Save ROM and a few bytes of RAM by specifying our own ciphersuite list */
94#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8
95
96#include "mbedtls/check_config.h"
97
David Brownd7e350d2017-04-24 13:29:28 -060098#endif /* MBEDTLS_CONFIG_BOOT_H */