1#-------------------------------------------------------------------------------
2# Copyright (c) 2023, Arm Limited. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6#-------------------------------------------------------------------------------
7
8config TFM_CODE_SHARING
9    bool "Enable code sharing between MCUboot and secure firmware"
10    #FIXME: Shall check IAR
11    default n
12    depends on !CRYPTO_HW_ACCELERATOR
13    help
14      This feature is only officially tested on AN521 and Musca-B1 platforms.
15
16################################# NS ###########################################
17
18menu "NS support"
19config NS
20    bool "NS app"
21    default y
22
23config TFM_NS_MANAGE_NSID
24    bool "Support NSPE OS providing NSPE client_id"
25    depends on !TFM_MULTI_CORE_TOPOLOGY
26    help
27      An NSPE client_id is provided by the NSPE OS via the SPM or directly
28      by the SPM. When `TFM_NS_MANAGE_NSID` is `ON`, TF-M supports NSPE OS
29      providing NSPE client_id.
30
31config NS_EVALUATION_APP_PATH
32    string "Path to TFM NS Evaluation Application"
33    default ""
34endmenu
35
36################################# Mbedcrypto ###################################
37
38menu "Mbedcrypto profile"
39
40config MBEDCRYPTO_BUILD_TYPE
41    string "Mbedcrypto build type"
42    default "$(CMAKE_BUILD_TYPE)"
43
44config TFM_MBEDCRYPTO_CONFIG_PATH
45    string "Mbedtls config path"
46    default "$(TFM_SOURCE_DIR)/lib/ext/mbedcrypto/mbedcrypto_config/tfm_mbedcrypto_config_default.h"
47    help
48      Config to use for Mbed Crypto. For increased flexibility when
49      pointing to a file, set the type of this setting to 'STRING' by
50      passing the :<type> portion when specifying the setting value in
51      the command line. E.g.
52      '-DTFM_MBEDCRYPTO_CONFIG_PATH:STRING=some_file_which_is_generated.h'
53      This can be useful if the config file is generated and placed
54      inside a directory already added to the include path of mbedtls.
55
56config TFM_MBEDCRYPTO_PSA_CRYPTO_CONFIG_PATH
57    string "Mbedtls psa crypto config path"
58    default "$(TFM_SOURCE_DIR)/lib/ext/mbedcrypto/mbedcrypto_config/crypto_config_default.h"
59    help
60      Config to use psa crypto setting for Mbed Crypto
61
62config TFM_MBEDCRYPTO_PLATFORM_EXTRA_CONFIG_PATH
63    string "Mbedtls platform crypto config path"
64    default ""
65    help
66      Config to append to standard Mbed Crypto config, used by platforms
67      to configure feature support
68
69endmenu
70
71################################# Manifest #####################################
72
73config TFM_MANIFEST_LIST
74    string "TF-M native Secure Partition manifests list file"
75    default "$(TFM_SOURCE_DIR)/tools/tfm_manifest_list.yaml"
76    help
77      TF-M native Secure Partition manifests list file
78