1 /**
2  * \file check_config.h
3  *
4  * \brief Consistency checks for configuration options
5  *
6  * This is an internal header. Do not include it directly.
7  *
8  * This header is included automatically by all public Mbed TLS headers
9  * (via mbedtls/build_info.h). Do not include it directly in a configuration
10  * file such as mbedtls/mbedtls_config.h or #MBEDTLS_USER_CONFIG_FILE!
11  * It would run at the wrong time due to missing derived symbols.
12  */
13 /*
14  *  Copyright The Mbed TLS Contributors
15  *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
16  */
17 
18 #ifndef MBEDTLS_CHECK_CONFIG_H
19 #define MBEDTLS_CHECK_CONFIG_H
20 
21 /* *INDENT-OFF* */
22 
23 #if !defined(MBEDTLS_CONFIG_IS_FINALIZED)
24 #warning "Do not include mbedtls/check_config.h manually! " \
25          "This may cause spurious errors. " \
26          "It is included automatically at the right point since Mbed TLS 3.0."
27 #endif /* !MBEDTLS_CONFIG_IS_FINALIZED */
28 
29 /*
30  * We assume CHAR_BIT is 8 in many places. In practice, this is true on our
31  * target platforms, so not an issue, but let's just be extra sure.
32  */
33 #include <limits.h>
34 #if CHAR_BIT != 8
35 #error "Mbed TLS requires a platform with 8-bit chars"
36 #endif
37 
38 #include <stdint.h>
39 
40 #if defined(__MINGW32__) || (defined(_MSC_VER) && _MSC_VER <= 1900)
41 #if !defined(MBEDTLS_PLATFORM_C)
42 #error "MBEDTLS_PLATFORM_C is required on Windows"
43 #endif
44 /* See auto-enabling SNPRINTF_ALT and VSNPRINTF_ALT
45  * in * config_adjust_legacy_crypto.h */
46 #endif /* _MINGW32__ || (_MSC_VER && (_MSC_VER <= 1900)) */
47 
48 #if defined(TARGET_LIKE_MBED) && defined(MBEDTLS_NET_C)
49 #error "The NET module is not available for mbed OS - please use the network functions provided by Mbed OS"
50 #endif
51 
52 #if defined(MBEDTLS_DEPRECATED_WARNING) && \
53     !defined(__GNUC__) && !defined(__clang__)
54 #error "MBEDTLS_DEPRECATED_WARNING only works with GCC and Clang"
55 #endif
56 
57 #if defined(MBEDTLS_HAVE_TIME_DATE) && !defined(MBEDTLS_HAVE_TIME)
58 #error "MBEDTLS_HAVE_TIME_DATE without MBEDTLS_HAVE_TIME does not make sense"
59 #endif
60 
61 /* Limitations on ECC key types acceleration: if we have any of `PUBLIC_KEY`,
62  * `KEY_PAIR_BASIC`, `KEY_PAIR_IMPORT`, `KEY_PAIR_EXPORT` then we must have
63  * all 4 of them.
64  */
65 #if defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \
66     defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
67     defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
68     defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
69 #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \
70     !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
71     !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
72     !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT)
73 #error "Unsupported partial support for ECC key type acceleration, see docs/driver-only-builds.md"
74 #endif /* not all of public, basic, import, export */
75 #endif /* one of public, basic, import, export */
76 
77 /* Limitations on ECC curves acceleration: partial curve acceleration is only
78  * supported with crypto excluding PK, X.509 or TLS.
79  * Note: no need to check X.509 as it depends on PK. */
80 #if defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256) || \
81     defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384) || \
82     defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512) || \
83     defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255) || \
84     defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448) || \
85     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192) || \
86     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224) || \
87     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256) || \
88     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192) || \
89     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224) || \
90     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) || \
91     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384) || \
92     defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521)
93 #if defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES)
94 #if defined(MBEDTLS_PK_C) || \
95     defined(MBEDTLS_SSL_TLS_C)
96 #error "Unsupported partial support for ECC curves acceleration, see docs/driver-only-builds.md"
97 #endif /* modules beyond what's supported */
98 #endif /* not all curves accelerated */
99 #endif /* some curve accelerated */
100 
101 #if defined(MBEDTLS_CTR_DRBG_C) && !(defined(MBEDTLS_AES_C) || \
102     (defined(MBEDTLS_PSA_CRYPTO_CLIENT) && defined(PSA_WANT_KEY_TYPE_AES) && \
103     defined(PSA_WANT_ALG_ECB_NO_PADDING)))
104 #error "MBEDTLS_CTR_DRBG_C defined, but not all prerequisites"
105 #endif
106 
107 #if defined(MBEDTLS_DHM_C) && !defined(MBEDTLS_BIGNUM_C)
108 #error "MBEDTLS_DHM_C defined, but not all prerequisites"
109 #endif
110 
111 #if defined(MBEDTLS_CMAC_C) && \
112     ( !defined(MBEDTLS_CIPHER_C ) || ( !defined(MBEDTLS_AES_C) && !defined(MBEDTLS_DES_C) ) )
113 #error "MBEDTLS_CMAC_C defined, but not all prerequisites"
114 #endif
115 
116 #if defined(MBEDTLS_NIST_KW_C) && \
117     ( !defined(MBEDTLS_AES_C) || !defined(MBEDTLS_CIPHER_C) )
118 #error "MBEDTLS_NIST_KW_C defined, but not all prerequisites"
119 #endif
120 
121 #if defined(MBEDTLS_BLOCK_CIPHER_NO_DECRYPT) && defined(MBEDTLS_PSA_CRYPTO_CONFIG)
122 #if defined(PSA_WANT_ALG_CBC_NO_PADDING)
123 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_CBC_NO_PADDING cannot be defined simultaneously"
124 #endif
125 #if defined(PSA_WANT_ALG_CBC_PKCS7)
126 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_CBC_PKCS7 cannot be defined simultaneously"
127 #endif
128 #if defined(PSA_WANT_ALG_ECB_NO_PADDING)
129 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_ECB_NO_PADDING cannot be defined simultaneously"
130 #endif
131 #if defined(PSA_WANT_KEY_TYPE_DES)
132 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_KEY_TYPE_DES cannot be defined simultaneously"
133 #endif
134 #endif
135 
136 #if defined(MBEDTLS_BLOCK_CIPHER_NO_DECRYPT)
137 #if defined(MBEDTLS_CIPHER_MODE_CBC)
138 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_CIPHER_MODE_CBC cannot be defined simultaneously"
139 #endif
140 #if defined(MBEDTLS_CIPHER_MODE_XTS)
141 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_CIPHER_MODE_XTS cannot be defined simultaneously"
142 #endif
143 #if defined(MBEDTLS_DES_C)
144 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_DES_C cannot be defined simultaneously"
145 #endif
146 #if defined(MBEDTLS_NIST_KW_C)
147 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_NIST_KW_C cannot be defined simultaneously"
148 #endif
149 #endif
150 
151 #if defined(MBEDTLS_ECDH_C) && !defined(MBEDTLS_ECP_C)
152 #error "MBEDTLS_ECDH_C defined, but not all prerequisites"
153 #endif
154 
155 #if defined(MBEDTLS_ECDSA_C) &&            \
156     ( !defined(MBEDTLS_ECP_C) ||           \
157       !( defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) || \
158          defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) || \
159          defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) || \
160          defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) || \
161          defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) || \
162          defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) || \
163          defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) || \
164          defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) || \
165          defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) ||   \
166          defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) ||   \
167          defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) ) || \
168       !defined(MBEDTLS_ASN1_PARSE_C) ||    \
169       !defined(MBEDTLS_ASN1_WRITE_C) )
170 #error "MBEDTLS_ECDSA_C defined, but not all prerequisites"
171 #endif
172 
173 #if defined(MBEDTLS_PK_C) && defined(MBEDTLS_USE_PSA_CRYPTO)
174 #if defined(MBEDTLS_PK_CAN_ECDSA_SIGN) && !defined(MBEDTLS_ASN1_WRITE_C)
175 #error "MBEDTLS_PK_C with MBEDTLS_USE_PSA_CRYPTO needs MBEDTLS_ASN1_WRITE_C for ECDSA signature"
176 #endif
177 #if defined(MBEDTLS_PK_CAN_ECDSA_VERIFY) && !defined(MBEDTLS_ASN1_PARSE_C)
178 #error "MBEDTLS_PK_C with MBEDTLS_USE_PSA_CRYPTO needs MBEDTLS_ASN1_PARSE_C for ECDSA verification"
179 #endif
180 #endif /* MBEDTLS_PK_C && MBEDTLS_USE_PSA_CRYPTO */
181 
182 #if defined(MBEDTLS_ECJPAKE_C) && \
183     !defined(MBEDTLS_ECP_C)
184 #error "MBEDTLS_ECJPAKE_C defined, but not all prerequisites"
185 #endif
186 
187 #if defined(MBEDTLS_ECP_RESTARTABLE)           && \
188     ( defined(MBEDTLS_ECDH_COMPUTE_SHARED_ALT) || \
189       defined(MBEDTLS_ECDH_GEN_PUBLIC_ALT)     || \
190       defined(MBEDTLS_ECDSA_SIGN_ALT)          || \
191       defined(MBEDTLS_ECDSA_VERIFY_ALT)        || \
192       defined(MBEDTLS_ECDSA_GENKEY_ALT)        || \
193       defined(MBEDTLS_ECP_INTERNAL_ALT)        || \
194       defined(MBEDTLS_ECP_ALT) )
195 #error "MBEDTLS_ECP_RESTARTABLE defined, but it cannot coexist with an alternative ECP implementation"
196 #endif
197 
198 #if defined(MBEDTLS_ECP_RESTARTABLE)           && \
199     !defined(MBEDTLS_ECP_C)
200 #error "MBEDTLS_ECP_RESTARTABLE defined, but not all prerequisites"
201 #endif
202 
203 #if defined(MBEDTLS_ECDSA_DETERMINISTIC) && !defined(MBEDTLS_HMAC_DRBG_C)
204 #error "MBEDTLS_ECDSA_DETERMINISTIC defined, but not all prerequisites"
205 #endif
206 
207 #if defined(MBEDTLS_ECP_LIGHT) && ( !defined(MBEDTLS_BIGNUM_C) || (    \
208     !defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) &&                  \
209     !defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) &&                  \
210     !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) &&                  \
211     !defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) &&                  \
212     !defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) &&                  \
213     !defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)   &&                  \
214     !defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)   &&                  \
215     !defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)   &&                  \
216     !defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) &&                  \
217     !defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) &&                  \
218     !defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) &&                  \
219     !defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED) &&                 \
220     !defined(MBEDTLS_ECP_DP_CURVE448_ENABLED) ) )
221 #error "MBEDTLS_ECP_C defined (or a subset enabled), but not all prerequisites"
222 #endif
223 
224 #if defined(MBEDTLS_ENTROPY_C) && \
225     !(defined(MBEDTLS_MD_CAN_SHA512) || defined(MBEDTLS_MD_CAN_SHA256))
226 #error "MBEDTLS_ENTROPY_C defined, but not all prerequisites"
227 #endif
228 #if defined(MBEDTLS_ENTROPY_C) && \
229     defined(MBEDTLS_CTR_DRBG_ENTROPY_LEN) && (MBEDTLS_CTR_DRBG_ENTROPY_LEN > 64)
230 #error "MBEDTLS_CTR_DRBG_ENTROPY_LEN value too high"
231 #endif
232 #if defined(MBEDTLS_ENTROPY_C) &&                                            \
233     (defined(MBEDTLS_ENTROPY_FORCE_SHA256) || !defined(MBEDTLS_MD_CAN_SHA512)) \
234     && defined(MBEDTLS_CTR_DRBG_ENTROPY_LEN) && (MBEDTLS_CTR_DRBG_ENTROPY_LEN > 32)
235 #error "MBEDTLS_CTR_DRBG_ENTROPY_LEN value too high"
236 #endif
237 #if defined(MBEDTLS_ENTROPY_C) && \
238     defined(MBEDTLS_ENTROPY_FORCE_SHA256) && !defined(MBEDTLS_MD_CAN_SHA256)
239 #error "MBEDTLS_ENTROPY_FORCE_SHA256 defined, but not all prerequisites"
240 #endif
241 
242 #if defined(__has_feature)
243 #if __has_feature(memory_sanitizer)
244 #define MBEDTLS_HAS_MEMSAN // #undef at the end of this paragraph
245 #endif
246 #endif
247 #if defined(MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN) &&  !defined(MBEDTLS_HAS_MEMSAN)
248 #error "MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN requires building with MemorySanitizer"
249 #endif
250 #undef MBEDTLS_HAS_MEMSAN // temporary macro defined above
251 
252 #if defined(MBEDTLS_CCM_C) && \
253     !(defined(MBEDTLS_CCM_GCM_CAN_AES) || defined(MBEDTLS_CCM_GCM_CAN_ARIA) || \
254     defined(MBEDTLS_CCM_GCM_CAN_CAMELLIA))
255 #error "MBEDTLS_CCM_C defined, but not all prerequisites"
256 #endif
257 
258 #if defined(MBEDTLS_GCM_C) && \
259     !(defined(MBEDTLS_CCM_GCM_CAN_AES) || defined(MBEDTLS_CCM_GCM_CAN_ARIA) || \
260     defined(MBEDTLS_CCM_GCM_CAN_CAMELLIA))
261 #error "MBEDTLS_GCM_C defined, but not all prerequisites"
262 #endif
263 
264 #if defined(MBEDTLS_CHACHAPOLY_C) && !defined(MBEDTLS_CHACHA20_C)
265 #error "MBEDTLS_CHACHAPOLY_C defined, but not all prerequisites"
266 #endif
267 
268 #if defined(MBEDTLS_CHACHAPOLY_C) && !defined(MBEDTLS_POLY1305_C)
269 #error "MBEDTLS_CHACHAPOLY_C defined, but not all prerequisites"
270 #endif
271 
272 #if defined(MBEDTLS_ECP_RANDOMIZE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
273 #error "MBEDTLS_ECP_RANDOMIZE_JAC_ALT defined, but not all prerequisites"
274 #endif
275 
276 #if defined(MBEDTLS_ECP_ADD_MIXED_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
277 #error "MBEDTLS_ECP_ADD_MIXED_ALT defined, but not all prerequisites"
278 #endif
279 
280 #if defined(MBEDTLS_ECP_DOUBLE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
281 #error "MBEDTLS_ECP_DOUBLE_JAC_ALT defined, but not all prerequisites"
282 #endif
283 
284 #if defined(MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
285 #error "MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT defined, but not all prerequisites"
286 #endif
287 
288 #if defined(MBEDTLS_ECP_NORMALIZE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
289 #error "MBEDTLS_ECP_NORMALIZE_JAC_ALT defined, but not all prerequisites"
290 #endif
291 
292 #if defined(MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
293 #error "MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT defined, but not all prerequisites"
294 #endif
295 
296 #if defined(MBEDTLS_ECP_RANDOMIZE_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
297 #error "MBEDTLS_ECP_RANDOMIZE_MXZ_ALT defined, but not all prerequisites"
298 #endif
299 
300 #if defined(MBEDTLS_ECP_NORMALIZE_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
301 #error "MBEDTLS_ECP_NORMALIZE_MXZ_ALT defined, but not all prerequisites"
302 #endif
303 
304 #if defined(MBEDTLS_ECP_NO_FALLBACK) && !defined(MBEDTLS_ECP_INTERNAL_ALT)
305 #error "MBEDTLS_ECP_NO_FALLBACK defined, but no alternative implementation enabled"
306 #endif
307 
308 #if defined(MBEDTLS_HKDF_C) && !defined(MBEDTLS_MD_C)
309 #error "MBEDTLS_HKDF_C defined, but not all prerequisites"
310 #endif
311 
312 #if defined(MBEDTLS_HMAC_DRBG_C) && !defined(MBEDTLS_MD_C)
313 #error "MBEDTLS_HMAC_DRBG_C defined, but not all prerequisites"
314 #endif
315 
316 #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED) &&                 \
317     ( !defined(MBEDTLS_CAN_ECDH) ||                                       \
318       !defined(MBEDTLS_PK_CAN_ECDSA_SIGN) ||                                \
319       !defined(MBEDTLS_X509_CRT_PARSE_C) )
320 #error "MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED defined, but not all prerequisites"
321 #endif
322 
323 #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED) &&                 \
324     ( !defined(MBEDTLS_CAN_ECDH) || !defined(MBEDTLS_RSA_C) ||          \
325       !defined(MBEDTLS_X509_CRT_PARSE_C) )
326 #error "MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED defined, but not all prerequisites"
327 #endif
328 
329 #if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED) && !defined(MBEDTLS_DHM_C)
330 #error "MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED defined, but not all prerequisites"
331 #endif
332 
333 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED) &&                     \
334     !defined(MBEDTLS_CAN_ECDH)
335 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED defined, but not all prerequisites"
336 #endif
337 
338 #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) &&                   \
339     ( !defined(MBEDTLS_DHM_C) || !defined(MBEDTLS_RSA_C) ||           \
340       !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_PKCS1_V15) )
341 #error "MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED defined, but not all prerequisites"
342 #endif
343 
344 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) &&                 \
345     ( !defined(MBEDTLS_CAN_ECDH) || !defined(MBEDTLS_RSA_C) ||          \
346       !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_PKCS1_V15) )
347 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED defined, but not all prerequisites"
348 #endif
349 
350 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED) &&                \
351     ( !defined(MBEDTLS_CAN_ECDH) ||                                       \
352       !defined(MBEDTLS_PK_CAN_ECDSA_SIGN) ||                                \
353       !defined(MBEDTLS_X509_CRT_PARSE_C) )
354 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED defined, but not all prerequisites"
355 #endif
356 
357 #if defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) &&                   \
358     ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_X509_CRT_PARSE_C) || \
359       !defined(MBEDTLS_PKCS1_V15) )
360 #error "MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED defined, but not all prerequisites"
361 #endif
362 
363 #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) &&                       \
364     ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_X509_CRT_PARSE_C) || \
365       !defined(MBEDTLS_PKCS1_V15) )
366 #error "MBEDTLS_KEY_EXCHANGE_RSA_ENABLED defined, but not all prerequisites"
367 #endif
368 
369 #if defined(MBEDTLS_USE_PSA_CRYPTO)
370 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) &&    \
371     ( !defined(PSA_WANT_ALG_JPAKE) ||                   \
372       !defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
373       !defined(PSA_WANT_ECC_SECP_R1_256) )
374 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites"
375 #endif
376 #else /* MBEDTLS_USE_PSA_CRYPTO */
377 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) &&    \
378     ( !defined(MBEDTLS_ECJPAKE_C) ||                    \
379       !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) )
380 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites"
381 #endif
382 #endif /* MBEDTLS_USE_PSA_CRYPTO */
383 
384 /* Use of EC J-PAKE in TLS requires SHA-256. */
385 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) &&                    \
386     !defined(MBEDTLS_MD_CAN_SHA256)
387 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites"
388 #endif
389 
390 #if defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED) &&        \
391     !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE) &&            \
392     !defined(MBEDTLS_MD_CAN_SHA256) &&                        \
393     !defined(MBEDTLS_MD_CAN_SHA512) &&                        \
394     !defined(MBEDTLS_MD_CAN_SHA1)
395 #error "!MBEDTLS_SSL_KEEP_PEER_CERTIFICATE requires SHA-512, SHA-256 or SHA-1".
396 #endif
397 
398 #if defined(MBEDTLS_MD_C) && \
399     !defined(MBEDTLS_MD_CAN_MD5) && \
400     !defined(MBEDTLS_MD_CAN_RIPEMD160) && \
401     !defined(MBEDTLS_MD_CAN_SHA1) && \
402     !defined(MBEDTLS_MD_CAN_SHA224) && \
403     !defined(MBEDTLS_MD_CAN_SHA256) && \
404     !defined(MBEDTLS_MD_CAN_SHA384) && \
405     !defined(MBEDTLS_MD_CAN_SHA512) && \
406     !defined(MBEDTLS_MD_CAN_SHA3_224) && \
407     !defined(MBEDTLS_MD_CAN_SHA3_256) && \
408     !defined(MBEDTLS_MD_CAN_SHA3_384) && \
409     !defined(MBEDTLS_MD_CAN_SHA3_512)
410 #error "MBEDTLS_MD_C defined, but no hash algorithm"
411 #endif
412 
413 #if defined(MBEDTLS_LMS_C) &&                                          \
414     ! ( defined(MBEDTLS_PSA_CRYPTO_CLIENT) && defined(PSA_WANT_ALG_SHA_256) )
415 #error "MBEDTLS_LMS_C requires MBEDTLS_PSA_CRYPTO_C and PSA_WANT_ALG_SHA_256"
416 #endif
417 
418 #if defined(MBEDTLS_LMS_PRIVATE) &&                                    \
419     ( !defined(MBEDTLS_LMS_C) )
420 #error "MBEDTLS_LMS_PRIVATE requires MBEDTLS_LMS_C"
421 #endif
422 
423 #if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) &&                          \
424     ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) )
425 #error "MBEDTLS_MEMORY_BUFFER_ALLOC_C defined, but not all prerequisites"
426 #endif
427 
428 #if defined(MBEDTLS_MEMORY_BACKTRACE) && !defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
429 #error "MBEDTLS_MEMORY_BACKTRACE defined, but not all prerequisites"
430 #endif
431 
432 #if defined(MBEDTLS_MEMORY_DEBUG) && !defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
433 #error "MBEDTLS_MEMORY_DEBUG defined, but not all prerequisites"
434 #endif
435 
436 #if defined(MBEDTLS_PEM_PARSE_C) && !defined(MBEDTLS_BASE64_C)
437 #error "MBEDTLS_PEM_PARSE_C defined, but not all prerequisites"
438 #endif
439 
440 #if defined(MBEDTLS_PEM_WRITE_C) && !defined(MBEDTLS_BASE64_C)
441 #error "MBEDTLS_PEM_WRITE_C defined, but not all prerequisites"
442 #endif
443 
444 #if defined(MBEDTLS_PK_C) && \
445     !defined(MBEDTLS_RSA_C) && !defined(MBEDTLS_PK_HAVE_ECC_KEYS)
446 #error "MBEDTLS_PK_C defined, but not all prerequisites"
447 #endif
448 
449 #if defined(MBEDTLS_PK_PARSE_C) && \
450     (!defined(MBEDTLS_ASN1_PARSE_C) || \
451      !defined(MBEDTLS_OID_C)        || \
452      !defined(MBEDTLS_PK_C))
453 #error "MBEDTLS_PK_PARSE_C defined, but not all prerequisites"
454 #endif
455 
456 #if defined(MBEDTLS_PK_WRITE_C) && \
457     (!defined(MBEDTLS_ASN1_WRITE_C) || \
458      !defined(MBEDTLS_OID_C)        || \
459      !defined(MBEDTLS_PK_C))
460 #error "MBEDTLS_PK_WRITE_C defined, but not all prerequisites"
461 #endif
462 
463 #if defined(MBEDTLS_PLATFORM_EXIT_ALT) && !defined(MBEDTLS_PLATFORM_C)
464 #error "MBEDTLS_PLATFORM_EXIT_ALT defined, but not all prerequisites"
465 #endif
466 
467 #if defined(MBEDTLS_PLATFORM_EXIT_MACRO) && !defined(MBEDTLS_PLATFORM_C)
468 #error "MBEDTLS_PLATFORM_EXIT_MACRO defined, but not all prerequisites"
469 #endif
470 
471 #if defined(MBEDTLS_PLATFORM_EXIT_MACRO) &&\
472     ( defined(MBEDTLS_PLATFORM_STD_EXIT) ||\
473         defined(MBEDTLS_PLATFORM_EXIT_ALT) )
474 #error "MBEDTLS_PLATFORM_EXIT_MACRO and MBEDTLS_PLATFORM_STD_EXIT/MBEDTLS_PLATFORM_EXIT_ALT cannot be defined simultaneously"
475 #endif
476 
477 #if defined(MBEDTLS_PLATFORM_SETBUF_ALT) && !defined(MBEDTLS_PLATFORM_C)
478 #error "MBEDTLS_PLATFORM_SETBUF_ALT defined, but not all prerequisites"
479 #endif
480 
481 #if defined(MBEDTLS_PLATFORM_SETBUF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
482 #error "MBEDTLS_PLATFORM_SETBUF_MACRO defined, but not all prerequisites"
483 #endif
484 
485 #if defined(MBEDTLS_PLATFORM_SETBUF_MACRO) &&\
486     ( defined(MBEDTLS_PLATFORM_STD_SETBUF) ||\
487         defined(MBEDTLS_PLATFORM_SETBUF_ALT) )
488 #error "MBEDTLS_PLATFORM_SETBUF_MACRO and MBEDTLS_PLATFORM_STD_SETBUF/MBEDTLS_PLATFORM_SETBUF_ALT cannot be defined simultaneously"
489 #endif
490 
491 #if defined(MBEDTLS_PLATFORM_TIME_ALT) &&\
492     ( !defined(MBEDTLS_PLATFORM_C) ||\
493         !defined(MBEDTLS_HAVE_TIME) )
494 #error "MBEDTLS_PLATFORM_TIME_ALT defined, but not all prerequisites"
495 #endif
496 
497 #if defined(MBEDTLS_PLATFORM_TIME_MACRO) &&\
498     ( !defined(MBEDTLS_PLATFORM_C) ||\
499         !defined(MBEDTLS_HAVE_TIME) )
500 #error "MBEDTLS_PLATFORM_TIME_MACRO defined, but not all prerequisites"
501 #endif
502 
503 #if defined(MBEDTLS_PLATFORM_MS_TIME_TYPE_MACRO) &&\
504     ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_HAVE_TIME) )
505 #error "MBEDTLS_PLATFORM_MS_TIME_TYPE_MACRO defined, but not all prerequisites"
506 #endif
507 
508 #if defined(MBEDTLS_PLATFORM_MS_TIME_ALT)   && \
509     ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_HAVE_TIME) )
510 #error "MBEDTLS_PLATFORM_MS_TIME_ALT defined, but not all prerequisites"
511 #endif
512 
513 #if defined(MBEDTLS_PLATFORM_TIME_TYPE_MACRO) &&\
514     ( !defined(MBEDTLS_PLATFORM_C) ||\
515         !defined(MBEDTLS_HAVE_TIME) )
516 #error "MBEDTLS_PLATFORM_TIME_TYPE_MACRO defined, but not all prerequisites"
517 #endif
518 
519 #if defined(MBEDTLS_PLATFORM_TIME_MACRO) &&\
520     ( defined(MBEDTLS_PLATFORM_STD_TIME) ||\
521         defined(MBEDTLS_PLATFORM_TIME_ALT) )
522 #error "MBEDTLS_PLATFORM_TIME_MACRO and MBEDTLS_PLATFORM_STD_TIME/MBEDTLS_PLATFORM_TIME_ALT cannot be defined simultaneously"
523 #endif
524 
525 #if defined(MBEDTLS_PLATFORM_TIME_TYPE_MACRO) &&\
526     ( defined(MBEDTLS_PLATFORM_STD_TIME) ||\
527         defined(MBEDTLS_PLATFORM_TIME_ALT) )
528 #error "MBEDTLS_PLATFORM_TIME_TYPE_MACRO and MBEDTLS_PLATFORM_STD_TIME/MBEDTLS_PLATFORM_TIME_ALT cannot be defined simultaneously"
529 #endif
530 
531 #if defined(MBEDTLS_PLATFORM_FPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
532 #error "MBEDTLS_PLATFORM_FPRINTF_ALT defined, but not all prerequisites"
533 #endif
534 
535 #if defined(MBEDTLS_PLATFORM_FPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
536 #error "MBEDTLS_PLATFORM_FPRINTF_MACRO defined, but not all prerequisites"
537 #endif
538 
539 #if defined(MBEDTLS_PLATFORM_FPRINTF_MACRO) &&\
540     ( defined(MBEDTLS_PLATFORM_STD_FPRINTF) ||\
541         defined(MBEDTLS_PLATFORM_FPRINTF_ALT) )
542 #error "MBEDTLS_PLATFORM_FPRINTF_MACRO and MBEDTLS_PLATFORM_STD_FPRINTF/MBEDTLS_PLATFORM_FPRINTF_ALT cannot be defined simultaneously"
543 #endif
544 
545 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) &&\
546     ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) )
547 #error "MBEDTLS_PLATFORM_FREE_MACRO defined, but not all prerequisites"
548 #endif
549 
550 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) &&\
551     defined(MBEDTLS_PLATFORM_STD_FREE)
552 #error "MBEDTLS_PLATFORM_FREE_MACRO and MBEDTLS_PLATFORM_STD_FREE cannot be defined simultaneously"
553 #endif
554 
555 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) && !defined(MBEDTLS_PLATFORM_CALLOC_MACRO)
556 #error "MBEDTLS_PLATFORM_CALLOC_MACRO must be defined if MBEDTLS_PLATFORM_FREE_MACRO is"
557 #endif
558 
559 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) &&\
560     ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) )
561 #error "MBEDTLS_PLATFORM_CALLOC_MACRO defined, but not all prerequisites"
562 #endif
563 
564 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) &&\
565     defined(MBEDTLS_PLATFORM_STD_CALLOC)
566 #error "MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_STD_CALLOC cannot be defined simultaneously"
567 #endif
568 
569 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) && !defined(MBEDTLS_PLATFORM_FREE_MACRO)
570 #error "MBEDTLS_PLATFORM_FREE_MACRO must be defined if MBEDTLS_PLATFORM_CALLOC_MACRO is"
571 #endif
572 
573 #if defined(MBEDTLS_PLATFORM_MEMORY) && !defined(MBEDTLS_PLATFORM_C)
574 #error "MBEDTLS_PLATFORM_MEMORY defined, but not all prerequisites"
575 #endif
576 
577 #if defined(MBEDTLS_PLATFORM_PRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
578 #error "MBEDTLS_PLATFORM_PRINTF_ALT defined, but not all prerequisites"
579 #endif
580 
581 #if defined(MBEDTLS_PLATFORM_PRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
582 #error "MBEDTLS_PLATFORM_PRINTF_MACRO defined, but not all prerequisites"
583 #endif
584 
585 #if defined(MBEDTLS_PLATFORM_PRINTF_MACRO) &&\
586     ( defined(MBEDTLS_PLATFORM_STD_PRINTF) ||\
587         defined(MBEDTLS_PLATFORM_PRINTF_ALT) )
588 #error "MBEDTLS_PLATFORM_PRINTF_MACRO and MBEDTLS_PLATFORM_STD_PRINTF/MBEDTLS_PLATFORM_PRINTF_ALT cannot be defined simultaneously"
589 #endif
590 
591 #if defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
592 #error "MBEDTLS_PLATFORM_SNPRINTF_ALT defined, but not all prerequisites"
593 #endif
594 
595 #if defined(MBEDTLS_PLATFORM_SNPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
596 #error "MBEDTLS_PLATFORM_SNPRINTF_MACRO defined, but not all prerequisites"
597 #endif
598 
599 #if defined(MBEDTLS_PLATFORM_SNPRINTF_MACRO) &&\
600     ( defined(MBEDTLS_PLATFORM_STD_SNPRINTF) ||\
601         defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) )
602 #error "MBEDTLS_PLATFORM_SNPRINTF_MACRO and MBEDTLS_PLATFORM_STD_SNPRINTF/MBEDTLS_PLATFORM_SNPRINTF_ALT cannot be defined simultaneously"
603 #endif
604 
605 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C)
606 #error "MBEDTLS_PLATFORM_VSNPRINTF_ALT defined, but not all prerequisites"
607 #endif
608 
609 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C)
610 #error "MBEDTLS_PLATFORM_VSNPRINTF_MACRO defined, but not all prerequisites"
611 #endif
612 
613 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_MACRO) &&\
614     ( defined(MBEDTLS_PLATFORM_STD_VSNPRINTF) ||\
615         defined(MBEDTLS_PLATFORM_VSNPRINTF_ALT) )
616 #error "MBEDTLS_PLATFORM_VSNPRINTF_MACRO and MBEDTLS_PLATFORM_STD_VSNPRINTF/MBEDTLS_PLATFORM_VSNPRINTF_ALT cannot be defined simultaneously"
617 #endif
618 
619 #if defined(MBEDTLS_PLATFORM_STD_MEM_HDR) &&\
620     !defined(MBEDTLS_PLATFORM_NO_STD_FUNCTIONS)
621 #error "MBEDTLS_PLATFORM_STD_MEM_HDR defined, but not all prerequisites"
622 #endif
623 
624 #if defined(MBEDTLS_PLATFORM_STD_CALLOC) && !defined(MBEDTLS_PLATFORM_MEMORY)
625 #error "MBEDTLS_PLATFORM_STD_CALLOC defined, but not all prerequisites"
626 #endif
627 
628 #if defined(MBEDTLS_PLATFORM_STD_FREE) && !defined(MBEDTLS_PLATFORM_MEMORY)
629 #error "MBEDTLS_PLATFORM_STD_FREE defined, but not all prerequisites"
630 #endif
631 
632 #if defined(MBEDTLS_PLATFORM_STD_EXIT) &&\
633     !defined(MBEDTLS_PLATFORM_EXIT_ALT)
634 #error "MBEDTLS_PLATFORM_STD_EXIT defined, but not all prerequisites"
635 #endif
636 
637 #if defined(MBEDTLS_PLATFORM_STD_TIME) &&\
638     ( !defined(MBEDTLS_PLATFORM_TIME_ALT) ||\
639         !defined(MBEDTLS_HAVE_TIME) )
640 #error "MBEDTLS_PLATFORM_STD_TIME defined, but not all prerequisites"
641 #endif
642 
643 #if defined(MBEDTLS_PLATFORM_STD_FPRINTF) &&\
644     !defined(MBEDTLS_PLATFORM_FPRINTF_ALT)
645 #error "MBEDTLS_PLATFORM_STD_FPRINTF defined, but not all prerequisites"
646 #endif
647 
648 #if defined(MBEDTLS_PLATFORM_STD_PRINTF) &&\
649     !defined(MBEDTLS_PLATFORM_PRINTF_ALT)
650 #error "MBEDTLS_PLATFORM_STD_PRINTF defined, but not all prerequisites"
651 #endif
652 
653 #if defined(MBEDTLS_PLATFORM_STD_SNPRINTF) &&\
654     !defined(MBEDTLS_PLATFORM_SNPRINTF_ALT)
655 #error "MBEDTLS_PLATFORM_STD_SNPRINTF defined, but not all prerequisites"
656 #endif
657 
658 #if defined(MBEDTLS_ENTROPY_NV_SEED) &&\
659     ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_ENTROPY_C) )
660 #error "MBEDTLS_ENTROPY_NV_SEED defined, but not all prerequisites"
661 #endif
662 
663 #if defined(MBEDTLS_PLATFORM_NV_SEED_ALT) &&\
664     !defined(MBEDTLS_ENTROPY_NV_SEED)
665 #error "MBEDTLS_PLATFORM_NV_SEED_ALT defined, but not all prerequisites"
666 #endif
667 
668 #if defined(MBEDTLS_PLATFORM_STD_NV_SEED_READ) &&\
669     !defined(MBEDTLS_PLATFORM_NV_SEED_ALT)
670 #error "MBEDTLS_PLATFORM_STD_NV_SEED_READ defined, but not all prerequisites"
671 #endif
672 
673 #if defined(MBEDTLS_PLATFORM_STD_NV_SEED_WRITE) &&\
674     !defined(MBEDTLS_PLATFORM_NV_SEED_ALT)
675 #error "MBEDTLS_PLATFORM_STD_NV_SEED_WRITE defined, but not all prerequisites"
676 #endif
677 
678 #if defined(MBEDTLS_PLATFORM_NV_SEED_READ_MACRO) &&\
679     ( defined(MBEDTLS_PLATFORM_STD_NV_SEED_READ) ||\
680       defined(MBEDTLS_PLATFORM_NV_SEED_ALT) )
681 #error "MBEDTLS_PLATFORM_NV_SEED_READ_MACRO and MBEDTLS_PLATFORM_STD_NV_SEED_READ cannot be defined simultaneously"
682 #endif
683 
684 #if defined(MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO) &&\
685     ( defined(MBEDTLS_PLATFORM_STD_NV_SEED_WRITE) ||\
686       defined(MBEDTLS_PLATFORM_NV_SEED_ALT) )
687 #error "MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO and MBEDTLS_PLATFORM_STD_NV_SEED_WRITE cannot be defined simultaneously"
688 #endif
689 
690 #if defined(MBEDTLS_PSA_CRYPTO_C) &&                                    \
691     !( ( ( defined(MBEDTLS_CTR_DRBG_C) || defined(MBEDTLS_HMAC_DRBG_C) ) && \
692          defined(MBEDTLS_ENTROPY_C) ) ||                                \
693        defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG) )
694 #error "MBEDTLS_PSA_CRYPTO_C defined, but not all prerequisites (missing RNG)"
695 #endif
696 
697 #if defined(MBEDTLS_PSA_CRYPTO_C) && defined(PSA_HAVE_SOFT_BLOCK_MODE) && \
698     defined(PSA_HAVE_SOFT_BLOCK_CIPHER) && !defined(MBEDTLS_CIPHER_C)
699 #error "MBEDTLS_PSA_CRYPTO_C defined, but not all prerequisites"
700 #endif
701 
702 #if defined(MBEDTLS_PSA_CRYPTO_SPM) && !defined(MBEDTLS_PSA_CRYPTO_C)
703 #error "MBEDTLS_PSA_CRYPTO_SPM defined, but not all prerequisites"
704 #endif
705 
706 #if defined(MBEDTLS_PSA_CRYPTO_SE_C) &&    \
707     ! ( defined(MBEDTLS_PSA_CRYPTO_C) && \
708         defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) )
709 #error "MBEDTLS_PSA_CRYPTO_SE_C defined, but not all prerequisites"
710 #endif
711 
712 #if defined(MBEDTLS_PSA_CRYPTO_SE_C)
713 #if defined(MBEDTLS_DEPRECATED_REMOVED)
714 #error "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS"
715 #elif defined(MBEDTLS_DEPRECATED_WARNING)
716 #warning "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS"
717 #endif
718 #endif /* MBEDTLS_PSA_CRYPTO_SE_C */
719 
720 #if defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) &&            \
721     ! defined(MBEDTLS_PSA_CRYPTO_C)
722 #error "MBEDTLS_PSA_CRYPTO_STORAGE_C defined, but not all prerequisites"
723 #endif
724 
725 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) &&      \
726     !( defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \
727        defined(MBEDTLS_ENTROPY_NV_SEED) )
728 #error "MBEDTLS_PSA_INJECT_ENTROPY defined, but not all prerequisites"
729 #endif
730 
731 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) &&              \
732     !defined(MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES)
733 #error "MBEDTLS_PSA_INJECT_ENTROPY is not compatible with actual entropy sources"
734 #endif
735 
736 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) &&              \
737     defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
738 #error "MBEDTLS_PSA_INJECT_ENTROPY is not compatible with MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG"
739 #endif
740 
741 #if defined(MBEDTLS_PSA_KEY_STORE_DYNAMIC) &&           \
742     defined(MBEDTLS_PSA_STATIC_KEY_SLOTS)
743 #error "MBEDTLS_PSA_KEY_STORE_DYNAMIC and MBEDTLS_PSA_STATIC_KEY_SLOTS cannot be defined simultaneously"
744 #endif
745 
746 #if defined(MBEDTLS_PSA_ITS_FILE_C) && \
747     !defined(MBEDTLS_FS_IO)
748 #error "MBEDTLS_PSA_ITS_FILE_C defined, but not all prerequisites"
749 #endif
750 
751 #if defined(MBEDTLS_RSA_C) && ( !defined(MBEDTLS_BIGNUM_C) ||         \
752     !defined(MBEDTLS_OID_C) )
753 #error "MBEDTLS_RSA_C defined, but not all prerequisites"
754 #endif
755 
756 #if defined(MBEDTLS_RSA_C) && ( !defined(MBEDTLS_PKCS1_V21) &&         \
757     !defined(MBEDTLS_PKCS1_V15) )
758 #error "MBEDTLS_RSA_C defined, but none of the PKCS1 versions enabled"
759 #endif
760 
761 #if defined(MBEDTLS_X509_RSASSA_PSS_SUPPORT) &&                        \
762     ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_PKCS1_V21) )
763 #error "MBEDTLS_X509_RSASSA_PSS_SUPPORT defined, but not all prerequisites"
764 #endif
765 
766 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT) && \
767     defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY)
768 #error "Must only define one of MBEDTLS_SHA512_USE_A64_CRYPTO_*"
769 #endif
770 
771 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT) || \
772     defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY)
773 #if !defined(MBEDTLS_SHA512_C)
774 #error "MBEDTLS_SHA512_USE_A64_CRYPTO_* defined without MBEDTLS_SHA512_C"
775 #endif
776 #if defined(MBEDTLS_SHA512_ALT) || defined(MBEDTLS_SHA512_PROCESS_ALT)
777 #error "MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*"
778 #endif
779 
780 #endif /* MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT || MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY */
781 
782 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY) && !defined(__aarch64__)
783 #error "MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY defined on non-Aarch64 system"
784 #endif
785 
786 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT) && \
787     defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY)
788 #error "Must only define one of MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*"
789 #endif
790 
791 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT) || \
792     defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY)
793 #if !defined(MBEDTLS_SHA256_C)
794 #error "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_* defined without MBEDTLS_SHA256_C"
795 #endif
796 #if defined(MBEDTLS_SHA256_ALT) || defined(MBEDTLS_SHA256_PROCESS_ALT)
797 #error "MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*"
798 #endif
799 
800 #endif
801 
802 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY) && !defined(MBEDTLS_ARCH_IS_ARMV8_A)
803 #error "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY defined on non-Armv8-A system"
804 #endif
805 
806 /* TLS 1.3 requires separate HKDF parts from PSA,
807  * and at least one ciphersuite, so at least SHA-256 or SHA-384
808  * from PSA to use with HKDF.
809  *
810  * Note: for dependencies common with TLS 1.2 (running handshake hash),
811  * see MBEDTLS_SSL_TLS_C. */
812 #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \
813     !(defined(MBEDTLS_PSA_CRYPTO_CLIENT) && \
814       defined(PSA_WANT_ALG_HKDF_EXTRACT) && \
815       defined(PSA_WANT_ALG_HKDF_EXPAND) && \
816       (defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_384)))
817 #error "MBEDTLS_SSL_PROTO_TLS1_3 defined, but not all prerequisites"
818 #endif
819 
820 #if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED)
821 #if !( (defined(PSA_WANT_ALG_ECDH) || defined(PSA_WANT_ALG_FFDH)) && \
822        defined(MBEDTLS_X509_CRT_PARSE_C) && \
823        ( defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || defined(MBEDTLS_PKCS1_V21) ) )
824 #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED defined, but not all prerequisites"
825 #endif
826 #endif
827 
828 #if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED)
829 #if !( defined(PSA_WANT_ALG_ECDH) || defined(PSA_WANT_ALG_FFDH) )
830 #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED defined, but not all prerequisites"
831 #endif
832 #endif
833 
834 /*
835  * The current implementation of TLS 1.3 requires MBEDTLS_SSL_KEEP_PEER_CERTIFICATE.
836  */
837 #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE)
838 #error "MBEDTLS_SSL_PROTO_TLS1_3 defined without MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
839 #endif
840 
841 #if defined(MBEDTLS_SSL_PROTO_TLS1_2) &&                                    \
842     !(defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) ||                          \
843       defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) ||                      \
844       defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) ||                    \
845       defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED) ||                  \
846       defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED) ||                     \
847       defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED) ||                   \
848       defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED) ||                          \
849       defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED) ||                      \
850       defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) ||                      \
851       defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED) ||                    \
852       defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) )
853 #error "One or more versions of the TLS protocol are enabled " \
854         "but no key exchange methods defined with MBEDTLS_KEY_EXCHANGE_xxxx"
855 #endif
856 
857 #if defined(MBEDTLS_SSL_EARLY_DATA) && \
858     ( !defined(MBEDTLS_SSL_SESSION_TICKETS) || \
859       ( !defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED) && \
860         !defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED) ) )
861 #error "MBEDTLS_SSL_EARLY_DATA  defined, but not all prerequisites"
862 #endif
863 
864 #if defined(MBEDTLS_SSL_EARLY_DATA) && defined(MBEDTLS_SSL_SRV_C) && \
865     defined(MBEDTLS_SSL_MAX_EARLY_DATA_SIZE) &&                      \
866         ((MBEDTLS_SSL_MAX_EARLY_DATA_SIZE < 0) ||                    \
867          (MBEDTLS_SSL_MAX_EARLY_DATA_SIZE > UINT32_MAX))
868 #error "MBEDTLS_SSL_MAX_EARLY_DATA_SIZE must be in the range(0..UINT32_MAX)"
869 #endif
870 
871 #if defined(MBEDTLS_SSL_PROTO_DTLS)     && \
872     !defined(MBEDTLS_SSL_PROTO_TLS1_2)
873 #error "MBEDTLS_SSL_PROTO_DTLS defined, but not all prerequisites"
874 #endif
875 
876 #if defined(MBEDTLS_SSL_CLI_C) && !defined(MBEDTLS_SSL_TLS_C)
877 #error "MBEDTLS_SSL_CLI_C defined, but not all prerequisites"
878 #endif
879 
880 #if defined(MBEDTLS_SSL_ASYNC_PRIVATE) && !defined(MBEDTLS_X509_CRT_PARSE_C)
881 #error "MBEDTLS_SSL_ASYNC_PRIVATE defined, but not all prerequisites"
882 #endif
883 
884 #if defined(MBEDTLS_SSL_TLS_C) && !(defined(MBEDTLS_CIPHER_C) || \
885     defined(MBEDTLS_USE_PSA_CRYPTO))
886 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites"
887 #endif
888 
889 /* TLS 1.2 and 1.3 require SHA-256 or SHA-384 (running handshake hash) */
890 #if defined(MBEDTLS_SSL_TLS_C)
891 #if defined(MBEDTLS_USE_PSA_CRYPTO)
892 #if !(defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_384))
893 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites"
894 #endif
895 #else /* MBEDTLS_USE_PSA_CRYPTO */
896 #if !defined(MBEDTLS_MD_C) || \
897     !(defined(MBEDTLS_MD_CAN_SHA256) || defined(MBEDTLS_MD_CAN_SHA384))
898 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites"
899 #endif
900 #endif /* MBEDTLS_USE_PSA_CRYPTO */
901 #endif /* MBEDTLS_SSL_TLS_C */
902 
903 #if defined(MBEDTLS_SSL_SRV_C) && !defined(MBEDTLS_SSL_TLS_C)
904 #error "MBEDTLS_SSL_SRV_C defined, but not all prerequisites"
905 #endif
906 
907 #if defined(MBEDTLS_SSL_TLS_C) && \
908     !( defined(MBEDTLS_SSL_PROTO_TLS1_2) || defined(MBEDTLS_SSL_PROTO_TLS1_3) )
909 #error "MBEDTLS_SSL_TLS_C defined, but no protocols are active"
910 #endif
911 
912 #if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY) && !defined(MBEDTLS_SSL_PROTO_DTLS)
913 #error "MBEDTLS_SSL_DTLS_HELLO_VERIFY  defined, but not all prerequisites"
914 #endif
915 
916 #if defined(MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE) && \
917     !defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
918 #error "MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE  defined, but not all prerequisites"
919 #endif
920 
921 #if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY) &&                              \
922     ( !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) )
923 #error "MBEDTLS_SSL_DTLS_ANTI_REPLAY  defined, but not all prerequisites"
924 #endif
925 
926 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) &&                              \
927     ( !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) )
928 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID  defined, but not all prerequisites"
929 #endif
930 
931 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)            &&                 \
932     defined(MBEDTLS_SSL_CID_IN_LEN_MAX) &&                 \
933     MBEDTLS_SSL_CID_IN_LEN_MAX > 255
934 #error "MBEDTLS_SSL_CID_IN_LEN_MAX too large (max 255)"
935 #endif
936 
937 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)            &&                  \
938     defined(MBEDTLS_SSL_CID_OUT_LEN_MAX) &&                 \
939     MBEDTLS_SSL_CID_OUT_LEN_MAX > 255
940 #error "MBEDTLS_SSL_CID_OUT_LEN_MAX too large (max 255)"
941 #endif
942 
943 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT)     &&                 \
944     !defined(MBEDTLS_SSL_DTLS_CONNECTION_ID)
945 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT defined, but not all prerequisites"
946 #endif
947 
948 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT) && MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT != 0
949 #if defined(MBEDTLS_DEPRECATED_REMOVED)
950 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT is deprecated and will be removed in a future version of Mbed TLS"
951 #elif defined(MBEDTLS_DEPRECATED_WARNING)
952 #warning "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT is deprecated and will be removed in a future version of Mbed TLS"
953 #endif
954 #endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT && MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT != 0 */
955 
956 #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) &&   \
957     !defined(MBEDTLS_SSL_PROTO_TLS1_2)
958 #error "MBEDTLS_SSL_ENCRYPT_THEN_MAC defined, but not all prerequisites"
959 #endif
960 
961 #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) && \
962     !defined(MBEDTLS_SSL_PROTO_TLS1_2)
963 #error "MBEDTLS_SSL_EXTENDED_MASTER_SECRET defined, but not all prerequisites"
964 #endif
965 
966 #if defined(MBEDTLS_SSL_RENEGOTIATION) && \
967     !defined(MBEDTLS_SSL_PROTO_TLS1_2)
968 #error "MBEDTLS_SSL_RENEGOTIATION defined, but not all prerequisites"
969 #endif
970 
971 #if defined(MBEDTLS_SSL_TICKET_C) && ( !defined(MBEDTLS_CIPHER_C) && \
972                                        !defined(MBEDTLS_USE_PSA_CRYPTO) )
973 #error "MBEDTLS_SSL_TICKET_C defined, but not all prerequisites"
974 #endif
975 
976 #if defined(MBEDTLS_SSL_TICKET_C) && \
977     !( defined(MBEDTLS_SSL_HAVE_CCM) || defined(MBEDTLS_SSL_HAVE_GCM) || \
978     defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) )
979 #error "MBEDTLS_SSL_TICKET_C defined, but not all prerequisites"
980 #endif
981 
982 #if defined(MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH) && \
983     MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH >= 256
984 #error "MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH must be less than 256"
985 #endif
986 
987 #if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && \
988         !defined(MBEDTLS_X509_CRT_PARSE_C)
989 #error "MBEDTLS_SSL_SERVER_NAME_INDICATION defined, but not all prerequisites"
990 #endif
991 
992 #if defined(MBEDTLS_THREADING_PTHREAD)
993 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL)
994 #error "MBEDTLS_THREADING_PTHREAD defined, but not all prerequisites"
995 #endif
996 #define MBEDTLS_THREADING_IMPL // undef at the end of this paragraph
997 #endif
998 #if defined(MBEDTLS_THREADING_ALT)
999 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL)
1000 #error "MBEDTLS_THREADING_ALT defined, but not all prerequisites"
1001 #endif
1002 #define MBEDTLS_THREADING_IMPL // undef at the end of this paragraph
1003 #endif
1004 #if defined(MBEDTLS_THREADING_C) && !defined(MBEDTLS_THREADING_IMPL)
1005 #error "MBEDTLS_THREADING_C defined, single threading implementation required"
1006 #endif
1007 #undef MBEDTLS_THREADING_IMPL // temporary macro defined above
1008 
1009 #if defined(MBEDTLS_USE_PSA_CRYPTO) && !defined(MBEDTLS_PSA_CRYPTO_CLIENT)
1010 #error "MBEDTLS_USE_PSA_CRYPTO defined, but not all prerequisites"
1011 #endif
1012 
1013 #if defined(MBEDTLS_VERSION_FEATURES) && !defined(MBEDTLS_VERSION_C)
1014 #error "MBEDTLS_VERSION_FEATURES defined, but not all prerequisites"
1015 #endif
1016 
1017 #if defined(MBEDTLS_X509_USE_C) && \
1018     (!defined(MBEDTLS_OID_C) || !defined(MBEDTLS_ASN1_PARSE_C) ||   \
1019     !defined(MBEDTLS_PK_PARSE_C) ||                                 \
1020     ( !defined(MBEDTLS_MD_C) && !defined(MBEDTLS_USE_PSA_CRYPTO) ) )
1021 #error "MBEDTLS_X509_USE_C defined, but not all prerequisites"
1022 #endif
1023 
1024 #if defined(MBEDTLS_X509_CREATE_C) && \
1025     (!defined(MBEDTLS_OID_C) || !defined(MBEDTLS_ASN1_WRITE_C) ||      \
1026     !defined(MBEDTLS_PK_PARSE_C) ||                                    \
1027     ( !defined(MBEDTLS_MD_C) && !defined(MBEDTLS_USE_PSA_CRYPTO) ) )
1028 #error "MBEDTLS_X509_CREATE_C defined, but not all prerequisites"
1029 #endif
1030 
1031 #if defined(MBEDTLS_X509_CRT_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) )
1032 #error "MBEDTLS_X509_CRT_PARSE_C defined, but not all prerequisites"
1033 #endif
1034 
1035 #if defined(MBEDTLS_X509_CRL_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) )
1036 #error "MBEDTLS_X509_CRL_PARSE_C defined, but not all prerequisites"
1037 #endif
1038 
1039 #if defined(MBEDTLS_X509_CSR_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) )
1040 #error "MBEDTLS_X509_CSR_PARSE_C defined, but not all prerequisites"
1041 #endif
1042 
1043 #if defined(MBEDTLS_X509_CRT_WRITE_C) && ( !defined(MBEDTLS_X509_CREATE_C) )
1044 #error "MBEDTLS_X509_CRT_WRITE_C defined, but not all prerequisites"
1045 #endif
1046 
1047 #if defined(MBEDTLS_X509_CSR_WRITE_C) && ( !defined(MBEDTLS_X509_CREATE_C) )
1048 #error "MBEDTLS_X509_CSR_WRITE_C defined, but not all prerequisites"
1049 #endif
1050 
1051 #if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK) && \
1052             ( !defined(MBEDTLS_X509_CRT_PARSE_C) )
1053 #error "MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK defined, but not all prerequisites"
1054 #endif
1055 
1056 #if defined(MBEDTLS_HAVE_INT32) && defined(MBEDTLS_HAVE_INT64)
1057 #error "MBEDTLS_HAVE_INT32 and MBEDTLS_HAVE_INT64 cannot be defined simultaneously"
1058 #endif /* MBEDTLS_HAVE_INT32 && MBEDTLS_HAVE_INT64 */
1059 
1060 #if ( defined(MBEDTLS_HAVE_INT32) || defined(MBEDTLS_HAVE_INT64) ) && \
1061     defined(MBEDTLS_HAVE_ASM)
1062 #error "MBEDTLS_HAVE_INT32/MBEDTLS_HAVE_INT64 and MBEDTLS_HAVE_ASM cannot be defined simultaneously"
1063 #endif /* (MBEDTLS_HAVE_INT32 || MBEDTLS_HAVE_INT64) && MBEDTLS_HAVE_ASM */
1064 
1065 #if defined(MBEDTLS_SSL_DTLS_SRTP) && ( !defined(MBEDTLS_SSL_PROTO_DTLS) )
1066 #error "MBEDTLS_SSL_DTLS_SRTP defined, but not all prerequisites"
1067 #endif
1068 
1069 #if defined(MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH) && ( !defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) )
1070 #error "MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH defined, but not all prerequisites"
1071 #endif
1072 
1073 #if defined(MBEDTLS_SSL_RECORD_SIZE_LIMIT) && ( !defined(MBEDTLS_SSL_PROTO_TLS1_3) )
1074 #error "MBEDTLS_SSL_RECORD_SIZE_LIMIT defined, but not all prerequisites"
1075 #endif
1076 
1077 #if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION) && \
1078     !( defined(MBEDTLS_SSL_HAVE_CCM) || defined(MBEDTLS_SSL_HAVE_GCM) || \
1079     defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) )
1080 #error "MBEDTLS_SSL_CONTEXT_SERIALIZATION defined, but not all prerequisites"
1081 #endif
1082 
1083 /* Reject attempts to enable options that have been removed and that could
1084  * cause a build to succeed but with features removed. */
1085 
1086 #if defined(MBEDTLS_HAVEGE_C) //no-check-names
1087 #error "MBEDTLS_HAVEGE_C was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/2599"
1088 #endif
1089 
1090 #if defined(MBEDTLS_SSL_HW_RECORD_ACCEL) //no-check-names
1091 #error "MBEDTLS_SSL_HW_RECORD_ACCEL was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1092 #endif
1093 
1094 #if defined(MBEDTLS_SSL_PROTO_SSL3) //no-check-names
1095 #error "MBEDTLS_SSL_PROTO_SSL3 (SSL v3.0 support) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1096 #endif
1097 
1098 #if defined(MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO) //no-check-names
1099 #error "MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO (SSL v2 ClientHello support) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1100 #endif
1101 
1102 #if defined(MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT) //no-check-names
1103 #error "MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT (compatibility with the buggy implementation of truncated HMAC in Mbed TLS up to 2.7) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1104 #endif
1105 
1106 #if defined(MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES) //no-check-names
1107 #error "MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES was removed in Mbed TLS 3.0. See the ChangeLog entry if you really need SHA-1-signed certificates."
1108 #endif
1109 
1110 #if defined(MBEDTLS_ZLIB_SUPPORT) //no-check-names
1111 #error "MBEDTLS_ZLIB_SUPPORT was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031"
1112 #endif
1113 
1114 #if defined(MBEDTLS_CHECK_PARAMS) //no-check-names
1115 #error "MBEDTLS_CHECK_PARAMS was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4313"
1116 #endif
1117 
1118 #if defined(MBEDTLS_SSL_CID_PADDING_GRANULARITY) //no-check-names
1119 #error "MBEDTLS_SSL_CID_PADDING_GRANULARITY was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4335"
1120 #endif
1121 
1122 #if defined(MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY) //no-check-names
1123 #error "MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4335"
1124 #endif
1125 
1126 #if defined(MBEDTLS_SSL_TRUNCATED_HMAC) //no-check-names
1127 #error "MBEDTLS_SSL_TRUNCATED_HMAC was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4341"
1128 #endif
1129 
1130 #if defined(MBEDTLS_PKCS7_C) && ( ( !defined(MBEDTLS_ASN1_PARSE_C) ) || \
1131     ( !defined(MBEDTLS_OID_C) ) || ( !defined(MBEDTLS_PK_PARSE_C) ) || \
1132     ( !defined(MBEDTLS_X509_CRT_PARSE_C) ) || \
1133     ( !defined(MBEDTLS_X509_CRL_PARSE_C) ) || \
1134     ( !defined(MBEDTLS_MD_C) ) )
1135 #error  "MBEDTLS_PKCS7_C is defined, but not all prerequisites"
1136 #endif
1137 
1138 /*
1139  * Avoid warning from -pedantic. This is a convenient place for this
1140  * workaround since this is included by every single file before the
1141  * #if defined(MBEDTLS_xxx_C) that results in empty translation units.
1142  */
1143 typedef int mbedtls_iso_c_forbids_empty_translation_units;
1144 
1145 /* *INDENT-ON* */
1146 #endif /* MBEDTLS_CHECK_CONFIG_H */
1147