mirror of
https://github.com/espressif/esp-idf.git
synced 2025-08-09 20:41:14 +00:00
mbedtls: disable Diffie-Hellman key exchange modes by default
Using these ciphers can constitute a security risk if the server uses a weak prime for the key exchange. Footprint impact: Roughly 3K saved in text+rodata in default https_request example
This commit is contained in:
@@ -1601,7 +1601,11 @@
|
||||
* This module is used by the following key exchanges:
|
||||
* DHE-RSA, DHE-PSK
|
||||
*/
|
||||
#ifdef CONFIG_MBEDTLS_DHM_C
|
||||
#define MBEDTLS_DHM_C
|
||||
#else
|
||||
#undef MBEDTLS_DHM_C
|
||||
#endif
|
||||
|
||||
/**
|
||||
* \def MBEDTLS_ECDH_C
|
||||
|
Reference in New Issue
Block a user