OrgZephyr/zephyr
OrgZephyr
/
zephyr
mirror of https://github.com/zephyrproject-rtos/zephyr.git
1
0
Fork 0
Code Issues Releases Wiki Activity
zephyr/samples/tfm_integration/psa_crypto/prj.conf

53 lines
1.3 KiB
Plaintext
Raw Normal View History

samples: tfm: Re-commit psa_crypto sample Adds a refactored version of the psa_crypto sample back, which was removed as part of the update to TF-M 1.7.0 due to unresolvable (at the time) issues with use of MbedTLS instances on the S and NS sides. This sample takes advantage of changes to MbedTLS and TF-M that were introduced after the TF-M 1.7.0 and MbedTLS 3.3 release, and cherry-picked in Zephyr, allowing for improved linking of MbedTLS in secure and non-secure images. PSA API calls on the non-secure side can now be correctly routed to the secure partition, while X.509 and TLS calls remain on the non-secure/Zephyr side. Signed-off-by: Rajkumar Kanagaraj <rajkumar.kanagaraj@linaro.org>
2023-03-29 21:39:51 +08:00
CONFIG_LOG=y
CONFIG_LOG_RUNTIME_FILTERING=y
CONFIG_LOG_BUFFER_SIZE=2048
CONFIG_LOG_PROCESS_TRIGGER_THRESHOLD=0
CONFIG_LOG_DEFAULT_LEVEL=3
#CONFIG_SHELL=n
#CONFIG_SHELL_HISTORY=y
#CONFIG_SHELL_VT100_COLORS=y
#CONFIG_SHELL_CMDS=n
#CONFIG_PSA_SHELL=y
CONFIG_BUILD_WITH_TFM=y
CONFIG_TFM_PROFILE_TYPE_NOT_SET=y
CONFIG_TFM_IPC=y
# The Zephyr CMSIS emulation assumes that ticks are ms, currently
CONFIG_SYS_CLOCK_TICKS_PER_SEC=1000
CONFIG_MAIN_STACK_SIZE=8192
CONFIG_HEAP_MEM_POOL_SIZE=4096
# Mbed TLS
CONFIG_MBEDTLS=y
CONFIG_MBEDTLS_BUILTIN=y
CONFIG_MBEDTLS_ENABLE_HEAP=y
CONFIG_MBEDTLS_HEAP_SIZE=32768
CONFIG_MBEDTLS_USER_CONFIG_ENABLE=y
samples: psa_crypto: fix setting of TF-M's CRYPTO_ENGINE_BUF_SIZE It used to be set as a CMake variable, but TF-M's build system does not look at such a variable. Instead, define an additional configuration header file that defines CRYPTO_ENGINE_BUF_SIZE, and pass it to TF-M's build system. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
2024-05-23 20:01:56 +08:00
CONFIG_MBEDTLS_USER_CONFIG_FILE="config_mbedtls.h"
samples: tfm: Re-commit psa_crypto sample Adds a refactored version of the psa_crypto sample back, which was removed as part of the update to TF-M 1.7.0 due to unresolvable (at the time) issues with use of MbedTLS instances on the S and NS sides. This sample takes advantage of changes to MbedTLS and TF-M that were introduced after the TF-M 1.7.0 and MbedTLS 3.3 release, and cherry-picked in Zephyr, allowing for improved linking of MbedTLS in secure and non-secure images. PSA API calls on the non-secure side can now be correctly routed to the secure partition, while X.509 and TLS calls remain on the non-secure/Zephyr side. Signed-off-by: Rajkumar Kanagaraj <rajkumar.kanagaraj@linaro.org>
2023-03-29 21:39:51 +08:00
samples: tfm_integration: psa_crypto: improve the MbedTLS configuration Move supported configuration items from the custom MbedTLS user configuration file over to the Kconfig overlay. The correct macros are then defined by the MbedTLS module according to the values of the Kconfig options. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
2024-04-30 17:43:14 +08:00
CONFIG_MBEDTLS_PSA_CRYPTO_C=y
tfm: do not enable all PSA features by default when BUILD_WITH_TFM Do not enable all PSA features by default when BUILD_WITH_TFM Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2024-05-28 21:47:37 +08:00
CONFIG_PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY=y
mbedtls: do not set PSA_WANT_KEY_TYPE_[RSA/ECC]_KEY_PAIR_BASIC Mbed TLS automatically sets PSA_WANT_KEY_TYPE_[RSA/ECC]_KEY_PAIR_BASIC whenever "_IMPORT || _EXPORT || _GENERATE || _DERIVE" operations are set. Therefore we just set the proper actions where required. Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2024-09-10 14:59:29 +08:00
CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT=y
CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT=y
tfm: do not enable all PSA features by default when BUILD_WITH_TFM Do not enable all PSA features by default when BUILD_WITH_TFM Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2024-05-28 21:47:37 +08:00
CONFIG_PSA_WANT_ECC_SECP_R1_256=y
CONFIG_PSA_WANT_ALG_ECDSA=y
CONFIG_PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY=y
mbedtls: rename MBEDTLS_ENTROPY_ENABLED as MBEDTLS_ENTROPY_C ENABLED suffix does not really makes much sense for a kconfig so it should be removed. Also other MBEDTLS symbols were recently updated accordingly. Moreover having it named exactly the same way as in Mbed TLS symplifies the understanding of what this kconfig is doing. Signed-off-by: Valerio Setti <vsetti@baylibre.com>
2024-07-30 23:21:20 +08:00
CONFIG_MBEDTLS_ENTROPY_C=y
samples: tfm_integration: psa_crypto: improve the MbedTLS configuration Move supported configuration items from the custom MbedTLS user configuration file over to the Kconfig overlay. The correct macros are then defined by the MbedTLS module according to the values of the Kconfig options. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
2024-04-30 17:43:14 +08:00
CONFIG_MBEDTLS_ECP_C=y
CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=y
CONFIG_MBEDTLS_ECDSA_C=y
modules: mbedtls: remove the default enabling of features In an effort to shave off code size, remove out-of-the-box enabling of crypto features (except SHA-256). Configurations are adjusted to enable what they need. Bonuses: - When enabled, AES now defaults to using a smaller version (`CONFIG_MBEDTLS_AES_ROM_TABLES` isn't default enabled anymore, and if enabled, `CONFIG_MBEDTLS_AES_FEWER_TABLES` defaults to y). - Conditions around Mbed TLS Kconfig options have been improved to reflect the reality of the dependencies. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
2024-05-08 21:34:31 +08:00
CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_ENABLED=y
CONFIG_MBEDTLS_PK_WRITE_C=y
samples: tfm_integration: psa_crypto: improve the MbedTLS configuration Move supported configuration items from the custom MbedTLS user configuration file over to the Kconfig overlay. The correct macros are then defined by the MbedTLS module according to the values of the Kconfig options. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
2024-04-30 17:43:14 +08:00
samples: tfm: Re-commit psa_crypto sample Adds a refactored version of the psa_crypto sample back, which was removed as part of the update to TF-M 1.7.0 due to unresolvable (at the time) issues with use of MbedTLS instances on the S and NS sides. This sample takes advantage of changes to MbedTLS and TF-M that were introduced after the TF-M 1.7.0 and MbedTLS 3.3 release, and cherry-picked in Zephyr, allowing for improved linking of MbedTLS in secure and non-secure images. PSA API calls on the non-secure side can now be correctly routed to the secure partition, while X.509 and TLS calls remain on the non-secure/Zephyr side. Signed-off-by: Rajkumar Kanagaraj <rajkumar.kanagaraj@linaro.org>
2023-03-29 21:39:51 +08:00
# JSON
CONFIG_JSON_LIBRARY=y
# Enable the initial attestation
CONFIG_TFM_PARTITION_INITIAL_ATTESTATION=y
CONFIG_TFM_QCBOR_PATH="DOWNLOAD"
samples: Switch from NEWLIB_LIBC to REQUIRES_FULL_LIBC Instead of forcing use of NEWLIB_LIBC, select any available complete C library implementation. Add CONFIG_REQUIRES_FLOAT_PRINTF and adjust CONFIG_LIBC_MALLOC_ARENA_SIZE as needed. Signed-off-by: Keith Packard <keithp@keithp.com>
2023-09-29 06:27:11 +08:00
CONFIG_REQUIRES_FULL_LIBC=y