[nrf noup] modules: hostap: Support Wi-Fi EAP-TLS mode

Support Wi-Fi enterprise mode with NRF_SECURITY.

Signed-off-by: Ravi Dondaputi <[email protected]>

Author: rado17

modules/hostap/CMakeLists.txt

@@ -526,6 +526,7 @@ zephyr_library_sources_ifdef(CONFIG_WIFI_NM_WPA_SUPPLICANT_DPP
 # crypto mbedtls related CRYPTO OR LEGACY_NCS
 if(DEFINED CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO OR
    DEFINED CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_LEGACY_NCS OR
+   DEFINED CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT_LEGACY_NCS OR
    DEFINED CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_LEGACY_NCS_PSA)
 zephyr_library_sources(
 	${HOSTAP_SRC_BASE}/crypto/crypto_mbedtls-bignum.c

modules/hostap/Kconfig

@@ -109,7 +109,7 @@ config WIFI_NM_WPA_SUPPLICANT_WEP
 
 choice WIFI_NM_WPA_SUPPLICANT_CRYPTO_BACKEND
 	prompt "WPA supplicant crypto implementation"
-	default WIFI_NM_WPA_SUPPLICANT_CRYPTO_LEGACY_NCS
+	default WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT
 	default WIFI_NM_WPA_SUPPLICANT_CRYPTO_LEGACY_NCS_PSA if SOC_SERIES_NRF54LX
 	help
 	  Select the crypto implementation to use for WPA supplicant.
@@ -141,29 +141,27 @@ config WIFI_NM_WPA_SUPPLICANT_CRYPTO
 config WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT
 	bool "Crypto Mbedtls alt support for WiFi"
 	select MBEDTLS
-	select MBEDTLS_CIPHER_MODE_CTR_ENABLED
-	select MBEDTLS_CIPHER_MODE_CBC_ENABLED
-	select MBEDTLS_CIPHER_AES_ENABLED
-	select MBEDTLS_CIPHER_DES_ENABLED
-	select MBEDTLS_MD5
-	select MBEDTLS_SHA1
+	select NRF_SECURITY
+	select MBEDTLS_X509_LIBRARY
+	select MBEDTLS_TLS_LIBRARY
+	select MBEDTLS_CTR_DRBG_C
+	select PSA_WANT_AES_KEY_SIZE_256
+	select MBEDTLS_RSA_C
+	select MBEDTLS_LEGACY_CRYPTO_C
 	select MBEDTLS_ENTROPY_C
 	select MBEDTLS_CIPHER
 	select MBEDTLS_ECP_C
-	select MBEDTLS_ECP_ALL_ENABLED
-	select MBEDTLS_CMAC_C
 	select MBEDTLS_PKCS5_C
 	select MBEDTLS_PK_WRITE_C
 	select MBEDTLS_ECDH_C
 	select MBEDTLS_ECDSA_C
-	select MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
-	select MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
 	select MBEDTLS_DHM_C
 	select MBEDTLS_HKDF_C
-	select MBEDTLS_SERVER_NAME_INDICATION
 	select MBEDTLS_X509_CRL_PARSE_C
+	select MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
+	select MBEDTLS_MD_C
+	select MBEDTLS_CIPHER_PADDING_PKCS7
 	select MBEDTLS_TLS_VERSION_1_2
-	select MBEDTLS_ECP_DP_SECP256R1_ENABLED
 
 config WIFI_NM_WPA_SUPPLICANT_CRYPTO_LEGACY_NCS
 	bool "Legacy Crypto support for WiFi using nRF security"
@@ -211,6 +209,24 @@ config WIFI_NM_WPA_SUPPLICANT_CRYPTO_LEGACY_NCS_PSA
 	select MBEDTLS_PKCS5_C
 	select MBEDTLS_ECP_DP_SECP256R1_ENABLED
 
+config WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT_LEGACY_NCS
+	bool "Legacy Crypto support for WiFi using nRF security"
+	select MBEDTLS
+	select NRF_SECURITY
+	select MBEDTLS_CIPHER_MODE_CBC
+	select MBEDTLS_CIPHER_MODE_CTR
+	select MBEDTLS_LEGACY_CRYPTO_C
+	select MBEDTLS_SHA1_C
+	select MBEDTLS_ECP_C
+	select MBEDTLS_CTR_DRBG_C
+	select MBEDTLS_PK_C
+	select MBEDTLS_PKCS5_C
+	select MBEDTLS_PK_PARSE_C
+	select MBEDTLS_CMAC_C
+	select MBEDTLS_CIPHER_PADDING_PKCS7
+	select MBEDTLS_PK_WRITE_C
+	select MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
+
 config WIFI_NM_WPA_SUPPLICANT_CRYPTO_NONE
 	bool "No Crypto support for WiFi"