2024-04-24 16:34:14 +01:00
|
|
|
/**
|
|
|
|
|
* \file crypto-config-thread.h
|
|
|
|
|
*
|
|
|
|
|
* \brief Minimal crypto configuration for using TLS as part of Thread
|
|
|
|
|
*/
|
|
|
|
|
/*
|
|
|
|
|
* Copyright The Mbed TLS Contributors
|
|
|
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Minimal crypto configuration for using TLS as part of Thread
|
|
|
|
|
* http://threadgroup.org/
|
|
|
|
|
*
|
|
|
|
|
* Distinguishing features:
|
|
|
|
|
* - no RSA or classic DH, fully based on ECC
|
|
|
|
|
* - no X.509
|
|
|
|
|
* - support for experimental EC J-PAKE key exchange
|
2024-05-17 13:25:12 +02:00
|
|
|
* - support for PBKDF2-AES-CMAC-PRF-128 password-hashing or key-stretching
|
|
|
|
|
* algorithm.
|
2024-04-24 16:34:14 +01:00
|
|
|
*
|
|
|
|
|
* To be used in conjunction with configs/config-thread.h.
|
|
|
|
|
* See README.txt for usage instructions.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
#ifndef PSA_CRYPTO_CONFIG_H
|
|
|
|
|
#define PSA_CRYPTO_CONFIG_H
|
|
|
|
|
|
|
|
|
|
#define PSA_WANT_ALG_CCM 1
|
2024-04-30 17:21:43 +01:00
|
|
|
#define PSA_WANT_ALG_ECB_NO_PADDING 1
|
|
|
|
|
#define PSA_WANT_ALG_HMAC 1
|
2024-04-24 16:34:14 +01:00
|
|
|
#define PSA_WANT_ALG_JPAKE 1
|
2024-05-17 13:25:12 +02:00
|
|
|
#define PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128 1
|
2024-04-24 16:34:14 +01:00
|
|
|
#define PSA_WANT_ALG_SHA_256 1
|
|
|
|
|
#define PSA_WANT_ALG_TLS12_PRF 1
|
|
|
|
|
#define PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS 1
|
|
|
|
|
#define PSA_WANT_ECC_SECP_R1_256 1
|
|
|
|
|
|
|
|
|
|
#define PSA_WANT_KEY_TYPE_AES 1
|
|
|
|
|
#define PSA_WANT_KEY_TYPE_DERIVE 1
|
|
|
|
|
#define PSA_WANT_KEY_TYPE_HMAC 1
|
|
|
|
|
#define PSA_WANT_KEY_TYPE_RAW_DATA 1
|
|
|
|
|
#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC 1
|
2024-04-30 17:21:43 +01:00
|
|
|
#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT 1
|
2024-04-24 16:34:14 +01:00
|
|
|
#define PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE 1
|
2024-05-17 13:25:12 +02:00
|
|
|
|
2024-11-01 17:40:10 +00:00
|
|
|
#define MBEDTLS_PSA_CRYPTO_C
|
|
|
|
|
|
|
|
|
|
/* System support */
|
|
|
|
|
#define MBEDTLS_HAVE_ASM
|
Have MBEDTLS_TIMING_C require MBEDTLS_HAVE_TIME
Nowadays, the timing module just builds on a function that provides a timer
with millisecond resolution. In terms of platform requirements, this is
almost exactly equivalent to `mbedtls_ms_time()`
provides (`mbedtls_ms_time()` is arguably a little stronger because it is
supposed to last longer than a single timer object, but an application could
start a timer when it starts, so there's no real difference.) So it's a bit
silly that `timing.c` essentially reimplements this. Rely on
`mbedtls_ms_time()` instead.
This is an API break because in Mbed TLS 4.0, it was possible to enable
`MBEDTLS_TIMING_C` without `MBEDTLS_HAVE_TIME`. However, `timing.c` only
provided an implementation for Windows and Unix-like platforms, and on those
platforms, it is very likely that the default implementation of
`MBEDTLS_HAVE_TIME` would also work. (The main exception would be a platform
that has the traditional Unix function `gettimeofday()`, but not the 1990s
novelty `clock_gettime()`.) So make this an official requirement, as a
belated change that really should have gone into 4.0 if we'd taken the time
to dig into it.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2026-02-19 16:26:18 +01:00
|
|
|
#define MBEDTLS_HAVE_TIME //Only used by test programs
|
2024-11-01 17:40:10 +00:00
|
|
|
|
|
|
|
|
#define MBEDTLS_AES_ROM_TABLES
|
|
|
|
|
#define MBEDTLS_ECP_NIST_OPTIM
|
|
|
|
|
|
|
|
|
|
#define MBEDTLS_ASN1_PARSE_C
|
|
|
|
|
#define MBEDTLS_ASN1_WRITE_C
|
|
|
|
|
#define MBEDTLS_CTR_DRBG_C
|
|
|
|
|
#define MBEDTLS_HMAC_DRBG_C
|
|
|
|
|
#define MBEDTLS_MD_C
|
|
|
|
|
#define MBEDTLS_PK_C
|
|
|
|
|
#define MBEDTLS_PK_PARSE_C
|
2025-07-15 13:09:00 +02:00
|
|
|
#define MBEDTLS_PSA_BUILTIN_GET_ENTROPY
|
2024-11-01 17:40:10 +00:00
|
|
|
|
|
|
|
|
/* Save RAM at the expense of ROM */
|
|
|
|
|
#define MBEDTLS_AES_ROM_TABLES
|
|
|
|
|
|
|
|
|
|
/* Save RAM by adjusting to our exact needs */
|
|
|
|
|
#define MBEDTLS_MPI_MAX_SIZE 32 // 256-bit EC curve = 32 bytes
|
2024-04-24 16:34:14 +01:00
|
|
|
#endif /* PSA_CRYPTO_CONFIG_H */
|