dropbear: split out curve25519 support into a separate config option
[openwrt/openwrt.git] / package / network / services / dropbear / Config.in
1 menu "Configuration"
2 depends on PACKAGE_dropbear
3
4 config DROPBEAR_CURVE25519
5 bool "Curve25519 support"
6 default n
7 help
8 This enables the following key exchange algorithm:
9 curve25519-sha256@libssh.org
10
11 Increases binary size by about 13 kB uncompressed (MIPS).
12
13 config DROPBEAR_ECC
14 bool "Elliptic curve cryptography (ECC)"
15 default n
16 help
17 Enables elliptic curve cryptography (ECC) support in key exchange and public key
18 authentication.
19
20 Key exchange algorithms:
21 ecdh-sha2-nistp256
22 ecdh-sha2-nistp384
23 ecdh-sha2-nistp521
24
25 Public key algorithms:
26 ecdsa-sha2-nistp256
27 ecdsa-sha2-nistp384
28 ecdsa-sha2-nistp521
29
30 Does not generate ECC host keys by default (ECC key exchange will not be used,
31 only ECC public key auth).
32
33 Increases binary size by about 23 kB (MIPS).
34
35 endmenu