u-boot.git/lib/mbedtls/Makefile, branch master

Kbuild: Always use $(PHASE_)

2025-04-11T18:16:44+00:00

It is confusing to have both "$(PHASE_)" and "$(XPL_)" be used in our
Makefiles as part of the macros to determine when to do something in our
Makefiles based on what phase of the build we are in. For consistency,
bring this down to a single macro and use "$(PHASE_)" only.

Signed-off-by: Tom Rini

mbedtls: refactor mbedtls build for XPL

2025-02-27T18:11:02+00:00

Refactor the entire kconfig page for mbedtls, adapt mbedtls makefile
and default config file using 'XPL_', in order to have independent
mbedtls kconfig options in U-Boot Proper, SPL, TPL and VPL.
User can choose legacy or mbedtls libraries for them independently.

Set mbedtls native hashing libraries as default when MBEDTLS_LIB,
SPL_MBEDTLS_LIB, TPL_MBEDTLS_LIB or VPL_MBEDTLS_LIB is selected.

If users prefer using U-Boot legacy hashing libraries, please select
MBEDTLS_LIB_HASHING_ALT, SPL_MBEDTLS_LIB_HASHING_ALT,
TPL_MBEDTLS_LIB_HASHING_ALT or VPL_MBEDTLS_LIB_HASHING_ALT for U-Boot
Proper, SPL, TPL and VPL respectively.

Moreover, rename a few kconfig options and update their descriptions to
improve the consistency of terminology.

Signed-off-by: Raymond Mao 
Acked-by: Ilias Apalodimas

mbedtls: enable support of hkdf

2025-01-18T23:12:47+00:00

Adds the support of key derivation using
the scheme hkdf.

Reviewed-by: Raymond Mao 
Signed-off-by: Philippe Reynes

mbedtls: Enable TLS 1.2 support

2024-11-13T01:09:52+00:00

Since lwIP and mbedTLS have been merged we can tweak the config options
and enable TLS1.2 support. Add RSA and ECDSA by default and enable
enough block cipher modes of operation to be comatible with modern
TLS requirements and webservers

Reviewed-by: Raymond Mao 
Acked-by: Jerome Forissier 
Signed-off-by: Ilias Apalodimas

asn1_decoder: add build options for ASN1 decoder

2024-10-14T23:58:51+00:00

When building with MbedTLS, we are using MbedTLS to decode ASN1 data
for x509, pkcs7 and mscode.
Introduce _LEGACY and _MBEDTLS kconfigs for ASN1 decoder legacy and
MbedTLS implementations respectively.

Signed-off-by: Raymond Mao 
Reviewed-by: Ilias Apalodimas

mbedtls: add RSA helper layer on MbedTLS

2024-10-14T23:58:50+00:00

Add RSA helper layer on top on MbedTLS PK and RSA library.
Introduce _LEGACY and _MBEDTLS kconfigs for RSA helper legacy and
MbedTLS implementations respectively.

Signed-off-by: Raymond Mao 
Acked-by: Ilias Apalodimas

mbedtls: add MSCode parser porting layer

2024-10-14T23:58:48+00:00

Add porting layer for MSCode on top of MbedTLS ASN1 library.
Introduce _MBEDTLS kconfigs for MSCode MbedTLS implementation.

Signed-off-by: Raymond Mao 
Acked-by: Ilias Apalodimas

mbedtls: add PKCS7 parser porting layer

2024-10-14T23:58:46+00:00

Add porting layer for PKCS7 parser on top of MbedTLS PKCS7 library.
Introduce _LEGACY and _MBEDTLS kconfigs for PKCS7 parser legacy and
MbedTLS implementations respectively.

Signed-off-by: Raymond Mao 
Reviewed-by: Ilias Apalodimas

mbedtls: add X509 cert parser porting layer

2024-10-14T23:58:44+00:00

Add porting layer for X509 cert parser on top of MbedTLS X509
library.
Introduce _LEGACY and _MBEDTLS kconfigs for X509 cert parser legacy
and MbedTLS implementations respectively.

Signed-off-by: Raymond Mao

mbedtls: add public key porting layer

2024-10-14T23:58:43+00:00

Add porting layer for public key on top of MbedTLS X509 library.
Introduce _LEGACY and _MBEDTLS kconfigs for public key legacy and
MbedTLS implementations respectively.

Signed-off-by: Raymond Mao 
Reviewed-by: Ilias Apalodimas