mirror of
https://github.com/zephyrproject-rtos/zephyr
synced 2025-09-15 04:51:56 +00:00
dfe9a91da2
Before mbedTLS 3.0 there was just SHA512 option, which enabled both SHA384 and SHA512 support. mbedTLS 3.0 introduced SHA384 specific option, which means that SHA384 got unsupported after merging commit4e6cfb67f9("modules: mbedTLS: Bump mbedTLS to 3.0"). Introduce SHA384 Kconfig options, so that support for it can be selected in project configuration if needed. Since SHA384 still depends on SHA512 to be selected, add such dependency in Kconfig. Select SHA384 support in non-generic (not configured by Kconfig) mbedTLS config headers, so that previous (before mbedTLS 3.0 was merged) behavior is regained. Fixes:4e6cfb67f9("modules: mbedTLS: Bump mbedTLS to 3.0") Signed-off-by: Marcin Niestroj <m.niestroj@emb.dev>
120 lines
3.5 KiB
C
120 lines
3.5 KiB
C
/**
|
|
* \file config-no-entropy.h
|
|
*
|
|
* \brief Minimal configuration of features that do not require an entropy source
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*
|
|
* This file is provided under the Apache License 2.0, or the
|
|
* GNU General Public License v2.0 or later.
|
|
*
|
|
* **********
|
|
* Apache License 2.0:
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
* not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*
|
|
* **********
|
|
*
|
|
* **********
|
|
* GNU General Public License v2.0 or later:
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* **********
|
|
*/
|
|
/*
|
|
* Minimal configuration of features that do not require an entropy source
|
|
* Distinguishing features:
|
|
* - no entropy module
|
|
* - no TLS protocol implementation available due to absence of an entropy
|
|
* source
|
|
*
|
|
* See README.txt for usage instructions.
|
|
*/
|
|
|
|
#ifndef MBEDTLS_CONFIG_H
|
|
#define MBEDTLS_CONFIG_H
|
|
|
|
/* System support */
|
|
#define MBEDTLS_HAVE_ASM
|
|
#define MBEDTLS_HAVE_TIME
|
|
|
|
/* mbed TLS feature support */
|
|
#define MBEDTLS_CIPHER_MODE_CBC
|
|
#define MBEDTLS_CIPHER_PADDING_PKCS7
|
|
#define MBEDTLS_REMOVE_ARC4_CIPHERSUITES
|
|
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
|
|
#define MBEDTLS_ECP_NIST_OPTIM
|
|
#define MBEDTLS_ECDSA_DETERMINISTIC
|
|
#define MBEDTLS_PK_RSA_ALT_SUPPORT
|
|
#define MBEDTLS_PKCS1_V15
|
|
#define MBEDTLS_PKCS1_V21
|
|
#define MBEDTLS_SELF_TEST
|
|
#define MBEDTLS_VERSION_FEATURES
|
|
#define MBEDTLS_X509_CHECK_KEY_USAGE
|
|
#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
|
|
|
|
/* mbed TLS modules */
|
|
#define MBEDTLS_AES_C
|
|
#define MBEDTLS_ASN1_PARSE_C
|
|
#define MBEDTLS_ASN1_WRITE_C
|
|
#define MBEDTLS_BASE64_C
|
|
#define MBEDTLS_BIGNUM_C
|
|
#define MBEDTLS_CCM_C
|
|
#define MBEDTLS_CIPHER_C
|
|
#define MBEDTLS_ECDSA_C
|
|
#define MBEDTLS_ECP_C
|
|
#define MBEDTLS_ERROR_C
|
|
#define MBEDTLS_GCM_C
|
|
#define MBEDTLS_HMAC_DRBG_C
|
|
#define MBEDTLS_MD_C
|
|
#define MBEDTLS_OID_C
|
|
#define MBEDTLS_PEM_PARSE_C
|
|
#define MBEDTLS_PK_C
|
|
#define MBEDTLS_PK_PARSE_C
|
|
#define MBEDTLS_PK_WRITE_C
|
|
#define MBEDTLS_PLATFORM_C
|
|
#define MBEDTLS_RSA_C
|
|
#define MBEDTLS_SHA224_C
|
|
#define MBEDTLS_SHA256_C
|
|
#define MBEDTLS_SHA384_C
|
|
#define MBEDTLS_SHA512_C
|
|
#define MBEDTLS_VERSION_C
|
|
#define MBEDTLS_X509_USE_C
|
|
#define MBEDTLS_X509_CRT_PARSE_C
|
|
#define MBEDTLS_X509_CRL_PARSE_C
|
|
//#define MBEDTLS_CMAC_C
|
|
|
|
/* Miscellaneous options */
|
|
#define MBEDTLS_AES_ROM_TABLES
|
|
|
|
#include "check_config.h"
|
|
|
|
#endif /* MBEDTLS_CONFIG_H */
|