modules: mbedtls: Allow for enabling LMS algorithms

Allow for enabling LMS algorithm support via KConfig

Signed-off-by: Moritz Fischer <[email protected]>

Author: mfischer

modules/mbedtls/Kconfig.tls-generic

@@ -458,4 +458,9 @@ config MBEDTLS_PSA_CRYPTO_C
 	depends on MBEDTLS_CTR_DRBG_ENABLED || MBEDTLS_HMAC_DRBG_ENABLED
 	default y if UOSCORE || UEDHOC
 
+config MBEDTLS_LMS
+	bool "Support LMS signature schemes"
+	depends on MBEDTLS_PSA_CRYPTO_C
+	depends on MBEDTLS_HASH_SHA256_ENABLED
+
 endmenu

modules/mbedtls/configs/config-tls-generic.h

@@ -28,6 +28,11 @@
 #define MBEDTLS_HAVE_ASM
 #endif
 
+#if defined(CONFIG_MBEDTLS_LMS)
+#define MBEDTLS_LMS_C
+#define PSA_WANT_ALG_SHA_256 1
+#endif
+
 #if defined(CONFIG_MBEDTLS_HAVE_TIME_DATE)
 #define MBEDTLS_HAVE_TIME
 #define MBEDTLS_HAVE_TIME_DATE