yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
mbedtls/configs/config-thread.h

77 lines
2 KiB
C
Raw Permalink Normal View History

Update Doxygen file blocks to remove copyright and license information
2018-01-05 16:33:17 +01:00
/**
* \file config-thread.h
Rename config-ecjpake to thread and minify it - in the future thread might need more than just EC J-PAKE - use the same format as the other mini configurations (no doxygen doc, only showing what is enabled)
2015-10-19 14:06:07 +02:00
*
Update Doxygen file blocks to remove copyright and license information
2018-01-05 16:33:17 +01:00
* \brief Minimal configuration for using TLS as part of Thread
*/
/*
Update copyright notices to use Linux Foundation guidance As a result, the copyright of contributors other than Arm is now acknowledged, and the years of publishing are no longer tracked in the source files. Also remove the now-redundant lines declaring that the files are part of MbedTLS. This commit was generated using the following script: # ======================== #!/bin/sh # Find files find '(' -path './.git' -o -path './3rdparty' ')' -prune -o -type f -print | xargs sed -bi ' # Replace copyright attribution line s/Copyright.*Arm.*/Copyright The Mbed TLS Contributors/I # Remove redundant declaration and the preceding line $!N /This file is part of Mbed TLS/Id P D ' # ======================== Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
2020-08-07 13:07:28 +02:00
* Copyright The Mbed TLS Contributors
update headers Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
2023-11-02 20:47:20 +01:00
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Rename config-ecjpake to thread and minify it - in the future thread might need more than just EC J-PAKE - use the same format as the other mini configurations (no doxygen doc, only showing what is enabled)
2015-10-19 14:06:07 +02:00
*/
/*
* Minimal configuration for using TLS a part of Thread
* http://threadgroup.org/
*
* Distinguishing features:
* - no RSA or classic DH, fully based on ECC
* - no X.509
* - support for experimental EC J-PAKE key exchange
*
* See README.txt for usage instructions.
*/
/* System support */
#define MBEDTLS_HAVE_ASM
Update spelling "mbed TLS" to "Mbed TLS" The official spelling of the trade mark changed from all-lowercase "mbed" to normal proper noun capitalization "Mbed" a few years ago. We've been using the new spelling in new text but still have the old spelling in a lot of text. This commit updates most occurrences of "mbed TLS": ``` sed -i -e 's/mbed TLS/Mbed TLS/g' $(git ls-files ':!ChangeLog' ':!tests/data_files/**' ':!tests/suites/*.data' ':!programs/x509/*' ':!configs/tfm*') ``` Justification for the omissions: * `ChangeLog`: historical text. * `test/data_files/**`, `tests/suites/*.data`, `programs/x509/*`: many occurrences are significant names in certificates and such. Changing the spelling would invalidate many signatures and tests. * `configs/tfm*`: this is an imported file. We'll follow the upstream updates. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2023-08-03 17:45:20 +02:00
/* Mbed TLS feature support */
Tune up the Thread mini config
2015-10-19 15:56:43 +02:00
#define MBEDTLS_AES_ROM_TABLES
Rename config-ecjpake to thread and minify it - in the future thread might need more than just EC J-PAKE - use the same format as the other mini configurations (no doxygen doc, only showing what is enabled)
2015-10-19 14:06:07 +02:00
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
#define MBEDTLS_ECP_NIST_OPTIM
#define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
#define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
#define MBEDTLS_SSL_PROTO_TLS1_2
#define MBEDTLS_SSL_PROTO_DTLS
#define MBEDTLS_SSL_DTLS_ANTI_REPLAY
#define MBEDTLS_SSL_DTLS_HELLO_VERIFY
Update spelling "mbed TLS" to "Mbed TLS" The official spelling of the trade mark changed from all-lowercase "mbed" to normal proper noun capitalization "Mbed" a few years ago. We've been using the new spelling in new text but still have the old spelling in a lot of text. This commit updates most occurrences of "mbed TLS": ``` sed -i -e 's/mbed TLS/Mbed TLS/g' $(git ls-files ':!ChangeLog' ':!tests/data_files/**' ':!tests/suites/*.data' ':!programs/x509/*' ':!configs/tfm*') ``` Justification for the omissions: * `ChangeLog`: historical text. * `test/data_files/**`, `tests/suites/*.data`, `programs/x509/*`: many occurrences are significant names in certificates and such. Changing the spelling would invalidate many signatures and tests. * `configs/tfm*`: this is an imported file. We'll follow the upstream updates. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2023-08-03 17:45:20 +02:00
/* Mbed TLS modules */
Rename config-ecjpake to thread and minify it - in the future thread might need more than just EC J-PAKE - use the same format as the other mini configurations (no doxygen doc, only showing what is enabled)
2015-10-19 14:06:07 +02:00
#define MBEDTLS_AES_C
#define MBEDTLS_ASN1_PARSE_C
#define MBEDTLS_ASN1_WRITE_C
#define MBEDTLS_BIGNUM_C
#define MBEDTLS_CCM_C
#define MBEDTLS_CIPHER_C
#define MBEDTLS_CTR_DRBG_C
Fix build failure for thread config
2016-09-14 00:58:46 +02:00
#define MBEDTLS_CMAC_C
Rename config-ecjpake to thread and minify it - in the future thread might need more than just EC J-PAKE - use the same format as the other mini configurations (no doxygen doc, only showing what is enabled)
2015-10-19 14:06:07 +02:00
#define MBEDTLS_ECJPAKE_C
#define MBEDTLS_ECP_C
#define MBEDTLS_ENTROPY_C
#define MBEDTLS_HMAC_DRBG_C
#define MBEDTLS_MD_C
#define MBEDTLS_OID_C
#define MBEDTLS_PK_C
#define MBEDTLS_PK_PARSE_C
Fix SHA definitions and their dependencies in library and test suites. Rework SHA224 and SHA283 documentation. Define MBEDTLS_SHAxxx_C options in alphabetic order. Fix SHA224 and SHA384 dependencies in test suites. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-05-10 13:51:53 +02:00
#define MBEDTLS_SHA256_C
Rename config-ecjpake to thread and minify it - in the future thread might need more than just EC J-PAKE - use the same format as the other mini configurations (no doxygen doc, only showing what is enabled)
2015-10-19 14:06:07 +02:00
#define MBEDTLS_SSL_COOKIE_C
#define MBEDTLS_SSL_CLI_C
#define MBEDTLS_SSL_SRV_C
#define MBEDTLS_SSL_TLS_C
Tune up the Thread mini config
2015-10-19 15:56:43 +02:00
Add config-thread.h to test-ref-configs.pl
2015-10-20 14:47:00 +02:00
/* For tests using ssl-opt.sh */
#define MBEDTLS_NET_C
#define MBEDTLS_TIMING_C
Tune up config-thread.h a bit more
2015-10-20 14:55:13 +02:00
/* Save RAM at the expense of ROM */
#define MBEDTLS_AES_ROM_TABLES
Tune up the Thread mini config
2015-10-19 15:56:43 +02:00
/* Save RAM by adjusting to our exact needs */
Determine MBEDTLS_ECP_MAX_BITS automatically MBEDTLS_ECP_MAX_BITS doesn't make sense as a configuration option: it must not be smaller than the largest supported curve, and it's useless to set it to a larger value. So unconditionally set it to the size of the largest supported curve. Remove it from the build configuration. Alternative implementations must no longer need define this macro. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-05-28 00:17:26 +02:00
#define MBEDTLS_MPI_MAX_SIZE 32 // 256-bit EC curve = 32 bytes
Tune up the Thread mini config
2015-10-19 15:56:43 +02:00
/* Save ROM and a few bytes of RAM by specifying our own ciphersuite list */
#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8
Restructure test-ref-configs to test with USE_PSA_CRYPTO turned on Run some of the test configs twice, enabling MBEDTLS_USE_PSA_CRYPTO and MBEDTLS_PSA_CRYPTO_C in one of the runs. Add relevant comments in these configs. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>
2022-01-17 15:32:02 +01:00
/* These defines are present so that the config modifying scripts can enable
* them during tests/scripts/test-ref-configs.pl */
//#define MBEDTLS_USE_PSA_CRYPTO
//#define MBEDTLS_PSA_CRYPTO_C
Reference in a new issue Copy permalink