/**
 * \file tf-psa-crypto/private/crypto_adjust_config_derived.h
 * \brief Adjust PSA configuration by defining internal symbols
 *
 * This is an internal header. Do not include it directly.
 */
/*
 *  Copyright The Mbed TLS Contributors
 *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
 */

#ifndef TF_PSA_CRYPTO_PRIVATE_CRYPTO_ADJUST_CONFIG_DERIVED_H
#define TF_PSA_CRYPTO_PRIVATE_CRYPTO_ADJUST_CONFIG_DERIVED_H

/* The number of "true" entropy sources (excluding NV seed).
 * This must be consistent with mbedtls_entropy_init() in entropy.c.
 */
/* Define auxiliary macros, because in standard C, defined(xxx) is only
 * allowed directly on an #if or #elif line, not in recursive expansion. */
#if defined(MBEDTLS_PSA_BUILTIN_GET_ENTROPY)
#define MBEDTLS_PSA_BUILTIN_GET_ENTROPY_DEFINED 1
#else
#define MBEDTLS_PSA_BUILTIN_GET_ENTROPY_DEFINED 0
#endif
#if defined(MBEDTLS_PSA_DRIVER_GET_ENTROPY)
#define MBEDTLS_PSA_DRIVER_GET_ENTROPY_DEFINED 1
#else
#define MBEDTLS_PSA_DRIVER_GET_ENTROPY_DEFINED 0
#endif

#define MBEDTLS_ENTROPY_TRUE_SOURCES ( \
        MBEDTLS_PSA_BUILTIN_GET_ENTROPY_DEFINED + \
        MBEDTLS_PSA_DRIVER_GET_ENTROPY_DEFINED + \
        0)

/* Whether there is at least one entropy source for the entropy module.
 *
 * Note that when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG is enabled, the entropy
 * module is unused and the configuration will typically not include any
 * entropy source, so this macro will typically remain undefined.
 */
#if defined(MBEDTLS_ENTROPY_NV_SEED)
#define MBEDTLS_ENTROPY_HAVE_SOURCES (MBEDTLS_ENTROPY_TRUE_SOURCES + 1)
#elif MBEDTLS_ENTROPY_TRUE_SOURCES != 0
#define MBEDTLS_ENTROPY_HAVE_SOURCES MBEDTLS_ENTROPY_TRUE_SOURCES
#else
#undef MBEDTLS_ENTROPY_HAVE_SOURCES
#endif

/* Test function dependencies can only check with defined(),
 * not other preprocessor expressions. */
#if MBEDTLS_ENTROPY_TRUE_SOURCES > 0
#define MBEDTLS_ENTROPY_HAVE_TRUE_SOURCES
#else
#undef MBEDTLS_ENTROPY_HAVE_TRUE_SOURCES
#endif

#if defined(PSA_WANT_ALG_ECDSA) || defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA)
#define PSA_HAVE_ALG_SOME_ECDSA
#endif

#if defined(PSA_HAVE_ALG_SOME_ECDSA) && defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC)
#define PSA_HAVE_ALG_ECDSA_SIGN
#endif

#if defined(PSA_HAVE_ALG_SOME_ECDSA) && defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
#define PSA_HAVE_ALG_ECDSA_VERIFY
#endif

#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) && defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC)
#define PSA_HAVE_ALG_RSA_PKCS1V15_SIGN
#endif

#if defined(PSA_WANT_ALG_RSA_PSS) && defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC)
#define PSA_HAVE_ALG_RSA_PSS_SIGN
#endif

#if defined(PSA_HAVE_ALG_RSA_PKCS1V15_SIGN) || defined(PSA_HAVE_ALG_RSA_PSS_SIGN)
#define PSA_HAVE_ALG_SOME_RSA_SIGN
#endif

#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) && defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
#define PSA_HAVE_ALG_RSA_PKCS1V15_VERIFY
#endif

#if defined(PSA_WANT_ALG_RSA_PSS) && defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
#define PSA_HAVE_ALG_RSA_PSS_VERIFY
#endif

#if defined(PSA_HAVE_ALG_RSA_PKCS1V15_VERIFY) || defined(PSA_HAVE_ALG_RSA_PSS_VERIFY)
#define PSA_HAVE_ALG_SOME_RSA_VERIFY
#endif

#if defined(PSA_HAVE_ALG_SOME_RSA_SIGN) || defined(PSA_HAVE_ALG_SOME_RSA_VERIFY)
#define PSA_HAVE_ALG_SOME_RSA_SIGN_OR_VERIFY
#endif

#if defined(PSA_WANT_ALG_JPAKE)
#define PSA_WANT_ALG_SOME_PAKE 1
#endif

/*
 * If the RNG strength is not explicitly defined in the configuration, define
 * it here to its default value. This ensures it is available for use in
 * adjusting the configuration of RNG internal modules in
 * crypto_adjust_config_support.h.
 */
#if !defined(MBEDTLS_PSA_CRYPTO_RNG_STRENGTH)
#define MBEDTLS_PSA_CRYPTO_RNG_STRENGTH 256
#endif

#if !defined(MBEDTLS_PSA_CRYPTO_RNG_HASH)

#if defined(PSA_WANT_ALG_SHA_256)
#define MBEDTLS_PSA_CRYPTO_RNG_HASH PSA_ALG_SHA_256
#elif defined(PSA_WANT_ALG_SHA_512)
#define MBEDTLS_PSA_CRYPTO_RNG_HASH PSA_ALG_SHA_512
#else
#if (defined(MBEDTLS_PSA_CRYPTO_C) && !defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG))
#error "Not able to define MBEDTLS_PSA_CRYPTO_RNG_HASH for the entropy module."
#endif
#if defined(MBEDTLS_HMAC_DRBG_C)
#error "Not able to define MBEDTLS_PSA_CRYPTO_RNG_HASH for HMAC_DRBG."
#endif
#endif /* !PSA_WANT_ALG_SHA_256, !PSA_WANT_ALG_SHA_512 */

#endif /* !MBEDTLS_PSA_CRYPTO_RNG_HASH */

/* A macro used by Mbed TLS. */
#if defined(PSA_WANT_ALG_GCM) || defined(PSA_WANT_ALG_CCM) || \
    defined(PSA_WANT_ALG_CHACHA20_POLY1305)
#define MBEDTLS_SSL_HAVE_AEAD
#endif

#endif /* TF_PSA_CRYPTO_PRIVATE_CRYPTO_ADJUST_CONFIG_DERIVED_H */