mirror of
				https://github.com/cuberite/polarssl.git
				synced 2025-11-03 12:11:27 -05:00 
			
		
		
		
	
		
			
				
	
	
		
			877 lines
		
	
	
		
			32 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			877 lines
		
	
	
		
			32 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
/**
 | 
						|
 * \file mbedtls/config_adjust_legacy_from_psa.h
 | 
						|
 * \brief Adjust PSA configuration: activate legacy implementations
 | 
						|
 *
 | 
						|
 * When MBEDTLS_PSA_CRYPTO_CONFIG is enabled, activate legacy implementations
 | 
						|
 * of cryptographic mechanisms as needed to fulfill the needs of the PSA
 | 
						|
 * configuration. Generally speaking, we activate a legacy mechanism if
 | 
						|
 * it's needed for a requested PSA mechanism and there is no PSA driver
 | 
						|
 * for it.
 | 
						|
 */
 | 
						|
/*
 | 
						|
 *  Copyright The Mbed TLS Contributors
 | 
						|
 *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
 | 
						|
 */
 | 
						|
 | 
						|
#ifndef MBEDTLS_CONFIG_ADJUST_LEGACY_FROM_PSA_H
 | 
						|
#define MBEDTLS_CONFIG_ADJUST_LEGACY_FROM_PSA_H
 | 
						|
 | 
						|
/* Define appropriate ACCEL macros for the p256-m driver.
 | 
						|
 * In the future, those should be generated from the drivers JSON description.
 | 
						|
 */
 | 
						|
#if defined(MBEDTLS_PSA_P256M_DRIVER_ENABLED)
 | 
						|
#define MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256
 | 
						|
#define MBEDTLS_PSA_ACCEL_ALG_ECDSA
 | 
						|
#define MBEDTLS_PSA_ACCEL_ALG_ECDH
 | 
						|
#define MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY
 | 
						|
#define MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC
 | 
						|
#define MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT
 | 
						|
#define MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT
 | 
						|
#define MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE
 | 
						|
#endif
 | 
						|
 | 
						|
/*
 | 
						|
 * ECC: support for a feature is controlled by a triplet or a pair:
 | 
						|
 * (curve, key_type public/basic, alg) or (curve, key_type_<action>).
 | 
						|
 *
 | 
						|
 * A triplet/pair is accelerated if all of is components are accelerated;
 | 
						|
 * otherwise each component needs to be built in.
 | 
						|
 *
 | 
						|
 * We proceed in two passes:
 | 
						|
 * 1. Check if acceleration is complete for curves, key types, algs.
 | 
						|
 * 2. Then enable built-ins for each thing that's either not accelerated of
 | 
						|
 * doesn't have complete acceleration of the other triplet/pair components.
 | 
						|
 *
 | 
						|
 * Note: this needs psa/crypto_adjust_keypair_types.h to have been included
 | 
						|
 * already, so that we know the full set of key types that are requested.
 | 
						|
 */
 | 
						|
 | 
						|
/* ECC: curves: is acceleration complete? */
 | 
						|
#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_MONTGOMERY_255) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_MONTGOMERY_448) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_192) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_224) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_256) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_384) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_521) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_K1_192) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_K1_224) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_K1_256) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES
 | 
						|
#endif
 | 
						|
 | 
						|
/* ECC: algs: is acceleration complete? */
 | 
						|
#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_ECDH) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_ECDSA) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_JPAKE) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ALG_JPAKE)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS
 | 
						|
#endif
 | 
						|
 | 
						|
/* ECC: key types: is acceleration complete? */
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES_BASIC
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES_BASIC
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES
 | 
						|
#endif
 | 
						|
 | 
						|
/* Special case: we don't support cooked key derivation in drivers yet */
 | 
						|
#if defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
 | 
						|
#undef MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE
 | 
						|
#endif
 | 
						|
 | 
						|
/* Note: the condition is always true as DERIVE can't be accelerated yet */
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE) && \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
 | 
						|
#define MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES
 | 
						|
#endif
 | 
						|
 | 
						|
/* ECC: curves: enable built-ins as needed.
 | 
						|
 *
 | 
						|
 * We need the curve built-in:
 | 
						|
 * - if it's not accelerated, or
 | 
						|
 * - if there's a key type with missing acceleration, or
 | 
						|
 * - if there's a alg with missing acceleration.
 | 
						|
 */
 | 
						|
#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 1
 | 
						|
#define MBEDTLS_ECP_DP_BP256R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 1
 | 
						|
#define MBEDTLS_ECP_DP_BP384R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 1
 | 
						|
#define MBEDTLS_ECP_DP_BP512R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_MONTGOMERY_255)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 1
 | 
						|
#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_MONTGOMERY_448)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 1
 | 
						|
#define MBEDTLS_ECP_DP_CURVE448_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_192)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_R1_192 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_224)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_R1_224 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_256)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_R1_256 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_384)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_R1_384 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_R1_521)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_R1_521 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_K1_192)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_K1_192 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_K1_224)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
 | 
						|
/* https://github.com/Mbed-TLS/mbedtls/issues/3541 */
 | 
						|
#error "SECP224K1 is buggy via the PSA API in Mbed TLS."
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_K1_224 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ECC_SECP_K1_256)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ECC_SECP_K1_256 */
 | 
						|
 | 
						|
/* ECC: algs: enable built-ins as needed.
 | 
						|
 *
 | 
						|
 * We need the alg built-in:
 | 
						|
 * - if it's not accelerated, or
 | 
						|
 * - if there's a relevant curve (see below) with missing acceleration, or
 | 
						|
 * - if there's a key type among (public, basic) with missing acceleration.
 | 
						|
 *
 | 
						|
 * Relevant curves are:
 | 
						|
 * - all curves for ECDH
 | 
						|
 * - Weierstrass curves for (deterministic) ECDSA
 | 
						|
 * - secp256r1 for EC J-PAKE
 | 
						|
 */
 | 
						|
#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES_BASIC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
 | 
						|
#define MBEDTLS_ECDSA_DETERMINISTIC
 | 
						|
#define MBEDTLS_HMAC_DRBG_C
 | 
						|
#define MBEDTLS_MD_C
 | 
						|
#define MBEDTLS_ECDSA_C
 | 
						|
#define MBEDTLS_ECP_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_ASN1_PARSE_C
 | 
						|
#define MBEDTLS_ASN1_WRITE_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_ECDH)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDH) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES_BASIC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_ECDH 1
 | 
						|
#define MBEDTLS_ECDH_C
 | 
						|
#define MBEDTLS_ECP_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ALG_ECDH */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_ECDSA)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_WEIERSTRASS_CURVES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES_BASIC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
 | 
						|
#define MBEDTLS_ECDSA_C
 | 
						|
#define MBEDTLS_ECP_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_ASN1_PARSE_C
 | 
						|
#define MBEDTLS_ASN1_WRITE_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ALG_ECDSA */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_JPAKE)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_JPAKE) || \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_KEY_TYPES_BASIC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_PAKE 1
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_JPAKE 1
 | 
						|
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_ECP_C
 | 
						|
#define MBEDTLS_ECJPAKE_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_ALG_JPAKE */
 | 
						|
 | 
						|
/* ECC: key types: enable built-ins as needed.
 | 
						|
 *
 | 
						|
 * We need the key type built-in:
 | 
						|
 * - if it's not accelerated, or
 | 
						|
 * - if there's a curve with missing acceleration, or
 | 
						|
 * - only for public/basic: if there's an alg with missing acceleration.
 | 
						|
 */
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY 1
 | 
						|
#define MBEDTLS_ECP_LIGHT
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_ALGS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
 | 
						|
#define MBEDTLS_ECP_LIGHT
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
 | 
						|
#define MBEDTLS_ECP_LIGHT
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT 1
 | 
						|
#define MBEDTLS_ECP_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_GENERATE) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
 | 
						|
#define MBEDTLS_ECP_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE */
 | 
						|
 | 
						|
/* Note: the condition is always true as DERIVE can't be accelerated yet */
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE) || \
 | 
						|
    defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_DERIVE 1
 | 
						|
#define MBEDTLS_ECP_LIGHT
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* missing accel */
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_DERIVE */
 | 
						|
 | 
						|
/* End of ECC section */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_FFDH)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_FFDH)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_FFDH 1
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_FFDH */
 | 
						|
#endif /* PSA_WANT_ALG_FFDH */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_HKDF)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF)
 | 
						|
/*
 | 
						|
 * The PSA implementation has its own implementation of HKDF, separate from
 | 
						|
 * hkdf.c. No need to enable MBEDTLS_HKDF_C here.
 | 
						|
 */
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HKDF 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF */
 | 
						|
#endif /* PSA_WANT_ALG_HKDF */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_HKDF_EXTRACT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT)
 | 
						|
/*
 | 
						|
 * The PSA implementation has its own implementation of HKDF, separate from
 | 
						|
 * hkdf.c. No need to enable MBEDTLS_HKDF_C here.
 | 
						|
 */
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXTRACT */
 | 
						|
#endif /* PSA_WANT_ALG_HKDF_EXTRACT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_HKDF_EXPAND)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND)
 | 
						|
/*
 | 
						|
 * The PSA implementation has its own implementation of HKDF, separate from
 | 
						|
 * hkdf.c. No need to enable MBEDTLS_HKDF_C here.
 | 
						|
 */
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_HKDF_EXPAND */
 | 
						|
#endif /* PSA_WANT_ALG_HKDF_EXPAND */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_HMAC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
 | 
						|
#endif /* PSA_WANT_ALG_HMAC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_MD5) && !defined(MBEDTLS_PSA_ACCEL_ALG_MD5)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_MD5 1
 | 
						|
#define MBEDTLS_MD5_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_RIPEMD160) && !defined(MBEDTLS_PSA_ACCEL_ALG_RIPEMD160)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 1
 | 
						|
#define MBEDTLS_RIPEMD160_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_RSA_OAEP)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP 1
 | 
						|
#define MBEDTLS_RSA_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_OID_C
 | 
						|
#define MBEDTLS_PKCS1_V21
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_OAEP */
 | 
						|
#endif /* PSA_WANT_ALG_RSA_OAEP */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT 1
 | 
						|
#define MBEDTLS_RSA_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_OID_C
 | 
						|
#define MBEDTLS_PKCS1_V15
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT */
 | 
						|
#endif /* PSA_WANT_ALG_RSA_PKCS1V15_CRYPT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN 1
 | 
						|
#define MBEDTLS_RSA_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_OID_C
 | 
						|
#define MBEDTLS_PKCS1_V15
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN */
 | 
						|
#endif /* PSA_WANT_ALG_RSA_PKCS1V15_SIGN */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_RSA_PSS)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_RSA_PSS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS 1
 | 
						|
#define MBEDTLS_RSA_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_OID_C
 | 
						|
#define MBEDTLS_PKCS1_V21
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_RSA_PSS */
 | 
						|
#endif /* PSA_WANT_ALG_RSA_PSS */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA_1) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_1)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 1
 | 
						|
#define MBEDTLS_SHA1_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_224)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 1
 | 
						|
#define MBEDTLS_SHA224_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_256)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 1
 | 
						|
#define MBEDTLS_SHA256_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_384)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 1
 | 
						|
#define MBEDTLS_SHA384_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA_512)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 1
 | 
						|
#define MBEDTLS_SHA512_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA3_224) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA3_224)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA3_224 1
 | 
						|
#define MBEDTLS_SHA3_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA3_256) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA3_256)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA3_256 1
 | 
						|
#define MBEDTLS_SHA3_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA3_384) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA3_384)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA3_384 1
 | 
						|
#define MBEDTLS_SHA3_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_SHA3_512) && !defined(MBEDTLS_PSA_ACCEL_ALG_SHA3_512)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_SHA3_512 1
 | 
						|
#define MBEDTLS_SHA3_C
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_PBKDF2_HMAC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_PBKDF2_HMAC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC 1
 | 
						|
#define PSA_HAVE_SOFT_PBKDF2_HMAC 1
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_HMAC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_HMAC 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_HMAC */
 | 
						|
#endif /* !MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_HMAC */
 | 
						|
#endif /* PSA_WANT_ALG_PBKDF2_HMAC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_TLS12_PRF)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PRF */
 | 
						|
#endif /* PSA_WANT_ALG_TLS12_PRF */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_TLS12_PSK_TO_MS)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_PSK_TO_MS */
 | 
						|
#endif /* PSA_WANT_ALG_TLS12_PSK_TO_MS */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_TLS12_ECJPAKE_TO_PMS */
 | 
						|
#endif /* PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_IMPORT)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_IMPORT */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_EXPORT)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_EXPORT */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_GENERATE)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE 1
 | 
						|
#define MBEDTLS_GENPRIME
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_GENERATE */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_BASIC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_BASIC 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR_BASIC */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_IMPORT)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_IMPORT */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_EXPORT)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_EXPORT */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_GENERATE)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_GENERATE */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_BASIC)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_BASIC 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_KEY_PAIR_BASIC */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_PUBLIC_KEY)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_PUBLIC_KEY 1
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DH_PUBLIC_KEY */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY 1
 | 
						|
#define MBEDTLS_RSA_C
 | 
						|
#define MBEDTLS_BIGNUM_C
 | 
						|
#define MBEDTLS_OID_C
 | 
						|
#define MBEDTLS_PK_PARSE_C
 | 
						|
#define MBEDTLS_PK_WRITE_C
 | 
						|
#define MBEDTLS_PK_C
 | 
						|
#define MBEDTLS_ASN1_PARSE_C
 | 
						|
#define MBEDTLS_ASN1_WRITE_C
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY */
 | 
						|
 | 
						|
/* If any of the block modes are requested that don't have an
 | 
						|
 * associated HW assist, define PSA_HAVE_SOFT_BLOCK_MODE for checking
 | 
						|
 * in the block cipher key types. */
 | 
						|
#if (defined(PSA_WANT_ALG_CTR) && !defined(MBEDTLS_PSA_ACCEL_ALG_CTR)) || \
 | 
						|
    (defined(PSA_WANT_ALG_CFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_CFB)) || \
 | 
						|
    (defined(PSA_WANT_ALG_OFB) && !defined(MBEDTLS_PSA_ACCEL_ALG_OFB)) || \
 | 
						|
    (defined(PSA_WANT_ALG_ECB_NO_PADDING) && !defined(MBEDTLS_PSA_ACCEL_ALG_ECB_NO_PADDING)) || \
 | 
						|
    (defined(PSA_WANT_ALG_CBC_NO_PADDING) && !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING)) || \
 | 
						|
    (defined(PSA_WANT_ALG_CBC_PKCS7) && !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7)) || \
 | 
						|
    (defined(PSA_WANT_ALG_CMAC) && !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC))
 | 
						|
#define PSA_HAVE_SOFT_BLOCK_MODE 1
 | 
						|
#endif
 | 
						|
 | 
						|
#if (defined(PSA_WANT_ALG_GCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_GCM)) || \
 | 
						|
    (defined(PSA_WANT_ALG_CCM) && !defined(MBEDTLS_PSA_ACCEL_ALG_CCM))
 | 
						|
#define PSA_HAVE_SOFT_BLOCK_AEAD 1
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_PBKDF2_AES_CMAC_PRF_128)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_PBKDF2_AES_CMAC_PRF_128 1
 | 
						|
#define PSA_HAVE_SOFT_PBKDF2_CMAC 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_PBKDF2_AES_CMAC_PRF_128 */
 | 
						|
#endif /* PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_AES)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_AES)
 | 
						|
#define PSA_HAVE_SOFT_KEY_TYPE_AES 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_AES */
 | 
						|
#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_AEAD)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES 1
 | 
						|
#define MBEDTLS_AES_C
 | 
						|
#endif /* PSA_HAVE_SOFT_KEY_TYPE_AES || PSA_HAVE_SOFT_BLOCK_MODE */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_AES */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_ARIA)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA)
 | 
						|
#define PSA_HAVE_SOFT_KEY_TYPE_ARIA 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_ARIA */
 | 
						|
#if defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_AEAD)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA 1
 | 
						|
#define MBEDTLS_ARIA_C
 | 
						|
#endif /* PSA_HAVE_SOFT_KEY_TYPE_ARIA || PSA_HAVE_SOFT_BLOCK_MODE */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_ARIA */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_CAMELLIA)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA)
 | 
						|
#define PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_CAMELLIA */
 | 
						|
#if defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_MODE) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_AEAD)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA 1
 | 
						|
#define MBEDTLS_CAMELLIA_C
 | 
						|
#endif /* PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA || PSA_HAVE_SOFT_BLOCK_MODE */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_CAMELLIA */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_DES)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_DES)
 | 
						|
#define PSA_HAVE_SOFT_KEY_TYPE_DES 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_KEY_TYPE_DES */
 | 
						|
#if defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_MODE)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES 1
 | 
						|
#define MBEDTLS_DES_C
 | 
						|
#endif /*PSA_HAVE_SOFT_KEY_TYPE_DES || PSA_HAVE_SOFT_BLOCK_MODE */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_DES */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_STREAM_CIPHER)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_STREAM_CIPHER)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER 1
 | 
						|
#endif /* MBEDTLS_PSA_ACCEL_ALG_STREAM_CIPHER */
 | 
						|
#endif /* PSA_WANT_ALG_STREAM_CIPHER */
 | 
						|
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20) || \
 | 
						|
    defined(MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 1
 | 
						|
#define MBEDTLS_CHACHA20_C
 | 
						|
#endif /*!MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20 */
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
 | 
						|
 | 
						|
/* If any of the software block ciphers are selected, define
 | 
						|
 * PSA_HAVE_SOFT_BLOCK_CIPHER, which can be used in any of these
 | 
						|
 * situations. */
 | 
						|
#if defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_DES) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
 | 
						|
#define PSA_HAVE_SOFT_BLOCK_CIPHER 1
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CBC_MAC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_MAC)
 | 
						|
#error "CBC-MAC is not yet supported via the PSA API in Mbed TLS."
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CBC_MAC 1
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_CBC_MAC */
 | 
						|
#endif /* PSA_WANT_ALG_CBC_MAC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CMAC)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CMAC) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CMAC 1
 | 
						|
#define MBEDTLS_CMAC_C
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_CMAC */
 | 
						|
#endif /* PSA_WANT_ALG_CMAC */
 | 
						|
 | 
						|
#if defined(PSA_HAVE_SOFT_PBKDF2_HMAC) || \
 | 
						|
    defined(PSA_HAVE_SOFT_PBKDF2_CMAC)
 | 
						|
#define PSA_HAVE_SOFT_PBKDF2 1
 | 
						|
#endif /* PSA_HAVE_SOFT_PBKDF2_HMAC || PSA_HAVE_SOFT_PBKDF2_CMAC */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CTR)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CTR) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CTR 1
 | 
						|
#define MBEDTLS_CIPHER_MODE_CTR
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_CTR */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CFB)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CFB) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CFB 1
 | 
						|
#define MBEDTLS_CIPHER_MODE_CFB
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_CFB */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_OFB)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_OFB) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_OFB 1
 | 
						|
#define MBEDTLS_CIPHER_MODE_OFB
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_OFB */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_ECB_NO_PADDING) &&     \
 | 
						|
    !defined(MBEDTLS_PSA_ACCEL_ALG_ECB_NO_PADDING)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING 1
 | 
						|
#endif
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CBC_NO_PADDING)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_NO_PADDING) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
 | 
						|
#define MBEDTLS_CIPHER_MODE_CBC
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING 1
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_CBC_NO_PADDING */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CBC_PKCS7)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CBC_PKCS7) || \
 | 
						|
    defined(PSA_HAVE_SOFT_BLOCK_CIPHER)
 | 
						|
#define MBEDTLS_CIPHER_MODE_CBC
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 1
 | 
						|
#define MBEDTLS_CIPHER_PADDING_PKCS7
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_CBC_PKCS7 */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CCM)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CCM) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CCM 1
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG 1
 | 
						|
#define MBEDTLS_CCM_C
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_CCM */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_GCM)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_GCM) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_AES) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_ARIA) || \
 | 
						|
    defined(PSA_HAVE_SOFT_KEY_TYPE_CAMELLIA)
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_GCM 1
 | 
						|
#define MBEDTLS_GCM_C
 | 
						|
#endif
 | 
						|
#endif /* PSA_WANT_ALG_GCM */
 | 
						|
 | 
						|
#if defined(PSA_WANT_ALG_CHACHA20_POLY1305)
 | 
						|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305)
 | 
						|
#if defined(PSA_WANT_KEY_TYPE_CHACHA20)
 | 
						|
#define MBEDTLS_CHACHAPOLY_C
 | 
						|
#define MBEDTLS_CHACHA20_C
 | 
						|
#define MBEDTLS_POLY1305_C
 | 
						|
#define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 1
 | 
						|
#endif /* PSA_WANT_KEY_TYPE_CHACHA20 */
 | 
						|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_CHACHA20_POLY1305 */
 | 
						|
#endif /* PSA_WANT_ALG_CHACHA20_POLY1305 */
 | 
						|
 | 
						|
#endif /* MBEDTLS_CONFIG_ADJUST_LEGACY_FROM_PSA_H */
 |