mirror of
https://github.com/espressif/esp-idf.git
synced 2025-10-06 05:10:36 +00:00
103 lines
2.9 KiB
Plaintext
103 lines
2.9 KiB
Plaintext
#
|
|
# mbedTLS Minimal Configuration Preset
|
|
#
|
|
|
|
# Core Configuration
|
|
CONFIG_MBEDTLS_FS_IO=n
|
|
CONFIG_MBEDTLS_ERROR_STRINGS=n
|
|
CONFIG_MBEDTLS_HAVE_TIME=n
|
|
CONFIG_MBEDTLS_SELF_TEST=n
|
|
|
|
# Certificates
|
|
CONFIG_MBEDTLS_PEM_PARSE_C=n
|
|
CONFIG_MBEDTLS_PEM_WRITE_C=n
|
|
CONFIG_MBEDTLS_X509_REMOVE_INFO=y
|
|
CONFIG_MBEDTLS_X509_CRL_PARSE_C=n
|
|
CONFIG_MBEDTLS_X509_CSR_PARSE_C=n
|
|
CONFIG_MBEDTLS_X509_CRT_WRITE_C=n
|
|
CONFIG_MBEDTLS_X509_CSR_WRITE_C=n
|
|
CONFIG_MBEDTLS_X509_RSASSA_PSS_SUPPORT=n
|
|
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=n
|
|
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN=n
|
|
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_NONE=y
|
|
|
|
# TLS Protocol Configuration
|
|
CONFIG_MBEDTLS_TLS_SERVER_AND_CLIENT=n
|
|
CONFIG_MBEDTLS_TLS_CLIENT_ONLY=y
|
|
CONFIG_MBEDTLS_TLS_SERVER=n
|
|
|
|
# TLS 1.3 Configuration
|
|
CONFIG_MBEDTLS_SSL_PROTO_TLS1_3=n
|
|
|
|
# TLS Key Exchange Configuration
|
|
CONFIG_MBEDTLS_PSK_MODES=y
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_PSK=y
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_PSK=n
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_PSK=n
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA=n
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_DHE_RSA=n
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA=n
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA=n
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_ELLIPTIC_CURVE=n
|
|
CONFIG_MBEDTLS_SSL_SERVER_NAME_INDICATION=n
|
|
CONFIG_MBEDTLS_SSL_ALPN=n
|
|
CONFIG_MBEDTLS_SSL_MAX_FRAGMENT_LENGTH=n
|
|
CONFIG_MBEDTLS_SSL_RENEGOTIATION=n
|
|
CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS=n
|
|
CONFIG_MBEDTLS_SERVER_SSL_SESSION_TICKETS=n
|
|
|
|
|
|
# Cipher Abstraction Layer
|
|
CONFIG_MBEDTLS_CIPHER_C=y
|
|
|
|
# Symmetric Ciphers
|
|
CONFIG_MBEDTLS_ARIA_C=n
|
|
CONFIG_MBEDTLS_BLOWFISH_C=n
|
|
CONFIG_MBEDTLS_CCM_C=n
|
|
CONFIG_MBEDTLS_CIPHER_MODE_OFB=n
|
|
CONFIG_MBEDTLS_CIPHER_MODE_XTS=y
|
|
CONFIG_MBEDTLS_GCM_C=n
|
|
CONFIG_MBEDTLS_CIPHER_PADDING=n
|
|
CONFIG_MBEDTLS_CIPHER_PADDING_PKCS7=n
|
|
CONFIG_MBEDTLS_PKCS5_C=n
|
|
CONFIG_MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS=n
|
|
CONFIG_MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN=n
|
|
CONFIG_MBEDTLS_CIPHER_PADDING_ZEROS=n
|
|
CONFIG_MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH=y
|
|
CONFIG_MBEDTLS_CMAC_C=n
|
|
|
|
# Asymmetric Ciphers
|
|
CONFIG_MBEDTLS_RSA_C=y
|
|
|
|
# Elliptic Curve Ciphers Configuration
|
|
CONFIG_MBEDTLS_ECP_C=n
|
|
CONFIG_MBEDTLS_ECP_NIST_OPTIM=n
|
|
CONFIG_MBEDTLS_DHM_C=n
|
|
CONFIG_MBEDTLS_ECDH_C=n
|
|
CONFIG_MBEDTLS_ECDSA_C=n
|
|
CONFIG_MBEDTLS_PK_PARSE_EC_EXTENDED=n
|
|
CONFIG_MBEDTLS_PK_PARSE_EC_COMPRESSED=n
|
|
CONFIG_MBEDTLS_ECDSA_DETERMINISTIC=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP192R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP224R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP384R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP521R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP192K1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP224K1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_SECP256K1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_BP256R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_BP384R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_BP512R1_ENABLED=n
|
|
CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED=n
|
|
|
|
# Hash functions
|
|
CONFIG_MBEDTLS_ROM_MD5=n
|
|
CONFIG_MBEDTLS_SHA1_C=n
|
|
CONFIG_MBEDTLS_SHA384_C=n
|
|
CONFIG_MBEDTLS_SHA512_C=n
|
|
CONFIG_MBEDTLS_MD5_C=n
|
|
#
|
|
# End of mbedTLS Minimal Configuration Preset
|
|
#
|