package/libs/wolfssl/Config.in

   1 if PACKAGE_libwolfssl
   2
   3 config WOLFSSL_HAS_AES_CCM
   4         bool "Include AES-CCM support"
   5         default y
   6
   7 config WOLFSSL_HAS_CHACHA_POLY
   8         bool "Include ChaCha20-Poly1305 cipher suite support"
   9         default y
  10
  11 config WOLFSSL_HAS_DH
  12         bool "Include DH (Diffie-Hellman) support"
  13         default y
  14
  15 config WOLFSSL_HAS_ARC4
  16         bool "Include ARC4 support"
  17         default y
  18
  19 config WOLFSSL_HAS_CERTGEN
  20         bool "Include certificate generation support"
  21         default y
  22
  23 config WOLFSSL_HAS_TLSV10
  24         bool "Include TLS 1.0 support"
  25         default y
  26
  27 config WOLFSSL_HAS_TLSV13
  28         bool "Include TLS 1.3 support"
  29         default y
  30
  31 config WOLFSSL_HAS_SESSION_TICKET
  32         bool "Include session ticket support"
  33         default y
  34
  35 config WOLFSSL_HAS_DTLS
  36         bool "Include DTLS support"
  37         default n
  38
  39 config WOLFSSL_HAS_OCSP
  40         bool "Include OSCP stapling support"
  41         default y
  42
  43 config WOLFSSL_HAS_WPAS
  44         bool "Include wpa_supplicant support"
  45         select WOLFSSL_HAS_ARC4
  46         select WOLFSSL_HAS_OCSP
  47         select WOLFSSL_HAS_SESSION_TICKET
  48         default y
  49
  50 config WOLFSSL_HAS_ECC25519
  51         bool "Include ECC Curve 25519 support"
  52         default y
  53
  54 config WOLFSSL_HAS_OPENVPN
  55         bool "Include OpenVPN support"
  56         default y
  57
  58 config WOLFSSL_ALT_NAMES
  59         bool "Include SAN (Subject Alternative Name) support"
  60         default y
  61
  62 config WOLFSSL_HAS_DEVCRYPTO
  63         bool
  64
  65 config WOLFSSL_ASM_CAPABLE
  66         bool
  67         default x86_64 || (aarch64 && !TARGET_bcm27xx)
  68
  69 choice
  70         prompt "Hardware Acceleration"
  71         default WOLFSSL_HAS_CPU_CRYPTO if WOLFSSL_ASM_CAPABLE && !x86_64
  72         default WOLFSSL_HAS_NO_HW
  73
  74         config WOLFSSL_HAS_NO_HW
  75                 bool "None"
  76
  77         config WOLFSSL_HAS_CPU_CRYPTO
  78                 bool "Use CPU crypto instructions"
  79                 depends on WOLFSSL_ASM_CAPABLE
  80                 help
  81                 This will use Intel AESNI insturctions or armv8 Crypto Extensions.
  82                 Either of them should easily outperform hardware crypto in WolfSSL.
  83                 Beware that for Intel, the CPU has to support SSE4 instructions.
  84
  85         config WOLFSSL_HAS_AFALG
  86                 bool "AF_ALG"
  87
  88         config WOLFSSL_HAS_DEVCRYPTO_CBC
  89                 bool "/dev/crytpo - AES-CBC-only"
  90                 select WOLFSSL_HAS_DEVCRYPTO
  91
  92         config WOLFSSL_HAS_DEVCRYPTO_AES
  93                 bool "/dev/crypto - AES-only (all supported modes)"
  94                 select WOLFSSL_HAS_DEVCRYPTO
  95
  96         config WOLFSSL_HAS_DEVCRYPTO_FULL
  97                 bool "/dev/crypto - full"
  98                 select WOLFSSL_HAS_DEVCRYPTO
  99 endchoice
 100 if x86_64 && WOLFSSL_HAS_CPU_CRYPTO
 101         comment "WARNING: make sure your CPU supports SSE4 instructions"
 102         comment "WolfSSL may crash with an invalid opcode exception"
 103 endif
 104
 105 endif