106bc8d19SEtienne Carriere# Enable PKCS#11 TA's C_DigestKey support 206bc8d19SEtienne CarriereCFG_PKCS11_TA_ALLOW_DIGEST_KEY ?= y 306bc8d19SEtienne Carriere 406bc8d19SEtienne Carriere# Enable PKCS#11 TA's TEE Identity based authentication support 506bc8d19SEtienne CarriereCFG_PKCS11_TA_AUTH_TEE_IDENTITY ?= y 606bc8d19SEtienne Carriere 75818fdfdSSahil Malhotra# PKCS#11 TA heap size can be customized if 32kB is not enough 85818fdfdSSahil MalhotraCFG_PKCS11_TA_HEAP_SIZE ?= (32 * 1024) 995636b36SEtienne Carriere 10edce8377SEtienne Carriere# Defines the number of PKCS11 token implemented by the PKCS11 TA 11edce8377SEtienne CarriereCFG_PKCS11_TA_TOKEN_COUNT ?= 3 12edce8377SEtienne Carriere 13bcac2127SMarouene Boubakri# When enabled, embed support for object checksum value computation 1469de4b2dSEtienne CarriereCFG_PKCS11_TA_CHECK_VALUE_ATTRIBUTE ?= y 15bcac2127SMarouene Boubakri 16e02f17f3SAlexandre Marechal# When enabled, embed support for CKM_RSA_X_509 (a.k.a. Raw RSA) ciphering 17e02f17f3SAlexandre Marechal# and authentication. The feature can be needed for some TLS v1.2 connections. 18e02f17f3SAlexandre Marechal# Raw RSA can be unsafe if client uses a weak clear data padding scheme. 19*8cf8403bSEtienne CarriereCFG_PKCS11_TA_RSA_X_509 ?= n 20e02f17f3SAlexandre Marechal 21f8a3a2c4SEtienne Carriereglobal-incdirs-y += include 22f8a3a2c4SEtienne Carriereglobal-incdirs-y += src 23f8a3a2c4SEtienne Carrieresubdirs-y += src 24