1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
5 * Enable Output Feedback mode (OFB) for symmetric ciphers.
7 -#define MBEDTLS_CIPHER_MODE_OFB
8 +//#define MBEDTLS_CIPHER_MODE_OFB
11 * \def MBEDTLS_CIPHER_MODE_XTS
13 * Enable Xor-encrypt-xor with ciphertext stealing mode (XTS) for AES.
15 -#define MBEDTLS_CIPHER_MODE_XTS
16 +//#define MBEDTLS_CIPHER_MODE_XTS
19 * \def MBEDTLS_CIPHER_NULL_CIPHER
21 * Comment macros to disable the curve and functions for it
23 /* Short Weierstrass curves (supporting ECP, ECDH, ECDSA) */
24 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
25 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
26 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
27 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
28 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
29 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
30 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
31 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
32 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
33 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
34 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
35 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
36 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
37 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
38 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
39 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
40 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
41 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
42 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
43 /* Montgomery curves (supporting ECP) */
44 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
45 -#define MBEDTLS_ECP_DP_CURVE448_ENABLED
46 +//#define MBEDTLS_ECP_DP_CURVE448_ENABLED
49 * \def MBEDTLS_ECP_NIST_OPTIM
51 * See dhm.h for more details.
54 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
55 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
58 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
60 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
61 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
63 -#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
64 +//#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
67 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
69 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
70 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
72 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
73 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
76 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
78 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
79 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
81 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
82 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
85 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
87 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
88 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
90 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
91 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
94 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
96 * This option is only useful if both MBEDTLS_SHA256_C and
97 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
99 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
100 +#define MBEDTLS_ENTROPY_FORCE_SHA256
103 * \def MBEDTLS_ENTROPY_NV_SEED
104 @@ -1483,14 +1483,14 @@
105 * Uncomment this macro to disable the use of CRT in RSA.
108 -//#define MBEDTLS_RSA_NO_CRT
109 +#define MBEDTLS_RSA_NO_CRT
112 * \def MBEDTLS_SELF_TEST
114 * Enable the checkup functions (*_self_test).
116 -#define MBEDTLS_SELF_TEST
117 +//#define MBEDTLS_SELF_TEST
120 * \def MBEDTLS_SHA256_SMALLER
121 @@ -1761,7 +1761,7 @@
122 * configuration of this extension).
125 -#define MBEDTLS_SSL_RENEGOTIATION
126 +//#define MBEDTLS_SSL_RENEGOTIATION
129 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
130 @@ -2022,7 +2022,7 @@
132 * Comment this macro to disable support for truncated HMAC in SSL
134 -#define MBEDTLS_SSL_TRUNCATED_HMAC
135 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
138 * \def MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
139 @@ -2201,7 +2201,7 @@
141 * Comment this to disable run-time checking and save ROM space
143 -#define MBEDTLS_VERSION_FEATURES
144 +//#define MBEDTLS_VERSION_FEATURES
147 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
148 @@ -2550,7 +2550,7 @@
149 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
150 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
152 -#define MBEDTLS_CAMELLIA_C
153 +//#define MBEDTLS_CAMELLIA_C
156 * \def MBEDTLS_ARIA_C
157 @@ -2616,7 +2616,7 @@
158 * This module enables the AES-CCM ciphersuites, if other requisites are
161 -#define MBEDTLS_CCM_C
162 +//#define MBEDTLS_CCM_C
165 * \def MBEDTLS_CERTS_C
166 @@ -2628,7 +2628,7 @@
168 * This module is used for testing (ssl_client/server).
170 -#define MBEDTLS_CERTS_C
171 +//#define MBEDTLS_CERTS_C
174 * \def MBEDTLS_CHACHA20_C
175 @@ -2741,7 +2741,7 @@
176 * \warning DES is considered a weak cipher and its use constitutes a
177 * security risk. We recommend considering stronger ciphers instead.
179 -#define MBEDTLS_DES_C
180 +//#define MBEDTLS_DES_C
184 @@ -2906,7 +2906,7 @@
185 * This module adds support for the Hashed Message Authentication Code
186 * (HMAC)-based key derivation function (HKDF).
188 -#define MBEDTLS_HKDF_C
189 +//#define MBEDTLS_HKDF_C
192 * \def MBEDTLS_HMAC_DRBG_C
193 @@ -3219,7 +3219,7 @@
195 * This module enables abstraction of common (libc) functions.
197 -#define MBEDTLS_PLATFORM_C
198 +//#define MBEDTLS_PLATFORM_C
201 * \def MBEDTLS_POLY1305_C
202 @@ -3295,7 +3295,7 @@
203 * Caller: library/md.c
206 -#define MBEDTLS_RIPEMD160_C
207 +//#define MBEDTLS_RIPEMD160_C
211 @@ -3506,7 +3506,7 @@
213 * This module provides run-time version information.
215 -#define MBEDTLS_VERSION_C
216 +//#define MBEDTLS_VERSION_C
219 * \def MBEDTLS_X509_USE_C
220 @@ -3616,7 +3616,7 @@
221 * Module: library/xtea.c
224 -#define MBEDTLS_XTEA_C
225 +//#define MBEDTLS_XTEA_C
227 /** \} name SECTION: mbed TLS modules */