1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
5 * Uncomment to get errors on using deprecated functions.
7 -//#define MBEDTLS_DEPRECATED_REMOVED
8 +#define MBEDTLS_DEPRECATED_REMOVED
10 /* \} name SECTION: System support */
14 * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
16 -#define MBEDTLS_CIPHER_MODE_CFB
17 +//#define MBEDTLS_CIPHER_MODE_CFB
20 * \def MBEDTLS_CIPHER_MODE_CTR
23 * Comment macros to disable the curve and functions for it
25 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
26 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
27 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
28 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
29 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
30 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
31 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
32 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
33 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
34 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
35 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
36 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
37 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
38 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
39 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
40 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
41 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
42 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
43 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
44 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
48 * Requires: MBEDTLS_HMAC_DRBG_C
50 * Comment this macro to disable deterministic ECDSA.
52 #define MBEDTLS_ECDSA_DETERMINISTIC
56 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
58 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
59 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
61 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
62 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
65 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
67 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
68 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
69 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
71 #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
75 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
77 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
78 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
80 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
81 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
84 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
86 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
87 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
89 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
90 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
93 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
95 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
96 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
98 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
99 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
102 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
104 * This option is only useful if both MBEDTLS_SHA256_C and
105 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
107 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
108 +#define MBEDTLS_ENTROPY_FORCE_SHA256
111 * \def MBEDTLS_ENTROPY_NV_SEED
112 @@ -917,14 +917,14 @@
113 * Uncomment this macro to disable the use of CRT in RSA.
116 -//#define MBEDTLS_RSA_NO_CRT
117 +#define MBEDTLS_RSA_NO_CRT
120 * \def MBEDTLS_SELF_TEST
122 * Enable the checkup functions (*_self_test).
124 -#define MBEDTLS_SELF_TEST
125 +//#define MBEDTLS_SELF_TEST
128 * \def MBEDTLS_SHA256_SMALLER
131 * Uncomment to enable the smaller implementation of SHA256.
133 -//#define MBEDTLS_SHA256_SMALLER
134 +#define MBEDTLS_SHA256_SMALLER
137 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
138 @@ -1059,8 +1059,8 @@
139 * misuse/misunderstand.
141 * Comment this to disable support for renegotiation.
143 #define MBEDTLS_SSL_RENEGOTIATION
147 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
148 @@ -1234,8 +1234,8 @@
149 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
151 * Comment this macro to disable support for SSL session tickets
153 #define MBEDTLS_SSL_SESSION_TICKETS
157 * \def MBEDTLS_SSL_EXPORT_KEYS
158 @@ -1265,7 +1265,7 @@
160 * Comment this macro to disable support for truncated HMAC in SSL
162 -#define MBEDTLS_SSL_TRUNCATED_HMAC
163 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
166 * \def MBEDTLS_THREADING_ALT
167 @@ -1299,8 +1299,8 @@
168 * Requires: MBEDTLS_VERSION_C
170 * Comment this to disable run-time checking and save ROM space
172 #define MBEDTLS_VERSION_FEATURES
176 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
177 @@ -1501,7 +1501,7 @@
178 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
179 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
181 -#define MBEDTLS_ARC4_C
182 +//#define MBEDTLS_ARC4_C
185 * \def MBEDTLS_ASN1_PARSE_C
186 @@ -1621,7 +1621,7 @@
187 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
188 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
190 -#define MBEDTLS_CAMELLIA_C
191 +//#define MBEDTLS_CAMELLIA_C
195 @@ -1635,7 +1635,7 @@
196 * This module enables the AES-CCM ciphersuites, if other requisites are
199 -#define MBEDTLS_CCM_C
200 +//#define MBEDTLS_CCM_C
203 * \def MBEDTLS_CERTS_C
204 @@ -1647,7 +1647,7 @@
206 * This module is used for testing (ssl_client/server).
208 -#define MBEDTLS_CERTS_C
209 +//#define MBEDTLS_CERTS_C
212 * \def MBEDTLS_CIPHER_C
213 @@ -1700,7 +1700,7 @@
215 * This module provides debugging functions.
217 -#define MBEDTLS_DEBUG_C
218 +//#define MBEDTLS_DEBUG_C
222 @@ -1725,8 +1725,8 @@
223 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
225 * PEM_PARSE uses DES/3DES for decrypting encrypted keys.
227 #define MBEDTLS_DES_C
232 @@ -1880,8 +1880,8 @@
233 * Requires: MBEDTLS_MD_C
235 * Uncomment to enable the HMAC_DRBG random number geerator.
237 #define MBEDTLS_HMAC_DRBG_C
242 @@ -2158,7 +2158,7 @@
243 * Caller: library/mbedtls_md.c
246 -#define MBEDTLS_RIPEMD160_C
247 +//#define MBEDTLS_RIPEMD160_C
251 @@ -2235,8 +2235,8 @@
254 * Requires: MBEDTLS_SSL_CACHE_C
256 #define MBEDTLS_SSL_CACHE_C
260 * \def MBEDTLS_SSL_COOKIE_C
261 @@ -2257,8 +2257,8 @@
264 * Requires: MBEDTLS_CIPHER_C
266 #define MBEDTLS_SSL_TICKET_C
270 * \def MBEDTLS_SSL_CLI_C
271 @@ -2357,8 +2357,8 @@
272 * Module: library/version.c
274 * This module provides run-time version information.
276 #define MBEDTLS_VERSION_C
280 * \def MBEDTLS_X509_USE_C
281 @@ -2468,7 +2468,7 @@
282 * Module: library/xtea.c
285 -#define MBEDTLS_XTEA_C
286 +//#define MBEDTLS_XTEA_C
288 /* \} name SECTION: mbed TLS modules */