1#-------------------------------------------------------------------------------
2# Copyright (c) 2023, Arm Limited. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6#-------------------------------------------------------------------------------
7
8menuconfig TFM_PARTITION_PROTECTED_STORAGE
9    bool "Protected Storage"
10    depends on TFM_PARTITION_PLATFORM && TFM_PARTITION_CRYPTO
11    default n
12
13if TFM_PARTITION_PROTECTED_STORAGE
14
15config PS_ENCRYPTION
16    bool "PS encryption"
17    default y
18    help
19      Enable encryption option to encrypt the protected storage data.
20
21config PS_CRYPTO_AEAD_ALG
22    string "PS encryption AEAD algorithm"
23    default "PSA_ALG_GCM"
24    help
25      Indicates the AEAD algorithm to use for authenticated encryption in
26      Protected Storage.
27
28      Note: For GCM/CCM it is essential that IV doesn't get repeated. If this
29      flag is set to PSA_ALG_GCM or PSA_ALG_CCM, PS_ROLLBACK_PROTECTION must be
30      enabled to protect against IV rollback.
31
32endif
33