crypto/mbedtls/syscfg.yml

# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#  http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
#

syscfg.defs:
  # Eliptic curves
  MBEDTLS_ECP_ALT:
    description: 'Enable alternative EC point implementation'
    value: 0
  MBEDTLS_ECP_RESTARTABLE:
    description: 'Enable EC non-blocking operation'
    value: 0
  MBEDTLS_ECP_DP_SECP192R1:
    value: 0
  MBEDTLS_ECP_DP_SECP224R1:
    value: 0
  MBEDTLS_ECP_DP_SECP256R1:
    value: 1
  MBEDTLS_ECP_DP_SECP384R1:
    value: 0
  MBEDTLS_ECP_DP_SECP521R1:
    value: 0
  MBEDTLS_ECP_DP_SECP192K1:
    value: 0
  MBEDTLS_ECP_DP_SECP224K1:
    value: 0
  MBEDTLS_ECP_DP_SECP256K1:
    value: 0
  MBEDTLS_ECP_DP_BP256R1:
    value: 0
  MBEDTLS_ECP_DP_BP384R1:
    value: 0
  MBEDTLS_ECP_DP_BP512R1:
    value: 0
  MBEDTLS_ECP_DP_CURVE25519:
    value: 0
  MBEDTLS_ECJPAKE_C:
    value: 0

  # ECDH
  MBEDTLS_ECDH_GEN_PUBLIC_ALT:
    description: 'ECDH alternative public key generation implementation'
    value: 0
  MBEDTLS_ECDH_COMPUTE_SHARED_ALT:
    description: 'ECDH alternative shared secret generation implementation'
    value: 0

  # ECDSA
  MBEDTLS_ECDSA_SIGN_ALT:
    description: 'ECDSA alternative sign implementation'
    value: 0
  MBEDTLS_ECDSA_VERIFY_ALT:
    description: 'ECDSA alternative verify implementation'
    value: 0
  MBEDTLS_ECDSA_GENKEY_ALT:
    description: 'ECDSA alternative genkey implementation'
    value: 0

  # Ciphers
  MBEDTLS_AES_ALT:
    description: 'Set to enable HW based AES'
    value: 0
  MBEDTLS_AES_C:
    value: 1
  MBEDTLS_AES_ROM_TABLES:
    value: 0
  MBEDTLS_AES_FEWER_TABLES:
    value: 0
  MBEDTLS_ARC4_C:
    value: 0
  MBEDTLS_ARIA_C:
    value: 0
  MBEDTLS_BLOWFISH_C:
    value: 0
  MBEDTLS_CAMELLIA_C:
    value: 0
  MBEDTLS_DES_C:
    description: '3DES'
    value: 0

  # Random number generator based on AES-256
  MBEDTLS_CTR_DRBG_C:
    value: 0

  # NIST key-wrap algo
  MBEDTLS_NIST_KW_C:
    value: 0

  # Stream ciphers
  MBEDTLS_CHACHA20_C:
    value: 0
  MBEDTLS_CHACHAPOLY_C:
    value: 0

  # MAC
  MBEDTLS_CMAC_C:
    value: 0
  MBEDTLS_POLY1305_C:
    value: 0

  # Cipher modes
  MBEDTLS_CIPHER_MODE_CBC:
    value: 0
  MBEDTLS_CIPHER_MODE_CFB:
    value: 0
  MBEDTLS_CIPHER_MODE_CTR:
    value: 0
  MBEDTLS_CIPHER_MODE_OFB:
    value: 0
  MBEDTLS_CIPHER_MODE_XTS:
    value: 0
  MBEDTLS_CCM_C:
    value: 0

  # Hash functions
  MBEDTLS_SHA256_ALT:
    description: 'Set to enable HW based HASH'
    value: 0
  MBEDTLS_SHA256_C:
    value: 1
  MBEDTLS_MD2_C:
    value: 0
  MBEDTLS_MD4_C:
    value: 0
  MBEDTLS_MD5_C:
    value: 0
  MBEDTLS_SHA1_C:
    value: 0
  MBEDTLS_SHA512_C:
    value: 0
  MBEDTLS_RIPEMD160_C:
    value: 0

  # HKDF
  MBEDTLS_HKDF_C:
    value: 0

  # base64 encoding (required for PEM)
  MBEDTLS_BASE64_C:
    value: 1

  # Timing interface - FIXME: better disable by default?
  MBEDTLS_TIMING_C:
    value: 0

  MBEDTLS_ENTROPY_C:
    value: 1

  # Default value for hardware backed entropy source.
  # Override from app's syscfg
  MBEDTLS_ENTROPY_HARDWARE_ALT:
    value: 0

  # PKCS#1 v1.5 not supported by MCUBoot
  MBEDTLS_PKCS1_V15:
    value: 1
  MBEDTLS_PKCS1_V21:
    value: 1

  # Prime numbers generation
  MBEDTLS_GENPRIME:
    value: 0

  # Key-exchange mechanisms
  MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED:
    value: 0
  MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED:
    value: 0
  MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED:
    value: 0
  MBEDTLS_KEY_EXCHANGE_RSA_ENABLED:
    value: 0

  # SSL/TLS support
  MBEDTLS_SSL_TLS_C:
    value: 0

  # MPI
  MBEDTLS_MPI_MAX_SIZE:
    value: 1024
  MBEDTLS_BIGNUM_ALT:
    value: 0