881b877eca
A new configuration is available in TF-M, for disabling RNG independent from key derivation. Introduce a corresponding Kconfig option to control the RNG API enabling/disabling from Zephyr. Signed-off-by: Håkon Øye Amundsen <haakon.amundsen@nordicsemi.no> Signed-off-by: Ioannis Glaropoulos <Ioannis.Glaropoulos@nordicsemi.no>
84 lines
2.5 KiB
Plaintext
84 lines
2.5 KiB
Plaintext
# Configuration for the crypto modules in the TF-M Module
|
|
|
|
# Copyright (c) 2021 Nordic Semiconductor ASA
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
if BUILD_WITH_TFM
|
|
|
|
if TFM_PARTITION_CRYPTO
|
|
|
|
config TFM_CRYPTO_RNG_MODULE_ENABLED
|
|
bool "Enable random number generator crypto module"
|
|
default y
|
|
help
|
|
Enables the random number generator module within the crypto partition.
|
|
Unset this option if 'psa_generate_random' is not used.
|
|
|
|
config TFM_CRYPTO_KEY_MODULE_ENABLED
|
|
bool "Enable KEY crypto module"
|
|
default y
|
|
help
|
|
Enables the KEY crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_key.c'
|
|
is not used.
|
|
|
|
config TFM_CRYPTO_AEAD_MODULE_ENABLED
|
|
bool "Enable AEAD crypto module"
|
|
default y
|
|
help
|
|
Enables the AEAD crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_aead.c'
|
|
is not used.
|
|
|
|
config TFM_CRYPTO_MAC_MODULE_ENABLED
|
|
bool "Enable MAC crypto module"
|
|
default y
|
|
help
|
|
Enables the MAC crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_mac.c'
|
|
is not used.
|
|
|
|
config TFM_CRYPTO_HASH_MODULE_ENABLED
|
|
bool "Enable HASH crypto module"
|
|
default y
|
|
help
|
|
Enables the HASH crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_hash.c'
|
|
is not used.
|
|
|
|
config TFM_CRYPTO_CIPHER_MODULE_ENABLED
|
|
bool "Enable CIPHER crypto module"
|
|
default y
|
|
help
|
|
Enables the CIPHER crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_cipher.c'
|
|
is not used.
|
|
|
|
config TFM_CRYPTO_GENERATOR_MODULE_ENABLED
|
|
bool "Enable GENERATOR crypto module"
|
|
default y
|
|
help
|
|
Enables the GENERATOR crypto module within the crypto partition.
|
|
Unset this option if the key generation, generate, raw key and
|
|
key derivation features from 'tfm_crypto_secure_api.c' is not used.
|
|
|
|
config TFM_CRYPTO_ASYMMETRIC_MODULE_ENABLED
|
|
bool "Enable ASYMMETRIC crypto module"
|
|
default y
|
|
help
|
|
Enables the ASYMMETRIC crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_asymmetric.c'
|
|
is not used.
|
|
|
|
config TFM_CRYPTO_KEY_DERIVATION_MODULE_ENABLED
|
|
bool "Enable KEY DERIVATION crypto module"
|
|
default y
|
|
help
|
|
Enables the KEY_DERIVATION crypto module within the crypto partition.
|
|
Unset this option if the functionality provided by 'crypto_key_derivation.c'
|
|
is not used.
|
|
|
|
endif # TFM_PARTITION_CRYPTO
|
|
|
|
endif # BUILD_WITH_TFM
|