diff options
author | Sumit Garg <sumit.garg@linaro.org> | 2019-11-15 10:43:00 +0530 |
---|---|---|
committer | Sumit Garg <sumit.garg@linaro.org> | 2020-03-06 16:40:37 +0530 |
commit | 7cda17bb0f92db39d123a4f2a1732c9978556453 (patch) | |
tree | 341aa1c3de6d7db4ca669c6901340905be92bb00 /docs | |
parent | d95f7a7287b21422f6a32fde8a4d735ec78e2659 (diff) | |
download | platform_external_arm-trusted-firmware-7cda17bb0f92db39d123a4f2a1732c9978556453.tar.gz platform_external_arm-trusted-firmware-7cda17bb0f92db39d123a4f2a1732c9978556453.tar.bz2 platform_external_arm-trusted-firmware-7cda17bb0f92db39d123a4f2a1732c9978556453.zip |
drivers: crypto: Add authenticated decryption framework
Add framework for autheticated decryption of data. Currently this
patch optionally imports mbedtls library as a backend if build option
"DECRYPTION_SUPPORT = aes_gcm" is set to perform authenticated decryption
using AES-GCM algorithm.
Signed-off-by: Sumit Garg <sumit.garg@linaro.org>
Change-Id: I2966f0e79033151012bf4ffc66f484cd949e7271
Diffstat (limited to 'docs')
-rw-r--r-- | docs/getting_started/build-options.rst | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/getting_started/build-options.rst b/docs/getting_started/build-options.rst index da5dcbf89..af4895efc 100644 --- a/docs/getting_started/build-options.rst +++ b/docs/getting_started/build-options.rst @@ -160,6 +160,12 @@ Common build options - ``DEBUG``: Chooses between a debug and release build. It can take either 0 (release) or 1 (debug) as values. 0 is the default. +- ``DECRYPTION_SUPPORT``: This build flag enables the user to select the + authenticated decryption algorithm to be used to decrypt firmware/s during + boot. It accepts 2 values: ``aes_gcm`` and ``none``. The default value of + this flag is ``none`` to disable firmware decryption which is an optional + feature as per TBBR. Also, it is an experimental feature. + - ``DISABLE_BIN_GENERATION``: Boolean option to disable the generation of the binary image. If set to 1, then only the ELF image is built. 0 is the default. |