1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
5 * Uncomment to get errors on using deprecated functions.
7 -//#define MBEDTLS_DEPRECATED_REMOVED
8 +#define MBEDTLS_DEPRECATED_REMOVED
10 /* \} name SECTION: System support */
14 * Comment macros to disable the curve and functions for it
16 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
17 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
18 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
19 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
20 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
21 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
22 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
23 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
24 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
25 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
26 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
27 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
28 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
29 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
30 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
31 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
32 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
33 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
34 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
35 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
39 * Requires: MBEDTLS_HMAC_DRBG_C
41 * Comment this macro to disable deterministic ECDSA.
43 #define MBEDTLS_ECDSA_DETERMINISTIC
47 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
49 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
50 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
52 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
53 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
56 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
58 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
59 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
60 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
62 #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
66 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
68 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
69 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
71 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
72 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
75 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
77 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
78 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
80 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
81 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
84 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
86 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
87 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
89 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
90 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
93 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
95 * This option is only useful if both MBEDTLS_SHA256_C and
96 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
98 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
99 +#define MBEDTLS_ENTROPY_FORCE_SHA256
102 * \def MBEDTLS_ENTROPY_NV_SEED
103 @@ -917,14 +917,14 @@
104 * Uncomment this macro to disable the use of CRT in RSA.
107 -//#define MBEDTLS_RSA_NO_CRT
108 +#define MBEDTLS_RSA_NO_CRT
111 * \def MBEDTLS_SELF_TEST
113 * Enable the checkup functions (*_self_test).
115 -#define MBEDTLS_SELF_TEST
116 +//#define MBEDTLS_SELF_TEST
119 * \def MBEDTLS_SHA256_SMALLER
122 * Uncomment to enable the smaller implementation of SHA256.
124 -//#define MBEDTLS_SHA256_SMALLER
125 +#define MBEDTLS_SHA256_SMALLER
128 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
129 @@ -1059,8 +1059,8 @@
130 * misuse/misunderstand.
132 * Comment this to disable support for renegotiation.
134 #define MBEDTLS_SSL_RENEGOTIATION
138 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
139 @@ -1234,8 +1234,8 @@
140 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
142 * Comment this macro to disable support for SSL session tickets
144 #define MBEDTLS_SSL_SESSION_TICKETS
148 * \def MBEDTLS_SSL_EXPORT_KEYS
149 @@ -1265,7 +1265,7 @@
151 * Comment this macro to disable support for truncated HMAC in SSL
153 -#define MBEDTLS_SSL_TRUNCATED_HMAC
154 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
157 * \def MBEDTLS_THREADING_ALT
158 @@ -1299,8 +1299,8 @@
159 * Requires: MBEDTLS_VERSION_C
161 * Comment this to disable run-time checking and save ROM space
163 #define MBEDTLS_VERSION_FEATURES
167 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
168 @@ -1621,7 +1621,7 @@
169 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
170 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
172 -#define MBEDTLS_CAMELLIA_C
173 +//#define MBEDTLS_CAMELLIA_C
177 @@ -1635,7 +1635,7 @@
178 * This module enables the AES-CCM ciphersuites, if other requisites are
181 -#define MBEDTLS_CCM_C
182 +//#define MBEDTLS_CCM_C
185 * \def MBEDTLS_CERTS_C
186 @@ -1647,7 +1647,7 @@
188 * This module is used for testing (ssl_client/server).
190 -#define MBEDTLS_CERTS_C
191 +//#define MBEDTLS_CERTS_C
194 * \def MBEDTLS_CIPHER_C
195 @@ -1700,7 +1700,7 @@
197 * This module provides debugging functions.
199 -#define MBEDTLS_DEBUG_C
200 +//#define MBEDTLS_DEBUG_C
204 @@ -1725,8 +1725,8 @@
205 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
207 * PEM_PARSE uses DES/3DES for decrypting encrypted keys.
209 #define MBEDTLS_DES_C
214 @@ -1880,8 +1880,8 @@
215 * Requires: MBEDTLS_MD_C
217 * Uncomment to enable the HMAC_DRBG random number geerator.
219 #define MBEDTLS_HMAC_DRBG_C
224 @@ -2158,7 +2158,7 @@
225 * Caller: library/mbedtls_md.c
228 -#define MBEDTLS_RIPEMD160_C
229 +//#define MBEDTLS_RIPEMD160_C
233 @@ -2235,8 +2235,8 @@
236 * Requires: MBEDTLS_SSL_CACHE_C
238 #define MBEDTLS_SSL_CACHE_C
242 * \def MBEDTLS_SSL_COOKIE_C
243 @@ -2257,8 +2257,8 @@
246 * Requires: MBEDTLS_CIPHER_C
248 #define MBEDTLS_SSL_TICKET_C
252 * \def MBEDTLS_SSL_CLI_C
253 @@ -2357,8 +2357,8 @@
254 * Module: library/version.c
256 * This module provides run-time version information.
258 #define MBEDTLS_VERSION_C
262 * \def MBEDTLS_X509_USE_C
263 @@ -2468,7 +2468,7 @@
264 * Module: library/xtea.c
267 -#define MBEDTLS_XTEA_C
268 +//#define MBEDTLS_XTEA_C
270 /* \} name SECTION: mbed TLS modules */