mirror of
				https://github.com/Mbed-TLS/mbedtls.git
				synced 2025-10-30 10:45:34 +03:00 
			
		
		
		
	This makes it easier to ensure that crypto_spe.h is included everywhere it needs to be, and that it's included early enough to do its job (it must be included before any mention of psa_xxx() functions with external linkage, because it defines macros to rename these functions). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
		
			
				
	
	
		
			112 lines
		
	
	
		
			3.7 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			112 lines
		
	
	
		
			3.7 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /**
 | |
|  * \file psa/crypto_platform.h
 | |
|  *
 | |
|  * \brief PSA cryptography module: Mbed TLS platform definitions
 | |
|  *
 | |
|  * \note This file may not be included directly. Applications must
 | |
|  * include psa/crypto.h.
 | |
|  *
 | |
|  * This file contains platform-dependent type definitions.
 | |
|  *
 | |
|  * In implementations with isolation between the application and the
 | |
|  * cryptography module, implementers should take care to ensure that
 | |
|  * the definitions that are exposed to applications match what the
 | |
|  * module implements.
 | |
|  */
 | |
| /*
 | |
|  *  Copyright The Mbed TLS Contributors
 | |
|  *  SPDX-License-Identifier: Apache-2.0
 | |
|  *
 | |
|  *  Licensed under the Apache License, Version 2.0 (the "License"); you may
 | |
|  *  not use this file except in compliance with the License.
 | |
|  *  You may obtain a copy of the License at
 | |
|  *
 | |
|  *  http://www.apache.org/licenses/LICENSE-2.0
 | |
|  *
 | |
|  *  Unless required by applicable law or agreed to in writing, software
 | |
|  *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 | |
|  *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | |
|  *  See the License for the specific language governing permissions and
 | |
|  *  limitations under the License.
 | |
|  */
 | |
| 
 | |
| #ifndef PSA_CRYPTO_PLATFORM_H
 | |
| #define PSA_CRYPTO_PLATFORM_H
 | |
| 
 | |
| /* Include the Mbed TLS configuration file, the way Mbed TLS does it
 | |
|  * in each of its header files. */
 | |
| #if !defined(MBEDTLS_CONFIG_FILE)
 | |
| #include "mbedtls/config.h"
 | |
| #else
 | |
| #include MBEDTLS_CONFIG_FILE
 | |
| #endif
 | |
| 
 | |
| /* Translate between classic MBEDTLS_xxx feature symbols and PSA_xxx
 | |
|  * feature symbols. */
 | |
| #include "mbedtls/config_psa.h"
 | |
| 
 | |
| /* PSA requires several types which C99 provides in stdint.h. */
 | |
| #include <stdint.h>
 | |
| 
 | |
| #if ( defined(__ARMCC_VERSION) || defined(_MSC_VER) ) && \
 | |
|     !defined(inline) && !defined(__cplusplus)
 | |
| #define inline __inline
 | |
| #endif
 | |
| 
 | |
| #if defined(MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER)
 | |
| 
 | |
| /* Building for the PSA Crypto service on a PSA platform, a key owner is a PSA
 | |
|  * partition identifier.
 | |
|  *
 | |
|  * The function psa_its_identifier_of_slot() in psa_crypto_storage.c that
 | |
|  * translates a key identifier to a key storage file name assumes that
 | |
|  * mbedtls_key_owner_id_t is an 32 bits integer. This function thus needs
 | |
|  * reworking if mbedtls_key_owner_id_t is not defined as a 32 bits integer
 | |
|  * here anymore.
 | |
|  */
 | |
| typedef int32_t mbedtls_key_owner_id_t;
 | |
| 
 | |
| /** Compare two key owner identifiers.
 | |
|  *
 | |
|  * \param id1 First key owner identifier.
 | |
|  * \param id2 Second key owner identifier.
 | |
|  *
 | |
|  * \return Non-zero if the two key owner identifiers are equal, zero otherwise.
 | |
|  */
 | |
| static inline int mbedtls_key_owner_id_equal( mbedtls_key_owner_id_t id1,
 | |
|                                               mbedtls_key_owner_id_t id2 )
 | |
| {
 | |
|     return( id1 == id2 );
 | |
| }
 | |
| 
 | |
| #endif /* MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER */
 | |
| 
 | |
| /*
 | |
|  * When MBEDTLS_PSA_CRYPTO_SPM is defined, the code is being built for SPM
 | |
|  * (Secure Partition Manager) integration which separates the code into two
 | |
|  * parts: NSPE (Non-Secure Processing Environment) and SPE (Secure Processing
 | |
|  * Environment). When building for the SPE, an additional header file should be
 | |
|  * included.
 | |
|  */
 | |
| #if defined(MBEDTLS_PSA_CRYPTO_SPM)
 | |
| #define PSA_CRYPTO_SECURE 1
 | |
| #include "crypto_spe.h"
 | |
| #endif // MBEDTLS_PSA_CRYPTO_SPM
 | |
| 
 | |
| #if defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
 | |
| /** The type of the context passed to mbedtls_psa_external_get_random().
 | |
|  *
 | |
|  * Mbed TLS initializes the context to all-bits-zero before calling
 | |
|  * mbedtls_psa_external_get_random() for the first time.
 | |
|  *
 | |
|  * The definition of this type in the Mbed TLS source code is for
 | |
|  * demonstration purposes. Implementers of mbedtls_psa_external_get_random()
 | |
|  * are expected to replace it with a custom definition.
 | |
|  */
 | |
| typedef struct {
 | |
|     uintptr_t opaque[2];
 | |
| } mbedtls_psa_external_random_context_t;
 | |
| #endif /* MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG */
 | |
| 
 | |
| #endif /* PSA_CRYPTO_PLATFORM_H */
 |