#
# Copyright 2018-2020 NXP
# SPDX-License-Identifier: Apache-2.0
#
# #############################################################
# This file is generated using a script
# #############################################################
#


### Applet : The Secure Element Applet
#
# You can compile host library for different Applets listed below.
# Please note, some of these Applets may be for NXP Internal use only.
doApplet_None_ON="-DApplet=None" #Compiling without any Applet Support
doApplet_A71CH_ON="-DApplet=A71CH" #A71CH (ECC)
doApplet_A71CL_ON="-DApplet=A71CL" #A71CL (RSA)
doApplet_A71CH_SIM_ON="-DApplet=A71CH_SIM" #Similar to A71CH
doApplet_SE05X_A_ON="-DApplet=SE05X_A" #SE050 Type A (ECC)
doApplet_SE05X_B_ON="-DApplet=SE05X_B" #SE050 Type B (RSA)
doApplet_SE05X_C_ON="-DApplet=SE05X_C" #SE050 (Super set of A + B)
doApplet_SE05X_L_ON="-DApplet=SE05X_L" #SE050 (Similar to A71CL)
doApplet_LoopBack_ON="-DApplet=LoopBack" #NXP Internal testing Applet


### SE05X_Ver : SE05X Applet version.
#
# Selection of Applet version 03_XX enables SE050 features.
# Selection of Applet version 06_00 enables SE051 features.
#
doSE05X_Ver_03_XX_ON="-DSE05X_Ver=03_XX" #SE050
doSE05X_Ver_06_00_ON="-DSE05X_Ver=06_00" #SE051


### Host : Host where the software stack is running
#
# e.g. Windows, PC Linux, Embedded Linux, Kinetis like embedded platform
doHost_Darwin_ON="-DHost=Darwin" #OS X / Macintosh
doHost_PCLinux32_ON="-DHost=PCLinux32" #PC/Laptop Linux with 32bit libraries
doHost_PCLinux64_ON="-DHost=PCLinux64" #PC/Laptop Linux with 64bit libraries
doHost_PCWindows_ON="-DHost=PCWindows" #PC/Laptop Windows
doHost_Cygwin_ON="-DHost=Cygwin" #Using Cygwin
doHost_frdmk64f_ON="-DHost=frdmk64f" #Embedded Kinetis Freedom K64F
doHost_evkmimxrt1060_ON="-DHost=evkmimxrt1060" #Embedded Kinetis i.MX RT 1060
doHost_lpcxpresso55s_ON="-DHost=lpcxpresso55s" #Embedded LPCXpresso55s (No demarcation of secure/non-secure world)
doHost_lpcxpresso55s_ns_ON="-DHost=lpcxpresso55s_ns" #Non Secure world of LPCXpresso55s
doHost_lpcxpresso55s_s_ON="-DHost=lpcxpresso55s_s" #Secure world of LPCXpresso55s
doHost_iMXLinux_ON="-DHost=iMXLinux" #Embedded Linux on i.MX
doHost_Raspbian_ON="-DHost=Raspbian" #Embedded Linux on RaspBerry PI
doHost_Android_ON="-DHost=Android" #Android
doHost_Win10IoT_ON="-DHost=Win10IoT" #Windows 10 IoT Core


### SMCOM : Communication Interface
#
# How the host library communicates to the Secure Element.
# This may be directly over an I2C interface on embedded platform.
# Or sometimes over Remote protocol like JRCP_V1 / JRCP_V2 / VCOM from PC.
doSMCOM_None_ON="-DSMCOM=None" #Not using any Communication layer
doSMCOM_JRCP_V2_ON="-DSMCOM=JRCP_V2" #Socket Interface New Implementation

#Socket Interface Old Implementation.
# This is the interface used from Host PC when when we run jrcpv1_server
# from the linux PC.
doSMCOM_JRCP_V1_ON="-DSMCOM=JRCP_V1"
doSMCOM_VCOM_ON="-DSMCOM=VCOM" #Virtual COM Port
doSMCOM_SCI2C_ON="-DSMCOM=SCI2C" #Smart Card I2C for A71CH and A71CH
doSMCOM_T1oI2C_ON="-DSMCOM=T1oI2C" #T=1 over I2C for SE050
doSMCOM_T1oI2C_GP1_0_ON="-DSMCOM=T1oI2C_GP1_0" #GP Spec
doSMCOM_RC663_VCOM_ON="-DSMCOM=RC663_VCOM" #Via RC663 Over VCOM Interface from Windows PC
doSMCOM_PN7150_ON="-DSMCOM=PN7150" #NFC Interface using PN7150
doSMCOM_Thread_ON="-DSMCOM=Thread" #Thread Mode interface
doSMCOM_PCSC_ON="-DSMCOM=PCSC" #CCID PC/SC reader interface


### HostCrypto : Counterpart Crypto on Host
#
# What is being used as a cryptographic library on the host.
# As of now only OpenSSL / mbedTLS is supported
doHostCrypto_MBEDTLS_ON="-DHostCrypto=MBEDTLS" #Use mbedTLS as host crypto

#Use mbed-crypto as host crypto
# Required for ARM-PSA / TF-M
doHostCrypto_MBEDCRYPTO_ON="-DHostCrypto=MBEDCRYPTO"
doHostCrypto_OPENSSL_ON="-DHostCrypto=OPENSSL" #Use OpenSSL as host crypto

#User Implementation of Host Crypto
# e.g. Files at ``sss/src/user/crypto`` have low level AES/CMAC primitives.
# The files at ``sss/src/user`` use those primitives.
# This becomes an example for users with their own AES Implementation
# This then becomes integration without mbedTLS/OpenSSL for SCP03 / AESKey.
#
# .. note:: ECKey abstraction is not implemented/available yet.
doHostCrypto_User_ON="-DHostCrypto=User"

#NO Host Crypto
# Note, this is unsecure and only provided for experimentation
# on platforms that do not have an mbedTLS PORT
# Many :ref:`sssftr-control` have to be disabled to have a valid build.
doHostCrypto_None_ON="-DHostCrypto=None"


### RTOS : Choice of Operating system
#
# Default would mean nothing special.
# i.e. Without any RTOS on embedded system, or default APIs on PC/Linux
doRTOS_Default_ON="-DRTOS=Default" #No specific RTOS. Either bare matal on embedded system or native linux or Windows OS
doRTOS_FreeRTOS_ON="-DRTOS=FreeRTOS" #Free RTOS for embedded systems


### mbedTLS_ALT : ALT Engine implementation for mbedTLS
#
# When set to None, mbedTLS would not use ALT Implementation to connect to / use Secure Element.
# This needs to be set to SSS for Cloud Demos over SSS APIs
dombedTLS_ALT_SSS_ON="-DmbedTLS_ALT=SSS" #Use SSS Layer ALT implementation
dombedTLS_ALT_A71CH_ON="-DmbedTLS_ALT=A71CH" #Legacy implementation

#Not using any mbedTLS_ALT
#
# When this is selected, cloud demos can not work with mbedTLS
dombedTLS_ALT_None_ON="-DmbedTLS_ALT=None"


### SCP : Secure Channel Protocol
#
# In case we enable secure channel to Secure Element, which interface to be used.
doSCP_None_ON="-DSCP=None" #
doSCP_SCP03_SSS_ON="-DSCP=SCP03_SSS" #Use SSS Layer for SCP.  Used for SE050 family.
doSCP_SCP03_HostCrypto_ON="-DSCP=SCP03_HostCrypto" #Use Host Crypto Layer for SCP03. Legacy implementation. Used for older demos of A71CH Family.


### FIPS : Enable or disable FIPS
#
# This selection mostly impacts tests, and generally not the actual Middleware
doFIPS_None_ON="-DFIPS=None" #NO FIPS
doFIPS_SE050_ON="-DFIPS=SE050" #SE050 IC FIPS
doFIPS_140_2_ON="-DFIPS=140_2" #FIPS 140-2
doFIPS_140_3_ON="-DFIPS=140_3" #FIPS 140-3


### SE05X_Auth : SE050 Authentication
#
# This settings is used by examples to connect using various options
# to authenticate with the Applet.
# The SE05X_Auth options can be changed for KSDK Demos and Examples.
# To change SE05X_Auth option follow below steps.
# Set flag ``SSS_HAVE_SCP_SCP03_SSS`` to 1 and Reset flag ``SSS_HAVE_SCP_NONE`` to 0.
# To change SE05X_Auth option other than ``None`` and  ``PlatfSCP03``,
# execute se05x_Delete_and_test_provision.exe in order to provision the Authentication Key.
# To change SE05X_Auth option to ``ECKey`` or ``ECKey_PlatfSCP03``,
# Set additional flag ``SSS_HAVE_HOSTCRYPTO_ANY`` to 1.
doSE05X_Auth_None_ON="-DSE05X_Auth=None" #Use the default session (i.e. session less) login
doSE05X_Auth_UserID_ON="-DSE05X_Auth=UserID" #Do User Authentication with UserID
doSE05X_Auth_PlatfSCP03_ON="-DSE05X_Auth=PlatfSCP03" #Use Platform SCP for connection to SE

#Do User Authentication with AES Key
# Earlier this was called AppletSCP03
doSE05X_Auth_AESKey_ON="-DSE05X_Auth=AESKey"

#Do User Authentication with EC Key
# Earlier this was called FastSCP
doSE05X_Auth_ECKey_ON="-DSE05X_Auth=ECKey"
doSE05X_Auth_UserID_PlatfSCP03_ON="-DSE05X_Auth=UserID_PlatfSCP03" #UserID and PlatfSCP03
doSE05X_Auth_AESKey_PlatfSCP03_ON="-DSE05X_Auth=AESKey_PlatfSCP03" #AESKey and PlatfSCP03
doSE05X_Auth_ECKey_PlatfSCP03_ON="-DSE05X_Auth=ECKey_PlatfSCP03" #ECKey and PlatfSCP03


### A71CH_AUTH : A71CH Authentication
#
# This settings is used by SSS-API based examples to connect using either plain or authenticated to the A71CH.
doA71CH_AUTH_None_ON="-DA71CH_AUTH=None" #Plain communication, not authenticated or encrypted
doA71CH_AUTH_SCP03_ON="-DA71CH_AUTH=SCP03" #SCP03 enabled


### Log : Logging
doLog_Default_ON="-DLog=Default" #Default Logging
doLog_Verbose_ON="-DLog=Verbose" #Very Verbose logging
doLog_Silent_ON="-DLog=Silent" #Totally silent logging
doLog_SeggerRTT_ON="-DLog=SeggerRTT" #Segger Real Time Transfer (For Test Automation, NXP Internal)


### CMAKE_BUILD_TYPE : See https://cmake.org/cmake/help/latest/variable/CMAKE_BUILD_TYPE.html
#
# For embedded builds, this choices sets optimization levels.
# For MSVC builds, build type is selected from IDE As well
doCMAKE_BUILD_TYPE_Debug_ON="-DCMAKE_BUILD_TYPE=Debug" #For developer
doCMAKE_BUILD_TYPE_Release_ON="-DCMAKE_BUILD_TYPE=Release" #Optimization enabled and debug symbols removed
doCMAKE_BUILD_TYPE_RelWithDebInfo_ON="-DCMAKE_BUILD_TYPE=RelWithDebInfo" #Optimization enabled but with debug symbols
doCMAKE_BUILD_TYPE__ON="-DCMAKE_BUILD_TYPE=" #Empty Allowed
# SE05X Secure Element : Symmetric AES
doSSSFTR_SE05X_AES_ON="-DSSSFTR_SE05X_AES=ON"
doSSSFTR_SE05X_AES_OFF="-DSSSFTR_SE05X_AES=OFF"
# SE05X Secure Element : Elliptic Curve Cryptography
doSSSFTR_SE05X_ECC_ON="-DSSSFTR_SE05X_ECC=ON"
doSSSFTR_SE05X_ECC_OFF="-DSSSFTR_SE05X_ECC=OFF"
# SE05X Secure Element : RSA
doSSSFTR_SE05X_RSA_ON="-DSSSFTR_SE05X_RSA=ON"
doSSSFTR_SE05X_RSA_OFF="-DSSSFTR_SE05X_RSA=OFF"
# SE05X Secure Element : KEY operations : SET Key
doSSSFTR_SE05X_KEY_SET_ON="-DSSSFTR_SE05X_KEY_SET=ON"
doSSSFTR_SE05X_KEY_SET_OFF="-DSSSFTR_SE05X_KEY_SET=OFF"
# SE05X Secure Element : KEY operations : GET Key
doSSSFTR_SE05X_KEY_GET_ON="-DSSSFTR_SE05X_KEY_GET=ON"
doSSSFTR_SE05X_KEY_GET_OFF="-DSSSFTR_SE05X_KEY_GET=OFF"
# SE05X Secure Element : Authenticate via ECKey
doSSSFTR_SE05X_AuthECKey_ON="-DSSSFTR_SE05X_AuthECKey=ON"
doSSSFTR_SE05X_AuthECKey_OFF="-DSSSFTR_SE05X_AuthECKey=OFF"
# SE05X Secure Element : Allow creation of user/authenticated session.
#
# If the intended deployment only uses Platform SCP
# Or it is a pure session less integration, this can
# save some code size.
doSSSFTR_SE05X_AuthSession_ON="-DSSSFTR_SE05X_AuthSession=ON"
doSSSFTR_SE05X_AuthSession_OFF="-DSSSFTR_SE05X_AuthSession=OFF"
# SE05X Secure Element : Allow creation/deletion of Crypto Objects
#
# If disabled, new Crytpo Objects are neither created and
# old/existing Crypto Objects are not deleted.
# It is assumed that during provisioning phase, the required
# Crypto Objects are pre-created or they are never going to
# be needed.
doSSSFTR_SE05X_CREATE_DELETE_CRYPTOOBJ_ON="-DSSSFTR_SE05X_CREATE_DELETE_CRYPTOOBJ=ON"
doSSSFTR_SE05X_CREATE_DELETE_CRYPTOOBJ_OFF="-DSSSFTR_SE05X_CREATE_DELETE_CRYPTOOBJ=OFF"
# Software : Symmetric AES
doSSSFTR_SW_AES_ON="-DSSSFTR_SW_AES=ON"
doSSSFTR_SW_AES_OFF="-DSSSFTR_SW_AES=OFF"
# Software : Elliptic Curve Cryptography
doSSSFTR_SW_ECC_ON="-DSSSFTR_SW_ECC=ON"
doSSSFTR_SW_ECC_OFF="-DSSSFTR_SW_ECC=OFF"
# Software : RSA
doSSSFTR_SW_RSA_ON="-DSSSFTR_SW_RSA=ON"
doSSSFTR_SW_RSA_OFF="-DSSSFTR_SW_RSA=OFF"
# Software : KEY operations : SET Key
doSSSFTR_SW_KEY_SET_ON="-DSSSFTR_SW_KEY_SET=ON"
doSSSFTR_SW_KEY_SET_OFF="-DSSSFTR_SW_KEY_SET=OFF"
# Software : KEY operations : GET Key
doSSSFTR_SW_KEY_GET_ON="-DSSSFTR_SW_KEY_GET=ON"
doSSSFTR_SW_KEY_GET_OFF="-DSSSFTR_SW_KEY_GET=OFF"
# Software : Used as a test counterpart
#
# e.g. Major part of the mebdTLS SSS layer is purely used for
# testing of Secure Element implementation, and can be avoided
# fully during many production scenarios.
doSSSFTR_SW_TESTCOUNTERPART_ON="-DSSSFTR_SW_TESTCOUNTERPART=ON"
doSSSFTR_SW_TESTCOUNTERPART_OFF="-DSSSFTR_SW_TESTCOUNTERPART=OFF"

# Compile in NXP NFC RdLib support
doWithNXPNFCRdLib_ON="-DWithNXPNFCRdLib=ON"
doWithNXPNFCRdLib_OFF="-DWithNXPNFCRdLib=OFF"

# Compile With open62541 Support
doWithOPCUA_open62541_ON="-DWithOPCUA_open62541=ON"
doWithOPCUA_open62541_OFF="-DWithOPCUA_open62541=OFF"

# Create and use shared libraries
doWithSharedLIB_ON="-DWithSharedLIB=ON"
doWithSharedLIB_OFF="-DWithSharedLIB=OFF"

# NXP Internal
doNXPInternal_ON="-DNXPInternal=ON"
doNXPInternal_OFF="-DNXPInternal=OFF"

# Compile with Code Coverage
doWithCodeCoverage_ON="-DWithCodeCoverage=ON"
doWithCodeCoverage_OFF="-DWithCodeCoverage=OFF"

# Include code from ../customer
doWithExtCustomerCode_ON="-DWithExtCustomerCode=ON"
doWithExtCustomerCode_OFF="-DWithExtCustomerCode=OFF"