aa92d0e676
- M0: libghostty SSH 终端（渲染/输入/连接）+ 白屏修复(OutputGate) + 会话状态机/自动重连 - M1: tsnet 用户态组网 + SSH-over-tsnet(fd 桥)，shell 级真机验证；R5(Go+gvisor+C+++Swift 同进程) retire - M1.5: tmux -CC 原生 tab（MVP） - 结构: packages/(TXCore·TXTransport), apps/TerminalX, vendor/(libghostty-spm/libssh2/mbedtls/tsnet-bridge), artifacts/ - 文档: CLAUDE.md + docs/HANDOFF.md（新会话入口） - 环境: 认证代理→依赖 vendor 本地化；Go 在 ~/.local/go；仅模拟器/未签名 - 待续: M2 mosh, tmux 多 pane, M4 安全(host key/SE) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
137 lines
5.3 KiB
C
137 lines
5.3 KiB
C
/**
|
|
* \file check_crypto_config.h
|
|
*
|
|
* \brief Consistency checks for PSA configuration options
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*/
|
|
|
|
/*
|
|
* It is recommended to include this file from your crypto_config.h
|
|
* in order to catch dependency issues early.
|
|
*/
|
|
|
|
#ifndef MBEDTLS_CHECK_CRYPTO_CONFIG_H
|
|
#define MBEDTLS_CHECK_CRYPTO_CONFIG_H
|
|
|
|
#if defined(PSA_WANT_ALG_CCM) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_AES) || \
|
|
defined(PSA_WANT_KEY_TYPE_CAMELLIA))
|
|
#error "PSA_WANT_ALG_CCM defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_CMAC) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_AES) || \
|
|
defined(PSA_WANT_KEY_TYPE_CAMELLIA) || \
|
|
defined(PSA_WANT_KEY_TYPE_DES))
|
|
#error "PSA_WANT_ALG_CMAC defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_DETERMINISTIC_ECDSA) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY))
|
|
#error "PSA_WANT_ALG_DETERMINISTIC_ECDSA defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_ECDSA) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY))
|
|
#error "PSA_WANT_ALG_ECDSA defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_GCM) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_AES) || \
|
|
defined(PSA_WANT_KEY_TYPE_CAMELLIA))
|
|
#error "PSA_WANT_ALG_GCM defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY))
|
|
#error "PSA_WANT_ALG_RSA_PKCS1V15_CRYPT defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY))
|
|
#error "PSA_WANT_ALG_RSA_PKCS1V15_SIGN defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_RSA_OAEP) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY))
|
|
#error "PSA_WANT_ALG_RSA_OAEP defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_RSA_PSS) && \
|
|
!(defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY))
|
|
#error "PSA_WANT_ALG_RSA_PSS defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if (defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \
|
|
defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT) || \
|
|
defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE) || \
|
|
defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE)) && \
|
|
!defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
|
|
#error "PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_xxx defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if (defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT) || \
|
|
defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE)) && \
|
|
!defined(PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY)
|
|
#error "PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_xxx defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if (defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_BASIC) || \
|
|
defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_IMPORT) || \
|
|
defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_EXPORT) || \
|
|
defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_GENERATE)) && \
|
|
!defined(PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY)
|
|
#error "PSA_WANT_KEY_TYPE_DH_KEY_PAIR_xxx defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR)
|
|
#if defined(MBEDTLS_DEPRECATED_REMOVED)
|
|
#error "PSA_WANT_KEY_TYPE_ECC_KEY_PAIR is deprecated and will be removed in a \
|
|
future version of Mbed TLS. Please switch to new PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_xxx \
|
|
symbols, where xxx can be: USE, IMPORT, EXPORT, GENERATE, DERIVE"
|
|
#elif defined(MBEDTLS_DEPRECATED_WARNING)
|
|
#warning "PSA_WANT_KEY_TYPE_ECC_KEY_PAIR is deprecated and will be removed in a \
|
|
future version of Mbed TLS. Please switch to new PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_xxx \
|
|
symbols, where xxx can be: USE, IMPORT, EXPORT, GENERATE, DERIVE"
|
|
#endif /* MBEDTLS_DEPRECATED_WARNING */
|
|
#endif /* PSA_WANT_KEY_TYPE_ECC_KEY_PAIR */
|
|
|
|
#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR)
|
|
#if defined(MBEDTLS_DEPRECATED_REMOVED)
|
|
#error "PSA_WANT_KEY_TYPE_RSA_KEY_PAIR is deprecated and will be removed in a \
|
|
future version of Mbed TLS. Please switch to new PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_xxx \
|
|
symbols, where xxx can be: USE, IMPORT, EXPORT, GENERATE, DERIVE"
|
|
#elif defined(MBEDTLS_DEPRECATED_WARNING)
|
|
#warning "PSA_WANT_KEY_TYPE_RSA_KEY_PAIR is deprecated and will be removed in a \
|
|
future version of Mbed TLS. Please switch to new PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_xxx \
|
|
symbols, where xxx can be: USE, IMPORT, EXPORT, GENERATE, DERIVE"
|
|
#endif /* MBEDTLS_DEPRECATED_WARNING */
|
|
#endif /* PSA_WANT_KEY_TYPE_RSA_KEY_PAIR */
|
|
|
|
#if defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_DERIVE)
|
|
#error "PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_DERIVE defined, but feature is not supported"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE)
|
|
#error "PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE defined, but feature is not supported"
|
|
#endif
|
|
|
|
#if defined(PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS) && \
|
|
!defined(PSA_WANT_ALG_SHA_256)
|
|
#error "PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS defined, but not all prerequisites"
|
|
#endif
|
|
|
|
#endif /* MBEDTLS_CHECK_CRYPTO_CONFIG_H */
|