stephen mathenge / Mbed OS Level_estimation_Maesurement

Level measurement using range finder and lora technology

Dependencies:   Cayenne-LPP SDBlockDevice

inc/mbedtls_lora_config.h@0:f930f0440fd5, 2019-06-26 (annotated)

Committer:
wamae
Date:
Wed Jun 26 10:35:50 2019 +0000
Revision:
0:f930f0440fd5
better copy

Who changed what in which revision?

UserRevisionLine numberNew contents of line
wamae 0:f930f0440fd5 1 /**
wamae 0:f930f0440fd5 2 * \file config.h
wamae 0:f930f0440fd5 3 *
wamae 0:f930f0440fd5 4 * \brief Configuration options (set of defines)
wamae 0:f930f0440fd5 5 *
wamae 0:f930f0440fd5 6 * This set of compile-time options may be used to enable
wamae 0:f930f0440fd5 7 * or disable features selectively, and reduce the global
wamae 0:f930f0440fd5 8 * memory footprint.
wamae 0:f930f0440fd5 9 *
wamae 0:f930f0440fd5 10 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
wamae 0:f930f0440fd5 11 * SPDX-License-Identifier: Apache-2.0
wamae 0:f930f0440fd5 12 *
wamae 0:f930f0440fd5 13 * Licensed under the Apache License, Version 2.0 (the "License"); you may
wamae 0:f930f0440fd5 14 * not use this file except in compliance with the License.
wamae 0:f930f0440fd5 15 * You may obtain a copy of the License at
wamae 0:f930f0440fd5 16 *
wamae 0:f930f0440fd5 17 * http://www.apache.org/licenses/LICENSE-2.0
wamae 0:f930f0440fd5 18 *
wamae 0:f930f0440fd5 19 * Unless required by applicable law or agreed to in writing, software
wamae 0:f930f0440fd5 20 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
wamae 0:f930f0440fd5 21 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
wamae 0:f930f0440fd5 22 * See the License for the specific language governing permissions and
wamae 0:f930f0440fd5 23 * limitations under the License.
wamae 0:f930f0440fd5 24 *
wamae 0:f930f0440fd5 25 * This file is part of mbed TLS (https://tls.mbed.org)
wamae 0:f930f0440fd5 26 */
wamae 0:f930f0440fd5 27
wamae 0:f930f0440fd5 28 #ifndef MBEDTLS_LORA_CONFIG_H
wamae 0:f930f0440fd5 29 #define MBEDTLS_LORA_CONFIG_H
wamae 0:f930f0440fd5 30
wamae 0:f930f0440fd5 31 /**
wamae 0:f930f0440fd5 32 * \name SECTION: System support
wamae 0:f930f0440fd5 33 *
wamae 0:f930f0440fd5 34 * This section sets system specific settings.
wamae 0:f930f0440fd5 35 * \{
wamae 0:f930f0440fd5 36 */
wamae 0:f930f0440fd5 37
wamae 0:f930f0440fd5 38 /**
wamae 0:f930f0440fd5 39 * \def MBEDTLS_HAVE_ASM
wamae 0:f930f0440fd5 40 *
wamae 0:f930f0440fd5 41 * The compiler has support for asm().
wamae 0:f930f0440fd5 42 *
wamae 0:f930f0440fd5 43 * Requires support for asm() in compiler.
wamae 0:f930f0440fd5 44 *
wamae 0:f930f0440fd5 45 * Used in:
wamae 0:f930f0440fd5 46 * library/timing.c
wamae 0:f930f0440fd5 47 * library/padlock.c
wamae 0:f930f0440fd5 48 * include/mbedtls/bn_mul.h
wamae 0:f930f0440fd5 49 *
wamae 0:f930f0440fd5 50 * Comment to disable the use of assembly code.
wamae 0:f930f0440fd5 51 */
wamae 0:f930f0440fd5 52 #define MBEDTLS_HAVE_ASM
wamae 0:f930f0440fd5 53
wamae 0:f930f0440fd5 54 /**
wamae 0:f930f0440fd5 55 * \def MBEDTLS_NO_UDBL_DIVISION
wamae 0:f930f0440fd5 56 *
wamae 0:f930f0440fd5 57 * The platform lacks support for double-width integer division (64-bit
wamae 0:f930f0440fd5 58 * division on a 32-bit platform, 128-bit division on a 64-bit platform).
wamae 0:f930f0440fd5 59 *
wamae 0:f930f0440fd5 60 * Used in:
wamae 0:f930f0440fd5 61 * include/mbedtls/bignum.h
wamae 0:f930f0440fd5 62 * library/bignum.c
wamae 0:f930f0440fd5 63 *
wamae 0:f930f0440fd5 64 * The bignum code uses double-width division to speed up some operations.
wamae 0:f930f0440fd5 65 * Double-width division is often implemented in software that needs to
wamae 0:f930f0440fd5 66 * be linked with the program. The presence of a double-width integer
wamae 0:f930f0440fd5 67 * type is usually detected automatically through preprocessor macros,
wamae 0:f930f0440fd5 68 * but the automatic detection cannot know whether the code needs to
wamae 0:f930f0440fd5 69 * and can be linked with an implementation of division for that type.
wamae 0:f930f0440fd5 70 * By default division is assumed to be usable if the type is present.
wamae 0:f930f0440fd5 71 * Uncomment this option to prevent the use of double-width division.
wamae 0:f930f0440fd5 72 *
wamae 0:f930f0440fd5 73 * Note that division for the native integer type is always required.
wamae 0:f930f0440fd5 74 * Furthermore, a 64-bit type is always required even on a 32-bit
wamae 0:f930f0440fd5 75 * platform, but it need not support multiplication or division. In some
wamae 0:f930f0440fd5 76 * cases it is also desirable to disable some double-width operations. For
wamae 0:f930f0440fd5 77 * example, if double-width division is implemented in software, disabling
wamae 0:f930f0440fd5 78 * it can reduce code size in some embedded targets.
wamae 0:f930f0440fd5 79 */
wamae 0:f930f0440fd5 80 //#define MBEDTLS_NO_UDBL_DIVISION
wamae 0:f930f0440fd5 81
wamae 0:f930f0440fd5 82 /**
wamae 0:f930f0440fd5 83 * \def MBEDTLS_HAVE_SSE2
wamae 0:f930f0440fd5 84 *
wamae 0:f930f0440fd5 85 * CPU supports SSE2 instruction set.
wamae 0:f930f0440fd5 86 *
wamae 0:f930f0440fd5 87 * Uncomment if the CPU supports SSE2 (IA-32 specific).
wamae 0:f930f0440fd5 88 */
wamae 0:f930f0440fd5 89 //#define MBEDTLS_HAVE_SSE2
wamae 0:f930f0440fd5 90
wamae 0:f930f0440fd5 91 /**
wamae 0:f930f0440fd5 92 * \def MBEDTLS_HAVE_TIME
wamae 0:f930f0440fd5 93 *
wamae 0:f930f0440fd5 94 * System has time.h and time().
wamae 0:f930f0440fd5 95 * The time does not need to be correct, only time differences are used,
wamae 0:f930f0440fd5 96 * by contrast with MBEDTLS_HAVE_TIME_DATE
wamae 0:f930f0440fd5 97 *
wamae 0:f930f0440fd5 98 * Defining MBEDTLS_HAVE_TIME allows you to specify MBEDTLS_PLATFORM_TIME_ALT,
wamae 0:f930f0440fd5 99 * MBEDTLS_PLATFORM_TIME_MACRO, MBEDTLS_PLATFORM_TIME_TYPE_MACRO and
wamae 0:f930f0440fd5 100 * MBEDTLS_PLATFORM_STD_TIME.
wamae 0:f930f0440fd5 101 *
wamae 0:f930f0440fd5 102 * Comment if your system does not support time functions
wamae 0:f930f0440fd5 103 */
wamae 0:f930f0440fd5 104 //#define MBEDTLS_HAVE_TIME
wamae 0:f930f0440fd5 105
wamae 0:f930f0440fd5 106 /**
wamae 0:f930f0440fd5 107 * \def MBEDTLS_HAVE_TIME_DATE
wamae 0:f930f0440fd5 108 *
wamae 0:f930f0440fd5 109 * System has time.h and time(), gmtime() and the clock is correct.
wamae 0:f930f0440fd5 110 * The time needs to be correct (not necesarily very accurate, but at least
wamae 0:f930f0440fd5 111 * the date should be correct). This is used to verify the validity period of
wamae 0:f930f0440fd5 112 * X.509 certificates.
wamae 0:f930f0440fd5 113 *
wamae 0:f930f0440fd5 114 * Comment if your system does not have a correct clock.
wamae 0:f930f0440fd5 115 */
wamae 0:f930f0440fd5 116 //#define MBEDTLS_HAVE_TIME_DATE
wamae 0:f930f0440fd5 117
wamae 0:f930f0440fd5 118 /**
wamae 0:f930f0440fd5 119 * \def MBEDTLS_PLATFORM_MEMORY
wamae 0:f930f0440fd5 120 *
wamae 0:f930f0440fd5 121 * Enable the memory allocation layer.
wamae 0:f930f0440fd5 122 *
wamae 0:f930f0440fd5 123 * By default mbed TLS uses the system-provided calloc() and free().
wamae 0:f930f0440fd5 124 * This allows different allocators (self-implemented or provided) to be
wamae 0:f930f0440fd5 125 * provided to the platform abstraction layer.
wamae 0:f930f0440fd5 126 *
wamae 0:f930f0440fd5 127 * Enabling MBEDTLS_PLATFORM_MEMORY without the
wamae 0:f930f0440fd5 128 * MBEDTLS_PLATFORM_{FREE,CALLOC}_MACROs will provide
wamae 0:f930f0440fd5 129 * "mbedtls_platform_set_calloc_free()" allowing you to set an alternative calloc() and
wamae 0:f930f0440fd5 130 * free() function pointer at runtime.
wamae 0:f930f0440fd5 131 *
wamae 0:f930f0440fd5 132 * Enabling MBEDTLS_PLATFORM_MEMORY and specifying
wamae 0:f930f0440fd5 133 * MBEDTLS_PLATFORM_{CALLOC,FREE}_MACROs will allow you to specify the
wamae 0:f930f0440fd5 134 * alternate function at compile time.
wamae 0:f930f0440fd5 135 *
wamae 0:f930f0440fd5 136 * Requires: MBEDTLS_PLATFORM_C
wamae 0:f930f0440fd5 137 *
wamae 0:f930f0440fd5 138 * Enable this layer to allow use of alternative memory allocators.
wamae 0:f930f0440fd5 139 */
wamae 0:f930f0440fd5 140 //#define MBEDTLS_PLATFORM_MEMORY
wamae 0:f930f0440fd5 141
wamae 0:f930f0440fd5 142 /**
wamae 0:f930f0440fd5 143 * \def MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
wamae 0:f930f0440fd5 144 *
wamae 0:f930f0440fd5 145 * Do not assign standard functions in the platform layer (e.g. calloc() to
wamae 0:f930f0440fd5 146 * MBEDTLS_PLATFORM_STD_CALLOC and printf() to MBEDTLS_PLATFORM_STD_PRINTF)
wamae 0:f930f0440fd5 147 *
wamae 0:f930f0440fd5 148 * This makes sure there are no linking errors on platforms that do not support
wamae 0:f930f0440fd5 149 * these functions. You will HAVE to provide alternatives, either at runtime
wamae 0:f930f0440fd5 150 * via the platform_set_xxx() functions or at compile time by setting
wamae 0:f930f0440fd5 151 * the MBEDTLS_PLATFORM_STD_XXX defines, or enabling a
wamae 0:f930f0440fd5 152 * MBEDTLS_PLATFORM_XXX_MACRO.
wamae 0:f930f0440fd5 153 *
wamae 0:f930f0440fd5 154 * Requires: MBEDTLS_PLATFORM_C
wamae 0:f930f0440fd5 155 *
wamae 0:f930f0440fd5 156 * Uncomment to prevent default assignment of standard functions in the
wamae 0:f930f0440fd5 157 * platform layer.
wamae 0:f930f0440fd5 158 */
wamae 0:f930f0440fd5 159 //#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
wamae 0:f930f0440fd5 160
wamae 0:f930f0440fd5 161 /**
wamae 0:f930f0440fd5 162 * \def MBEDTLS_PLATFORM_EXIT_ALT
wamae 0:f930f0440fd5 163 *
wamae 0:f930f0440fd5 164 * MBEDTLS_PLATFORM_XXX_ALT: Uncomment a macro to let mbed TLS support the
wamae 0:f930f0440fd5 165 * function in the platform abstraction layer.
wamae 0:f930f0440fd5 166 *
wamae 0:f930f0440fd5 167 * Example: In case you uncomment MBEDTLS_PLATFORM_PRINTF_ALT, mbed TLS will
wamae 0:f930f0440fd5 168 * provide a function "mbedtls_platform_set_printf()" that allows you to set an
wamae 0:f930f0440fd5 169 * alternative printf function pointer.
wamae 0:f930f0440fd5 170 *
wamae 0:f930f0440fd5 171 * All these define require MBEDTLS_PLATFORM_C to be defined!
wamae 0:f930f0440fd5 172 *
wamae 0:f930f0440fd5 173 * \note MBEDTLS_PLATFORM_SNPRINTF_ALT is required on Windows;
wamae 0:f930f0440fd5 174 * it will be enabled automatically by check_config.h
wamae 0:f930f0440fd5 175 *
wamae 0:f930f0440fd5 176 * \warning MBEDTLS_PLATFORM_XXX_ALT cannot be defined at the same time as
wamae 0:f930f0440fd5 177 * MBEDTLS_PLATFORM_XXX_MACRO!
wamae 0:f930f0440fd5 178 *
wamae 0:f930f0440fd5 179 * Requires: MBEDTLS_PLATFORM_TIME_ALT requires MBEDTLS_HAVE_TIME
wamae 0:f930f0440fd5 180 *
wamae 0:f930f0440fd5 181 * Uncomment a macro to enable alternate implementation of specific base
wamae 0:f930f0440fd5 182 * platform function
wamae 0:f930f0440fd5 183 */
wamae 0:f930f0440fd5 184 //#define MBEDTLS_PLATFORM_EXIT_ALT
wamae 0:f930f0440fd5 185 //#define MBEDTLS_PLATFORM_TIME_ALT
wamae 0:f930f0440fd5 186 //#define MBEDTLS_PLATFORM_FPRINTF_ALT
wamae 0:f930f0440fd5 187 //#define MBEDTLS_PLATFORM_PRINTF_ALT
wamae 0:f930f0440fd5 188 //#define MBEDTLS_PLATFORM_SNPRINTF_ALT
wamae 0:f930f0440fd5 189 //#define MBEDTLS_PLATFORM_NV_SEED_ALT
wamae 0:f930f0440fd5 190 //#define MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT
wamae 0:f930f0440fd5 191
wamae 0:f930f0440fd5 192 /**
wamae 0:f930f0440fd5 193 * \def MBEDTLS_DEPRECATED_WARNING
wamae 0:f930f0440fd5 194 *
wamae 0:f930f0440fd5 195 * Mark deprecated functions so that they generate a warning if used.
wamae 0:f930f0440fd5 196 * Functions deprecated in one version will usually be removed in the next
wamae 0:f930f0440fd5 197 * version. You can enable this to help you prepare the transition to a new
wamae 0:f930f0440fd5 198 * major version by making sure your code is not using these functions.
wamae 0:f930f0440fd5 199 *
wamae 0:f930f0440fd5 200 * This only works with GCC and Clang. With other compilers, you may want to
wamae 0:f930f0440fd5 201 * use MBEDTLS_DEPRECATED_REMOVED
wamae 0:f930f0440fd5 202 *
wamae 0:f930f0440fd5 203 * Uncomment to get warnings on using deprecated functions.
wamae 0:f930f0440fd5 204 */
wamae 0:f930f0440fd5 205 //#define MBEDTLS_DEPRECATED_WARNING
wamae 0:f930f0440fd5 206
wamae 0:f930f0440fd5 207 /**
wamae 0:f930f0440fd5 208 * \def MBEDTLS_DEPRECATED_REMOVED
wamae 0:f930f0440fd5 209 *
wamae 0:f930f0440fd5 210 * Remove deprecated functions so that they generate an error if used.
wamae 0:f930f0440fd5 211 * Functions deprecated in one version will usually be removed in the next
wamae 0:f930f0440fd5 212 * version. You can enable this to help you prepare the transition to a new
wamae 0:f930f0440fd5 213 * major version by making sure your code is not using these functions.
wamae 0:f930f0440fd5 214 *
wamae 0:f930f0440fd5 215 * Uncomment to get errors on using deprecated functions.
wamae 0:f930f0440fd5 216 */
wamae 0:f930f0440fd5 217 //#define MBEDTLS_DEPRECATED_REMOVED
wamae 0:f930f0440fd5 218
wamae 0:f930f0440fd5 219 /* \} name SECTION: System support */
wamae 0:f930f0440fd5 220
wamae 0:f930f0440fd5 221 /**
wamae 0:f930f0440fd5 222 * \name SECTION: mbed TLS feature support
wamae 0:f930f0440fd5 223 *
wamae 0:f930f0440fd5 224 * This section sets support for features that are or are not needed
wamae 0:f930f0440fd5 225 * within the modules that are enabled.
wamae 0:f930f0440fd5 226 * \{
wamae 0:f930f0440fd5 227 */
wamae 0:f930f0440fd5 228
wamae 0:f930f0440fd5 229 /**
wamae 0:f930f0440fd5 230 * \def MBEDTLS_TIMING_ALT
wamae 0:f930f0440fd5 231 *
wamae 0:f930f0440fd5 232 * Uncomment to provide your own alternate implementation for mbedtls_timing_hardclock(),
wamae 0:f930f0440fd5 233 * mbedtls_timing_get_timer(), mbedtls_set_alarm(), mbedtls_set/get_delay()
wamae 0:f930f0440fd5 234 *
wamae 0:f930f0440fd5 235 * Only works if you have MBEDTLS_TIMING_C enabled.
wamae 0:f930f0440fd5 236 *
wamae 0:f930f0440fd5 237 * You will need to provide a header "timing_alt.h" and an implementation at
wamae 0:f930f0440fd5 238 * compile time.
wamae 0:f930f0440fd5 239 */
wamae 0:f930f0440fd5 240 //#define MBEDTLS_TIMING_ALT
wamae 0:f930f0440fd5 241
wamae 0:f930f0440fd5 242 /**
wamae 0:f930f0440fd5 243 * \def MBEDTLS_AES_ALT
wamae 0:f930f0440fd5 244 *
wamae 0:f930f0440fd5 245 * MBEDTLS__MODULE_NAME__ALT: Uncomment a macro to let mbed TLS use your
wamae 0:f930f0440fd5 246 * alternate core implementation of a symmetric crypto, an arithmetic or hash
wamae 0:f930f0440fd5 247 * module (e.g. platform specific assembly optimized implementations). Keep
wamae 0:f930f0440fd5 248 * in mind that the function prototypes should remain the same.
wamae 0:f930f0440fd5 249 *
wamae 0:f930f0440fd5 250 * This replaces the whole module. If you only want to replace one of the
wamae 0:f930f0440fd5 251 * functions, use one of the MBEDTLS__FUNCTION_NAME__ALT flags.
wamae 0:f930f0440fd5 252 *
wamae 0:f930f0440fd5 253 * Example: In case you uncomment MBEDTLS_AES_ALT, mbed TLS will no longer
wamae 0:f930f0440fd5 254 * provide the "struct mbedtls_aes_context" definition and omit the base
wamae 0:f930f0440fd5 255 * function declarations and implementations. "aes_alt.h" will be included from
wamae 0:f930f0440fd5 256 * "aes.h" to include the new function definitions.
wamae 0:f930f0440fd5 257 *
wamae 0:f930f0440fd5 258 * Uncomment a macro to enable alternate implementation of the corresponding
wamae 0:f930f0440fd5 259 * module.
wamae 0:f930f0440fd5 260 */
wamae 0:f930f0440fd5 261 //#define MBEDTLS_AES_ALT
wamae 0:f930f0440fd5 262 //#define MBEDTLS_ARC4_ALT
wamae 0:f930f0440fd5 263 //#define MBEDTLS_BLOWFISH_ALT
wamae 0:f930f0440fd5 264 //#define MBEDTLS_CAMELLIA_ALT
wamae 0:f930f0440fd5 265 //#define MBEDTLS_DES_ALT
wamae 0:f930f0440fd5 266 //#define MBEDTLS_XTEA_ALT
wamae 0:f930f0440fd5 267 //#define MBEDTLS_MD2_ALT
wamae 0:f930f0440fd5 268 //#define MBEDTLS_MD4_ALT
wamae 0:f930f0440fd5 269 //#define MBEDTLS_MD5_ALT
wamae 0:f930f0440fd5 270 //#define MBEDTLS_RIPEMD160_ALT
wamae 0:f930f0440fd5 271 //#define MBEDTLS_SHA1_ALT
wamae 0:f930f0440fd5 272 //#define MBEDTLS_SHA256_ALT
wamae 0:f930f0440fd5 273 //#define MBEDTLS_SHA512_ALT
wamae 0:f930f0440fd5 274 /*
wamae 0:f930f0440fd5 275 * When replacing the elliptic curve module, pleace consider, that it is
wamae 0:f930f0440fd5 276 * implemented with two .c files:
wamae 0:f930f0440fd5 277 * - ecp.c
wamae 0:f930f0440fd5 278 * - ecp_curves.c
wamae 0:f930f0440fd5 279 * You can replace them very much like all the other MBEDTLS__MODULE_NAME__ALT
wamae 0:f930f0440fd5 280 * macros as described above. The only difference is that you have to make sure
wamae 0:f930f0440fd5 281 * that you provide functionality for both .c files.
wamae 0:f930f0440fd5 282 */
wamae 0:f930f0440fd5 283 //#define MBEDTLS_ECP_ALT
wamae 0:f930f0440fd5 284
wamae 0:f930f0440fd5 285 /**
wamae 0:f930f0440fd5 286 * \def MBEDTLS_MD2_PROCESS_ALT
wamae 0:f930f0440fd5 287 *
wamae 0:f930f0440fd5 288 * MBEDTLS__FUNCTION_NAME__ALT: Uncomment a macro to let mbed TLS use you
wamae 0:f930f0440fd5 289 * alternate core implementation of symmetric crypto or hash function. Keep in
wamae 0:f930f0440fd5 290 * mind that function prototypes should remain the same.
wamae 0:f930f0440fd5 291 *
wamae 0:f930f0440fd5 292 * This replaces only one function. The header file from mbed TLS is still
wamae 0:f930f0440fd5 293 * used, in contrast to the MBEDTLS__MODULE_NAME__ALT flags.
wamae 0:f930f0440fd5 294 *
wamae 0:f930f0440fd5 295 * Example: In case you uncomment MBEDTLS_SHA256_PROCESS_ALT, mbed TLS will
wamae 0:f930f0440fd5 296 * no longer provide the mbedtls_sha1_process() function, but it will still provide
wamae 0:f930f0440fd5 297 * the other function (using your mbedtls_sha1_process() function) and the definition
wamae 0:f930f0440fd5 298 * of mbedtls_sha1_context, so your implementation of mbedtls_sha1_process must be compatible
wamae 0:f930f0440fd5 299 * with this definition.
wamae 0:f930f0440fd5 300 *
wamae 0:f930f0440fd5 301 * \note Because of a signature change, the core AES encryption and decryption routines are
wamae 0:f930f0440fd5 302 * currently named mbedtls_aes_internal_encrypt and mbedtls_aes_internal_decrypt,
wamae 0:f930f0440fd5 303 * respectively. When setting up alternative implementations, these functions should
wamae 0:f930f0440fd5 304 * be overriden, but the wrapper functions mbedtls_aes_decrypt and mbedtls_aes_encrypt
wamae 0:f930f0440fd5 305 * must stay untouched.
wamae 0:f930f0440fd5 306 *
wamae 0:f930f0440fd5 307 * \note If you use the AES_xxx_ALT macros, then is is recommended to also set
wamae 0:f930f0440fd5 308 * MBEDTLS_AES_ROM_TABLES in order to help the linker garbage-collect the AES
wamae 0:f930f0440fd5 309 * tables.
wamae 0:f930f0440fd5 310 *
wamae 0:f930f0440fd5 311 * Uncomment a macro to enable alternate implementation of the corresponding
wamae 0:f930f0440fd5 312 * function.
wamae 0:f930f0440fd5 313 */
wamae 0:f930f0440fd5 314 //#define MBEDTLS_MD2_PROCESS_ALT
wamae 0:f930f0440fd5 315 //#define MBEDTLS_MD4_PROCESS_ALT
wamae 0:f930f0440fd5 316 //#define MBEDTLS_MD5_PROCESS_ALT
wamae 0:f930f0440fd5 317 //#define MBEDTLS_RIPEMD160_PROCESS_ALT
wamae 0:f930f0440fd5 318 //#define MBEDTLS_SHA1_PROCESS_ALT
wamae 0:f930f0440fd5 319 //#define MBEDTLS_SHA256_PROCESS_ALT
wamae 0:f930f0440fd5 320 //#define MBEDTLS_SHA512_PROCESS_ALT
wamae 0:f930f0440fd5 321 //#define MBEDTLS_DES_SETKEY_ALT
wamae 0:f930f0440fd5 322 //#define MBEDTLS_DES_CRYPT_ECB_ALT
wamae 0:f930f0440fd5 323 //#define MBEDTLS_DES3_CRYPT_ECB_ALT
wamae 0:f930f0440fd5 324 //#define MBEDTLS_AES_SETKEY_ENC_ALT
wamae 0:f930f0440fd5 325 //#define MBEDTLS_AES_SETKEY_DEC_ALT
wamae 0:f930f0440fd5 326 //#define MBEDTLS_AES_ENCRYPT_ALT
wamae 0:f930f0440fd5 327 //#define MBEDTLS_AES_DECRYPT_ALT
wamae 0:f930f0440fd5 328
wamae 0:f930f0440fd5 329 /**
wamae 0:f930f0440fd5 330 * \def MBEDTLS_ECP_INTERNAL_ALT
wamae 0:f930f0440fd5 331 *
wamae 0:f930f0440fd5 332 * Expose a part of the internal interface of the Elliptic Curve Point module.
wamae 0:f930f0440fd5 333 *
wamae 0:f930f0440fd5 334 * MBEDTLS_ECP__FUNCTION_NAME__ALT: Uncomment a macro to let mbed TLS use your
wamae 0:f930f0440fd5 335 * alternative core implementation of elliptic curve arithmetic. Keep in mind
wamae 0:f930f0440fd5 336 * that function prototypes should remain the same.
wamae 0:f930f0440fd5 337 *
wamae 0:f930f0440fd5 338 * This partially replaces one function. The header file from mbed TLS is still
wamae 0:f930f0440fd5 339 * used, in contrast to the MBEDTLS_ECP_ALT flag. The original implementation
wamae 0:f930f0440fd5 340 * is still present and it is used for group structures not supported by the
wamae 0:f930f0440fd5 341 * alternative.
wamae 0:f930f0440fd5 342 *
wamae 0:f930f0440fd5 343 * Any of these options become available by defining MBEDTLS_ECP_INTERNAL_ALT
wamae 0:f930f0440fd5 344 * and implementing the following functions:
wamae 0:f930f0440fd5 345 * unsigned char mbedtls_internal_ecp_grp_capable(
wamae 0:f930f0440fd5 346 * const mbedtls_ecp_group *grp )
wamae 0:f930f0440fd5 347 * int mbedtls_internal_ecp_init( const mbedtls_ecp_group *grp )
wamae 0:f930f0440fd5 348 * void mbedtls_internal_ecp_deinit( const mbedtls_ecp_group *grp )
wamae 0:f930f0440fd5 349 * The mbedtls_internal_ecp_grp_capable function should return 1 if the
wamae 0:f930f0440fd5 350 * replacement functions implement arithmetic for the given group and 0
wamae 0:f930f0440fd5 351 * otherwise.
wamae 0:f930f0440fd5 352 * The functions mbedtls_internal_ecp_init and mbedtls_internal_ecp_deinit are
wamae 0:f930f0440fd5 353 * called before and after each point operation and provide an opportunity to
wamae 0:f930f0440fd5 354 * implement optimized set up and tear down instructions.
wamae 0:f930f0440fd5 355 *
wamae 0:f930f0440fd5 356 * Example: In case you uncomment MBEDTLS_ECP_INTERNAL_ALT and
wamae 0:f930f0440fd5 357 * MBEDTLS_ECP_DOUBLE_JAC_ALT, mbed TLS will still provide the ecp_double_jac
wamae 0:f930f0440fd5 358 * function, but will use your mbedtls_internal_ecp_double_jac if the group is
wamae 0:f930f0440fd5 359 * supported (your mbedtls_internal_ecp_grp_capable function returns 1 when
wamae 0:f930f0440fd5 360 * receives it as an argument). If the group is not supported then the original
wamae 0:f930f0440fd5 361 * implementation is used. The other functions and the definition of
wamae 0:f930f0440fd5 362 * mbedtls_ecp_group and mbedtls_ecp_point will not change, so your
wamae 0:f930f0440fd5 363 * implementation of mbedtls_internal_ecp_double_jac and
wamae 0:f930f0440fd5 364 * mbedtls_internal_ecp_grp_capable must be compatible with this definition.
wamae 0:f930f0440fd5 365 *
wamae 0:f930f0440fd5 366 * Uncomment a macro to enable alternate implementation of the corresponding
wamae 0:f930f0440fd5 367 * function.
wamae 0:f930f0440fd5 368 */
wamae 0:f930f0440fd5 369 /* Required for all the functions in this section */
wamae 0:f930f0440fd5 370 //#define MBEDTLS_ECP_INTERNAL_ALT
wamae 0:f930f0440fd5 371 /* Support for Weierstrass curves with Jacobi representation */
wamae 0:f930f0440fd5 372 //#define MBEDTLS_ECP_RANDOMIZE_JAC_ALT
wamae 0:f930f0440fd5 373 //#define MBEDTLS_ECP_ADD_MIXED_ALT
wamae 0:f930f0440fd5 374 //#define MBEDTLS_ECP_DOUBLE_JAC_ALT
wamae 0:f930f0440fd5 375 //#define MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT
wamae 0:f930f0440fd5 376 //#define MBEDTLS_ECP_NORMALIZE_JAC_ALT
wamae 0:f930f0440fd5 377 /* Support for curves with Montgomery arithmetic */
wamae 0:f930f0440fd5 378 //#define MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT
wamae 0:f930f0440fd5 379 //#define MBEDTLS_ECP_RANDOMIZE_MXZ_ALT
wamae 0:f930f0440fd5 380 //#define MBEDTLS_ECP_NORMALIZE_MXZ_ALT
wamae 0:f930f0440fd5 381
wamae 0:f930f0440fd5 382 /**
wamae 0:f930f0440fd5 383 * \def MBEDTLS_TEST_NULL_ENTROPY
wamae 0:f930f0440fd5 384 *
wamae 0:f930f0440fd5 385 * Enables testing and use of mbed TLS without any configured entropy sources.
wamae 0:f930f0440fd5 386 * This permits use of the library on platforms before an entropy source has
wamae 0:f930f0440fd5 387 * been integrated (see for example the MBEDTLS_ENTROPY_HARDWARE_ALT or the
wamae 0:f930f0440fd5 388 * MBEDTLS_ENTROPY_NV_SEED switches).
wamae 0:f930f0440fd5 389 *
wamae 0:f930f0440fd5 390 * WARNING! This switch MUST be disabled in production builds, and is suitable
wamae 0:f930f0440fd5 391 * only for development.
wamae 0:f930f0440fd5 392 * Enabling the switch negates any security provided by the library.
wamae 0:f930f0440fd5 393 *
wamae 0:f930f0440fd5 394 * Requires MBEDTLS_ENTROPY_C, MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
wamae 0:f930f0440fd5 395 *
wamae 0:f930f0440fd5 396 */
wamae 0:f930f0440fd5 397 //#define MBEDTLS_TEST_NULL_ENTROPY
wamae 0:f930f0440fd5 398
wamae 0:f930f0440fd5 399 /**
wamae 0:f930f0440fd5 400 * \def MBEDTLS_ENTROPY_HARDWARE_ALT
wamae 0:f930f0440fd5 401 *
wamae 0:f930f0440fd5 402 * Uncomment this macro to let mbed TLS use your own implementation of a
wamae 0:f930f0440fd5 403 * hardware entropy collector.
wamae 0:f930f0440fd5 404 *
wamae 0:f930f0440fd5 405 * Your function must be called \c mbedtls_hardware_poll(), have the same
wamae 0:f930f0440fd5 406 * prototype as declared in entropy_poll.h, and accept NULL as first argument.
wamae 0:f930f0440fd5 407 *
wamae 0:f930f0440fd5 408 * Uncomment to use your own hardware entropy collector.
wamae 0:f930f0440fd5 409 */
wamae 0:f930f0440fd5 410 //#define MBEDTLS_ENTROPY_HARDWARE_ALT
wamae 0:f930f0440fd5 411
wamae 0:f930f0440fd5 412 /**
wamae 0:f930f0440fd5 413 * \def MBEDTLS_AES_ROM_TABLES
wamae 0:f930f0440fd5 414 *
wamae 0:f930f0440fd5 415 * Store the AES tables in ROM.
wamae 0:f930f0440fd5 416 *
wamae 0:f930f0440fd5 417 * Uncomment this macro to store the AES tables in ROM.
wamae 0:f930f0440fd5 418 */
wamae 0:f930f0440fd5 419 #define MBEDTLS_AES_ROM_TABLES
wamae 0:f930f0440fd5 420
wamae 0:f930f0440fd5 421 /**
wamae 0:f930f0440fd5 422 * \def MBEDTLS_CAMELLIA_SMALL_MEMORY
wamae 0:f930f0440fd5 423 *
wamae 0:f930f0440fd5 424 * Use less ROM for the Camellia implementation (saves about 768 bytes).
wamae 0:f930f0440fd5 425 *
wamae 0:f930f0440fd5 426 * Uncomment this macro to use less memory for Camellia.
wamae 0:f930f0440fd5 427 */
wamae 0:f930f0440fd5 428 //#define MBEDTLS_CAMELLIA_SMALL_MEMORY
wamae 0:f930f0440fd5 429
wamae 0:f930f0440fd5 430 /**
wamae 0:f930f0440fd5 431 * \def MBEDTLS_CIPHER_MODE_CBC
wamae 0:f930f0440fd5 432 *
wamae 0:f930f0440fd5 433 * Enable Cipher Block Chaining mode (CBC) for symmetric ciphers.
wamae 0:f930f0440fd5 434 */
wamae 0:f930f0440fd5 435 //#define MBEDTLS_CIPHER_MODE_CBC
wamae 0:f930f0440fd5 436
wamae 0:f930f0440fd5 437 /**
wamae 0:f930f0440fd5 438 * \def MBEDTLS_CIPHER_MODE_CFB
wamae 0:f930f0440fd5 439 *
wamae 0:f930f0440fd5 440 * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
wamae 0:f930f0440fd5 441 */
wamae 0:f930f0440fd5 442 //#define MBEDTLS_CIPHER_MODE_CFB
wamae 0:f930f0440fd5 443
wamae 0:f930f0440fd5 444 /**
wamae 0:f930f0440fd5 445 * \def MBEDTLS_CIPHER_MODE_CTR
wamae 0:f930f0440fd5 446 *
wamae 0:f930f0440fd5 447 * Enable Counter Block Cipher mode (CTR) for symmetric ciphers.
wamae 0:f930f0440fd5 448 */
wamae 0:f930f0440fd5 449 //#define MBEDTLS_CIPHER_MODE_CTR
wamae 0:f930f0440fd5 450
wamae 0:f930f0440fd5 451 /**
wamae 0:f930f0440fd5 452 * \def MBEDTLS_CIPHER_NULL_CIPHER
wamae 0:f930f0440fd5 453 *
wamae 0:f930f0440fd5 454 * Enable NULL cipher.
wamae 0:f930f0440fd5 455 * Warning: Only do so when you know what you are doing. This allows for
wamae 0:f930f0440fd5 456 * encryption or channels without any security!
wamae 0:f930f0440fd5 457 *
wamae 0:f930f0440fd5 458 * Requires MBEDTLS_ENABLE_WEAK_CIPHERSUITES as well to enable
wamae 0:f930f0440fd5 459 * the following ciphersuites:
wamae 0:f930f0440fd5 460 * MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA
wamae 0:f930f0440fd5 461 * MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA
wamae 0:f930f0440fd5 462 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA
wamae 0:f930f0440fd5 463 * MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA
wamae 0:f930f0440fd5 464 * MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA384
wamae 0:f930f0440fd5 465 * MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA256
wamae 0:f930f0440fd5 466 * MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA
wamae 0:f930f0440fd5 467 * MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA384
wamae 0:f930f0440fd5 468 * MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA256
wamae 0:f930f0440fd5 469 * MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA
wamae 0:f930f0440fd5 470 * MBEDTLS_TLS_RSA_WITH_NULL_SHA256
wamae 0:f930f0440fd5 471 * MBEDTLS_TLS_RSA_WITH_NULL_SHA
wamae 0:f930f0440fd5 472 * MBEDTLS_TLS_RSA_WITH_NULL_MD5
wamae 0:f930f0440fd5 473 * MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA384
wamae 0:f930f0440fd5 474 * MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA256
wamae 0:f930f0440fd5 475 * MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA
wamae 0:f930f0440fd5 476 * MBEDTLS_TLS_PSK_WITH_NULL_SHA384
wamae 0:f930f0440fd5 477 * MBEDTLS_TLS_PSK_WITH_NULL_SHA256
wamae 0:f930f0440fd5 478 * MBEDTLS_TLS_PSK_WITH_NULL_SHA
wamae 0:f930f0440fd5 479 *
wamae 0:f930f0440fd5 480 * Uncomment this macro to enable the NULL cipher and ciphersuites
wamae 0:f930f0440fd5 481 */
wamae 0:f930f0440fd5 482 //#define MBEDTLS_CIPHER_NULL_CIPHER
wamae 0:f930f0440fd5 483
wamae 0:f930f0440fd5 484 /**
wamae 0:f930f0440fd5 485 * \def MBEDTLS_CIPHER_PADDING_PKCS7
wamae 0:f930f0440fd5 486 *
wamae 0:f930f0440fd5 487 * MBEDTLS_CIPHER_PADDING_XXX: Uncomment or comment macros to add support for
wamae 0:f930f0440fd5 488 * specific padding modes in the cipher layer with cipher modes that support
wamae 0:f930f0440fd5 489 * padding (e.g. CBC)
wamae 0:f930f0440fd5 490 *
wamae 0:f930f0440fd5 491 * If you disable all padding modes, only full blocks can be used with CBC.
wamae 0:f930f0440fd5 492 *
wamae 0:f930f0440fd5 493 * Enable padding modes in the cipher layer.
wamae 0:f930f0440fd5 494 */
wamae 0:f930f0440fd5 495 //#define MBEDTLS_CIPHER_PADDING_PKCS7
wamae 0:f930f0440fd5 496 //#define MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS
wamae 0:f930f0440fd5 497 //#define MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
wamae 0:f930f0440fd5 498 //#define MBEDTLS_CIPHER_PADDING_ZEROS
wamae 0:f930f0440fd5 499
wamae 0:f930f0440fd5 500 /**
wamae 0:f930f0440fd5 501 * \def MBEDTLS_ENABLE_WEAK_CIPHERSUITES
wamae 0:f930f0440fd5 502 *
wamae 0:f930f0440fd5 503 * Enable weak ciphersuites in SSL / TLS.
wamae 0:f930f0440fd5 504 * Warning: Only do so when you know what you are doing. This allows for
wamae 0:f930f0440fd5 505 * channels with virtually no security at all!
wamae 0:f930f0440fd5 506 *
wamae 0:f930f0440fd5 507 * This enables the following ciphersuites:
wamae 0:f930f0440fd5 508 * MBEDTLS_TLS_RSA_WITH_DES_CBC_SHA
wamae 0:f930f0440fd5 509 * MBEDTLS_TLS_DHE_RSA_WITH_DES_CBC_SHA
wamae 0:f930f0440fd5 510 *
wamae 0:f930f0440fd5 511 * Uncomment this macro to enable weak ciphersuites
wamae 0:f930f0440fd5 512 */
wamae 0:f930f0440fd5 513 //#define MBEDTLS_ENABLE_WEAK_CIPHERSUITES
wamae 0:f930f0440fd5 514
wamae 0:f930f0440fd5 515 /**
wamae 0:f930f0440fd5 516 * \def MBEDTLS_REMOVE_ARC4_CIPHERSUITES
wamae 0:f930f0440fd5 517 *
wamae 0:f930f0440fd5 518 * Remove RC4 ciphersuites by default in SSL / TLS.
wamae 0:f930f0440fd5 519 * This flag removes the ciphersuites based on RC4 from the default list as
wamae 0:f930f0440fd5 520 * returned by mbedtls_ssl_list_ciphersuites(). However, it is still possible to
wamae 0:f930f0440fd5 521 * enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including them
wamae 0:f930f0440fd5 522 * explicitly.
wamae 0:f930f0440fd5 523 *
wamae 0:f930f0440fd5 524 * Uncomment this macro to remove RC4 ciphersuites by default.
wamae 0:f930f0440fd5 525 */
wamae 0:f930f0440fd5 526 //#define MBEDTLS_REMOVE_ARC4_CIPHERSUITES
wamae 0:f930f0440fd5 527
wamae 0:f930f0440fd5 528 /**
wamae 0:f930f0440fd5 529 * \def MBEDTLS_ECP_DP_SECP192R1_ENABLED
wamae 0:f930f0440fd5 530 *
wamae 0:f930f0440fd5 531 * MBEDTLS_ECP_XXXX_ENABLED: Enables specific curves within the Elliptic Curve
wamae 0:f930f0440fd5 532 * module. By default all supported curves are enabled.
wamae 0:f930f0440fd5 533 *
wamae 0:f930f0440fd5 534 * Comment macros to disable the curve and functions for it
wamae 0:f930f0440fd5 535 */
wamae 0:f930f0440fd5 536 //#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
wamae 0:f930f0440fd5 537 //#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
wamae 0:f930f0440fd5 538 //#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
wamae 0:f930f0440fd5 539 //#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
wamae 0:f930f0440fd5 540 //#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
wamae 0:f930f0440fd5 541 //#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
wamae 0:f930f0440fd5 542 //#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
wamae 0:f930f0440fd5 543 //#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
wamae 0:f930f0440fd5 544 //#define MBEDTLS_ECP_DP_BP256R1_ENABLED
wamae 0:f930f0440fd5 545 //#define MBEDTLS_ECP_DP_BP384R1_ENABLED
wamae 0:f930f0440fd5 546 //#define MBEDTLS_ECP_DP_BP512R1_ENABLED
wamae 0:f930f0440fd5 547 //#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
wamae 0:f930f0440fd5 548
wamae 0:f930f0440fd5 549 /**
wamae 0:f930f0440fd5 550 * \def MBEDTLS_ECP_NIST_OPTIM
wamae 0:f930f0440fd5 551 *
wamae 0:f930f0440fd5 552 * Enable specific 'modulo p' routines for each NIST prime.
wamae 0:f930f0440fd5 553 * Depending on the prime and architecture, makes operations 4 to 8 times
wamae 0:f930f0440fd5 554 * faster on the corresponding curve.
wamae 0:f930f0440fd5 555 *
wamae 0:f930f0440fd5 556 * Comment this macro to disable NIST curves optimisation.
wamae 0:f930f0440fd5 557 */
wamae 0:f930f0440fd5 558 //#define MBEDTLS_ECP_NIST_OPTIM
wamae 0:f930f0440fd5 559
wamae 0:f930f0440fd5 560 /**
wamae 0:f930f0440fd5 561 * \def MBEDTLS_ECDSA_DETERMINISTIC
wamae 0:f930f0440fd5 562 *
wamae 0:f930f0440fd5 563 * Enable deterministic ECDSA (RFC 6979).
wamae 0:f930f0440fd5 564 * Standard ECDSA is "fragile" in the sense that lack of entropy when signing
wamae 0:f930f0440fd5 565 * may result in a compromise of the long-term signing key. This is avoided by
wamae 0:f930f0440fd5 566 * the deterministic variant.
wamae 0:f930f0440fd5 567 *
wamae 0:f930f0440fd5 568 * Requires: MBEDTLS_HMAC_DRBG_C
wamae 0:f930f0440fd5 569 *
wamae 0:f930f0440fd5 570 * Comment this macro to disable deterministic ECDSA.
wamae 0:f930f0440fd5 571 */
wamae 0:f930f0440fd5 572 //#define MBEDTLS_ECDSA_DETERMINISTIC
wamae 0:f930f0440fd5 573
wamae 0:f930f0440fd5 574 /**
wamae 0:f930f0440fd5 575 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
wamae 0:f930f0440fd5 576 *
wamae 0:f930f0440fd5 577 * Enable the PSK based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 578 *
wamae 0:f930f0440fd5 579 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 580 * enabled as well):
wamae 0:f930f0440fd5 581 * MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 582 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 583 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 584 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 585 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 586 * MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 587 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 588 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 589 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 590 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 591 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 592 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 593 */
wamae 0:f930f0440fd5 594 //#define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
wamae 0:f930f0440fd5 595
wamae 0:f930f0440fd5 596 /**
wamae 0:f930f0440fd5 597 * \def MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
wamae 0:f930f0440fd5 598 *
wamae 0:f930f0440fd5 599 * Enable the DHE-PSK based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 600 *
wamae 0:f930f0440fd5 601 * Requires: MBEDTLS_DHM_C
wamae 0:f930f0440fd5 602 *
wamae 0:f930f0440fd5 603 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 604 * enabled as well):
wamae 0:f930f0440fd5 605 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 606 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 607 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 608 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 609 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 610 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 611 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 612 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 613 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 614 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 615 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 616 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 617 */
wamae 0:f930f0440fd5 618 //#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
wamae 0:f930f0440fd5 619
wamae 0:f930f0440fd5 620 /**
wamae 0:f930f0440fd5 621 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
wamae 0:f930f0440fd5 622 *
wamae 0:f930f0440fd5 623 * Enable the ECDHE-PSK based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 624 *
wamae 0:f930f0440fd5 625 * Requires: MBEDTLS_ECDH_C
wamae 0:f930f0440fd5 626 *
wamae 0:f930f0440fd5 627 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 628 * enabled as well):
wamae 0:f930f0440fd5 629 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 630 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 631 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 632 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 633 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 634 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 635 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 636 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 637 */
wamae 0:f930f0440fd5 638 //#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
wamae 0:f930f0440fd5 639
wamae 0:f930f0440fd5 640 /**
wamae 0:f930f0440fd5 641 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
wamae 0:f930f0440fd5 642 *
wamae 0:f930f0440fd5 643 * Enable the RSA-PSK based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 644 *
wamae 0:f930f0440fd5 645 * Requires: MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:f930f0440fd5 646 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 647 *
wamae 0:f930f0440fd5 648 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 649 * enabled as well):
wamae 0:f930f0440fd5 650 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 651 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 652 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 653 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 654 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 655 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 656 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 657 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 658 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 659 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 660 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 661 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 662 */
wamae 0:f930f0440fd5 663 //#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
wamae 0:f930f0440fd5 664
wamae 0:f930f0440fd5 665 /**
wamae 0:f930f0440fd5 666 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
wamae 0:f930f0440fd5 667 *
wamae 0:f930f0440fd5 668 * Enable the RSA-only based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 669 *
wamae 0:f930f0440fd5 670 * Requires: MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:f930f0440fd5 671 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 672 *
wamae 0:f930f0440fd5 673 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 674 * enabled as well):
wamae 0:f930f0440fd5 675 * MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 676 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256
wamae 0:f930f0440fd5 677 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 678 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 679 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:f930f0440fd5 680 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:f930f0440fd5 681 * MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 682 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 683 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 684 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 685 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 686 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:f930f0440fd5 687 * MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 688 * MBEDTLS_TLS_RSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 689 * MBEDTLS_TLS_RSA_WITH_RC4_128_MD5
wamae 0:f930f0440fd5 690 */
wamae 0:f930f0440fd5 691 //#define MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
wamae 0:f930f0440fd5 692
wamae 0:f930f0440fd5 693 /**
wamae 0:f930f0440fd5 694 * \def MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
wamae 0:f930f0440fd5 695 *
wamae 0:f930f0440fd5 696 * Enable the DHE-RSA based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 697 *
wamae 0:f930f0440fd5 698 * Requires: MBEDTLS_DHM_C, MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:f930f0440fd5 699 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 700 *
wamae 0:f930f0440fd5 701 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 702 * enabled as well):
wamae 0:f930f0440fd5 703 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 704 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
wamae 0:f930f0440fd5 705 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 706 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 707 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:f930f0440fd5 708 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:f930f0440fd5 709 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 710 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 711 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 712 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 713 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 714 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:f930f0440fd5 715 * MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 716 */
wamae 0:f930f0440fd5 717 //#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
wamae 0:f930f0440fd5 718
wamae 0:f930f0440fd5 719 /**
wamae 0:f930f0440fd5 720 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
wamae 0:f930f0440fd5 721 *
wamae 0:f930f0440fd5 722 * Enable the ECDHE-RSA based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 723 *
wamae 0:f930f0440fd5 724 * Requires: MBEDTLS_ECDH_C, MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:f930f0440fd5 725 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 726 *
wamae 0:f930f0440fd5 727 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 728 * enabled as well):
wamae 0:f930f0440fd5 729 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 730 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 731 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 732 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 733 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 734 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 735 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 736 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 737 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 738 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 739 * MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 740 * MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 741 */
wamae 0:f930f0440fd5 742 //#define MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
wamae 0:f930f0440fd5 743
wamae 0:f930f0440fd5 744 /**
wamae 0:f930f0440fd5 745 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
wamae 0:f930f0440fd5 746 *
wamae 0:f930f0440fd5 747 * Enable the ECDHE-ECDSA based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 748 *
wamae 0:f930f0440fd5 749 * Requires: MBEDTLS_ECDH_C, MBEDTLS_ECDSA_C, MBEDTLS_X509_CRT_PARSE_C,
wamae 0:f930f0440fd5 750 *
wamae 0:f930f0440fd5 751 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 752 * enabled as well):
wamae 0:f930f0440fd5 753 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 754 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 755 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 756 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 757 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 758 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 759 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 760 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 761 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 762 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 763 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 764 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 765 */
wamae 0:f930f0440fd5 766 //#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
wamae 0:f930f0440fd5 767
wamae 0:f930f0440fd5 768 /**
wamae 0:f930f0440fd5 769 * \def MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
wamae 0:f930f0440fd5 770 *
wamae 0:f930f0440fd5 771 * Enable the ECDH-ECDSA based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 772 *
wamae 0:f930f0440fd5 773 * Requires: MBEDTLS_ECDH_C, MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 774 *
wamae 0:f930f0440fd5 775 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 776 * enabled as well):
wamae 0:f930f0440fd5 777 * MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 778 * MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 779 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 780 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 781 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 782 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 783 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 784 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 785 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 786 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 787 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 788 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 789 */
wamae 0:f930f0440fd5 790 //#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
wamae 0:f930f0440fd5 791
wamae 0:f930f0440fd5 792 /**
wamae 0:f930f0440fd5 793 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
wamae 0:f930f0440fd5 794 *
wamae 0:f930f0440fd5 795 * Enable the ECDH-RSA based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 796 *
wamae 0:f930f0440fd5 797 * Requires: MBEDTLS_ECDH_C, MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 798 *
wamae 0:f930f0440fd5 799 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 800 * enabled as well):
wamae 0:f930f0440fd5 801 * MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 802 * MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 803 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 804 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 805 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 806 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 807 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 808 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 809 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 810 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 811 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 812 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 813 */
wamae 0:f930f0440fd5 814 //#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
wamae 0:f930f0440fd5 815
wamae 0:f930f0440fd5 816 /**
wamae 0:f930f0440fd5 817 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
wamae 0:f930f0440fd5 818 *
wamae 0:f930f0440fd5 819 * Enable the ECJPAKE based ciphersuite modes in SSL / TLS.
wamae 0:f930f0440fd5 820 *
wamae 0:f930f0440fd5 821 * \warning This is currently experimental. EC J-PAKE support is based on the
wamae 0:f930f0440fd5 822 * Thread v1.0.0 specification; incompatible changes to the specification
wamae 0:f930f0440fd5 823 * might still happen. For this reason, this is disabled by default.
wamae 0:f930f0440fd5 824 *
wamae 0:f930f0440fd5 825 * Requires: MBEDTLS_ECJPAKE_C
wamae 0:f930f0440fd5 826 * MBEDTLS_SHA256_C
wamae 0:f930f0440fd5 827 * MBEDTLS_ECP_DP_SECP256R1_ENABLED
wamae 0:f930f0440fd5 828 *
wamae 0:f930f0440fd5 829 * This enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 830 * enabled as well):
wamae 0:f930f0440fd5 831 * MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8
wamae 0:f930f0440fd5 832 */
wamae 0:f930f0440fd5 833 //#define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
wamae 0:f930f0440fd5 834
wamae 0:f930f0440fd5 835 /**
wamae 0:f930f0440fd5 836 * \def MBEDTLS_PK_PARSE_EC_EXTENDED
wamae 0:f930f0440fd5 837 *
wamae 0:f930f0440fd5 838 * Enhance support for reading EC keys using variants of SEC1 not allowed by
wamae 0:f930f0440fd5 839 * RFC 5915 and RFC 5480.
wamae 0:f930f0440fd5 840 *
wamae 0:f930f0440fd5 841 * Currently this means parsing the SpecifiedECDomain choice of EC
wamae 0:f930f0440fd5 842 * parameters (only known groups are supported, not arbitrary domains, to
wamae 0:f930f0440fd5 843 * avoid validation issues).
wamae 0:f930f0440fd5 844 *
wamae 0:f930f0440fd5 845 * Disable if you only need to support RFC 5915 + 5480 key formats.
wamae 0:f930f0440fd5 846 */
wamae 0:f930f0440fd5 847 //#define MBEDTLS_PK_PARSE_EC_EXTENDED
wamae 0:f930f0440fd5 848
wamae 0:f930f0440fd5 849 /**
wamae 0:f930f0440fd5 850 * \def MBEDTLS_ERROR_STRERROR_DUMMY
wamae 0:f930f0440fd5 851 *
wamae 0:f930f0440fd5 852 * Enable a dummy error function to make use of mbedtls_strerror() in
wamae 0:f930f0440fd5 853 * third party libraries easier when MBEDTLS_ERROR_C is disabled
wamae 0:f930f0440fd5 854 * (no effect when MBEDTLS_ERROR_C is enabled).
wamae 0:f930f0440fd5 855 *
wamae 0:f930f0440fd5 856 * You can safely disable this if MBEDTLS_ERROR_C is enabled, or if you're
wamae 0:f930f0440fd5 857 * not using mbedtls_strerror() or error_strerror() in your application.
wamae 0:f930f0440fd5 858 *
wamae 0:f930f0440fd5 859 * Disable if you run into name conflicts and want to really remove the
wamae 0:f930f0440fd5 860 * mbedtls_strerror()
wamae 0:f930f0440fd5 861 */
wamae 0:f930f0440fd5 862 //#define MBEDTLS_ERROR_STRERROR_DUMMY
wamae 0:f930f0440fd5 863
wamae 0:f930f0440fd5 864 /**
wamae 0:f930f0440fd5 865 * \def MBEDTLS_GENPRIME
wamae 0:f930f0440fd5 866 *
wamae 0:f930f0440fd5 867 * Enable the prime-number generation code.
wamae 0:f930f0440fd5 868 *
wamae 0:f930f0440fd5 869 * Requires: MBEDTLS_BIGNUM_C
wamae 0:f930f0440fd5 870 */
wamae 0:f930f0440fd5 871 //#define MBEDTLS_GENPRIME
wamae 0:f930f0440fd5 872
wamae 0:f930f0440fd5 873 /**
wamae 0:f930f0440fd5 874 * \def MBEDTLS_FS_IO
wamae 0:f930f0440fd5 875 *
wamae 0:f930f0440fd5 876 * Enable functions that use the filesystem.
wamae 0:f930f0440fd5 877 */
wamae 0:f930f0440fd5 878 //#define MBEDTLS_FS_IO
wamae 0:f930f0440fd5 879
wamae 0:f930f0440fd5 880 /**
wamae 0:f930f0440fd5 881 * \def MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
wamae 0:f930f0440fd5 882 *
wamae 0:f930f0440fd5 883 * Do not add default entropy sources. These are the platform specific,
wamae 0:f930f0440fd5 884 * mbedtls_timing_hardclock and HAVEGE based poll functions.
wamae 0:f930f0440fd5 885 *
wamae 0:f930f0440fd5 886 * This is useful to have more control over the added entropy sources in an
wamae 0:f930f0440fd5 887 * application.
wamae 0:f930f0440fd5 888 *
wamae 0:f930f0440fd5 889 * Uncomment this macro to prevent loading of default entropy functions.
wamae 0:f930f0440fd5 890 */
wamae 0:f930f0440fd5 891 //#define MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
wamae 0:f930f0440fd5 892
wamae 0:f930f0440fd5 893 /**
wamae 0:f930f0440fd5 894 * \def MBEDTLS_NO_PLATFORM_ENTROPY
wamae 0:f930f0440fd5 895 *
wamae 0:f930f0440fd5 896 * Do not use built-in platform entropy functions.
wamae 0:f930f0440fd5 897 * This is useful if your platform does not support
wamae 0:f930f0440fd5 898 * standards like the /dev/urandom or Windows CryptoAPI.
wamae 0:f930f0440fd5 899 *
wamae 0:f930f0440fd5 900 * Uncomment this macro to disable the built-in platform entropy functions.
wamae 0:f930f0440fd5 901 */
wamae 0:f930f0440fd5 902 #define MBEDTLS_NO_PLATFORM_ENTROPY
wamae 0:f930f0440fd5 903
wamae 0:f930f0440fd5 904 /**
wamae 0:f930f0440fd5 905 * \def MBEDTLS_ENTROPY_FORCE_SHA256
wamae 0:f930f0440fd5 906 *
wamae 0:f930f0440fd5 907 * Force the entropy accumulator to use a SHA-256 accumulator instead of the
wamae 0:f930f0440fd5 908 * default SHA-512 based one (if both are available).
wamae 0:f930f0440fd5 909 *
wamae 0:f930f0440fd5 910 * Requires: MBEDTLS_SHA256_C
wamae 0:f930f0440fd5 911 *
wamae 0:f930f0440fd5 912 * On 32-bit systems SHA-256 can be much faster than SHA-512. Use this option
wamae 0:f930f0440fd5 913 * if you have performance concerns.
wamae 0:f930f0440fd5 914 *
wamae 0:f930f0440fd5 915 * This option is only useful if both MBEDTLS_SHA256_C and
wamae 0:f930f0440fd5 916 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
wamae 0:f930f0440fd5 917 */
wamae 0:f930f0440fd5 918 //#define MBEDTLS_ENTROPY_FORCE_SHA256
wamae 0:f930f0440fd5 919
wamae 0:f930f0440fd5 920 /**
wamae 0:f930f0440fd5 921 * \def MBEDTLS_ENTROPY_NV_SEED
wamae 0:f930f0440fd5 922 *
wamae 0:f930f0440fd5 923 * Enable the non-volatile (NV) seed file-based entropy source.
wamae 0:f930f0440fd5 924 * (Also enables the NV seed read/write functions in the platform layer)
wamae 0:f930f0440fd5 925 *
wamae 0:f930f0440fd5 926 * This is crucial (if not required) on systems that do not have a
wamae 0:f930f0440fd5 927 * cryptographic entropy source (in hardware or kernel) available.
wamae 0:f930f0440fd5 928 *
wamae 0:f930f0440fd5 929 * Requires: MBEDTLS_ENTROPY_C, MBEDTLS_PLATFORM_C
wamae 0:f930f0440fd5 930 *
wamae 0:f930f0440fd5 931 * \note The read/write functions that are used by the entropy source are
wamae 0:f930f0440fd5 932 * determined in the platform layer, and can be modified at runtime and/or
wamae 0:f930f0440fd5 933 * compile-time depending on the flags (MBEDTLS_PLATFORM_NV_SEED_*) used.
wamae 0:f930f0440fd5 934 *
wamae 0:f930f0440fd5 935 * \note If you use the default implementation functions that read a seedfile
wamae 0:f930f0440fd5 936 * with regular fopen(), please make sure you make a seedfile with the
wamae 0:f930f0440fd5 937 * proper name (defined in MBEDTLS_PLATFORM_STD_NV_SEED_FILE) and at
wamae 0:f930f0440fd5 938 * least MBEDTLS_ENTROPY_BLOCK_SIZE bytes in size that can be read from
wamae 0:f930f0440fd5 939 * and written to or you will get an entropy source error! The default
wamae 0:f930f0440fd5 940 * implementation will only use the first MBEDTLS_ENTROPY_BLOCK_SIZE
wamae 0:f930f0440fd5 941 * bytes from the file.
wamae 0:f930f0440fd5 942 *
wamae 0:f930f0440fd5 943 * \note The entropy collector will write to the seed file before entropy is
wamae 0:f930f0440fd5 944 * given to an external source, to update it.
wamae 0:f930f0440fd5 945 */
wamae 0:f930f0440fd5 946 //#define MBEDTLS_ENTROPY_NV_SEED
wamae 0:f930f0440fd5 947
wamae 0:f930f0440fd5 948 /**
wamae 0:f930f0440fd5 949 * \def MBEDTLS_MEMORY_DEBUG
wamae 0:f930f0440fd5 950 *
wamae 0:f930f0440fd5 951 * Enable debugging of buffer allocator memory issues. Automatically prints
wamae 0:f930f0440fd5 952 * (to stderr) all (fatal) messages on memory allocation issues. Enables
wamae 0:f930f0440fd5 953 * function for 'debug output' of allocated memory.
wamae 0:f930f0440fd5 954 *
wamae 0:f930f0440fd5 955 * Requires: MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:f930f0440fd5 956 *
wamae 0:f930f0440fd5 957 * Uncomment this macro to let the buffer allocator print out error messages.
wamae 0:f930f0440fd5 958 */
wamae 0:f930f0440fd5 959 //#define MBEDTLS_MEMORY_DEBUG
wamae 0:f930f0440fd5 960
wamae 0:f930f0440fd5 961 /**
wamae 0:f930f0440fd5 962 * \def MBEDTLS_MEMORY_BACKTRACE
wamae 0:f930f0440fd5 963 *
wamae 0:f930f0440fd5 964 * Include backtrace information with each allocated block.
wamae 0:f930f0440fd5 965 *
wamae 0:f930f0440fd5 966 * Requires: MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:f930f0440fd5 967 * GLIBC-compatible backtrace() an backtrace_symbols() support
wamae 0:f930f0440fd5 968 *
wamae 0:f930f0440fd5 969 * Uncomment this macro to include backtrace information
wamae 0:f930f0440fd5 970 */
wamae 0:f930f0440fd5 971 //#define MBEDTLS_MEMORY_BACKTRACE
wamae 0:f930f0440fd5 972
wamae 0:f930f0440fd5 973 /**
wamae 0:f930f0440fd5 974 * \def MBEDTLS_PK_RSA_ALT_SUPPORT
wamae 0:f930f0440fd5 975 *
wamae 0:f930f0440fd5 976 * Support external private RSA keys (eg from a HSM) in the PK layer.
wamae 0:f930f0440fd5 977 *
wamae 0:f930f0440fd5 978 * Comment this macro to disable support for external private RSA keys.
wamae 0:f930f0440fd5 979 */
wamae 0:f930f0440fd5 980 //#define MBEDTLS_PK_RSA_ALT_SUPPORT
wamae 0:f930f0440fd5 981
wamae 0:f930f0440fd5 982 /**
wamae 0:f930f0440fd5 983 * \def MBEDTLS_PKCS1_V15
wamae 0:f930f0440fd5 984 *
wamae 0:f930f0440fd5 985 * Enable support for PKCS#1 v1.5 encoding.
wamae 0:f930f0440fd5 986 *
wamae 0:f930f0440fd5 987 * Requires: MBEDTLS_RSA_C
wamae 0:f930f0440fd5 988 *
wamae 0:f930f0440fd5 989 * This enables support for PKCS#1 v1.5 operations.
wamae 0:f930f0440fd5 990 */
wamae 0:f930f0440fd5 991 //#define MBEDTLS_PKCS1_V15
wamae 0:f930f0440fd5 992
wamae 0:f930f0440fd5 993 /**
wamae 0:f930f0440fd5 994 * \def MBEDTLS_PKCS1_V21
wamae 0:f930f0440fd5 995 *
wamae 0:f930f0440fd5 996 * Enable support for PKCS#1 v2.1 encoding.
wamae 0:f930f0440fd5 997 *
wamae 0:f930f0440fd5 998 * Requires: MBEDTLS_MD_C, MBEDTLS_RSA_C
wamae 0:f930f0440fd5 999 *
wamae 0:f930f0440fd5 1000 * This enables support for RSAES-OAEP and RSASSA-PSS operations.
wamae 0:f930f0440fd5 1001 */
wamae 0:f930f0440fd5 1002 //#define MBEDTLS_PKCS1_V21
wamae 0:f930f0440fd5 1003
wamae 0:f930f0440fd5 1004 /**
wamae 0:f930f0440fd5 1005 * \def MBEDTLS_RSA_NO_CRT
wamae 0:f930f0440fd5 1006 *
wamae 0:f930f0440fd5 1007 * Do not use the Chinese Remainder Theorem for the RSA private operation.
wamae 0:f930f0440fd5 1008 *
wamae 0:f930f0440fd5 1009 * Uncomment this macro to disable the use of CRT in RSA.
wamae 0:f930f0440fd5 1010 *
wamae 0:f930f0440fd5 1011 */
wamae 0:f930f0440fd5 1012 //#define MBEDTLS_RSA_NO_CRT
wamae 0:f930f0440fd5 1013
wamae 0:f930f0440fd5 1014 /**
wamae 0:f930f0440fd5 1015 * \def MBEDTLS_SELF_TEST
wamae 0:f930f0440fd5 1016 *
wamae 0:f930f0440fd5 1017 * Enable the checkup functions (*_self_test).
wamae 0:f930f0440fd5 1018 */
wamae 0:f930f0440fd5 1019 //#define MBEDTLS_SELF_TEST
wamae 0:f930f0440fd5 1020
wamae 0:f930f0440fd5 1021 /**
wamae 0:f930f0440fd5 1022 * \def MBEDTLS_SHA256_SMALLER
wamae 0:f930f0440fd5 1023 *
wamae 0:f930f0440fd5 1024 * Enable an implementation of SHA-256 that has lower ROM footprint but also
wamae 0:f930f0440fd5 1025 * lower performance.
wamae 0:f930f0440fd5 1026 *
wamae 0:f930f0440fd5 1027 * The default implementation is meant to be a reasonnable compromise between
wamae 0:f930f0440fd5 1028 * performance and size. This version optimizes more aggressively for size at
wamae 0:f930f0440fd5 1029 * the expense of performance. Eg on Cortex-M4 it reduces the size of
wamae 0:f930f0440fd5 1030 * mbedtls_sha256_process() from ~2KB to ~0.5KB for a performance hit of about
wamae 0:f930f0440fd5 1031 * 30%.
wamae 0:f930f0440fd5 1032 *
wamae 0:f930f0440fd5 1033 * Uncomment to enable the smaller implementation of SHA256.
wamae 0:f930f0440fd5 1034 */
wamae 0:f930f0440fd5 1035 //#define MBEDTLS_SHA256_SMALLER
wamae 0:f930f0440fd5 1036
wamae 0:f930f0440fd5 1037 /**
wamae 0:f930f0440fd5 1038 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
wamae 0:f930f0440fd5 1039 *
wamae 0:f930f0440fd5 1040 * Enable sending of alert messages in case of encountered errors as per RFC.
wamae 0:f930f0440fd5 1041 * If you choose not to send the alert messages, mbed TLS can still communicate
wamae 0:f930f0440fd5 1042 * with other servers, only debugging of failures is harder.
wamae 0:f930f0440fd5 1043 *
wamae 0:f930f0440fd5 1044 * The advantage of not sending alert messages, is that no information is given
wamae 0:f930f0440fd5 1045 * about reasons for failures thus preventing adversaries of gaining intel.
wamae 0:f930f0440fd5 1046 *
wamae 0:f930f0440fd5 1047 * Enable sending of all alert messages
wamae 0:f930f0440fd5 1048 */
wamae 0:f930f0440fd5 1049 //#define MBEDTLS_SSL_ALL_ALERT_MESSAGES
wamae 0:f930f0440fd5 1050
wamae 0:f930f0440fd5 1051 /**
wamae 0:f930f0440fd5 1052 * \def MBEDTLS_SSL_DEBUG_ALL
wamae 0:f930f0440fd5 1053 *
wamae 0:f930f0440fd5 1054 * Enable the debug messages in SSL module for all issues.
wamae 0:f930f0440fd5 1055 * Debug messages have been disabled in some places to prevent timing
wamae 0:f930f0440fd5 1056 * attacks due to (unbalanced) debugging function calls.
wamae 0:f930f0440fd5 1057 *
wamae 0:f930f0440fd5 1058 * If you need all error reporting you should enable this during debugging,
wamae 0:f930f0440fd5 1059 * but remove this for production servers that should log as well.
wamae 0:f930f0440fd5 1060 *
wamae 0:f930f0440fd5 1061 * Uncomment this macro to report all debug messages on errors introducing
wamae 0:f930f0440fd5 1062 * a timing side-channel.
wamae 0:f930f0440fd5 1063 *
wamae 0:f930f0440fd5 1064 */
wamae 0:f930f0440fd5 1065 //#define MBEDTLS_SSL_DEBUG_ALL
wamae 0:f930f0440fd5 1066
wamae 0:f930f0440fd5 1067 /** \def MBEDTLS_SSL_ENCRYPT_THEN_MAC
wamae 0:f930f0440fd5 1068 *
wamae 0:f930f0440fd5 1069 * Enable support for Encrypt-then-MAC, RFC 7366.
wamae 0:f930f0440fd5 1070 *
wamae 0:f930f0440fd5 1071 * This allows peers that both support it to use a more robust protection for
wamae 0:f930f0440fd5 1072 * ciphersuites using CBC, providing deep resistance against timing attacks
wamae 0:f930f0440fd5 1073 * on the padding or underlying cipher.
wamae 0:f930f0440fd5 1074 *
wamae 0:f930f0440fd5 1075 * This only affects CBC ciphersuites, and is useless if none is defined.
wamae 0:f930f0440fd5 1076 *
wamae 0:f930f0440fd5 1077 * Requires: MBEDTLS_SSL_PROTO_TLS1 or
wamae 0:f930f0440fd5 1078 * MBEDTLS_SSL_PROTO_TLS1_1 or
wamae 0:f930f0440fd5 1079 * MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:f930f0440fd5 1080 *
wamae 0:f930f0440fd5 1081 * Comment this macro to disable support for Encrypt-then-MAC
wamae 0:f930f0440fd5 1082 */
wamae 0:f930f0440fd5 1083 //#define MBEDTLS_SSL_ENCRYPT_THEN_MAC
wamae 0:f930f0440fd5 1084
wamae 0:f930f0440fd5 1085 /** \def MBEDTLS_SSL_EXTENDED_MASTER_SECRET
wamae 0:f930f0440fd5 1086 *
wamae 0:f930f0440fd5 1087 * Enable support for Extended Master Secret, aka Session Hash
wamae 0:f930f0440fd5 1088 * (draft-ietf-tls-session-hash-02).
wamae 0:f930f0440fd5 1089 *
wamae 0:f930f0440fd5 1090 * This was introduced as "the proper fix" to the Triple Handshake familiy of
wamae 0:f930f0440fd5 1091 * attacks, but it is recommended to always use it (even if you disable
wamae 0:f930f0440fd5 1092 * renegotiation), since it actually fixes a more fundamental issue in the
wamae 0:f930f0440fd5 1093 * original SSL/TLS design, and has implications beyond Triple Handshake.
wamae 0:f930f0440fd5 1094 *
wamae 0:f930f0440fd5 1095 * Requires: MBEDTLS_SSL_PROTO_TLS1 or
wamae 0:f930f0440fd5 1096 * MBEDTLS_SSL_PROTO_TLS1_1 or
wamae 0:f930f0440fd5 1097 * MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:f930f0440fd5 1098 *
wamae 0:f930f0440fd5 1099 * Comment this macro to disable support for Extended Master Secret.
wamae 0:f930f0440fd5 1100 */
wamae 0:f930f0440fd5 1101 //#define MBEDTLS_SSL_EXTENDED_MASTER_SECRET
wamae 0:f930f0440fd5 1102
wamae 0:f930f0440fd5 1103 /**
wamae 0:f930f0440fd5 1104 * \def MBEDTLS_SSL_FALLBACK_SCSV
wamae 0:f930f0440fd5 1105 *
wamae 0:f930f0440fd5 1106 * Enable support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv-00).
wamae 0:f930f0440fd5 1107 *
wamae 0:f930f0440fd5 1108 * For servers, it is recommended to always enable this, unless you support
wamae 0:f930f0440fd5 1109 * only one version of TLS, or know for sure that none of your clients
wamae 0:f930f0440fd5 1110 * implements a fallback strategy.
wamae 0:f930f0440fd5 1111 *
wamae 0:f930f0440fd5 1112 * For clients, you only need this if you're using a fallback strategy, which
wamae 0:f930f0440fd5 1113 * is not recommended in the first place, unless you absolutely need it to
wamae 0:f930f0440fd5 1114 * interoperate with buggy (version-intolerant) servers.
wamae 0:f930f0440fd5 1115 *
wamae 0:f930f0440fd5 1116 * Comment this macro to disable support for FALLBACK_SCSV
wamae 0:f930f0440fd5 1117 */
wamae 0:f930f0440fd5 1118 //#define MBEDTLS_SSL_FALLBACK_SCSV
wamae 0:f930f0440fd5 1119
wamae 0:f930f0440fd5 1120 /**
wamae 0:f930f0440fd5 1121 * \def MBEDTLS_SSL_HW_RECORD_ACCEL
wamae 0:f930f0440fd5 1122 *
wamae 0:f930f0440fd5 1123 * Enable hooking functions in SSL module for hardware acceleration of
wamae 0:f930f0440fd5 1124 * individual records.
wamae 0:f930f0440fd5 1125 *
wamae 0:f930f0440fd5 1126 * Uncomment this macro to enable hooking functions.
wamae 0:f930f0440fd5 1127 */
wamae 0:f930f0440fd5 1128 //#define MBEDTLS_SSL_HW_RECORD_ACCEL
wamae 0:f930f0440fd5 1129
wamae 0:f930f0440fd5 1130 /**
wamae 0:f930f0440fd5 1131 * \def MBEDTLS_SSL_CBC_RECORD_SPLITTING
wamae 0:f930f0440fd5 1132 *
wamae 0:f930f0440fd5 1133 * Enable 1/n-1 record splitting for CBC mode in SSLv3 and TLS 1.0.
wamae 0:f930f0440fd5 1134 *
wamae 0:f930f0440fd5 1135 * This is a countermeasure to the BEAST attack, which also minimizes the risk
wamae 0:f930f0440fd5 1136 * of interoperability issues compared to sending 0-length records.
wamae 0:f930f0440fd5 1137 *
wamae 0:f930f0440fd5 1138 * Comment this macro to disable 1/n-1 record splitting.
wamae 0:f930f0440fd5 1139 */
wamae 0:f930f0440fd5 1140 //#define MBEDTLS_SSL_CBC_RECORD_SPLITTING
wamae 0:f930f0440fd5 1141
wamae 0:f930f0440fd5 1142 /**
wamae 0:f930f0440fd5 1143 * \def MBEDTLS_SSL_RENEGOTIATION
wamae 0:f930f0440fd5 1144 *
wamae 0:f930f0440fd5 1145 * Disable support for TLS renegotiation.
wamae 0:f930f0440fd5 1146 *
wamae 0:f930f0440fd5 1147 * The two main uses of renegotiation are (1) refresh keys on long-lived
wamae 0:f930f0440fd5 1148 * connections and (2) client authentication after the initial handshake.
wamae 0:f930f0440fd5 1149 * If you don't need renegotiation, it's probably better to disable it, since
wamae 0:f930f0440fd5 1150 * it has been associated with security issues in the past and is easy to
wamae 0:f930f0440fd5 1151 * misuse/misunderstand.
wamae 0:f930f0440fd5 1152 *
wamae 0:f930f0440fd5 1153 * Comment this to disable support for renegotiation.
wamae 0:f930f0440fd5 1154 */
wamae 0:f930f0440fd5 1155 //#define MBEDTLS_SSL_RENEGOTIATION
wamae 0:f930f0440fd5 1156
wamae 0:f930f0440fd5 1157 /**
wamae 0:f930f0440fd5 1158 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
wamae 0:f930f0440fd5 1159 *
wamae 0:f930f0440fd5 1160 * Enable support for receiving and parsing SSLv2 Client Hello messages for the
wamae 0:f930f0440fd5 1161 * SSL Server module (MBEDTLS_SSL_SRV_C).
wamae 0:f930f0440fd5 1162 *
wamae 0:f930f0440fd5 1163 * Uncomment this macro to enable support for SSLv2 Client Hello messages.
wamae 0:f930f0440fd5 1164 */
wamae 0:f930f0440fd5 1165 //#define MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
wamae 0:f930f0440fd5 1166
wamae 0:f930f0440fd5 1167 /**
wamae 0:f930f0440fd5 1168 * \def MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
wamae 0:f930f0440fd5 1169 *
wamae 0:f930f0440fd5 1170 * Pick the ciphersuite according to the client's preferences rather than ours
wamae 0:f930f0440fd5 1171 * in the SSL Server module (MBEDTLS_SSL_SRV_C).
wamae 0:f930f0440fd5 1172 *
wamae 0:f930f0440fd5 1173 * Uncomment this macro to respect client's ciphersuite order
wamae 0:f930f0440fd5 1174 */
wamae 0:f930f0440fd5 1175 //#define MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
wamae 0:f930f0440fd5 1176
wamae 0:f930f0440fd5 1177 /**
wamae 0:f930f0440fd5 1178 * \def MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
wamae 0:f930f0440fd5 1179 *
wamae 0:f930f0440fd5 1180 * Enable support for RFC 6066 max_fragment_length extension in SSL.
wamae 0:f930f0440fd5 1181 *
wamae 0:f930f0440fd5 1182 * Comment this macro to disable support for the max_fragment_length extension
wamae 0:f930f0440fd5 1183 */
wamae 0:f930f0440fd5 1184 //#define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
wamae 0:f930f0440fd5 1185
wamae 0:f930f0440fd5 1186 /**
wamae 0:f930f0440fd5 1187 * \def MBEDTLS_SSL_PROTO_SSL3
wamae 0:f930f0440fd5 1188 *
wamae 0:f930f0440fd5 1189 * Enable support for SSL 3.0.
wamae 0:f930f0440fd5 1190 *
wamae 0:f930f0440fd5 1191 * Requires: MBEDTLS_MD5_C
wamae 0:f930f0440fd5 1192 * MBEDTLS_SHA1_C
wamae 0:f930f0440fd5 1193 *
wamae 0:f930f0440fd5 1194 * Comment this macro to disable support for SSL 3.0
wamae 0:f930f0440fd5 1195 */
wamae 0:f930f0440fd5 1196 //#define MBEDTLS_SSL_PROTO_SSL3
wamae 0:f930f0440fd5 1197
wamae 0:f930f0440fd5 1198 /**
wamae 0:f930f0440fd5 1199 * \def MBEDTLS_SSL_PROTO_TLS1
wamae 0:f930f0440fd5 1200 *
wamae 0:f930f0440fd5 1201 * Enable support for TLS 1.0.
wamae 0:f930f0440fd5 1202 *
wamae 0:f930f0440fd5 1203 * Requires: MBEDTLS_MD5_C
wamae 0:f930f0440fd5 1204 * MBEDTLS_SHA1_C
wamae 0:f930f0440fd5 1205 *
wamae 0:f930f0440fd5 1206 * Comment this macro to disable support for TLS 1.0
wamae 0:f930f0440fd5 1207 */
wamae 0:f930f0440fd5 1208 //#define MBEDTLS_SSL_PROTO_TLS1
wamae 0:f930f0440fd5 1209
wamae 0:f930f0440fd5 1210 /**
wamae 0:f930f0440fd5 1211 * \def MBEDTLS_SSL_PROTO_TLS1_1
wamae 0:f930f0440fd5 1212 *
wamae 0:f930f0440fd5 1213 * Enable support for TLS 1.1 (and DTLS 1.0 if DTLS is enabled).
wamae 0:f930f0440fd5 1214 *
wamae 0:f930f0440fd5 1215 * Requires: MBEDTLS_MD5_C
wamae 0:f930f0440fd5 1216 * MBEDTLS_SHA1_C
wamae 0:f930f0440fd5 1217 *
wamae 0:f930f0440fd5 1218 * Comment this macro to disable support for TLS 1.1 / DTLS 1.0
wamae 0:f930f0440fd5 1219 */
wamae 0:f930f0440fd5 1220 //#define MBEDTLS_SSL_PROTO_TLS1_1
wamae 0:f930f0440fd5 1221
wamae 0:f930f0440fd5 1222 /**
wamae 0:f930f0440fd5 1223 * \def MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:f930f0440fd5 1224 *
wamae 0:f930f0440fd5 1225 * Enable support for TLS 1.2 (and DTLS 1.2 if DTLS is enabled).
wamae 0:f930f0440fd5 1226 *
wamae 0:f930f0440fd5 1227 * Requires: MBEDTLS_SHA1_C or MBEDTLS_SHA256_C or MBEDTLS_SHA512_C
wamae 0:f930f0440fd5 1228 * (Depends on ciphersuites)
wamae 0:f930f0440fd5 1229 *
wamae 0:f930f0440fd5 1230 * Comment this macro to disable support for TLS 1.2 / DTLS 1.2
wamae 0:f930f0440fd5 1231 */
wamae 0:f930f0440fd5 1232 //#define MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:f930f0440fd5 1233
wamae 0:f930f0440fd5 1234 /**
wamae 0:f930f0440fd5 1235 * \def MBEDTLS_SSL_PROTO_DTLS
wamae 0:f930f0440fd5 1236 *
wamae 0:f930f0440fd5 1237 * Enable support for DTLS (all available versions).
wamae 0:f930f0440fd5 1238 *
wamae 0:f930f0440fd5 1239 * Enable this and MBEDTLS_SSL_PROTO_TLS1_1 to enable DTLS 1.0,
wamae 0:f930f0440fd5 1240 * and/or this and MBEDTLS_SSL_PROTO_TLS1_2 to enable DTLS 1.2.
wamae 0:f930f0440fd5 1241 *
wamae 0:f930f0440fd5 1242 * Requires: MBEDTLS_SSL_PROTO_TLS1_1
wamae 0:f930f0440fd5 1243 * or MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:f930f0440fd5 1244 *
wamae 0:f930f0440fd5 1245 * Comment this macro to disable support for DTLS
wamae 0:f930f0440fd5 1246 */
wamae 0:f930f0440fd5 1247 //#define MBEDTLS_SSL_PROTO_DTLS
wamae 0:f930f0440fd5 1248
wamae 0:f930f0440fd5 1249 /**
wamae 0:f930f0440fd5 1250 * \def MBEDTLS_SSL_ALPN
wamae 0:f930f0440fd5 1251 *
wamae 0:f930f0440fd5 1252 * Enable support for RFC 7301 Application Layer Protocol Negotiation.
wamae 0:f930f0440fd5 1253 *
wamae 0:f930f0440fd5 1254 * Comment this macro to disable support for ALPN.
wamae 0:f930f0440fd5 1255 */
wamae 0:f930f0440fd5 1256 //#define MBEDTLS_SSL_ALPN
wamae 0:f930f0440fd5 1257
wamae 0:f930f0440fd5 1258 /**
wamae 0:f930f0440fd5 1259 * \def MBEDTLS_SSL_DTLS_ANTI_REPLAY
wamae 0:f930f0440fd5 1260 *
wamae 0:f930f0440fd5 1261 * Enable support for the anti-replay mechanism in DTLS.
wamae 0:f930f0440fd5 1262 *
wamae 0:f930f0440fd5 1263 * Requires: MBEDTLS_SSL_TLS_C
wamae 0:f930f0440fd5 1264 * MBEDTLS_SSL_PROTO_DTLS
wamae 0:f930f0440fd5 1265 *
wamae 0:f930f0440fd5 1266 * \warning Disabling this is often a security risk!
wamae 0:f930f0440fd5 1267 * See mbedtls_ssl_conf_dtls_anti_replay() for details.
wamae 0:f930f0440fd5 1268 *
wamae 0:f930f0440fd5 1269 * Comment this to disable anti-replay in DTLS.
wamae 0:f930f0440fd5 1270 */
wamae 0:f930f0440fd5 1271 //#define MBEDTLS_SSL_DTLS_ANTI_REPLAY
wamae 0:f930f0440fd5 1272
wamae 0:f930f0440fd5 1273 /**
wamae 0:f930f0440fd5 1274 * \def MBEDTLS_SSL_DTLS_HELLO_VERIFY
wamae 0:f930f0440fd5 1275 *
wamae 0:f930f0440fd5 1276 * Enable support for HelloVerifyRequest on DTLS servers.
wamae 0:f930f0440fd5 1277 *
wamae 0:f930f0440fd5 1278 * This feature is highly recommended to prevent DTLS servers being used as
wamae 0:f930f0440fd5 1279 * amplifiers in DoS attacks against other hosts. It should always be enabled
wamae 0:f930f0440fd5 1280 * unless you know for sure amplification cannot be a problem in the
wamae 0:f930f0440fd5 1281 * environment in which your server operates.
wamae 0:f930f0440fd5 1282 *
wamae 0:f930f0440fd5 1283 * \warning Disabling this can ba a security risk! (see above)
wamae 0:f930f0440fd5 1284 *
wamae 0:f930f0440fd5 1285 * Requires: MBEDTLS_SSL_PROTO_DTLS
wamae 0:f930f0440fd5 1286 *
wamae 0:f930f0440fd5 1287 * Comment this to disable support for HelloVerifyRequest.
wamae 0:f930f0440fd5 1288 */
wamae 0:f930f0440fd5 1289 //#define MBEDTLS_SSL_DTLS_HELLO_VERIFY
wamae 0:f930f0440fd5 1290
wamae 0:f930f0440fd5 1291 /**
wamae 0:f930f0440fd5 1292 * \def MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
wamae 0:f930f0440fd5 1293 *
wamae 0:f930f0440fd5 1294 * Enable server-side support for clients that reconnect from the same port.
wamae 0:f930f0440fd5 1295 *
wamae 0:f930f0440fd5 1296 * Some clients unexpectedly close the connection and try to reconnect using the
wamae 0:f930f0440fd5 1297 * same source port. This needs special support from the server to handle the
wamae 0:f930f0440fd5 1298 * new connection securely, as described in section 4.2.8 of RFC 6347. This
wamae 0:f930f0440fd5 1299 * flag enables that support.
wamae 0:f930f0440fd5 1300 *
wamae 0:f930f0440fd5 1301 * Requires: MBEDTLS_SSL_DTLS_HELLO_VERIFY
wamae 0:f930f0440fd5 1302 *
wamae 0:f930f0440fd5 1303 * Comment this to disable support for clients reusing the source port.
wamae 0:f930f0440fd5 1304 */
wamae 0:f930f0440fd5 1305 //#define MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
wamae 0:f930f0440fd5 1306
wamae 0:f930f0440fd5 1307 /**
wamae 0:f930f0440fd5 1308 * \def MBEDTLS_SSL_DTLS_BADMAC_LIMIT
wamae 0:f930f0440fd5 1309 *
wamae 0:f930f0440fd5 1310 * Enable support for a limit of records with bad MAC.
wamae 0:f930f0440fd5 1311 *
wamae 0:f930f0440fd5 1312 * See mbedtls_ssl_conf_dtls_badmac_limit().
wamae 0:f930f0440fd5 1313 *
wamae 0:f930f0440fd5 1314 * Requires: MBEDTLS_SSL_PROTO_DTLS
wamae 0:f930f0440fd5 1315 */
wamae 0:f930f0440fd5 1316 //#define MBEDTLS_SSL_DTLS_BADMAC_LIMIT
wamae 0:f930f0440fd5 1317
wamae 0:f930f0440fd5 1318 /**
wamae 0:f930f0440fd5 1319 * \def MBEDTLS_SSL_SESSION_TICKETS
wamae 0:f930f0440fd5 1320 *
wamae 0:f930f0440fd5 1321 * Enable support for RFC 5077 session tickets in SSL.
wamae 0:f930f0440fd5 1322 * Client-side, provides full support for session tickets (maintainance of a
wamae 0:f930f0440fd5 1323 * session store remains the responsibility of the application, though).
wamae 0:f930f0440fd5 1324 * Server-side, you also need to provide callbacks for writing and parsing
wamae 0:f930f0440fd5 1325 * tickets, including authenticated encryption and key management. Example
wamae 0:f930f0440fd5 1326 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
wamae 0:f930f0440fd5 1327 *
wamae 0:f930f0440fd5 1328 * Comment this macro to disable support for SSL session tickets
wamae 0:f930f0440fd5 1329 */
wamae 0:f930f0440fd5 1330 //#define MBEDTLS_SSL_SESSION_TICKETS
wamae 0:f930f0440fd5 1331
wamae 0:f930f0440fd5 1332 /**
wamae 0:f930f0440fd5 1333 * \def MBEDTLS_SSL_EXPORT_KEYS
wamae 0:f930f0440fd5 1334 *
wamae 0:f930f0440fd5 1335 * Enable support for exporting key block and master secret.
wamae 0:f930f0440fd5 1336 * This is required for certain users of TLS, e.g. EAP-TLS.
wamae 0:f930f0440fd5 1337 *
wamae 0:f930f0440fd5 1338 * Comment this macro to disable support for key export
wamae 0:f930f0440fd5 1339 */
wamae 0:f930f0440fd5 1340 //#define MBEDTLS_SSL_EXPORT_KEYS
wamae 0:f930f0440fd5 1341
wamae 0:f930f0440fd5 1342 /**
wamae 0:f930f0440fd5 1343 * \def MBEDTLS_SSL_SERVER_NAME_INDICATION
wamae 0:f930f0440fd5 1344 *
wamae 0:f930f0440fd5 1345 * Enable support for RFC 6066 server name indication (SNI) in SSL.
wamae 0:f930f0440fd5 1346 *
wamae 0:f930f0440fd5 1347 * Requires: MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 1348 *
wamae 0:f930f0440fd5 1349 * Comment this macro to disable support for server name indication in SSL
wamae 0:f930f0440fd5 1350 */
wamae 0:f930f0440fd5 1351 //#define MBEDTLS_SSL_SERVER_NAME_INDICATION
wamae 0:f930f0440fd5 1352
wamae 0:f930f0440fd5 1353 /**
wamae 0:f930f0440fd5 1354 * \def MBEDTLS_SSL_TRUNCATED_HMAC
wamae 0:f930f0440fd5 1355 *
wamae 0:f930f0440fd5 1356 * Enable support for RFC 6066 truncated HMAC in SSL.
wamae 0:f930f0440fd5 1357 *
wamae 0:f930f0440fd5 1358 * Comment this macro to disable support for truncated HMAC in SSL
wamae 0:f930f0440fd5 1359 */
wamae 0:f930f0440fd5 1360 //#define MBEDTLS_SSL_TRUNCATED_HMAC
wamae 0:f930f0440fd5 1361
wamae 0:f930f0440fd5 1362 /**
wamae 0:f930f0440fd5 1363 * \def MBEDTLS_THREADING_ALT
wamae 0:f930f0440fd5 1364 *
wamae 0:f930f0440fd5 1365 * Provide your own alternate threading implementation.
wamae 0:f930f0440fd5 1366 *
wamae 0:f930f0440fd5 1367 * Requires: MBEDTLS_THREADING_C
wamae 0:f930f0440fd5 1368 *
wamae 0:f930f0440fd5 1369 * Uncomment this to allow your own alternate threading implementation.
wamae 0:f930f0440fd5 1370 */
wamae 0:f930f0440fd5 1371 //#define MBEDTLS_THREADING_ALT
wamae 0:f930f0440fd5 1372
wamae 0:f930f0440fd5 1373 /**
wamae 0:f930f0440fd5 1374 * \def MBEDTLS_THREADING_PTHREAD
wamae 0:f930f0440fd5 1375 *
wamae 0:f930f0440fd5 1376 * Enable the pthread wrapper layer for the threading layer.
wamae 0:f930f0440fd5 1377 *
wamae 0:f930f0440fd5 1378 * Requires: MBEDTLS_THREADING_C
wamae 0:f930f0440fd5 1379 *
wamae 0:f930f0440fd5 1380 * Uncomment this to enable pthread mutexes.
wamae 0:f930f0440fd5 1381 */
wamae 0:f930f0440fd5 1382 //#define MBEDTLS_THREADING_PTHREAD
wamae 0:f930f0440fd5 1383
wamae 0:f930f0440fd5 1384 /**
wamae 0:f930f0440fd5 1385 * \def MBEDTLS_VERSION_FEATURES
wamae 0:f930f0440fd5 1386 *
wamae 0:f930f0440fd5 1387 * Allow run-time checking of compile-time enabled features. Thus allowing users
wamae 0:f930f0440fd5 1388 * to check at run-time if the library is for instance compiled with threading
wamae 0:f930f0440fd5 1389 * support via mbedtls_version_check_feature().
wamae 0:f930f0440fd5 1390 *
wamae 0:f930f0440fd5 1391 * Requires: MBEDTLS_VERSION_C
wamae 0:f930f0440fd5 1392 *
wamae 0:f930f0440fd5 1393 * Comment this to disable run-time checking and save ROM space
wamae 0:f930f0440fd5 1394 */
wamae 0:f930f0440fd5 1395 //#define MBEDTLS_VERSION_FEATURES
wamae 0:f930f0440fd5 1396
wamae 0:f930f0440fd5 1397 /**
wamae 0:f930f0440fd5 1398 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
wamae 0:f930f0440fd5 1399 *
wamae 0:f930f0440fd5 1400 * If set, the X509 parser will not break-off when parsing an X509 certificate
wamae 0:f930f0440fd5 1401 * and encountering an extension in a v1 or v2 certificate.
wamae 0:f930f0440fd5 1402 *
wamae 0:f930f0440fd5 1403 * Uncomment to prevent an error.
wamae 0:f930f0440fd5 1404 */
wamae 0:f930f0440fd5 1405 //#define MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
wamae 0:f930f0440fd5 1406
wamae 0:f930f0440fd5 1407 /**
wamae 0:f930f0440fd5 1408 * \def MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
wamae 0:f930f0440fd5 1409 *
wamae 0:f930f0440fd5 1410 * If set, the X509 parser will not break-off when parsing an X509 certificate
wamae 0:f930f0440fd5 1411 * and encountering an unknown critical extension.
wamae 0:f930f0440fd5 1412 *
wamae 0:f930f0440fd5 1413 * \warning Depending on your PKI use, enabling this can be a security risk!
wamae 0:f930f0440fd5 1414 *
wamae 0:f930f0440fd5 1415 * Uncomment to prevent an error.
wamae 0:f930f0440fd5 1416 */
wamae 0:f930f0440fd5 1417 //#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
wamae 0:f930f0440fd5 1418
wamae 0:f930f0440fd5 1419 /**
wamae 0:f930f0440fd5 1420 * \def MBEDTLS_X509_CHECK_KEY_USAGE
wamae 0:f930f0440fd5 1421 *
wamae 0:f930f0440fd5 1422 * Enable verification of the keyUsage extension (CA and leaf certificates).
wamae 0:f930f0440fd5 1423 *
wamae 0:f930f0440fd5 1424 * Disabling this avoids problems with mis-issued and/or misused
wamae 0:f930f0440fd5 1425 * (intermediate) CA and leaf certificates.
wamae 0:f930f0440fd5 1426 *
wamae 0:f930f0440fd5 1427 * \warning Depending on your PKI use, disabling this can be a security risk!
wamae 0:f930f0440fd5 1428 *
wamae 0:f930f0440fd5 1429 * Comment to skip keyUsage checking for both CA and leaf certificates.
wamae 0:f930f0440fd5 1430 */
wamae 0:f930f0440fd5 1431 //#define MBEDTLS_X509_CHECK_KEY_USAGE
wamae 0:f930f0440fd5 1432
wamae 0:f930f0440fd5 1433 /**
wamae 0:f930f0440fd5 1434 * \def MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
wamae 0:f930f0440fd5 1435 *
wamae 0:f930f0440fd5 1436 * Enable verification of the extendedKeyUsage extension (leaf certificates).
wamae 0:f930f0440fd5 1437 *
wamae 0:f930f0440fd5 1438 * Disabling this avoids problems with mis-issued and/or misused certificates.
wamae 0:f930f0440fd5 1439 *
wamae 0:f930f0440fd5 1440 * \warning Depending on your PKI use, disabling this can be a security risk!
wamae 0:f930f0440fd5 1441 *
wamae 0:f930f0440fd5 1442 * Comment to skip extendedKeyUsage checking for certificates.
wamae 0:f930f0440fd5 1443 */
wamae 0:f930f0440fd5 1444 //#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
wamae 0:f930f0440fd5 1445
wamae 0:f930f0440fd5 1446 /**
wamae 0:f930f0440fd5 1447 * \def MBEDTLS_X509_RSASSA_PSS_SUPPORT
wamae 0:f930f0440fd5 1448 *
wamae 0:f930f0440fd5 1449 * Enable parsing and verification of X.509 certificates, CRLs and CSRS
wamae 0:f930f0440fd5 1450 * signed with RSASSA-PSS (aka PKCS#1 v2.1).
wamae 0:f930f0440fd5 1451 *
wamae 0:f930f0440fd5 1452 * Comment this macro to disallow using RSASSA-PSS in certificates.
wamae 0:f930f0440fd5 1453 */
wamae 0:f930f0440fd5 1454 //#define MBEDTLS_X509_RSASSA_PSS_SUPPORT
wamae 0:f930f0440fd5 1455
wamae 0:f930f0440fd5 1456 /**
wamae 0:f930f0440fd5 1457 * \def MBEDTLS_ZLIB_SUPPORT
wamae 0:f930f0440fd5 1458 *
wamae 0:f930f0440fd5 1459 * If set, the SSL/TLS module uses ZLIB to support compression and
wamae 0:f930f0440fd5 1460 * decompression of packet data.
wamae 0:f930f0440fd5 1461 *
wamae 0:f930f0440fd5 1462 * \warning TLS-level compression MAY REDUCE SECURITY! See for example the
wamae 0:f930f0440fd5 1463 * CRIME attack. Before enabling this option, you should examine with care if
wamae 0:f930f0440fd5 1464 * CRIME or similar exploits may be a applicable to your use case.
wamae 0:f930f0440fd5 1465 *
wamae 0:f930f0440fd5 1466 * \note Currently compression can't be used with DTLS.
wamae 0:f930f0440fd5 1467 *
wamae 0:f930f0440fd5 1468 * Used in: library/ssl_tls.c
wamae 0:f930f0440fd5 1469 * library/ssl_cli.c
wamae 0:f930f0440fd5 1470 * library/ssl_srv.c
wamae 0:f930f0440fd5 1471 *
wamae 0:f930f0440fd5 1472 * This feature requires zlib library and headers to be present.
wamae 0:f930f0440fd5 1473 *
wamae 0:f930f0440fd5 1474 * Uncomment to enable use of ZLIB
wamae 0:f930f0440fd5 1475 */
wamae 0:f930f0440fd5 1476 //#define MBEDTLS_ZLIB_SUPPORT
wamae 0:f930f0440fd5 1477 /* \} name SECTION: mbed TLS feature support */
wamae 0:f930f0440fd5 1478
wamae 0:f930f0440fd5 1479 /**
wamae 0:f930f0440fd5 1480 * \name SECTION: mbed TLS modules
wamae 0:f930f0440fd5 1481 *
wamae 0:f930f0440fd5 1482 * This section enables or disables entire modules in mbed TLS
wamae 0:f930f0440fd5 1483 * \{
wamae 0:f930f0440fd5 1484 */
wamae 0:f930f0440fd5 1485
wamae 0:f930f0440fd5 1486 /**
wamae 0:f930f0440fd5 1487 * \def MBEDTLS_AESNI_C
wamae 0:f930f0440fd5 1488 *
wamae 0:f930f0440fd5 1489 * Enable AES-NI support on x86-64.
wamae 0:f930f0440fd5 1490 *
wamae 0:f930f0440fd5 1491 * Module: library/aesni.c
wamae 0:f930f0440fd5 1492 * Caller: library/aes.c
wamae 0:f930f0440fd5 1493 *
wamae 0:f930f0440fd5 1494 * Requires: MBEDTLS_HAVE_ASM
wamae 0:f930f0440fd5 1495 *
wamae 0:f930f0440fd5 1496 * This modules adds support for the AES-NI instructions on x86-64
wamae 0:f930f0440fd5 1497 */
wamae 0:f930f0440fd5 1498 //#define MBEDTLS_AESNI_C
wamae 0:f930f0440fd5 1499
wamae 0:f930f0440fd5 1500 /**
wamae 0:f930f0440fd5 1501 * \def MBEDTLS_AES_C
wamae 0:f930f0440fd5 1502 *
wamae 0:f930f0440fd5 1503 * Enable the AES block cipher.
wamae 0:f930f0440fd5 1504 *
wamae 0:f930f0440fd5 1505 * Module: library/aes.c
wamae 0:f930f0440fd5 1506 * Caller: library/ssl_tls.c
wamae 0:f930f0440fd5 1507 * library/pem.c
wamae 0:f930f0440fd5 1508 * library/ctr_drbg.c
wamae 0:f930f0440fd5 1509 *
wamae 0:f930f0440fd5 1510 * This module enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 1511 * enabled as well):
wamae 0:f930f0440fd5 1512 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1513 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1514 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1515 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1516 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1517 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1518 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1519 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1520 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1521 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1522 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1523 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1524 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1525 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1526 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1527 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1528 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1529 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
wamae 0:f930f0440fd5 1530 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1531 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1532 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1533 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1534 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1535 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1536 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1537 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1538 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1539 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1540 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1541 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1542 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1543 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1544 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1545 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1546 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1547 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1548 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1549 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1550 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1551 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1552 * MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1553 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256
wamae 0:f930f0440fd5 1554 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1555 * MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1556 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1557 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1558 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1559 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1560 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1561 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1562 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1563 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1564 * MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384
wamae 0:f930f0440fd5 1565 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384
wamae 0:f930f0440fd5 1566 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA
wamae 0:f930f0440fd5 1567 * MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 1568 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256
wamae 0:f930f0440fd5 1569 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA
wamae 0:f930f0440fd5 1570 *
wamae 0:f930f0440fd5 1571 * PEM_PARSE uses AES for decrypting encrypted keys.
wamae 0:f930f0440fd5 1572 */
wamae 0:f930f0440fd5 1573 #define MBEDTLS_AES_C
wamae 0:f930f0440fd5 1574
wamae 0:f930f0440fd5 1575 /**
wamae 0:f930f0440fd5 1576 * \def MBEDTLS_ARC4_C
wamae 0:f930f0440fd5 1577 *
wamae 0:f930f0440fd5 1578 * Enable the ARCFOUR stream cipher.
wamae 0:f930f0440fd5 1579 *
wamae 0:f930f0440fd5 1580 * Module: library/arc4.c
wamae 0:f930f0440fd5 1581 * Caller: library/ssl_tls.c
wamae 0:f930f0440fd5 1582 *
wamae 0:f930f0440fd5 1583 * This module enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 1584 * enabled as well):
wamae 0:f930f0440fd5 1585 * MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1586 * MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1587 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1588 * MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1589 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1590 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1591 * MBEDTLS_TLS_RSA_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1592 * MBEDTLS_TLS_RSA_WITH_RC4_128_MD5
wamae 0:f930f0440fd5 1593 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1594 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
wamae 0:f930f0440fd5 1595 */
wamae 0:f930f0440fd5 1596 //#define MBEDTLS_ARC4_C
wamae 0:f930f0440fd5 1597
wamae 0:f930f0440fd5 1598 /**
wamae 0:f930f0440fd5 1599 * \def MBEDTLS_ASN1_PARSE_C
wamae 0:f930f0440fd5 1600 *
wamae 0:f930f0440fd5 1601 * Enable the generic ASN1 parser.
wamae 0:f930f0440fd5 1602 *
wamae 0:f930f0440fd5 1603 * Module: library/asn1.c
wamae 0:f930f0440fd5 1604 * Caller: library/x509.c
wamae 0:f930f0440fd5 1605 * library/dhm.c
wamae 0:f930f0440fd5 1606 * library/pkcs12.c
wamae 0:f930f0440fd5 1607 * library/pkcs5.c
wamae 0:f930f0440fd5 1608 * library/pkparse.c
wamae 0:f930f0440fd5 1609 */
wamae 0:f930f0440fd5 1610 //#define MBEDTLS_ASN1_PARSE_C
wamae 0:f930f0440fd5 1611
wamae 0:f930f0440fd5 1612 /**
wamae 0:f930f0440fd5 1613 * \def MBEDTLS_ASN1_WRITE_C
wamae 0:f930f0440fd5 1614 *
wamae 0:f930f0440fd5 1615 * Enable the generic ASN1 writer.
wamae 0:f930f0440fd5 1616 *
wamae 0:f930f0440fd5 1617 * Module: library/asn1write.c
wamae 0:f930f0440fd5 1618 * Caller: library/ecdsa.c
wamae 0:f930f0440fd5 1619 * library/pkwrite.c
wamae 0:f930f0440fd5 1620 * library/x509_create.c
wamae 0:f930f0440fd5 1621 * library/x509write_crt.c
wamae 0:f930f0440fd5 1622 * library/x509write_csr.c
wamae 0:f930f0440fd5 1623 */
wamae 0:f930f0440fd5 1624 //#define MBEDTLS_ASN1_WRITE_C
wamae 0:f930f0440fd5 1625
wamae 0:f930f0440fd5 1626 /**
wamae 0:f930f0440fd5 1627 * \def MBEDTLS_BASE64_C
wamae 0:f930f0440fd5 1628 *
wamae 0:f930f0440fd5 1629 * Enable the Base64 module.
wamae 0:f930f0440fd5 1630 *
wamae 0:f930f0440fd5 1631 * Module: library/base64.c
wamae 0:f930f0440fd5 1632 * Caller: library/pem.c
wamae 0:f930f0440fd5 1633 *
wamae 0:f930f0440fd5 1634 * This module is required for PEM support (required by X.509).
wamae 0:f930f0440fd5 1635 */
wamae 0:f930f0440fd5 1636 #define MBEDTLS_BASE64_C
wamae 0:f930f0440fd5 1637
wamae 0:f930f0440fd5 1638 /**
wamae 0:f930f0440fd5 1639 * \def MBEDTLS_BIGNUM_C
wamae 0:f930f0440fd5 1640 *
wamae 0:f930f0440fd5 1641 * Enable the multi-precision integer library.
wamae 0:f930f0440fd5 1642 *
wamae 0:f930f0440fd5 1643 * Module: library/bignum.c
wamae 0:f930f0440fd5 1644 * Caller: library/dhm.c
wamae 0:f930f0440fd5 1645 * library/ecp.c
wamae 0:f930f0440fd5 1646 * library/ecdsa.c
wamae 0:f930f0440fd5 1647 * library/rsa.c
wamae 0:f930f0440fd5 1648 * library/ssl_tls.c
wamae 0:f930f0440fd5 1649 *
wamae 0:f930f0440fd5 1650 * This module is required for RSA, DHM and ECC (ECDH, ECDSA) support.
wamae 0:f930f0440fd5 1651 */
wamae 0:f930f0440fd5 1652 //#define MBEDTLS_BIGNUM_C
wamae 0:f930f0440fd5 1653
wamae 0:f930f0440fd5 1654 /**
wamae 0:f930f0440fd5 1655 * \def MBEDTLS_BLOWFISH_C
wamae 0:f930f0440fd5 1656 *
wamae 0:f930f0440fd5 1657 * Enable the Blowfish block cipher.
wamae 0:f930f0440fd5 1658 *
wamae 0:f930f0440fd5 1659 * Module: library/blowfish.c
wamae 0:f930f0440fd5 1660 */
wamae 0:f930f0440fd5 1661 //#define MBEDTLS_BLOWFISH_C
wamae 0:f930f0440fd5 1662
wamae 0:f930f0440fd5 1663 /**
wamae 0:f930f0440fd5 1664 * \def MBEDTLS_CAMELLIA_C
wamae 0:f930f0440fd5 1665 *
wamae 0:f930f0440fd5 1666 * Enable the Camellia block cipher.
wamae 0:f930f0440fd5 1667 *
wamae 0:f930f0440fd5 1668 * Module: library/camellia.c
wamae 0:f930f0440fd5 1669 * Caller: library/ssl_tls.c
wamae 0:f930f0440fd5 1670 *
wamae 0:f930f0440fd5 1671 * This module enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 1672 * enabled as well):
wamae 0:f930f0440fd5 1673 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1674 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1675 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1676 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1677 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1678 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1679 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1680 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1681 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1682 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1683 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1684 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1685 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1686 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:f930f0440fd5 1687 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:f930f0440fd5 1688 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1689 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1690 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1691 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1692 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1693 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1694 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:f930f0440fd5 1695 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1696 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1697 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1698 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1699 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1700 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1701 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1702 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:f930f0440fd5 1703 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:f930f0440fd5 1704 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1705 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1706 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:f930f0440fd5 1707 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1708 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1709 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1710 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1711 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:f930f0440fd5 1712 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:f930f0440fd5 1713 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:f930f0440fd5 1714 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:f930f0440fd5 1715 */
wamae 0:f930f0440fd5 1716 //#define MBEDTLS_CAMELLIA_C
wamae 0:f930f0440fd5 1717
wamae 0:f930f0440fd5 1718 /**
wamae 0:f930f0440fd5 1719 * \def MBEDTLS_CCM_C
wamae 0:f930f0440fd5 1720 *
wamae 0:f930f0440fd5 1721 * Enable the Counter with CBC-MAC (CCM) mode for 128-bit block cipher.
wamae 0:f930f0440fd5 1722 *
wamae 0:f930f0440fd5 1723 * Module: library/ccm.c
wamae 0:f930f0440fd5 1724 *
wamae 0:f930f0440fd5 1725 * Requires: MBEDTLS_AES_C or MBEDTLS_CAMELLIA_C
wamae 0:f930f0440fd5 1726 *
wamae 0:f930f0440fd5 1727 * This module enables the AES-CCM ciphersuites, if other requisites are
wamae 0:f930f0440fd5 1728 * enabled as well.
wamae 0:f930f0440fd5 1729 */
wamae 0:f930f0440fd5 1730 //#define MBEDTLS_CCM_C
wamae 0:f930f0440fd5 1731
wamae 0:f930f0440fd5 1732 /**
wamae 0:f930f0440fd5 1733 * \def MBEDTLS_CERTS_C
wamae 0:f930f0440fd5 1734 *
wamae 0:f930f0440fd5 1735 * Enable the test certificates.
wamae 0:f930f0440fd5 1736 *
wamae 0:f930f0440fd5 1737 * Module: library/certs.c
wamae 0:f930f0440fd5 1738 * Caller:
wamae 0:f930f0440fd5 1739 *
wamae 0:f930f0440fd5 1740 * This module is used for testing (ssl_client/server).
wamae 0:f930f0440fd5 1741 */
wamae 0:f930f0440fd5 1742 //#define MBEDTLS_CERTS_C
wamae 0:f930f0440fd5 1743
wamae 0:f930f0440fd5 1744 /**
wamae 0:f930f0440fd5 1745 * \def MBEDTLS_CIPHER_C
wamae 0:f930f0440fd5 1746 *
wamae 0:f930f0440fd5 1747 * Enable the generic cipher layer.
wamae 0:f930f0440fd5 1748 *
wamae 0:f930f0440fd5 1749 * Module: library/cipher.c
wamae 0:f930f0440fd5 1750 * Caller: library/ssl_tls.c
wamae 0:f930f0440fd5 1751 *
wamae 0:f930f0440fd5 1752 * Uncomment to enable generic cipher wrappers.
wamae 0:f930f0440fd5 1753 */
wamae 0:f930f0440fd5 1754 #define MBEDTLS_CIPHER_C
wamae 0:f930f0440fd5 1755
wamae 0:f930f0440fd5 1756 /**
wamae 0:f930f0440fd5 1757 * \def MBEDTLS_CMAC_C
wamae 0:f930f0440fd5 1758 *
wamae 0:f930f0440fd5 1759 * Enable the CMAC (Cipher-based Message Authentication Code) mode for block
wamae 0:f930f0440fd5 1760 * ciphers.
wamae 0:f930f0440fd5 1761 *
wamae 0:f930f0440fd5 1762 * Module: library/cmac.c
wamae 0:f930f0440fd5 1763 *
wamae 0:f930f0440fd5 1764 * Requires: MBEDTLS_AES_C or MBEDTLS_DES_C
wamae 0:f930f0440fd5 1765 *
wamae 0:f930f0440fd5 1766 */
wamae 0:f930f0440fd5 1767 #define MBEDTLS_CMAC_C
wamae 0:f930f0440fd5 1768
wamae 0:f930f0440fd5 1769 /**
wamae 0:f930f0440fd5 1770 * \def MBEDTLS_CTR_DRBG_C
wamae 0:f930f0440fd5 1771 *
wamae 0:f930f0440fd5 1772 * Enable the CTR_DRBG AES-256-based random generator.
wamae 0:f930f0440fd5 1773 *
wamae 0:f930f0440fd5 1774 * Module: library/ctr_drbg.c
wamae 0:f930f0440fd5 1775 * Caller:
wamae 0:f930f0440fd5 1776 *
wamae 0:f930f0440fd5 1777 * Requires: MBEDTLS_AES_C
wamae 0:f930f0440fd5 1778 *
wamae 0:f930f0440fd5 1779 * This module provides the CTR_DRBG AES-256 random number generator.
wamae 0:f930f0440fd5 1780 */
wamae 0:f930f0440fd5 1781 //#define MBEDTLS_CTR_DRBG_C
wamae 0:f930f0440fd5 1782
wamae 0:f930f0440fd5 1783 /**
wamae 0:f930f0440fd5 1784 * \def MBEDTLS_DEBUG_C
wamae 0:f930f0440fd5 1785 *
wamae 0:f930f0440fd5 1786 * Enable the debug functions.
wamae 0:f930f0440fd5 1787 *
wamae 0:f930f0440fd5 1788 * Module: library/debug.c
wamae 0:f930f0440fd5 1789 * Caller: library/ssl_cli.c
wamae 0:f930f0440fd5 1790 * library/ssl_srv.c
wamae 0:f930f0440fd5 1791 * library/ssl_tls.c
wamae 0:f930f0440fd5 1792 *
wamae 0:f930f0440fd5 1793 * This module provides debugging functions.
wamae 0:f930f0440fd5 1794 */
wamae 0:f930f0440fd5 1795 //#define MBEDTLS_DEBUG_C
wamae 0:f930f0440fd5 1796
wamae 0:f930f0440fd5 1797 /**
wamae 0:f930f0440fd5 1798 * \def MBEDTLS_DES_C
wamae 0:f930f0440fd5 1799 *
wamae 0:f930f0440fd5 1800 * Enable the DES block cipher.
wamae 0:f930f0440fd5 1801 *
wamae 0:f930f0440fd5 1802 * Module: library/des.c
wamae 0:f930f0440fd5 1803 * Caller: library/pem.c
wamae 0:f930f0440fd5 1804 * library/ssl_tls.c
wamae 0:f930f0440fd5 1805 *
wamae 0:f930f0440fd5 1806 * This module enables the following ciphersuites (if other requisites are
wamae 0:f930f0440fd5 1807 * enabled as well):
wamae 0:f930f0440fd5 1808 * MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1809 * MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1810 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1811 * MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1812 * MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1813 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1814 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1815 * MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1816 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1817 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:f930f0440fd5 1818 *
wamae 0:f930f0440fd5 1819 * PEM_PARSE uses DES/3DES for decrypting encrypted keys.
wamae 0:f930f0440fd5 1820 */
wamae 0:f930f0440fd5 1821 //#define MBEDTLS_DES_C
wamae 0:f930f0440fd5 1822
wamae 0:f930f0440fd5 1823 /**
wamae 0:f930f0440fd5 1824 * \def MBEDTLS_DHM_C
wamae 0:f930f0440fd5 1825 *
wamae 0:f930f0440fd5 1826 * Enable the Diffie-Hellman-Merkle module.
wamae 0:f930f0440fd5 1827 *
wamae 0:f930f0440fd5 1828 * Module: library/dhm.c
wamae 0:f930f0440fd5 1829 * Caller: library/ssl_cli.c
wamae 0:f930f0440fd5 1830 * library/ssl_srv.c
wamae 0:f930f0440fd5 1831 *
wamae 0:f930f0440fd5 1832 * This module is used by the following key exchanges:
wamae 0:f930f0440fd5 1833 * DHE-RSA, DHE-PSK
wamae 0:f930f0440fd5 1834 */
wamae 0:f930f0440fd5 1835 //#define MBEDTLS_DHM_C
wamae 0:f930f0440fd5 1836
wamae 0:f930f0440fd5 1837 /**
wamae 0:f930f0440fd5 1838 * \def MBEDTLS_ECDH_C
wamae 0:f930f0440fd5 1839 *
wamae 0:f930f0440fd5 1840 * Enable the elliptic curve Diffie-Hellman library.
wamae 0:f930f0440fd5 1841 *
wamae 0:f930f0440fd5 1842 * Module: library/ecdh.c
wamae 0:f930f0440fd5 1843 * Caller: library/ssl_cli.c
wamae 0:f930f0440fd5 1844 * library/ssl_srv.c
wamae 0:f930f0440fd5 1845 *
wamae 0:f930f0440fd5 1846 * This module is used by the following key exchanges:
wamae 0:f930f0440fd5 1847 * ECDHE-ECDSA, ECDHE-RSA, DHE-PSK
wamae 0:f930f0440fd5 1848 *
wamae 0:f930f0440fd5 1849 * Requires: MBEDTLS_ECP_C
wamae 0:f930f0440fd5 1850 */
wamae 0:f930f0440fd5 1851 //#define MBEDTLS_ECDH_C
wamae 0:f930f0440fd5 1852
wamae 0:f930f0440fd5 1853 /**
wamae 0:f930f0440fd5 1854 * \def MBEDTLS_ECDSA_C
wamae 0:f930f0440fd5 1855 *
wamae 0:f930f0440fd5 1856 * Enable the elliptic curve DSA library.
wamae 0:f930f0440fd5 1857 *
wamae 0:f930f0440fd5 1858 * Module: library/ecdsa.c
wamae 0:f930f0440fd5 1859 * Caller:
wamae 0:f930f0440fd5 1860 *
wamae 0:f930f0440fd5 1861 * This module is used by the following key exchanges:
wamae 0:f930f0440fd5 1862 * ECDHE-ECDSA
wamae 0:f930f0440fd5 1863 *
wamae 0:f930f0440fd5 1864 * Requires: MBEDTLS_ECP_C, MBEDTLS_ASN1_WRITE_C, MBEDTLS_ASN1_PARSE_C
wamae 0:f930f0440fd5 1865 */
wamae 0:f930f0440fd5 1866 //#define MBEDTLS_ECDSA_C
wamae 0:f930f0440fd5 1867
wamae 0:f930f0440fd5 1868 /**
wamae 0:f930f0440fd5 1869 * \def MBEDTLS_ECJPAKE_C
wamae 0:f930f0440fd5 1870 *
wamae 0:f930f0440fd5 1871 * Enable the elliptic curve J-PAKE library.
wamae 0:f930f0440fd5 1872 *
wamae 0:f930f0440fd5 1873 * \warning This is currently experimental. EC J-PAKE support is based on the
wamae 0:f930f0440fd5 1874 * Thread v1.0.0 specification; incompatible changes to the specification
wamae 0:f930f0440fd5 1875 * might still happen. For this reason, this is disabled by default.
wamae 0:f930f0440fd5 1876 *
wamae 0:f930f0440fd5 1877 * Module: library/ecjpake.c
wamae 0:f930f0440fd5 1878 * Caller:
wamae 0:f930f0440fd5 1879 *
wamae 0:f930f0440fd5 1880 * This module is used by the following key exchanges:
wamae 0:f930f0440fd5 1881 * ECJPAKE
wamae 0:f930f0440fd5 1882 *
wamae 0:f930f0440fd5 1883 * Requires: MBEDTLS_ECP_C, MBEDTLS_MD_C
wamae 0:f930f0440fd5 1884 */
wamae 0:f930f0440fd5 1885 //#define MBEDTLS_ECJPAKE_C
wamae 0:f930f0440fd5 1886
wamae 0:f930f0440fd5 1887 /**
wamae 0:f930f0440fd5 1888 * \def MBEDTLS_ECP_C
wamae 0:f930f0440fd5 1889 *
wamae 0:f930f0440fd5 1890 * Enable the elliptic curve over GF(p) library.
wamae 0:f930f0440fd5 1891 *
wamae 0:f930f0440fd5 1892 * Module: library/ecp.c
wamae 0:f930f0440fd5 1893 * Caller: library/ecdh.c
wamae 0:f930f0440fd5 1894 * library/ecdsa.c
wamae 0:f930f0440fd5 1895 * library/ecjpake.c
wamae 0:f930f0440fd5 1896 *
wamae 0:f930f0440fd5 1897 * Requires: MBEDTLS_BIGNUM_C and at least one MBEDTLS_ECP_DP_XXX_ENABLED
wamae 0:f930f0440fd5 1898 */
wamae 0:f930f0440fd5 1899 //#define MBEDTLS_ECP_C
wamae 0:f930f0440fd5 1900
wamae 0:f930f0440fd5 1901 /**
wamae 0:f930f0440fd5 1902 * \def MBEDTLS_ENTROPY_C
wamae 0:f930f0440fd5 1903 *
wamae 0:f930f0440fd5 1904 * Enable the platform-specific entropy code.
wamae 0:f930f0440fd5 1905 *
wamae 0:f930f0440fd5 1906 * Module: library/entropy.c
wamae 0:f930f0440fd5 1907 * Caller:
wamae 0:f930f0440fd5 1908 *
wamae 0:f930f0440fd5 1909 * Requires: MBEDTLS_SHA512_C or MBEDTLS_SHA256_C
wamae 0:f930f0440fd5 1910 *
wamae 0:f930f0440fd5 1911 * This module provides a generic entropy pool
wamae 0:f930f0440fd5 1912 */
wamae 0:f930f0440fd5 1913 //#define MBEDTLS_ENTROPY_C
wamae 0:f930f0440fd5 1914
wamae 0:f930f0440fd5 1915 /**
wamae 0:f930f0440fd5 1916 * \def MBEDTLS_ERROR_C
wamae 0:f930f0440fd5 1917 *
wamae 0:f930f0440fd5 1918 * Enable error code to error string conversion.
wamae 0:f930f0440fd5 1919 *
wamae 0:f930f0440fd5 1920 * Module: library/error.c
wamae 0:f930f0440fd5 1921 * Caller:
wamae 0:f930f0440fd5 1922 *
wamae 0:f930f0440fd5 1923 * This module enables mbedtls_strerror().
wamae 0:f930f0440fd5 1924 */
wamae 0:f930f0440fd5 1925 //#define MBEDTLS_ERROR_C
wamae 0:f930f0440fd5 1926
wamae 0:f930f0440fd5 1927 /**
wamae 0:f930f0440fd5 1928 * \def MBEDTLS_GCM_C
wamae 0:f930f0440fd5 1929 *
wamae 0:f930f0440fd5 1930 * Enable the Galois/Counter Mode (GCM) for AES.
wamae 0:f930f0440fd5 1931 *
wamae 0:f930f0440fd5 1932 * Module: library/gcm.c
wamae 0:f930f0440fd5 1933 *
wamae 0:f930f0440fd5 1934 * Requires: MBEDTLS_AES_C or MBEDTLS_CAMELLIA_C
wamae 0:f930f0440fd5 1935 *
wamae 0:f930f0440fd5 1936 * This module enables the AES-GCM and CAMELLIA-GCM ciphersuites, if other
wamae 0:f930f0440fd5 1937 * requisites are enabled as well.
wamae 0:f930f0440fd5 1938 */
wamae 0:f930f0440fd5 1939 //#define MBEDTLS_GCM_C
wamae 0:f930f0440fd5 1940
wamae 0:f930f0440fd5 1941 /**
wamae 0:f930f0440fd5 1942 * \def MBEDTLS_HAVEGE_C
wamae 0:f930f0440fd5 1943 *
wamae 0:f930f0440fd5 1944 * Enable the HAVEGE random generator.
wamae 0:f930f0440fd5 1945 *
wamae 0:f930f0440fd5 1946 * Warning: the HAVEGE random generator is not suitable for virtualized
wamae 0:f930f0440fd5 1947 * environments
wamae 0:f930f0440fd5 1948 *
wamae 0:f930f0440fd5 1949 * Warning: the HAVEGE random generator is dependent on timing and specific
wamae 0:f930f0440fd5 1950 * processor traits. It is therefore not advised to use HAVEGE as
wamae 0:f930f0440fd5 1951 * your applications primary random generator or primary entropy pool
wamae 0:f930f0440fd5 1952 * input. As a secondary input to your entropy pool, it IS able add
wamae 0:f930f0440fd5 1953 * the (limited) extra entropy it provides.
wamae 0:f930f0440fd5 1954 *
wamae 0:f930f0440fd5 1955 * Module: library/havege.c
wamae 0:f930f0440fd5 1956 * Caller:
wamae 0:f930f0440fd5 1957 *
wamae 0:f930f0440fd5 1958 * Requires: MBEDTLS_TIMING_C
wamae 0:f930f0440fd5 1959 *
wamae 0:f930f0440fd5 1960 * Uncomment to enable the HAVEGE random generator.
wamae 0:f930f0440fd5 1961 */
wamae 0:f930f0440fd5 1962 //#define MBEDTLS_HAVEGE_C
wamae 0:f930f0440fd5 1963
wamae 0:f930f0440fd5 1964 /**
wamae 0:f930f0440fd5 1965 * \def MBEDTLS_HMAC_DRBG_C
wamae 0:f930f0440fd5 1966 *
wamae 0:f930f0440fd5 1967 * Enable the HMAC_DRBG random generator.
wamae 0:f930f0440fd5 1968 *
wamae 0:f930f0440fd5 1969 * Module: library/hmac_drbg.c
wamae 0:f930f0440fd5 1970 * Caller:
wamae 0:f930f0440fd5 1971 *
wamae 0:f930f0440fd5 1972 * Requires: MBEDTLS_MD_C
wamae 0:f930f0440fd5 1973 *
wamae 0:f930f0440fd5 1974 * Uncomment to enable the HMAC_DRBG random number geerator.
wamae 0:f930f0440fd5 1975 */
wamae 0:f930f0440fd5 1976 //#define MBEDTLS_HMAC_DRBG_C
wamae 0:f930f0440fd5 1977
wamae 0:f930f0440fd5 1978 /**
wamae 0:f930f0440fd5 1979 * \def MBEDTLS_MD_C
wamae 0:f930f0440fd5 1980 *
wamae 0:f930f0440fd5 1981 * Enable the generic message digest layer.
wamae 0:f930f0440fd5 1982 *
wamae 0:f930f0440fd5 1983 * Module: library/md.c
wamae 0:f930f0440fd5 1984 * Caller:
wamae 0:f930f0440fd5 1985 *
wamae 0:f930f0440fd5 1986 * Uncomment to enable generic message digest wrappers.
wamae 0:f930f0440fd5 1987 */
wamae 0:f930f0440fd5 1988 //#define MBEDTLS_MD_C
wamae 0:f930f0440fd5 1989
wamae 0:f930f0440fd5 1990 /**
wamae 0:f930f0440fd5 1991 * \def MBEDTLS_MD2_C
wamae 0:f930f0440fd5 1992 *
wamae 0:f930f0440fd5 1993 * Enable the MD2 hash algorithm.
wamae 0:f930f0440fd5 1994 *
wamae 0:f930f0440fd5 1995 * Module: library/md2.c
wamae 0:f930f0440fd5 1996 * Caller:
wamae 0:f930f0440fd5 1997 *
wamae 0:f930f0440fd5 1998 * Uncomment to enable support for (rare) MD2-signed X.509 certs.
wamae 0:f930f0440fd5 1999 */
wamae 0:f930f0440fd5 2000 //#define MBEDTLS_MD2_C
wamae 0:f930f0440fd5 2001
wamae 0:f930f0440fd5 2002 /**
wamae 0:f930f0440fd5 2003 * \def MBEDTLS_MD4_C
wamae 0:f930f0440fd5 2004 *
wamae 0:f930f0440fd5 2005 * Enable the MD4 hash algorithm.
wamae 0:f930f0440fd5 2006 *
wamae 0:f930f0440fd5 2007 * Module: library/md4.c
wamae 0:f930f0440fd5 2008 * Caller:
wamae 0:f930f0440fd5 2009 *
wamae 0:f930f0440fd5 2010 * Uncomment to enable support for (rare) MD4-signed X.509 certs.
wamae 0:f930f0440fd5 2011 */
wamae 0:f930f0440fd5 2012 //#define MBEDTLS_MD4_C
wamae 0:f930f0440fd5 2013
wamae 0:f930f0440fd5 2014 /**
wamae 0:f930f0440fd5 2015 * \def MBEDTLS_MD5_C
wamae 0:f930f0440fd5 2016 *
wamae 0:f930f0440fd5 2017 * Enable the MD5 hash algorithm.
wamae 0:f930f0440fd5 2018 *
wamae 0:f930f0440fd5 2019 * Module: library/md5.c
wamae 0:f930f0440fd5 2020 * Caller: library/md.c
wamae 0:f930f0440fd5 2021 * library/pem.c
wamae 0:f930f0440fd5 2022 * library/ssl_tls.c
wamae 0:f930f0440fd5 2023 *
wamae 0:f930f0440fd5 2024 * This module is required for SSL/TLS and X.509.
wamae 0:f930f0440fd5 2025 * PEM_PARSE uses MD5 for decrypting encrypted keys.
wamae 0:f930f0440fd5 2026 */
wamae 0:f930f0440fd5 2027 //#define MBEDTLS_MD5_C
wamae 0:f930f0440fd5 2028
wamae 0:f930f0440fd5 2029 /**
wamae 0:f930f0440fd5 2030 * \def MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:f930f0440fd5 2031 *
wamae 0:f930f0440fd5 2032 * Enable the buffer allocator implementation that makes use of a (stack)
wamae 0:f930f0440fd5 2033 * based buffer to 'allocate' dynamic memory. (replaces calloc() and free()
wamae 0:f930f0440fd5 2034 * calls)
wamae 0:f930f0440fd5 2035 *
wamae 0:f930f0440fd5 2036 * Module: library/memory_buffer_alloc.c
wamae 0:f930f0440fd5 2037 *
wamae 0:f930f0440fd5 2038 * Requires: MBEDTLS_PLATFORM_C
wamae 0:f930f0440fd5 2039 * MBEDTLS_PLATFORM_MEMORY (to use it within mbed TLS)
wamae 0:f930f0440fd5 2040 *
wamae 0:f930f0440fd5 2041 * Enable this module to enable the buffer memory allocator.
wamae 0:f930f0440fd5 2042 */
wamae 0:f930f0440fd5 2043 //#define MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:f930f0440fd5 2044
wamae 0:f930f0440fd5 2045 /**
wamae 0:f930f0440fd5 2046 * \def MBEDTLS_NET_C
wamae 0:f930f0440fd5 2047 *
wamae 0:f930f0440fd5 2048 * Enable the TCP and UDP over IPv6/IPv4 networking routines.
wamae 0:f930f0440fd5 2049 *
wamae 0:f930f0440fd5 2050 * \note This module only works on POSIX/Unix (including Linux, BSD and OS X)
wamae 0:f930f0440fd5 2051 * and Windows. For other platforms, you'll want to disable it, and write your
wamae 0:f930f0440fd5 2052 * own networking callbacks to be passed to \c mbedtls_ssl_set_bio().
wamae 0:f930f0440fd5 2053 *
wamae 0:f930f0440fd5 2054 * \note See also our Knowledge Base article about porting to a new
wamae 0:f930f0440fd5 2055 * environment:
wamae 0:f930f0440fd5 2056 * https://tls.mbed.org/kb/how-to/how-do-i-port-mbed-tls-to-a-new-environment-OS
wamae 0:f930f0440fd5 2057 *
wamae 0:f930f0440fd5 2058 * Module: library/net_sockets.c
wamae 0:f930f0440fd5 2059 *
wamae 0:f930f0440fd5 2060 * This module provides networking routines.
wamae 0:f930f0440fd5 2061 */
wamae 0:f930f0440fd5 2062 //#define MBEDTLS_NET_C
wamae 0:f930f0440fd5 2063
wamae 0:f930f0440fd5 2064 /**
wamae 0:f930f0440fd5 2065 * \def MBEDTLS_OID_C
wamae 0:f930f0440fd5 2066 *
wamae 0:f930f0440fd5 2067 * Enable the OID database.
wamae 0:f930f0440fd5 2068 *
wamae 0:f930f0440fd5 2069 * Module: library/oid.c
wamae 0:f930f0440fd5 2070 * Caller: library/asn1write.c
wamae 0:f930f0440fd5 2071 * library/pkcs5.c
wamae 0:f930f0440fd5 2072 * library/pkparse.c
wamae 0:f930f0440fd5 2073 * library/pkwrite.c
wamae 0:f930f0440fd5 2074 * library/rsa.c
wamae 0:f930f0440fd5 2075 * library/x509.c
wamae 0:f930f0440fd5 2076 * library/x509_create.c
wamae 0:f930f0440fd5 2077 * library/x509_crl.c
wamae 0:f930f0440fd5 2078 * library/x509_crt.c
wamae 0:f930f0440fd5 2079 * library/x509_csr.c
wamae 0:f930f0440fd5 2080 * library/x509write_crt.c
wamae 0:f930f0440fd5 2081 * library/x509write_csr.c
wamae 0:f930f0440fd5 2082 *
wamae 0:f930f0440fd5 2083 * This modules translates between OIDs and internal values.
wamae 0:f930f0440fd5 2084 */
wamae 0:f930f0440fd5 2085 //#define MBEDTLS_OID_C
wamae 0:f930f0440fd5 2086
wamae 0:f930f0440fd5 2087 /**
wamae 0:f930f0440fd5 2088 * \def MBEDTLS_PADLOCK_C
wamae 0:f930f0440fd5 2089 *
wamae 0:f930f0440fd5 2090 * Enable VIA Padlock support on x86.
wamae 0:f930f0440fd5 2091 *
wamae 0:f930f0440fd5 2092 * Module: library/padlock.c
wamae 0:f930f0440fd5 2093 * Caller: library/aes.c
wamae 0:f930f0440fd5 2094 *
wamae 0:f930f0440fd5 2095 * Requires: MBEDTLS_HAVE_ASM
wamae 0:f930f0440fd5 2096 *
wamae 0:f930f0440fd5 2097 * This modules adds support for the VIA PadLock on x86.
wamae 0:f930f0440fd5 2098 */
wamae 0:f930f0440fd5 2099 //#define MBEDTLS_PADLOCK_C
wamae 0:f930f0440fd5 2100
wamae 0:f930f0440fd5 2101 /**
wamae 0:f930f0440fd5 2102 * \def MBEDTLS_PEM_PARSE_C
wamae 0:f930f0440fd5 2103 *
wamae 0:f930f0440fd5 2104 * Enable PEM decoding / parsing.
wamae 0:f930f0440fd5 2105 *
wamae 0:f930f0440fd5 2106 * Module: library/pem.c
wamae 0:f930f0440fd5 2107 * Caller: library/dhm.c
wamae 0:f930f0440fd5 2108 * library/pkparse.c
wamae 0:f930f0440fd5 2109 * library/x509_crl.c
wamae 0:f930f0440fd5 2110 * library/x509_crt.c
wamae 0:f930f0440fd5 2111 * library/x509_csr.c
wamae 0:f930f0440fd5 2112 *
wamae 0:f930f0440fd5 2113 * Requires: MBEDTLS_BASE64_C
wamae 0:f930f0440fd5 2114 *
wamae 0:f930f0440fd5 2115 * This modules adds support for decoding / parsing PEM files.
wamae 0:f930f0440fd5 2116 */
wamae 0:f930f0440fd5 2117 //#define MBEDTLS_PEM_PARSE_C
wamae 0:f930f0440fd5 2118
wamae 0:f930f0440fd5 2119 /**
wamae 0:f930f0440fd5 2120 * \def MBEDTLS_PEM_WRITE_C
wamae 0:f930f0440fd5 2121 *
wamae 0:f930f0440fd5 2122 * Enable PEM encoding / writing.
wamae 0:f930f0440fd5 2123 *
wamae 0:f930f0440fd5 2124 * Module: library/pem.c
wamae 0:f930f0440fd5 2125 * Caller: library/pkwrite.c
wamae 0:f930f0440fd5 2126 * library/x509write_crt.c
wamae 0:f930f0440fd5 2127 * library/x509write_csr.c
wamae 0:f930f0440fd5 2128 *
wamae 0:f930f0440fd5 2129 * Requires: MBEDTLS_BASE64_C
wamae 0:f930f0440fd5 2130 *
wamae 0:f930f0440fd5 2131 * This modules adds support for encoding / writing PEM files.
wamae 0:f930f0440fd5 2132 */
wamae 0:f930f0440fd5 2133 //#define MBEDTLS_PEM_WRITE_C
wamae 0:f930f0440fd5 2134
wamae 0:f930f0440fd5 2135 /**
wamae 0:f930f0440fd5 2136 * \def MBEDTLS_PK_C
wamae 0:f930f0440fd5 2137 *
wamae 0:f930f0440fd5 2138 * Enable the generic public (asymetric) key layer.
wamae 0:f930f0440fd5 2139 *
wamae 0:f930f0440fd5 2140 * Module: library/pk.c
wamae 0:f930f0440fd5 2141 * Caller: library/ssl_tls.c
wamae 0:f930f0440fd5 2142 * library/ssl_cli.c
wamae 0:f930f0440fd5 2143 * library/ssl_srv.c
wamae 0:f930f0440fd5 2144 *
wamae 0:f930f0440fd5 2145 * Requires: MBEDTLS_RSA_C or MBEDTLS_ECP_C
wamae 0:f930f0440fd5 2146 *
wamae 0:f930f0440fd5 2147 * Uncomment to enable generic public key wrappers.
wamae 0:f930f0440fd5 2148 */
wamae 0:f930f0440fd5 2149 //#define MBEDTLS_PK_C
wamae 0:f930f0440fd5 2150
wamae 0:f930f0440fd5 2151 /**
wamae 0:f930f0440fd5 2152 * \def MBEDTLS_PK_PARSE_C
wamae 0:f930f0440fd5 2153 *
wamae 0:f930f0440fd5 2154 * Enable the generic public (asymetric) key parser.
wamae 0:f930f0440fd5 2155 *
wamae 0:f930f0440fd5 2156 * Module: library/pkparse.c
wamae 0:f930f0440fd5 2157 * Caller: library/x509_crt.c
wamae 0:f930f0440fd5 2158 * library/x509_csr.c
wamae 0:f930f0440fd5 2159 *
wamae 0:f930f0440fd5 2160 * Requires: MBEDTLS_PK_C
wamae 0:f930f0440fd5 2161 *
wamae 0:f930f0440fd5 2162 * Uncomment to enable generic public key parse functions.
wamae 0:f930f0440fd5 2163 */
wamae 0:f930f0440fd5 2164 //#define MBEDTLS_PK_PARSE_C
wamae 0:f930f0440fd5 2165
wamae 0:f930f0440fd5 2166 /**
wamae 0:f930f0440fd5 2167 * \def MBEDTLS_PK_WRITE_C
wamae 0:f930f0440fd5 2168 *
wamae 0:f930f0440fd5 2169 * Enable the generic public (asymetric) key writer.
wamae 0:f930f0440fd5 2170 *
wamae 0:f930f0440fd5 2171 * Module: library/pkwrite.c
wamae 0:f930f0440fd5 2172 * Caller: library/x509write.c
wamae 0:f930f0440fd5 2173 *
wamae 0:f930f0440fd5 2174 * Requires: MBEDTLS_PK_C
wamae 0:f930f0440fd5 2175 *
wamae 0:f930f0440fd5 2176 * Uncomment to enable generic public key write functions.
wamae 0:f930f0440fd5 2177 */
wamae 0:f930f0440fd5 2178 //#define MBEDTLS_PK_WRITE_C
wamae 0:f930f0440fd5 2179
wamae 0:f930f0440fd5 2180 /**
wamae 0:f930f0440fd5 2181 * \def MBEDTLS_PKCS5_C
wamae 0:f930f0440fd5 2182 *
wamae 0:f930f0440fd5 2183 * Enable PKCS#5 functions.
wamae 0:f930f0440fd5 2184 *
wamae 0:f930f0440fd5 2185 * Module: library/pkcs5.c
wamae 0:f930f0440fd5 2186 *
wamae 0:f930f0440fd5 2187 * Requires: MBEDTLS_MD_C
wamae 0:f930f0440fd5 2188 *
wamae 0:f930f0440fd5 2189 * This module adds support for the PKCS#5 functions.
wamae 0:f930f0440fd5 2190 */
wamae 0:f930f0440fd5 2191 //#define MBEDTLS_PKCS5_C
wamae 0:f930f0440fd5 2192
wamae 0:f930f0440fd5 2193 /**
wamae 0:f930f0440fd5 2194 * \def MBEDTLS_PKCS11_C
wamae 0:f930f0440fd5 2195 *
wamae 0:f930f0440fd5 2196 * Enable wrapper for PKCS#11 smartcard support.
wamae 0:f930f0440fd5 2197 *
wamae 0:f930f0440fd5 2198 * Module: library/pkcs11.c
wamae 0:f930f0440fd5 2199 * Caller: library/pk.c
wamae 0:f930f0440fd5 2200 *
wamae 0:f930f0440fd5 2201 * Requires: MBEDTLS_PK_C
wamae 0:f930f0440fd5 2202 *
wamae 0:f930f0440fd5 2203 * This module enables SSL/TLS PKCS #11 smartcard support.
wamae 0:f930f0440fd5 2204 * Requires the presence of the PKCS#11 helper library (libpkcs11-helper)
wamae 0:f930f0440fd5 2205 */
wamae 0:f930f0440fd5 2206 //#define MBEDTLS_PKCS11_C
wamae 0:f930f0440fd5 2207
wamae 0:f930f0440fd5 2208 /**
wamae 0:f930f0440fd5 2209 * \def MBEDTLS_PKCS12_C
wamae 0:f930f0440fd5 2210 *
wamae 0:f930f0440fd5 2211 * Enable PKCS#12 PBE functions.
wamae 0:f930f0440fd5 2212 * Adds algorithms for parsing PKCS#8 encrypted private keys
wamae 0:f930f0440fd5 2213 *
wamae 0:f930f0440fd5 2214 * Module: library/pkcs12.c
wamae 0:f930f0440fd5 2215 * Caller: library/pkparse.c
wamae 0:f930f0440fd5 2216 *
wamae 0:f930f0440fd5 2217 * Requires: MBEDTLS_ASN1_PARSE_C, MBEDTLS_CIPHER_C, MBEDTLS_MD_C
wamae 0:f930f0440fd5 2218 * Can use: MBEDTLS_ARC4_C
wamae 0:f930f0440fd5 2219 *
wamae 0:f930f0440fd5 2220 * This module enables PKCS#12 functions.
wamae 0:f930f0440fd5 2221 */
wamae 0:f930f0440fd5 2222 //#define MBEDTLS_PKCS12_C
wamae 0:f930f0440fd5 2223
wamae 0:f930f0440fd5 2224 /**
wamae 0:f930f0440fd5 2225 * \def MBEDTLS_PLATFORM_C
wamae 0:f930f0440fd5 2226 *
wamae 0:f930f0440fd5 2227 * Enable the platform abstraction layer that allows you to re-assign
wamae 0:f930f0440fd5 2228 * functions like calloc(), free(), snprintf(), printf(), fprintf(), exit().
wamae 0:f930f0440fd5 2229 *
wamae 0:f930f0440fd5 2230 * Enabling MBEDTLS_PLATFORM_C enables to use of MBEDTLS_PLATFORM_XXX_ALT
wamae 0:f930f0440fd5 2231 * or MBEDTLS_PLATFORM_XXX_MACRO directives, allowing the functions mentioned
wamae 0:f930f0440fd5 2232 * above to be specified at runtime or compile time respectively.
wamae 0:f930f0440fd5 2233 *
wamae 0:f930f0440fd5 2234 * \note This abstraction layer must be enabled on Windows (including MSYS2)
wamae 0:f930f0440fd5 2235 * as other module rely on it for a fixed snprintf implementation.
wamae 0:f930f0440fd5 2236 *
wamae 0:f930f0440fd5 2237 * Module: library/platform.c
wamae 0:f930f0440fd5 2238 * Caller: Most other .c files
wamae 0:f930f0440fd5 2239 *
wamae 0:f930f0440fd5 2240 * This module enables abstraction of common (libc) functions.
wamae 0:f930f0440fd5 2241 */
wamae 0:f930f0440fd5 2242 //#define MBEDTLS_PLATFORM_C
wamae 0:f930f0440fd5 2243
wamae 0:f930f0440fd5 2244 /**
wamae 0:f930f0440fd5 2245 * \def MBEDTLS_RIPEMD160_C
wamae 0:f930f0440fd5 2246 *
wamae 0:f930f0440fd5 2247 * Enable the RIPEMD-160 hash algorithm.
wamae 0:f930f0440fd5 2248 *
wamae 0:f930f0440fd5 2249 * Module: library/ripemd160.c
wamae 0:f930f0440fd5 2250 * Caller: library/md.c
wamae 0:f930f0440fd5 2251 *
wamae 0:f930f0440fd5 2252 */
wamae 0:f930f0440fd5 2253 //#define MBEDTLS_RIPEMD160_C
wamae 0:f930f0440fd5 2254
wamae 0:f930f0440fd5 2255 /**
wamae 0:f930f0440fd5 2256 * \def MBEDTLS_RSA_C
wamae 0:f930f0440fd5 2257 *
wamae 0:f930f0440fd5 2258 * Enable the RSA public-key cryptosystem.
wamae 0:f930f0440fd5 2259 *
wamae 0:f930f0440fd5 2260 * Module: library/rsa.c
wamae 0:f930f0440fd5 2261 * Caller: library/ssl_cli.c
wamae 0:f930f0440fd5 2262 * library/ssl_srv.c
wamae 0:f930f0440fd5 2263 * library/ssl_tls.c
wamae 0:f930f0440fd5 2264 * library/x509.c
wamae 0:f930f0440fd5 2265 *
wamae 0:f930f0440fd5 2266 * This module is used by the following key exchanges:
wamae 0:f930f0440fd5 2267 * RSA, DHE-RSA, ECDHE-RSA, RSA-PSK
wamae 0:f930f0440fd5 2268 *
wamae 0:f930f0440fd5 2269 * Requires: MBEDTLS_BIGNUM_C, MBEDTLS_OID_C
wamae 0:f930f0440fd5 2270 */
wamae 0:f930f0440fd5 2271 //#define MBEDTLS_RSA_C
wamae 0:f930f0440fd5 2272
wamae 0:f930f0440fd5 2273 /**
wamae 0:f930f0440fd5 2274 * \def MBEDTLS_SHA1_C
wamae 0:f930f0440fd5 2275 *
wamae 0:f930f0440fd5 2276 * Enable the SHA1 cryptographic hash algorithm.
wamae 0:f930f0440fd5 2277 *
wamae 0:f930f0440fd5 2278 * Module: library/sha1.c
wamae 0:f930f0440fd5 2279 * Caller: library/md.c
wamae 0:f930f0440fd5 2280 * library/ssl_cli.c
wamae 0:f930f0440fd5 2281 * library/ssl_srv.c
wamae 0:f930f0440fd5 2282 * library/ssl_tls.c
wamae 0:f930f0440fd5 2283 * library/x509write_crt.c
wamae 0:f930f0440fd5 2284 *
wamae 0:f930f0440fd5 2285 * This module is required for SSL/TLS up to version 1.1, for TLS 1.2
wamae 0:f930f0440fd5 2286 * depending on the handshake parameters, and for SHA1-signed certificates.
wamae 0:f930f0440fd5 2287 */
wamae 0:f930f0440fd5 2288 //#define MBEDTLS_SHA1_C
wamae 0:f930f0440fd5 2289
wamae 0:f930f0440fd5 2290 /**
wamae 0:f930f0440fd5 2291 * \def MBEDTLS_SHA256_C
wamae 0:f930f0440fd5 2292 *
wamae 0:f930f0440fd5 2293 * Enable the SHA-224 and SHA-256 cryptographic hash algorithms.
wamae 0:f930f0440fd5 2294 *
wamae 0:f930f0440fd5 2295 * Module: library/sha256.c
wamae 0:f930f0440fd5 2296 * Caller: library/entropy.c
wamae 0:f930f0440fd5 2297 * library/md.c
wamae 0:f930f0440fd5 2298 * library/ssl_cli.c
wamae 0:f930f0440fd5 2299 * library/ssl_srv.c
wamae 0:f930f0440fd5 2300 * library/ssl_tls.c
wamae 0:f930f0440fd5 2301 *
wamae 0:f930f0440fd5 2302 * This module adds support for SHA-224 and SHA-256.
wamae 0:f930f0440fd5 2303 * This module is required for the SSL/TLS 1.2 PRF function.
wamae 0:f930f0440fd5 2304 */
wamae 0:f930f0440fd5 2305 //#define MBEDTLS_SHA256_C
wamae 0:f930f0440fd5 2306
wamae 0:f930f0440fd5 2307 /**
wamae 0:f930f0440fd5 2308 * \def MBEDTLS_SHA512_C
wamae 0:f930f0440fd5 2309 *
wamae 0:f930f0440fd5 2310 * Enable the SHA-384 and SHA-512 cryptographic hash algorithms.
wamae 0:f930f0440fd5 2311 *
wamae 0:f930f0440fd5 2312 * Module: library/sha512.c
wamae 0:f930f0440fd5 2313 * Caller: library/entropy.c
wamae 0:f930f0440fd5 2314 * library/md.c
wamae 0:f930f0440fd5 2315 * library/ssl_cli.c
wamae 0:f930f0440fd5 2316 * library/ssl_srv.c
wamae 0:f930f0440fd5 2317 *
wamae 0:f930f0440fd5 2318 * This module adds support for SHA-384 and SHA-512.
wamae 0:f930f0440fd5 2319 */
wamae 0:f930f0440fd5 2320 //#define MBEDTLS_SHA512_C
wamae 0:f930f0440fd5 2321
wamae 0:f930f0440fd5 2322 /**
wamae 0:f930f0440fd5 2323 * \def MBEDTLS_SSL_CACHE_C
wamae 0:f930f0440fd5 2324 *
wamae 0:f930f0440fd5 2325 * Enable simple SSL cache implementation.
wamae 0:f930f0440fd5 2326 *
wamae 0:f930f0440fd5 2327 * Module: library/ssl_cache.c
wamae 0:f930f0440fd5 2328 * Caller:
wamae 0:f930f0440fd5 2329 *
wamae 0:f930f0440fd5 2330 * Requires: MBEDTLS_SSL_CACHE_C
wamae 0:f930f0440fd5 2331 */
wamae 0:f930f0440fd5 2332 //#define MBEDTLS_SSL_CACHE_C
wamae 0:f930f0440fd5 2333
wamae 0:f930f0440fd5 2334 /**
wamae 0:f930f0440fd5 2335 * \def MBEDTLS_SSL_COOKIE_C
wamae 0:f930f0440fd5 2336 *
wamae 0:f930f0440fd5 2337 * Enable basic implementation of DTLS cookies for hello verification.
wamae 0:f930f0440fd5 2338 *
wamae 0:f930f0440fd5 2339 * Module: library/ssl_cookie.c
wamae 0:f930f0440fd5 2340 * Caller:
wamae 0:f930f0440fd5 2341 */
wamae 0:f930f0440fd5 2342 //#define MBEDTLS_SSL_COOKIE_C
wamae 0:f930f0440fd5 2343
wamae 0:f930f0440fd5 2344 /**
wamae 0:f930f0440fd5 2345 * \def MBEDTLS_SSL_TICKET_C
wamae 0:f930f0440fd5 2346 *
wamae 0:f930f0440fd5 2347 * Enable an implementation of TLS server-side callbacks for session tickets.
wamae 0:f930f0440fd5 2348 *
wamae 0:f930f0440fd5 2349 * Module: library/ssl_ticket.c
wamae 0:f930f0440fd5 2350 * Caller:
wamae 0:f930f0440fd5 2351 *
wamae 0:f930f0440fd5 2352 * Requires: MBEDTLS_CIPHER_C
wamae 0:f930f0440fd5 2353 */
wamae 0:f930f0440fd5 2354 //#define MBEDTLS_SSL_TICKET_C
wamae 0:f930f0440fd5 2355
wamae 0:f930f0440fd5 2356 /**
wamae 0:f930f0440fd5 2357 * \def MBEDTLS_SSL_CLI_C
wamae 0:f930f0440fd5 2358 *
wamae 0:f930f0440fd5 2359 * Enable the SSL/TLS client code.
wamae 0:f930f0440fd5 2360 *
wamae 0:f930f0440fd5 2361 * Module: library/ssl_cli.c
wamae 0:f930f0440fd5 2362 * Caller:
wamae 0:f930f0440fd5 2363 *
wamae 0:f930f0440fd5 2364 * Requires: MBEDTLS_SSL_TLS_C
wamae 0:f930f0440fd5 2365 *
wamae 0:f930f0440fd5 2366 * This module is required for SSL/TLS client support.
wamae 0:f930f0440fd5 2367 */
wamae 0:f930f0440fd5 2368 //#define MBEDTLS_SSL_CLI_C
wamae 0:f930f0440fd5 2369
wamae 0:f930f0440fd5 2370 /**
wamae 0:f930f0440fd5 2371 * \def MBEDTLS_SSL_SRV_C
wamae 0:f930f0440fd5 2372 *
wamae 0:f930f0440fd5 2373 * Enable the SSL/TLS server code.
wamae 0:f930f0440fd5 2374 *
wamae 0:f930f0440fd5 2375 * Module: library/ssl_srv.c
wamae 0:f930f0440fd5 2376 * Caller:
wamae 0:f930f0440fd5 2377 *
wamae 0:f930f0440fd5 2378 * Requires: MBEDTLS_SSL_TLS_C
wamae 0:f930f0440fd5 2379 *
wamae 0:f930f0440fd5 2380 * This module is required for SSL/TLS server support.
wamae 0:f930f0440fd5 2381 */
wamae 0:f930f0440fd5 2382 //#define MBEDTLS_SSL_SRV_C
wamae 0:f930f0440fd5 2383
wamae 0:f930f0440fd5 2384 /**
wamae 0:f930f0440fd5 2385 * \def MBEDTLS_SSL_TLS_C
wamae 0:f930f0440fd5 2386 *
wamae 0:f930f0440fd5 2387 * Enable the generic SSL/TLS code.
wamae 0:f930f0440fd5 2388 *
wamae 0:f930f0440fd5 2389 * Module: library/ssl_tls.c
wamae 0:f930f0440fd5 2390 * Caller: library/ssl_cli.c
wamae 0:f930f0440fd5 2391 * library/ssl_srv.c
wamae 0:f930f0440fd5 2392 *
wamae 0:f930f0440fd5 2393 * Requires: MBEDTLS_CIPHER_C, MBEDTLS_MD_C
wamae 0:f930f0440fd5 2394 * and at least one of the MBEDTLS_SSL_PROTO_XXX defines
wamae 0:f930f0440fd5 2395 *
wamae 0:f930f0440fd5 2396 * This module is required for SSL/TLS.
wamae 0:f930f0440fd5 2397 */
wamae 0:f930f0440fd5 2398 //#define MBEDTLS_SSL_TLS_C
wamae 0:f930f0440fd5 2399
wamae 0:f930f0440fd5 2400 /**
wamae 0:f930f0440fd5 2401 * \def MBEDTLS_THREADING_C
wamae 0:f930f0440fd5 2402 *
wamae 0:f930f0440fd5 2403 * Enable the threading abstraction layer.
wamae 0:f930f0440fd5 2404 * By default mbed TLS assumes it is used in a non-threaded environment or that
wamae 0:f930f0440fd5 2405 * contexts are not shared between threads. If you do intend to use contexts
wamae 0:f930f0440fd5 2406 * between threads, you will need to enable this layer to prevent race
wamae 0:f930f0440fd5 2407 * conditions. See also our Knowledge Base article about threading:
wamae 0:f930f0440fd5 2408 * https://tls.mbed.org/kb/development/thread-safety-and-multi-threading
wamae 0:f930f0440fd5 2409 *
wamae 0:f930f0440fd5 2410 * Module: library/threading.c
wamae 0:f930f0440fd5 2411 *
wamae 0:f930f0440fd5 2412 * This allows different threading implementations (self-implemented or
wamae 0:f930f0440fd5 2413 * provided).
wamae 0:f930f0440fd5 2414 *
wamae 0:f930f0440fd5 2415 * You will have to enable either MBEDTLS_THREADING_ALT or
wamae 0:f930f0440fd5 2416 * MBEDTLS_THREADING_PTHREAD.
wamae 0:f930f0440fd5 2417 *
wamae 0:f930f0440fd5 2418 * Enable this layer to allow use of mutexes within mbed TLS
wamae 0:f930f0440fd5 2419 */
wamae 0:f930f0440fd5 2420 //#define MBEDTLS_THREADING_C
wamae 0:f930f0440fd5 2421
wamae 0:f930f0440fd5 2422 /**
wamae 0:f930f0440fd5 2423 * \def MBEDTLS_TIMING_C
wamae 0:f930f0440fd5 2424 *
wamae 0:f930f0440fd5 2425 * Enable the semi-portable timing interface.
wamae 0:f930f0440fd5 2426 *
wamae 0:f930f0440fd5 2427 * \note The provided implementation only works on POSIX/Unix (including Linux,
wamae 0:f930f0440fd5 2428 * BSD and OS X) and Windows. On other platforms, you can either disable that
wamae 0:f930f0440fd5 2429 * module and provide your own implementations of the callbacks needed by
wamae 0:f930f0440fd5 2430 * \c mbedtls_ssl_set_timer_cb() for DTLS, or leave it enabled and provide
wamae 0:f930f0440fd5 2431 * your own implementation of the whole module by setting
wamae 0:f930f0440fd5 2432 * \c MBEDTLS_TIMING_ALT in the current file.
wamae 0:f930f0440fd5 2433 *
wamae 0:f930f0440fd5 2434 * \note See also our Knowledge Base article about porting to a new
wamae 0:f930f0440fd5 2435 * environment:
wamae 0:f930f0440fd5 2436 * https://tls.mbed.org/kb/how-to/how-do-i-port-mbed-tls-to-a-new-environment-OS
wamae 0:f930f0440fd5 2437 *
wamae 0:f930f0440fd5 2438 * Module: library/timing.c
wamae 0:f930f0440fd5 2439 * Caller: library/havege.c
wamae 0:f930f0440fd5 2440 *
wamae 0:f930f0440fd5 2441 * This module is used by the HAVEGE random number generator.
wamae 0:f930f0440fd5 2442 */
wamae 0:f930f0440fd5 2443 //#define MBEDTLS_TIMING_C
wamae 0:f930f0440fd5 2444
wamae 0:f930f0440fd5 2445 /**
wamae 0:f930f0440fd5 2446 * \def MBEDTLS_VERSION_C
wamae 0:f930f0440fd5 2447 *
wamae 0:f930f0440fd5 2448 * Enable run-time version information.
wamae 0:f930f0440fd5 2449 *
wamae 0:f930f0440fd5 2450 * Module: library/version.c
wamae 0:f930f0440fd5 2451 *
wamae 0:f930f0440fd5 2452 * This module provides run-time version information.
wamae 0:f930f0440fd5 2453 */
wamae 0:f930f0440fd5 2454 //#define MBEDTLS_VERSION_C
wamae 0:f930f0440fd5 2455
wamae 0:f930f0440fd5 2456 /**
wamae 0:f930f0440fd5 2457 * \def MBEDTLS_X509_USE_C
wamae 0:f930f0440fd5 2458 *
wamae 0:f930f0440fd5 2459 * Enable X.509 core for using certificates.
wamae 0:f930f0440fd5 2460 *
wamae 0:f930f0440fd5 2461 * Module: library/x509.c
wamae 0:f930f0440fd5 2462 * Caller: library/x509_crl.c
wamae 0:f930f0440fd5 2463 * library/x509_crt.c
wamae 0:f930f0440fd5 2464 * library/x509_csr.c
wamae 0:f930f0440fd5 2465 *
wamae 0:f930f0440fd5 2466 * Requires: MBEDTLS_ASN1_PARSE_C, MBEDTLS_BIGNUM_C, MBEDTLS_OID_C,
wamae 0:f930f0440fd5 2467 * MBEDTLS_PK_PARSE_C
wamae 0:f930f0440fd5 2468 *
wamae 0:f930f0440fd5 2469 * This module is required for the X.509 parsing modules.
wamae 0:f930f0440fd5 2470 */
wamae 0:f930f0440fd5 2471 //#define MBEDTLS_X509_USE_C
wamae 0:f930f0440fd5 2472
wamae 0:f930f0440fd5 2473 /**
wamae 0:f930f0440fd5 2474 * \def MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 2475 *
wamae 0:f930f0440fd5 2476 * Enable X.509 certificate parsing.
wamae 0:f930f0440fd5 2477 *
wamae 0:f930f0440fd5 2478 * Module: library/x509_crt.c
wamae 0:f930f0440fd5 2479 * Caller: library/ssl_cli.c
wamae 0:f930f0440fd5 2480 * library/ssl_srv.c
wamae 0:f930f0440fd5 2481 * library/ssl_tls.c
wamae 0:f930f0440fd5 2482 *
wamae 0:f930f0440fd5 2483 * Requires: MBEDTLS_X509_USE_C
wamae 0:f930f0440fd5 2484 *
wamae 0:f930f0440fd5 2485 * This module is required for X.509 certificate parsing.
wamae 0:f930f0440fd5 2486 */
wamae 0:f930f0440fd5 2487 //#define MBEDTLS_X509_CRT_PARSE_C
wamae 0:f930f0440fd5 2488
wamae 0:f930f0440fd5 2489 /**
wamae 0:f930f0440fd5 2490 * \def MBEDTLS_X509_CRL_PARSE_C
wamae 0:f930f0440fd5 2491 *
wamae 0:f930f0440fd5 2492 * Enable X.509 CRL parsing.
wamae 0:f930f0440fd5 2493 *
wamae 0:f930f0440fd5 2494 * Module: library/x509_crl.c
wamae 0:f930f0440fd5 2495 * Caller: library/x509_crt.c
wamae 0:f930f0440fd5 2496 *
wamae 0:f930f0440fd5 2497 * Requires: MBEDTLS_X509_USE_C
wamae 0:f930f0440fd5 2498 *
wamae 0:f930f0440fd5 2499 * This module is required for X.509 CRL parsing.
wamae 0:f930f0440fd5 2500 */
wamae 0:f930f0440fd5 2501 //#define MBEDTLS_X509_CRL_PARSE_C
wamae 0:f930f0440fd5 2502
wamae 0:f930f0440fd5 2503 /**
wamae 0:f930f0440fd5 2504 * \def MBEDTLS_X509_CSR_PARSE_C
wamae 0:f930f0440fd5 2505 *
wamae 0:f930f0440fd5 2506 * Enable X.509 Certificate Signing Request (CSR) parsing.
wamae 0:f930f0440fd5 2507 *
wamae 0:f930f0440fd5 2508 * Module: library/x509_csr.c
wamae 0:f930f0440fd5 2509 * Caller: library/x509_crt_write.c
wamae 0:f930f0440fd5 2510 *
wamae 0:f930f0440fd5 2511 * Requires: MBEDTLS_X509_USE_C
wamae 0:f930f0440fd5 2512 *
wamae 0:f930f0440fd5 2513 * This module is used for reading X.509 certificate request.
wamae 0:f930f0440fd5 2514 */
wamae 0:f930f0440fd5 2515 //#define MBEDTLS_X509_CSR_PARSE_C
wamae 0:f930f0440fd5 2516
wamae 0:f930f0440fd5 2517 /**
wamae 0:f930f0440fd5 2518 * \def MBEDTLS_X509_CREATE_C
wamae 0:f930f0440fd5 2519 *
wamae 0:f930f0440fd5 2520 * Enable X.509 core for creating certificates.
wamae 0:f930f0440fd5 2521 *
wamae 0:f930f0440fd5 2522 * Module: library/x509_create.c
wamae 0:f930f0440fd5 2523 *
wamae 0:f930f0440fd5 2524 * Requires: MBEDTLS_BIGNUM_C, MBEDTLS_OID_C, MBEDTLS_PK_WRITE_C
wamae 0:f930f0440fd5 2525 *
wamae 0:f930f0440fd5 2526 * This module is the basis for creating X.509 certificates and CSRs.
wamae 0:f930f0440fd5 2527 */
wamae 0:f930f0440fd5 2528 //#define MBEDTLS_X509_CREATE_C
wamae 0:f930f0440fd5 2529
wamae 0:f930f0440fd5 2530 /**
wamae 0:f930f0440fd5 2531 * \def MBEDTLS_X509_CRT_WRITE_C
wamae 0:f930f0440fd5 2532 *
wamae 0:f930f0440fd5 2533 * Enable creating X.509 certificates.
wamae 0:f930f0440fd5 2534 *
wamae 0:f930f0440fd5 2535 * Module: library/x509_crt_write.c
wamae 0:f930f0440fd5 2536 *
wamae 0:f930f0440fd5 2537 * Requires: MBEDTLS_X509_CREATE_C
wamae 0:f930f0440fd5 2538 *
wamae 0:f930f0440fd5 2539 * This module is required for X.509 certificate creation.
wamae 0:f930f0440fd5 2540 */
wamae 0:f930f0440fd5 2541 //#define MBEDTLS_X509_CRT_WRITE_C
wamae 0:f930f0440fd5 2542
wamae 0:f930f0440fd5 2543 /**
wamae 0:f930f0440fd5 2544 * \def MBEDTLS_X509_CSR_WRITE_C
wamae 0:f930f0440fd5 2545 *
wamae 0:f930f0440fd5 2546 * Enable creating X.509 Certificate Signing Requests (CSR).
wamae 0:f930f0440fd5 2547 *
wamae 0:f930f0440fd5 2548 * Module: library/x509_csr_write.c
wamae 0:f930f0440fd5 2549 *
wamae 0:f930f0440fd5 2550 * Requires: MBEDTLS_X509_CREATE_C
wamae 0:f930f0440fd5 2551 *
wamae 0:f930f0440fd5 2552 * This module is required for X.509 certificate request writing.
wamae 0:f930f0440fd5 2553 */
wamae 0:f930f0440fd5 2554 //#define MBEDTLS_X509_CSR_WRITE_C
wamae 0:f930f0440fd5 2555
wamae 0:f930f0440fd5 2556 /**
wamae 0:f930f0440fd5 2557 * \def MBEDTLS_XTEA_C
wamae 0:f930f0440fd5 2558 *
wamae 0:f930f0440fd5 2559 * Enable the XTEA block cipher.
wamae 0:f930f0440fd5 2560 *
wamae 0:f930f0440fd5 2561 * Module: library/xtea.c
wamae 0:f930f0440fd5 2562 * Caller:
wamae 0:f930f0440fd5 2563 */
wamae 0:f930f0440fd5 2564 //#define MBEDTLS_XTEA_C
wamae 0:f930f0440fd5 2565
wamae 0:f930f0440fd5 2566 /* \} name SECTION: mbed TLS modules */
wamae 0:f930f0440fd5 2567
wamae 0:f930f0440fd5 2568 /**
wamae 0:f930f0440fd5 2569 * \name SECTION: Module configuration options
wamae 0:f930f0440fd5 2570 *
wamae 0:f930f0440fd5 2571 * This section allows for the setting of module specific sizes and
wamae 0:f930f0440fd5 2572 * configuration options. The default values are already present in the
wamae 0:f930f0440fd5 2573 * relevant header files and should suffice for the regular use cases.
wamae 0:f930f0440fd5 2574 *
wamae 0:f930f0440fd5 2575 * Our advice is to enable options and change their values here
wamae 0:f930f0440fd5 2576 * only if you have a good reason and know the consequences.
wamae 0:f930f0440fd5 2577 *
wamae 0:f930f0440fd5 2578 * Please check the respective header file for documentation on these
wamae 0:f930f0440fd5 2579 * parameters (to prevent duplicate documentation).
wamae 0:f930f0440fd5 2580 * \{
wamae 0:f930f0440fd5 2581 */
wamae 0:f930f0440fd5 2582
wamae 0:f930f0440fd5 2583 /* MPI / BIGNUM options */
wamae 0:f930f0440fd5 2584 //#define MBEDTLS_MPI_WINDOW_SIZE 6 /**< Maximum windows size used. */
wamae 0:f930f0440fd5 2585 //#define MBEDTLS_MPI_MAX_SIZE 1024 /**< Maximum number of bytes for usable MPIs. */
wamae 0:f930f0440fd5 2586
wamae 0:f930f0440fd5 2587 /* CTR_DRBG options */
wamae 0:f930f0440fd5 2588 //#define MBEDTLS_CTR_DRBG_ENTROPY_LEN 48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */
wamae 0:f930f0440fd5 2589 //#define MBEDTLS_CTR_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */
wamae 0:f930f0440fd5 2590 //#define MBEDTLS_CTR_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
wamae 0:f930f0440fd5 2591 //#define MBEDTLS_CTR_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
wamae 0:f930f0440fd5 2592 //#define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
wamae 0:f930f0440fd5 2593
wamae 0:f930f0440fd5 2594 /* HMAC_DRBG options */
wamae 0:f930f0440fd5 2595 //#define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */
wamae 0:f930f0440fd5 2596 //#define MBEDTLS_HMAC_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
wamae 0:f930f0440fd5 2597 //#define MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
wamae 0:f930f0440fd5 2598 //#define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
wamae 0:f930f0440fd5 2599
wamae 0:f930f0440fd5 2600 /* ECP options */
wamae 0:f930f0440fd5 2601 //#define MBEDTLS_ECP_MAX_BITS 521 /**< Maximum bit size of groups */
wamae 0:f930f0440fd5 2602 //#define MBEDTLS_ECP_WINDOW_SIZE 6 /**< Maximum window size used */
wamae 0:f930f0440fd5 2603 //#define MBEDTLS_ECP_FIXED_POINT_OPTIM 1 /**< Enable fixed-point speed-up */
wamae 0:f930f0440fd5 2604
wamae 0:f930f0440fd5 2605 /* Entropy options */
wamae 0:f930f0440fd5 2606 //#define MBEDTLS_ENTROPY_MAX_SOURCES 20 /**< Maximum number of sources supported */
wamae 0:f930f0440fd5 2607 //#define MBEDTLS_ENTROPY_MAX_GATHER 128 /**< Maximum amount requested from entropy sources */
wamae 0:f930f0440fd5 2608 //#define MBEDTLS_ENTROPY_MIN_HARDWARE 32 /**< Default minimum number of bytes required for the hardware entropy source mbedtls_hardware_poll() before entropy is released */
wamae 0:f930f0440fd5 2609
wamae 0:f930f0440fd5 2610 /* Memory buffer allocator options */
wamae 0:f930f0440fd5 2611 //#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 4 /**< Align on multiples of this value */
wamae 0:f930f0440fd5 2612
wamae 0:f930f0440fd5 2613 /* Platform options */
wamae 0:f930f0440fd5 2614 //#define MBEDTLS_PLATFORM_STD_MEM_HDR <stdlib.h> /**< Header to include if MBEDTLS_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */
wamae 0:f930f0440fd5 2615 //#define MBEDTLS_PLATFORM_STD_CALLOC calloc /**< Default allocator to use, can be undefined */
wamae 0:f930f0440fd5 2616 //#define MBEDTLS_PLATFORM_STD_FREE free /**< Default free to use, can be undefined */
wamae 0:f930f0440fd5 2617 //#define MBEDTLS_PLATFORM_STD_EXIT exit /**< Default exit to use, can be undefined */
wamae 0:f930f0440fd5 2618 //#define MBEDTLS_PLATFORM_STD_TIME time /**< Default time to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
wamae 0:f930f0440fd5 2619 //#define MBEDTLS_PLATFORM_STD_FPRINTF fprintf /**< Default fprintf to use, can be undefined */
wamae 0:f930f0440fd5 2620 //#define MBEDTLS_PLATFORM_STD_PRINTF printf /**< Default printf to use, can be undefined */
wamae 0:f930f0440fd5 2621 /* Note: your snprintf must correclty zero-terminate the buffer! */
wamae 0:f930f0440fd5 2622 //#define MBEDTLS_PLATFORM_STD_SNPRINTF snprintf /**< Default snprintf to use, can be undefined */
wamae 0:f930f0440fd5 2623 //#define MBEDTLS_PLATFORM_STD_EXIT_SUCCESS 0 /**< Default exit value to use, can be undefined */
wamae 0:f930f0440fd5 2624 //#define MBEDTLS_PLATFORM_STD_EXIT_FAILURE 1 /**< Default exit value to use, can be undefined */
wamae 0:f930f0440fd5 2625 //#define MBEDTLS_PLATFORM_STD_NV_SEED_READ mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
wamae 0:f930f0440fd5 2626 //#define MBEDTLS_PLATFORM_STD_NV_SEED_WRITE mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
wamae 0:f930f0440fd5 2627 //#define MBEDTLS_PLATFORM_STD_NV_SEED_FILE "seedfile" /**< Seed file to read/write with default implementation */
wamae 0:f930f0440fd5 2628
wamae 0:f930f0440fd5 2629 /* To Use Function Macros MBEDTLS_PLATFORM_C must be enabled */
wamae 0:f930f0440fd5 2630 /* MBEDTLS_PLATFORM_XXX_MACRO and MBEDTLS_PLATFORM_XXX_ALT cannot both be defined */
wamae 0:f930f0440fd5 2631 //#define MBEDTLS_PLATFORM_CALLOC_MACRO calloc /**< Default allocator macro to use, can be undefined */
wamae 0:f930f0440fd5 2632 //#define MBEDTLS_PLATFORM_FREE_MACRO free /**< Default free macro to use, can be undefined */
wamae 0:f930f0440fd5 2633 //#define MBEDTLS_PLATFORM_EXIT_MACRO exit /**< Default exit macro to use, can be undefined */
wamae 0:f930f0440fd5 2634 //#define MBEDTLS_PLATFORM_TIME_MACRO time /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
wamae 0:f930f0440fd5 2635 //#define MBEDTLS_PLATFORM_TIME_TYPE_MACRO time_t /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
wamae 0:f930f0440fd5 2636 //#define MBEDTLS_PLATFORM_FPRINTF_MACRO fprintf /**< Default fprintf macro to use, can be undefined */
wamae 0:f930f0440fd5 2637 //#define MBEDTLS_PLATFORM_PRINTF_MACRO printf /**< Default printf macro to use, can be undefined */
wamae 0:f930f0440fd5 2638 /* Note: your snprintf must correclty zero-terminate the buffer! */
wamae 0:f930f0440fd5 2639 //#define MBEDTLS_PLATFORM_SNPRINTF_MACRO snprintf /**< Default snprintf macro to use, can be undefined */
wamae 0:f930f0440fd5 2640 //#define MBEDTLS_PLATFORM_NV_SEED_READ_MACRO mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
wamae 0:f930f0440fd5 2641 //#define MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
wamae 0:f930f0440fd5 2642
wamae 0:f930f0440fd5 2643 /* SSL Cache options */
wamae 0:f930f0440fd5 2644 //#define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT 86400 /**< 1 day */
wamae 0:f930f0440fd5 2645 //#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */
wamae 0:f930f0440fd5 2646
wamae 0:f930f0440fd5 2647 /* SSL options */
wamae 0:f930f0440fd5 2648 //#define MBEDTLS_SSL_MAX_CONTENT_LEN 16384 /**< Maxium fragment length in bytes, determines the size of each of the two internal I/O buffers */
wamae 0:f930f0440fd5 2649 //#define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */
wamae 0:f930f0440fd5 2650 //#define MBEDTLS_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */
wamae 0:f930f0440fd5 2651 //#define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */
wamae 0:f930f0440fd5 2652
wamae 0:f930f0440fd5 2653 /**
wamae 0:f930f0440fd5 2654 * Complete list of ciphersuites to use, in order of preference.
wamae 0:f930f0440fd5 2655 *
wamae 0:f930f0440fd5 2656 * \warning No dependency checking is done on that field! This option can only
wamae 0:f930f0440fd5 2657 * be used to restrict the set of available ciphersuites. It is your
wamae 0:f930f0440fd5 2658 * responsibility to make sure the needed modules are active.
wamae 0:f930f0440fd5 2659 *
wamae 0:f930f0440fd5 2660 * Use this to save a few hundred bytes of ROM (default ordering of all
wamae 0:f930f0440fd5 2661 * available ciphersuites) and a few to a few hundred bytes of RAM.
wamae 0:f930f0440fd5 2662 *
wamae 0:f930f0440fd5 2663 * The value below is only an example, not the default.
wamae 0:f930f0440fd5 2664 */
wamae 0:f930f0440fd5 2665 //#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:f930f0440fd5 2666
wamae 0:f930f0440fd5 2667 /* X509 options */
wamae 0:f930f0440fd5 2668 //#define MBEDTLS_X509_MAX_INTERMEDIATE_CA 8 /**< Maximum number of intermediate CAs in a verification chain. */
wamae 0:f930f0440fd5 2669 //#define MBEDTLS_X509_MAX_FILE_PATH_LEN 512 /**< Maximum length of a path/filename string in bytes including the null terminator character ('\0'). */
wamae 0:f930f0440fd5 2670
wamae 0:f930f0440fd5 2671 /**
wamae 0:f930f0440fd5 2672 * Allow SHA-1 in the default TLS configuration for certificate signing.
wamae 0:f930f0440fd5 2673 * Without this build-time option, SHA-1 support must be activated explicitly
wamae 0:f930f0440fd5 2674 * through mbedtls_ssl_conf_cert_profile. Turning on this option is not
wamae 0:f930f0440fd5 2675 * recommended because of it is possible to generte SHA-1 collisions, however
wamae 0:f930f0440fd5 2676 * this may be safe for legacy infrastructure where additional controls apply.
wamae 0:f930f0440fd5 2677 */
wamae 0:f930f0440fd5 2678 // #define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
wamae 0:f930f0440fd5 2679
wamae 0:f930f0440fd5 2680 /**
wamae 0:f930f0440fd5 2681 * Allow SHA-1 in the default TLS configuration for TLS 1.2 handshake
wamae 0:f930f0440fd5 2682 * signature and ciphersuite selection. Without this build-time option, SHA-1
wamae 0:f930f0440fd5 2683 * support must be activated explicitly through mbedtls_ssl_conf_sig_hashes.
wamae 0:f930f0440fd5 2684 * The use of SHA-1 in TLS <= 1.1 and in HMAC-SHA-1 is always allowed by
wamae 0:f930f0440fd5 2685 * default. At the time of writing, there is no practical attack on the use
wamae 0:f930f0440fd5 2686 * of SHA-1 in handshake signatures, hence this option is turned on by default
wamae 0:f930f0440fd5 2687 * for compatibility with existing peers.
wamae 0:f930f0440fd5 2688 */
wamae 0:f930f0440fd5 2689 //#define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE
wamae 0:f930f0440fd5 2690
wamae 0:f930f0440fd5 2691
wamae 0:f930f0440fd5 2692 #include "check_config.h"
wamae 0:f930f0440fd5 2693
wamae 0:f930f0440fd5 2694 #endif /* MBEDTLS_LORA_CONFIG_H */