|
8 | 8 |
|
9 | 9 | // <h> TLS/DTLS configuration
|
10 | 10 |
|
11 |
| -// <o MBEDTLS_SSL_CIPHERSUITES> Complete list of ciphersuites to use, in order |
12 |
| -// of preference. <i> Default: MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8 <i> |
13 |
| -// Complete list of ciphersuites to use, in order of preference. <i> The value |
14 |
| -// of this configuration should be updated for the application needs. |
15 |
| -#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8 |
16 |
| - |
17 |
| -// <o SL_MBEDTLS_SSL_IN_CONTENT_LEN> Maximum TLS/DTLS fragment length in bytes |
18 |
| -// (input). <i> Default: 768 <i> The size configured here determines the size of |
19 |
| -// the internal I/O <i> buffer used in mbedTLS when receiving data. |
20 |
| -#define SL_MBEDTLS_SSL_IN_CONTENT_LEN 768 |
21 |
| - |
22 |
| -// <o SL_MBEDTLS_SSL_OUT_CONTENT_LEN> Maximum TLS/DTLS fragment length in bytes |
23 |
| -// (output). <i> Default: 768 <i> The size configured here determines the size |
24 |
| -// of the internal I/O <i> buffer used in mbedTLS when sending data. |
25 |
| -#define SL_MBEDTLS_SSL_OUT_CONTENT_LEN 768 |
26 |
| - |
27 |
| -// <q SL_MBEDTLS_SSL_MAX_FRAGMENT_LENGTH> Enable support for RFC 6066 |
28 |
| -// max_fragment_length extension in SSL. <i> Default: 1 <i> Enable support for |
29 |
| -// RFC 6066 max_fragment_length extension in SSL. |
30 |
| -#define SL_MBEDTLS_SSL_MAX_FRAGMENT_LENGTH 1 |
31 |
| - |
32 |
| -// <q SL_MBEDTLS_SSL_EXPORT_KEYS> Enable support for exporting key block and |
33 |
| -// master secret. <i> Default: 1 <i> Enable support for exporting key block and |
34 |
| -// master secret. <i> This is required for certain users of TLS, e.g. EAP-TLS. |
35 |
| -#define SL_MBEDTLS_SSL_EXPORT_KEYS 1 |
36 |
| - |
37 |
| -// <q SL_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED> Enable the PSK based ciphersuite |
38 |
| -// modes in SSL / TLS. <i> Default: 0 <i> Enable the PSK based ciphersuite modes |
39 |
| -// in SSL / TLS. |
40 |
| -#define SL_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED 0 |
41 |
| - |
42 |
| -// <q SL_MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED> Enable the ECDHE-PSK based |
43 |
| -// ciphersuite modes in SSL / TLS. <i> Default: 0 <i> Enable the ECDHE-PSK based |
44 |
| -// ciphersuite modes in SSL / TLS. |
45 |
| -#define SL_MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED 0 |
46 |
| - |
47 |
| -// <q SL_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED> Enable the ECDHE-ECDSA based |
48 |
| -// ciphersuite modes in SSL / TLS. <i> Default: 0 <i> Enable the ECDHE-ECDSA |
49 |
| -// based ciphersuite modes in SSL / TLS. |
50 |
| -#define SL_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED 0 |
51 |
| - |
52 |
| -// <q SL_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED> Enable the ECDHE-RSA based |
53 |
| -// ciphersuite modes in SSL / TLS. <i> Default: 0 <i> Enable the ECDHE-RSA based |
54 |
| -// ciphersuite modes in SSL / TLS. |
55 |
| -#define SL_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED 0 |
56 |
| - |
57 |
| -// <q SL_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED> Enable the ECDH-ECDSA based |
58 |
| -// ciphersuite modes in SSL / TLS. <i> Default: 0 <i> Enable the ECDH-ECDSA |
59 |
| -// based ciphersuite modes in SSL / TLS. |
60 |
| -#define SL_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED 0 |
61 |
| - |
62 |
| -// <q SL_MBEDTLS_ECP_ENABLE_COMPRESSED_CURVE_PARSING> Enable parsing of the |
63 |
| -// compressed curves. <i> Default: 0 <i> Enable parsing of the compressed |
64 |
| -// curves. |
| 11 | +// <o MBEDTLS_SSL_CIPHERSUITES> Complete list of ciphersuites to use, in order of preference. |
| 12 | +// <i> Default: MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8 |
| 13 | +// <i> Complete list of ciphersuites to use, in order of preference. |
| 14 | +// <i> The value of this configuration should be updated for the application needs. |
| 15 | +#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8 |
| 16 | + |
| 17 | +// <o SL_MBEDTLS_SSL_IN_CONTENT_LEN> Maximum TLS/DTLS fragment length in bytes (input). |
| 18 | +// <i> Default: 768 |
| 19 | +// <i> The size configured here determines the size of the internal I/O |
| 20 | +// <i> buffer used in mbedTLS when receiving data. |
| 21 | +#define SL_MBEDTLS_SSL_IN_CONTENT_LEN 768 |
| 22 | + |
| 23 | +// <o SL_MBEDTLS_SSL_OUT_CONTENT_LEN> Maximum TLS/DTLS fragment length in bytes (output). |
| 24 | +// <i> Default: 768 |
| 25 | +// <i> The size configured here determines the size of the internal I/O |
| 26 | +// <i> buffer used in mbedTLS when sending data. |
| 27 | +#define SL_MBEDTLS_SSL_OUT_CONTENT_LEN 768 |
| 28 | + |
| 29 | +// <q SL_MBEDTLS_SSL_MAX_FRAGMENT_LENGTH> Enable support for RFC 6066 max_fragment_length extension in SSL. |
| 30 | +// <i> Default: 1 |
| 31 | +// <i> Enable support for RFC 6066 max_fragment_length extension in SSL. |
| 32 | +#define SL_MBEDTLS_SSL_MAX_FRAGMENT_LENGTH 1 |
| 33 | + |
| 34 | +// <q SL_MBEDTLS_SSL_EXPORT_KEYS> Enable support for exporting key block and master secret. |
| 35 | +// <i> Default: 1 |
| 36 | +// <i> Enable support for exporting key block and master secret. |
| 37 | +// <i> This is required for certain users of TLS, e.g. EAP-TLS. |
| 38 | +#define SL_MBEDTLS_SSL_EXPORT_KEYS 1 |
| 39 | + |
| 40 | +// <q SL_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED> Enable the PSK based ciphersuite modes in SSL / TLS. |
| 41 | +// <i> Default: 0 |
| 42 | +// <i> Enable the PSK based ciphersuite modes in SSL / TLS. |
| 43 | +#define SL_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED 0 |
| 44 | + |
| 45 | +// <q SL_MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED> Enable the ECDHE-PSK based ciphersuite modes in SSL / TLS. |
| 46 | +// <i> Default: 0 |
| 47 | +// <i> Enable the ECDHE-PSK based ciphersuite modes in SSL / TLS. |
| 48 | +#define SL_MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED 0 |
| 49 | + |
| 50 | +// <q SL_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED> Enable the ECDHE-ECDSA based ciphersuite modes in SSL / TLS. |
| 51 | +// <i> Default: 0 |
| 52 | +// <i> Enable the ECDHE-ECDSA based ciphersuite modes in SSL / TLS. |
| 53 | +#define SL_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED 0 |
| 54 | + |
| 55 | +// <q SL_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED> Enable the ECDHE-RSA based ciphersuite modes in SSL / TLS. |
| 56 | +// <i> Default: 0 |
| 57 | +// <i> Enable the ECDHE-RSA based ciphersuite modes in SSL / TLS. |
| 58 | +#define SL_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED 0 |
| 59 | + |
| 60 | +// <q SL_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED> Enable the ECDH-ECDSA based ciphersuite modes in SSL / TLS. |
| 61 | +// <i> Default: 0 |
| 62 | +// <i> Enable the ECDH-ECDSA based ciphersuite modes in SSL / TLS. |
| 63 | +#define SL_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED 0 |
| 64 | + |
| 65 | +// <q SL_MBEDTLS_ECP_ENABLE_COMPRESSED_CURVE_PARSING> Enable parsing of the compressed curves. |
| 66 | +// <i> Default: 0 |
| 67 | +// <i> Enable parsing of the compressed curves. |
65 | 68 | #define SL_MBEDTLS_ECP_ENABLE_COMPRESSED_CURVE_PARSING 0
|
66 | 69 |
|
67 | 70 | // </h>
|
68 | 71 |
|
69 | 72 | // <h> RSA configuration
|
70 | 73 |
|
71 |
| -// <q SL_MBEDTLS_RSA_NO_CRT> Disable use of the Chinese Remainder Theorem for |
72 |
| -// RSA. <i> Default: 0 <i> Disable use of the Chinese Remainder Theorem for RSA |
73 |
| -// private key <i> computations. |
| 74 | +// <q SL_MBEDTLS_RSA_NO_CRT> Disable use of the Chinese Remainder Theorem for RSA. |
| 75 | +// <i> Default: 0 |
| 76 | +// <i> Disable use of the Chinese Remainder Theorem for RSA private key |
| 77 | +// <i> computations. |
74 | 78 | #define SL_MBEDTLS_RSA_NO_CRT 0
|
75 | 79 |
|
76 | 80 | // </h>
|
77 | 81 |
|
78 | 82 | // <h> Miscellaneous configuration
|
79 | 83 |
|
80 |
| -// <q SL_MBEDTLS_DRIVERS_ENABLED> Enable Silicon Labs' Mbed TLS- and PSA Crypto |
81 |
| -// drivers. <i> Default: 1 <i> Enable drivers for hardware acceleration (Mbed |
82 |
| -// TLS and PSA Crypto) and <i> secure key handling (PSA Crypto). |
| 84 | +// <q SL_MBEDTLS_DRIVERS_ENABLED> Enable Silicon Labs' Mbed TLS- and PSA Crypto drivers. |
| 85 | +// <i> Default: 1 |
| 86 | +// <i> Enable drivers for hardware acceleration (Mbed TLS and PSA Crypto) and |
| 87 | +// <i> secure key handling (PSA Crypto). |
83 | 88 | #define SL_MBEDTLS_DRIVERS_ENABLED 1
|
84 | 89 |
|
85 | 90 | // </h>
|
|
90 | 95 | // Sub-files
|
91 | 96 |
|
92 | 97 | #if defined(SLI_MBEDTLS_CONFIG_AUTOGEN_OVERRIDE_FILE)
|
93 |
| -#include SLI_MBEDTLS_CONFIG_AUTOGEN_OVERRIDE_FILE |
| 98 | + #include SLI_MBEDTLS_CONFIG_AUTOGEN_OVERRIDE_FILE |
94 | 99 | #else
|
95 |
| -#include "sli_mbedtls_config_autogen.h" |
| 100 | + #include "sli_mbedtls_config_autogen.h" |
96 | 101 | #endif
|
97 | 102 |
|
98 | 103 | #include "sli_mbedtls_omnipresent.h"
|
99 | 104 |
|
100 | 105 | #if SL_MBEDTLS_DRIVERS_ENABLED
|
101 |
| -#include "sli_mbedtls_acceleration.h" |
| 106 | + #include "sli_mbedtls_acceleration.h" |
102 | 107 | #endif
|
103 | 108 |
|
104 | 109 | #include "sl_mbedtls_device_config.h"
|
|
107 | 112 | // the correct Mbed TLS / PSA Crypto options.
|
108 | 113 | #include "sli_mbedtls_config_transform_autogen.h"
|
109 | 114 |
|
110 |
| -#ifdef SL_MBEDTLS_USE_TINYCRYPT |
111 |
| -#include "mbedtls/check_config.h" |
112 |
| -#else |
113 | 115 | // Included for backward compatibility reasons.
|
114 | 116 | #include "mbedtls/build_info.h"
|
115 |
| -#endif // SL_MBEDTLS_USE_TINYCRYPT |
116 | 117 |
|
117 | 118 | #endif // SL_MBEDTLS_CONFIG_H
|
0 commit comments