1*b5f6d092SHarrison Mutai /* 2*b5f6d092SHarrison Mutai * Copyright (c) 2025, Arm Limited. 3*b5f6d092SHarrison Mutai * 4*b5f6d092SHarrison Mutai * SPDX-License-Identifier: BSD-3-Clause 5*b5f6d092SHarrison Mutai */ 6*b5f6d092SHarrison Mutai 7*b5f6d092SHarrison Mutai #ifndef PLAT_JUNO_MBEDTLS_CONFIG_H 8*b5f6d092SHarrison Mutai #define PLAT_JUNO_MBEDTLS_CONFIG_H 9*b5f6d092SHarrison Mutai 10*b5f6d092SHarrison Mutai #include <export/lib/utils_def_exp.h> 11*b5f6d092SHarrison Mutai #include <default_mbedtls_config.h> 12*b5f6d092SHarrison Mutai 13*b5f6d092SHarrison Mutai /* 14*b5f6d092SHarrison Mutai * Limit the enabled hash algorithm to the one selected via HASH_ALG when 15*b5f6d092SHarrison Mutai * measured boot is enabled in order to avoid pulling unused digests into the 16*b5f6d092SHarrison Mutai * build. 17*b5f6d092SHarrison Mutai */ 18*b5f6d092SHarrison Mutai #if MEASURED_BOOT 19*b5f6d092SHarrison Mutai #if TF_MBEDTLS_HASH_ALG_ID == TF_MBEDTLS_SHA256 20*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA384_C 21*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA512_C 22*b5f6d092SHarrison Mutai #elif TF_MBEDTLS_HASH_ALG_ID == TF_MBEDTLS_SHA384 23*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA256_C 24*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA256_SMALLER 25*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA512_C 26*b5f6d092SHarrison Mutai #elif TF_MBEDTLS_HASH_ALG_ID == TF_MBEDTLS_SHA512 27*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA256_C 28*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA256_SMALLER 29*b5f6d092SHarrison Mutai #undef MBEDTLS_SHA384_C 30*b5f6d092SHarrison Mutai #else 31*b5f6d092SHarrison Mutai #error "Unsupported TF_MBEDTLS_HASH_ALG_ID for Juno measured boot" 32*b5f6d092SHarrison Mutai #endif 33*b5f6d092SHarrison Mutai #endif /* MEASURED_BOOT */ 34*b5f6d092SHarrison Mutai 35*b5f6d092SHarrison Mutai #endif /* PLAT_JUNO_MBEDTLS_CONFIG_H */ 36