Browse Source
Deprecation notice was sent to the community and no objection was raised, so removing mbedtls 2.x support. Change-Id: Id3eb98b55692df98aabe6a7c5a5ec910222c8abd Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com>pull/2000/merge
laurenw-arm
8 months ago
5 changed files with 22 additions and 307 deletions
@ -1,152 +0,0 @@ |
|||
/*
|
|||
* Copyright (c) 2015-2022, Arm Limited. All rights reserved. |
|||
* |
|||
* SPDX-License-Identifier: BSD-3-Clause |
|||
*/ |
|||
#ifndef MBEDTLS_CONFIG_H |
|||
#define MBEDTLS_CONFIG_H |
|||
|
|||
/*
|
|||
* Key algorithms currently supported on mbed TLS libraries |
|||
*/ |
|||
#define TF_MBEDTLS_RSA 1 |
|||
#define TF_MBEDTLS_ECDSA 2 |
|||
#define TF_MBEDTLS_RSA_AND_ECDSA 3 |
|||
|
|||
#define TF_MBEDTLS_USE_RSA (TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_RSA \ |
|||
|| TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_RSA_AND_ECDSA) |
|||
#define TF_MBEDTLS_USE_ECDSA (TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_ECDSA \ |
|||
|| TF_MBEDTLS_KEY_ALG_ID == TF_MBEDTLS_RSA_AND_ECDSA) |
|||
|
|||
/*
|
|||
* Hash algorithms currently supported on mbed TLS libraries |
|||
*/ |
|||
#define TF_MBEDTLS_SHA256 1 |
|||
#define TF_MBEDTLS_SHA384 2 |
|||
#define TF_MBEDTLS_SHA512 3 |
|||
|
|||
/*
|
|||
* Configuration file to build mbed TLS with the required features for |
|||
* Trusted Boot |
|||
*/ |
|||
|
|||
#define MBEDTLS_PLATFORM_MEMORY |
|||
#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS |
|||
/* Prevent mbed TLS from using snprintf so that it can use tf_snprintf. */ |
|||
#define MBEDTLS_PLATFORM_SNPRINTF_ALT |
|||
|
|||
#define MBEDTLS_PKCS1_V21 |
|||
|
|||
#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION |
|||
#define MBEDTLS_X509_CHECK_KEY_USAGE |
|||
#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE |
|||
|
|||
#define MBEDTLS_ASN1_PARSE_C |
|||
#define MBEDTLS_ASN1_WRITE_C |
|||
|
|||
#define MBEDTLS_BASE64_C |
|||
#define MBEDTLS_BIGNUM_C |
|||
|
|||
#define MBEDTLS_ERROR_C |
|||
#define MBEDTLS_MD_C |
|||
|
|||
#define MBEDTLS_MEMORY_BUFFER_ALLOC_C |
|||
#define MBEDTLS_OID_C |
|||
|
|||
#define MBEDTLS_PK_C |
|||
#define MBEDTLS_PK_PARSE_C |
|||
#define MBEDTLS_PK_WRITE_C |
|||
|
|||
#define MBEDTLS_PLATFORM_C |
|||
|
|||
#if TF_MBEDTLS_USE_ECDSA |
|||
#define MBEDTLS_ECDSA_C |
|||
#define MBEDTLS_ECP_C |
|||
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED |
|||
#define MBEDTLS_ECP_NO_INTERNAL_RNG |
|||
#endif |
|||
#if TF_MBEDTLS_USE_RSA |
|||
#define MBEDTLS_RSA_C |
|||
#define MBEDTLS_X509_RSASSA_PSS_SUPPORT |
|||
#endif |
|||
|
|||
#define MBEDTLS_SHA256_C |
|||
|
|||
/*
|
|||
* If either Trusted Boot or Measured Boot require a stronger algorithm than |
|||
* SHA-256, pull in SHA-512 support. |
|||
*/ |
|||
#if (TF_MBEDTLS_HASH_ALG_ID != TF_MBEDTLS_SHA256) /* TBB hash algo */ |
|||
#define MBEDTLS_SHA512_C |
|||
#else |
|||
/* TBB uses SHA-256, what about measured boot? */ |
|||
#if defined(TF_MBEDTLS_MBOOT_USE_SHA512) |
|||
#define MBEDTLS_SHA512_C |
|||
#endif |
|||
#endif |
|||
|
|||
#define MBEDTLS_VERSION_C |
|||
|
|||
#define MBEDTLS_X509_USE_C |
|||
#define MBEDTLS_X509_CRT_PARSE_C |
|||
|
|||
#if TF_MBEDTLS_USE_AES_GCM |
|||
#define MBEDTLS_AES_C |
|||
#define MBEDTLS_CIPHER_C |
|||
#define MBEDTLS_GCM_C |
|||
#endif |
|||
|
|||
/* MPI / BIGNUM options */ |
|||
#define MBEDTLS_MPI_WINDOW_SIZE 2 |
|||
|
|||
#if TF_MBEDTLS_USE_RSA |
|||
#if TF_MBEDTLS_KEY_SIZE <= 2048 |
|||
#define MBEDTLS_MPI_MAX_SIZE 256 |
|||
#else |
|||
#define MBEDTLS_MPI_MAX_SIZE 512 |
|||
#endif |
|||
#else |
|||
#define MBEDTLS_MPI_MAX_SIZE 256 |
|||
#endif |
|||
|
|||
/* Memory buffer allocator options */ |
|||
#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 8 |
|||
|
|||
/*
|
|||
* Prevent the use of 128-bit division which |
|||
* creates dependency on external libraries. |
|||
*/ |
|||
#define MBEDTLS_NO_UDBL_DIVISION |
|||
|
|||
#ifndef __ASSEMBLER__ |
|||
/* System headers required to build mbed TLS with the current configuration */ |
|||
#include <stdlib.h> |
|||
#include <mbedtls/check_config.h> |
|||
#endif |
|||
|
|||
/*
|
|||
* Determine Mbed TLS heap size |
|||
* 13312 = 13*1024 |
|||
* 11264 = 11*1024 |
|||
* 7168 = 7*1024 |
|||
*/ |
|||
#if TF_MBEDTLS_USE_ECDSA |
|||
#define TF_MBEDTLS_HEAP_SIZE U(13312) |
|||
#elif TF_MBEDTLS_USE_RSA |
|||
#if TF_MBEDTLS_KEY_SIZE <= 2048 |
|||
#define TF_MBEDTLS_HEAP_SIZE U(7168) |
|||
#else |
|||
#define TF_MBEDTLS_HEAP_SIZE U(11264) |
|||
#endif |
|||
#endif |
|||
|
|||
/*
|
|||
* Warn if errors from certain functions are ignored. |
|||
* |
|||
* The warnings are always enabled (where supported) for critical functions |
|||
* where ignoring the return value is almost always a bug. This macro extends |
|||
* the warnings to more functions. |
|||
*/ |
|||
#define MBEDTLS_CHECK_RETURN_WARNING |
|||
|
|||
#endif /* MBEDTLS_CONFIG_H */ |
|||
@ -1,119 +0,0 @@ |
|||
/*
|
|||
* Copyright (c) 2022-2023, STMicroelectronics - All Rights Reserved |
|||
* |
|||
* SPDX-License-Identifier: BSD-3-Clause |
|||
*/ |
|||
#ifndef MBEDTLS_CONFIG_H |
|||
#define MBEDTLS_CONFIG_H |
|||
|
|||
/*
|
|||
* Key algorithms currently supported on mbed TLS libraries |
|||
*/ |
|||
#define TF_MBEDTLS_USE_RSA 0 |
|||
#define TF_MBEDTLS_USE_ECDSA 1 |
|||
|
|||
/*
|
|||
* Hash algorithms currently supported on mbed TLS libraries |
|||
*/ |
|||
#define TF_MBEDTLS_SHA256 1 |
|||
#define TF_MBEDTLS_SHA384 2 |
|||
#define TF_MBEDTLS_SHA512 3 |
|||
|
|||
/*
|
|||
* Configuration file to build mbed TLS with the required features for |
|||
* Trusted Boot |
|||
*/ |
|||
|
|||
#define MBEDTLS_PLATFORM_MEMORY |
|||
#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS |
|||
/* Prevent mbed TLS from using snprintf so that it can use tf_snprintf. */ |
|||
#define MBEDTLS_PLATFORM_SNPRINTF_ALT |
|||
|
|||
#define MBEDTLS_PKCS1_V21 |
|||
|
|||
#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION |
|||
#define MBEDTLS_X509_CHECK_KEY_USAGE |
|||
#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE |
|||
|
|||
#define MBEDTLS_ASN1_PARSE_C |
|||
#define MBEDTLS_ASN1_WRITE_C |
|||
|
|||
#define MBEDTLS_BASE64_C |
|||
#define MBEDTLS_BIGNUM_C |
|||
|
|||
#define MBEDTLS_ERROR_C |
|||
#define MBEDTLS_MD_C |
|||
|
|||
#define MBEDTLS_MEMORY_BUFFER_ALLOC_C |
|||
#define MBEDTLS_OID_C |
|||
|
|||
#define MBEDTLS_PK_C |
|||
#define MBEDTLS_PK_PARSE_C |
|||
#define MBEDTLS_PK_WRITE_C |
|||
|
|||
#define MBEDTLS_PLATFORM_C |
|||
|
|||
#if TF_MBEDTLS_USE_ECDSA |
|||
#define MBEDTLS_ECDSA_C |
|||
#define MBEDTLS_ECP_C |
|||
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED |
|||
#define MBEDTLS_ECP_NO_INTERNAL_RNG |
|||
#endif |
|||
#if TF_MBEDTLS_USE_RSA |
|||
#define MBEDTLS_RSA_C |
|||
#define MBEDTLS_X509_RSASSA_PSS_SUPPORT |
|||
#endif |
|||
|
|||
#define MBEDTLS_SHA256_C |
|||
#if (TF_MBEDTLS_HASH_ALG_ID != TF_MBEDTLS_SHA256) |
|||
#define MBEDTLS_SHA512_C |
|||
#endif |
|||
|
|||
#define MBEDTLS_VERSION_C |
|||
|
|||
#define MBEDTLS_X509_USE_C |
|||
#define MBEDTLS_X509_CRT_PARSE_C |
|||
|
|||
#if TF_MBEDTLS_USE_AES_GCM |
|||
#define MBEDTLS_AES_C |
|||
#define MBEDTLS_CIPHER_C |
|||
#define MBEDTLS_GCM_C |
|||
#endif |
|||
|
|||
/* MPI / BIGNUM options */ |
|||
#define MBEDTLS_MPI_WINDOW_SIZE 2 |
|||
|
|||
#if TF_MBEDTLS_USE_RSA |
|||
#if TF_MBEDTLS_KEY_SIZE <= 2048 |
|||
#define MBEDTLS_MPI_MAX_SIZE 256 |
|||
#else |
|||
#define MBEDTLS_MPI_MAX_SIZE 512 |
|||
#endif |
|||
#else |
|||
#define MBEDTLS_MPI_MAX_SIZE 256 |
|||
#endif |
|||
|
|||
/* Memory buffer allocator options */ |
|||
#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 8 |
|||
|
|||
/*
|
|||
* Prevent the use of 128-bit division which |
|||
* creates dependency on external libraries. |
|||
*/ |
|||
#define MBEDTLS_NO_UDBL_DIVISION |
|||
|
|||
#ifndef __ASSEMBLER__ |
|||
/* System headers required to build mbed TLS with the current configuration */ |
|||
#include <stdlib.h> |
|||
#include <mbedtls/check_config.h> |
|||
#endif |
|||
|
|||
/*
|
|||
* Mbed TLS heap size is smal as we only use the asn1 |
|||
* parsing functions |
|||
* digest, signature and crypto algorithm are done by |
|||
* other library. |
|||
*/ |
|||
|
|||
#define TF_MBEDTLS_HEAP_SIZE U(5120) |
|||
#endif /* MBEDTLS_CONFIG_H */ |
|||
Loading…
Reference in new issue