13 Mar
2024
13 Mar
'24
3:24 p.m.
Hi Prakash,
To disable PSA crypto, disable all the options that start with MBEDTLS_PSA. From the default configuration, that means commenting out these three options:
//#define MBEDTLS_PSA_CRYPTO_C //#define MBEDTLS_PSA_CRYPTO_STORAGE_C //#define MBEDTLS_PSA_ITS_FILE_C
The errors you list show that you started from a different configuration that has a lot more enabled. It's difficult to help without knowing what, but I recommend that you just start with the default configuration, or start with an empty configuration and build up to what you want.
Best regards,
--
Gilles Peskine
Mbed TLS developer
On 13/03/2024 05:12, Satya Prakash Prasad via mbed-tls wrote:
> Hi,
>
> I am trying to compile MbedTLS 3.5.2 release without PSA but get below
> error message:
>
> mbedtls/check_config.h:62:2: #error "MBEDTLS_ECP_DP_BP256R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:66:2: #error "MBEDTLS_ECP_DP_BP384R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:70:2: #error "MBEDTLS_ECP_DP_BP512R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:74:2: #error "MBEDTLS_ECP_DP_CURVE25519_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:78:2: #error "MBEDTLS_ECP_DP_CURVE448_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:82:2: #error "MBEDTLS_ECP_DP_SECP192R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:86:2: #error "MBEDTLS_ECP_DP_SECP224R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:90:2: #error "MBEDTLS_ECP_DP_SECP256R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:94:2: #error "MBEDTLS_ECP_DP_SECP384R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:98:2: #error "MBEDTLS_ECP_DP_SECP521R1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:102:2: #error "MBEDTLS_ECP_DP_SECP192K1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:111:2: #error "MBEDTLS_ECP_DP_SECP256K1_ENABLED
> defined, but not its PSA counterpart"
> mbedtls/check_config.h:391:2: #error
> "MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED defined, but not all
> prerequisites"
> mbedtls/check_config.h:397:2: #error
> "MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED defined, but not all
> prerequisites"
> mbedtls/check_config.h:406:2: #error
> "MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED defined, but not all
> prerequisites"
> mbedtls/check_config.h:418:2: #error
> "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED defined, but not all
> prerequisites"
> mbedtls/check_config.h:425:2: #error
> "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED defined, but not all
> prerequisites"
> mbedtls/check_config.h:481:2: #error "MBEDTLS_LMS_C requires
> MBEDTLS_PSA_CRYPTO_C and PSA_WANT_ALG_SHA_256"
> mbedtls/check_config.h:725:2: #error "MBEDTLS_PLATFORM_NV_SEED_ALT
> defined, but not all prerequisites"
> mbedtls/check_config.h:879:2: #error
> "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED defined, but
> not all prerequisites"
> mbedtls/check_config.h:885:2: #error
> "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED defined,
> but not all prerequisites"
>
> Regards,
> Prakash