/** * \file mbedtls/config_adjust_psa_from_legacy.h * \brief Adjust PSA configuration: construct PSA configuration from legacy * * This is an internal header. Do not include it directly. * * When MBEDTLS_PSA_CRYPTO_CONFIG is disabled, we automatically enable * cryptographic mechanisms through the PSA interface when the corresponding * legacy mechanism is enabled. In many cases, this just enables the PSA * wrapper code around the legacy implementation, but we also do this for * some mechanisms where PSA has its own independent implementation so * that high-level modules that can use either cryptographic API have the * same feature set in both cases. */ /* * Copyright The Mbed TLS Contributors * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later */ #ifndef MBEDTLS_CONFIG_ADJUST_PSA_FROM_LEGACY_H #define MBEDTLS_CONFIG_ADJUST_PSA_FROM_LEGACY_H #if !defined(MBEDTLS_CONFIG_FILES_READ) #error "Do not include mbedtls/config_adjust_*.h manually! This can lead to problems, " \ "up to and including runtime errors such as buffer overflows. " \ "If you're trying to fix a complaint from check_config.h, just remove " \ "it from your configuration file: since Mbed TLS 3.0, it is included " \ "automatically at the right point." #endif /* */ /* * Ensure PSA_WANT_* defines are setup properly if MBEDTLS_PSA_CRYPTO_CONFIG * is not defined */ #if defined(MBEDTLS_CCM_C) #define MBEDTLS_PSA_BUILTIN_ALG_CCM … #define PSA_WANT_ALG_CCM … #if defined(MBEDTLS_CIPHER_C) #define MBEDTLS_PSA_BUILTIN_ALG_CCM_STAR_NO_TAG … #define PSA_WANT_ALG_CCM_STAR_NO_TAG … #endif /* MBEDTLS_CIPHER_C */ #endif /* MBEDTLS_CCM_C */ #if defined(MBEDTLS_CMAC_C) #define MBEDTLS_PSA_BUILTIN_ALG_CMAC … #define PSA_WANT_ALG_CMAC … #endif /* MBEDTLS_CMAC_C */ #if defined(MBEDTLS_ECDH_C) #define MBEDTLS_PSA_BUILTIN_ALG_ECDH … #define PSA_WANT_ALG_ECDH … #endif /* MBEDTLS_ECDH_C */ #if defined(MBEDTLS_ECDSA_C) #define MBEDTLS_PSA_BUILTIN_ALG_ECDSA … #define PSA_WANT_ALG_ECDSA … #define PSA_WANT_ALG_ECDSA_ANY … // Only add in DETERMINISTIC support if ECDSA is also enabled #if defined(MBEDTLS_ECDSA_DETERMINISTIC) #define MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA … #define PSA_WANT_ALG_DETERMINISTIC_ECDSA … #endif /* MBEDTLS_ECDSA_DETERMINISTIC */ #endif /* MBEDTLS_ECDSA_C */ #if defined(MBEDTLS_ECP_C) #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC … #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT … #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT … #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE … /* Normally we wouldn't enable this because it's not implemented in ecp.c, * but since it used to be available any time ECP_C was enabled, let's enable * it anyway for the sake of backwards compatibility */ #define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_BASIC … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_IMPORT … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_EXPORT … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_GENERATE … /* See comment for PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE above. */ #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR_DERIVE … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY … #define PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY … #endif /* MBEDTLS_ECP_C */ #if defined(MBEDTLS_DHM_C) #define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC … #define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT … #define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT … #define PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE … #define PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY … #define PSA_WANT_ALG_FFDH … #define PSA_WANT_DH_RFC7919_2048 … #define PSA_WANT_DH_RFC7919_3072 … #define PSA_WANT_DH_RFC7919_4096 … #define PSA_WANT_DH_RFC7919_6144 … #define PSA_WANT_DH_RFC7919_8192 … #define MBEDTLS_PSA_BUILTIN_ALG_FFDH … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_BASIC … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_IMPORT … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_EXPORT … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_KEY_PAIR_GENERATE … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DH_PUBLIC_KEY … #define MBEDTLS_PSA_BUILTIN_DH_RFC7919_2048 … #define MBEDTLS_PSA_BUILTIN_DH_RFC7919_3072 … #define MBEDTLS_PSA_BUILTIN_DH_RFC7919_4096 … #define MBEDTLS_PSA_BUILTIN_DH_RFC7919_6144 … #define MBEDTLS_PSA_BUILTIN_DH_RFC7919_8192 … #endif /* MBEDTLS_DHM_C */ #if defined(MBEDTLS_GCM_C) #define MBEDTLS_PSA_BUILTIN_ALG_GCM … #define PSA_WANT_ALG_GCM … #endif /* MBEDTLS_GCM_C */ /* Enable PSA HKDF algorithm if mbedtls HKDF is supported. * PSA HKDF EXTRACT and PSA HKDF EXPAND have minimal cost when * PSA HKDF is enabled, so enable both algorithms together * with PSA HKDF. */ #if defined(MBEDTLS_HKDF_C) #define MBEDTLS_PSA_BUILTIN_ALG_HMAC … #define PSA_WANT_ALG_HMAC … #define MBEDTLS_PSA_BUILTIN_ALG_HKDF … #define PSA_WANT_ALG_HKDF … #define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXTRACT … #define PSA_WANT_ALG_HKDF_EXTRACT … #define MBEDTLS_PSA_BUILTIN_ALG_HKDF_EXPAND … #define PSA_WANT_ALG_HKDF_EXPAND … #endif /* MBEDTLS_HKDF_C */ #define MBEDTLS_PSA_BUILTIN_ALG_HMAC … #define PSA_WANT_ALG_HMAC … #define PSA_WANT_KEY_TYPE_HMAC … #if defined(MBEDTLS_MD_C) #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF … #define PSA_WANT_ALG_TLS12_PRF … #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS … #define PSA_WANT_ALG_TLS12_PSK_TO_MS … #endif /* MBEDTLS_MD_C */ #if defined(MBEDTLS_MD5_C) #define MBEDTLS_PSA_BUILTIN_ALG_MD5 … #define PSA_WANT_ALG_MD5 … #endif #if defined(MBEDTLS_ECJPAKE_C) #define MBEDTLS_PSA_BUILTIN_PAKE … #define MBEDTLS_PSA_BUILTIN_ALG_JPAKE … #define PSA_WANT_ALG_JPAKE … #endif #if defined(MBEDTLS_RIPEMD160_C) #define MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160 … #define PSA_WANT_ALG_RIPEMD160 … #endif #if defined(MBEDTLS_RSA_C) #if defined(MBEDTLS_PKCS1_V15) #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT … #define PSA_WANT_ALG_RSA_PKCS1V15_CRYPT … #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN … #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN … #define PSA_WANT_ALG_RSA_PKCS1V15_SIGN_RAW … #endif /* MBEDTLS_PKCS1_V15 */ #if defined(MBEDTLS_PKCS1_V21) #define MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP … #define PSA_WANT_ALG_RSA_OAEP … #define MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS … #define PSA_WANT_ALG_RSA_PSS … #endif /* MBEDTLS_PKCS1_V21 */ #if defined(MBEDTLS_GENPRIME) #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_GENERATE … #define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE … #endif /* MBEDTLS_GENPRIME */ #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_BASIC … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_IMPORT … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR_EXPORT … #define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC … #define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT … #define PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY … #define PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY … #endif /* MBEDTLS_RSA_C */ #if defined(MBEDTLS_SHA1_C) #define MBEDTLS_PSA_BUILTIN_ALG_SHA_1 … #define PSA_WANT_ALG_SHA_1 … #endif #if defined(MBEDTLS_SHA224_C) #define MBEDTLS_PSA_BUILTIN_ALG_SHA_224 … #define PSA_WANT_ALG_SHA_224 … #endif #if defined(MBEDTLS_SHA256_C) #define MBEDTLS_PSA_BUILTIN_ALG_SHA_256 … #define PSA_WANT_ALG_SHA_256 … #endif #if defined(MBEDTLS_SHA384_C) #define MBEDTLS_PSA_BUILTIN_ALG_SHA_384 … #define PSA_WANT_ALG_SHA_384 … #endif #if defined(MBEDTLS_SHA512_C) #define MBEDTLS_PSA_BUILTIN_ALG_SHA_512 … #define PSA_WANT_ALG_SHA_512 … #endif #if defined(MBEDTLS_SHA3_C) #define MBEDTLS_PSA_BUILTIN_ALG_SHA3_224 … #define MBEDTLS_PSA_BUILTIN_ALG_SHA3_256 … #define MBEDTLS_PSA_BUILTIN_ALG_SHA3_384 … #define MBEDTLS_PSA_BUILTIN_ALG_SHA3_512 … #define PSA_WANT_ALG_SHA3_224 … #define PSA_WANT_ALG_SHA3_256 … #define PSA_WANT_ALG_SHA3_384 … #define PSA_WANT_ALG_SHA3_512 … #endif #if defined(MBEDTLS_AES_C) #define PSA_WANT_KEY_TYPE_AES … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES … #endif #if defined(MBEDTLS_ARIA_C) #define PSA_WANT_KEY_TYPE_ARIA … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_ARIA … #endif #if defined(MBEDTLS_CAMELLIA_C) #define PSA_WANT_KEY_TYPE_CAMELLIA … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA … #endif #if defined(MBEDTLS_DES_C) #define PSA_WANT_KEY_TYPE_DES … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES … #endif #if defined(MBEDTLS_PSA_BUILTIN_ALG_SHA_256) #define MBEDTLS_PSA_BUILTIN_ALG_TLS12_ECJPAKE_TO_PMS … #define PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS … #endif #if defined(MBEDTLS_CHACHA20_C) #define PSA_WANT_KEY_TYPE_CHACHA20 … #define MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20 … /* ALG_STREAM_CIPHER requires CIPHER_C in order to be supported in PSA */ #if defined(MBEDTLS_CIPHER_C) #define PSA_WANT_ALG_STREAM_CIPHER … #define MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER … #endif #if defined(MBEDTLS_CHACHAPOLY_C) #define PSA_WANT_ALG_CHACHA20_POLY1305 … #define MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305 … #endif #endif #if defined(MBEDTLS_CIPHER_MODE_CBC) #define MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING … #define PSA_WANT_ALG_CBC_NO_PADDING … #if defined(MBEDTLS_CIPHER_PADDING_PKCS7) #define MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7 … #define PSA_WANT_ALG_CBC_PKCS7 … #endif #endif #if (defined(MBEDTLS_AES_C) || defined(MBEDTLS_DES_C) || \ defined(MBEDTLS_ARIA_C) || defined(MBEDTLS_CAMELLIA_C)) && \ defined(MBEDTLS_CIPHER_C) #define MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING … #define PSA_WANT_ALG_ECB_NO_PADDING … #endif #if defined(MBEDTLS_CIPHER_MODE_CFB) #define MBEDTLS_PSA_BUILTIN_ALG_CFB … #define PSA_WANT_ALG_CFB … #endif #if defined(MBEDTLS_CIPHER_MODE_CTR) #define MBEDTLS_PSA_BUILTIN_ALG_CTR … #define PSA_WANT_ALG_CTR … #endif #if defined(MBEDTLS_CIPHER_MODE_OFB) #define MBEDTLS_PSA_BUILTIN_ALG_OFB … #define PSA_WANT_ALG_OFB … #endif #if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256 … #define PSA_WANT_ECC_BRAINPOOL_P_R1_256 … #endif #if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384 … #define PSA_WANT_ECC_BRAINPOOL_P_R1_384 … #endif #if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_512 … #define PSA_WANT_ECC_BRAINPOOL_P_R1_512 … #endif #if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255 … #define PSA_WANT_ECC_MONTGOMERY_255 … #endif #if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448 … #define PSA_WANT_ECC_MONTGOMERY_448 … #endif #if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192 … #define PSA_WANT_ECC_SECP_R1_192 … #endif #if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224 … #define PSA_WANT_ECC_SECP_R1_224 … #endif #if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256 … #define PSA_WANT_ECC_SECP_R1_256 … #endif #if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384 … #define PSA_WANT_ECC_SECP_R1_384 … #endif #if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_521 … #define PSA_WANT_ECC_SECP_R1_521 … #endif #if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192 … #define PSA_WANT_ECC_SECP_K1_192 … #endif /* SECP224K1 is buggy via the PSA API (https://github.com/Mbed-TLS/mbedtls/issues/3541) */ #if 0 && defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_224 … #define PSA_WANT_ECC_SECP_K1_224 … #endif #if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) #define MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256 … #define PSA_WANT_ECC_SECP_K1_256 … #endif #endif /* MBEDTLS_CONFIG_ADJUST_PSA_FROM_LEGACY_H */
Codebase Browser
godot