1#-------------------------------------------------------------------------------
2# Copyright (c) 2023, Arm Limited. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6#-------------------------------------------------------------------------------
7
8config TFM_CODE_SHARING
9    bool "Enable code sharing between MCUboot and secure firmware"
10    #FIXME: Shall check IAR
11    default n
12    depends on !CRYPTO_HW_ACCELERATOR
13    help
14      This feature is only officially tested on AN521 and Musca-B1 platforms.
15
16################################# NS ###########################################
17
18menu "NS support"
19config NS
20    bool "NS app"
21    default y
22
23config TFM_NS_MANAGE_NSID
24    bool "Support NSPE OS providing NSPE client_id"
25    depends on !TFM_MULTI_CORE_TOPOLOGY
26    help
27      An NSPE client_id is provided by the NSPE OS via the SPM or directly
28      by the SPM. When `TFM_NS_MANAGE_NSID` is `ON`, TF-M supports NSPE OS
29      providing NSPE client_id.
30
31config NS_EVALUATION_APP_PATH
32    string "Path to TFM NS Evaluation Application"
33    default ""
34endmenu
35
36################################# Mbedcrypto ###################################
37
38menu "Mbedcrypto profile"
39
40config MBEDCRYPTO_BUILD_TYPE
41    string "Mbedcrypto build type"
42    default "$(CMAKE_BUILD_TYPE)"
43
44config TFM_MBEDCRYPTO_CONFIG_PATH
45    string "Mbedtls config path"
46    default "$(TFM_SOURCE_DIR)/lib/ext/mbedcrypto/mbedcrypto_config/tfm_mbedcrypto_config_default.h"
47    help
48      Config to use for Mbed Crypto. For increased flexibility when
49      pointing to a file, set the type of this setting to 'STRING' by
50      passing the :<type> portion when specifying the setting value in
51      the command line. E.g.
52      '-DTFM_MBEDCRYPTO_CONFIG_PATH:STRING=some_file_which_is_generated.h'
53      This can be useful if the config file is generated and placed
54      inside a directory already added to the include path of mbedtls.
55
56config TFM_MBEDCRYPTO_PSA_CRYPTO_CONFIG_PATH
57    string "Mbedtls psa crypto config path"
58    default "$(TFM_SOURCE_DIR)/lib/ext/mbedcrypto/mbedcrypto_config/crypto_config_default.h"
59    help
60      Config to use psa crypto setting for Mbed Crypto
61
62config TFM_MBEDCRYPTO_PLATFORM_EXTRA_CONFIG_PATH
63    string "Mbedtls platform crypto config path"
64    default ""
65    help
66      Config to append to standard Mbed Crypto config, used by platforms
67      to configure feature support
68
69endmenu
70
71################################# Manifest #####################################
72
73menu "TF-M manifest"
74
75config TFM_MANIFEST_LIST
76    string "TF-M native Secure Partition manifests list file"
77    default "$(TFM_SOURCE_DIR)/tools/tfm_manifest_list.yaml"
78    help
79      TF-M native Secure Partition manifests list file
80
81config TFM_EXTRA_MANIFEST_LIST_FILES
82    string "Extra manifest list file(s)"
83    default ""
84    help
85      Used to list extra Secure Partition manifests.
86
87config TFM_EXTRA_GENERATED_FILE_LIST_PATH
88    string "Path to extra generated file list."
89    default ""
90    help
91      Appended to stardard TFM generated file list
92
93config TFM_EXTRA_PARTITION_PATHS
94    string "List of extra Secure Partitions directories."
95    default ""
96    help
97      An extra Secure Parition folder contains source code, CMakeLists.txt and
98      manifest files
99
100endmenu
101