mbedtls: Update to 2.14.1
[openwrt/openwrt.git] / package / libs / mbedtls / patches / 200-config.patch
1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
3 @@ -557,14 +557,14 @@
4 *
5 * Enable Output Feedback mode (OFB) for symmetric ciphers.
6 */
7 -#define MBEDTLS_CIPHER_MODE_OFB
8 +//#define MBEDTLS_CIPHER_MODE_OFB
9
10 /**
11 * \def MBEDTLS_CIPHER_MODE_XTS
12 *
13 * Enable Xor-encrypt-xor with ciphertext stealing mode (XTS) for AES.
14 */
15 -#define MBEDTLS_CIPHER_MODE_XTS
16 +//#define MBEDTLS_CIPHER_MODE_XTS
17
18 /**
19 * \def MBEDTLS_CIPHER_NULL_CIPHER
20 @@ -654,19 +654,19 @@
21 *
22 * Comment macros to disable the curve and functions for it
23 */
24 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
25 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
26 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
27 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
28 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
29 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
30 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
31 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
32 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
33 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
34 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
35 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
36 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
37 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
38 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
39 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
40 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
41 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
42 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
43 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
44 -#define MBEDTLS_ECP_DP_CURVE448_ENABLED
45 +//#define MBEDTLS_ECP_DP_CURVE448_ENABLED
46
47 /**
48 * \def MBEDTLS_ECP_NIST_OPTIM
49 @@ -768,7 +768,7 @@
50 * See dhm.h for more details.
51 *
52 */
53 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
54 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
55
56 /**
57 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
58 @@ -788,7 +788,7 @@
59 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
60 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
61 */
62 -#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
63 +//#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
64
65 /**
66 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
67 @@ -813,7 +813,7 @@
68 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
69 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
70 */
71 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
72 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
73
74 /**
75 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
76 @@ -947,7 +947,7 @@
77 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
78 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
79 */
80 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
81 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
82
83 /**
84 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
85 @@ -971,7 +971,7 @@
86 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
87 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
88 */
89 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
90 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
91
92 /**
93 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
94 @@ -1075,7 +1075,7 @@
95 * This option is only useful if both MBEDTLS_SHA256_C and
96 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
97 */
98 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
99 +#define MBEDTLS_ENTROPY_FORCE_SHA256
100
101 /**
102 * \def MBEDTLS_ENTROPY_NV_SEED
103 @@ -1170,14 +1170,14 @@
104 * Uncomment this macro to disable the use of CRT in RSA.
105 *
106 */
107 -//#define MBEDTLS_RSA_NO_CRT
108 +#define MBEDTLS_RSA_NO_CRT
109
110 /**
111 * \def MBEDTLS_SELF_TEST
112 *
113 * Enable the checkup functions (*_self_test).
114 */
115 -#define MBEDTLS_SELF_TEST
116 +//#define MBEDTLS_SELF_TEST
117
118 /**
119 * \def MBEDTLS_SHA256_SMALLER
120 @@ -1331,7 +1331,7 @@
121 * configuration of this extension).
122 *
123 */
124 -#define MBEDTLS_SSL_RENEGOTIATION
125 +//#define MBEDTLS_SSL_RENEGOTIATION
126
127 /**
128 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
129 @@ -1506,7 +1506,7 @@
130 *
131 * Comment this macro to disable support for SSL session tickets
132 */
133 -#define MBEDTLS_SSL_SESSION_TICKETS
134 +//#define MBEDTLS_SSL_SESSION_TICKETS
135
136 /**
137 * \def MBEDTLS_SSL_EXPORT_KEYS
138 @@ -1536,7 +1536,7 @@
139 *
140 * Comment this macro to disable support for truncated HMAC in SSL
141 */
142 -#define MBEDTLS_SSL_TRUNCATED_HMAC
143 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
144
145 /**
146 * \def MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
147 @@ -1595,7 +1595,7 @@
148 *
149 * Comment this to disable run-time checking and save ROM space
150 */
151 -#define MBEDTLS_VERSION_FEATURES
152 +//#define MBEDTLS_VERSION_FEATURES
153
154 /**
155 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
156 @@ -1925,7 +1925,7 @@
157 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
158 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
159 */
160 -#define MBEDTLS_CAMELLIA_C
161 +//#define MBEDTLS_CAMELLIA_C
162
163 /**
164 * \def MBEDTLS_ARIA_C
165 @@ -1991,7 +1991,7 @@
166 * This module enables the AES-CCM ciphersuites, if other requisites are
167 * enabled as well.
168 */
169 -#define MBEDTLS_CCM_C
170 +//#define MBEDTLS_CCM_C
171
172 /**
173 * \def MBEDTLS_CERTS_C
174 @@ -2003,7 +2003,7 @@
175 *
176 * This module is used for testing (ssl_client/server).
177 */
178 -#define MBEDTLS_CERTS_C
179 +//#define MBEDTLS_CERTS_C
180
181 /**
182 * \def MBEDTLS_CHACHA20_C
183 @@ -2078,7 +2078,7 @@
184 *
185 * This module provides debugging functions.
186 */
187 -#define MBEDTLS_DEBUG_C
188 +//#define MBEDTLS_DEBUG_C
189
190 /**
191 * \def MBEDTLS_DES_C
192 @@ -2107,7 +2107,7 @@
193 * \warning DES is considered a weak cipher and its use constitutes a
194 * security risk. We recommend considering stronger ciphers instead.
195 */
196 -#define MBEDTLS_DES_C
197 +//#define MBEDTLS_DES_C
198
199 /**
200 * \def MBEDTLS_DHM_C
201 @@ -2270,7 +2270,7 @@
202 * This module adds support for the Hashed Message Authentication Code
203 * (HMAC)-based key derivation function (HKDF).
204 */
205 -#define MBEDTLS_HKDF_C
206 +//#define MBEDTLS_HKDF_C
207
208 /**
209 * \def MBEDTLS_HMAC_DRBG_C
210 @@ -2580,7 +2580,7 @@
211 *
212 * This module enables abstraction of common (libc) functions.
213 */
214 -#define MBEDTLS_PLATFORM_C
215 +//#define MBEDTLS_PLATFORM_C
216
217 /**
218 * \def MBEDTLS_POLY1305_C
219 @@ -2601,7 +2601,7 @@
220 * Caller: library/md.c
221 *
222 */
223 -#define MBEDTLS_RIPEMD160_C
224 +//#define MBEDTLS_RIPEMD160_C
225
226 /**
227 * \def MBEDTLS_RSA_C
228 @@ -2708,7 +2708,7 @@
229 *
230 * Requires: MBEDTLS_CIPHER_C
231 */
232 -#define MBEDTLS_SSL_TICKET_C
233 +//#define MBEDTLS_SSL_TICKET_C
234
235 /**
236 * \def MBEDTLS_SSL_CLI_C
237 @@ -2808,7 +2808,7 @@
238 *
239 * This module provides run-time version information.
240 */
241 -#define MBEDTLS_VERSION_C
242 +//#define MBEDTLS_VERSION_C
243
244 /**
245 * \def MBEDTLS_X509_USE_C
246 @@ -2918,7 +2918,7 @@
247 * Module: library/xtea.c
248 * Caller:
249 */
250 -#define MBEDTLS_XTEA_C
251 +//#define MBEDTLS_XTEA_C
252
253 /* \} name SECTION: mbed TLS modules */
254