/**
 * \file config.h
 *
 * \brief Configuration options (set of defines)
 *
 *  This set of compile-time options may be used to enable
 *  or disable features selectively, and reduce the global
 *  memory footprint.
 *
 *  Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
 *  SPDX-License-Identifier: Apache-2.0
 *
 *  Licensed under the Apache License, Version 2.0 (the "License"); you may
 *  not use this file except in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *  http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 *
 *  This file is part of mbed TLS (https://tls.mbed.org)
 */

#ifndef MBEDTLS_CONFIG_MYNEWT_H
#define MBEDTLS_CONFIG_MYNEWT_H

#ifdef __cplusplus
extern "C" {
#endif

#include "os/mynewt.h"

#undef MBEDTLS_HAVE_TIME /* we have no time.h */
#undef MBEDTLS_HAVE_TIME_DATE
#define MBEDTLS_PLATFORM_PRINTF_ALT	console_print
#define MBEDTLS_PLATFORM_EXIT_ALT	assert /* XXX? */
#undef MBEDTLS_FS_IO
#define MBEDTLS_NO_PLATFORM_ENTROPY
#undef MBEDTLS_NET_C

#ifndef TEST
#undef MBEDTLS_SELF_TEST
#endif

#define MBEDTLS_SHA256_SMALLER     /* comes with performance hit */

/**
 * \name SECTION: Module configuration options
 *
 * This section allows for the setting of module specific sizes and
 * configuration options. The default values are already present in the
 * relevant header files and should suffice for the regular use cases.
 *
 * Our advice is to enable options and change their values here
 * only if you have a good reason and know the consequences.
 *
 * Please check the respective header file for documentation on these
 * parameters (to prevent duplicate documentation).
 * \{
 */

/* MPI / BIGNUM options */
//#define MBEDTLS_MPI_WINDOW_SIZE            6 /**< Maximum windows size used. */
//#define MBEDTLS_MPI_MAX_SIZE            1024 /**< Maximum number of bytes for usable MPIs. */

/* CTR_DRBG options */
//#define MBEDTLS_CTR_DRBG_ENTROPY_LEN               48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */
//#define MBEDTLS_CTR_DRBG_RESEED_INTERVAL        10000 /**< Interval before reseed is performed by default */
//#define MBEDTLS_CTR_DRBG_MAX_INPUT                256 /**< Maximum number of additional input bytes */
//#define MBEDTLS_CTR_DRBG_MAX_REQUEST             1024 /**< Maximum number of requested bytes per call */
//#define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT           384 /**< Maximum size of (re)seed buffer */

/* HMAC_DRBG options */
//#define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL   10000 /**< Interval before reseed is performed by default */
//#define MBEDTLS_HMAC_DRBG_MAX_INPUT           256 /**< Maximum number of additional input bytes */
//#define MBEDTLS_HMAC_DRBG_MAX_REQUEST        1024 /**< Maximum number of requested bytes per call */
//#define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT      384 /**< Maximum size of (re)seed buffer */

/* ECP options */
//#define MBEDTLS_ECP_MAX_BITS             521 /**< Maximum bit size of groups */
//#define MBEDTLS_ECP_WINDOW_SIZE            6 /**< Maximum window size used */
//#define MBEDTLS_ECP_FIXED_POINT_OPTIM      1 /**< Enable fixed-point speed-up */

/* Entropy options */
//#define MBEDTLS_ENTROPY_MAX_SOURCES                20 /**< Maximum number of sources supported */
//#define MBEDTLS_ENTROPY_MAX_GATHER                128 /**< Maximum amount requested from entropy sources */

/* Memory buffer allocator options */
//#define MBEDTLS_MEMORY_ALIGN_MULTIPLE      4 /**< Align on multiples of this value */

/* Platform options */
//#define MBEDTLS_PLATFORM_STD_MEM_HDR   <stdlib.h> /**< Header to include if MBEDTLS_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */
//#define MBEDTLS_PLATFORM_STD_CALLOC        calloc /**< Default allocator to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_FREE            free /**< Default free to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_EXIT            exit /**< Default exit to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_FPRINTF      fprintf /**< Default fprintf to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_PRINTF        printf /**< Default printf to use, can be undefined */
/* Note: your snprintf must correclty zero-terminate the buffer! */
//#define MBEDTLS_PLATFORM_STD_SNPRINTF    snprintf /**< Default snprintf to use, can be undefined */

/* To Use Function Macros MBEDTLS_PLATFORM_C must be enabled */
/* MBEDTLS_PLATFORM_XXX_MACRO and MBEDTLS_PLATFORM_XXX_ALT cannot both be defined */
//#define MBEDTLS_PLATFORM_CALLOC_MACRO        calloc /**< Default allocator macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_FREE_MACRO            free /**< Default free macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_EXIT_MACRO            exit /**< Default exit macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_FPRINTF_MACRO      fprintf /**< Default fprintf macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_PRINTF_MACRO        printf /**< Default printf macro to use, can be undefined */
/* Note: your snprintf must correclty zero-terminate the buffer! */
//#define MBEDTLS_PLATFORM_SNPRINTF_MACRO    snprintf /**< Default snprintf macro to use, can be undefined */

/* SSL Cache options */
//#define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT       86400 /**< 1 day  */
//#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES      50 /**< Maximum entries in cache */

/* SSL options */
//#define MBEDTLS_SSL_MAX_CONTENT_LEN             16384 /**< Maxium fragment length in bytes, determines the size of each of the two internal I/O buffers */
//#define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME     86400 /**< Lifetime of session tickets (if enabled) */
//#define MBEDTLS_PSK_MAX_LEN               32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */
//#define MBEDTLS_SSL_COOKIE_TIMEOUT        60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */

/**
 * Complete list of ciphersuites to use, in order of preference.
 *
 * \warning No dependency checking is done on that field! This option can only
 * be used to restrict the set of available ciphersuites. It is your
 * responsibility to make sure the needed modules are active.
 *
 * Use this to save a few hundred bytes of ROM (default ordering of all
 * available ciphersuites) and a few to a few hundred bytes of RAM.
 *
 * The value below is only an example, not the default.
 */
//#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

/* X509 options */
//#define MBEDTLS_X509_MAX_INTERMEDIATE_CA   8   /**< Maximum number of intermediate CAs in a verification chain. */

/* \} name SECTION: Module configuration options */


/* enable support for configured curves only */
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP192R1) == 0
#undef MBEDTLS_ECP_DP_SECP192R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP224R1) == 0
#undef MBEDTLS_ECP_DP_SECP224R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP256R1) == 0
#undef MBEDTLS_ECP_DP_SECP256R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP384R1) == 0
#undef MBEDTLS_ECP_DP_SECP384R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP521R1) == 0
#undef MBEDTLS_ECP_DP_SECP521R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP192K1) == 0
#undef MBEDTLS_ECP_DP_SECP192K1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP224K1) == 0
#undef MBEDTLS_ECP_DP_SECP224K1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_SECP256K1) == 0
#undef MBEDTLS_ECP_DP_SECP256K1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_BP256R1) == 0
#undef MBEDTLS_ECP_DP_BP256R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_BP384R1) == 0
#undef MBEDTLS_ECP_DP_BP384R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_BP512R1) == 0
#undef MBEDTLS_ECP_DP_BP512R1_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_ECP_DP_CURVE25519) == 0
#undef MBEDTLS_ECP_DP_CURVE25519_ENABLED
#endif

#if MYNEWT_VAL(MBEDTLS_AES_C) == 0
#undef MBEDTLS_AES_C
#endif
#if MYNEWT_VAL(MBEDTLS_ARC4_C) == 0
#undef MBEDTLS_ARC4_C
#endif
#if MYNEWT_VAL(MBEDTLS_BLOWFISH_C) == 0
#undef MBEDTLS_BLOWFISH_C
#endif
#if MYNEWT_VAL(MBEDTLS_CAMELLIA_C) == 0
#undef MBEDTLS_CAMELLIA_C
#endif
#if MYNEWT_VAL(MBEDTLS_DES_C) == 0
#undef MBEDTLS_DES_C
#endif

#if MYNEWT_VAL(MBEDTLS_NIST_KW_C) == 0
#undef MBEDTLS_NIST_KW_C
#endif

#if MYNEWT_VAL(MBEDTLS_CHACHA20_C) == 0
#undef MBEDTLS_CHACHA20_C
#endif
#if MYNEWT_VAL(MBEDTLS_CHACHAPOLY_C) == 0
#undef MBEDTLS_CHACHAPOLY_C
#endif

#if MYNEWT_VAL(MBEDTLS_POLY1305_C) == 0
#undef MBEDTLS_POLY1305_C
#endif

#if MYNEWT_VAL(MBEDTLS_CIPHER_MODE_CBC) == 0
#undef MBEDTLS_CIPHER_MODE_CBC
#endif
#if MYNEWT_VAL(MBEDTLS_CIPHER_MODE_CFB) == 0
#undef MBEDTLS_CIPHER_MODE_CFB
#endif
#if MYNEWT_VAL(MBEDTLS_CIPHER_MODE_CTR) == 0
#undef MBEDTLS_CIPHER_MODE_CTR
#endif
#if MYNEWT_VAL(MBEDTLS_CIPHER_MODE_OFB) == 0
#undef MBEDTLS_CIPHER_MODE_OFB
#endif
#if MYNEWT_VAL(MBEDTLS_CIPHER_MODE_XTS) == 0
#undef MBEDTLS_CIPHER_MODE_XTS
#endif
#if MYNEWT_VAL(MBEDTLS_CCM_C) == 0
#undef MBEDTLS_CCM_C
#endif

#if MYNEWT_VAL(MBEDTLS_CTR_DRBG_C) == 0
#undef MBEDTLS_CTR_DRBG_C
#endif

#if MYNEWT_VAL(MBEDTLS_MD5_C) == 0
#undef MBEDTLS_MD5_C
#endif
#if MYNEWT_VAL(MBEDTLS_SHA1_C) == 0
#undef MBEDTLS_SHA1_C
#endif
#if MYNEWT_VAL(MBEDTLS_SHA512_C) == 0
#undef MBEDTLS_SHA512_C
#endif
#if MYNEWT_VAL(MBEDTLS_RIPEMD160_C) == 0
#undef MBEDTLS_RIPEMD160_C
#endif

#if MYNEWT_VAL(MBEDTLS_MD5_C) == 0 && MYNEWT_VAL(MBEDTLS_SHA1_C) == 0
#undef MBEDTLS_SSL_PROTO_TLS1
#undef MBEDTLS_SSL_PROTO_TLS1_1
#undef MBEDTLS_SSL_CBC_RECORD_SPLITTING
#endif

#if MYNEWT_VAL(MBEDTLS_HKDF_C) == 0
#undef MBEDTLS_HKDF_C
#endif

#if MYNEWT_VAL(MBEDTLS_BASE64_C) == 0
#undef MBEDTLS_BASE64_C
#endif

#if MYNEWT_VAL(MBEDTLS_TIMING_C) == 0
#undef MBEDTLS_TIMING_C
#endif

#if MYNEWT_VAL(MBEDTLS_ENTROPY_C) == 0
#undef MBEDTLS_ENTROPY_C
#endif

#if MYNEWT_VAL(MBEDTLS_PKCS1_V15) == 0
#undef MBEDTLS_PKCS1_V15
#endif
#if MYNEWT_VAL(MBEDTLS_PKCS1_V21) == 0
#undef MBEDTLS_PKCS1_V21
#endif

#if MYNEWT_VAL(MBEDTLS_GENPRIME) == 0
#undef MBEDTLS_GENPRIME
#endif

#if MYNEWT_VAL(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) == 0
#undef MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) == 0
#undef MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) == 0
#undef MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
#endif
#if MYNEWT_VAL(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) == 0
#undef MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
#endif

#if MYNEWT_VAL(MBEDTLS_SSL_TLS_C) == 0
#undef MBEDTLS_SSL_TLS_C
#undef MBEDTLS_SSL_CLI_C
#undef MBEDTLS_SSL_SRV_C
#undef MBEDTLS_SSL_DTLS_ANTI_REPLAY
#undef MBEDTLS_SSL_DTLS_BADMAC_LIMIT
#endif

#ifdef __cplusplus
}
#endif

#endif /* MBEDTLS_CONFIG_MYNEWT_H */