aboutsummaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authorSumit Garg <sumit.garg@linaro.org>2019-11-15 10:43:00 +0530
committerSumit Garg <sumit.garg@linaro.org>2020-03-06 16:40:37 +0530
commit7cda17bb0f92db39d123a4f2a1732c9978556453 (patch)
tree341aa1c3de6d7db4ca669c6901340905be92bb00 /docs
parentd95f7a7287b21422f6a32fde8a4d735ec78e2659 (diff)
downloadplatform_external_arm-trusted-firmware-7cda17bb0f92db39d123a4f2a1732c9978556453.tar.gz
platform_external_arm-trusted-firmware-7cda17bb0f92db39d123a4f2a1732c9978556453.tar.bz2
platform_external_arm-trusted-firmware-7cda17bb0f92db39d123a4f2a1732c9978556453.zip
drivers: crypto: Add authenticated decryption framework
Add framework for autheticated decryption of data. Currently this patch optionally imports mbedtls library as a backend if build option "DECRYPTION_SUPPORT = aes_gcm" is set to perform authenticated decryption using AES-GCM algorithm. Signed-off-by: Sumit Garg <sumit.garg@linaro.org> Change-Id: I2966f0e79033151012bf4ffc66f484cd949e7271
Diffstat (limited to 'docs')
-rw-r--r--docs/getting_started/build-options.rst6
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/getting_started/build-options.rst b/docs/getting_started/build-options.rst
index da5dcbf89..af4895efc 100644
--- a/docs/getting_started/build-options.rst
+++ b/docs/getting_started/build-options.rst
@@ -160,6 +160,12 @@ Common build options
- ``DEBUG``: Chooses between a debug and release build. It can take either 0
(release) or 1 (debug) as values. 0 is the default.
+- ``DECRYPTION_SUPPORT``: This build flag enables the user to select the
+ authenticated decryption algorithm to be used to decrypt firmware/s during
+ boot. It accepts 2 values: ``aes_gcm`` and ``none``. The default value of
+ this flag is ``none`` to disable firmware decryption which is an optional
+ feature as per TBBR. Also, it is an experimental feature.
+
- ``DISABLE_BIN_GENERATION``: Boolean option to disable the generation
of the binary image. If set to 1, then only the ELF image is built.
0 is the default.