michaelh/zephyr
1
0
Fork 0
Code Releases Activity

tfm: do not enable all PSA features by default when BUILD_WITH_TFM

Browse source 
Do not enable all PSA features by default when BUILD_WITH_TFM

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
This commit is contained in:
Valerio Setti 2024-05-28 15:47:37 +02:00 • committed by Carles Cufí
commit 87dbd81168
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/trusted-firmware-m/Kconfig.tfm
View file

@ -33,7 +33,6 @@ menuconfig BUILD_WITH_TFM
imply INIT_ARCH_HW_AT_BOOT imply INIT_ARCH_HW_AT_BOOT
imply ARM_NONSECURE_PREEMPTIBLE_SECURE_CALLS imply ARM_NONSECURE_PREEMPTIBLE_SECURE_CALLS
imply MBEDTLS imply MBEDTLS
imply PSA_CRYPTO_ENABLE_ALL
help help
When enabled, this option instructs the Zephyr build process to When enabled, this option instructs the Zephyr build process to
additionally generate a TF-M image for the Secure Execution additionally generate a TF-M image for the Secure Execution

5
samples/tfm_integration/psa_crypto/prj.conf
View file

@ -29,6 +29,11 @@ CONFIG_MBEDTLS_USER_CONFIG_ENABLE=y
CONFIG_MBEDTLS_USER_CONFIG_FILE="config_mbedtls.h" CONFIG_MBEDTLS_USER_CONFIG_FILE="config_mbedtls.h"
CONFIG_MBEDTLS_PSA_CRYPTO_C=y CONFIG_MBEDTLS_PSA_CRYPTO_C=y
CONFIG_PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY=y
CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC=y
CONFIG_PSA_WANT_ECC_SECP_R1_256=y
CONFIG_PSA_WANT_ALG_ECDSA=y
CONFIG_PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY=y
CONFIG_MBEDTLS_ENTROPY_ENABLED=y CONFIG_MBEDTLS_ENTROPY_ENABLED=y
CONFIG_MBEDTLS_ECP_C=y CONFIG_MBEDTLS_ECP_C=y
CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=y CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=y