From: Daniel Engberg Date: Sun, 24 Jun 2018 19:19:18 +0000 (+0200) Subject: mbedtls: Disable MBEDTLS_SHA256_SMALLER implementation X-Git-Tag: v19.07.0-rc1~3229 X-Git-Url: http://git.openwrt.org/?p=openwrt%2Fopenwrt.git;a=commitdiff_plain;h=5a078180d08db8d4261119cd396a38b0261bfc5b mbedtls: Disable MBEDTLS_SHA256_SMALLER implementation Disable MBEDTLS_SHA256_SMALLER implementation, not enabled by default in upstream and reduces performance by quite a bit. Source: include/mbedtls/config.h Enable an implementation of SHA-256 that has lower ROM footprint but also lower performance. The default implementation is meant to be a reasonnable compromise between performance and size. This version optimizes more aggressively for size at the expense of performance. Eg on Cortex-M4 it reduces the size of mbedtls_sha256_process() from ~2KB to ~0.5KB for a performance hit of about 30%. The size of mbedtls increased a little bit: ipkg for mips_24kc before: 164.382 Bytes ipkg for mips_24kc after: 166.240 Bytes Signed-off-by: Daniel Engberg --- diff --git a/package/libs/mbedtls/patches/200-config.patch b/package/libs/mbedtls/patches/200-config.patch index de352a66fb..e3e6d23ddd 100644 --- a/package/libs/mbedtls/patches/200-config.patch +++ b/package/libs/mbedtls/patches/200-config.patch @@ -126,15 +126,6 @@ /** * \def MBEDTLS_SHA256_SMALLER -@@ -1134,7 +1134,7 @@ - * - * Uncomment to enable the smaller implementation of SHA256. - */ --//#define MBEDTLS_SHA256_SMALLER -+#define MBEDTLS_SHA256_SMALLER - - /** - * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES @@ -1272,7 +1272,7 @@ * configuration of this extension). *