drivers/auth/mbedtls/mbedtls_common.mk

   1 #
   2 # Copyright (c) 2015-2019, ARM Limited and Contributors. All rights reserved.
   3 #
   4 # SPDX-License-Identifier: BSD-3-Clause
   5 #
   6
   7 ifneq (${MBEDTLS_COMMON_MK},1)
   8 MBEDTLS_COMMON_MK       :=      1
   9
  10 # MBEDTLS_DIR must be set to the mbed TLS main directory (it must contain
  11 # the 'include' and 'library' subdirectories).
  12 ifeq (${MBEDTLS_DIR},)
  13   $(error Error: MBEDTLS_DIR not set)
  14 endif
  15
  16 MBEDTLS_INC             =       -I${MBEDTLS_DIR}/include
  17
  18 # Specify mbed TLS configuration file
  19 MBEDTLS_CONFIG_FILE     :=      "<drivers/auth/mbedtls/mbedtls_config.h>"
  20 $(eval $(call add_define,MBEDTLS_CONFIG_FILE))
  21
  22 MBEDTLS_SOURCES +=              drivers/auth/mbedtls/mbedtls_common.c
  23
  24
  25 LIBMBEDTLS_SRCS         := $(addprefix ${MBEDTLS_DIR}/library/, \
  26                                         asn1parse.c                             \
  27                                         asn1write.c                             \
  28                                         memory_buffer_alloc.c                   \
  29                                         oid.c                                   \
  30                                         platform.c                              \
  31                                         platform_util.c                         \
  32                                         bignum.c                                \
  33                                         md.c                                    \
  34                                         md_wrap.c                               \
  35                                         pk.c                                    \
  36                                         pk_wrap.c                               \
  37                                         pkparse.c                               \
  38                                         pkwrite.c                               \
  39                                         sha256.c                                \
  40                                         sha512.c                                \
  41                                         ecdsa.c                                 \
  42                                         ecp_curves.c                            \
  43                                         ecp.c                                   \
  44                                         rsa.c                                   \
  45                                         rsa_internal.c                          \
  46                                         x509.c                                  \
  47                                         x509_crt.c                              \
  48                                         )
  49
  50 # The platform may define the variable 'TF_MBEDTLS_KEY_ALG' to select the key
  51 # algorithm to use. If the variable is not defined, select it based on algorithm
  52 # used for key generation `KEY_ALG`. If `KEY_ALG` is not defined or is
  53 # defined to `rsa`/`rsa_1_5`, then set the variable to `rsa`.
  54 ifeq (${TF_MBEDTLS_KEY_ALG},)
  55     ifeq (${KEY_ALG}, ecdsa)
  56         TF_MBEDTLS_KEY_ALG              :=      ecdsa
  57     else
  58         TF_MBEDTLS_KEY_ALG              :=      rsa
  59     endif
  60 endif
  61
  62 ifeq (${TF_MBEDTLS_KEY_SIZE},)
  63     ifneq ($(findstring rsa,${TF_MBEDTLS_KEY_ALG}),)
  64         ifeq (${KEY_SIZE},)
  65             TF_MBEDTLS_KEY_SIZE         :=      2048
  66         else
  67             TF_MBEDTLS_KEY_SIZE         :=      ${KEY_SIZE}
  68         endif
  69     endif
  70 endif
  71
  72 ifeq (${HASH_ALG}, sha384)
  73     TF_MBEDTLS_HASH_ALG_ID      :=      TF_MBEDTLS_SHA384
  74 else ifeq (${HASH_ALG}, sha512)
  75    TF_MBEDTLS_HASH_ALG_ID       :=      TF_MBEDTLS_SHA512
  76 else
  77     TF_MBEDTLS_HASH_ALG_ID      :=      TF_MBEDTLS_SHA256
  78 endif
  79
  80 ifeq (${TF_MBEDTLS_KEY_ALG},ecdsa)
  81     TF_MBEDTLS_KEY_ALG_ID       :=      TF_MBEDTLS_ECDSA
  82 else ifeq (${TF_MBEDTLS_KEY_ALG},rsa)
  83     TF_MBEDTLS_KEY_ALG_ID       :=      TF_MBEDTLS_RSA
  84 else ifeq (${TF_MBEDTLS_KEY_ALG},rsa+ecdsa)
  85     TF_MBEDTLS_KEY_ALG_ID       :=      TF_MBEDTLS_RSA_AND_ECDSA
  86 else
  87     $(error "TF_MBEDTLS_KEY_ALG=${TF_MBEDTLS_KEY_ALG} not supported on mbed TLS")
  88 endif
  89
  90 # Needs to be set to drive mbed TLS configuration correctly
  91 $(eval $(call add_define,TF_MBEDTLS_KEY_ALG_ID))
  92 $(eval $(call add_define,TF_MBEDTLS_KEY_SIZE))
  93 $(eval $(call add_define,TF_MBEDTLS_HASH_ALG_ID))
  94
  95
  96 $(eval $(call MAKE_LIB,mbedtls))
  97
  98 endif