U-Boot

# For U-Boot Proper

choice
	prompt "Crypto libraries (U-Boot Proper)"
	default LEGACY_HASHING_AND_CRYPTO
	help
	  Select crypto libraries.
	  LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries,
	  MBEDTLS_LIB for MbedTLS libraries.

config LEGACY_HASHING_AND_CRYPTO
	bool "legacy crypto libraries"
	select LEGACY_HASHING
	select LEGACY_CRYPTO

config MBEDTLS_LIB
	bool "MbedTLS libraries"
	select MBEDTLS_LIB_X509
endchoice

if LEGACY_HASHING_AND_CRYPTO || MBEDTLS_LIB_HASHING_ALT

config LEGACY_HASHING
	bool "Use U-Boot legacy hashing libraries"
	select MD5_LEGACY if MD5
	select SHA1_LEGACY if SHA1
	select SHA256_LEGACY if SHA256
	select SHA512_LEGACY if SHA512
	select SHA384_LEGACY if SHA384
	help
	  Enable U-Boot legacy hashing libraries.

if LEGACY_HASHING

config SHA1_LEGACY
	bool "Enable SHA1 support with legacy crypto library"
	depends on LEGACY_HASHING && SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with legacy crypto library.

config SHA256_LEGACY
	bool "Enable SHA256 support with legacy crypto library"
	depends on LEGACY_HASHING && SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with legacy crypto library.

config SHA512_LEGACY
	bool "Enable SHA512 support with legacy crypto library"
	depends on LEGACY_HASHING && SHA512
	default y if TI_SECURE_DEVICE && FIT_SIGNATURE
	help
	  This option enables support of hashing using SHA512 algorithm
	  with legacy crypto library.

config SHA384_LEGACY
	bool "Enable SHA384 support with legacy crypto library"
	depends on LEGACY_HASHING && SHA384
	select SHA512_LEGACY
	help
	  This option enables support of hashing using SHA384 algorithm
	  with legacy crypto library.

config MD5_LEGACY
	bool "Enable MD5 support with legacy crypto library"
	depends on LEGACY_HASHING && MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with legacy crypto library.

endif # LEGACY_HASHING

config LEGACY_CRYPTO
	bool "legacy certificate libraries"
	depends on LEGACY_HASHING_AND_CRYPTO
	select ASN1_DECODER_LEGACY if ASN1_DECODER
	select ASYMMETRIC_PUBLIC_KEY_LEGACY if \
		ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	select RSA_PUBLIC_KEY_PARSER_LEGACY if RSA_PUBLIC_KEY_PARSER
	select X509_CERTIFICATE_PARSER_LEGACY if X509_CERTIFICATE_PARSER
	select PKCS7_MESSAGE_PARSER_LEGACY if PKCS7_MESSAGE_PARSER
	select MSCODE_PARSER_LEGACY if MSCODE_PARSER
	help
	  Enable legacy certificate libraries.

if LEGACY_CRYPTO

config ASN1_DECODER_LEGACY
	bool "ASN1 decoder with legacy certificate library"
	depends on LEGACY_CRYPTO && ASN1_DECODER
	help
	  This option chooses legacy certificate library for ASN1 decoder.

config ASYMMETRIC_PUBLIC_KEY_LEGACY
	bool "Asymmetric public key crypto with legacy certificate library"
	depends on LEGACY_CRYPTO && ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	help
	  This option chooses legacy certificate library for asymmetric public
	  key crypto algorithm.

config RSA_PUBLIC_KEY_PARSER_LEGACY
	bool "RSA public key parser with legacy certificate library"
	depends on ASYMMETRIC_PUBLIC_KEY_LEGACY
	select ASN1_DECODER_LEGACY
	help
	  This option chooses legacy certificate library for RSA public key
	  parser.

config X509_CERTIFICATE_PARSER_LEGACY
	bool "X.509 certificate parser with legacy certificate library"
	depends on ASYMMETRIC_PUBLIC_KEY_LEGACY
	select ASN1_DECODER_LEGACY
	help
	  This option chooses legacy certificate library for X509 certificate
	  parser.

config PKCS7_MESSAGE_PARSER_LEGACY
	bool "PKCS#7 message parser with legacy certificate library"
	depends on X509_CERTIFICATE_PARSER_LEGACY
	select ASN1_DECODER_LEGACY
	help
	  This option chooses legacy certificate library for PKCS7 message
	  parser.

config MSCODE_PARSER_LEGACY
	bool "MS authenticode parser with legacy certificate library"
	depends on LEGACY_CRYPTO && MSCODE_PARSER
	select ASN1_DECODER_LEGACY
	help
	  This option chooses legacy certificate library for MS authenticode
	  parser.

endif # LEGACY_CRYPTO

endif # LEGACY_HASHING_AND_CRYPTO || MBEDTLS_LIB_HASHING_ALT

if MBEDTLS_LIB

config MBEDTLS_LIB_HASHING_ALT
	bool "Replace MbedTLS native hashing with U-Boot legacy libraries"
	depends on MBEDTLS_LIB && !MBEDTLS_LIB_CRYPTO
	select LEGACY_HASHING
	default y if MBEDTLS_LIB && !MBEDTLS_LIB_CRYPTO
	help
	  Enable MbedTLS hashing alternatives and replace them with legacy hashing
	  libraries.
	  This allows user to use U-Boot legacy hashing algorithms together with
	  other MbedTLS modules.
	  Mutually incompatible with MBEDTLS_LIB_CRYPTO.

config MBEDTLS_LIB_CRYPTO
	bool "Use MbedTLS native crypto libraries for hashing"
	default y if MBEDTLS_LIB
	select MD5_MBEDTLS if MD5
	select SHA1_MBEDTLS if SHA1
	select SHA256_MBEDTLS if SHA256
	select SHA512_MBEDTLS if SHA512
	select SHA384_MBEDTLS if SHA384
	help
	  Enable MbedTLS native crypto libraries.
	  Mutually incompatible with MBEDTLS_LIB_HASHING_ALT.

if MBEDTLS_LIB_CRYPTO

config SHA1_MBEDTLS
	bool "Enable SHA1 support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO && SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with MbedTLS crypto library.

config SHA256_MBEDTLS
	bool "Enable SHA256 support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO && SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with MbedTLS crypto library.

if SHA256_MBEDTLS

config SHA256_SMALLER
	bool "Enable SHA256 smaller implementation with MbedTLS crypto library"
	depends on SHA256_MBEDTLS
	default y if SHA256_MBEDTLS
	help
	  This option enables support of hashing using SHA256 algorithm
	  smaller implementation with MbedTLS crypto library.

endif

config SHA512_MBEDTLS
	bool "Enable SHA512 support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO && SHA512
	default y if TI_SECURE_DEVICE && FIT_SIGNATURE
	help
	  This option enables support of hashing using SHA512 algorithm
	  with MbedTLS crypto library.

if SHA512_MBEDTLS

config SHA512_SMALLER
	bool "Enable SHA512 smaller implementation with MbedTLS crypto library"
	depends on SHA512_MBEDTLS
	default y if SHA512_MBEDTLS
	help
	  This option enables support of hashing using SHA512 algorithm
	  smaller implementation with MbedTLS crypto library.

endif

config SHA384_MBEDTLS
	bool "Enable SHA384 support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO && SHA384
	select SHA512_MBEDTLS
	help
	  This option enables support of hashing using SHA384 algorithm
	  with MbedTLS crypto library.

config MD5_MBEDTLS
	bool "Enable MD5 support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO && MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with MbedTLS crypto library.

config HKDF_MBEDTLS
	bool "Enable HKDF support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO
	help
	  This option enables support of key derivation using HKDF algorithm
	  with MbedTLS crypto library.

config PKCS5_MBEDTLS
	bool "Enable PKCS#5 support with MbedTLS crypto library"
	depends on MBEDTLS_LIB_CRYPTO
	help
	  This option enables support of PKCS#5 functions (PBKDF2) with
	  MbedTLS crypto library. Required for LUKS decryption.

endif # MBEDTLS_LIB_CRYPTO

config MBEDTLS_LIB_X509
	bool "MbedTLS certificate libraries"
	select ASN1_DECODER_MBEDTLS if ASN1_DECODER
	select ASYMMETRIC_PUBLIC_KEY_MBEDTLS if \
		ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	select RSA_PUBLIC_KEY_PARSER_MBEDTLS if RSA_PUBLIC_KEY_PARSER
	select X509_CERTIFICATE_PARSER_MBEDTLS if X509_CERTIFICATE_PARSER
	select PKCS7_MESSAGE_PARSER_MBEDTLS if PKCS7_MESSAGE_PARSER
	select MSCODE_PARSER_MBEDTLS if MSCODE_PARSER
	help
	  Enable MbedTLS certificate libraries.

if MBEDTLS_LIB_X509

config ASN1_DECODER_MBEDTLS
	bool "ASN1 decoder with MbedTLS certificate library"
	depends on MBEDTLS_LIB_X509 && ASN1_DECODER
	help
	  This option chooses MbedTLS certificate library for ASN1 decoder.

config ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	bool "Asymmetric public key crypto with MbedTLS certificate library"
	depends on MBEDTLS_LIB_X509 && ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	help
	  This option chooses MbedTLS certificate library for asymmetric public
	  key crypto algorithm.

config RSA_PUBLIC_KEY_PARSER_MBEDTLS
	bool "RSA public key parser with MbedTLS certificate library"
	depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	select ASN1_DECODER_MBEDTLS
	help
	  This option chooses MbedTLS certificate library for RSA public key
	  parser.

config X509_CERTIFICATE_PARSER_MBEDTLS
	bool "X.509 certificate parser with MbedTLS certificate library"
	depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	select ASN1_DECODER_MBEDTLS
	help
	  This option chooses MbedTLS certificate library for X509 certificate
	  parser.

config PKCS7_MESSAGE_PARSER_MBEDTLS
	bool "PKCS#7 message parser with MbedTLS certificate library"
	depends on X509_CERTIFICATE_PARSER_MBEDTLS
	select ASN1_DECODER_MBEDTLS
	help
	  This option chooses MbedTLS certificate library for PKCS7 message
	  parser.

config MSCODE_PARSER_MBEDTLS
	bool "MS authenticode parser with MbedTLS certificate library"
	depends on MBEDTLS_LIB_X509 && MSCODE_PARSER
	select ASN1_DECODER_MBEDTLS
	help
	  This option chooses MbedTLS certificate library for MS authenticode
	  parser.

endif # MBEDTLS_LIB_X509

config MBEDTLS_LIB_TLS
	bool "MbedTLS TLS library"
	depends on RSA_PUBLIC_KEY_PARSER_MBEDTLS
	depends on X509_CERTIFICATE_PARSER_MBEDTLS
	depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	depends on ASN1_DECODER_MBEDTLS
	depends on MBEDTLS_LIB
	help
	  Enable MbedTLS TLS library. Required for HTTPs support
	  in wget

endif # MBEDTLS_LIB

# For SPL

if SPL

choice
	prompt "Crypto libraries (SPL)"
	default SPL_LEGACY_HASHING_AND_CRYPTO
	help
	  Select crypto libraries in SPL.
	  SPL_LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries,
	  SPL_MBEDTLS_LIB for MbedTLS libraries.

config SPL_LEGACY_HASHING_AND_CRYPTO
	bool "legacy crypto libraries"
	select SPL_LEGACY_HASHING
	select SPL_LEGACY_CRYPTO

config SPL_MBEDTLS_LIB
	bool "MbedTLS libraries"
	select SPL_MBEDTLS_LIB_X509
endchoice

if SPL_LEGACY_HASHING_AND_CRYPTO || SPL_MBEDTLS_LIB_HASHING_ALT

config SPL_LEGACY_HASHING
	bool "Use U-Boot legacy hashing libraries (SPL)"
	select SPL_MD5_LEGACY if SPL_MD5
	select SPL_SHA1_LEGACY if SPL_SHA1
	select SPL_SHA256_LEGACY if SPL_SHA256
	select SPL_SHA512_LEGACY if SPL_SHA512
	select SPL_SHA384_LEGACY if SPL_SHA384
	help
	  Enable U-Boot legacy hashing libraries in SPL.

if SPL_LEGACY_HASHING

config SPL_SHA1_LEGACY
	bool "Enable SHA1 support with legacy crypto library (SPL)"
	depends on SPL_LEGACY_HASHING && SPL_SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with legacy crypto library in SPL.

config SPL_SHA256_LEGACY
	bool "Enable SHA256 support with legacy crypto library (SPL)"
	depends on SPL_LEGACY_HASHING && SPL_SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with legacy crypto library in SPL.

config SPL_SHA512_LEGACY
	bool "Enable SHA512 support with legacy crypto library (SPL)"
	depends on SPL_LEGACY_HASHING && SPL_SHA512
	help
	  This option enables support of hashing using SHA512 algorithm
	  with legacy crypto library in SPL.

config SPL_SHA384_LEGACY
	bool "Enable SHA384 support with legacy crypto library (SPL)"
	depends on SPL_LEGACY_HASHING && SPL_SHA384
	select SPL_SHA512_LEGACY
	help
	  This option enables support of hashing using SHA384 algorithm
	  with legacy crypto library in SPL.

config SPL_MD5_LEGACY
	bool "Enable MD5 support with legacy crypto library (SPL)"
	depends on SPL_LEGACY_HASHING && SPL_MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with legacy crypto library in SPL.

endif # SPL_LEGACY_HASHING

config SPL_LEGACY_CRYPTO
	bool "legacy certificate libraries (SPL)"
	depends on SPL_LEGACY_HASHING_AND_CRYPTO
	select SPL_ASN1_DECODER_LEGACY if SPL_ASN1_DECODER
	select SPL_ASYMMETRIC_PUBLIC_KEY_LEGACY if \
		SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	select SPL_RSA_PUBLIC_KEY_PARSER_LEGACY if SPL_RSA_PUBLIC_KEY_PARSER
	help
	  Enable legacy certificate libraries in SPL.

if SPL_LEGACY_CRYPTO

config SPL_ASN1_DECODER_LEGACY
	bool "ASN1 decoder with legacy certificate library (SPL)"
	depends on SPL_LEGACY_CRYPTO && SPL_ASN1_DECODER
	help
	  This option chooses legacy certificate library for ASN1 decoder in
	  SPL.

config SPL_ASYMMETRIC_PUBLIC_KEY_LEGACY
	bool "Asymmetric public key crypto with legacy certificate library (SPL)"
	depends on SPL_LEGACY_CRYPTO && SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	help
	  This option chooses legacy certificate library for asymmetric public
	  key crypto algorithm in SPL.

config SPL_RSA_PUBLIC_KEY_PARSER_LEGACY
	bool "RSA public key parser with legacy certificate library (SPL)"
	depends on SPL_ASYMMETRIC_PUBLIC_KEY_LEGACY
	select SPL_ASN1_DECODER_LEGACY
	help
	  This option chooses legacy certificate library for RSA public key
	  parser in SPL.

endif # SPL_LEGACY_CRYPTO

endif # SPL_LEGACY_HASHING_AND_CRYPTO || SPL_MBEDTLS_LIB_HASHING_ALT

if SPL_MBEDTLS_LIB

config SPL_MBEDTLS_LIB_HASHING_ALT
	bool "Replace MbedTLS native hashing with U-Boot legacy libraries (SPL)"
	depends on SPL_MBEDTLS_LIB && !SPL_MBEDTLS_LIB_CRYPTO
	select SPL_LEGACY_HASHING
	default y if SPL_MBEDTLS_LIB && !SPL_MBEDTLS_LIB_CRYPTO
	help
	  Enable MbedTLS hashing alternatives and replace them with legacy hashing
	  libraries in SPL.
	  This allows user to use U-Boot legacy hashing algorithms together with
	  other MbedTLS modules.
	  Mutually incompatible with SPL_MBEDTLS_LIB_CRYPTO.

config SPL_MBEDTLS_LIB_CRYPTO
	bool "Use MbedTLS native crypto libraries for hashing (SPL)"
	default y if SPL_MBEDTLS_LIB
	select SPL_MD5_MBEDTLS if SPL_MD5
	select SPL_SHA1_MBEDTLS if SPL_SHA1
	select SPL_SHA256_MBEDTLS if SPL_SHA256
	select SPL_SHA512_MBEDTLS if SPL_SHA512
	select SPL_SHA384_MBEDTLS if SPL_SHA384
	help
	  Enable MbedTLS native crypto libraries in SPL.

if SPL_MBEDTLS_LIB_CRYPTO

config SPL_SHA1_MBEDTLS
	bool "Enable SHA1 support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with MbedTLS crypto library in SPL.

config SPL_SHA256_MBEDTLS
	bool "Enable SHA256 support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with MbedTLS crypto library in SPL.

config SPL_SHA512_MBEDTLS
	bool "Enable SHA512 support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA512
	help
	  This option enables support of hashing using SHA512 algorithm
	  with MbedTLS crypto library in SPL.

config SPL_SHA384_MBEDTLS
	bool "Enable SHA384 support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_SHA384
	select SPL_SHA512
	help
	  This option enables support of hashing using SHA384 algorithm
	  with MbedTLS crypto library in SPL.

config SPL_MD5_MBEDTLS
	bool "Enable MD5 support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO && SPL_MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with MbedTLS crypto library in SPL.

config SPL_HKDF_MBEDTLS
	bool "Enable HKDF support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO
	help
	  This option enables support of key derivation using HKDF algorithm
	  with MbedTLS crypto library in SPL.

config SPL_PKCS5_MBEDTLS
	bool "Enable PKCS#5 support with MbedTLS crypto library (SPL)"
	depends on SPL_MBEDTLS_LIB_CRYPTO
	help
	  This option enables support of PKCS#5 functions (PBKDF2) with
	  MbedTLS crypto library in SPL. Required for LUKS decryption.

endif # SPL_MBEDTLS_LIB_CRYPTO

config SPL_MBEDTLS_LIB_X509
	bool "MbedTLS certificate libraries (SPL)"
	select SPL_ASN1_DECODER_MBEDTLS if SPL_ASN1_DECODER
	select SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS if \
		SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	select SPL_RSA_PUBLIC_KEY_PARSER_MBEDTLS if SPL_RSA_PUBLIC_KEY_PARSER
	help
	  Enable MbedTLS certificate libraries in SPL.

if SPL_MBEDTLS_LIB_X509

config SPL_ASN1_DECODER_MBEDTLS
	bool "ASN1 decoder with MbedTLS certificate library (SPL)"
	depends on SPL_MBEDTLS_LIB_X509 && SPL_ASN1_DECODER
	help
	  This option chooses MbedTLS certificate library for ASN1 decoder in
	  SPL.

config SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	bool "Asymmetric public key crypto with MbedTLS certificate library (SPL)"
	depends on SPL_MBEDTLS_LIB_X509 && SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE
	help
	  This option chooses MbedTLS certificate library for asymmetric public
	  key crypto algorithm in SPL.

config SPL_RSA_PUBLIC_KEY_PARSER_MBEDTLS
	bool "RSA public key parser with MbedTLS certificate library (SPL)"
	depends on SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	select SPL_ASN1_DECODER_MBEDTLS
	help
	  This option chooses MbedTLS certificate library for RSA public key
	  parser in SPL.

endif # SPL_MBEDTLS_LIB_X509

config SPL_MBEDTLS_LIB_TLS
	bool "MbedTLS TLS library (SPL)"
	depends on SPL_RSA_PUBLIC_KEY_PARSER_MBEDTLS
	depends on SPL_X509_CERTIFICATE_PARSER_MBEDTLS
	depends on SPL_ASYMMETRIC_PUBLIC_KEY_MBEDTLS
	depends on SPL_ASN1_DECODER_MBEDTLS
	depends on SPL_MBEDTLS_LIB
	help
	  Enable MbedTLS TLS library in SPL. Required for HTTPs support
	  in wget

endif # SPL_MBEDTLS_LIB

endif # SPL

# For TPL

if TPL

choice
	prompt "Crypto libraries (TPL)"
	default TPL_LEGACY_HASHING_AND_CRYPTO
	help
	  Select crypto libraries in TPL.
	  TPL_LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries,
	  TPL_MBEDTLS_LIB for MbedTLS libraries.

config TPL_LEGACY_HASHING_AND_CRYPTO
	bool "legacy crypto libraries"
	select TPL_LEGACY_HASHING
	select TPL_LEGACY_CRYPTO

config TPL_MBEDTLS_LIB
	bool "MbedTLS libraries"

endchoice

if TPL_LEGACY_HASHING_AND_CRYPTO || TPL_MBEDTLS_LIB_HASHING_ALT

config TPL_LEGACY_HASHING
	bool "Use U-Boot legacy hashing libraries (TPL)"
	select TPL_MD5_LEGACY if TPL_MD5
	select TPL_SHA1_LEGACY if TPL_SHA1
	select TPL_SHA256_LEGACY if TPL_SHA256
	select TPL_SHA512_LEGACY if TPL_SHA512
	select TPL_SHA384_LEGACY if TPL_SHA384
	help
	  Enable U-Boot legacy hashing libraries in TPL.

if TPL_LEGACY_HASHING

config TPL_SHA1_LEGACY
	bool "Enable SHA1 support with legacy crypto library (TPL)"
	depends on TPL_LEGACY_HASHING && TPL_SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with legacy crypto library in TPL.

config TPL_SHA256_LEGACY
	bool "Enable SHA256 support with legacy crypto library (TPL)"
	depends on TPL_LEGACY_HASHING && TPL_SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with legacy crypto library in TPL.

config TPL_SHA512_LEGACY
	bool "Enable SHA512 support with legacy crypto library (TPL)"
	depends on TPL_LEGACY_HASHING && TPL_SHA512
	help
	  This option enables support of hashing using SHA512 algorithm
	  with legacy crypto library in TPL.

config TPL_SHA384_LEGACY
	bool "Enable SHA384 support with legacy crypto library (TPL)"
	depends on TPL_LEGACY_HASHING && TPL_SHA384
	select TPL_SHA512_LEGACY
	help
	  This option enables support of hashing using SHA384 algorithm
	  with legacy crypto library in TPL.

config TPL_MD5_LEGACY
	bool "Enable MD5 support with legacy crypto library (TPL)"
	depends on TPL_LEGACY_HASHING && TPL_MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with legacy crypto library in TPL.

endif # TPL_LEGACY_HASHING

endif # TPL_LEGACY_HASHING_AND_CRYPTO || TPL_MBEDTLS_LIB_HASHING_ALT

if TPL_MBEDTLS_LIB

config TPL_MBEDTLS_LIB_HASHING_ALT
	bool "Replace MbedTLS native hashing with U-Boot legacy libraries (TPL)"
	depends on TPL_MBEDTLS_LIB && !TPL_MBEDTLS_LIB_CRYPTO
	select TPL_LEGACY_HASHING
	default y if TPL_MBEDTLS_LIB && !TPL_MBEDTLS_LIB_CRYPTO
	help
	  Enable MbedTLS hashing alternatives and replace them with legacy hashing
	  libraries in TPL.
	  This allows user to use U-Boot legacy hashing algorithms together with
	  other MbedTLS modules.
	  Mutually incompatible with TPL_MBEDTLS_LIB_CRYPTO.

config TPL_MBEDTLS_LIB_CRYPTO
	bool "Use MbedTLS native crypto libraries for hashing (TPL)"
	default y if TPL_MBEDTLS_LIB
	select TPL_MD5_MBEDTLS if TPL_MD5
	select TPL_SHA1_MBEDTLS if TPL_SHA1
	select TPL_SHA256_MBEDTLS if TPL_SHA256
	select TPL_SHA512_MBEDTLS if TPL_SHA512
	select TPL_SHA384_MBEDTLS if TPL_SHA384
	help
	  Enable MbedTLS native crypto libraries in TPL.

if TPL_MBEDTLS_LIB_CRYPTO

config TPL_SHA1_MBEDTLS
	bool "Enable SHA1 support with MbedTLS crypto library (TPL)"
	depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with MbedTLS crypto library in TPL.

config TPL_SHA256_MBEDTLS
	bool "Enable SHA256 support with MbedTLS crypto library (TPL)"
	depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with MbedTLS crypto library in TPL.

config TPL_SHA512_MBEDTLS
	bool "Enable SHA512 support with MbedTLS crypto library (TPL)"
	depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA512
	help
	  This option enables support of hashing using SHA512 algorithm
	  with MbedTLS crypto library in TPL.

config TPL_SHA384_MBEDTLS
	bool "Enable SHA384 support with MbedTLS crypto library (TPL)"
	depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_SHA384
	select TPL_SHA512
	help
	  This option enables support of hashing using SHA384 algorithm
	  with MbedTLS crypto library in TPL.

config TPL_MD5_MBEDTLS
	bool "Enable MD5 support with MbedTLS crypto library (TPL)"
	depends on TPL_MBEDTLS_LIB_CRYPTO && TPL_MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with MbedTLS crypto library in TPL.

config TPL_HKDF_MBEDTLS
	bool "Enable HKDF support with MbedTLS crypto library (TPL)"
	depends on TPL_MBEDTLS_LIB_CRYPTO
	help
	  This option enables support of key derivation using HKDF algorithm
	  with MbedTLS crypto library in TPL.

endif # TPL_MBEDTLS_LIB_CRYPTO

endif # TPL_MBEDTLS_LIB

endif # TPL

# For VPL

if VPL

choice
	prompt "Crypto libraries (VPL)"
	default VPL_LEGACY_HASHING_AND_CRYPTO
	help
	  Select crypto libraries in VPL.
	  VPL_LEGACY_HASHING_AND_CRYPTO for legacy crypto libraries,
	  VPL_MBEDTLS_LIB for MbedTLS libraries.

config VPL_LEGACY_HASHING_AND_CRYPTO
	bool "legacy crypto libraries"
	select VPL_LEGACY_HASHING

config VPL_MBEDTLS_LIB
	bool "MbedTLS libraries"

endchoice

if VPL_LEGACY_HASHING_AND_CRYPTO || VPL_MBEDTLS_LIB_HASHING_ALT

config VPL_LEGACY_HASHING
	bool "Use U-Boot legacy hashing libraries (VPL)"
	select VPL_MD5_LEGACY if VPL_MD5
	select VPL_SHA1_LEGACY if VPL_SHA1
	select VPL_SHA256_LEGACY if VPL_SHA256
	select VPL_SHA512_LEGACY if VPL_SHA512
	select VPL_SHA384_LEGACY if VPL_SHA384
	help
	  Enable U-Boot legacy hashing libraries in VPL.

if VPL_LEGACY_HASHING

config VPL_SHA1_LEGACY
	bool "Enable SHA1 support with legacy crypto library (VPL)"
	depends on VPL_LEGACY_HASHING && VPL_SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with legacy crypto library in VPL.

config VPL_SHA256_LEGACY
	bool "Enable SHA256 support with legacy crypto library (VPL)"
	depends on VPL_LEGACY_HASHING && VPL_SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with legacy crypto library in VPL.

config VPL_SHA512_LEGACY
	bool "Enable SHA512 support with legacy crypto library (VPL)"
	depends on VPL_LEGACY_HASHING && VPL_SHA512
	help
	  This option enables support of hashing using SHA512 algorithm
	  with legacy crypto library in VPL.

config VPL_SHA384_LEGACY
	bool "Enable SHA384 support with legacy crypto library (VPL)"
	depends on VPL_LEGACY_HASHING && VPL_SHA384
	select VPL_SHA512_LEGACY
	help
	  This option enables support of hashing using SHA384 algorithm
	  with legacy crypto library in VPL.

config VPL_MD5_LEGACY
	bool "Enable MD5 support with legacy crypto library (VPL)"
	depends on VPL_LEGACY_HASHING && VPL_MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with legacy crypto library in VPL.

endif # VPL_LEGACY_HASHING

endif # VPL_LEGACY_HASHING_AND_CRYPTO || VPL_MBEDTLS_LIB_HASHING_ALT

if VPL_MBEDTLS_LIB

config VPL_MBEDTLS_LIB_HASHING_ALT
	bool "Replace MbedTLS native hashing with U-Boot legacy libraries (VPL)"
	depends on VPL_MBEDTLS_LIB && !VPL_MBEDTLS_LIB_CRYPTO
	select VPL_LEGACY_HASHING
	default y if VPL_MBEDTLS_LIB && !VPL_MBEDTLS_LIB_CRYPTO
	help
	  Enable MbedTLS hashing alternatives and replace them with legacy hashing
	  libraries in VPL.
	  This allows user to use U-Boot legacy hashing algorithms together with
	  other MbedTLS modules.
	  Mutually incompatible with VPL_MBEDTLS_LIB_CRYPTO.

config VPL_MBEDTLS_LIB_CRYPTO
	bool "Use MbedTLS native crypto libraries for hashing (VPL)"
	default y if VPL_MBEDTLS_LIB
	select VPL_MD5_MBEDTLS if VPL_MD5
	select VPL_SHA1_MBEDTLS if VPL_SHA1
	select VPL_SHA256_MBEDTLS if VPL_SHA256
	select VPL_SHA512_MBEDTLS if VPL_SHA512
	select VPL_SHA384_MBEDTLS if VPL_SHA384
	help
	  Enable MbedTLS native crypto libraries in VPL.

if VPL_MBEDTLS_LIB_CRYPTO

config VPL_SHA1_MBEDTLS
	bool "Enable SHA1 support with MbedTLS crypto library (VPL)"
	depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA1
	help
	  This option enables support of hashing using SHA1 algorithm
	  with MbedTLS crypto library in VPL.

config VPL_SHA256_MBEDTLS
	bool "Enable SHA256 support with MbedTLS crypto library (VPL)"
	depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA256
	help
	  This option enables support of hashing using SHA256 algorithm
	  with MbedTLS crypto library in VPL.

config VPL_SHA512_MBEDTLS
	bool "Enable SHA512 support with MbedTLS crypto library (VPL)"
	depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA512
	help
	  This option enables support of hashing using SHA512 algorithm
	  with MbedTLS crypto library in VPL.

config VPL_SHA384_MBEDTLS
	bool "Enable SHA384 support with MbedTLS crypto library (VPL)"
	depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_SHA384
	select VPL_SHA512
	help
	  This option enables support of hashing using SHA384 algorithm
	  with MbedTLS crypto library in VPL.

config VPL_MD5_MBEDTLS
	bool "Enable MD5 support with MbedTLS crypto library (VPL)"
	depends on VPL_MBEDTLS_LIB_CRYPTO && VPL_MD5
	help
	  This option enables support of hashing using MD5 algorithm
	  with MbedTLS crypto library in VPL.

config VPL_HKDF_MBEDTLS
	bool "Enable HKDF support with MbedTLS crypto library (VPL)"
	depends on VPL_MBEDTLS_LIB_CRYPTO
	help
	  This option enables support of key derivation using HKDF algorithm
	  with MbedTLS crypto library in VPL.

endif # VPL_MBEDTLS_LIB_CRYPTO

endif # VPL_MBEDTLS_LIB

endif # VPL