wolfSSL · aidangarske · Sep 2, 2026 · Sep 3, 2026 · Sep 3, 2026 · Sep 3, 2026
diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
@@ -88,6 +88,62 @@ jobs:
         make test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
                   LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
 
+    - name: Run RFC 9783 PSA/EAT conformance tests
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                          LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run RFC 9783 PSA/EAT device-onboarding example
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make psa-eat-demo CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                          LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run RFC 9783 PSA/EAT floating-point decoder-safety tests
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-float-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                 LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run RFC 9783 PSA/EAT constrained-buffer tests
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-min-buffers-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                      LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run RFC 9783 PSA/EAT claim-limit boundary tests
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-claim-limits-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                            LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run isolated RFC 9783 PSA/EAT feature-profile tests
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-profile-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                   LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Check PSA/EAT feature-gate matrix
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-config-check CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                   LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
     - name: Run zeroize-hook regression test
       run: |
         export WOLFSSL_DIR=$HOME/wolfssl-install
@@ -112,6 +168,24 @@ jobs:
         make ext-sign-force-failure CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
                                     LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
 
+    - name: Run PSA/EAT delegated signing tests
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-ext-sign-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                   LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+        make eat-psa-ext-sign-force-failure CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                             LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run generic reduced-algorithm regression
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        export DYLD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make generic-reduced-alg-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+                                       LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
     - name: Run tool round-trip test
       run: |
         export WOLFSSL_DIR=$HOME/wolfssl-install

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -62,8 +62,11 @@ jobs:
       - name: Build wolfCOSE
         run: |
           export WOLFSSL_DIR=$HOME/wolfssl-install
+          export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
           make CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
                LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+          make eat-psa-test CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
+               LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -57,7 +57,7 @@ jobs:
       run: |
         export WOLFSSL_DIR=$HOME/wolfssl-install
         export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
-        make coverage-force-failure CC=gcc \
+        make eat-psa-coverage-force-failure CC=gcc \
           CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -I./include -isystem $WOLFSSL_DIR/include" \
           LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
 
@@ -71,6 +71,7 @@ jobs:
         # Coverage thresholds:
         #   wolfcose.c:      99% minimum
         #   wolfcose_cbor.c: 100% minimum
+        #   wolfcose_eat_psa.c: 100% minimum (full PSA/EAT profile)
 
         FAILED=0
 
@@ -131,14 +132,45 @@ jobs:
           echo ""
         fi
 
+        # Parse optional RFC 9783 PSA/EAT parser coverage. This source is
+        # compiled only by the explicit full profile used above.
+        EAT_PCT=$(echo "$GCOV_OUTPUT" | grep -A1 "wolfcose_eat_psa.c'" | grep "Lines executed" | sed "s/.*:\([0-9.]*\)%.*/\1/")
+        EAT_UNCOV=$(grep -c "#####" wolfcose_eat_psa.c.gcov 2>/dev/null) || EAT_UNCOV=0
+
+        if [ -z "$EAT_PCT" ]; then
+          FAILED=1
+          echo ">>> FAILED: wolfcose_eat_psa.c coverage data is missing! <<<"
+          echo ""
+        else
+          echo "wolfcose_eat_psa.c:"
+          echo "  Coverage: ${EAT_PCT}%"
+          echo "  Threshold: 100%"
+          echo "  Uncovered lines: ${EAT_UNCOV}"
+          echo ""
+
+          if awk "BEGIN {exit !($EAT_PCT < 100)}"; then
+            FAILED=1
+            echo ">>> FAILED: wolfcose_eat_psa.c coverage is below 100%! <<<"
+            echo ""
+            echo "Uncovered lines in wolfcose_eat_psa.c:"
+            echo "---------------------------------------"
+            grep -n "#####" wolfcose_eat_psa.c.gcov | head -50
+            echo ""
+          else
+            echo ">>> PASSED: wolfcose_eat_psa.c meets 100% threshold <<<"
+          fi
+          echo ""
+        fi
+
         echo "=============================================="
 
         if [ "$FAILED" -eq 1 ]; then
           echo ""
           echo "  Looks like you need more tests!"
           echo ""
-          echo "  Add tests to tests/test_cose.c to cover the"
-          echo "  uncovered lines shown above."
+          echo "  Add tests in the matching test source, for example"
+          echo "  tests/test_eat_psa.c for wolfcose_eat_psa.c, to cover"
+          echo "  the uncovered lines shown above."
           echo ""
           echo "=============================================="
           exit 1

diff --git a/.github/workflows/interop.yml b/.github/workflows/interop.yml
@@ -23,7 +23,7 @@ jobs:
     uses: ./.github/workflows/_resolve-wolfssl.yml
 
   interop:
-    name: wolfCOSE <-> t_cose (OpenSSL, wolfSSL ${{ matrix.wolfssl-version }})
+    name: wolfCOSE <-> t_cose + PSA/EAT (OpenSSL, wolfSSL ${{ matrix.wolfssl-version }})
     needs: discover
     runs-on: ubuntu-latest
     strategy:
@@ -89,7 +89,15 @@ jobs:
         make CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -I./include -isystem $WOLFSSL_DIR/include" \
              LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
 
-    - name: Run t_cose interop
+    - name: Verify RFC 9783 Appendix A PSA/EAT vectors
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make eat-psa-test \
+             CFLAGS="-std=c99 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -I./include -isystem $WOLFSSL_DIR/include" \
+             LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Run t_cose and PSA/EAT profile interop
       run: |
         export WOLFSSL_DIR=$HOME/wolfssl-install
         export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib

diff --git a/.github/workflows/lean-build.yml b/.github/workflows/lean-build.yml
@@ -33,21 +33,19 @@ jobs:
       uses: actions/cache@v4
       with:
         path: ~/wolfssl-lean
-        key: wolfssl-lean-ecc-verifyonly-v2-${{ steps.wolfssl-rev.outputs.sha }}
+        key: wolfssl-lean-tfm-verifyonly-v3-${{ steps.wolfssl-rev.outputs.sha }}
 
-    # Verify-only ECC backend: NO_ECC_SIGN compiles ECC signing out entirely,
-    # mirroring an embedded verify-only target (e.g. wolfBoot). This is the
-    # config that catches a lean wolfCOSE accidentally pulling in a signing
-    # helper such as wc_ecc_sign_hash (via wolfCose_EccSignRaw): it links here
-    # only if the verify path references no sign-side symbols.
+    # Verify-only full-#tfm backend: NO_ECC_SIGN compiles ECDSA signing out.
+    # This catches a verification path that accidentally pulls in a signing
+    # helper while retaining every algorithm RFC 9783 Section 5.2 requires.
     - name: Build minimal wolfSSL
       if: steps.cache-wolfssl.outputs.cache-hit != 'true'
       run: |
         cd ~
         git clone --depth 1 https://github.com/wolfSSL/wolfssl.git wolfssl-lean-src
         cd wolfssl-lean-src
         ./autogen.sh
-        ./configure --enable-cryptonly --enable-ecc \
+        ./configure --enable-cryptonly --enable-ecc --enable-sha384 --enable-sha512 \
                     CFLAGS="-DNO_ECC_SIGN" \
                     --prefix=$HOME/wolfssl-lean
         make -j$(nproc)
@@ -77,8 +75,32 @@ jobs:
         fi
         echo "OK: verify present, signing absent"
 
+    - name: Build and run the lean RFC 9783 PSA/EAT verifier
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-lean
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        make psa-eat-lean-verify \
+          CFLAGS="-std=c11 -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -ffunction-sections -fdata-sections -I./include -isystem $WOLFSSL_DIR/include" \
+          LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
+    - name: Assert PSA/EAT lean verifier has no signing API
+      run: |
+        BIN=examples/psa_eat_verify_lean
+        if nm "$BIN" | grep -E " [tT] wc_Cose(Sign1_Sign|Mac0_Create)\\b"; then
+          echo "FAIL: creation API present in PSA/EAT verifier"; exit 1
+        fi
+        if ! nm "$BIN" | grep -qE " [tT] wc_CoseEatPsaToken_Verify\\b"; then
+          echo "FAIL: PSA/EAT verifier API missing"; exit 1
+        fi
+        if nm "$BIN" | grep -qE " [tT] wc_CoseEatPsaToken_(EncodeClaims|CreateSign1|CreateMac0|VerifyByUeid|ForEachComponent)\\b"; then
+          echo "FAIL: unselected PSA/EAT API linked into lean verifier"; exit 1
+        fi
+        echo "OK: PSA/EAT verification present, signing absent"
+
     - name: Report lean example size
-      run: size examples/sign1_verify_lean || true
+      run: |
+        size examples/sign1_verify_lean || true
+        size examples/psa_eat_verify_lean || true
 
   lean-compile-matrix:
     name: Lean configs compile clean (strict)
@@ -133,6 +155,14 @@ jobs:
         gcc $SF -DWOLFCOSE_LEAN_VERIFY -c src/wolfcose.c -o /tmp/lean.o
         echo "== COSE_Mac without COSE_Mac0 =="
         gcc $SF -DWOLFCOSE_NO_MAC0 -c src/wolfcose.c -o /tmp/mac-no-mac0.o
+        echo "== WOLFCOSE_LEAN_VERIFY + RFC 9783 PSA/EAT =="
+        gcc $SF -DWOLFCOSE_LEAN_VERIFY -DWOLFCOSE_ENABLE_EAT_PSA \
+            -DWOLFCOSE_ENABLE_EAT_PSA_CURRENT \
+            -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1 \
+            -DWOLFCOSE_ENABLE_EAT_PSA_MAC0 -DWOLFCOSE_ENABLE_ES384 \
+            -DWOLFCOSE_ENABLE_ES512 -DWOLFCOSE_ENABLE_HMAC384 \
+            -DWOLFCOSE_ENABLE_HMAC512 \
+            -c src/wolfcose_eat_psa.c -o /tmp/eat-lean.o
         echo "== sign-only =="
         gcc $SF -DWOLFCOSE_NO_SIGN1_VERIFY -DWOLFCOSE_NO_ENCRYPT0 -DWOLFCOSE_NO_MAC0 \
             -DWOLFCOSE_NO_SIGN -DWOLFCOSE_NO_ENCRYPT -DWOLFCOSE_NO_MAC \
@@ -143,6 +173,14 @@ jobs:
         gcc $SF -DWOLFCOSE_LEAN_VERIFY_MLDSA -c src/wolfcose.c -o /tmp/mldsav.o
         echo "All lean configurations compiled clean."
 
+    - name: Check PSA/EAT opt-in feature matrix
+      run: |
+        export WOLFSSL_DIR=$HOME/wolfssl-install
+        export LD_LIBRARY_PATH=$WOLFSSL_DIR/lib
+        SF="-std=c11 -Os -Wall -Wextra -Wpedantic -Wshadow -Wconversion -Werror -DHAVE_ANONYMOUS_INLINE_AGGREGATES=1 -I./include -isystem $WOLFSSL_DIR/include"
+        make eat-psa-config-check CFLAGS="$SF" \
+             LDFLAGS="-L$WOLFSSL_DIR/lib -lwolfssl"
+
   mldsa:
     name: Post-quantum ML-DSA lean sign+verify and verify-only
     runs-on: ubuntu-latest

diff --git a/.github/workflows/misra-2012.yml b/.github/workflows/misra-2012.yml
@@ -82,8 +82,18 @@ jobs:
         # a full production build does. Only true user inputs are supplied.
         cc -std=c99 -Wall -Wextra -Wpedantic -Werror \
            -DWOLFCOSE_FLOAT -DWOLFCOSE_ENABLE_EXT_SIGN \
+           -DWOLFCOSE_ENABLE_EAT_PSA \
+           -DWOLFCOSE_ENABLE_EAT_PSA_CURRENT \
+           -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1 \
+           -DWOLFCOSE_ENABLE_EAT_PSA_MAC0 \
+           -DWOLFCOSE_ENABLE_EAT_PSA_ISSUE \
+           -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1_ISSUE \
+           -DWOLFCOSE_ENABLE_EAT_PSA_MAC0_ISSUE \
+           -DWOLFCOSE_ENABLE_EAT_PSA_LEGACY \
+           -DWOLFCOSE_ENABLE_EAT_PSA_UEID_RESOLVER \
+           -DWOLFCOSE_ENABLE_EAT_PSA_COMPONENT_ITERATOR \
            -I include -I "$HOME/wolfssl-install/include" \
-           -fsyntax-only tests/misra_consumer.c
+           -fsyntax-only src/wolfcose_eat_psa.c tests/misra_consumer.c
 
         set +e
         cppcheck --addon=misra \
@@ -107,10 +117,21 @@ jobs:
                  -DWOLFSSL_AES_DIRECT \
                  -DHAVE_HKDF \
                  -DHAVE_AES_CBC \
+                 -DWOLFCOSE_ENABLE_EAT_PSA \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_CURRENT \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1 \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_MAC0 \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_ISSUE \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1_ISSUE \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_MAC0_ISSUE \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_LEGACY \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_UEID_RESOLVER \
+                 -DWOLFCOSE_ENABLE_EAT_PSA_COMPONENT_ITERATOR \
                  -DWOLFCOSE_FLOAT \
                  -DWOLFCOSE_ENABLE_EXT_SIGN \
                  -I include -I src -I $HOME/wolfssl-install/include \
                  src/wolfcose.c src/wolfcose_cbor.c \
+                 src/wolfcose_eat_psa.c \
                  tests/misra_consumer.c \
                  2>&1 | tee misra-report-raw.txt
         CPPCHECK_STATUS=${PIPESTATUS[0]}

diff --git a/.github/workflows/misra-2023.yml b/.github/workflows/misra-2023.yml
@@ -102,6 +102,16 @@ jobs:
             -DHAVE_HKDF -DHAVE_AES_CBC \
             -DWOLFCOSE_FLOAT \
             -DWOLFCOSE_ENABLE_EXT_SIGN \
+            -DWOLFCOSE_ENABLE_EAT_PSA \
+            -DWOLFCOSE_ENABLE_EAT_PSA_CURRENT \
+            -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1 \
+            -DWOLFCOSE_ENABLE_EAT_PSA_MAC0 \
+            -DWOLFCOSE_ENABLE_EAT_PSA_ISSUE \
+            -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1_ISSUE \
+            -DWOLFCOSE_ENABLE_EAT_PSA_MAC0_ISSUE \
+            -DWOLFCOSE_ENABLE_EAT_PSA_LEGACY \
+            -DWOLFCOSE_ENABLE_EAT_PSA_UEID_RESOLVER \
+            -DWOLFCOSE_ENABLE_EAT_PSA_COMPONENT_ITERATOR \
             -I./include -isystem $WOLFSSL_DIR/include"
         for f in src/*.c; do
           gcc $MISRA_FLAGS -c "$f" -o /dev/null 2>&1 | tee -a compiler-warnings.txt || true
@@ -221,6 +231,13 @@ jobs:
             -DWOLFCOSE_SIGN1 -DWOLFCOSE_SIGN1_SIGN -DWOLFCOSE_SIGN1_VERIFY \
             -DWOLFCOSE_ENCRYPT0 -DWOLFCOSE_ENCRYPT0_ENCRYPT -DWOLFCOSE_ENCRYPT0_DECRYPT \
             -DWOLFCOSE_MAC0 -DWOLFCOSE_MAC0_CREATE -DWOLFCOSE_MAC0_VERIFY \
+            -DWOLFCOSE_ENABLE_EAT_PSA -DWOLFCOSE_ENABLE_EAT_PSA_CURRENT \
+            -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1 -DWOLFCOSE_ENABLE_EAT_PSA_MAC0 \
+            -DWOLFCOSE_ENABLE_EAT_PSA_ISSUE -DWOLFCOSE_ENABLE_EAT_PSA_LEGACY \
+            -DWOLFCOSE_ENABLE_EAT_PSA_SIGN1_ISSUE \
+            -DWOLFCOSE_ENABLE_EAT_PSA_MAC0_ISSUE \
+            -DWOLFCOSE_ENABLE_EAT_PSA_UEID_RESOLVER \
+            -DWOLFCOSE_ENABLE_EAT_PSA_COMPONENT_ITERATOR \
             -DWOLFCOSE_SIGN -DWOLFCOSE_SIGN_SIGN -DWOLFCOSE_SIGN_VERIFY \
             -DWOLFCOSE_ENCRYPT -DWOLFCOSE_ENCRYPT_ENCRYPT -DWOLFCOSE_ENCRYPT_DECRYPT \
             -DWOLFCOSE_MAC -DWOLFCOSE_MAC_CREATE -DWOLFCOSE_MAC_VERIFY \