1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
5 * Uncomment to get errors on using deprecated functions.
7 -//#define MBEDTLS_DEPRECATED_REMOVED
8 +#define MBEDTLS_DEPRECATED_REMOVED
10 /* \} name SECTION: System support */
14 * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
16 -#define MBEDTLS_CIPHER_MODE_CFB
17 +//#define MBEDTLS_CIPHER_MODE_CFB
20 * \def MBEDTLS_CIPHER_MODE_CTR
23 * Comment macros to disable the curve and functions for it
25 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
26 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
27 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
28 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
29 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
30 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
31 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
32 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
33 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
34 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
35 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
36 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
37 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
38 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
39 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
40 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
41 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
42 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
43 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
44 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
48 * Requires: MBEDTLS_HMAC_DRBG_C
50 * Comment this macro to disable deterministic ECDSA.
52 #define MBEDTLS_ECDSA_DETERMINISTIC
56 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
58 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
59 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
61 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
62 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
65 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
67 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
68 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
69 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
71 #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
75 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
77 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
78 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
80 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
81 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
84 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
86 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
87 * MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
89 -#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
90 +//#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
93 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
95 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
96 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
98 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
99 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
102 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
104 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
105 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
107 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
108 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
111 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
113 * This option is only useful if both MBEDTLS_SHA256_C and
114 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
116 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
117 +#define MBEDTLS_ENTROPY_FORCE_SHA256
120 * \def MBEDTLS_ENTROPY_NV_SEED
121 @@ -917,14 +917,14 @@
122 * Uncomment this macro to disable the use of CRT in RSA.
125 -//#define MBEDTLS_RSA_NO_CRT
126 +#define MBEDTLS_RSA_NO_CRT
129 * \def MBEDTLS_SELF_TEST
131 * Enable the checkup functions (*_self_test).
133 -#define MBEDTLS_SELF_TEST
134 +//#define MBEDTLS_SELF_TEST
137 * \def MBEDTLS_SHA256_SMALLER
140 * Uncomment to enable the smaller implementation of SHA256.
142 -//#define MBEDTLS_SHA256_SMALLER
143 +#define MBEDTLS_SHA256_SMALLER
146 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
147 @@ -1059,8 +1059,8 @@
148 * misuse/misunderstand.
150 * Comment this to disable support for renegotiation.
152 #define MBEDTLS_SSL_RENEGOTIATION
156 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
157 @@ -1234,8 +1234,8 @@
158 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
160 * Comment this macro to disable support for SSL session tickets
162 #define MBEDTLS_SSL_SESSION_TICKETS
166 * \def MBEDTLS_SSL_EXPORT_KEYS
167 @@ -1265,7 +1265,7 @@
169 * Comment this macro to disable support for truncated HMAC in SSL
171 -#define MBEDTLS_SSL_TRUNCATED_HMAC
172 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
175 * \def MBEDTLS_THREADING_ALT
176 @@ -1299,8 +1299,8 @@
177 * Requires: MBEDTLS_VERSION_C
179 * Comment this to disable run-time checking and save ROM space
181 #define MBEDTLS_VERSION_FEATURES
185 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
186 @@ -1501,7 +1501,7 @@
187 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
188 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
190 -#define MBEDTLS_ARC4_C
191 +//#define MBEDTLS_ARC4_C
194 * \def MBEDTLS_ASN1_PARSE_C
195 @@ -1621,7 +1621,7 @@
196 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
197 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
199 -#define MBEDTLS_CAMELLIA_C
200 +//#define MBEDTLS_CAMELLIA_C
204 @@ -1635,7 +1635,7 @@
205 * This module enables the AES-CCM ciphersuites, if other requisites are
208 -#define MBEDTLS_CCM_C
209 +//#define MBEDTLS_CCM_C
212 * \def MBEDTLS_CERTS_C
213 @@ -1647,7 +1647,7 @@
215 * This module is used for testing (ssl_client/server).
217 -#define MBEDTLS_CERTS_C
218 +//#define MBEDTLS_CERTS_C
221 * \def MBEDTLS_CIPHER_C
222 @@ -1700,7 +1700,7 @@
224 * This module provides debugging functions.
226 -#define MBEDTLS_DEBUG_C
227 +//#define MBEDTLS_DEBUG_C
231 @@ -1725,8 +1725,8 @@
232 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
234 * PEM_PARSE uses DES/3DES for decrypting encrypted keys.
236 #define MBEDTLS_DES_C
241 @@ -1880,8 +1880,8 @@
242 * Requires: MBEDTLS_MD_C
244 * Uncomment to enable the HMAC_DRBG random number geerator.
246 #define MBEDTLS_HMAC_DRBG_C
251 @@ -2158,7 +2158,7 @@
252 * Caller: library/mbedtls_md.c
255 -#define MBEDTLS_RIPEMD160_C
256 +//#define MBEDTLS_RIPEMD160_C
260 @@ -2235,8 +2235,8 @@
263 * Requires: MBEDTLS_SSL_CACHE_C
265 #define MBEDTLS_SSL_CACHE_C
269 * \def MBEDTLS_SSL_COOKIE_C
270 @@ -2257,8 +2257,8 @@
273 * Requires: MBEDTLS_CIPHER_C
275 #define MBEDTLS_SSL_TICKET_C
279 * \def MBEDTLS_SSL_CLI_C
280 @@ -2357,8 +2357,8 @@
281 * Module: library/version.c
283 * This module provides run-time version information.
285 #define MBEDTLS_VERSION_C
289 * \def MBEDTLS_X509_USE_C
290 @@ -2468,7 +2468,7 @@
291 * Module: library/xtea.c
294 -#define MBEDTLS_XTEA_C
295 +//#define MBEDTLS_XTEA_C
297 /* \} name SECTION: mbed TLS modules */