| # For U-Boot Proper | |
| choice | |
| prompt "Crypto libraries (U-Boot Proper)" | |
| default LEGACY_HASHING_AND_CRYPTO | |
| help | |
| Select crypto libraries. | |
| LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries, | |
| MBEDTLS_LIB for MbedTLS libraries. | |
| config LEGACY_HASHING_AND_CRYPTO | |
| bool "legacy crypto libraries" | |
| select LEGACY_HASHING | |
| select LEGACY_CRYPTO | |
| config MBEDTLS_LIB | |
| bool "MbedTLS libraries" | |
| select MBEDTLS_LIB_X509 | |
| endchoice | |
| if LEGACY_HASHING_AND_CRYPTO || MBEDTLS_LIB_HASHING_ALT | |
| config LEGACY_HASHING | |
| bool "Use U-Boot legacy hashing libraries" | |
| select MD5_LEGACY if MD5 | |
| select SHA1_LEGACY if SHA1 | |
| select SHA256_LEGACY if SHA256 | |
| select SHA512_LEGACY if SHA512 | |
| select SHA384_LEGACY if SHA384 | |
| help | |
| Enable U-Boot legacy hashing libraries. | |
| if LEGACY_HASHING | |
| config SHA1_LEGACY | |
| bool "Enable SHA1 support with legacy crypto library" | |
| depends on LEGACY_HASHING && SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with legacy crypto library. | |
| config SHA256_LEGACY | |
| bool "Enable SHA256 support with legacy crypto library" | |
| depends on LEGACY_HASHING && SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with legacy crypto library. | |
| config SHA512_LEGACY | |
| bool "Enable SHA512 support with legacy crypto library" | |
| depends on LEGACY_HASHING && SHA512 | |
| default y if TI_SECURE_DEVICE && FIT_SIGNATURE | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with legacy crypto library. | |
| config SHA384_LEGACY | |
| bool "Enable SHA384 support with legacy crypto library" | |
| depends on LEGACY_HASHING && SHA384 | |
| select SHA512_LEGACY | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with legacy crypto library. | |
| config MD5_LEGACY | |
| bool "Enable MD5 support with legacy crypto library" | |
| depends on LEGACY_HASHING && MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with legacy crypto library. | |
| endif # LEGACY_HASHING | |
| config LEGACY_CRYPTO | |
| bool "legacy certificate libraries" | |
| depends on LEGACY_HASHING_AND_CRYPTO | |
| select ASN1_DECODER_LEGACY if ASN1_DECODER | |
| select ASYMMETRIC_PUBLIC_KEY_LEGACY if \ | |
| ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| select RSA_PUBLIC_KEY_PARSER_LEGACY if RSA_PUBLIC_KEY_PARSER | |
| select X509_CERTIFICATE_PARSER_LEGACY if X509_CERTIFICATE_PARSER | |
| select PKCS7_MESSAGE_PARSER_LEGACY if PKCS7_MESSAGE_PARSER | |
| select MSCODE_PARSER_LEGACY if MSCODE_PARSER | |
| help | |
| Enable legacy certificate libraries. | |
| if LEGACY_CRYPTO | |
| config ASN1_DECODER_LEGACY | |
| bool "ASN1 decoder with legacy certificate library" | |
| depends on LEGACY_CRYPTO && ASN1_DECODER | |
| help | |
| This option chooses legacy certificate library for ASN1 decoder. | |
| config ASYMMETRIC_PUBLIC_KEY_LEGACY | |
| bool "Asymmetric public key crypto with legacy certificate library" | |
| depends on LEGACY_CRYPTO && ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| help | |
| This option chooses legacy certificate library for asymmetric public | |
| key crypto algorithm. | |
| config RSA_PUBLIC_KEY_PARSER_LEGACY | |
| bool "RSA public key parser with legacy certificate library" | |
| depends on ASYMMETRIC_PUBLIC_KEY_LEGACY | |
| select ASN1_DECODER_LEGACY | |
| help | |
| This option chooses legacy certificate library for RSA public key | |
| parser. | |
| config X509_CERTIFICATE_PARSER_LEGACY | |
| bool "X.509 certificate parser with legacy certificate library" | |
| depends on ASYMMETRIC_PUBLIC_KEY_LEGACY | |
| select ASN1_DECODER_LEGACY | |
| help | |
| This option chooses legacy certificate library for X509 certificate | |
| parser. | |
| config PKCS7_MESSAGE_PARSER_LEGACY | |
| bool "PKCS#7 message parser with legacy certificate library" | |
| depends on X509_CERTIFICATE_PARSER_LEGACY | |
| select ASN1_DECODER_LEGACY | |
| help | |
| This option chooses legacy certificate library for PKCS7 message | |
| parser. | |
| config MSCODE_PARSER_LEGACY | |
| bool "MS authenticode parser with legacy certificate library" | |
| depends on LEGACY_CRYPTO && MSCODE_PARSER | |
| select ASN1_DECODER_LEGACY | |
| help | |
| This option chooses legacy certificate library for MS authenticode | |
| parser. | |
| endif # LEGACY_CRYPTO | |
| endif # LEGACY_HASHING_AND_CRYPTO || MBEDTLS_LIB_HASHING_ALT | |
| if MBEDTLS_LIB | |
| config MBEDTLS_LIB_HASHING_ALT | |
| bool "Replace MbedTLS native hashing with U-Boot legacy libraries" | |
| depends on MBEDTLS_LIB && !MBEDTLS_LIB_CRYPTO | |
| select LEGACY_HASHING | |
| default y if MBEDTLS_LIB && !MBEDTLS_LIB_CRYPTO | |
| help | |
| Enable MbedTLS hashing alternatives and replace them with legacy hashing | |
| libraries. | |
| This allows user to use U-Boot legacy hashing algorithms together with | |
| other MbedTLS modules. | |
| Mutually incompatible with MBEDTLS_LIB_CRYPTO. | |
| config MBEDTLS_LIB_CRYPTO | |
| bool "Use MbedTLS native crypto libraries for hashing" | |
| default y if MBEDTLS_LIB | |
| select MD5_MBEDTLS if MD5 | |
| select SHA1_MBEDTLS if SHA1 | |
| select SHA256_MBEDTLS if SHA256 | |
| select SHA512_MBEDTLS if SHA512 | |
| select SHA384_MBEDTLS if SHA384 | |
| help | |
| Enable MbedTLS native crypto libraries. | |
| Mutually incompatible with MBEDTLS_LIB_HASHING_ALT. | |
| if MBEDTLS_LIB_CRYPTO | |
| config SHA1_MBEDTLS | |
| bool "Enable SHA1 support with MbedTLS crypto library" | |
| depends on MBEDTLS_LIB_CRYPTO && SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with MbedTLS crypto library. | |
| config SHA256_MBEDTLS | |
| bool "Enable SHA256 support with MbedTLS crypto library" | |
| depends on MBEDTLS_LIB_CRYPTO && SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with MbedTLS crypto library. | |
| if SHA256_MBEDTLS | |
| config SHA256_SMALLER | |
| bool "Enable SHA256 smaller implementation with MbedTLS crypto library" | |
| depends on SHA256_MBEDTLS | |
| default y if SHA256_MBEDTLS | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| smaller implementation with MbedTLS crypto library. | |
| endif | |
| config SHA512_MBEDTLS | |
| bool "Enable SHA512 support with MbedTLS crypto library" | |
| depends on MBEDTLS_LIB_CRYPTO && SHA512 | |
| default y if TI_SECURE_DEVICE && FIT_SIGNATURE | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with MbedTLS crypto library. | |
| if SHA512_MBEDTLS | |
| config SHA512_SMALLER | |
| bool "Enable SHA512 smaller implementation with MbedTLS crypto library" | |
| depends on SHA512_MBEDTLS | |
| default y if SHA512_MBEDTLS | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| smaller implementation with MbedTLS crypto library. | |
| endif | |
| config SHA384_MBEDTLS | |
| bool "Enable SHA384 support with MbedTLS crypto library" | |
| depends on MBEDTLS_LIB_CRYPTO && SHA384 | |
| select SHA512_MBEDTLS | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with MbedTLS crypto library. | |
| config MD5_MBEDTLS | |
| bool "Enable MD5 support with MbedTLS crypto library" | |
| depends on MBEDTLS_LIB_CRYPTO && MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with MbedTLS crypto library. | |
| config HKDF_MBEDTLS | |
| bool "Enable HKDF support with MbedTLS crypto library" | |
| depends on MBEDTLS_LIB_CRYPTO | |
| help | |
| This option enables support of key derivation using HKDF algorithm | |
| with MbedTLS crypto library. | |
| endif # MBEDTLS_LIB_CRYPTO | |
| config MBEDTLS_LIB_X509 | |
| bool "MbedTLS certificate libraries" | |
| select ASN1_DECODER_MBEDTLS if ASN1_DECODER | |
| select ASYMMETRIC_PUBLIC_KEY_MBEDTLS if \ | |
| ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| select RSA_PUBLIC_KEY_PARSER_MBEDTLS if RSA_PUBLIC_KEY_PARSER | |
| select X509_CERTIFICATE_PARSER_MBEDTLS if X509_CERTIFICATE_PARSER | |
| select PKCS7_MESSAGE_PARSER_MBEDTLS if PKCS7_MESSAGE_PARSER | |
| select MSCODE_PARSER_MBEDTLS if MSCODE_PARSER | |
| help | |
| Enable MbedTLS certificate libraries. | |
| if MBEDTLS_LIB_X509 | |
| config ASN1_DECODER_MBEDTLS | |
| bool "ASN1 decoder with MbedTLS certificate library" | |
| depends on MBEDTLS_LIB_X509 && ASN1_DECODER | |
| help | |
| This option chooses MbedTLS certificate library for ASN1 decoder. | |
| config ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| bool "Asymmetric public key crypto with MbedTLS certificate library" | |
| depends on MBEDTLS_LIB_X509 && ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| help | |
| This option chooses MbedTLS certificate library for asymmetric public | |
| key crypto algorithm. | |
| config RSA_PUBLIC_KEY_PARSER_MBEDTLS | |
| bool "RSA public key parser with MbedTLS certificate library" | |
| depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| select ASN1_DECODER_MBEDTLS | |
| help | |
| This option chooses MbedTLS certificate library for RSA public key | |
| parser. | |
| config X509_CERTIFICATE_PARSER_MBEDTLS | |
| bool "X.509 certificate parser with MbedTLS certificate library" | |
| depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| select ASN1_DECODER_MBEDTLS | |
| help | |
| This option chooses MbedTLS certificate library for X509 certificate | |
| parser. | |
| config PKCS7_MESSAGE_PARSER_MBEDTLS | |
| bool "PKCS#7 message parser with MbedTLS certificate library" | |
| depends on X509_CERTIFICATE_PARSER_MBEDTLS | |
| select ASN1_DECODER_MBEDTLS | |
| help | |
| This option chooses MbedTLS certificate library for PKCS7 message | |
| parser. | |
| config MSCODE_PARSER_MBEDTLS | |
| bool "MS authenticode parser with MbedTLS certificate library" | |
| depends on MBEDTLS_LIB_X509 && MSCODE_PARSER | |
| select ASN1_DECODER_MBEDTLS | |
| help | |
| This option chooses MbedTLS certificate library for MS authenticode | |
| parser. | |
| endif # MBEDTLS_LIB_X509 | |
| config MBEDTLS_LIB_TLS | |
| bool "MbedTLS TLS library" | |
| depends on RSA_PUBLIC_KEY_PARSER_MBEDTLS | |
| depends on X509_CERTIFICATE_PARSER_MBEDTLS | |
| depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| depends on ASN1_DECODER_MBEDTLS | |
| depends on MBEDTLS_LIB | |
| help | |
| Enable MbedTLS TLS library. Required for HTTPs support | |
| in wget | |
| endif # MBEDTLS_LIB | |
| # For SPL | |
| if SPL | |
| choice | |
| prompt "Crypto libraries (SPL)" | |
| default SPL_LEGACY_HASHING_AND_CRYPTO | |
| help | |
| Select crypto libraries in SPL. | |
| SPL_LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries, | |
| SPL_MBEDTLS_LIB for MbedTLS libraries. | |
| config SPL_LEGACY_HASHING_AND_CRYPTO | |
| bool "legacy crypto libraries" | |
| select SPL_LEGACY_HASHING | |
| select SPL_LEGACY_CRYPTO | |
| config SPL_MBEDTLS_LIB | |
| bool "MbedTLS libraries" | |
| select SPL_MBEDTLS_LIB_X509 | |
| endchoice | |
| if SPL_LEGACY_HASHING_AND_CRYPTO || SPL_MBEDTLS_LIB_HASHING_ALT | |
| config SPL_LEGACY_HASHING | |
| bool "Use U-Boot legacy hashing libraries (SPL)" | |
| select SPL_MD5_LEGACY if SPL_MD5 | |
| select SPL_SHA1_LEGACY if SPL_SHA1 | |
| select SPL_SHA256_LEGACY if SPL_SHA256 | |
| select SPL_SHA512_LEGACY if SPL_SHA512 | |
| select SPL_SHA384_LEGACY if SPL_SHA384 | |
| help | |
| Enable U-Boot legacy hashing libraries in SPL. | |
| if SPL_LEGACY_HASHING | |
| config SPL_SHA1_LEGACY | |
| bool "Enable SHA1 support with legacy crypto library (SPL)" | |
| depends on SPL_LEGACY_HASHING && SPL_SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with legacy crypto library in SPL. | |
| config SPL_SHA256_LEGACY | |
| bool "Enable SHA256 support with legacy crypto library (SPL)" | |
| depends on SPL_LEGACY_HASHING && SPL_SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with legacy crypto library in SPL. | |
| config SPL_SHA512_LEGACY | |
| bool "Enable SHA512 support with legacy crypto library (SPL)" | |
| depends on SPL_LEGACY_HASHING && SPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with legacy crypto library in SPL. | |
| config SPL_SHA384_LEGACY | |
| bool "Enable SHA384 support with legacy crypto library (SPL)" | |
| depends on SPL_LEGACY_HASHING && SPL_SHA384 | |
| select SPL_SHA512_LEGACY | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with legacy crypto library in SPL. | |
| config SPL_MD5_LEGACY | |
| bool "Enable MD5 support with legacy crypto library (SPL)" | |
| depends on SPL_LEGACY_HASHING && SPL_MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with legacy crypto library in SPL. | |
| endif # SPL_LEGACY_HASHING | |
| config SPL_LEGACY_CRYPTO | |
| bool "legacy certificate libraries (SPL)" | |
| depends on SPL_LEGACY_HASHING_AND_CRYPTO | |
| select SPL_ASN1_DECODER_LEGACY if SPL_ASN1_DECODER | |
| select SPL_ASYMMETRIC_PUBLIC_KEY_LEGACY if \ | |
| SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| select SPL_RSA_PUBLIC_KEY_PARSER_LEGACY if SPL_RSA_PUBLIC_KEY_PARSER | |
| help | |
| Enable legacy certificate libraries in SPL. | |
| if SPL_LEGACY_CRYPTO | |
| config SPL_ASN1_DECODER_LEGACY | |
| bool "ASN1 decoder with legacy certificate library (SPL)" | |
| depends on SPL_LEGACY_CRYPTO && SPL_ASN1_DECODER | |
| help | |
| This option chooses legacy certificate library for ASN1 decoder in | |
| SPL. | |
| config SPL_ASYMMETRIC_PUBLIC_KEY_LEGACY | |
| bool "Asymmetric public key crypto with legacy certificate library (SPL)" | |
| depends on SPL_LEGACY_CRYPTO && SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| help | |
| This option chooses legacy certificate library for asymmetric public | |
| key crypto algorithm in SPL. | |
| config SPL_RSA_PUBLIC_KEY_PARSER_LEGACY | |
| bool "RSA public key parser with legacy certificate library (SPL)" | |
| depends on SPL_ASYMMETRIC_PUBLIC_KEY_LEGACY | |
| select SPL_ASN1_DECODER_LEGACY | |
| help | |
| This option chooses legacy certificate library for RSA public key | |
| parser in SPL. | |
| endif # SPL_LEGACY_CRYPTO | |
| endif # SPL_LEGACY_HASHING_AND_CRYPTO || SPL_MBEDTLS_LIB_HASHING_ALT | |
| if SPL_MBEDTLS_LIB | |
| config SPL_MBEDTLS_LIB_HASHING_ALT | |
| bool "Replace MbedTLS native hashing with U-Boot legacy libraries (SPL)" | |
| depends on SPL_MBEDTLS_LIB && !SPL_MBEDTLS_LIB_CRYPTO | |
| select SPL_LEGACY_HASHING | |
| default y if SPL_MBEDTLS_LIB && !SPL_MBEDTLS_LIB_CRYPTO | |
| help | |
| Enable MbedTLS hashing alternatives and replace them with legacy hashing | |
| libraries in SPL. | |
| This allows user to use U-Boot legacy hashing algorithms together with | |
| other MbedTLS modules. | |
| Mutually incompatible with SPL_MBEDTLS_LIB_CRYPTO. | |
| config SPL_MBEDTLS_LIB_CRYPTO | |
| bool "Use MbedTLS native crypto libraries for hashing (SPL)" | |
| default y if SPL_MBEDTLS_LIB | |
| select SPL_MD5_MBEDTLS if SPL_MD5 | |
| select SPL_SHA1_MBEDTLS if SPL_SHA1 | |
| select SPL_SHA256_MBEDTLS if SPL_SHA256 | |
| select SPL_SHA512_MBEDTLS if SPL_SHA512 | |
| select SPL_SHA384_MBEDTLS if SPL_SHA384 | |
| help | |
| Enable MbedTLS native crypto libraries in SPL. | |
| if SPL_MBEDTLS_LIB_CRYPTO | |
| config SPL_SHA1_MBEDTLS | |
| bool "Enable SHA1 support with MbedTLS crypto library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with MbedTLS crypto library in SPL. | |
| config SPL_SHA256_MBEDTLS | |
| bool "Enable SHA256 support with MbedTLS crypto library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with MbedTLS crypto library in SPL. | |
| config SPL_SHA512_MBEDTLS | |
| bool "Enable SHA512 support with MbedTLS crypto library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with MbedTLS crypto library in SPL. | |
| config SPL_SHA384_MBEDTLS | |
| bool "Enable SHA384 support with MbedTLS crypto library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA384 | |
| select SPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with MbedTLS crypto library in SPL. | |
| config SPL_MD5_MBEDTLS | |
| bool "Enable MD5 support with MbedTLS crypto library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with MbedTLS crypto library in SPL. | |
| config SPL_HKDF_MBEDTLS | |
| bool "Enable HKDF support with MbedTLS crypto library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_CRYPTO | |
| help | |
| This option enables support of key derivation using HKDF algorithm | |
| with MbedTLS crypto library in SPL. | |
| endif # SPL_MBEDTLS_LIB_CRYPTO | |
| config SPL_MBEDTLS_LIB_X509 | |
| bool "MbedTLS certificate libraries (SPL)" | |
| select SPL_ASN1_DECODER_MBEDTLS if SPL_ASN1_DECODER | |
| select SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS if \ | |
| SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| select SPL_RSA_PUBLIC_KEY_PARSER_MBEDTLS if SPL_RSA_PUBLIC_KEY_PARSER | |
| help | |
| Enable MbedTLS certificate libraries in SPL. | |
| if SPL_MBEDTLS_LIB_X509 | |
| config SPL_ASN1_DECODER_MBEDTLS | |
| bool "ASN1 decoder with MbedTLS certificate library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_X509 && SPL_ASN1_DECODER | |
| help | |
| This option chooses MbedTLS certificate library for ASN1 decoder in | |
| SPL. | |
| config SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| bool "Asymmetric public key crypto with MbedTLS certificate library (SPL)" | |
| depends on SPL_MBEDTLS_LIB_X509 && SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE | |
| help | |
| This option chooses MbedTLS certificate library for asymmetric public | |
| key crypto algorithm in SPL. | |
| config SPL_RSA_PUBLIC_KEY_PARSER_MBEDTLS | |
| bool "RSA public key parser with MbedTLS certificate library (SPL)" | |
| depends on SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| select SPL_ASN1_DECODER_MBEDTLS | |
| help | |
| This option chooses MbedTLS certificate library for RSA public key | |
| parser in SPL. | |
| endif # SPL_MBEDTLS_LIB_X509 | |
| config SPL_MBEDTLS_LIB_TLS | |
| bool "MbedTLS TLS library (SPL)" | |
| depends on SPL_RSA_PUBLIC_KEY_PARSER_MBEDTLS | |
| depends on SPL_X509_CERTIFICATE_PARSER_MBEDTLS | |
| depends on SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS | |
| depends on SPL_ASN1_DECODER_MBEDTLS | |
| depends on SPL_MBEDTLS_LIB | |
| help | |
| Enable MbedTLS TLS library in SPL. Required for HTTPs support | |
| in wget | |
| endif # SPL_MBEDTLS_LIB | |
| endif # SPL | |
| # For TPL | |
| if TPL | |
| choice | |
| prompt "Crypto libraries (TPL)" | |
| default TPL_LEGACY_HASHING_AND_CRYPTO | |
| help | |
| Select crypto libraries in TPL. | |
| TPL_LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries, | |
| TPL_MBEDTLS_LIB for MbedTLS libraries. | |
| config TPL_LEGACY_HASHING_AND_CRYPTO | |
| bool "legacy crypto libraries" | |
| select TPL_LEGACY_HASHING | |
| select TPL_LEGACY_CRYPTO | |
| config TPL_MBEDTLS_LIB | |
| bool "MbedTLS libraries" | |
| endchoice | |
| if TPL_LEGACY_HASHING_AND_CRYPTO || TPL_MBEDTLS_LIB_HASHING_ALT | |
| config TPL_LEGACY_HASHING | |
| bool "Use U-Boot legacy hashing libraries (TPL)" | |
| select TPL_MD5_LEGACY if TPL_MD5 | |
| select TPL_SHA1_LEGACY if TPL_SHA1 | |
| select TPL_SHA256_LEGACY if TPL_SHA256 | |
| select TPL_SHA512_LEGACY if TPL_SHA512 | |
| select TPL_SHA384_LEGACY if TPL_SHA384 | |
| help | |
| Enable U-Boot legacy hashing libraries in TPL. | |
| if TPL_LEGACY_HASHING | |
| config TPL_SHA1_LEGACY | |
| bool "Enable SHA1 support with legacy crypto library (TPL)" | |
| depends on TPL_LEGACY_HASHING && TPL_SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with legacy crypto library in TPL. | |
| config TPL_SHA256_LEGACY | |
| bool "Enable SHA256 support with legacy crypto library (TPL)" | |
| depends on TPL_LEGACY_HASHING && TPL_SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with legacy crypto library in TPL. | |
| config TPL_SHA512_LEGACY | |
| bool "Enable SHA512 support with legacy crypto library (TPL)" | |
| depends on TPL_LEGACY_HASHING && TPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with legacy crypto library in TPL. | |
| config TPL_SHA384_LEGACY | |
| bool "Enable SHA384 support with legacy crypto library (TPL)" | |
| depends on TPL_LEGACY_HASHING && TPL_SHA384 | |
| select TPL_SHA512_LEGACY | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with legacy crypto library in TPL. | |
| config TPL_MD5_LEGACY | |
| bool "Enable MD5 support with legacy crypto library (TPL)" | |
| depends on TPL_LEGACY_HASHING && TPL_MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with legacy crypto library in TPL. | |
| endif # TPL_LEGACY_HASHING | |
| endif # TPL_LEGACY_HASHING_AND_CRYPTO || TPL_MBEDTLS_LIB_HASHING_ALT | |
| if TPL_MBEDTLS_LIB | |
| config TPL_MBEDTLS_LIB_HASHING_ALT | |
| bool "Replace MbedTLS native hashing with U-Boot legacy libraries (TPL)" | |
| depends on TPL_MBEDTLS_LIB && !TPL_MBEDTLS_LIB_CRYPTO | |
| select TPL_LEGACY_HASHING | |
| default y if TPL_MBEDTLS_LIB && !TPL_MBEDTLS_LIB_CRYPTO | |
| help | |
| Enable MbedTLS hashing alternatives and replace them with legacy hashing | |
| libraries in TPL. | |
| This allows user to use U-Boot legacy hashing algorithms together with | |
| other MbedTLS modules. | |
| Mutually incompatible with TPL_MBEDTLS_LIB_CRYPTO. | |
| config TPL_MBEDTLS_LIB_CRYPTO | |
| bool "Use MbedTLS native crypto libraries for hashing (TPL)" | |
| default y if TPL_MBEDTLS_LIB | |
| select TPL_MD5_MBEDTLS if TPL_MD5 | |
| select TPL_SHA1_MBEDTLS if TPL_SHA1 | |
| select TPL_SHA256_MBEDTLS if TPL_SHA256 | |
| select TPL_SHA512_MBEDTLS if TPL_SHA512 | |
| select TPL_SHA384_MBEDTLS if TPL_SHA384 | |
| help | |
| Enable MbedTLS native crypto libraries in TPL. | |
| if TPL_MBEDTLS_LIB_CRYPTO | |
| config TPL_SHA1_MBEDTLS | |
| bool "Enable SHA1 support with MbedTLS crypto library (TPL)" | |
| depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with MbedTLS crypto library in TPL. | |
| config TPL_SHA256_MBEDTLS | |
| bool "Enable SHA256 support with MbedTLS crypto library (TPL)" | |
| depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with MbedTLS crypto library in TPL. | |
| config TPL_SHA512_MBEDTLS | |
| bool "Enable SHA512 support with MbedTLS crypto library (TPL)" | |
| depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with MbedTLS crypto library in TPL. | |
| config TPL_SHA384_MBEDTLS | |
| bool "Enable SHA384 support with MbedTLS crypto library (TPL)" | |
| depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA384 | |
| select TPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with MbedTLS crypto library in TPL. | |
| config TPL_MD5_MBEDTLS | |
| bool "Enable MD5 support with MbedTLS crypto library (TPL)" | |
| depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with MbedTLS crypto library in TPL. | |
| config TPL_HKDF_MBEDTLS | |
| bool "Enable HKDF support with MbedTLS crypto library (TPL)" | |
| depends on TPL_MBEDTLS_LIB_CRYPTO | |
| help | |
| This option enables support of key derivation using HKDF algorithm | |
| with MbedTLS crypto library in TPL. | |
| endif # TPL_MBEDTLS_LIB_CRYPTO | |
| endif # TPL_MBEDTLS_LIB | |
| endif # TPL | |
| # For VPL | |
| if VPL | |
| choice | |
| prompt "Crypto libraries (VPL)" | |
| default VPL_LEGACY_HASHING_AND_CRYPTO | |
| help | |
| Select crypto libraries in VPL. | |
| VPL_LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries, | |
| VPL_MBEDTLS_LIB for MbedTLS libraries. | |
| config VPL_LEGACY_HASHING_AND_CRYPTO | |
| bool "legacy crypto libraries" | |
| select VPL_LEGACY_HASHING | |
| config VPL_MBEDTLS_LIB | |
| bool "MbedTLS libraries" | |
| endchoice | |
| if VPL_LEGACY_HASHING_AND_CRYPTO || VPL_MBEDTLS_LIB_HASHING_ALT | |
| config VPL_LEGACY_HASHING | |
| bool "Use U-Boot legacy hashing libraries (VPL)" | |
| select VPL_MD5_LEGACY if VPL_MD5 | |
| select VPL_SHA1_LEGACY if VPL_SHA1 | |
| select VPL_SHA256_LEGACY if VPL_SHA256 | |
| select VPL_SHA512_LEGACY if VPL_SHA512 | |
| select VPL_SHA384_LEGACY if VPL_SHA384 | |
| help | |
| Enable U-Boot legacy hashing libraries in VPL. | |
| if VPL_LEGACY_HASHING | |
| config VPL_SHA1_LEGACY | |
| bool "Enable SHA1 support with legacy crypto library (VPL)" | |
| depends on VPL_LEGACY_HASHING && VPL_SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with legacy crypto library in VPL. | |
| config VPL_SHA256_LEGACY | |
| bool "Enable SHA256 support with legacy crypto library (VPL)" | |
| depends on VPL_LEGACY_HASHING && VPL_SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with legacy crypto library in VPL. | |
| config VPL_SHA512_LEGACY | |
| bool "Enable SHA512 support with legacy crypto library (VPL)" | |
| depends on VPL_LEGACY_HASHING && VPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with legacy crypto library in VPL. | |
| config VPL_SHA384_LEGACY | |
| bool "Enable SHA384 support with legacy crypto library (VPL)" | |
| depends on VPL_LEGACY_HASHING && VPL_SHA384 | |
| select VPL_SHA512_LEGACY | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with legacy crypto library in VPL. | |
| config VPL_MD5_LEGACY | |
| bool "Enable MD5 support with legacy crypto library (VPL)" | |
| depends on VPL_LEGACY_HASHING && VPL_MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with legacy crypto library in VPL. | |
| endif # VPL_LEGACY_HASHING | |
| endif # VPL_LEGACY_HASHING_AND_CRYPTO || VPL_MBEDTLS_LIB_HASHING_ALT | |
| if VPL_MBEDTLS_LIB | |
| config VPL_MBEDTLS_LIB_HASHING_ALT | |
| bool "Replace MbedTLS native hashing with U-Boot legacy libraries (VPL)" | |
| depends on VPL_MBEDTLS_LIB && !VPL_MBEDTLS_LIB_CRYPTO | |
| select VPL_LEGACY_HASHING | |
| default y if VPL_MBEDTLS_LIB && !VPL_MBEDTLS_LIB_CRYPTO | |
| help | |
| Enable MbedTLS hashing alternatives and replace them with legacy hashing | |
| libraries in VPL. | |
| This allows user to use U-Boot legacy hashing algorithms together with | |
| other MbedTLS modules. | |
| Mutually incompatible with VPL_MBEDTLS_LIB_CRYPTO. | |
| config VPL_MBEDTLS_LIB_CRYPTO | |
| bool "Use MbedTLS native crypto libraries for hashing (VPL)" | |
| default y if VPL_MBEDTLS_LIB | |
| select VPL_MD5_MBEDTLS if VPL_MD5 | |
| select VPL_SHA1_MBEDTLS if VPL_SHA1 | |
| select VPL_SHA256_MBEDTLS if VPL_SHA256 | |
| select VPL_SHA512_MBEDTLS if VPL_SHA512 | |
| select VPL_SHA384_MBEDTLS if VPL_SHA384 | |
| help | |
| Enable MbedTLS native crypto libraries in VPL. | |
| if VPL_MBEDTLS_LIB_CRYPTO | |
| config VPL_SHA1_MBEDTLS | |
| bool "Enable SHA1 support with MbedTLS crypto library (VPL)" | |
| depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA1 | |
| help | |
| This option enables support of hashing using SHA1 algorithm | |
| with MbedTLS crypto library in VPL. | |
| config VPL_SHA256_MBEDTLS | |
| bool "Enable SHA256 support with MbedTLS crypto library (VPL)" | |
| depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA256 | |
| help | |
| This option enables support of hashing using SHA256 algorithm | |
| with MbedTLS crypto library in VPL. | |
| config VPL_SHA512_MBEDTLS | |
| bool "Enable SHA512 support with MbedTLS crypto library (VPL)" | |
| depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA512 algorithm | |
| with MbedTLS crypto library in VPL. | |
| config VPL_SHA384_MBEDTLS | |
| bool "Enable SHA384 support with MbedTLS crypto library (VPL)" | |
| depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA384 | |
| select VPL_SHA512 | |
| help | |
| This option enables support of hashing using SHA384 algorithm | |
| with MbedTLS crypto library in VPL. | |
| config VPL_MD5_MBEDTLS | |
| bool "Enable MD5 support with MbedTLS crypto library (VPL)" | |
| depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_MD5 | |
| help | |
| This option enables support of hashing using MD5 algorithm | |
| with MbedTLS crypto library in VPL. | |
| config VPL_HKDF_MBEDTLS | |
| bool "Enable HKDF support with MbedTLS crypto library (VPL)" | |
| depends on VPL_MBEDTLS_LIB_CRYPTO | |
| help | |
| This option enables support of key derivation using HKDF algorithm | |
| with MbedTLS crypto library in VPL. | |
| endif # VPL_MBEDTLS_LIB_CRYPTO | |
| endif # VPL_MBEDTLS_LIB | |
| endif # VPL |