package/libs/wolfssl/Config.in

   1 if PACKAGE_libwolfssl
   2
   3 config WOLFSSL_HAS_AES_CCM
   4         bool "Include AES-CCM support"
   5         default y
   6
   7 config WOLFSSL_HAS_CHACHA_POLY
   8         bool "Include ChaCha20-Poly1305 cipher suite support"
   9         default y
  10
  11 config WOLFSSL_HAS_DH
  12         bool "Include DH (Diffie-Hellman) support"
  13         default y
  14
  15 config WOLFSSL_HAS_ARC4
  16         bool "Include ARC4 support"
  17         default y
  18
  19 config WOLFSSL_HAS_CERTGEN
  20         bool "Include certificate generation support"
  21         default y
  22
  23 config WOLFSSL_HAS_TLSV10
  24         bool "Include TLS 1.0 support"
  25         default y
  26
  27 config WOLFSSL_HAS_TLSV13
  28         bool "Include TLS 1.3 support"
  29         default y
  30
  31 config WOLFSSL_HAS_SESSION_TICKET
  32         bool "Include session ticket support"
  33         default y
  34
  35 config WOLFSSL_HAS_DTLS
  36         bool "Include DTLS support"
  37         default n
  38
  39 config WOLFSSL_HAS_OCSP
  40         bool "Include OSCP stapling support"
  41         default y
  42
  43 config WOLFSSL_HAS_WPAS
  44         bool "Include wpa_supplicant support"
  45         select WOLFSSL_HAS_ARC4
  46         select WOLFSSL_HAS_DH
  47         select WOLFSSL_HAS_OCSP
  48         select WOLFSSL_HAS_SESSION_TICKET
  49         default y
  50
  51 config WOLFSSL_HAS_ECC25519
  52         bool "Include ECC Curve 25519 support"
  53         default y
  54
  55 config WOLFSSL_HAS_ECC448
  56         bool "Include ECC Curve 448 support"
  57
  58 config WOLFSSL_HAS_OPENVPN
  59         bool "Include OpenVPN support"
  60         default y
  61
  62 config WOLFSSL_ALT_NAMES
  63         bool "Include SAN (Subject Alternative Name) support"
  64         default y
  65
  66 config WOLFSSL_HAS_DEVCRYPTO
  67         bool
  68
  69 config WOLFSSL_ASM_CAPABLE
  70         bool
  71         default x86_64 || (aarch64 && !TARGET_bcm27xx)
  72
  73 choice
  74         prompt "Hardware Acceleration"
  75         default WOLFSSL_HAS_CPU_CRYPTO if WOLFSSL_ASM_CAPABLE && !x86_64
  76         default WOLFSSL_HAS_NO_HW
  77
  78         config WOLFSSL_HAS_NO_HW
  79                 bool "None"
  80
  81         config WOLFSSL_HAS_CPU_CRYPTO
  82                 bool "Use CPU crypto instructions"
  83                 depends on WOLFSSL_ASM_CAPABLE
  84                 help
  85                 This will use Intel AESNI insturctions or armv8 Crypto Extensions.
  86                 Either of them should easily outperform hardware crypto in WolfSSL.
  87                 Beware that for Intel, the CPU has to support SSE4 instructions.
  88
  89         config WOLFSSL_HAS_AFALG
  90                 bool "AF_ALG"
  91
  92         config WOLFSSL_HAS_DEVCRYPTO_CBC
  93                 bool "/dev/crytpo - AES-CBC-only"
  94                 select WOLFSSL_HAS_DEVCRYPTO
  95
  96         config WOLFSSL_HAS_DEVCRYPTO_AES
  97                 bool "/dev/crypto - AES-only (all supported modes)"
  98                 select WOLFSSL_HAS_DEVCRYPTO
  99
 100         config WOLFSSL_HAS_DEVCRYPTO_FULL
 101                 bool "/dev/crypto - full"
 102                 select WOLFSSL_HAS_DEVCRYPTO
 103 endchoice
 104 if x86_64 && WOLFSSL_HAS_CPU_CRYPTO
 105         comment "WARNING: make sure your CPU supports SSE4 instructions"
 106         comment "WolfSSL may crash with an invalid opcode exception"
 107 endif
 108
 109 endif