crypto: mbedtls: default secp256r1 to enabled
secp224r1, which is not a commonly used curve, was enabled by default so
disable it and instead enable secp256r1 (aka EC256), which is used by
MCUboot for example.
Signed-off-by: Fabio Utzig <utzig@apache.org>
diff --git a/crypto/mbedtls/syscfg.yml b/crypto/mbedtls/syscfg.yml
index 0d71c06..31d5917 100644
--- a/crypto/mbedtls/syscfg.yml
+++ b/crypto/mbedtls/syscfg.yml
@@ -27,9 +27,9 @@
MBEDTLS_ECP_DP_SECP192R1:
value: 0
MBEDTLS_ECP_DP_SECP224R1:
- value: 1
- MBEDTLS_ECP_DP_SECP256R1:
value: 0
+ MBEDTLS_ECP_DP_SECP256R1:
+ value: 1
MBEDTLS_ECP_DP_SECP384R1:
value: 0
MBEDTLS_ECP_DP_SECP521R1: