mirror of
https://github.com/cuberite/polarssl.git
synced 2025-08-05 11:46:12 -04:00
f87e3aea16
In the PSA crypto library, the code for verification of ECDSA is the same for both MBEDTLS_PSA_BUILTIN_ALG_ECDSA and MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA. So, the guards should allow for either one to enable the code blocks. The original implementation only had the check for ECDSA. In order to make this work, config_psa.h was updated to ensure when MBEDTLS_CRYPTO_CONFIG is disabled, the setting for DETERMINISTIC is only updated if MBEDTLS_ECDSA_C is also enabled. Signed-off-by: John Durkop <john.durkop@fermatsoftware.com>
83 lines
2.5 KiB
C
83 lines
2.5 KiB
C
/**
|
|
* \file mbedtls/config_psa.h
|
|
* \brief PSA crypto configuration options (set of defines)
|
|
*
|
|
* This set of compile-time options takes settings defined in
|
|
* include/mbedtls/config.h and include/psa/crypto_config.h and uses
|
|
* those definitions to define symbols used in the library code.
|
|
*
|
|
* Users and integrators should not edit this file, please edit
|
|
* include/mbedtls/config.h for MBETLS_XXX settings or
|
|
* include/psa/crypto_config.h for PSA_WANT_XXX settings.
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
* not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef MBEDTLS_CONFIG_PSA_H
|
|
#define MBEDTLS_CONFIG_PSA_H
|
|
|
|
#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
|
|
#include "psa/crypto_config.h"
|
|
#endif /* defined(MBEDTLS_PSA_CRYPTO_CONFIG) */
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
#if defined(MBEDTLS_PSA_CRYPTO_CONFIG)
|
|
|
|
#if defined(PSA_WANT_ALG_ECDSA)
|
|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_ECDSA)
|
|
#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA 1
|
|
#define MBEDTLS_ECDSA_C
|
|
#endif /* !MBEDTLS_PSA_ACCEL_ALG_ECDSA */
|
|
#endif /* PSA_WANT_ALG_ECDSA */
|
|
|
|
#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
|
|
#if !defined(MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA)
|
|
#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA 1
|
|
#define MBEDTLS_ECDSA_DETERMINISTIC
|
|
#define MBEDTLS_ECDSA_C
|
|
#define MBEDTLS_HMAC_DRBG_C
|
|
#define MBEDTLS_MD_C
|
|
#endif /* MBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA */
|
|
#endif /* PSA_WANT_ALG_DETERMINISTIC_ECDSA */
|
|
|
|
#else /* MBEDTLS_PSA_CRYPTO_CONFIG */
|
|
|
|
/*
|
|
* Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG
|
|
* is not defined
|
|
*/
|
|
#if defined(MBEDTLS_ECDSA_C)
|
|
#define MBEDTLS_PSA_BUILTIN_ALG_ECDSA
|
|
|
|
// Only add in DETERMINISTIC support if ECDSA is also enabled
|
|
#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
|
|
#define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA
|
|
#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
|
|
|
|
#endif /* MBEDTLS_ECDSA_C */
|
|
|
|
#endif /* MBEDTLS_PSA_CRYPTO_CONFIG */
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* MBEDTLS_CONFIG_PSA_H */
|