stephen mathenge / Mbed OS final-water-level_2

How to measure water in a reservoir

Dependencies:   Cayenne-MQTT-mbed Cayenne-LPP

inc/mbedtls_lora_config.h@0:7bfeb237e600, 2019-03-08 (annotated)

Committer:
wamae
Date:
Fri Mar 08 11:34:56 2019 +0000
Revision:
0:7bfeb237e600
working code

Who changed what in which revision?

UserRevisionLine numberNew contents of line
wamae 0:7bfeb237e600 1 /**
wamae 0:7bfeb237e600 2 * \file config.h
wamae 0:7bfeb237e600 3 *
wamae 0:7bfeb237e600 4 * \brief Configuration options (set of defines)
wamae 0:7bfeb237e600 5 *
wamae 0:7bfeb237e600 6 * This set of compile-time options may be used to enable
wamae 0:7bfeb237e600 7 * or disable features selectively, and reduce the global
wamae 0:7bfeb237e600 8 * memory footprint.
wamae 0:7bfeb237e600 9 *
wamae 0:7bfeb237e600 10 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
wamae 0:7bfeb237e600 11 * SPDX-License-Identifier: Apache-2.0
wamae 0:7bfeb237e600 12 *
wamae 0:7bfeb237e600 13 * Licensed under the Apache License, Version 2.0 (the "License"); you may
wamae 0:7bfeb237e600 14 * not use this file except in compliance with the License.
wamae 0:7bfeb237e600 15 * You may obtain a copy of the License at
wamae 0:7bfeb237e600 16 *
wamae 0:7bfeb237e600 17 * http://www.apache.org/licenses/LICENSE-2.0
wamae 0:7bfeb237e600 18 *
wamae 0:7bfeb237e600 19 * Unless required by applicable law or agreed to in writing, software
wamae 0:7bfeb237e600 20 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
wamae 0:7bfeb237e600 21 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
wamae 0:7bfeb237e600 22 * See the License for the specific language governing permissions and
wamae 0:7bfeb237e600 23 * limitations under the License.
wamae 0:7bfeb237e600 24 *
wamae 0:7bfeb237e600 25 * This file is part of mbed TLS (https://tls.mbed.org)
wamae 0:7bfeb237e600 26 */
wamae 0:7bfeb237e600 27
wamae 0:7bfeb237e600 28 #ifndef MBEDTLS_LORA_CONFIG_H
wamae 0:7bfeb237e600 29 #define MBEDTLS_LORA_CONFIG_H
wamae 0:7bfeb237e600 30
wamae 0:7bfeb237e600 31 /**
wamae 0:7bfeb237e600 32 * \name SECTION: System support
wamae 0:7bfeb237e600 33 *
wamae 0:7bfeb237e600 34 * This section sets system specific settings.
wamae 0:7bfeb237e600 35 * \{
wamae 0:7bfeb237e600 36 */
wamae 0:7bfeb237e600 37
wamae 0:7bfeb237e600 38 /**
wamae 0:7bfeb237e600 39 * \def MBEDTLS_HAVE_ASM
wamae 0:7bfeb237e600 40 *
wamae 0:7bfeb237e600 41 * The compiler has support for asm().
wamae 0:7bfeb237e600 42 *
wamae 0:7bfeb237e600 43 * Requires support for asm() in compiler.
wamae 0:7bfeb237e600 44 *
wamae 0:7bfeb237e600 45 * Used in:
wamae 0:7bfeb237e600 46 * library/timing.c
wamae 0:7bfeb237e600 47 * library/padlock.c
wamae 0:7bfeb237e600 48 * include/mbedtls/bn_mul.h
wamae 0:7bfeb237e600 49 *
wamae 0:7bfeb237e600 50 * Comment to disable the use of assembly code.
wamae 0:7bfeb237e600 51 */
wamae 0:7bfeb237e600 52 #define MBEDTLS_HAVE_ASM
wamae 0:7bfeb237e600 53
wamae 0:7bfeb237e600 54 /**
wamae 0:7bfeb237e600 55 * \def MBEDTLS_NO_UDBL_DIVISION
wamae 0:7bfeb237e600 56 *
wamae 0:7bfeb237e600 57 * The platform lacks support for double-width integer division (64-bit
wamae 0:7bfeb237e600 58 * division on a 32-bit platform, 128-bit division on a 64-bit platform).
wamae 0:7bfeb237e600 59 *
wamae 0:7bfeb237e600 60 * Used in:
wamae 0:7bfeb237e600 61 * include/mbedtls/bignum.h
wamae 0:7bfeb237e600 62 * library/bignum.c
wamae 0:7bfeb237e600 63 *
wamae 0:7bfeb237e600 64 * The bignum code uses double-width division to speed up some operations.
wamae 0:7bfeb237e600 65 * Double-width division is often implemented in software that needs to
wamae 0:7bfeb237e600 66 * be linked with the program. The presence of a double-width integer
wamae 0:7bfeb237e600 67 * type is usually detected automatically through preprocessor macros,
wamae 0:7bfeb237e600 68 * but the automatic detection cannot know whether the code needs to
wamae 0:7bfeb237e600 69 * and can be linked with an implementation of division for that type.
wamae 0:7bfeb237e600 70 * By default division is assumed to be usable if the type is present.
wamae 0:7bfeb237e600 71 * Uncomment this option to prevent the use of double-width division.
wamae 0:7bfeb237e600 72 *
wamae 0:7bfeb237e600 73 * Note that division for the native integer type is always required.
wamae 0:7bfeb237e600 74 * Furthermore, a 64-bit type is always required even on a 32-bit
wamae 0:7bfeb237e600 75 * platform, but it need not support multiplication or division. In some
wamae 0:7bfeb237e600 76 * cases it is also desirable to disable some double-width operations. For
wamae 0:7bfeb237e600 77 * example, if double-width division is implemented in software, disabling
wamae 0:7bfeb237e600 78 * it can reduce code size in some embedded targets.
wamae 0:7bfeb237e600 79 */
wamae 0:7bfeb237e600 80 //#define MBEDTLS_NO_UDBL_DIVISION
wamae 0:7bfeb237e600 81
wamae 0:7bfeb237e600 82 /**
wamae 0:7bfeb237e600 83 * \def MBEDTLS_HAVE_SSE2
wamae 0:7bfeb237e600 84 *
wamae 0:7bfeb237e600 85 * CPU supports SSE2 instruction set.
wamae 0:7bfeb237e600 86 *
wamae 0:7bfeb237e600 87 * Uncomment if the CPU supports SSE2 (IA-32 specific).
wamae 0:7bfeb237e600 88 */
wamae 0:7bfeb237e600 89 //#define MBEDTLS_HAVE_SSE2
wamae 0:7bfeb237e600 90
wamae 0:7bfeb237e600 91 /**
wamae 0:7bfeb237e600 92 * \def MBEDTLS_HAVE_TIME
wamae 0:7bfeb237e600 93 *
wamae 0:7bfeb237e600 94 * System has time.h and time().
wamae 0:7bfeb237e600 95 * The time does not need to be correct, only time differences are used,
wamae 0:7bfeb237e600 96 * by contrast with MBEDTLS_HAVE_TIME_DATE
wamae 0:7bfeb237e600 97 *
wamae 0:7bfeb237e600 98 * Defining MBEDTLS_HAVE_TIME allows you to specify MBEDTLS_PLATFORM_TIME_ALT,
wamae 0:7bfeb237e600 99 * MBEDTLS_PLATFORM_TIME_MACRO, MBEDTLS_PLATFORM_TIME_TYPE_MACRO and
wamae 0:7bfeb237e600 100 * MBEDTLS_PLATFORM_STD_TIME.
wamae 0:7bfeb237e600 101 *
wamae 0:7bfeb237e600 102 * Comment if your system does not support time functions
wamae 0:7bfeb237e600 103 */
wamae 0:7bfeb237e600 104 //#define MBEDTLS_HAVE_TIME
wamae 0:7bfeb237e600 105
wamae 0:7bfeb237e600 106 /**
wamae 0:7bfeb237e600 107 * \def MBEDTLS_HAVE_TIME_DATE
wamae 0:7bfeb237e600 108 *
wamae 0:7bfeb237e600 109 * System has time.h and time(), gmtime() and the clock is correct.
wamae 0:7bfeb237e600 110 * The time needs to be correct (not necesarily very accurate, but at least
wamae 0:7bfeb237e600 111 * the date should be correct). This is used to verify the validity period of
wamae 0:7bfeb237e600 112 * X.509 certificates.
wamae 0:7bfeb237e600 113 *
wamae 0:7bfeb237e600 114 * Comment if your system does not have a correct clock.
wamae 0:7bfeb237e600 115 */
wamae 0:7bfeb237e600 116 //#define MBEDTLS_HAVE_TIME_DATE
wamae 0:7bfeb237e600 117
wamae 0:7bfeb237e600 118 /**
wamae 0:7bfeb237e600 119 * \def MBEDTLS_PLATFORM_MEMORY
wamae 0:7bfeb237e600 120 *
wamae 0:7bfeb237e600 121 * Enable the memory allocation layer.
wamae 0:7bfeb237e600 122 *
wamae 0:7bfeb237e600 123 * By default mbed TLS uses the system-provided calloc() and free().
wamae 0:7bfeb237e600 124 * This allows different allocators (self-implemented or provided) to be
wamae 0:7bfeb237e600 125 * provided to the platform abstraction layer.
wamae 0:7bfeb237e600 126 *
wamae 0:7bfeb237e600 127 * Enabling MBEDTLS_PLATFORM_MEMORY without the
wamae 0:7bfeb237e600 128 * MBEDTLS_PLATFORM_{FREE,CALLOC}_MACROs will provide
wamae 0:7bfeb237e600 129 * "mbedtls_platform_set_calloc_free()" allowing you to set an alternative calloc() and
wamae 0:7bfeb237e600 130 * free() function pointer at runtime.
wamae 0:7bfeb237e600 131 *
wamae 0:7bfeb237e600 132 * Enabling MBEDTLS_PLATFORM_MEMORY and specifying
wamae 0:7bfeb237e600 133 * MBEDTLS_PLATFORM_{CALLOC,FREE}_MACROs will allow you to specify the
wamae 0:7bfeb237e600 134 * alternate function at compile time.
wamae 0:7bfeb237e600 135 *
wamae 0:7bfeb237e600 136 * Requires: MBEDTLS_PLATFORM_C
wamae 0:7bfeb237e600 137 *
wamae 0:7bfeb237e600 138 * Enable this layer to allow use of alternative memory allocators.
wamae 0:7bfeb237e600 139 */
wamae 0:7bfeb237e600 140 //#define MBEDTLS_PLATFORM_MEMORY
wamae 0:7bfeb237e600 141
wamae 0:7bfeb237e600 142 /**
wamae 0:7bfeb237e600 143 * \def MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
wamae 0:7bfeb237e600 144 *
wamae 0:7bfeb237e600 145 * Do not assign standard functions in the platform layer (e.g. calloc() to
wamae 0:7bfeb237e600 146 * MBEDTLS_PLATFORM_STD_CALLOC and printf() to MBEDTLS_PLATFORM_STD_PRINTF)
wamae 0:7bfeb237e600 147 *
wamae 0:7bfeb237e600 148 * This makes sure there are no linking errors on platforms that do not support
wamae 0:7bfeb237e600 149 * these functions. You will HAVE to provide alternatives, either at runtime
wamae 0:7bfeb237e600 150 * via the platform_set_xxx() functions or at compile time by setting
wamae 0:7bfeb237e600 151 * the MBEDTLS_PLATFORM_STD_XXX defines, or enabling a
wamae 0:7bfeb237e600 152 * MBEDTLS_PLATFORM_XXX_MACRO.
wamae 0:7bfeb237e600 153 *
wamae 0:7bfeb237e600 154 * Requires: MBEDTLS_PLATFORM_C
wamae 0:7bfeb237e600 155 *
wamae 0:7bfeb237e600 156 * Uncomment to prevent default assignment of standard functions in the
wamae 0:7bfeb237e600 157 * platform layer.
wamae 0:7bfeb237e600 158 */
wamae 0:7bfeb237e600 159 //#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
wamae 0:7bfeb237e600 160
wamae 0:7bfeb237e600 161 /**
wamae 0:7bfeb237e600 162 * \def MBEDTLS_PLATFORM_EXIT_ALT
wamae 0:7bfeb237e600 163 *
wamae 0:7bfeb237e600 164 * MBEDTLS_PLATFORM_XXX_ALT: Uncomment a macro to let mbed TLS support the
wamae 0:7bfeb237e600 165 * function in the platform abstraction layer.
wamae 0:7bfeb237e600 166 *
wamae 0:7bfeb237e600 167 * Example: In case you uncomment MBEDTLS_PLATFORM_PRINTF_ALT, mbed TLS will
wamae 0:7bfeb237e600 168 * provide a function "mbedtls_platform_set_printf()" that allows you to set an
wamae 0:7bfeb237e600 169 * alternative printf function pointer.
wamae 0:7bfeb237e600 170 *
wamae 0:7bfeb237e600 171 * All these define require MBEDTLS_PLATFORM_C to be defined!
wamae 0:7bfeb237e600 172 *
wamae 0:7bfeb237e600 173 * \note MBEDTLS_PLATFORM_SNPRINTF_ALT is required on Windows;
wamae 0:7bfeb237e600 174 * it will be enabled automatically by check_config.h
wamae 0:7bfeb237e600 175 *
wamae 0:7bfeb237e600 176 * \warning MBEDTLS_PLATFORM_XXX_ALT cannot be defined at the same time as
wamae 0:7bfeb237e600 177 * MBEDTLS_PLATFORM_XXX_MACRO!
wamae 0:7bfeb237e600 178 *
wamae 0:7bfeb237e600 179 * Requires: MBEDTLS_PLATFORM_TIME_ALT requires MBEDTLS_HAVE_TIME
wamae 0:7bfeb237e600 180 *
wamae 0:7bfeb237e600 181 * Uncomment a macro to enable alternate implementation of specific base
wamae 0:7bfeb237e600 182 * platform function
wamae 0:7bfeb237e600 183 */
wamae 0:7bfeb237e600 184 //#define MBEDTLS_PLATFORM_EXIT_ALT
wamae 0:7bfeb237e600 185 //#define MBEDTLS_PLATFORM_TIME_ALT
wamae 0:7bfeb237e600 186 //#define MBEDTLS_PLATFORM_FPRINTF_ALT
wamae 0:7bfeb237e600 187 //#define MBEDTLS_PLATFORM_PRINTF_ALT
wamae 0:7bfeb237e600 188 //#define MBEDTLS_PLATFORM_SNPRINTF_ALT
wamae 0:7bfeb237e600 189 //#define MBEDTLS_PLATFORM_NV_SEED_ALT
wamae 0:7bfeb237e600 190 //#define MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT
wamae 0:7bfeb237e600 191
wamae 0:7bfeb237e600 192 /**
wamae 0:7bfeb237e600 193 * \def MBEDTLS_DEPRECATED_WARNING
wamae 0:7bfeb237e600 194 *
wamae 0:7bfeb237e600 195 * Mark deprecated functions so that they generate a warning if used.
wamae 0:7bfeb237e600 196 * Functions deprecated in one version will usually be removed in the next
wamae 0:7bfeb237e600 197 * version. You can enable this to help you prepare the transition to a new
wamae 0:7bfeb237e600 198 * major version by making sure your code is not using these functions.
wamae 0:7bfeb237e600 199 *
wamae 0:7bfeb237e600 200 * This only works with GCC and Clang. With other compilers, you may want to
wamae 0:7bfeb237e600 201 * use MBEDTLS_DEPRECATED_REMOVED
wamae 0:7bfeb237e600 202 *
wamae 0:7bfeb237e600 203 * Uncomment to get warnings on using deprecated functions.
wamae 0:7bfeb237e600 204 */
wamae 0:7bfeb237e600 205 //#define MBEDTLS_DEPRECATED_WARNING
wamae 0:7bfeb237e600 206
wamae 0:7bfeb237e600 207 /**
wamae 0:7bfeb237e600 208 * \def MBEDTLS_DEPRECATED_REMOVED
wamae 0:7bfeb237e600 209 *
wamae 0:7bfeb237e600 210 * Remove deprecated functions so that they generate an error if used.
wamae 0:7bfeb237e600 211 * Functions deprecated in one version will usually be removed in the next
wamae 0:7bfeb237e600 212 * version. You can enable this to help you prepare the transition to a new
wamae 0:7bfeb237e600 213 * major version by making sure your code is not using these functions.
wamae 0:7bfeb237e600 214 *
wamae 0:7bfeb237e600 215 * Uncomment to get errors on using deprecated functions.
wamae 0:7bfeb237e600 216 */
wamae 0:7bfeb237e600 217 //#define MBEDTLS_DEPRECATED_REMOVED
wamae 0:7bfeb237e600 218
wamae 0:7bfeb237e600 219 /* \} name SECTION: System support */
wamae 0:7bfeb237e600 220
wamae 0:7bfeb237e600 221 /**
wamae 0:7bfeb237e600 222 * \name SECTION: mbed TLS feature support
wamae 0:7bfeb237e600 223 *
wamae 0:7bfeb237e600 224 * This section sets support for features that are or are not needed
wamae 0:7bfeb237e600 225 * within the modules that are enabled.
wamae 0:7bfeb237e600 226 * \{
wamae 0:7bfeb237e600 227 */
wamae 0:7bfeb237e600 228
wamae 0:7bfeb237e600 229 /**
wamae 0:7bfeb237e600 230 * \def MBEDTLS_TIMING_ALT
wamae 0:7bfeb237e600 231 *
wamae 0:7bfeb237e600 232 * Uncomment to provide your own alternate implementation for mbedtls_timing_hardclock(),
wamae 0:7bfeb237e600 233 * mbedtls_timing_get_timer(), mbedtls_set_alarm(), mbedtls_set/get_delay()
wamae 0:7bfeb237e600 234 *
wamae 0:7bfeb237e600 235 * Only works if you have MBEDTLS_TIMING_C enabled.
wamae 0:7bfeb237e600 236 *
wamae 0:7bfeb237e600 237 * You will need to provide a header "timing_alt.h" and an implementation at
wamae 0:7bfeb237e600 238 * compile time.
wamae 0:7bfeb237e600 239 */
wamae 0:7bfeb237e600 240 //#define MBEDTLS_TIMING_ALT
wamae 0:7bfeb237e600 241
wamae 0:7bfeb237e600 242 /**
wamae 0:7bfeb237e600 243 * \def MBEDTLS_AES_ALT
wamae 0:7bfeb237e600 244 *
wamae 0:7bfeb237e600 245 * MBEDTLS__MODULE_NAME__ALT: Uncomment a macro to let mbed TLS use your
wamae 0:7bfeb237e600 246 * alternate core implementation of a symmetric crypto, an arithmetic or hash
wamae 0:7bfeb237e600 247 * module (e.g. platform specific assembly optimized implementations). Keep
wamae 0:7bfeb237e600 248 * in mind that the function prototypes should remain the same.
wamae 0:7bfeb237e600 249 *
wamae 0:7bfeb237e600 250 * This replaces the whole module. If you only want to replace one of the
wamae 0:7bfeb237e600 251 * functions, use one of the MBEDTLS__FUNCTION_NAME__ALT flags.
wamae 0:7bfeb237e600 252 *
wamae 0:7bfeb237e600 253 * Example: In case you uncomment MBEDTLS_AES_ALT, mbed TLS will no longer
wamae 0:7bfeb237e600 254 * provide the "struct mbedtls_aes_context" definition and omit the base
wamae 0:7bfeb237e600 255 * function declarations and implementations. "aes_alt.h" will be included from
wamae 0:7bfeb237e600 256 * "aes.h" to include the new function definitions.
wamae 0:7bfeb237e600 257 *
wamae 0:7bfeb237e600 258 * Uncomment a macro to enable alternate implementation of the corresponding
wamae 0:7bfeb237e600 259 * module.
wamae 0:7bfeb237e600 260 */
wamae 0:7bfeb237e600 261 //#define MBEDTLS_AES_ALT
wamae 0:7bfeb237e600 262 //#define MBEDTLS_ARC4_ALT
wamae 0:7bfeb237e600 263 //#define MBEDTLS_BLOWFISH_ALT
wamae 0:7bfeb237e600 264 //#define MBEDTLS_CAMELLIA_ALT
wamae 0:7bfeb237e600 265 //#define MBEDTLS_DES_ALT
wamae 0:7bfeb237e600 266 //#define MBEDTLS_XTEA_ALT
wamae 0:7bfeb237e600 267 //#define MBEDTLS_MD2_ALT
wamae 0:7bfeb237e600 268 //#define MBEDTLS_MD4_ALT
wamae 0:7bfeb237e600 269 //#define MBEDTLS_MD5_ALT
wamae 0:7bfeb237e600 270 //#define MBEDTLS_RIPEMD160_ALT
wamae 0:7bfeb237e600 271 //#define MBEDTLS_SHA1_ALT
wamae 0:7bfeb237e600 272 //#define MBEDTLS_SHA256_ALT
wamae 0:7bfeb237e600 273 //#define MBEDTLS_SHA512_ALT
wamae 0:7bfeb237e600 274 /*
wamae 0:7bfeb237e600 275 * When replacing the elliptic curve module, pleace consider, that it is
wamae 0:7bfeb237e600 276 * implemented with two .c files:
wamae 0:7bfeb237e600 277 * - ecp.c
wamae 0:7bfeb237e600 278 * - ecp_curves.c
wamae 0:7bfeb237e600 279 * You can replace them very much like all the other MBEDTLS__MODULE_NAME__ALT
wamae 0:7bfeb237e600 280 * macros as described above. The only difference is that you have to make sure
wamae 0:7bfeb237e600 281 * that you provide functionality for both .c files.
wamae 0:7bfeb237e600 282 */
wamae 0:7bfeb237e600 283 //#define MBEDTLS_ECP_ALT
wamae 0:7bfeb237e600 284
wamae 0:7bfeb237e600 285 /**
wamae 0:7bfeb237e600 286 * \def MBEDTLS_MD2_PROCESS_ALT
wamae 0:7bfeb237e600 287 *
wamae 0:7bfeb237e600 288 * MBEDTLS__FUNCTION_NAME__ALT: Uncomment a macro to let mbed TLS use you
wamae 0:7bfeb237e600 289 * alternate core implementation of symmetric crypto or hash function. Keep in
wamae 0:7bfeb237e600 290 * mind that function prototypes should remain the same.
wamae 0:7bfeb237e600 291 *
wamae 0:7bfeb237e600 292 * This replaces only one function. The header file from mbed TLS is still
wamae 0:7bfeb237e600 293 * used, in contrast to the MBEDTLS__MODULE_NAME__ALT flags.
wamae 0:7bfeb237e600 294 *
wamae 0:7bfeb237e600 295 * Example: In case you uncomment MBEDTLS_SHA256_PROCESS_ALT, mbed TLS will
wamae 0:7bfeb237e600 296 * no longer provide the mbedtls_sha1_process() function, but it will still provide
wamae 0:7bfeb237e600 297 * the other function (using your mbedtls_sha1_process() function) and the definition
wamae 0:7bfeb237e600 298 * of mbedtls_sha1_context, so your implementation of mbedtls_sha1_process must be compatible
wamae 0:7bfeb237e600 299 * with this definition.
wamae 0:7bfeb237e600 300 *
wamae 0:7bfeb237e600 301 * \note Because of a signature change, the core AES encryption and decryption routines are
wamae 0:7bfeb237e600 302 * currently named mbedtls_aes_internal_encrypt and mbedtls_aes_internal_decrypt,
wamae 0:7bfeb237e600 303 * respectively. When setting up alternative implementations, these functions should
wamae 0:7bfeb237e600 304 * be overriden, but the wrapper functions mbedtls_aes_decrypt and mbedtls_aes_encrypt
wamae 0:7bfeb237e600 305 * must stay untouched.
wamae 0:7bfeb237e600 306 *
wamae 0:7bfeb237e600 307 * \note If you use the AES_xxx_ALT macros, then is is recommended to also set
wamae 0:7bfeb237e600 308 * MBEDTLS_AES_ROM_TABLES in order to help the linker garbage-collect the AES
wamae 0:7bfeb237e600 309 * tables.
wamae 0:7bfeb237e600 310 *
wamae 0:7bfeb237e600 311 * Uncomment a macro to enable alternate implementation of the corresponding
wamae 0:7bfeb237e600 312 * function.
wamae 0:7bfeb237e600 313 */
wamae 0:7bfeb237e600 314 //#define MBEDTLS_MD2_PROCESS_ALT
wamae 0:7bfeb237e600 315 //#define MBEDTLS_MD4_PROCESS_ALT
wamae 0:7bfeb237e600 316 //#define MBEDTLS_MD5_PROCESS_ALT
wamae 0:7bfeb237e600 317 //#define MBEDTLS_RIPEMD160_PROCESS_ALT
wamae 0:7bfeb237e600 318 //#define MBEDTLS_SHA1_PROCESS_ALT
wamae 0:7bfeb237e600 319 //#define MBEDTLS_SHA256_PROCESS_ALT
wamae 0:7bfeb237e600 320 //#define MBEDTLS_SHA512_PROCESS_ALT
wamae 0:7bfeb237e600 321 //#define MBEDTLS_DES_SETKEY_ALT
wamae 0:7bfeb237e600 322 //#define MBEDTLS_DES_CRYPT_ECB_ALT
wamae 0:7bfeb237e600 323 //#define MBEDTLS_DES3_CRYPT_ECB_ALT
wamae 0:7bfeb237e600 324 //#define MBEDTLS_AES_SETKEY_ENC_ALT
wamae 0:7bfeb237e600 325 //#define MBEDTLS_AES_SETKEY_DEC_ALT
wamae 0:7bfeb237e600 326 //#define MBEDTLS_AES_ENCRYPT_ALT
wamae 0:7bfeb237e600 327 //#define MBEDTLS_AES_DECRYPT_ALT
wamae 0:7bfeb237e600 328
wamae 0:7bfeb237e600 329 /**
wamae 0:7bfeb237e600 330 * \def MBEDTLS_ECP_INTERNAL_ALT
wamae 0:7bfeb237e600 331 *
wamae 0:7bfeb237e600 332 * Expose a part of the internal interface of the Elliptic Curve Point module.
wamae 0:7bfeb237e600 333 *
wamae 0:7bfeb237e600 334 * MBEDTLS_ECP__FUNCTION_NAME__ALT: Uncomment a macro to let mbed TLS use your
wamae 0:7bfeb237e600 335 * alternative core implementation of elliptic curve arithmetic. Keep in mind
wamae 0:7bfeb237e600 336 * that function prototypes should remain the same.
wamae 0:7bfeb237e600 337 *
wamae 0:7bfeb237e600 338 * This partially replaces one function. The header file from mbed TLS is still
wamae 0:7bfeb237e600 339 * used, in contrast to the MBEDTLS_ECP_ALT flag. The original implementation
wamae 0:7bfeb237e600 340 * is still present and it is used for group structures not supported by the
wamae 0:7bfeb237e600 341 * alternative.
wamae 0:7bfeb237e600 342 *
wamae 0:7bfeb237e600 343 * Any of these options become available by defining MBEDTLS_ECP_INTERNAL_ALT
wamae 0:7bfeb237e600 344 * and implementing the following functions:
wamae 0:7bfeb237e600 345 * unsigned char mbedtls_internal_ecp_grp_capable(
wamae 0:7bfeb237e600 346 * const mbedtls_ecp_group *grp )
wamae 0:7bfeb237e600 347 * int mbedtls_internal_ecp_init( const mbedtls_ecp_group *grp )
wamae 0:7bfeb237e600 348 * void mbedtls_internal_ecp_deinit( const mbedtls_ecp_group *grp )
wamae 0:7bfeb237e600 349 * The mbedtls_internal_ecp_grp_capable function should return 1 if the
wamae 0:7bfeb237e600 350 * replacement functions implement arithmetic for the given group and 0
wamae 0:7bfeb237e600 351 * otherwise.
wamae 0:7bfeb237e600 352 * The functions mbedtls_internal_ecp_init and mbedtls_internal_ecp_deinit are
wamae 0:7bfeb237e600 353 * called before and after each point operation and provide an opportunity to
wamae 0:7bfeb237e600 354 * implement optimized set up and tear down instructions.
wamae 0:7bfeb237e600 355 *
wamae 0:7bfeb237e600 356 * Example: In case you uncomment MBEDTLS_ECP_INTERNAL_ALT and
wamae 0:7bfeb237e600 357 * MBEDTLS_ECP_DOUBLE_JAC_ALT, mbed TLS will still provide the ecp_double_jac
wamae 0:7bfeb237e600 358 * function, but will use your mbedtls_internal_ecp_double_jac if the group is
wamae 0:7bfeb237e600 359 * supported (your mbedtls_internal_ecp_grp_capable function returns 1 when
wamae 0:7bfeb237e600 360 * receives it as an argument). If the group is not supported then the original
wamae 0:7bfeb237e600 361 * implementation is used. The other functions and the definition of
wamae 0:7bfeb237e600 362 * mbedtls_ecp_group and mbedtls_ecp_point will not change, so your
wamae 0:7bfeb237e600 363 * implementation of mbedtls_internal_ecp_double_jac and
wamae 0:7bfeb237e600 364 * mbedtls_internal_ecp_grp_capable must be compatible with this definition.
wamae 0:7bfeb237e600 365 *
wamae 0:7bfeb237e600 366 * Uncomment a macro to enable alternate implementation of the corresponding
wamae 0:7bfeb237e600 367 * function.
wamae 0:7bfeb237e600 368 */
wamae 0:7bfeb237e600 369 /* Required for all the functions in this section */
wamae 0:7bfeb237e600 370 //#define MBEDTLS_ECP_INTERNAL_ALT
wamae 0:7bfeb237e600 371 /* Support for Weierstrass curves with Jacobi representation */
wamae 0:7bfeb237e600 372 //#define MBEDTLS_ECP_RANDOMIZE_JAC_ALT
wamae 0:7bfeb237e600 373 //#define MBEDTLS_ECP_ADD_MIXED_ALT
wamae 0:7bfeb237e600 374 //#define MBEDTLS_ECP_DOUBLE_JAC_ALT
wamae 0:7bfeb237e600 375 //#define MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT
wamae 0:7bfeb237e600 376 //#define MBEDTLS_ECP_NORMALIZE_JAC_ALT
wamae 0:7bfeb237e600 377 /* Support for curves with Montgomery arithmetic */
wamae 0:7bfeb237e600 378 //#define MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT
wamae 0:7bfeb237e600 379 //#define MBEDTLS_ECP_RANDOMIZE_MXZ_ALT
wamae 0:7bfeb237e600 380 //#define MBEDTLS_ECP_NORMALIZE_MXZ_ALT
wamae 0:7bfeb237e600 381
wamae 0:7bfeb237e600 382 /**
wamae 0:7bfeb237e600 383 * \def MBEDTLS_TEST_NULL_ENTROPY
wamae 0:7bfeb237e600 384 *
wamae 0:7bfeb237e600 385 * Enables testing and use of mbed TLS without any configured entropy sources.
wamae 0:7bfeb237e600 386 * This permits use of the library on platforms before an entropy source has
wamae 0:7bfeb237e600 387 * been integrated (see for example the MBEDTLS_ENTROPY_HARDWARE_ALT or the
wamae 0:7bfeb237e600 388 * MBEDTLS_ENTROPY_NV_SEED switches).
wamae 0:7bfeb237e600 389 *
wamae 0:7bfeb237e600 390 * WARNING! This switch MUST be disabled in production builds, and is suitable
wamae 0:7bfeb237e600 391 * only for development.
wamae 0:7bfeb237e600 392 * Enabling the switch negates any security provided by the library.
wamae 0:7bfeb237e600 393 *
wamae 0:7bfeb237e600 394 * Requires MBEDTLS_ENTROPY_C, MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
wamae 0:7bfeb237e600 395 *
wamae 0:7bfeb237e600 396 */
wamae 0:7bfeb237e600 397 //#define MBEDTLS_TEST_NULL_ENTROPY
wamae 0:7bfeb237e600 398
wamae 0:7bfeb237e600 399 /**
wamae 0:7bfeb237e600 400 * \def MBEDTLS_ENTROPY_HARDWARE_ALT
wamae 0:7bfeb237e600 401 *
wamae 0:7bfeb237e600 402 * Uncomment this macro to let mbed TLS use your own implementation of a
wamae 0:7bfeb237e600 403 * hardware entropy collector.
wamae 0:7bfeb237e600 404 *
wamae 0:7bfeb237e600 405 * Your function must be called \c mbedtls_hardware_poll(), have the same
wamae 0:7bfeb237e600 406 * prototype as declared in entropy_poll.h, and accept NULL as first argument.
wamae 0:7bfeb237e600 407 *
wamae 0:7bfeb237e600 408 * Uncomment to use your own hardware entropy collector.
wamae 0:7bfeb237e600 409 */
wamae 0:7bfeb237e600 410 //#define MBEDTLS_ENTROPY_HARDWARE_ALT
wamae 0:7bfeb237e600 411
wamae 0:7bfeb237e600 412 /**
wamae 0:7bfeb237e600 413 * \def MBEDTLS_AES_ROM_TABLES
wamae 0:7bfeb237e600 414 *
wamae 0:7bfeb237e600 415 * Store the AES tables in ROM.
wamae 0:7bfeb237e600 416 *
wamae 0:7bfeb237e600 417 * Uncomment this macro to store the AES tables in ROM.
wamae 0:7bfeb237e600 418 */
wamae 0:7bfeb237e600 419 #define MBEDTLS_AES_ROM_TABLES
wamae 0:7bfeb237e600 420
wamae 0:7bfeb237e600 421 /**
wamae 0:7bfeb237e600 422 * \def MBEDTLS_CAMELLIA_SMALL_MEMORY
wamae 0:7bfeb237e600 423 *
wamae 0:7bfeb237e600 424 * Use less ROM for the Camellia implementation (saves about 768 bytes).
wamae 0:7bfeb237e600 425 *
wamae 0:7bfeb237e600 426 * Uncomment this macro to use less memory for Camellia.
wamae 0:7bfeb237e600 427 */
wamae 0:7bfeb237e600 428 //#define MBEDTLS_CAMELLIA_SMALL_MEMORY
wamae 0:7bfeb237e600 429
wamae 0:7bfeb237e600 430 /**
wamae 0:7bfeb237e600 431 * \def MBEDTLS_CIPHER_MODE_CBC
wamae 0:7bfeb237e600 432 *
wamae 0:7bfeb237e600 433 * Enable Cipher Block Chaining mode (CBC) for symmetric ciphers.
wamae 0:7bfeb237e600 434 */
wamae 0:7bfeb237e600 435 //#define MBEDTLS_CIPHER_MODE_CBC
wamae 0:7bfeb237e600 436
wamae 0:7bfeb237e600 437 /**
wamae 0:7bfeb237e600 438 * \def MBEDTLS_CIPHER_MODE_CFB
wamae 0:7bfeb237e600 439 *
wamae 0:7bfeb237e600 440 * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
wamae 0:7bfeb237e600 441 */
wamae 0:7bfeb237e600 442 //#define MBEDTLS_CIPHER_MODE_CFB
wamae 0:7bfeb237e600 443
wamae 0:7bfeb237e600 444 /**
wamae 0:7bfeb237e600 445 * \def MBEDTLS_CIPHER_MODE_CTR
wamae 0:7bfeb237e600 446 *
wamae 0:7bfeb237e600 447 * Enable Counter Block Cipher mode (CTR) for symmetric ciphers.
wamae 0:7bfeb237e600 448 */
wamae 0:7bfeb237e600 449 //#define MBEDTLS_CIPHER_MODE_CTR
wamae 0:7bfeb237e600 450
wamae 0:7bfeb237e600 451 /**
wamae 0:7bfeb237e600 452 * \def MBEDTLS_CIPHER_NULL_CIPHER
wamae 0:7bfeb237e600 453 *
wamae 0:7bfeb237e600 454 * Enable NULL cipher.
wamae 0:7bfeb237e600 455 * Warning: Only do so when you know what you are doing. This allows for
wamae 0:7bfeb237e600 456 * encryption or channels without any security!
wamae 0:7bfeb237e600 457 *
wamae 0:7bfeb237e600 458 * Requires MBEDTLS_ENABLE_WEAK_CIPHERSUITES as well to enable
wamae 0:7bfeb237e600 459 * the following ciphersuites:
wamae 0:7bfeb237e600 460 * MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA
wamae 0:7bfeb237e600 461 * MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA
wamae 0:7bfeb237e600 462 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA
wamae 0:7bfeb237e600 463 * MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA
wamae 0:7bfeb237e600 464 * MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA384
wamae 0:7bfeb237e600 465 * MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA256
wamae 0:7bfeb237e600 466 * MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA
wamae 0:7bfeb237e600 467 * MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA384
wamae 0:7bfeb237e600 468 * MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA256
wamae 0:7bfeb237e600 469 * MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA
wamae 0:7bfeb237e600 470 * MBEDTLS_TLS_RSA_WITH_NULL_SHA256
wamae 0:7bfeb237e600 471 * MBEDTLS_TLS_RSA_WITH_NULL_SHA
wamae 0:7bfeb237e600 472 * MBEDTLS_TLS_RSA_WITH_NULL_MD5
wamae 0:7bfeb237e600 473 * MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA384
wamae 0:7bfeb237e600 474 * MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA256
wamae 0:7bfeb237e600 475 * MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA
wamae 0:7bfeb237e600 476 * MBEDTLS_TLS_PSK_WITH_NULL_SHA384
wamae 0:7bfeb237e600 477 * MBEDTLS_TLS_PSK_WITH_NULL_SHA256
wamae 0:7bfeb237e600 478 * MBEDTLS_TLS_PSK_WITH_NULL_SHA
wamae 0:7bfeb237e600 479 *
wamae 0:7bfeb237e600 480 * Uncomment this macro to enable the NULL cipher and ciphersuites
wamae 0:7bfeb237e600 481 */
wamae 0:7bfeb237e600 482 //#define MBEDTLS_CIPHER_NULL_CIPHER
wamae 0:7bfeb237e600 483
wamae 0:7bfeb237e600 484 /**
wamae 0:7bfeb237e600 485 * \def MBEDTLS_CIPHER_PADDING_PKCS7
wamae 0:7bfeb237e600 486 *
wamae 0:7bfeb237e600 487 * MBEDTLS_CIPHER_PADDING_XXX: Uncomment or comment macros to add support for
wamae 0:7bfeb237e600 488 * specific padding modes in the cipher layer with cipher modes that support
wamae 0:7bfeb237e600 489 * padding (e.g. CBC)
wamae 0:7bfeb237e600 490 *
wamae 0:7bfeb237e600 491 * If you disable all padding modes, only full blocks can be used with CBC.
wamae 0:7bfeb237e600 492 *
wamae 0:7bfeb237e600 493 * Enable padding modes in the cipher layer.
wamae 0:7bfeb237e600 494 */
wamae 0:7bfeb237e600 495 //#define MBEDTLS_CIPHER_PADDING_PKCS7
wamae 0:7bfeb237e600 496 //#define MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS
wamae 0:7bfeb237e600 497 //#define MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
wamae 0:7bfeb237e600 498 //#define MBEDTLS_CIPHER_PADDING_ZEROS
wamae 0:7bfeb237e600 499
wamae 0:7bfeb237e600 500 /**
wamae 0:7bfeb237e600 501 * \def MBEDTLS_ENABLE_WEAK_CIPHERSUITES
wamae 0:7bfeb237e600 502 *
wamae 0:7bfeb237e600 503 * Enable weak ciphersuites in SSL / TLS.
wamae 0:7bfeb237e600 504 * Warning: Only do so when you know what you are doing. This allows for
wamae 0:7bfeb237e600 505 * channels with virtually no security at all!
wamae 0:7bfeb237e600 506 *
wamae 0:7bfeb237e600 507 * This enables the following ciphersuites:
wamae 0:7bfeb237e600 508 * MBEDTLS_TLS_RSA_WITH_DES_CBC_SHA
wamae 0:7bfeb237e600 509 * MBEDTLS_TLS_DHE_RSA_WITH_DES_CBC_SHA
wamae 0:7bfeb237e600 510 *
wamae 0:7bfeb237e600 511 * Uncomment this macro to enable weak ciphersuites
wamae 0:7bfeb237e600 512 */
wamae 0:7bfeb237e600 513 //#define MBEDTLS_ENABLE_WEAK_CIPHERSUITES
wamae 0:7bfeb237e600 514
wamae 0:7bfeb237e600 515 /**
wamae 0:7bfeb237e600 516 * \def MBEDTLS_REMOVE_ARC4_CIPHERSUITES
wamae 0:7bfeb237e600 517 *
wamae 0:7bfeb237e600 518 * Remove RC4 ciphersuites by default in SSL / TLS.
wamae 0:7bfeb237e600 519 * This flag removes the ciphersuites based on RC4 from the default list as
wamae 0:7bfeb237e600 520 * returned by mbedtls_ssl_list_ciphersuites(). However, it is still possible to
wamae 0:7bfeb237e600 521 * enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including them
wamae 0:7bfeb237e600 522 * explicitly.
wamae 0:7bfeb237e600 523 *
wamae 0:7bfeb237e600 524 * Uncomment this macro to remove RC4 ciphersuites by default.
wamae 0:7bfeb237e600 525 */
wamae 0:7bfeb237e600 526 //#define MBEDTLS_REMOVE_ARC4_CIPHERSUITES
wamae 0:7bfeb237e600 527
wamae 0:7bfeb237e600 528 /**
wamae 0:7bfeb237e600 529 * \def MBEDTLS_ECP_DP_SECP192R1_ENABLED
wamae 0:7bfeb237e600 530 *
wamae 0:7bfeb237e600 531 * MBEDTLS_ECP_XXXX_ENABLED: Enables specific curves within the Elliptic Curve
wamae 0:7bfeb237e600 532 * module. By default all supported curves are enabled.
wamae 0:7bfeb237e600 533 *
wamae 0:7bfeb237e600 534 * Comment macros to disable the curve and functions for it
wamae 0:7bfeb237e600 535 */
wamae 0:7bfeb237e600 536 //#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
wamae 0:7bfeb237e600 537 //#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
wamae 0:7bfeb237e600 538 //#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
wamae 0:7bfeb237e600 539 //#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
wamae 0:7bfeb237e600 540 //#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
wamae 0:7bfeb237e600 541 //#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
wamae 0:7bfeb237e600 542 //#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
wamae 0:7bfeb237e600 543 //#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
wamae 0:7bfeb237e600 544 //#define MBEDTLS_ECP_DP_BP256R1_ENABLED
wamae 0:7bfeb237e600 545 //#define MBEDTLS_ECP_DP_BP384R1_ENABLED
wamae 0:7bfeb237e600 546 //#define MBEDTLS_ECP_DP_BP512R1_ENABLED
wamae 0:7bfeb237e600 547 //#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
wamae 0:7bfeb237e600 548
wamae 0:7bfeb237e600 549 /**
wamae 0:7bfeb237e600 550 * \def MBEDTLS_ECP_NIST_OPTIM
wamae 0:7bfeb237e600 551 *
wamae 0:7bfeb237e600 552 * Enable specific 'modulo p' routines for each NIST prime.
wamae 0:7bfeb237e600 553 * Depending on the prime and architecture, makes operations 4 to 8 times
wamae 0:7bfeb237e600 554 * faster on the corresponding curve.
wamae 0:7bfeb237e600 555 *
wamae 0:7bfeb237e600 556 * Comment this macro to disable NIST curves optimisation.
wamae 0:7bfeb237e600 557 */
wamae 0:7bfeb237e600 558 //#define MBEDTLS_ECP_NIST_OPTIM
wamae 0:7bfeb237e600 559
wamae 0:7bfeb237e600 560 /**
wamae 0:7bfeb237e600 561 * \def MBEDTLS_ECDSA_DETERMINISTIC
wamae 0:7bfeb237e600 562 *
wamae 0:7bfeb237e600 563 * Enable deterministic ECDSA (RFC 6979).
wamae 0:7bfeb237e600 564 * Standard ECDSA is "fragile" in the sense that lack of entropy when signing
wamae 0:7bfeb237e600 565 * may result in a compromise of the long-term signing key. This is avoided by
wamae 0:7bfeb237e600 566 * the deterministic variant.
wamae 0:7bfeb237e600 567 *
wamae 0:7bfeb237e600 568 * Requires: MBEDTLS_HMAC_DRBG_C
wamae 0:7bfeb237e600 569 *
wamae 0:7bfeb237e600 570 * Comment this macro to disable deterministic ECDSA.
wamae 0:7bfeb237e600 571 */
wamae 0:7bfeb237e600 572 //#define MBEDTLS_ECDSA_DETERMINISTIC
wamae 0:7bfeb237e600 573
wamae 0:7bfeb237e600 574 /**
wamae 0:7bfeb237e600 575 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
wamae 0:7bfeb237e600 576 *
wamae 0:7bfeb237e600 577 * Enable the PSK based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 578 *
wamae 0:7bfeb237e600 579 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 580 * enabled as well):
wamae 0:7bfeb237e600 581 * MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 582 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 583 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 584 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 585 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 586 * MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 587 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 588 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 589 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 590 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 591 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 592 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 593 */
wamae 0:7bfeb237e600 594 //#define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
wamae 0:7bfeb237e600 595
wamae 0:7bfeb237e600 596 /**
wamae 0:7bfeb237e600 597 * \def MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
wamae 0:7bfeb237e600 598 *
wamae 0:7bfeb237e600 599 * Enable the DHE-PSK based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 600 *
wamae 0:7bfeb237e600 601 * Requires: MBEDTLS_DHM_C
wamae 0:7bfeb237e600 602 *
wamae 0:7bfeb237e600 603 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 604 * enabled as well):
wamae 0:7bfeb237e600 605 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 606 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 607 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 608 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 609 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 610 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 611 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 612 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 613 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 614 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 615 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 616 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 617 */
wamae 0:7bfeb237e600 618 //#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
wamae 0:7bfeb237e600 619
wamae 0:7bfeb237e600 620 /**
wamae 0:7bfeb237e600 621 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
wamae 0:7bfeb237e600 622 *
wamae 0:7bfeb237e600 623 * Enable the ECDHE-PSK based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 624 *
wamae 0:7bfeb237e600 625 * Requires: MBEDTLS_ECDH_C
wamae 0:7bfeb237e600 626 *
wamae 0:7bfeb237e600 627 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 628 * enabled as well):
wamae 0:7bfeb237e600 629 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 630 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 631 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 632 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 633 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 634 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 635 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 636 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 637 */
wamae 0:7bfeb237e600 638 //#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
wamae 0:7bfeb237e600 639
wamae 0:7bfeb237e600 640 /**
wamae 0:7bfeb237e600 641 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
wamae 0:7bfeb237e600 642 *
wamae 0:7bfeb237e600 643 * Enable the RSA-PSK based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 644 *
wamae 0:7bfeb237e600 645 * Requires: MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:7bfeb237e600 646 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 647 *
wamae 0:7bfeb237e600 648 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 649 * enabled as well):
wamae 0:7bfeb237e600 650 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 651 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 652 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 653 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 654 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 655 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 656 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 657 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 658 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 659 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 660 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 661 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 662 */
wamae 0:7bfeb237e600 663 //#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
wamae 0:7bfeb237e600 664
wamae 0:7bfeb237e600 665 /**
wamae 0:7bfeb237e600 666 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
wamae 0:7bfeb237e600 667 *
wamae 0:7bfeb237e600 668 * Enable the RSA-only based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 669 *
wamae 0:7bfeb237e600 670 * Requires: MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:7bfeb237e600 671 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 672 *
wamae 0:7bfeb237e600 673 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 674 * enabled as well):
wamae 0:7bfeb237e600 675 * MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 676 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256
wamae 0:7bfeb237e600 677 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 678 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 679 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:7bfeb237e600 680 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:7bfeb237e600 681 * MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 682 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 683 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 684 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 685 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 686 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:7bfeb237e600 687 * MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 688 * MBEDTLS_TLS_RSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 689 * MBEDTLS_TLS_RSA_WITH_RC4_128_MD5
wamae 0:7bfeb237e600 690 */
wamae 0:7bfeb237e600 691 //#define MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
wamae 0:7bfeb237e600 692
wamae 0:7bfeb237e600 693 /**
wamae 0:7bfeb237e600 694 * \def MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
wamae 0:7bfeb237e600 695 *
wamae 0:7bfeb237e600 696 * Enable the DHE-RSA based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 697 *
wamae 0:7bfeb237e600 698 * Requires: MBEDTLS_DHM_C, MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:7bfeb237e600 699 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 700 *
wamae 0:7bfeb237e600 701 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 702 * enabled as well):
wamae 0:7bfeb237e600 703 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 704 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
wamae 0:7bfeb237e600 705 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 706 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 707 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:7bfeb237e600 708 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:7bfeb237e600 709 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 710 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 711 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 712 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 713 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 714 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:7bfeb237e600 715 * MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 716 */
wamae 0:7bfeb237e600 717 //#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
wamae 0:7bfeb237e600 718
wamae 0:7bfeb237e600 719 /**
wamae 0:7bfeb237e600 720 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
wamae 0:7bfeb237e600 721 *
wamae 0:7bfeb237e600 722 * Enable the ECDHE-RSA based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 723 *
wamae 0:7bfeb237e600 724 * Requires: MBEDTLS_ECDH_C, MBEDTLS_RSA_C, MBEDTLS_PKCS1_V15,
wamae 0:7bfeb237e600 725 * MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 726 *
wamae 0:7bfeb237e600 727 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 728 * enabled as well):
wamae 0:7bfeb237e600 729 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 730 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 731 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 732 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 733 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 734 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 735 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 736 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 737 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 738 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 739 * MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 740 * MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 741 */
wamae 0:7bfeb237e600 742 //#define MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
wamae 0:7bfeb237e600 743
wamae 0:7bfeb237e600 744 /**
wamae 0:7bfeb237e600 745 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
wamae 0:7bfeb237e600 746 *
wamae 0:7bfeb237e600 747 * Enable the ECDHE-ECDSA based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 748 *
wamae 0:7bfeb237e600 749 * Requires: MBEDTLS_ECDH_C, MBEDTLS_ECDSA_C, MBEDTLS_X509_CRT_PARSE_C,
wamae 0:7bfeb237e600 750 *
wamae 0:7bfeb237e600 751 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 752 * enabled as well):
wamae 0:7bfeb237e600 753 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 754 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 755 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 756 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 757 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 758 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 759 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 760 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 761 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 762 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 763 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 764 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 765 */
wamae 0:7bfeb237e600 766 //#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
wamae 0:7bfeb237e600 767
wamae 0:7bfeb237e600 768 /**
wamae 0:7bfeb237e600 769 * \def MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
wamae 0:7bfeb237e600 770 *
wamae 0:7bfeb237e600 771 * Enable the ECDH-ECDSA based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 772 *
wamae 0:7bfeb237e600 773 * Requires: MBEDTLS_ECDH_C, MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 774 *
wamae 0:7bfeb237e600 775 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 776 * enabled as well):
wamae 0:7bfeb237e600 777 * MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 778 * MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 779 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 780 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 781 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 782 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 783 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 784 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 785 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 786 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 787 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 788 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 789 */
wamae 0:7bfeb237e600 790 //#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
wamae 0:7bfeb237e600 791
wamae 0:7bfeb237e600 792 /**
wamae 0:7bfeb237e600 793 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
wamae 0:7bfeb237e600 794 *
wamae 0:7bfeb237e600 795 * Enable the ECDH-RSA based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 796 *
wamae 0:7bfeb237e600 797 * Requires: MBEDTLS_ECDH_C, MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 798 *
wamae 0:7bfeb237e600 799 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 800 * enabled as well):
wamae 0:7bfeb237e600 801 * MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 802 * MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 803 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 804 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 805 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 806 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 807 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 808 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 809 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 810 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 811 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 812 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 813 */
wamae 0:7bfeb237e600 814 //#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
wamae 0:7bfeb237e600 815
wamae 0:7bfeb237e600 816 /**
wamae 0:7bfeb237e600 817 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
wamae 0:7bfeb237e600 818 *
wamae 0:7bfeb237e600 819 * Enable the ECJPAKE based ciphersuite modes in SSL / TLS.
wamae 0:7bfeb237e600 820 *
wamae 0:7bfeb237e600 821 * \warning This is currently experimental. EC J-PAKE support is based on the
wamae 0:7bfeb237e600 822 * Thread v1.0.0 specification; incompatible changes to the specification
wamae 0:7bfeb237e600 823 * might still happen. For this reason, this is disabled by default.
wamae 0:7bfeb237e600 824 *
wamae 0:7bfeb237e600 825 * Requires: MBEDTLS_ECJPAKE_C
wamae 0:7bfeb237e600 826 * MBEDTLS_SHA256_C
wamae 0:7bfeb237e600 827 * MBEDTLS_ECP_DP_SECP256R1_ENABLED
wamae 0:7bfeb237e600 828 *
wamae 0:7bfeb237e600 829 * This enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 830 * enabled as well):
wamae 0:7bfeb237e600 831 * MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8
wamae 0:7bfeb237e600 832 */
wamae 0:7bfeb237e600 833 //#define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
wamae 0:7bfeb237e600 834
wamae 0:7bfeb237e600 835 /**
wamae 0:7bfeb237e600 836 * \def MBEDTLS_PK_PARSE_EC_EXTENDED
wamae 0:7bfeb237e600 837 *
wamae 0:7bfeb237e600 838 * Enhance support for reading EC keys using variants of SEC1 not allowed by
wamae 0:7bfeb237e600 839 * RFC 5915 and RFC 5480.
wamae 0:7bfeb237e600 840 *
wamae 0:7bfeb237e600 841 * Currently this means parsing the SpecifiedECDomain choice of EC
wamae 0:7bfeb237e600 842 * parameters (only known groups are supported, not arbitrary domains, to
wamae 0:7bfeb237e600 843 * avoid validation issues).
wamae 0:7bfeb237e600 844 *
wamae 0:7bfeb237e600 845 * Disable if you only need to support RFC 5915 + 5480 key formats.
wamae 0:7bfeb237e600 846 */
wamae 0:7bfeb237e600 847 //#define MBEDTLS_PK_PARSE_EC_EXTENDED
wamae 0:7bfeb237e600 848
wamae 0:7bfeb237e600 849 /**
wamae 0:7bfeb237e600 850 * \def MBEDTLS_ERROR_STRERROR_DUMMY
wamae 0:7bfeb237e600 851 *
wamae 0:7bfeb237e600 852 * Enable a dummy error function to make use of mbedtls_strerror() in
wamae 0:7bfeb237e600 853 * third party libraries easier when MBEDTLS_ERROR_C is disabled
wamae 0:7bfeb237e600 854 * (no effect when MBEDTLS_ERROR_C is enabled).
wamae 0:7bfeb237e600 855 *
wamae 0:7bfeb237e600 856 * You can safely disable this if MBEDTLS_ERROR_C is enabled, or if you're
wamae 0:7bfeb237e600 857 * not using mbedtls_strerror() or error_strerror() in your application.
wamae 0:7bfeb237e600 858 *
wamae 0:7bfeb237e600 859 * Disable if you run into name conflicts and want to really remove the
wamae 0:7bfeb237e600 860 * mbedtls_strerror()
wamae 0:7bfeb237e600 861 */
wamae 0:7bfeb237e600 862 //#define MBEDTLS_ERROR_STRERROR_DUMMY
wamae 0:7bfeb237e600 863
wamae 0:7bfeb237e600 864 /**
wamae 0:7bfeb237e600 865 * \def MBEDTLS_GENPRIME
wamae 0:7bfeb237e600 866 *
wamae 0:7bfeb237e600 867 * Enable the prime-number generation code.
wamae 0:7bfeb237e600 868 *
wamae 0:7bfeb237e600 869 * Requires: MBEDTLS_BIGNUM_C
wamae 0:7bfeb237e600 870 */
wamae 0:7bfeb237e600 871 //#define MBEDTLS_GENPRIME
wamae 0:7bfeb237e600 872
wamae 0:7bfeb237e600 873 /**
wamae 0:7bfeb237e600 874 * \def MBEDTLS_FS_IO
wamae 0:7bfeb237e600 875 *
wamae 0:7bfeb237e600 876 * Enable functions that use the filesystem.
wamae 0:7bfeb237e600 877 */
wamae 0:7bfeb237e600 878 //#define MBEDTLS_FS_IO
wamae 0:7bfeb237e600 879
wamae 0:7bfeb237e600 880 /**
wamae 0:7bfeb237e600 881 * \def MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
wamae 0:7bfeb237e600 882 *
wamae 0:7bfeb237e600 883 * Do not add default entropy sources. These are the platform specific,
wamae 0:7bfeb237e600 884 * mbedtls_timing_hardclock and HAVEGE based poll functions.
wamae 0:7bfeb237e600 885 *
wamae 0:7bfeb237e600 886 * This is useful to have more control over the added entropy sources in an
wamae 0:7bfeb237e600 887 * application.
wamae 0:7bfeb237e600 888 *
wamae 0:7bfeb237e600 889 * Uncomment this macro to prevent loading of default entropy functions.
wamae 0:7bfeb237e600 890 */
wamae 0:7bfeb237e600 891 //#define MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
wamae 0:7bfeb237e600 892
wamae 0:7bfeb237e600 893 /**
wamae 0:7bfeb237e600 894 * \def MBEDTLS_NO_PLATFORM_ENTROPY
wamae 0:7bfeb237e600 895 *
wamae 0:7bfeb237e600 896 * Do not use built-in platform entropy functions.
wamae 0:7bfeb237e600 897 * This is useful if your platform does not support
wamae 0:7bfeb237e600 898 * standards like the /dev/urandom or Windows CryptoAPI.
wamae 0:7bfeb237e600 899 *
wamae 0:7bfeb237e600 900 * Uncomment this macro to disable the built-in platform entropy functions.
wamae 0:7bfeb237e600 901 */
wamae 0:7bfeb237e600 902 #define MBEDTLS_NO_PLATFORM_ENTROPY
wamae 0:7bfeb237e600 903
wamae 0:7bfeb237e600 904 /**
wamae 0:7bfeb237e600 905 * \def MBEDTLS_ENTROPY_FORCE_SHA256
wamae 0:7bfeb237e600 906 *
wamae 0:7bfeb237e600 907 * Force the entropy accumulator to use a SHA-256 accumulator instead of the
wamae 0:7bfeb237e600 908 * default SHA-512 based one (if both are available).
wamae 0:7bfeb237e600 909 *
wamae 0:7bfeb237e600 910 * Requires: MBEDTLS_SHA256_C
wamae 0:7bfeb237e600 911 *
wamae 0:7bfeb237e600 912 * On 32-bit systems SHA-256 can be much faster than SHA-512. Use this option
wamae 0:7bfeb237e600 913 * if you have performance concerns.
wamae 0:7bfeb237e600 914 *
wamae 0:7bfeb237e600 915 * This option is only useful if both MBEDTLS_SHA256_C and
wamae 0:7bfeb237e600 916 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
wamae 0:7bfeb237e600 917 */
wamae 0:7bfeb237e600 918 //#define MBEDTLS_ENTROPY_FORCE_SHA256
wamae 0:7bfeb237e600 919
wamae 0:7bfeb237e600 920 /**
wamae 0:7bfeb237e600 921 * \def MBEDTLS_ENTROPY_NV_SEED
wamae 0:7bfeb237e600 922 *
wamae 0:7bfeb237e600 923 * Enable the non-volatile (NV) seed file-based entropy source.
wamae 0:7bfeb237e600 924 * (Also enables the NV seed read/write functions in the platform layer)
wamae 0:7bfeb237e600 925 *
wamae 0:7bfeb237e600 926 * This is crucial (if not required) on systems that do not have a
wamae 0:7bfeb237e600 927 * cryptographic entropy source (in hardware or kernel) available.
wamae 0:7bfeb237e600 928 *
wamae 0:7bfeb237e600 929 * Requires: MBEDTLS_ENTROPY_C, MBEDTLS_PLATFORM_C
wamae 0:7bfeb237e600 930 *
wamae 0:7bfeb237e600 931 * \note The read/write functions that are used by the entropy source are
wamae 0:7bfeb237e600 932 * determined in the platform layer, and can be modified at runtime and/or
wamae 0:7bfeb237e600 933 * compile-time depending on the flags (MBEDTLS_PLATFORM_NV_SEED_*) used.
wamae 0:7bfeb237e600 934 *
wamae 0:7bfeb237e600 935 * \note If you use the default implementation functions that read a seedfile
wamae 0:7bfeb237e600 936 * with regular fopen(), please make sure you make a seedfile with the
wamae 0:7bfeb237e600 937 * proper name (defined in MBEDTLS_PLATFORM_STD_NV_SEED_FILE) and at
wamae 0:7bfeb237e600 938 * least MBEDTLS_ENTROPY_BLOCK_SIZE bytes in size that can be read from
wamae 0:7bfeb237e600 939 * and written to or you will get an entropy source error! The default
wamae 0:7bfeb237e600 940 * implementation will only use the first MBEDTLS_ENTROPY_BLOCK_SIZE
wamae 0:7bfeb237e600 941 * bytes from the file.
wamae 0:7bfeb237e600 942 *
wamae 0:7bfeb237e600 943 * \note The entropy collector will write to the seed file before entropy is
wamae 0:7bfeb237e600 944 * given to an external source, to update it.
wamae 0:7bfeb237e600 945 */
wamae 0:7bfeb237e600 946 //#define MBEDTLS_ENTROPY_NV_SEED
wamae 0:7bfeb237e600 947
wamae 0:7bfeb237e600 948 /**
wamae 0:7bfeb237e600 949 * \def MBEDTLS_MEMORY_DEBUG
wamae 0:7bfeb237e600 950 *
wamae 0:7bfeb237e600 951 * Enable debugging of buffer allocator memory issues. Automatically prints
wamae 0:7bfeb237e600 952 * (to stderr) all (fatal) messages on memory allocation issues. Enables
wamae 0:7bfeb237e600 953 * function for 'debug output' of allocated memory.
wamae 0:7bfeb237e600 954 *
wamae 0:7bfeb237e600 955 * Requires: MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:7bfeb237e600 956 *
wamae 0:7bfeb237e600 957 * Uncomment this macro to let the buffer allocator print out error messages.
wamae 0:7bfeb237e600 958 */
wamae 0:7bfeb237e600 959 //#define MBEDTLS_MEMORY_DEBUG
wamae 0:7bfeb237e600 960
wamae 0:7bfeb237e600 961 /**
wamae 0:7bfeb237e600 962 * \def MBEDTLS_MEMORY_BACKTRACE
wamae 0:7bfeb237e600 963 *
wamae 0:7bfeb237e600 964 * Include backtrace information with each allocated block.
wamae 0:7bfeb237e600 965 *
wamae 0:7bfeb237e600 966 * Requires: MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:7bfeb237e600 967 * GLIBC-compatible backtrace() an backtrace_symbols() support
wamae 0:7bfeb237e600 968 *
wamae 0:7bfeb237e600 969 * Uncomment this macro to include backtrace information
wamae 0:7bfeb237e600 970 */
wamae 0:7bfeb237e600 971 //#define MBEDTLS_MEMORY_BACKTRACE
wamae 0:7bfeb237e600 972
wamae 0:7bfeb237e600 973 /**
wamae 0:7bfeb237e600 974 * \def MBEDTLS_PK_RSA_ALT_SUPPORT
wamae 0:7bfeb237e600 975 *
wamae 0:7bfeb237e600 976 * Support external private RSA keys (eg from a HSM) in the PK layer.
wamae 0:7bfeb237e600 977 *
wamae 0:7bfeb237e600 978 * Comment this macro to disable support for external private RSA keys.
wamae 0:7bfeb237e600 979 */
wamae 0:7bfeb237e600 980 //#define MBEDTLS_PK_RSA_ALT_SUPPORT
wamae 0:7bfeb237e600 981
wamae 0:7bfeb237e600 982 /**
wamae 0:7bfeb237e600 983 * \def MBEDTLS_PKCS1_V15
wamae 0:7bfeb237e600 984 *
wamae 0:7bfeb237e600 985 * Enable support for PKCS#1 v1.5 encoding.
wamae 0:7bfeb237e600 986 *
wamae 0:7bfeb237e600 987 * Requires: MBEDTLS_RSA_C
wamae 0:7bfeb237e600 988 *
wamae 0:7bfeb237e600 989 * This enables support for PKCS#1 v1.5 operations.
wamae 0:7bfeb237e600 990 */
wamae 0:7bfeb237e600 991 //#define MBEDTLS_PKCS1_V15
wamae 0:7bfeb237e600 992
wamae 0:7bfeb237e600 993 /**
wamae 0:7bfeb237e600 994 * \def MBEDTLS_PKCS1_V21
wamae 0:7bfeb237e600 995 *
wamae 0:7bfeb237e600 996 * Enable support for PKCS#1 v2.1 encoding.
wamae 0:7bfeb237e600 997 *
wamae 0:7bfeb237e600 998 * Requires: MBEDTLS_MD_C, MBEDTLS_RSA_C
wamae 0:7bfeb237e600 999 *
wamae 0:7bfeb237e600 1000 * This enables support for RSAES-OAEP and RSASSA-PSS operations.
wamae 0:7bfeb237e600 1001 */
wamae 0:7bfeb237e600 1002 //#define MBEDTLS_PKCS1_V21
wamae 0:7bfeb237e600 1003
wamae 0:7bfeb237e600 1004 /**
wamae 0:7bfeb237e600 1005 * \def MBEDTLS_RSA_NO_CRT
wamae 0:7bfeb237e600 1006 *
wamae 0:7bfeb237e600 1007 * Do not use the Chinese Remainder Theorem for the RSA private operation.
wamae 0:7bfeb237e600 1008 *
wamae 0:7bfeb237e600 1009 * Uncomment this macro to disable the use of CRT in RSA.
wamae 0:7bfeb237e600 1010 *
wamae 0:7bfeb237e600 1011 */
wamae 0:7bfeb237e600 1012 //#define MBEDTLS_RSA_NO_CRT
wamae 0:7bfeb237e600 1013
wamae 0:7bfeb237e600 1014 /**
wamae 0:7bfeb237e600 1015 * \def MBEDTLS_SELF_TEST
wamae 0:7bfeb237e600 1016 *
wamae 0:7bfeb237e600 1017 * Enable the checkup functions (*_self_test).
wamae 0:7bfeb237e600 1018 */
wamae 0:7bfeb237e600 1019 //#define MBEDTLS_SELF_TEST
wamae 0:7bfeb237e600 1020
wamae 0:7bfeb237e600 1021 /**
wamae 0:7bfeb237e600 1022 * \def MBEDTLS_SHA256_SMALLER
wamae 0:7bfeb237e600 1023 *
wamae 0:7bfeb237e600 1024 * Enable an implementation of SHA-256 that has lower ROM footprint but also
wamae 0:7bfeb237e600 1025 * lower performance.
wamae 0:7bfeb237e600 1026 *
wamae 0:7bfeb237e600 1027 * The default implementation is meant to be a reasonnable compromise between
wamae 0:7bfeb237e600 1028 * performance and size. This version optimizes more aggressively for size at
wamae 0:7bfeb237e600 1029 * the expense of performance. Eg on Cortex-M4 it reduces the size of
wamae 0:7bfeb237e600 1030 * mbedtls_sha256_process() from ~2KB to ~0.5KB for a performance hit of about
wamae 0:7bfeb237e600 1031 * 30%.
wamae 0:7bfeb237e600 1032 *
wamae 0:7bfeb237e600 1033 * Uncomment to enable the smaller implementation of SHA256.
wamae 0:7bfeb237e600 1034 */
wamae 0:7bfeb237e600 1035 //#define MBEDTLS_SHA256_SMALLER
wamae 0:7bfeb237e600 1036
wamae 0:7bfeb237e600 1037 /**
wamae 0:7bfeb237e600 1038 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
wamae 0:7bfeb237e600 1039 *
wamae 0:7bfeb237e600 1040 * Enable sending of alert messages in case of encountered errors as per RFC.
wamae 0:7bfeb237e600 1041 * If you choose not to send the alert messages, mbed TLS can still communicate
wamae 0:7bfeb237e600 1042 * with other servers, only debugging of failures is harder.
wamae 0:7bfeb237e600 1043 *
wamae 0:7bfeb237e600 1044 * The advantage of not sending alert messages, is that no information is given
wamae 0:7bfeb237e600 1045 * about reasons for failures thus preventing adversaries of gaining intel.
wamae 0:7bfeb237e600 1046 *
wamae 0:7bfeb237e600 1047 * Enable sending of all alert messages
wamae 0:7bfeb237e600 1048 */
wamae 0:7bfeb237e600 1049 //#define MBEDTLS_SSL_ALL_ALERT_MESSAGES
wamae 0:7bfeb237e600 1050
wamae 0:7bfeb237e600 1051 /**
wamae 0:7bfeb237e600 1052 * \def MBEDTLS_SSL_DEBUG_ALL
wamae 0:7bfeb237e600 1053 *
wamae 0:7bfeb237e600 1054 * Enable the debug messages in SSL module for all issues.
wamae 0:7bfeb237e600 1055 * Debug messages have been disabled in some places to prevent timing
wamae 0:7bfeb237e600 1056 * attacks due to (unbalanced) debugging function calls.
wamae 0:7bfeb237e600 1057 *
wamae 0:7bfeb237e600 1058 * If you need all error reporting you should enable this during debugging,
wamae 0:7bfeb237e600 1059 * but remove this for production servers that should log as well.
wamae 0:7bfeb237e600 1060 *
wamae 0:7bfeb237e600 1061 * Uncomment this macro to report all debug messages on errors introducing
wamae 0:7bfeb237e600 1062 * a timing side-channel.
wamae 0:7bfeb237e600 1063 *
wamae 0:7bfeb237e600 1064 */
wamae 0:7bfeb237e600 1065 //#define MBEDTLS_SSL_DEBUG_ALL
wamae 0:7bfeb237e600 1066
wamae 0:7bfeb237e600 1067 /** \def MBEDTLS_SSL_ENCRYPT_THEN_MAC
wamae 0:7bfeb237e600 1068 *
wamae 0:7bfeb237e600 1069 * Enable support for Encrypt-then-MAC, RFC 7366.
wamae 0:7bfeb237e600 1070 *
wamae 0:7bfeb237e600 1071 * This allows peers that both support it to use a more robust protection for
wamae 0:7bfeb237e600 1072 * ciphersuites using CBC, providing deep resistance against timing attacks
wamae 0:7bfeb237e600 1073 * on the padding or underlying cipher.
wamae 0:7bfeb237e600 1074 *
wamae 0:7bfeb237e600 1075 * This only affects CBC ciphersuites, and is useless if none is defined.
wamae 0:7bfeb237e600 1076 *
wamae 0:7bfeb237e600 1077 * Requires: MBEDTLS_SSL_PROTO_TLS1 or
wamae 0:7bfeb237e600 1078 * MBEDTLS_SSL_PROTO_TLS1_1 or
wamae 0:7bfeb237e600 1079 * MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:7bfeb237e600 1080 *
wamae 0:7bfeb237e600 1081 * Comment this macro to disable support for Encrypt-then-MAC
wamae 0:7bfeb237e600 1082 */
wamae 0:7bfeb237e600 1083 //#define MBEDTLS_SSL_ENCRYPT_THEN_MAC
wamae 0:7bfeb237e600 1084
wamae 0:7bfeb237e600 1085 /** \def MBEDTLS_SSL_EXTENDED_MASTER_SECRET
wamae 0:7bfeb237e600 1086 *
wamae 0:7bfeb237e600 1087 * Enable support for Extended Master Secret, aka Session Hash
wamae 0:7bfeb237e600 1088 * (draft-ietf-tls-session-hash-02).
wamae 0:7bfeb237e600 1089 *
wamae 0:7bfeb237e600 1090 * This was introduced as "the proper fix" to the Triple Handshake familiy of
wamae 0:7bfeb237e600 1091 * attacks, but it is recommended to always use it (even if you disable
wamae 0:7bfeb237e600 1092 * renegotiation), since it actually fixes a more fundamental issue in the
wamae 0:7bfeb237e600 1093 * original SSL/TLS design, and has implications beyond Triple Handshake.
wamae 0:7bfeb237e600 1094 *
wamae 0:7bfeb237e600 1095 * Requires: MBEDTLS_SSL_PROTO_TLS1 or
wamae 0:7bfeb237e600 1096 * MBEDTLS_SSL_PROTO_TLS1_1 or
wamae 0:7bfeb237e600 1097 * MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:7bfeb237e600 1098 *
wamae 0:7bfeb237e600 1099 * Comment this macro to disable support for Extended Master Secret.
wamae 0:7bfeb237e600 1100 */
wamae 0:7bfeb237e600 1101 //#define MBEDTLS_SSL_EXTENDED_MASTER_SECRET
wamae 0:7bfeb237e600 1102
wamae 0:7bfeb237e600 1103 /**
wamae 0:7bfeb237e600 1104 * \def MBEDTLS_SSL_FALLBACK_SCSV
wamae 0:7bfeb237e600 1105 *
wamae 0:7bfeb237e600 1106 * Enable support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv-00).
wamae 0:7bfeb237e600 1107 *
wamae 0:7bfeb237e600 1108 * For servers, it is recommended to always enable this, unless you support
wamae 0:7bfeb237e600 1109 * only one version of TLS, or know for sure that none of your clients
wamae 0:7bfeb237e600 1110 * implements a fallback strategy.
wamae 0:7bfeb237e600 1111 *
wamae 0:7bfeb237e600 1112 * For clients, you only need this if you're using a fallback strategy, which
wamae 0:7bfeb237e600 1113 * is not recommended in the first place, unless you absolutely need it to
wamae 0:7bfeb237e600 1114 * interoperate with buggy (version-intolerant) servers.
wamae 0:7bfeb237e600 1115 *
wamae 0:7bfeb237e600 1116 * Comment this macro to disable support for FALLBACK_SCSV
wamae 0:7bfeb237e600 1117 */
wamae 0:7bfeb237e600 1118 //#define MBEDTLS_SSL_FALLBACK_SCSV
wamae 0:7bfeb237e600 1119
wamae 0:7bfeb237e600 1120 /**
wamae 0:7bfeb237e600 1121 * \def MBEDTLS_SSL_HW_RECORD_ACCEL
wamae 0:7bfeb237e600 1122 *
wamae 0:7bfeb237e600 1123 * Enable hooking functions in SSL module for hardware acceleration of
wamae 0:7bfeb237e600 1124 * individual records.
wamae 0:7bfeb237e600 1125 *
wamae 0:7bfeb237e600 1126 * Uncomment this macro to enable hooking functions.
wamae 0:7bfeb237e600 1127 */
wamae 0:7bfeb237e600 1128 //#define MBEDTLS_SSL_HW_RECORD_ACCEL
wamae 0:7bfeb237e600 1129
wamae 0:7bfeb237e600 1130 /**
wamae 0:7bfeb237e600 1131 * \def MBEDTLS_SSL_CBC_RECORD_SPLITTING
wamae 0:7bfeb237e600 1132 *
wamae 0:7bfeb237e600 1133 * Enable 1/n-1 record splitting for CBC mode in SSLv3 and TLS 1.0.
wamae 0:7bfeb237e600 1134 *
wamae 0:7bfeb237e600 1135 * This is a countermeasure to the BEAST attack, which also minimizes the risk
wamae 0:7bfeb237e600 1136 * of interoperability issues compared to sending 0-length records.
wamae 0:7bfeb237e600 1137 *
wamae 0:7bfeb237e600 1138 * Comment this macro to disable 1/n-1 record splitting.
wamae 0:7bfeb237e600 1139 */
wamae 0:7bfeb237e600 1140 //#define MBEDTLS_SSL_CBC_RECORD_SPLITTING
wamae 0:7bfeb237e600 1141
wamae 0:7bfeb237e600 1142 /**
wamae 0:7bfeb237e600 1143 * \def MBEDTLS_SSL_RENEGOTIATION
wamae 0:7bfeb237e600 1144 *
wamae 0:7bfeb237e600 1145 * Disable support for TLS renegotiation.
wamae 0:7bfeb237e600 1146 *
wamae 0:7bfeb237e600 1147 * The two main uses of renegotiation are (1) refresh keys on long-lived
wamae 0:7bfeb237e600 1148 * connections and (2) client authentication after the initial handshake.
wamae 0:7bfeb237e600 1149 * If you don't need renegotiation, it's probably better to disable it, since
wamae 0:7bfeb237e600 1150 * it has been associated with security issues in the past and is easy to
wamae 0:7bfeb237e600 1151 * misuse/misunderstand.
wamae 0:7bfeb237e600 1152 *
wamae 0:7bfeb237e600 1153 * Comment this to disable support for renegotiation.
wamae 0:7bfeb237e600 1154 */
wamae 0:7bfeb237e600 1155 //#define MBEDTLS_SSL_RENEGOTIATION
wamae 0:7bfeb237e600 1156
wamae 0:7bfeb237e600 1157 /**
wamae 0:7bfeb237e600 1158 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
wamae 0:7bfeb237e600 1159 *
wamae 0:7bfeb237e600 1160 * Enable support for receiving and parsing SSLv2 Client Hello messages for the
wamae 0:7bfeb237e600 1161 * SSL Server module (MBEDTLS_SSL_SRV_C).
wamae 0:7bfeb237e600 1162 *
wamae 0:7bfeb237e600 1163 * Uncomment this macro to enable support for SSLv2 Client Hello messages.
wamae 0:7bfeb237e600 1164 */
wamae 0:7bfeb237e600 1165 //#define MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
wamae 0:7bfeb237e600 1166
wamae 0:7bfeb237e600 1167 /**
wamae 0:7bfeb237e600 1168 * \def MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
wamae 0:7bfeb237e600 1169 *
wamae 0:7bfeb237e600 1170 * Pick the ciphersuite according to the client's preferences rather than ours
wamae 0:7bfeb237e600 1171 * in the SSL Server module (MBEDTLS_SSL_SRV_C).
wamae 0:7bfeb237e600 1172 *
wamae 0:7bfeb237e600 1173 * Uncomment this macro to respect client's ciphersuite order
wamae 0:7bfeb237e600 1174 */
wamae 0:7bfeb237e600 1175 //#define MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
wamae 0:7bfeb237e600 1176
wamae 0:7bfeb237e600 1177 /**
wamae 0:7bfeb237e600 1178 * \def MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
wamae 0:7bfeb237e600 1179 *
wamae 0:7bfeb237e600 1180 * Enable support for RFC 6066 max_fragment_length extension in SSL.
wamae 0:7bfeb237e600 1181 *
wamae 0:7bfeb237e600 1182 * Comment this macro to disable support for the max_fragment_length extension
wamae 0:7bfeb237e600 1183 */
wamae 0:7bfeb237e600 1184 //#define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
wamae 0:7bfeb237e600 1185
wamae 0:7bfeb237e600 1186 /**
wamae 0:7bfeb237e600 1187 * \def MBEDTLS_SSL_PROTO_SSL3
wamae 0:7bfeb237e600 1188 *
wamae 0:7bfeb237e600 1189 * Enable support for SSL 3.0.
wamae 0:7bfeb237e600 1190 *
wamae 0:7bfeb237e600 1191 * Requires: MBEDTLS_MD5_C
wamae 0:7bfeb237e600 1192 * MBEDTLS_SHA1_C
wamae 0:7bfeb237e600 1193 *
wamae 0:7bfeb237e600 1194 * Comment this macro to disable support for SSL 3.0
wamae 0:7bfeb237e600 1195 */
wamae 0:7bfeb237e600 1196 //#define MBEDTLS_SSL_PROTO_SSL3
wamae 0:7bfeb237e600 1197
wamae 0:7bfeb237e600 1198 /**
wamae 0:7bfeb237e600 1199 * \def MBEDTLS_SSL_PROTO_TLS1
wamae 0:7bfeb237e600 1200 *
wamae 0:7bfeb237e600 1201 * Enable support for TLS 1.0.
wamae 0:7bfeb237e600 1202 *
wamae 0:7bfeb237e600 1203 * Requires: MBEDTLS_MD5_C
wamae 0:7bfeb237e600 1204 * MBEDTLS_SHA1_C
wamae 0:7bfeb237e600 1205 *
wamae 0:7bfeb237e600 1206 * Comment this macro to disable support for TLS 1.0
wamae 0:7bfeb237e600 1207 */
wamae 0:7bfeb237e600 1208 //#define MBEDTLS_SSL_PROTO_TLS1
wamae 0:7bfeb237e600 1209
wamae 0:7bfeb237e600 1210 /**
wamae 0:7bfeb237e600 1211 * \def MBEDTLS_SSL_PROTO_TLS1_1
wamae 0:7bfeb237e600 1212 *
wamae 0:7bfeb237e600 1213 * Enable support for TLS 1.1 (and DTLS 1.0 if DTLS is enabled).
wamae 0:7bfeb237e600 1214 *
wamae 0:7bfeb237e600 1215 * Requires: MBEDTLS_MD5_C
wamae 0:7bfeb237e600 1216 * MBEDTLS_SHA1_C
wamae 0:7bfeb237e600 1217 *
wamae 0:7bfeb237e600 1218 * Comment this macro to disable support for TLS 1.1 / DTLS 1.0
wamae 0:7bfeb237e600 1219 */
wamae 0:7bfeb237e600 1220 //#define MBEDTLS_SSL_PROTO_TLS1_1
wamae 0:7bfeb237e600 1221
wamae 0:7bfeb237e600 1222 /**
wamae 0:7bfeb237e600 1223 * \def MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:7bfeb237e600 1224 *
wamae 0:7bfeb237e600 1225 * Enable support for TLS 1.2 (and DTLS 1.2 if DTLS is enabled).
wamae 0:7bfeb237e600 1226 *
wamae 0:7bfeb237e600 1227 * Requires: MBEDTLS_SHA1_C or MBEDTLS_SHA256_C or MBEDTLS_SHA512_C
wamae 0:7bfeb237e600 1228 * (Depends on ciphersuites)
wamae 0:7bfeb237e600 1229 *
wamae 0:7bfeb237e600 1230 * Comment this macro to disable support for TLS 1.2 / DTLS 1.2
wamae 0:7bfeb237e600 1231 */
wamae 0:7bfeb237e600 1232 //#define MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:7bfeb237e600 1233
wamae 0:7bfeb237e600 1234 /**
wamae 0:7bfeb237e600 1235 * \def MBEDTLS_SSL_PROTO_DTLS
wamae 0:7bfeb237e600 1236 *
wamae 0:7bfeb237e600 1237 * Enable support for DTLS (all available versions).
wamae 0:7bfeb237e600 1238 *
wamae 0:7bfeb237e600 1239 * Enable this and MBEDTLS_SSL_PROTO_TLS1_1 to enable DTLS 1.0,
wamae 0:7bfeb237e600 1240 * and/or this and MBEDTLS_SSL_PROTO_TLS1_2 to enable DTLS 1.2.
wamae 0:7bfeb237e600 1241 *
wamae 0:7bfeb237e600 1242 * Requires: MBEDTLS_SSL_PROTO_TLS1_1
wamae 0:7bfeb237e600 1243 * or MBEDTLS_SSL_PROTO_TLS1_2
wamae 0:7bfeb237e600 1244 *
wamae 0:7bfeb237e600 1245 * Comment this macro to disable support for DTLS
wamae 0:7bfeb237e600 1246 */
wamae 0:7bfeb237e600 1247 //#define MBEDTLS_SSL_PROTO_DTLS
wamae 0:7bfeb237e600 1248
wamae 0:7bfeb237e600 1249 /**
wamae 0:7bfeb237e600 1250 * \def MBEDTLS_SSL_ALPN
wamae 0:7bfeb237e600 1251 *
wamae 0:7bfeb237e600 1252 * Enable support for RFC 7301 Application Layer Protocol Negotiation.
wamae 0:7bfeb237e600 1253 *
wamae 0:7bfeb237e600 1254 * Comment this macro to disable support for ALPN.
wamae 0:7bfeb237e600 1255 */
wamae 0:7bfeb237e600 1256 //#define MBEDTLS_SSL_ALPN
wamae 0:7bfeb237e600 1257
wamae 0:7bfeb237e600 1258 /**
wamae 0:7bfeb237e600 1259 * \def MBEDTLS_SSL_DTLS_ANTI_REPLAY
wamae 0:7bfeb237e600 1260 *
wamae 0:7bfeb237e600 1261 * Enable support for the anti-replay mechanism in DTLS.
wamae 0:7bfeb237e600 1262 *
wamae 0:7bfeb237e600 1263 * Requires: MBEDTLS_SSL_TLS_C
wamae 0:7bfeb237e600 1264 * MBEDTLS_SSL_PROTO_DTLS
wamae 0:7bfeb237e600 1265 *
wamae 0:7bfeb237e600 1266 * \warning Disabling this is often a security risk!
wamae 0:7bfeb237e600 1267 * See mbedtls_ssl_conf_dtls_anti_replay() for details.
wamae 0:7bfeb237e600 1268 *
wamae 0:7bfeb237e600 1269 * Comment this to disable anti-replay in DTLS.
wamae 0:7bfeb237e600 1270 */
wamae 0:7bfeb237e600 1271 //#define MBEDTLS_SSL_DTLS_ANTI_REPLAY
wamae 0:7bfeb237e600 1272
wamae 0:7bfeb237e600 1273 /**
wamae 0:7bfeb237e600 1274 * \def MBEDTLS_SSL_DTLS_HELLO_VERIFY
wamae 0:7bfeb237e600 1275 *
wamae 0:7bfeb237e600 1276 * Enable support for HelloVerifyRequest on DTLS servers.
wamae 0:7bfeb237e600 1277 *
wamae 0:7bfeb237e600 1278 * This feature is highly recommended to prevent DTLS servers being used as
wamae 0:7bfeb237e600 1279 * amplifiers in DoS attacks against other hosts. It should always be enabled
wamae 0:7bfeb237e600 1280 * unless you know for sure amplification cannot be a problem in the
wamae 0:7bfeb237e600 1281 * environment in which your server operates.
wamae 0:7bfeb237e600 1282 *
wamae 0:7bfeb237e600 1283 * \warning Disabling this can ba a security risk! (see above)
wamae 0:7bfeb237e600 1284 *
wamae 0:7bfeb237e600 1285 * Requires: MBEDTLS_SSL_PROTO_DTLS
wamae 0:7bfeb237e600 1286 *
wamae 0:7bfeb237e600 1287 * Comment this to disable support for HelloVerifyRequest.
wamae 0:7bfeb237e600 1288 */
wamae 0:7bfeb237e600 1289 //#define MBEDTLS_SSL_DTLS_HELLO_VERIFY
wamae 0:7bfeb237e600 1290
wamae 0:7bfeb237e600 1291 /**
wamae 0:7bfeb237e600 1292 * \def MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
wamae 0:7bfeb237e600 1293 *
wamae 0:7bfeb237e600 1294 * Enable server-side support for clients that reconnect from the same port.
wamae 0:7bfeb237e600 1295 *
wamae 0:7bfeb237e600 1296 * Some clients unexpectedly close the connection and try to reconnect using the
wamae 0:7bfeb237e600 1297 * same source port. This needs special support from the server to handle the
wamae 0:7bfeb237e600 1298 * new connection securely, as described in section 4.2.8 of RFC 6347. This
wamae 0:7bfeb237e600 1299 * flag enables that support.
wamae 0:7bfeb237e600 1300 *
wamae 0:7bfeb237e600 1301 * Requires: MBEDTLS_SSL_DTLS_HELLO_VERIFY
wamae 0:7bfeb237e600 1302 *
wamae 0:7bfeb237e600 1303 * Comment this to disable support for clients reusing the source port.
wamae 0:7bfeb237e600 1304 */
wamae 0:7bfeb237e600 1305 //#define MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
wamae 0:7bfeb237e600 1306
wamae 0:7bfeb237e600 1307 /**
wamae 0:7bfeb237e600 1308 * \def MBEDTLS_SSL_DTLS_BADMAC_LIMIT
wamae 0:7bfeb237e600 1309 *
wamae 0:7bfeb237e600 1310 * Enable support for a limit of records with bad MAC.
wamae 0:7bfeb237e600 1311 *
wamae 0:7bfeb237e600 1312 * See mbedtls_ssl_conf_dtls_badmac_limit().
wamae 0:7bfeb237e600 1313 *
wamae 0:7bfeb237e600 1314 * Requires: MBEDTLS_SSL_PROTO_DTLS
wamae 0:7bfeb237e600 1315 */
wamae 0:7bfeb237e600 1316 //#define MBEDTLS_SSL_DTLS_BADMAC_LIMIT
wamae 0:7bfeb237e600 1317
wamae 0:7bfeb237e600 1318 /**
wamae 0:7bfeb237e600 1319 * \def MBEDTLS_SSL_SESSION_TICKETS
wamae 0:7bfeb237e600 1320 *
wamae 0:7bfeb237e600 1321 * Enable support for RFC 5077 session tickets in SSL.
wamae 0:7bfeb237e600 1322 * Client-side, provides full support for session tickets (maintainance of a
wamae 0:7bfeb237e600 1323 * session store remains the responsibility of the application, though).
wamae 0:7bfeb237e600 1324 * Server-side, you also need to provide callbacks for writing and parsing
wamae 0:7bfeb237e600 1325 * tickets, including authenticated encryption and key management. Example
wamae 0:7bfeb237e600 1326 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
wamae 0:7bfeb237e600 1327 *
wamae 0:7bfeb237e600 1328 * Comment this macro to disable support for SSL session tickets
wamae 0:7bfeb237e600 1329 */
wamae 0:7bfeb237e600 1330 //#define MBEDTLS_SSL_SESSION_TICKETS
wamae 0:7bfeb237e600 1331
wamae 0:7bfeb237e600 1332 /**
wamae 0:7bfeb237e600 1333 * \def MBEDTLS_SSL_EXPORT_KEYS
wamae 0:7bfeb237e600 1334 *
wamae 0:7bfeb237e600 1335 * Enable support for exporting key block and master secret.
wamae 0:7bfeb237e600 1336 * This is required for certain users of TLS, e.g. EAP-TLS.
wamae 0:7bfeb237e600 1337 *
wamae 0:7bfeb237e600 1338 * Comment this macro to disable support for key export
wamae 0:7bfeb237e600 1339 */
wamae 0:7bfeb237e600 1340 //#define MBEDTLS_SSL_EXPORT_KEYS
wamae 0:7bfeb237e600 1341
wamae 0:7bfeb237e600 1342 /**
wamae 0:7bfeb237e600 1343 * \def MBEDTLS_SSL_SERVER_NAME_INDICATION
wamae 0:7bfeb237e600 1344 *
wamae 0:7bfeb237e600 1345 * Enable support for RFC 6066 server name indication (SNI) in SSL.
wamae 0:7bfeb237e600 1346 *
wamae 0:7bfeb237e600 1347 * Requires: MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 1348 *
wamae 0:7bfeb237e600 1349 * Comment this macro to disable support for server name indication in SSL
wamae 0:7bfeb237e600 1350 */
wamae 0:7bfeb237e600 1351 //#define MBEDTLS_SSL_SERVER_NAME_INDICATION
wamae 0:7bfeb237e600 1352
wamae 0:7bfeb237e600 1353 /**
wamae 0:7bfeb237e600 1354 * \def MBEDTLS_SSL_TRUNCATED_HMAC
wamae 0:7bfeb237e600 1355 *
wamae 0:7bfeb237e600 1356 * Enable support for RFC 6066 truncated HMAC in SSL.
wamae 0:7bfeb237e600 1357 *
wamae 0:7bfeb237e600 1358 * Comment this macro to disable support for truncated HMAC in SSL
wamae 0:7bfeb237e600 1359 */
wamae 0:7bfeb237e600 1360 //#define MBEDTLS_SSL_TRUNCATED_HMAC
wamae 0:7bfeb237e600 1361
wamae 0:7bfeb237e600 1362 /**
wamae 0:7bfeb237e600 1363 * \def MBEDTLS_THREADING_ALT
wamae 0:7bfeb237e600 1364 *
wamae 0:7bfeb237e600 1365 * Provide your own alternate threading implementation.
wamae 0:7bfeb237e600 1366 *
wamae 0:7bfeb237e600 1367 * Requires: MBEDTLS_THREADING_C
wamae 0:7bfeb237e600 1368 *
wamae 0:7bfeb237e600 1369 * Uncomment this to allow your own alternate threading implementation.
wamae 0:7bfeb237e600 1370 */
wamae 0:7bfeb237e600 1371 //#define MBEDTLS_THREADING_ALT
wamae 0:7bfeb237e600 1372
wamae 0:7bfeb237e600 1373 /**
wamae 0:7bfeb237e600 1374 * \def MBEDTLS_THREADING_PTHREAD
wamae 0:7bfeb237e600 1375 *
wamae 0:7bfeb237e600 1376 * Enable the pthread wrapper layer for the threading layer.
wamae 0:7bfeb237e600 1377 *
wamae 0:7bfeb237e600 1378 * Requires: MBEDTLS_THREADING_C
wamae 0:7bfeb237e600 1379 *
wamae 0:7bfeb237e600 1380 * Uncomment this to enable pthread mutexes.
wamae 0:7bfeb237e600 1381 */
wamae 0:7bfeb237e600 1382 //#define MBEDTLS_THREADING_PTHREAD
wamae 0:7bfeb237e600 1383
wamae 0:7bfeb237e600 1384 /**
wamae 0:7bfeb237e600 1385 * \def MBEDTLS_VERSION_FEATURES
wamae 0:7bfeb237e600 1386 *
wamae 0:7bfeb237e600 1387 * Allow run-time checking of compile-time enabled features. Thus allowing users
wamae 0:7bfeb237e600 1388 * to check at run-time if the library is for instance compiled with threading
wamae 0:7bfeb237e600 1389 * support via mbedtls_version_check_feature().
wamae 0:7bfeb237e600 1390 *
wamae 0:7bfeb237e600 1391 * Requires: MBEDTLS_VERSION_C
wamae 0:7bfeb237e600 1392 *
wamae 0:7bfeb237e600 1393 * Comment this to disable run-time checking and save ROM space
wamae 0:7bfeb237e600 1394 */
wamae 0:7bfeb237e600 1395 //#define MBEDTLS_VERSION_FEATURES
wamae 0:7bfeb237e600 1396
wamae 0:7bfeb237e600 1397 /**
wamae 0:7bfeb237e600 1398 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
wamae 0:7bfeb237e600 1399 *
wamae 0:7bfeb237e600 1400 * If set, the X509 parser will not break-off when parsing an X509 certificate
wamae 0:7bfeb237e600 1401 * and encountering an extension in a v1 or v2 certificate.
wamae 0:7bfeb237e600 1402 *
wamae 0:7bfeb237e600 1403 * Uncomment to prevent an error.
wamae 0:7bfeb237e600 1404 */
wamae 0:7bfeb237e600 1405 //#define MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
wamae 0:7bfeb237e600 1406
wamae 0:7bfeb237e600 1407 /**
wamae 0:7bfeb237e600 1408 * \def MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
wamae 0:7bfeb237e600 1409 *
wamae 0:7bfeb237e600 1410 * If set, the X509 parser will not break-off when parsing an X509 certificate
wamae 0:7bfeb237e600 1411 * and encountering an unknown critical extension.
wamae 0:7bfeb237e600 1412 *
wamae 0:7bfeb237e600 1413 * \warning Depending on your PKI use, enabling this can be a security risk!
wamae 0:7bfeb237e600 1414 *
wamae 0:7bfeb237e600 1415 * Uncomment to prevent an error.
wamae 0:7bfeb237e600 1416 */
wamae 0:7bfeb237e600 1417 //#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
wamae 0:7bfeb237e600 1418
wamae 0:7bfeb237e600 1419 /**
wamae 0:7bfeb237e600 1420 * \def MBEDTLS_X509_CHECK_KEY_USAGE
wamae 0:7bfeb237e600 1421 *
wamae 0:7bfeb237e600 1422 * Enable verification of the keyUsage extension (CA and leaf certificates).
wamae 0:7bfeb237e600 1423 *
wamae 0:7bfeb237e600 1424 * Disabling this avoids problems with mis-issued and/or misused
wamae 0:7bfeb237e600 1425 * (intermediate) CA and leaf certificates.
wamae 0:7bfeb237e600 1426 *
wamae 0:7bfeb237e600 1427 * \warning Depending on your PKI use, disabling this can be a security risk!
wamae 0:7bfeb237e600 1428 *
wamae 0:7bfeb237e600 1429 * Comment to skip keyUsage checking for both CA and leaf certificates.
wamae 0:7bfeb237e600 1430 */
wamae 0:7bfeb237e600 1431 //#define MBEDTLS_X509_CHECK_KEY_USAGE
wamae 0:7bfeb237e600 1432
wamae 0:7bfeb237e600 1433 /**
wamae 0:7bfeb237e600 1434 * \def MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
wamae 0:7bfeb237e600 1435 *
wamae 0:7bfeb237e600 1436 * Enable verification of the extendedKeyUsage extension (leaf certificates).
wamae 0:7bfeb237e600 1437 *
wamae 0:7bfeb237e600 1438 * Disabling this avoids problems with mis-issued and/or misused certificates.
wamae 0:7bfeb237e600 1439 *
wamae 0:7bfeb237e600 1440 * \warning Depending on your PKI use, disabling this can be a security risk!
wamae 0:7bfeb237e600 1441 *
wamae 0:7bfeb237e600 1442 * Comment to skip extendedKeyUsage checking for certificates.
wamae 0:7bfeb237e600 1443 */
wamae 0:7bfeb237e600 1444 //#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
wamae 0:7bfeb237e600 1445
wamae 0:7bfeb237e600 1446 /**
wamae 0:7bfeb237e600 1447 * \def MBEDTLS_X509_RSASSA_PSS_SUPPORT
wamae 0:7bfeb237e600 1448 *
wamae 0:7bfeb237e600 1449 * Enable parsing and verification of X.509 certificates, CRLs and CSRS
wamae 0:7bfeb237e600 1450 * signed with RSASSA-PSS (aka PKCS#1 v2.1).
wamae 0:7bfeb237e600 1451 *
wamae 0:7bfeb237e600 1452 * Comment this macro to disallow using RSASSA-PSS in certificates.
wamae 0:7bfeb237e600 1453 */
wamae 0:7bfeb237e600 1454 //#define MBEDTLS_X509_RSASSA_PSS_SUPPORT
wamae 0:7bfeb237e600 1455
wamae 0:7bfeb237e600 1456 /**
wamae 0:7bfeb237e600 1457 * \def MBEDTLS_ZLIB_SUPPORT
wamae 0:7bfeb237e600 1458 *
wamae 0:7bfeb237e600 1459 * If set, the SSL/TLS module uses ZLIB to support compression and
wamae 0:7bfeb237e600 1460 * decompression of packet data.
wamae 0:7bfeb237e600 1461 *
wamae 0:7bfeb237e600 1462 * \warning TLS-level compression MAY REDUCE SECURITY! See for example the
wamae 0:7bfeb237e600 1463 * CRIME attack. Before enabling this option, you should examine with care if
wamae 0:7bfeb237e600 1464 * CRIME or similar exploits may be a applicable to your use case.
wamae 0:7bfeb237e600 1465 *
wamae 0:7bfeb237e600 1466 * \note Currently compression can't be used with DTLS.
wamae 0:7bfeb237e600 1467 *
wamae 0:7bfeb237e600 1468 * Used in: library/ssl_tls.c
wamae 0:7bfeb237e600 1469 * library/ssl_cli.c
wamae 0:7bfeb237e600 1470 * library/ssl_srv.c
wamae 0:7bfeb237e600 1471 *
wamae 0:7bfeb237e600 1472 * This feature requires zlib library and headers to be present.
wamae 0:7bfeb237e600 1473 *
wamae 0:7bfeb237e600 1474 * Uncomment to enable use of ZLIB
wamae 0:7bfeb237e600 1475 */
wamae 0:7bfeb237e600 1476 //#define MBEDTLS_ZLIB_SUPPORT
wamae 0:7bfeb237e600 1477 /* \} name SECTION: mbed TLS feature support */
wamae 0:7bfeb237e600 1478
wamae 0:7bfeb237e600 1479 /**
wamae 0:7bfeb237e600 1480 * \name SECTION: mbed TLS modules
wamae 0:7bfeb237e600 1481 *
wamae 0:7bfeb237e600 1482 * This section enables or disables entire modules in mbed TLS
wamae 0:7bfeb237e600 1483 * \{
wamae 0:7bfeb237e600 1484 */
wamae 0:7bfeb237e600 1485
wamae 0:7bfeb237e600 1486 /**
wamae 0:7bfeb237e600 1487 * \def MBEDTLS_AESNI_C
wamae 0:7bfeb237e600 1488 *
wamae 0:7bfeb237e600 1489 * Enable AES-NI support on x86-64.
wamae 0:7bfeb237e600 1490 *
wamae 0:7bfeb237e600 1491 * Module: library/aesni.c
wamae 0:7bfeb237e600 1492 * Caller: library/aes.c
wamae 0:7bfeb237e600 1493 *
wamae 0:7bfeb237e600 1494 * Requires: MBEDTLS_HAVE_ASM
wamae 0:7bfeb237e600 1495 *
wamae 0:7bfeb237e600 1496 * This modules adds support for the AES-NI instructions on x86-64
wamae 0:7bfeb237e600 1497 */
wamae 0:7bfeb237e600 1498 //#define MBEDTLS_AESNI_C
wamae 0:7bfeb237e600 1499
wamae 0:7bfeb237e600 1500 /**
wamae 0:7bfeb237e600 1501 * \def MBEDTLS_AES_C
wamae 0:7bfeb237e600 1502 *
wamae 0:7bfeb237e600 1503 * Enable the AES block cipher.
wamae 0:7bfeb237e600 1504 *
wamae 0:7bfeb237e600 1505 * Module: library/aes.c
wamae 0:7bfeb237e600 1506 * Caller: library/ssl_tls.c
wamae 0:7bfeb237e600 1507 * library/pem.c
wamae 0:7bfeb237e600 1508 * library/ctr_drbg.c
wamae 0:7bfeb237e600 1509 *
wamae 0:7bfeb237e600 1510 * This module enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 1511 * enabled as well):
wamae 0:7bfeb237e600 1512 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1513 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1514 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1515 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1516 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1517 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1518 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1519 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1520 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1521 * MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1522 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1523 * MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1524 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1525 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1526 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1527 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1528 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1529 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
wamae 0:7bfeb237e600 1530 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1531 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1532 * MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1533 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1534 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1535 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1536 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1537 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1538 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1539 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1540 * MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1541 * MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1542 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1543 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1544 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1545 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1546 * MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1547 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1548 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1549 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1550 * MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1551 * MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1552 * MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1553 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256
wamae 0:7bfeb237e600 1554 * MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1555 * MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1556 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1557 * MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1558 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1559 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1560 * MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1561 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1562 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1563 * MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1564 * MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384
wamae 0:7bfeb237e600 1565 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384
wamae 0:7bfeb237e600 1566 * MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA
wamae 0:7bfeb237e600 1567 * MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 1568 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256
wamae 0:7bfeb237e600 1569 * MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA
wamae 0:7bfeb237e600 1570 *
wamae 0:7bfeb237e600 1571 * PEM_PARSE uses AES for decrypting encrypted keys.
wamae 0:7bfeb237e600 1572 */
wamae 0:7bfeb237e600 1573 #define MBEDTLS_AES_C
wamae 0:7bfeb237e600 1574
wamae 0:7bfeb237e600 1575 /**
wamae 0:7bfeb237e600 1576 * \def MBEDTLS_ARC4_C
wamae 0:7bfeb237e600 1577 *
wamae 0:7bfeb237e600 1578 * Enable the ARCFOUR stream cipher.
wamae 0:7bfeb237e600 1579 *
wamae 0:7bfeb237e600 1580 * Module: library/arc4.c
wamae 0:7bfeb237e600 1581 * Caller: library/ssl_tls.c
wamae 0:7bfeb237e600 1582 *
wamae 0:7bfeb237e600 1583 * This module enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 1584 * enabled as well):
wamae 0:7bfeb237e600 1585 * MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1586 * MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1587 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1588 * MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1589 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1590 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1591 * MBEDTLS_TLS_RSA_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1592 * MBEDTLS_TLS_RSA_WITH_RC4_128_MD5
wamae 0:7bfeb237e600 1593 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1594 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
wamae 0:7bfeb237e600 1595 */
wamae 0:7bfeb237e600 1596 //#define MBEDTLS_ARC4_C
wamae 0:7bfeb237e600 1597
wamae 0:7bfeb237e600 1598 /**
wamae 0:7bfeb237e600 1599 * \def MBEDTLS_ASN1_PARSE_C
wamae 0:7bfeb237e600 1600 *
wamae 0:7bfeb237e600 1601 * Enable the generic ASN1 parser.
wamae 0:7bfeb237e600 1602 *
wamae 0:7bfeb237e600 1603 * Module: library/asn1.c
wamae 0:7bfeb237e600 1604 * Caller: library/x509.c
wamae 0:7bfeb237e600 1605 * library/dhm.c
wamae 0:7bfeb237e600 1606 * library/pkcs12.c
wamae 0:7bfeb237e600 1607 * library/pkcs5.c
wamae 0:7bfeb237e600 1608 * library/pkparse.c
wamae 0:7bfeb237e600 1609 */
wamae 0:7bfeb237e600 1610 //#define MBEDTLS_ASN1_PARSE_C
wamae 0:7bfeb237e600 1611
wamae 0:7bfeb237e600 1612 /**
wamae 0:7bfeb237e600 1613 * \def MBEDTLS_ASN1_WRITE_C
wamae 0:7bfeb237e600 1614 *
wamae 0:7bfeb237e600 1615 * Enable the generic ASN1 writer.
wamae 0:7bfeb237e600 1616 *
wamae 0:7bfeb237e600 1617 * Module: library/asn1write.c
wamae 0:7bfeb237e600 1618 * Caller: library/ecdsa.c
wamae 0:7bfeb237e600 1619 * library/pkwrite.c
wamae 0:7bfeb237e600 1620 * library/x509_create.c
wamae 0:7bfeb237e600 1621 * library/x509write_crt.c
wamae 0:7bfeb237e600 1622 * library/x509write_csr.c
wamae 0:7bfeb237e600 1623 */
wamae 0:7bfeb237e600 1624 //#define MBEDTLS_ASN1_WRITE_C
wamae 0:7bfeb237e600 1625
wamae 0:7bfeb237e600 1626 /**
wamae 0:7bfeb237e600 1627 * \def MBEDTLS_BASE64_C
wamae 0:7bfeb237e600 1628 *
wamae 0:7bfeb237e600 1629 * Enable the Base64 module.
wamae 0:7bfeb237e600 1630 *
wamae 0:7bfeb237e600 1631 * Module: library/base64.c
wamae 0:7bfeb237e600 1632 * Caller: library/pem.c
wamae 0:7bfeb237e600 1633 *
wamae 0:7bfeb237e600 1634 * This module is required for PEM support (required by X.509).
wamae 0:7bfeb237e600 1635 */
wamae 0:7bfeb237e600 1636 #define MBEDTLS_BASE64_C
wamae 0:7bfeb237e600 1637
wamae 0:7bfeb237e600 1638 /**
wamae 0:7bfeb237e600 1639 * \def MBEDTLS_BIGNUM_C
wamae 0:7bfeb237e600 1640 *
wamae 0:7bfeb237e600 1641 * Enable the multi-precision integer library.
wamae 0:7bfeb237e600 1642 *
wamae 0:7bfeb237e600 1643 * Module: library/bignum.c
wamae 0:7bfeb237e600 1644 * Caller: library/dhm.c
wamae 0:7bfeb237e600 1645 * library/ecp.c
wamae 0:7bfeb237e600 1646 * library/ecdsa.c
wamae 0:7bfeb237e600 1647 * library/rsa.c
wamae 0:7bfeb237e600 1648 * library/ssl_tls.c
wamae 0:7bfeb237e600 1649 *
wamae 0:7bfeb237e600 1650 * This module is required for RSA, DHM and ECC (ECDH, ECDSA) support.
wamae 0:7bfeb237e600 1651 */
wamae 0:7bfeb237e600 1652 //#define MBEDTLS_BIGNUM_C
wamae 0:7bfeb237e600 1653
wamae 0:7bfeb237e600 1654 /**
wamae 0:7bfeb237e600 1655 * \def MBEDTLS_BLOWFISH_C
wamae 0:7bfeb237e600 1656 *
wamae 0:7bfeb237e600 1657 * Enable the Blowfish block cipher.
wamae 0:7bfeb237e600 1658 *
wamae 0:7bfeb237e600 1659 * Module: library/blowfish.c
wamae 0:7bfeb237e600 1660 */
wamae 0:7bfeb237e600 1661 //#define MBEDTLS_BLOWFISH_C
wamae 0:7bfeb237e600 1662
wamae 0:7bfeb237e600 1663 /**
wamae 0:7bfeb237e600 1664 * \def MBEDTLS_CAMELLIA_C
wamae 0:7bfeb237e600 1665 *
wamae 0:7bfeb237e600 1666 * Enable the Camellia block cipher.
wamae 0:7bfeb237e600 1667 *
wamae 0:7bfeb237e600 1668 * Module: library/camellia.c
wamae 0:7bfeb237e600 1669 * Caller: library/ssl_tls.c
wamae 0:7bfeb237e600 1670 *
wamae 0:7bfeb237e600 1671 * This module enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 1672 * enabled as well):
wamae 0:7bfeb237e600 1673 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1674 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1675 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1676 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1677 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1678 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1679 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1680 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1681 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1682 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1683 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1684 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1685 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1686 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:7bfeb237e600 1687 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:7bfeb237e600 1688 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1689 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1690 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1691 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1692 * MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1693 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1694 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:7bfeb237e600 1695 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1696 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1697 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1698 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1699 * MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1700 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1701 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1702 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
wamae 0:7bfeb237e600 1703 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
wamae 0:7bfeb237e600 1704 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1705 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1706 * MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
wamae 0:7bfeb237e600 1707 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1708 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1709 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1710 * MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1711 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
wamae 0:7bfeb237e600 1712 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
wamae 0:7bfeb237e600 1713 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
wamae 0:7bfeb237e600 1714 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
wamae 0:7bfeb237e600 1715 */
wamae 0:7bfeb237e600 1716 //#define MBEDTLS_CAMELLIA_C
wamae 0:7bfeb237e600 1717
wamae 0:7bfeb237e600 1718 /**
wamae 0:7bfeb237e600 1719 * \def MBEDTLS_CCM_C
wamae 0:7bfeb237e600 1720 *
wamae 0:7bfeb237e600 1721 * Enable the Counter with CBC-MAC (CCM) mode for 128-bit block cipher.
wamae 0:7bfeb237e600 1722 *
wamae 0:7bfeb237e600 1723 * Module: library/ccm.c
wamae 0:7bfeb237e600 1724 *
wamae 0:7bfeb237e600 1725 * Requires: MBEDTLS_AES_C or MBEDTLS_CAMELLIA_C
wamae 0:7bfeb237e600 1726 *
wamae 0:7bfeb237e600 1727 * This module enables the AES-CCM ciphersuites, if other requisites are
wamae 0:7bfeb237e600 1728 * enabled as well.
wamae 0:7bfeb237e600 1729 */
wamae 0:7bfeb237e600 1730 //#define MBEDTLS_CCM_C
wamae 0:7bfeb237e600 1731
wamae 0:7bfeb237e600 1732 /**
wamae 0:7bfeb237e600 1733 * \def MBEDTLS_CERTS_C
wamae 0:7bfeb237e600 1734 *
wamae 0:7bfeb237e600 1735 * Enable the test certificates.
wamae 0:7bfeb237e600 1736 *
wamae 0:7bfeb237e600 1737 * Module: library/certs.c
wamae 0:7bfeb237e600 1738 * Caller:
wamae 0:7bfeb237e600 1739 *
wamae 0:7bfeb237e600 1740 * This module is used for testing (ssl_client/server).
wamae 0:7bfeb237e600 1741 */
wamae 0:7bfeb237e600 1742 //#define MBEDTLS_CERTS_C
wamae 0:7bfeb237e600 1743
wamae 0:7bfeb237e600 1744 /**
wamae 0:7bfeb237e600 1745 * \def MBEDTLS_CIPHER_C
wamae 0:7bfeb237e600 1746 *
wamae 0:7bfeb237e600 1747 * Enable the generic cipher layer.
wamae 0:7bfeb237e600 1748 *
wamae 0:7bfeb237e600 1749 * Module: library/cipher.c
wamae 0:7bfeb237e600 1750 * Caller: library/ssl_tls.c
wamae 0:7bfeb237e600 1751 *
wamae 0:7bfeb237e600 1752 * Uncomment to enable generic cipher wrappers.
wamae 0:7bfeb237e600 1753 */
wamae 0:7bfeb237e600 1754 #define MBEDTLS_CIPHER_C
wamae 0:7bfeb237e600 1755
wamae 0:7bfeb237e600 1756 /**
wamae 0:7bfeb237e600 1757 * \def MBEDTLS_CMAC_C
wamae 0:7bfeb237e600 1758 *
wamae 0:7bfeb237e600 1759 * Enable the CMAC (Cipher-based Message Authentication Code) mode for block
wamae 0:7bfeb237e600 1760 * ciphers.
wamae 0:7bfeb237e600 1761 *
wamae 0:7bfeb237e600 1762 * Module: library/cmac.c
wamae 0:7bfeb237e600 1763 *
wamae 0:7bfeb237e600 1764 * Requires: MBEDTLS_AES_C or MBEDTLS_DES_C
wamae 0:7bfeb237e600 1765 *
wamae 0:7bfeb237e600 1766 */
wamae 0:7bfeb237e600 1767 #define MBEDTLS_CMAC_C
wamae 0:7bfeb237e600 1768
wamae 0:7bfeb237e600 1769 /**
wamae 0:7bfeb237e600 1770 * \def MBEDTLS_CTR_DRBG_C
wamae 0:7bfeb237e600 1771 *
wamae 0:7bfeb237e600 1772 * Enable the CTR_DRBG AES-256-based random generator.
wamae 0:7bfeb237e600 1773 *
wamae 0:7bfeb237e600 1774 * Module: library/ctr_drbg.c
wamae 0:7bfeb237e600 1775 * Caller:
wamae 0:7bfeb237e600 1776 *
wamae 0:7bfeb237e600 1777 * Requires: MBEDTLS_AES_C
wamae 0:7bfeb237e600 1778 *
wamae 0:7bfeb237e600 1779 * This module provides the CTR_DRBG AES-256 random number generator.
wamae 0:7bfeb237e600 1780 */
wamae 0:7bfeb237e600 1781 //#define MBEDTLS_CTR_DRBG_C
wamae 0:7bfeb237e600 1782
wamae 0:7bfeb237e600 1783 /**
wamae 0:7bfeb237e600 1784 * \def MBEDTLS_DEBUG_C
wamae 0:7bfeb237e600 1785 *
wamae 0:7bfeb237e600 1786 * Enable the debug functions.
wamae 0:7bfeb237e600 1787 *
wamae 0:7bfeb237e600 1788 * Module: library/debug.c
wamae 0:7bfeb237e600 1789 * Caller: library/ssl_cli.c
wamae 0:7bfeb237e600 1790 * library/ssl_srv.c
wamae 0:7bfeb237e600 1791 * library/ssl_tls.c
wamae 0:7bfeb237e600 1792 *
wamae 0:7bfeb237e600 1793 * This module provides debugging functions.
wamae 0:7bfeb237e600 1794 */
wamae 0:7bfeb237e600 1795 //#define MBEDTLS_DEBUG_C
wamae 0:7bfeb237e600 1796
wamae 0:7bfeb237e600 1797 /**
wamae 0:7bfeb237e600 1798 * \def MBEDTLS_DES_C
wamae 0:7bfeb237e600 1799 *
wamae 0:7bfeb237e600 1800 * Enable the DES block cipher.
wamae 0:7bfeb237e600 1801 *
wamae 0:7bfeb237e600 1802 * Module: library/des.c
wamae 0:7bfeb237e600 1803 * Caller: library/pem.c
wamae 0:7bfeb237e600 1804 * library/ssl_tls.c
wamae 0:7bfeb237e600 1805 *
wamae 0:7bfeb237e600 1806 * This module enables the following ciphersuites (if other requisites are
wamae 0:7bfeb237e600 1807 * enabled as well):
wamae 0:7bfeb237e600 1808 * MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1809 * MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1810 * MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1811 * MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1812 * MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1813 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1814 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1815 * MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1816 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1817 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
wamae 0:7bfeb237e600 1818 *
wamae 0:7bfeb237e600 1819 * PEM_PARSE uses DES/3DES for decrypting encrypted keys.
wamae 0:7bfeb237e600 1820 */
wamae 0:7bfeb237e600 1821 //#define MBEDTLS_DES_C
wamae 0:7bfeb237e600 1822
wamae 0:7bfeb237e600 1823 /**
wamae 0:7bfeb237e600 1824 * \def MBEDTLS_DHM_C
wamae 0:7bfeb237e600 1825 *
wamae 0:7bfeb237e600 1826 * Enable the Diffie-Hellman-Merkle module.
wamae 0:7bfeb237e600 1827 *
wamae 0:7bfeb237e600 1828 * Module: library/dhm.c
wamae 0:7bfeb237e600 1829 * Caller: library/ssl_cli.c
wamae 0:7bfeb237e600 1830 * library/ssl_srv.c
wamae 0:7bfeb237e600 1831 *
wamae 0:7bfeb237e600 1832 * This module is used by the following key exchanges:
wamae 0:7bfeb237e600 1833 * DHE-RSA, DHE-PSK
wamae 0:7bfeb237e600 1834 */
wamae 0:7bfeb237e600 1835 //#define MBEDTLS_DHM_C
wamae 0:7bfeb237e600 1836
wamae 0:7bfeb237e600 1837 /**
wamae 0:7bfeb237e600 1838 * \def MBEDTLS_ECDH_C
wamae 0:7bfeb237e600 1839 *
wamae 0:7bfeb237e600 1840 * Enable the elliptic curve Diffie-Hellman library.
wamae 0:7bfeb237e600 1841 *
wamae 0:7bfeb237e600 1842 * Module: library/ecdh.c
wamae 0:7bfeb237e600 1843 * Caller: library/ssl_cli.c
wamae 0:7bfeb237e600 1844 * library/ssl_srv.c
wamae 0:7bfeb237e600 1845 *
wamae 0:7bfeb237e600 1846 * This module is used by the following key exchanges:
wamae 0:7bfeb237e600 1847 * ECDHE-ECDSA, ECDHE-RSA, DHE-PSK
wamae 0:7bfeb237e600 1848 *
wamae 0:7bfeb237e600 1849 * Requires: MBEDTLS_ECP_C
wamae 0:7bfeb237e600 1850 */
wamae 0:7bfeb237e600 1851 //#define MBEDTLS_ECDH_C
wamae 0:7bfeb237e600 1852
wamae 0:7bfeb237e600 1853 /**
wamae 0:7bfeb237e600 1854 * \def MBEDTLS_ECDSA_C
wamae 0:7bfeb237e600 1855 *
wamae 0:7bfeb237e600 1856 * Enable the elliptic curve DSA library.
wamae 0:7bfeb237e600 1857 *
wamae 0:7bfeb237e600 1858 * Module: library/ecdsa.c
wamae 0:7bfeb237e600 1859 * Caller:
wamae 0:7bfeb237e600 1860 *
wamae 0:7bfeb237e600 1861 * This module is used by the following key exchanges:
wamae 0:7bfeb237e600 1862 * ECDHE-ECDSA
wamae 0:7bfeb237e600 1863 *
wamae 0:7bfeb237e600 1864 * Requires: MBEDTLS_ECP_C, MBEDTLS_ASN1_WRITE_C, MBEDTLS_ASN1_PARSE_C
wamae 0:7bfeb237e600 1865 */
wamae 0:7bfeb237e600 1866 //#define MBEDTLS_ECDSA_C
wamae 0:7bfeb237e600 1867
wamae 0:7bfeb237e600 1868 /**
wamae 0:7bfeb237e600 1869 * \def MBEDTLS_ECJPAKE_C
wamae 0:7bfeb237e600 1870 *
wamae 0:7bfeb237e600 1871 * Enable the elliptic curve J-PAKE library.
wamae 0:7bfeb237e600 1872 *
wamae 0:7bfeb237e600 1873 * \warning This is currently experimental. EC J-PAKE support is based on the
wamae 0:7bfeb237e600 1874 * Thread v1.0.0 specification; incompatible changes to the specification
wamae 0:7bfeb237e600 1875 * might still happen. For this reason, this is disabled by default.
wamae 0:7bfeb237e600 1876 *
wamae 0:7bfeb237e600 1877 * Module: library/ecjpake.c
wamae 0:7bfeb237e600 1878 * Caller:
wamae 0:7bfeb237e600 1879 *
wamae 0:7bfeb237e600 1880 * This module is used by the following key exchanges:
wamae 0:7bfeb237e600 1881 * ECJPAKE
wamae 0:7bfeb237e600 1882 *
wamae 0:7bfeb237e600 1883 * Requires: MBEDTLS_ECP_C, MBEDTLS_MD_C
wamae 0:7bfeb237e600 1884 */
wamae 0:7bfeb237e600 1885 //#define MBEDTLS_ECJPAKE_C
wamae 0:7bfeb237e600 1886
wamae 0:7bfeb237e600 1887 /**
wamae 0:7bfeb237e600 1888 * \def MBEDTLS_ECP_C
wamae 0:7bfeb237e600 1889 *
wamae 0:7bfeb237e600 1890 * Enable the elliptic curve over GF(p) library.
wamae 0:7bfeb237e600 1891 *
wamae 0:7bfeb237e600 1892 * Module: library/ecp.c
wamae 0:7bfeb237e600 1893 * Caller: library/ecdh.c
wamae 0:7bfeb237e600 1894 * library/ecdsa.c
wamae 0:7bfeb237e600 1895 * library/ecjpake.c
wamae 0:7bfeb237e600 1896 *
wamae 0:7bfeb237e600 1897 * Requires: MBEDTLS_BIGNUM_C and at least one MBEDTLS_ECP_DP_XXX_ENABLED
wamae 0:7bfeb237e600 1898 */
wamae 0:7bfeb237e600 1899 //#define MBEDTLS_ECP_C
wamae 0:7bfeb237e600 1900
wamae 0:7bfeb237e600 1901 /**
wamae 0:7bfeb237e600 1902 * \def MBEDTLS_ENTROPY_C
wamae 0:7bfeb237e600 1903 *
wamae 0:7bfeb237e600 1904 * Enable the platform-specific entropy code.
wamae 0:7bfeb237e600 1905 *
wamae 0:7bfeb237e600 1906 * Module: library/entropy.c
wamae 0:7bfeb237e600 1907 * Caller:
wamae 0:7bfeb237e600 1908 *
wamae 0:7bfeb237e600 1909 * Requires: MBEDTLS_SHA512_C or MBEDTLS_SHA256_C
wamae 0:7bfeb237e600 1910 *
wamae 0:7bfeb237e600 1911 * This module provides a generic entropy pool
wamae 0:7bfeb237e600 1912 */
wamae 0:7bfeb237e600 1913 //#define MBEDTLS_ENTROPY_C
wamae 0:7bfeb237e600 1914
wamae 0:7bfeb237e600 1915 /**
wamae 0:7bfeb237e600 1916 * \def MBEDTLS_ERROR_C
wamae 0:7bfeb237e600 1917 *
wamae 0:7bfeb237e600 1918 * Enable error code to error string conversion.
wamae 0:7bfeb237e600 1919 *
wamae 0:7bfeb237e600 1920 * Module: library/error.c
wamae 0:7bfeb237e600 1921 * Caller:
wamae 0:7bfeb237e600 1922 *
wamae 0:7bfeb237e600 1923 * This module enables mbedtls_strerror().
wamae 0:7bfeb237e600 1924 */
wamae 0:7bfeb237e600 1925 //#define MBEDTLS_ERROR_C
wamae 0:7bfeb237e600 1926
wamae 0:7bfeb237e600 1927 /**
wamae 0:7bfeb237e600 1928 * \def MBEDTLS_GCM_C
wamae 0:7bfeb237e600 1929 *
wamae 0:7bfeb237e600 1930 * Enable the Galois/Counter Mode (GCM) for AES.
wamae 0:7bfeb237e600 1931 *
wamae 0:7bfeb237e600 1932 * Module: library/gcm.c
wamae 0:7bfeb237e600 1933 *
wamae 0:7bfeb237e600 1934 * Requires: MBEDTLS_AES_C or MBEDTLS_CAMELLIA_C
wamae 0:7bfeb237e600 1935 *
wamae 0:7bfeb237e600 1936 * This module enables the AES-GCM and CAMELLIA-GCM ciphersuites, if other
wamae 0:7bfeb237e600 1937 * requisites are enabled as well.
wamae 0:7bfeb237e600 1938 */
wamae 0:7bfeb237e600 1939 //#define MBEDTLS_GCM_C
wamae 0:7bfeb237e600 1940
wamae 0:7bfeb237e600 1941 /**
wamae 0:7bfeb237e600 1942 * \def MBEDTLS_HAVEGE_C
wamae 0:7bfeb237e600 1943 *
wamae 0:7bfeb237e600 1944 * Enable the HAVEGE random generator.
wamae 0:7bfeb237e600 1945 *
wamae 0:7bfeb237e600 1946 * Warning: the HAVEGE random generator is not suitable for virtualized
wamae 0:7bfeb237e600 1947 * environments
wamae 0:7bfeb237e600 1948 *
wamae 0:7bfeb237e600 1949 * Warning: the HAVEGE random generator is dependent on timing and specific
wamae 0:7bfeb237e600 1950 * processor traits. It is therefore not advised to use HAVEGE as
wamae 0:7bfeb237e600 1951 * your applications primary random generator or primary entropy pool
wamae 0:7bfeb237e600 1952 * input. As a secondary input to your entropy pool, it IS able add
wamae 0:7bfeb237e600 1953 * the (limited) extra entropy it provides.
wamae 0:7bfeb237e600 1954 *
wamae 0:7bfeb237e600 1955 * Module: library/havege.c
wamae 0:7bfeb237e600 1956 * Caller:
wamae 0:7bfeb237e600 1957 *
wamae 0:7bfeb237e600 1958 * Requires: MBEDTLS_TIMING_C
wamae 0:7bfeb237e600 1959 *
wamae 0:7bfeb237e600 1960 * Uncomment to enable the HAVEGE random generator.
wamae 0:7bfeb237e600 1961 */
wamae 0:7bfeb237e600 1962 //#define MBEDTLS_HAVEGE_C
wamae 0:7bfeb237e600 1963
wamae 0:7bfeb237e600 1964 /**
wamae 0:7bfeb237e600 1965 * \def MBEDTLS_HMAC_DRBG_C
wamae 0:7bfeb237e600 1966 *
wamae 0:7bfeb237e600 1967 * Enable the HMAC_DRBG random generator.
wamae 0:7bfeb237e600 1968 *
wamae 0:7bfeb237e600 1969 * Module: library/hmac_drbg.c
wamae 0:7bfeb237e600 1970 * Caller:
wamae 0:7bfeb237e600 1971 *
wamae 0:7bfeb237e600 1972 * Requires: MBEDTLS_MD_C
wamae 0:7bfeb237e600 1973 *
wamae 0:7bfeb237e600 1974 * Uncomment to enable the HMAC_DRBG random number geerator.
wamae 0:7bfeb237e600 1975 */
wamae 0:7bfeb237e600 1976 //#define MBEDTLS_HMAC_DRBG_C
wamae 0:7bfeb237e600 1977
wamae 0:7bfeb237e600 1978 /**
wamae 0:7bfeb237e600 1979 * \def MBEDTLS_MD_C
wamae 0:7bfeb237e600 1980 *
wamae 0:7bfeb237e600 1981 * Enable the generic message digest layer.
wamae 0:7bfeb237e600 1982 *
wamae 0:7bfeb237e600 1983 * Module: library/md.c
wamae 0:7bfeb237e600 1984 * Caller:
wamae 0:7bfeb237e600 1985 *
wamae 0:7bfeb237e600 1986 * Uncomment to enable generic message digest wrappers.
wamae 0:7bfeb237e600 1987 */
wamae 0:7bfeb237e600 1988 //#define MBEDTLS_MD_C
wamae 0:7bfeb237e600 1989
wamae 0:7bfeb237e600 1990 /**
wamae 0:7bfeb237e600 1991 * \def MBEDTLS_MD2_C
wamae 0:7bfeb237e600 1992 *
wamae 0:7bfeb237e600 1993 * Enable the MD2 hash algorithm.
wamae 0:7bfeb237e600 1994 *
wamae 0:7bfeb237e600 1995 * Module: library/md2.c
wamae 0:7bfeb237e600 1996 * Caller:
wamae 0:7bfeb237e600 1997 *
wamae 0:7bfeb237e600 1998 * Uncomment to enable support for (rare) MD2-signed X.509 certs.
wamae 0:7bfeb237e600 1999 */
wamae 0:7bfeb237e600 2000 //#define MBEDTLS_MD2_C
wamae 0:7bfeb237e600 2001
wamae 0:7bfeb237e600 2002 /**
wamae 0:7bfeb237e600 2003 * \def MBEDTLS_MD4_C
wamae 0:7bfeb237e600 2004 *
wamae 0:7bfeb237e600 2005 * Enable the MD4 hash algorithm.
wamae 0:7bfeb237e600 2006 *
wamae 0:7bfeb237e600 2007 * Module: library/md4.c
wamae 0:7bfeb237e600 2008 * Caller:
wamae 0:7bfeb237e600 2009 *
wamae 0:7bfeb237e600 2010 * Uncomment to enable support for (rare) MD4-signed X.509 certs.
wamae 0:7bfeb237e600 2011 */
wamae 0:7bfeb237e600 2012 //#define MBEDTLS_MD4_C
wamae 0:7bfeb237e600 2013
wamae 0:7bfeb237e600 2014 /**
wamae 0:7bfeb237e600 2015 * \def MBEDTLS_MD5_C
wamae 0:7bfeb237e600 2016 *
wamae 0:7bfeb237e600 2017 * Enable the MD5 hash algorithm.
wamae 0:7bfeb237e600 2018 *
wamae 0:7bfeb237e600 2019 * Module: library/md5.c
wamae 0:7bfeb237e600 2020 * Caller: library/md.c
wamae 0:7bfeb237e600 2021 * library/pem.c
wamae 0:7bfeb237e600 2022 * library/ssl_tls.c
wamae 0:7bfeb237e600 2023 *
wamae 0:7bfeb237e600 2024 * This module is required for SSL/TLS and X.509.
wamae 0:7bfeb237e600 2025 * PEM_PARSE uses MD5 for decrypting encrypted keys.
wamae 0:7bfeb237e600 2026 */
wamae 0:7bfeb237e600 2027 //#define MBEDTLS_MD5_C
wamae 0:7bfeb237e600 2028
wamae 0:7bfeb237e600 2029 /**
wamae 0:7bfeb237e600 2030 * \def MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:7bfeb237e600 2031 *
wamae 0:7bfeb237e600 2032 * Enable the buffer allocator implementation that makes use of a (stack)
wamae 0:7bfeb237e600 2033 * based buffer to 'allocate' dynamic memory. (replaces calloc() and free()
wamae 0:7bfeb237e600 2034 * calls)
wamae 0:7bfeb237e600 2035 *
wamae 0:7bfeb237e600 2036 * Module: library/memory_buffer_alloc.c
wamae 0:7bfeb237e600 2037 *
wamae 0:7bfeb237e600 2038 * Requires: MBEDTLS_PLATFORM_C
wamae 0:7bfeb237e600 2039 * MBEDTLS_PLATFORM_MEMORY (to use it within mbed TLS)
wamae 0:7bfeb237e600 2040 *
wamae 0:7bfeb237e600 2041 * Enable this module to enable the buffer memory allocator.
wamae 0:7bfeb237e600 2042 */
wamae 0:7bfeb237e600 2043 //#define MBEDTLS_MEMORY_BUFFER_ALLOC_C
wamae 0:7bfeb237e600 2044
wamae 0:7bfeb237e600 2045 /**
wamae 0:7bfeb237e600 2046 * \def MBEDTLS_NET_C
wamae 0:7bfeb237e600 2047 *
wamae 0:7bfeb237e600 2048 * Enable the TCP and UDP over IPv6/IPv4 networking routines.
wamae 0:7bfeb237e600 2049 *
wamae 0:7bfeb237e600 2050 * \note This module only works on POSIX/Unix (including Linux, BSD and OS X)
wamae 0:7bfeb237e600 2051 * and Windows. For other platforms, you'll want to disable it, and write your
wamae 0:7bfeb237e600 2052 * own networking callbacks to be passed to \c mbedtls_ssl_set_bio().
wamae 0:7bfeb237e600 2053 *
wamae 0:7bfeb237e600 2054 * \note See also our Knowledge Base article about porting to a new
wamae 0:7bfeb237e600 2055 * environment:
wamae 0:7bfeb237e600 2056 * https://tls.mbed.org/kb/how-to/how-do-i-port-mbed-tls-to-a-new-environment-OS
wamae 0:7bfeb237e600 2057 *
wamae 0:7bfeb237e600 2058 * Module: library/net_sockets.c
wamae 0:7bfeb237e600 2059 *
wamae 0:7bfeb237e600 2060 * This module provides networking routines.
wamae 0:7bfeb237e600 2061 */
wamae 0:7bfeb237e600 2062 //#define MBEDTLS_NET_C
wamae 0:7bfeb237e600 2063
wamae 0:7bfeb237e600 2064 /**
wamae 0:7bfeb237e600 2065 * \def MBEDTLS_OID_C
wamae 0:7bfeb237e600 2066 *
wamae 0:7bfeb237e600 2067 * Enable the OID database.
wamae 0:7bfeb237e600 2068 *
wamae 0:7bfeb237e600 2069 * Module: library/oid.c
wamae 0:7bfeb237e600 2070 * Caller: library/asn1write.c
wamae 0:7bfeb237e600 2071 * library/pkcs5.c
wamae 0:7bfeb237e600 2072 * library/pkparse.c
wamae 0:7bfeb237e600 2073 * library/pkwrite.c
wamae 0:7bfeb237e600 2074 * library/rsa.c
wamae 0:7bfeb237e600 2075 * library/x509.c
wamae 0:7bfeb237e600 2076 * library/x509_create.c
wamae 0:7bfeb237e600 2077 * library/x509_crl.c
wamae 0:7bfeb237e600 2078 * library/x509_crt.c
wamae 0:7bfeb237e600 2079 * library/x509_csr.c
wamae 0:7bfeb237e600 2080 * library/x509write_crt.c
wamae 0:7bfeb237e600 2081 * library/x509write_csr.c
wamae 0:7bfeb237e600 2082 *
wamae 0:7bfeb237e600 2083 * This modules translates between OIDs and internal values.
wamae 0:7bfeb237e600 2084 */
wamae 0:7bfeb237e600 2085 //#define MBEDTLS_OID_C
wamae 0:7bfeb237e600 2086
wamae 0:7bfeb237e600 2087 /**
wamae 0:7bfeb237e600 2088 * \def MBEDTLS_PADLOCK_C
wamae 0:7bfeb237e600 2089 *
wamae 0:7bfeb237e600 2090 * Enable VIA Padlock support on x86.
wamae 0:7bfeb237e600 2091 *
wamae 0:7bfeb237e600 2092 * Module: library/padlock.c
wamae 0:7bfeb237e600 2093 * Caller: library/aes.c
wamae 0:7bfeb237e600 2094 *
wamae 0:7bfeb237e600 2095 * Requires: MBEDTLS_HAVE_ASM
wamae 0:7bfeb237e600 2096 *
wamae 0:7bfeb237e600 2097 * This modules adds support for the VIA PadLock on x86.
wamae 0:7bfeb237e600 2098 */
wamae 0:7bfeb237e600 2099 //#define MBEDTLS_PADLOCK_C
wamae 0:7bfeb237e600 2100
wamae 0:7bfeb237e600 2101 /**
wamae 0:7bfeb237e600 2102 * \def MBEDTLS_PEM_PARSE_C
wamae 0:7bfeb237e600 2103 *
wamae 0:7bfeb237e600 2104 * Enable PEM decoding / parsing.
wamae 0:7bfeb237e600 2105 *
wamae 0:7bfeb237e600 2106 * Module: library/pem.c
wamae 0:7bfeb237e600 2107 * Caller: library/dhm.c
wamae 0:7bfeb237e600 2108 * library/pkparse.c
wamae 0:7bfeb237e600 2109 * library/x509_crl.c
wamae 0:7bfeb237e600 2110 * library/x509_crt.c
wamae 0:7bfeb237e600 2111 * library/x509_csr.c
wamae 0:7bfeb237e600 2112 *
wamae 0:7bfeb237e600 2113 * Requires: MBEDTLS_BASE64_C
wamae 0:7bfeb237e600 2114 *
wamae 0:7bfeb237e600 2115 * This modules adds support for decoding / parsing PEM files.
wamae 0:7bfeb237e600 2116 */
wamae 0:7bfeb237e600 2117 //#define MBEDTLS_PEM_PARSE_C
wamae 0:7bfeb237e600 2118
wamae 0:7bfeb237e600 2119 /**
wamae 0:7bfeb237e600 2120 * \def MBEDTLS_PEM_WRITE_C
wamae 0:7bfeb237e600 2121 *
wamae 0:7bfeb237e600 2122 * Enable PEM encoding / writing.
wamae 0:7bfeb237e600 2123 *
wamae 0:7bfeb237e600 2124 * Module: library/pem.c
wamae 0:7bfeb237e600 2125 * Caller: library/pkwrite.c
wamae 0:7bfeb237e600 2126 * library/x509write_crt.c
wamae 0:7bfeb237e600 2127 * library/x509write_csr.c
wamae 0:7bfeb237e600 2128 *
wamae 0:7bfeb237e600 2129 * Requires: MBEDTLS_BASE64_C
wamae 0:7bfeb237e600 2130 *
wamae 0:7bfeb237e600 2131 * This modules adds support for encoding / writing PEM files.
wamae 0:7bfeb237e600 2132 */
wamae 0:7bfeb237e600 2133 //#define MBEDTLS_PEM_WRITE_C
wamae 0:7bfeb237e600 2134
wamae 0:7bfeb237e600 2135 /**
wamae 0:7bfeb237e600 2136 * \def MBEDTLS_PK_C
wamae 0:7bfeb237e600 2137 *
wamae 0:7bfeb237e600 2138 * Enable the generic public (asymetric) key layer.
wamae 0:7bfeb237e600 2139 *
wamae 0:7bfeb237e600 2140 * Module: library/pk.c
wamae 0:7bfeb237e600 2141 * Caller: library/ssl_tls.c
wamae 0:7bfeb237e600 2142 * library/ssl_cli.c
wamae 0:7bfeb237e600 2143 * library/ssl_srv.c
wamae 0:7bfeb237e600 2144 *
wamae 0:7bfeb237e600 2145 * Requires: MBEDTLS_RSA_C or MBEDTLS_ECP_C
wamae 0:7bfeb237e600 2146 *
wamae 0:7bfeb237e600 2147 * Uncomment to enable generic public key wrappers.
wamae 0:7bfeb237e600 2148 */
wamae 0:7bfeb237e600 2149 //#define MBEDTLS_PK_C
wamae 0:7bfeb237e600 2150
wamae 0:7bfeb237e600 2151 /**
wamae 0:7bfeb237e600 2152 * \def MBEDTLS_PK_PARSE_C
wamae 0:7bfeb237e600 2153 *
wamae 0:7bfeb237e600 2154 * Enable the generic public (asymetric) key parser.
wamae 0:7bfeb237e600 2155 *
wamae 0:7bfeb237e600 2156 * Module: library/pkparse.c
wamae 0:7bfeb237e600 2157 * Caller: library/x509_crt.c
wamae 0:7bfeb237e600 2158 * library/x509_csr.c
wamae 0:7bfeb237e600 2159 *
wamae 0:7bfeb237e600 2160 * Requires: MBEDTLS_PK_C
wamae 0:7bfeb237e600 2161 *
wamae 0:7bfeb237e600 2162 * Uncomment to enable generic public key parse functions.
wamae 0:7bfeb237e600 2163 */
wamae 0:7bfeb237e600 2164 //#define MBEDTLS_PK_PARSE_C
wamae 0:7bfeb237e600 2165
wamae 0:7bfeb237e600 2166 /**
wamae 0:7bfeb237e600 2167 * \def MBEDTLS_PK_WRITE_C
wamae 0:7bfeb237e600 2168 *
wamae 0:7bfeb237e600 2169 * Enable the generic public (asymetric) key writer.
wamae 0:7bfeb237e600 2170 *
wamae 0:7bfeb237e600 2171 * Module: library/pkwrite.c
wamae 0:7bfeb237e600 2172 * Caller: library/x509write.c
wamae 0:7bfeb237e600 2173 *
wamae 0:7bfeb237e600 2174 * Requires: MBEDTLS_PK_C
wamae 0:7bfeb237e600 2175 *
wamae 0:7bfeb237e600 2176 * Uncomment to enable generic public key write functions.
wamae 0:7bfeb237e600 2177 */
wamae 0:7bfeb237e600 2178 //#define MBEDTLS_PK_WRITE_C
wamae 0:7bfeb237e600 2179
wamae 0:7bfeb237e600 2180 /**
wamae 0:7bfeb237e600 2181 * \def MBEDTLS_PKCS5_C
wamae 0:7bfeb237e600 2182 *
wamae 0:7bfeb237e600 2183 * Enable PKCS#5 functions.
wamae 0:7bfeb237e600 2184 *
wamae 0:7bfeb237e600 2185 * Module: library/pkcs5.c
wamae 0:7bfeb237e600 2186 *
wamae 0:7bfeb237e600 2187 * Requires: MBEDTLS_MD_C
wamae 0:7bfeb237e600 2188 *
wamae 0:7bfeb237e600 2189 * This module adds support for the PKCS#5 functions.
wamae 0:7bfeb237e600 2190 */
wamae 0:7bfeb237e600 2191 //#define MBEDTLS_PKCS5_C
wamae 0:7bfeb237e600 2192
wamae 0:7bfeb237e600 2193 /**
wamae 0:7bfeb237e600 2194 * \def MBEDTLS_PKCS11_C
wamae 0:7bfeb237e600 2195 *
wamae 0:7bfeb237e600 2196 * Enable wrapper for PKCS#11 smartcard support.
wamae 0:7bfeb237e600 2197 *
wamae 0:7bfeb237e600 2198 * Module: library/pkcs11.c
wamae 0:7bfeb237e600 2199 * Caller: library/pk.c
wamae 0:7bfeb237e600 2200 *
wamae 0:7bfeb237e600 2201 * Requires: MBEDTLS_PK_C
wamae 0:7bfeb237e600 2202 *
wamae 0:7bfeb237e600 2203 * This module enables SSL/TLS PKCS #11 smartcard support.
wamae 0:7bfeb237e600 2204 * Requires the presence of the PKCS#11 helper library (libpkcs11-helper)
wamae 0:7bfeb237e600 2205 */
wamae 0:7bfeb237e600 2206 //#define MBEDTLS_PKCS11_C
wamae 0:7bfeb237e600 2207
wamae 0:7bfeb237e600 2208 /**
wamae 0:7bfeb237e600 2209 * \def MBEDTLS_PKCS12_C
wamae 0:7bfeb237e600 2210 *
wamae 0:7bfeb237e600 2211 * Enable PKCS#12 PBE functions.
wamae 0:7bfeb237e600 2212 * Adds algorithms for parsing PKCS#8 encrypted private keys
wamae 0:7bfeb237e600 2213 *
wamae 0:7bfeb237e600 2214 * Module: library/pkcs12.c
wamae 0:7bfeb237e600 2215 * Caller: library/pkparse.c
wamae 0:7bfeb237e600 2216 *
wamae 0:7bfeb237e600 2217 * Requires: MBEDTLS_ASN1_PARSE_C, MBEDTLS_CIPHER_C, MBEDTLS_MD_C
wamae 0:7bfeb237e600 2218 * Can use: MBEDTLS_ARC4_C
wamae 0:7bfeb237e600 2219 *
wamae 0:7bfeb237e600 2220 * This module enables PKCS#12 functions.
wamae 0:7bfeb237e600 2221 */
wamae 0:7bfeb237e600 2222 //#define MBEDTLS_PKCS12_C
wamae 0:7bfeb237e600 2223
wamae 0:7bfeb237e600 2224 /**
wamae 0:7bfeb237e600 2225 * \def MBEDTLS_PLATFORM_C
wamae 0:7bfeb237e600 2226 *
wamae 0:7bfeb237e600 2227 * Enable the platform abstraction layer that allows you to re-assign
wamae 0:7bfeb237e600 2228 * functions like calloc(), free(), snprintf(), printf(), fprintf(), exit().
wamae 0:7bfeb237e600 2229 *
wamae 0:7bfeb237e600 2230 * Enabling MBEDTLS_PLATFORM_C enables to use of MBEDTLS_PLATFORM_XXX_ALT
wamae 0:7bfeb237e600 2231 * or MBEDTLS_PLATFORM_XXX_MACRO directives, allowing the functions mentioned
wamae 0:7bfeb237e600 2232 * above to be specified at runtime or compile time respectively.
wamae 0:7bfeb237e600 2233 *
wamae 0:7bfeb237e600 2234 * \note This abstraction layer must be enabled on Windows (including MSYS2)
wamae 0:7bfeb237e600 2235 * as other module rely on it for a fixed snprintf implementation.
wamae 0:7bfeb237e600 2236 *
wamae 0:7bfeb237e600 2237 * Module: library/platform.c
wamae 0:7bfeb237e600 2238 * Caller: Most other .c files
wamae 0:7bfeb237e600 2239 *
wamae 0:7bfeb237e600 2240 * This module enables abstraction of common (libc) functions.
wamae 0:7bfeb237e600 2241 */
wamae 0:7bfeb237e600 2242 //#define MBEDTLS_PLATFORM_C
wamae 0:7bfeb237e600 2243
wamae 0:7bfeb237e600 2244 /**
wamae 0:7bfeb237e600 2245 * \def MBEDTLS_RIPEMD160_C
wamae 0:7bfeb237e600 2246 *
wamae 0:7bfeb237e600 2247 * Enable the RIPEMD-160 hash algorithm.
wamae 0:7bfeb237e600 2248 *
wamae 0:7bfeb237e600 2249 * Module: library/ripemd160.c
wamae 0:7bfeb237e600 2250 * Caller: library/md.c
wamae 0:7bfeb237e600 2251 *
wamae 0:7bfeb237e600 2252 */
wamae 0:7bfeb237e600 2253 //#define MBEDTLS_RIPEMD160_C
wamae 0:7bfeb237e600 2254
wamae 0:7bfeb237e600 2255 /**
wamae 0:7bfeb237e600 2256 * \def MBEDTLS_RSA_C
wamae 0:7bfeb237e600 2257 *
wamae 0:7bfeb237e600 2258 * Enable the RSA public-key cryptosystem.
wamae 0:7bfeb237e600 2259 *
wamae 0:7bfeb237e600 2260 * Module: library/rsa.c
wamae 0:7bfeb237e600 2261 * Caller: library/ssl_cli.c
wamae 0:7bfeb237e600 2262 * library/ssl_srv.c
wamae 0:7bfeb237e600 2263 * library/ssl_tls.c
wamae 0:7bfeb237e600 2264 * library/x509.c
wamae 0:7bfeb237e600 2265 *
wamae 0:7bfeb237e600 2266 * This module is used by the following key exchanges:
wamae 0:7bfeb237e600 2267 * RSA, DHE-RSA, ECDHE-RSA, RSA-PSK
wamae 0:7bfeb237e600 2268 *
wamae 0:7bfeb237e600 2269 * Requires: MBEDTLS_BIGNUM_C, MBEDTLS_OID_C
wamae 0:7bfeb237e600 2270 */
wamae 0:7bfeb237e600 2271 //#define MBEDTLS_RSA_C
wamae 0:7bfeb237e600 2272
wamae 0:7bfeb237e600 2273 /**
wamae 0:7bfeb237e600 2274 * \def MBEDTLS_SHA1_C
wamae 0:7bfeb237e600 2275 *
wamae 0:7bfeb237e600 2276 * Enable the SHA1 cryptographic hash algorithm.
wamae 0:7bfeb237e600 2277 *
wamae 0:7bfeb237e600 2278 * Module: library/sha1.c
wamae 0:7bfeb237e600 2279 * Caller: library/md.c
wamae 0:7bfeb237e600 2280 * library/ssl_cli.c
wamae 0:7bfeb237e600 2281 * library/ssl_srv.c
wamae 0:7bfeb237e600 2282 * library/ssl_tls.c
wamae 0:7bfeb237e600 2283 * library/x509write_crt.c
wamae 0:7bfeb237e600 2284 *
wamae 0:7bfeb237e600 2285 * This module is required for SSL/TLS up to version 1.1, for TLS 1.2
wamae 0:7bfeb237e600 2286 * depending on the handshake parameters, and for SHA1-signed certificates.
wamae 0:7bfeb237e600 2287 */
wamae 0:7bfeb237e600 2288 //#define MBEDTLS_SHA1_C
wamae 0:7bfeb237e600 2289
wamae 0:7bfeb237e600 2290 /**
wamae 0:7bfeb237e600 2291 * \def MBEDTLS_SHA256_C
wamae 0:7bfeb237e600 2292 *
wamae 0:7bfeb237e600 2293 * Enable the SHA-224 and SHA-256 cryptographic hash algorithms.
wamae 0:7bfeb237e600 2294 *
wamae 0:7bfeb237e600 2295 * Module: library/sha256.c
wamae 0:7bfeb237e600 2296 * Caller: library/entropy.c
wamae 0:7bfeb237e600 2297 * library/md.c
wamae 0:7bfeb237e600 2298 * library/ssl_cli.c
wamae 0:7bfeb237e600 2299 * library/ssl_srv.c
wamae 0:7bfeb237e600 2300 * library/ssl_tls.c
wamae 0:7bfeb237e600 2301 *
wamae 0:7bfeb237e600 2302 * This module adds support for SHA-224 and SHA-256.
wamae 0:7bfeb237e600 2303 * This module is required for the SSL/TLS 1.2 PRF function.
wamae 0:7bfeb237e600 2304 */
wamae 0:7bfeb237e600 2305 //#define MBEDTLS_SHA256_C
wamae 0:7bfeb237e600 2306
wamae 0:7bfeb237e600 2307 /**
wamae 0:7bfeb237e600 2308 * \def MBEDTLS_SHA512_C
wamae 0:7bfeb237e600 2309 *
wamae 0:7bfeb237e600 2310 * Enable the SHA-384 and SHA-512 cryptographic hash algorithms.
wamae 0:7bfeb237e600 2311 *
wamae 0:7bfeb237e600 2312 * Module: library/sha512.c
wamae 0:7bfeb237e600 2313 * Caller: library/entropy.c
wamae 0:7bfeb237e600 2314 * library/md.c
wamae 0:7bfeb237e600 2315 * library/ssl_cli.c
wamae 0:7bfeb237e600 2316 * library/ssl_srv.c
wamae 0:7bfeb237e600 2317 *
wamae 0:7bfeb237e600 2318 * This module adds support for SHA-384 and SHA-512.
wamae 0:7bfeb237e600 2319 */
wamae 0:7bfeb237e600 2320 //#define MBEDTLS_SHA512_C
wamae 0:7bfeb237e600 2321
wamae 0:7bfeb237e600 2322 /**
wamae 0:7bfeb237e600 2323 * \def MBEDTLS_SSL_CACHE_C
wamae 0:7bfeb237e600 2324 *
wamae 0:7bfeb237e600 2325 * Enable simple SSL cache implementation.
wamae 0:7bfeb237e600 2326 *
wamae 0:7bfeb237e600 2327 * Module: library/ssl_cache.c
wamae 0:7bfeb237e600 2328 * Caller:
wamae 0:7bfeb237e600 2329 *
wamae 0:7bfeb237e600 2330 * Requires: MBEDTLS_SSL_CACHE_C
wamae 0:7bfeb237e600 2331 */
wamae 0:7bfeb237e600 2332 //#define MBEDTLS_SSL_CACHE_C
wamae 0:7bfeb237e600 2333
wamae 0:7bfeb237e600 2334 /**
wamae 0:7bfeb237e600 2335 * \def MBEDTLS_SSL_COOKIE_C
wamae 0:7bfeb237e600 2336 *
wamae 0:7bfeb237e600 2337 * Enable basic implementation of DTLS cookies for hello verification.
wamae 0:7bfeb237e600 2338 *
wamae 0:7bfeb237e600 2339 * Module: library/ssl_cookie.c
wamae 0:7bfeb237e600 2340 * Caller:
wamae 0:7bfeb237e600 2341 */
wamae 0:7bfeb237e600 2342 //#define MBEDTLS_SSL_COOKIE_C
wamae 0:7bfeb237e600 2343
wamae 0:7bfeb237e600 2344 /**
wamae 0:7bfeb237e600 2345 * \def MBEDTLS_SSL_TICKET_C
wamae 0:7bfeb237e600 2346 *
wamae 0:7bfeb237e600 2347 * Enable an implementation of TLS server-side callbacks for session tickets.
wamae 0:7bfeb237e600 2348 *
wamae 0:7bfeb237e600 2349 * Module: library/ssl_ticket.c
wamae 0:7bfeb237e600 2350 * Caller:
wamae 0:7bfeb237e600 2351 *
wamae 0:7bfeb237e600 2352 * Requires: MBEDTLS_CIPHER_C
wamae 0:7bfeb237e600 2353 */
wamae 0:7bfeb237e600 2354 //#define MBEDTLS_SSL_TICKET_C
wamae 0:7bfeb237e600 2355
wamae 0:7bfeb237e600 2356 /**
wamae 0:7bfeb237e600 2357 * \def MBEDTLS_SSL_CLI_C
wamae 0:7bfeb237e600 2358 *
wamae 0:7bfeb237e600 2359 * Enable the SSL/TLS client code.
wamae 0:7bfeb237e600 2360 *
wamae 0:7bfeb237e600 2361 * Module: library/ssl_cli.c
wamae 0:7bfeb237e600 2362 * Caller:
wamae 0:7bfeb237e600 2363 *
wamae 0:7bfeb237e600 2364 * Requires: MBEDTLS_SSL_TLS_C
wamae 0:7bfeb237e600 2365 *
wamae 0:7bfeb237e600 2366 * This module is required for SSL/TLS client support.
wamae 0:7bfeb237e600 2367 */
wamae 0:7bfeb237e600 2368 //#define MBEDTLS_SSL_CLI_C
wamae 0:7bfeb237e600 2369
wamae 0:7bfeb237e600 2370 /**
wamae 0:7bfeb237e600 2371 * \def MBEDTLS_SSL_SRV_C
wamae 0:7bfeb237e600 2372 *
wamae 0:7bfeb237e600 2373 * Enable the SSL/TLS server code.
wamae 0:7bfeb237e600 2374 *
wamae 0:7bfeb237e600 2375 * Module: library/ssl_srv.c
wamae 0:7bfeb237e600 2376 * Caller:
wamae 0:7bfeb237e600 2377 *
wamae 0:7bfeb237e600 2378 * Requires: MBEDTLS_SSL_TLS_C
wamae 0:7bfeb237e600 2379 *
wamae 0:7bfeb237e600 2380 * This module is required for SSL/TLS server support.
wamae 0:7bfeb237e600 2381 */
wamae 0:7bfeb237e600 2382 //#define MBEDTLS_SSL_SRV_C
wamae 0:7bfeb237e600 2383
wamae 0:7bfeb237e600 2384 /**
wamae 0:7bfeb237e600 2385 * \def MBEDTLS_SSL_TLS_C
wamae 0:7bfeb237e600 2386 *
wamae 0:7bfeb237e600 2387 * Enable the generic SSL/TLS code.
wamae 0:7bfeb237e600 2388 *
wamae 0:7bfeb237e600 2389 * Module: library/ssl_tls.c
wamae 0:7bfeb237e600 2390 * Caller: library/ssl_cli.c
wamae 0:7bfeb237e600 2391 * library/ssl_srv.c
wamae 0:7bfeb237e600 2392 *
wamae 0:7bfeb237e600 2393 * Requires: MBEDTLS_CIPHER_C, MBEDTLS_MD_C
wamae 0:7bfeb237e600 2394 * and at least one of the MBEDTLS_SSL_PROTO_XXX defines
wamae 0:7bfeb237e600 2395 *
wamae 0:7bfeb237e600 2396 * This module is required for SSL/TLS.
wamae 0:7bfeb237e600 2397 */
wamae 0:7bfeb237e600 2398 //#define MBEDTLS_SSL_TLS_C
wamae 0:7bfeb237e600 2399
wamae 0:7bfeb237e600 2400 /**
wamae 0:7bfeb237e600 2401 * \def MBEDTLS_THREADING_C
wamae 0:7bfeb237e600 2402 *
wamae 0:7bfeb237e600 2403 * Enable the threading abstraction layer.
wamae 0:7bfeb237e600 2404 * By default mbed TLS assumes it is used in a non-threaded environment or that
wamae 0:7bfeb237e600 2405 * contexts are not shared between threads. If you do intend to use contexts
wamae 0:7bfeb237e600 2406 * between threads, you will need to enable this layer to prevent race
wamae 0:7bfeb237e600 2407 * conditions. See also our Knowledge Base article about threading:
wamae 0:7bfeb237e600 2408 * https://tls.mbed.org/kb/development/thread-safety-and-multi-threading
wamae 0:7bfeb237e600 2409 *
wamae 0:7bfeb237e600 2410 * Module: library/threading.c
wamae 0:7bfeb237e600 2411 *
wamae 0:7bfeb237e600 2412 * This allows different threading implementations (self-implemented or
wamae 0:7bfeb237e600 2413 * provided).
wamae 0:7bfeb237e600 2414 *
wamae 0:7bfeb237e600 2415 * You will have to enable either MBEDTLS_THREADING_ALT or
wamae 0:7bfeb237e600 2416 * MBEDTLS_THREADING_PTHREAD.
wamae 0:7bfeb237e600 2417 *
wamae 0:7bfeb237e600 2418 * Enable this layer to allow use of mutexes within mbed TLS
wamae 0:7bfeb237e600 2419 */
wamae 0:7bfeb237e600 2420 //#define MBEDTLS_THREADING_C
wamae 0:7bfeb237e600 2421
wamae 0:7bfeb237e600 2422 /**
wamae 0:7bfeb237e600 2423 * \def MBEDTLS_TIMING_C
wamae 0:7bfeb237e600 2424 *
wamae 0:7bfeb237e600 2425 * Enable the semi-portable timing interface.
wamae 0:7bfeb237e600 2426 *
wamae 0:7bfeb237e600 2427 * \note The provided implementation only works on POSIX/Unix (including Linux,
wamae 0:7bfeb237e600 2428 * BSD and OS X) and Windows. On other platforms, you can either disable that
wamae 0:7bfeb237e600 2429 * module and provide your own implementations of the callbacks needed by
wamae 0:7bfeb237e600 2430 * \c mbedtls_ssl_set_timer_cb() for DTLS, or leave it enabled and provide
wamae 0:7bfeb237e600 2431 * your own implementation of the whole module by setting
wamae 0:7bfeb237e600 2432 * \c MBEDTLS_TIMING_ALT in the current file.
wamae 0:7bfeb237e600 2433 *
wamae 0:7bfeb237e600 2434 * \note See also our Knowledge Base article about porting to a new
wamae 0:7bfeb237e600 2435 * environment:
wamae 0:7bfeb237e600 2436 * https://tls.mbed.org/kb/how-to/how-do-i-port-mbed-tls-to-a-new-environment-OS
wamae 0:7bfeb237e600 2437 *
wamae 0:7bfeb237e600 2438 * Module: library/timing.c
wamae 0:7bfeb237e600 2439 * Caller: library/havege.c
wamae 0:7bfeb237e600 2440 *
wamae 0:7bfeb237e600 2441 * This module is used by the HAVEGE random number generator.
wamae 0:7bfeb237e600 2442 */
wamae 0:7bfeb237e600 2443 //#define MBEDTLS_TIMING_C
wamae 0:7bfeb237e600 2444
wamae 0:7bfeb237e600 2445 /**
wamae 0:7bfeb237e600 2446 * \def MBEDTLS_VERSION_C
wamae 0:7bfeb237e600 2447 *
wamae 0:7bfeb237e600 2448 * Enable run-time version information.
wamae 0:7bfeb237e600 2449 *
wamae 0:7bfeb237e600 2450 * Module: library/version.c
wamae 0:7bfeb237e600 2451 *
wamae 0:7bfeb237e600 2452 * This module provides run-time version information.
wamae 0:7bfeb237e600 2453 */
wamae 0:7bfeb237e600 2454 //#define MBEDTLS_VERSION_C
wamae 0:7bfeb237e600 2455
wamae 0:7bfeb237e600 2456 /**
wamae 0:7bfeb237e600 2457 * \def MBEDTLS_X509_USE_C
wamae 0:7bfeb237e600 2458 *
wamae 0:7bfeb237e600 2459 * Enable X.509 core for using certificates.
wamae 0:7bfeb237e600 2460 *
wamae 0:7bfeb237e600 2461 * Module: library/x509.c
wamae 0:7bfeb237e600 2462 * Caller: library/x509_crl.c
wamae 0:7bfeb237e600 2463 * library/x509_crt.c
wamae 0:7bfeb237e600 2464 * library/x509_csr.c
wamae 0:7bfeb237e600 2465 *
wamae 0:7bfeb237e600 2466 * Requires: MBEDTLS_ASN1_PARSE_C, MBEDTLS_BIGNUM_C, MBEDTLS_OID_C,
wamae 0:7bfeb237e600 2467 * MBEDTLS_PK_PARSE_C
wamae 0:7bfeb237e600 2468 *
wamae 0:7bfeb237e600 2469 * This module is required for the X.509 parsing modules.
wamae 0:7bfeb237e600 2470 */
wamae 0:7bfeb237e600 2471 //#define MBEDTLS_X509_USE_C
wamae 0:7bfeb237e600 2472
wamae 0:7bfeb237e600 2473 /**
wamae 0:7bfeb237e600 2474 * \def MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 2475 *
wamae 0:7bfeb237e600 2476 * Enable X.509 certificate parsing.
wamae 0:7bfeb237e600 2477 *
wamae 0:7bfeb237e600 2478 * Module: library/x509_crt.c
wamae 0:7bfeb237e600 2479 * Caller: library/ssl_cli.c
wamae 0:7bfeb237e600 2480 * library/ssl_srv.c
wamae 0:7bfeb237e600 2481 * library/ssl_tls.c
wamae 0:7bfeb237e600 2482 *
wamae 0:7bfeb237e600 2483 * Requires: MBEDTLS_X509_USE_C
wamae 0:7bfeb237e600 2484 *
wamae 0:7bfeb237e600 2485 * This module is required for X.509 certificate parsing.
wamae 0:7bfeb237e600 2486 */
wamae 0:7bfeb237e600 2487 //#define MBEDTLS_X509_CRT_PARSE_C
wamae 0:7bfeb237e600 2488
wamae 0:7bfeb237e600 2489 /**
wamae 0:7bfeb237e600 2490 * \def MBEDTLS_X509_CRL_PARSE_C
wamae 0:7bfeb237e600 2491 *
wamae 0:7bfeb237e600 2492 * Enable X.509 CRL parsing.
wamae 0:7bfeb237e600 2493 *
wamae 0:7bfeb237e600 2494 * Module: library/x509_crl.c
wamae 0:7bfeb237e600 2495 * Caller: library/x509_crt.c
wamae 0:7bfeb237e600 2496 *
wamae 0:7bfeb237e600 2497 * Requires: MBEDTLS_X509_USE_C
wamae 0:7bfeb237e600 2498 *
wamae 0:7bfeb237e600 2499 * This module is required for X.509 CRL parsing.
wamae 0:7bfeb237e600 2500 */
wamae 0:7bfeb237e600 2501 //#define MBEDTLS_X509_CRL_PARSE_C
wamae 0:7bfeb237e600 2502
wamae 0:7bfeb237e600 2503 /**
wamae 0:7bfeb237e600 2504 * \def MBEDTLS_X509_CSR_PARSE_C
wamae 0:7bfeb237e600 2505 *
wamae 0:7bfeb237e600 2506 * Enable X.509 Certificate Signing Request (CSR) parsing.
wamae 0:7bfeb237e600 2507 *
wamae 0:7bfeb237e600 2508 * Module: library/x509_csr.c
wamae 0:7bfeb237e600 2509 * Caller: library/x509_crt_write.c
wamae 0:7bfeb237e600 2510 *
wamae 0:7bfeb237e600 2511 * Requires: MBEDTLS_X509_USE_C
wamae 0:7bfeb237e600 2512 *
wamae 0:7bfeb237e600 2513 * This module is used for reading X.509 certificate request.
wamae 0:7bfeb237e600 2514 */
wamae 0:7bfeb237e600 2515 //#define MBEDTLS_X509_CSR_PARSE_C
wamae 0:7bfeb237e600 2516
wamae 0:7bfeb237e600 2517 /**
wamae 0:7bfeb237e600 2518 * \def MBEDTLS_X509_CREATE_C
wamae 0:7bfeb237e600 2519 *
wamae 0:7bfeb237e600 2520 * Enable X.509 core for creating certificates.
wamae 0:7bfeb237e600 2521 *
wamae 0:7bfeb237e600 2522 * Module: library/x509_create.c
wamae 0:7bfeb237e600 2523 *
wamae 0:7bfeb237e600 2524 * Requires: MBEDTLS_BIGNUM_C, MBEDTLS_OID_C, MBEDTLS_PK_WRITE_C
wamae 0:7bfeb237e600 2525 *
wamae 0:7bfeb237e600 2526 * This module is the basis for creating X.509 certificates and CSRs.
wamae 0:7bfeb237e600 2527 */
wamae 0:7bfeb237e600 2528 //#define MBEDTLS_X509_CREATE_C
wamae 0:7bfeb237e600 2529
wamae 0:7bfeb237e600 2530 /**
wamae 0:7bfeb237e600 2531 * \def MBEDTLS_X509_CRT_WRITE_C
wamae 0:7bfeb237e600 2532 *
wamae 0:7bfeb237e600 2533 * Enable creating X.509 certificates.
wamae 0:7bfeb237e600 2534 *
wamae 0:7bfeb237e600 2535 * Module: library/x509_crt_write.c
wamae 0:7bfeb237e600 2536 *
wamae 0:7bfeb237e600 2537 * Requires: MBEDTLS_X509_CREATE_C
wamae 0:7bfeb237e600 2538 *
wamae 0:7bfeb237e600 2539 * This module is required for X.509 certificate creation.
wamae 0:7bfeb237e600 2540 */
wamae 0:7bfeb237e600 2541 //#define MBEDTLS_X509_CRT_WRITE_C
wamae 0:7bfeb237e600 2542
wamae 0:7bfeb237e600 2543 /**
wamae 0:7bfeb237e600 2544 * \def MBEDTLS_X509_CSR_WRITE_C
wamae 0:7bfeb237e600 2545 *
wamae 0:7bfeb237e600 2546 * Enable creating X.509 Certificate Signing Requests (CSR).
wamae 0:7bfeb237e600 2547 *
wamae 0:7bfeb237e600 2548 * Module: library/x509_csr_write.c
wamae 0:7bfeb237e600 2549 *
wamae 0:7bfeb237e600 2550 * Requires: MBEDTLS_X509_CREATE_C
wamae 0:7bfeb237e600 2551 *
wamae 0:7bfeb237e600 2552 * This module is required for X.509 certificate request writing.
wamae 0:7bfeb237e600 2553 */
wamae 0:7bfeb237e600 2554 //#define MBEDTLS_X509_CSR_WRITE_C
wamae 0:7bfeb237e600 2555
wamae 0:7bfeb237e600 2556 /**
wamae 0:7bfeb237e600 2557 * \def MBEDTLS_XTEA_C
wamae 0:7bfeb237e600 2558 *
wamae 0:7bfeb237e600 2559 * Enable the XTEA block cipher.
wamae 0:7bfeb237e600 2560 *
wamae 0:7bfeb237e600 2561 * Module: library/xtea.c
wamae 0:7bfeb237e600 2562 * Caller:
wamae 0:7bfeb237e600 2563 */
wamae 0:7bfeb237e600 2564 //#define MBEDTLS_XTEA_C
wamae 0:7bfeb237e600 2565
wamae 0:7bfeb237e600 2566 /* \} name SECTION: mbed TLS modules */
wamae 0:7bfeb237e600 2567
wamae 0:7bfeb237e600 2568 /**
wamae 0:7bfeb237e600 2569 * \name SECTION: Module configuration options
wamae 0:7bfeb237e600 2570 *
wamae 0:7bfeb237e600 2571 * This section allows for the setting of module specific sizes and
wamae 0:7bfeb237e600 2572 * configuration options. The default values are already present in the
wamae 0:7bfeb237e600 2573 * relevant header files and should suffice for the regular use cases.
wamae 0:7bfeb237e600 2574 *
wamae 0:7bfeb237e600 2575 * Our advice is to enable options and change their values here
wamae 0:7bfeb237e600 2576 * only if you have a good reason and know the consequences.
wamae 0:7bfeb237e600 2577 *
wamae 0:7bfeb237e600 2578 * Please check the respective header file for documentation on these
wamae 0:7bfeb237e600 2579 * parameters (to prevent duplicate documentation).
wamae 0:7bfeb237e600 2580 * \{
wamae 0:7bfeb237e600 2581 */
wamae 0:7bfeb237e600 2582
wamae 0:7bfeb237e600 2583 /* MPI / BIGNUM options */
wamae 0:7bfeb237e600 2584 //#define MBEDTLS_MPI_WINDOW_SIZE 6 /**< Maximum windows size used. */
wamae 0:7bfeb237e600 2585 //#define MBEDTLS_MPI_MAX_SIZE 1024 /**< Maximum number of bytes for usable MPIs. */
wamae 0:7bfeb237e600 2586
wamae 0:7bfeb237e600 2587 /* CTR_DRBG options */
wamae 0:7bfeb237e600 2588 //#define MBEDTLS_CTR_DRBG_ENTROPY_LEN 48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */
wamae 0:7bfeb237e600 2589 //#define MBEDTLS_CTR_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */
wamae 0:7bfeb237e600 2590 //#define MBEDTLS_CTR_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
wamae 0:7bfeb237e600 2591 //#define MBEDTLS_CTR_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
wamae 0:7bfeb237e600 2592 //#define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
wamae 0:7bfeb237e600 2593
wamae 0:7bfeb237e600 2594 /* HMAC_DRBG options */
wamae 0:7bfeb237e600 2595 //#define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */
wamae 0:7bfeb237e600 2596 //#define MBEDTLS_HMAC_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
wamae 0:7bfeb237e600 2597 //#define MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
wamae 0:7bfeb237e600 2598 //#define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
wamae 0:7bfeb237e600 2599
wamae 0:7bfeb237e600 2600 /* ECP options */
wamae 0:7bfeb237e600 2601 //#define MBEDTLS_ECP_MAX_BITS 521 /**< Maximum bit size of groups */
wamae 0:7bfeb237e600 2602 //#define MBEDTLS_ECP_WINDOW_SIZE 6 /**< Maximum window size used */
wamae 0:7bfeb237e600 2603 //#define MBEDTLS_ECP_FIXED_POINT_OPTIM 1 /**< Enable fixed-point speed-up */
wamae 0:7bfeb237e600 2604
wamae 0:7bfeb237e600 2605 /* Entropy options */
wamae 0:7bfeb237e600 2606 //#define MBEDTLS_ENTROPY_MAX_SOURCES 20 /**< Maximum number of sources supported */
wamae 0:7bfeb237e600 2607 //#define MBEDTLS_ENTROPY_MAX_GATHER 128 /**< Maximum amount requested from entropy sources */
wamae 0:7bfeb237e600 2608 //#define MBEDTLS_ENTROPY_MIN_HARDWARE 32 /**< Default minimum number of bytes required for the hardware entropy source mbedtls_hardware_poll() before entropy is released */
wamae 0:7bfeb237e600 2609
wamae 0:7bfeb237e600 2610 /* Memory buffer allocator options */
wamae 0:7bfeb237e600 2611 //#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 4 /**< Align on multiples of this value */
wamae 0:7bfeb237e600 2612
wamae 0:7bfeb237e600 2613 /* Platform options */
wamae 0:7bfeb237e600 2614 //#define MBEDTLS_PLATFORM_STD_MEM_HDR <stdlib.h> /**< Header to include if MBEDTLS_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */
wamae 0:7bfeb237e600 2615 //#define MBEDTLS_PLATFORM_STD_CALLOC calloc /**< Default allocator to use, can be undefined */
wamae 0:7bfeb237e600 2616 //#define MBEDTLS_PLATFORM_STD_FREE free /**< Default free to use, can be undefined */
wamae 0:7bfeb237e600 2617 //#define MBEDTLS_PLATFORM_STD_EXIT exit /**< Default exit to use, can be undefined */
wamae 0:7bfeb237e600 2618 //#define MBEDTLS_PLATFORM_STD_TIME time /**< Default time to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
wamae 0:7bfeb237e600 2619 //#define MBEDTLS_PLATFORM_STD_FPRINTF fprintf /**< Default fprintf to use, can be undefined */
wamae 0:7bfeb237e600 2620 //#define MBEDTLS_PLATFORM_STD_PRINTF printf /**< Default printf to use, can be undefined */
wamae 0:7bfeb237e600 2621 /* Note: your snprintf must correclty zero-terminate the buffer! */
wamae 0:7bfeb237e600 2622 //#define MBEDTLS_PLATFORM_STD_SNPRINTF snprintf /**< Default snprintf to use, can be undefined */
wamae 0:7bfeb237e600 2623 //#define MBEDTLS_PLATFORM_STD_EXIT_SUCCESS 0 /**< Default exit value to use, can be undefined */
wamae 0:7bfeb237e600 2624 //#define MBEDTLS_PLATFORM_STD_EXIT_FAILURE 1 /**< Default exit value to use, can be undefined */
wamae 0:7bfeb237e600 2625 //#define MBEDTLS_PLATFORM_STD_NV_SEED_READ mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
wamae 0:7bfeb237e600 2626 //#define MBEDTLS_PLATFORM_STD_NV_SEED_WRITE mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
wamae 0:7bfeb237e600 2627 //#define MBEDTLS_PLATFORM_STD_NV_SEED_FILE "seedfile" /**< Seed file to read/write with default implementation */
wamae 0:7bfeb237e600 2628
wamae 0:7bfeb237e600 2629 /* To Use Function Macros MBEDTLS_PLATFORM_C must be enabled */
wamae 0:7bfeb237e600 2630 /* MBEDTLS_PLATFORM_XXX_MACRO and MBEDTLS_PLATFORM_XXX_ALT cannot both be defined */
wamae 0:7bfeb237e600 2631 //#define MBEDTLS_PLATFORM_CALLOC_MACRO calloc /**< Default allocator macro to use, can be undefined */
wamae 0:7bfeb237e600 2632 //#define MBEDTLS_PLATFORM_FREE_MACRO free /**< Default free macro to use, can be undefined */
wamae 0:7bfeb237e600 2633 //#define MBEDTLS_PLATFORM_EXIT_MACRO exit /**< Default exit macro to use, can be undefined */
wamae 0:7bfeb237e600 2634 //#define MBEDTLS_PLATFORM_TIME_MACRO time /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
wamae 0:7bfeb237e600 2635 //#define MBEDTLS_PLATFORM_TIME_TYPE_MACRO time_t /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
wamae 0:7bfeb237e600 2636 //#define MBEDTLS_PLATFORM_FPRINTF_MACRO fprintf /**< Default fprintf macro to use, can be undefined */
wamae 0:7bfeb237e600 2637 //#define MBEDTLS_PLATFORM_PRINTF_MACRO printf /**< Default printf macro to use, can be undefined */
wamae 0:7bfeb237e600 2638 /* Note: your snprintf must correclty zero-terminate the buffer! */
wamae 0:7bfeb237e600 2639 //#define MBEDTLS_PLATFORM_SNPRINTF_MACRO snprintf /**< Default snprintf macro to use, can be undefined */
wamae 0:7bfeb237e600 2640 //#define MBEDTLS_PLATFORM_NV_SEED_READ_MACRO mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
wamae 0:7bfeb237e600 2641 //#define MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
wamae 0:7bfeb237e600 2642
wamae 0:7bfeb237e600 2643 /* SSL Cache options */
wamae 0:7bfeb237e600 2644 //#define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT 86400 /**< 1 day */
wamae 0:7bfeb237e600 2645 //#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */
wamae 0:7bfeb237e600 2646
wamae 0:7bfeb237e600 2647 /* SSL options */
wamae 0:7bfeb237e600 2648 //#define MBEDTLS_SSL_MAX_CONTENT_LEN 16384 /**< Maxium fragment length in bytes, determines the size of each of the two internal I/O buffers */
wamae 0:7bfeb237e600 2649 //#define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */
wamae 0:7bfeb237e600 2650 //#define MBEDTLS_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */
wamae 0:7bfeb237e600 2651 //#define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */
wamae 0:7bfeb237e600 2652
wamae 0:7bfeb237e600 2653 /**
wamae 0:7bfeb237e600 2654 * Complete list of ciphersuites to use, in order of preference.
wamae 0:7bfeb237e600 2655 *
wamae 0:7bfeb237e600 2656 * \warning No dependency checking is done on that field! This option can only
wamae 0:7bfeb237e600 2657 * be used to restrict the set of available ciphersuites. It is your
wamae 0:7bfeb237e600 2658 * responsibility to make sure the needed modules are active.
wamae 0:7bfeb237e600 2659 *
wamae 0:7bfeb237e600 2660 * Use this to save a few hundred bytes of ROM (default ordering of all
wamae 0:7bfeb237e600 2661 * available ciphersuites) and a few to a few hundred bytes of RAM.
wamae 0:7bfeb237e600 2662 *
wamae 0:7bfeb237e600 2663 * The value below is only an example, not the default.
wamae 0:7bfeb237e600 2664 */
wamae 0:7bfeb237e600 2665 //#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
wamae 0:7bfeb237e600 2666
wamae 0:7bfeb237e600 2667 /* X509 options */
wamae 0:7bfeb237e600 2668 //#define MBEDTLS_X509_MAX_INTERMEDIATE_CA 8 /**< Maximum number of intermediate CAs in a verification chain. */
wamae 0:7bfeb237e600 2669 //#define MBEDTLS_X509_MAX_FILE_PATH_LEN 512 /**< Maximum length of a path/filename string in bytes including the null terminator character ('\0'). */
wamae 0:7bfeb237e600 2670
wamae 0:7bfeb237e600 2671 /**
wamae 0:7bfeb237e600 2672 * Allow SHA-1 in the default TLS configuration for certificate signing.
wamae 0:7bfeb237e600 2673 * Without this build-time option, SHA-1 support must be activated explicitly
wamae 0:7bfeb237e600 2674 * through mbedtls_ssl_conf_cert_profile. Turning on this option is not
wamae 0:7bfeb237e600 2675 * recommended because of it is possible to generte SHA-1 collisions, however
wamae 0:7bfeb237e600 2676 * this may be safe for legacy infrastructure where additional controls apply.
wamae 0:7bfeb237e600 2677 */
wamae 0:7bfeb237e600 2678 // #define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
wamae 0:7bfeb237e600 2679
wamae 0:7bfeb237e600 2680 /**
wamae 0:7bfeb237e600 2681 * Allow SHA-1 in the default TLS configuration for TLS 1.2 handshake
wamae 0:7bfeb237e600 2682 * signature and ciphersuite selection. Without this build-time option, SHA-1
wamae 0:7bfeb237e600 2683 * support must be activated explicitly through mbedtls_ssl_conf_sig_hashes.
wamae 0:7bfeb237e600 2684 * The use of SHA-1 in TLS <= 1.1 and in HMAC-SHA-1 is always allowed by
wamae 0:7bfeb237e600 2685 * default. At the time of writing, there is no practical attack on the use
wamae 0:7bfeb237e600 2686 * of SHA-1 in handshake signatures, hence this option is turned on by default
wamae 0:7bfeb237e600 2687 * for compatibility with existing peers.
wamae 0:7bfeb237e600 2688 */
wamae 0:7bfeb237e600 2689 //#define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE
wamae 0:7bfeb237e600 2690
wamae 0:7bfeb237e600 2691
wamae 0:7bfeb237e600 2692 #include "check_config.h"
wamae 0:7bfeb237e600 2693
wamae 0:7bfeb237e600 2694 #endif /* MBEDTLS_LORA_CONFIG_H */