mbedtls: enable NIST curves optimisation.
authorKevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
Wed, 12 Oct 2016 10:42:15 +0000 (11:42 +0100)
committerJo-Philipp Wich <jo@mein.io>
Thu, 13 Oct 2016 18:25:42 +0000 (20:25 +0200)
luci using ustream-mbedtls is extremely slow vs ustream-polarssl.
polarssl alias mbedtls v1 is configured to use NIST prime speed
optimisation, so no longer disable the default optimisation for
mbedtls v2.

Compile & run tested: Archer C7v2

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
[Jo-Philipp Wich: refresh patch to use common format]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
package/libs/mbedtls/patches/200-config.patch

index e4118ff..54910b9 100644 (file)
  #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
  #define MBEDTLS_ECP_DP_BP256R1_ENABLED
  #define MBEDTLS_ECP_DP_BP384R1_ENABLED
-@@ -457,7 +457,7 @@
-  *
-  * Comment this macro to disable NIST curves optimisation.
-  */
--#define MBEDTLS_ECP_NIST_OPTIM
-+//#define MBEDTLS_ECP_NIST_OPTIM
- /**
-  * \def MBEDTLS_ECDSA_DETERMINISTIC
 @@ -517,7 +517,7 @@
   *      MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
   *      MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA