1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
5 * Comment macros to disable the curve and functions for it
7 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
8 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
9 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
10 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
11 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
12 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
13 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
14 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
15 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
16 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
17 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
18 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
19 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
20 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
21 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
22 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
23 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
24 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
25 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
26 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
30 * Requires: MBEDTLS_HMAC_DRBG_C
32 * Comment this macro to disable deterministic ECDSA.
34 #define MBEDTLS_ECDSA_DETERMINISTIC
38 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
40 * See dhm.h for more details.
43 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
44 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
47 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
49 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
50 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
51 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
53 #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
57 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
59 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
60 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
62 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
63 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
66 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
68 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
69 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
71 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
72 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
75 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
77 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
78 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
80 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
81 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
84 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
86 * This option is only useful if both MBEDTLS_SHA256_C and
87 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
89 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
90 +#define MBEDTLS_ENTROPY_FORCE_SHA256
93 * \def MBEDTLS_ENTROPY_NV_SEED
94 @@ -1057,14 +1057,14 @@
95 * Uncomment this macro to disable the use of CRT in RSA.
98 -//#define MBEDTLS_RSA_NO_CRT
99 +#define MBEDTLS_RSA_NO_CRT
102 * \def MBEDTLS_SELF_TEST
104 * Enable the checkup functions (*_self_test).
106 -#define MBEDTLS_SELF_TEST
107 +//#define MBEDTLS_SELF_TEST
110 * \def MBEDTLS_SHA256_SMALLER
111 @@ -1080,7 +1080,7 @@
113 * Uncomment to enable the smaller implementation of SHA256.
115 -//#define MBEDTLS_SHA256_SMALLER
116 +#define MBEDTLS_SHA256_SMALLER
119 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
120 @@ -1207,7 +1207,7 @@
121 * configuration of this extension).
124 -#define MBEDTLS_SSL_RENEGOTIATION
125 +//#define MBEDTLS_SSL_RENEGOTIATION
128 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
129 @@ -1381,8 +1381,8 @@
130 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
132 * Comment this macro to disable support for SSL session tickets
134 #define MBEDTLS_SSL_SESSION_TICKETS
138 * \def MBEDTLS_SSL_EXPORT_KEYS
139 @@ -1412,7 +1412,7 @@
141 * Comment this macro to disable support for truncated HMAC in SSL
143 -#define MBEDTLS_SSL_TRUNCATED_HMAC
144 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
147 * \def MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
148 @@ -1470,8 +1470,8 @@
149 * Requires: MBEDTLS_VERSION_C
151 * Comment this to disable run-time checking and save ROM space
153 #define MBEDTLS_VERSION_FEATURES
157 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
158 @@ -1801,7 +1801,7 @@
159 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
160 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
162 -#define MBEDTLS_CAMELLIA_C
163 +//#define MBEDTLS_CAMELLIA_C
167 @@ -1815,7 +1815,7 @@
168 * This module enables the AES-CCM ciphersuites, if other requisites are
171 -#define MBEDTLS_CCM_C
172 +//#define MBEDTLS_CCM_C
175 * \def MBEDTLS_CERTS_C
176 @@ -1827,7 +1827,7 @@
178 * This module is used for testing (ssl_client/server).
180 -#define MBEDTLS_CERTS_C
181 +//#define MBEDTLS_CERTS_C
184 * \def MBEDTLS_CIPHER_C
185 @@ -1880,7 +1880,7 @@
187 * This module provides debugging functions.
189 -#define MBEDTLS_DEBUG_C
190 +//#define MBEDTLS_DEBUG_C
194 @@ -1909,7 +1909,7 @@
195 * \warning DES is considered a weak cipher and its use constitutes a
196 * security risk. We recommend considering stronger ciphers instead.
198 -#define MBEDTLS_DES_C
199 +//#define MBEDTLS_DES_C
203 @@ -2070,8 +2070,8 @@
204 * Requires: MBEDTLS_MD_C
206 * Uncomment to enable the HMAC_DRBG random number geerator.
208 #define MBEDTLS_HMAC_DRBG_C
213 @@ -2365,7 +2365,7 @@
214 * Caller: library/md.c
217 -#define MBEDTLS_RIPEMD160_C
218 +//#define MBEDTLS_RIPEMD160_C
222 @@ -2449,8 +2449,8 @@
225 * Requires: MBEDTLS_SSL_CACHE_C
227 #define MBEDTLS_SSL_CACHE_C
231 * \def MBEDTLS_SSL_COOKIE_C
232 @@ -2471,8 +2471,8 @@
235 * Requires: MBEDTLS_CIPHER_C
237 #define MBEDTLS_SSL_TICKET_C
241 * \def MBEDTLS_SSL_CLI_C
242 @@ -2571,8 +2571,8 @@
243 * Module: library/version.c
245 * This module provides run-time version information.
247 #define MBEDTLS_VERSION_C
251 * \def MBEDTLS_X509_USE_C
252 @@ -2682,7 +2682,7 @@
253 * Module: library/xtea.c
256 -#define MBEDTLS_XTEA_C
257 +//#define MBEDTLS_XTEA_C
259 /* \} name SECTION: mbed TLS modules */