1# 2# Copyright (c) 2015-2017, ARM Limited and Contributors. All rights reserved. 3# 4# SPDX-License-Identifier: BSD-3-Clause 5# 6 7include drivers/auth/mbedtls/mbedtls_common.mk 8 9# The platform may define the variable 'TF_MBEDTLS_KEY_ALG' to select the key 10# algorithm to use. If the variable is not defined, select it based on algorithm 11# used for key generation `KEY_ALG`. If `KEY_ALG` is not defined or is 12# defined to `rsa`/`rsa_1_5`, then set the variable to `rsa`. 13ifeq (${TF_MBEDTLS_KEY_ALG},) 14 ifeq (${KEY_ALG}, ecdsa) 15 TF_MBEDTLS_KEY_ALG := ecdsa 16 else 17 TF_MBEDTLS_KEY_ALG := rsa 18 endif 19endif 20 21# If MBEDTLS_KEY_ALG build flag is defined use it to set TF_MBEDTLS_KEY_ALG for 22# backward compatibility 23ifdef MBEDTLS_KEY_ALG 24 ifeq (${ERROR_DEPRECATED},1) 25 $(error "MBEDTLS_KEY_ALG is deprecated. Please use the new build flag TF_MBEDTLS_KEY_ALG") 26 endif 27 $(warning "MBEDTLS_KEY_ALG is deprecated. Please use the new build flag TF_MBEDTLS_KEY_ALG") 28 TF_MBEDTLS_KEY_ALG := ${MBEDTLS_KEY_ALG} 29endif 30 31MBEDTLS_CRYPTO_SOURCES := drivers/auth/mbedtls/mbedtls_crypto.c \ 32 $(addprefix ${MBEDTLS_DIR}/library/, \ 33 bignum.c \ 34 md.c \ 35 md_wrap.c \ 36 pk.c \ 37 pk_wrap.c \ 38 pkparse.c \ 39 pkwrite.c \ 40 ) 41 42ifeq (${HASH_ALG}, sha384) 43 MBEDTLS_CRYPTO_SOURCES += \ 44 $(addprefix ${MBEDTLS_DIR}/library/, \ 45 sha256.c \ 46 sha512.c \ 47 ) 48 TF_MBEDTLS_HASH_ALG_ID := TF_MBEDTLS_SHA384 49else ifeq (${HASH_ALG}, sha512) 50 MBEDTLS_CRYPTO_SOURCES += \ 51 $(addprefix ${MBEDTLS_DIR}/library/, \ 52 sha256.c \ 53 sha512.c \ 54 ) 55 TF_MBEDTLS_HASH_ALG_ID := TF_MBEDTLS_SHA512 56else 57 MBEDTLS_CRYPTO_SOURCES += \ 58 $(addprefix ${MBEDTLS_DIR}/library/, \ 59 sha256.c \ 60 ) 61 TF_MBEDTLS_HASH_ALG_ID := TF_MBEDTLS_SHA256 62endif 63 64# Key algorithm specific files 65MBEDTLS_ECDSA_CRYPTO_SOURCES += $(addprefix ${MBEDTLS_DIR}/library/, \ 66 ecdsa.c \ 67 ecp_curves.c \ 68 ecp.c \ 69 ) 70 71MBEDTLS_RSA_CRYPTO_SOURCES += $(addprefix ${MBEDTLS_DIR}/library/, \ 72 rsa.c \ 73 ) 74 75ifeq (${TF_MBEDTLS_KEY_ALG},ecdsa) 76 MBEDTLS_CRYPTO_SOURCES += $(MBEDTLS_ECDSA_CRYPTO_SOURCES) 77 TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_ECDSA 78else ifeq (${TF_MBEDTLS_KEY_ALG},rsa) 79 MBEDTLS_CRYPTO_SOURCES += $(MBEDTLS_RSA_CRYPTO_SOURCES) 80 TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_RSA 81else ifeq (${TF_MBEDTLS_KEY_ALG},rsa+ecdsa) 82 MBEDTLS_CRYPTO_SOURCES += $(MBEDTLS_ECDSA_CRYPTO_SOURCES) 83 MBEDTLS_CRYPTO_SOURCES += $(MBEDTLS_RSA_CRYPTO_SOURCES) 84 TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_RSA_AND_ECDSA 85else 86 $(error "TF_MBEDTLS_KEY_ALG=${TF_MBEDTLS_KEY_ALG} not supported on mbed TLS") 87endif 88 89# Needs to be set to drive mbed TLS configuration correctly 90$(eval $(call add_define,TF_MBEDTLS_KEY_ALG_ID)) 91$(eval $(call add_define,TF_MBEDTLS_HASH_ALG_ID)) 92