mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2024-12-29 00:17:49 +00:00
56 lines
1.7 KiB
C
56 lines
1.7 KiB
C
/**
|
|
* \file config-suite-b.h
|
|
*
|
|
* \brief Minimal configuration for TLS NSA Suite B Profile (RFC 6460)
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*/
|
|
/*
|
|
* Minimal configuration for TLS NSA Suite B Profile (RFC 6460)
|
|
*
|
|
* Distinguishing features:
|
|
* - no RSA or classic DH, fully based on ECC
|
|
* - optimized for low RAM usage
|
|
*
|
|
* Possible improvements:
|
|
* - if 128-bit security is enough, disable secp384r1 and SHA-512
|
|
* - use embedded certs in DER format and disable PEM_PARSE_C and BASE64_C
|
|
*
|
|
* See README.txt for usage instructions.
|
|
*/
|
|
|
|
#define MBEDTLS_PSA_CRYPTO_CONFIG_FILE "../configs/crypto-config-suite-b.h"
|
|
|
|
/* Mbed TLS feature support */
|
|
#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
|
|
#define MBEDTLS_SSL_PROTO_TLS1_2
|
|
|
|
/* Mbed TLS modules */
|
|
#define MBEDTLS_NET_C
|
|
#define MBEDTLS_SSL_CLI_C
|
|
#define MBEDTLS_SSL_SRV_C
|
|
#define MBEDTLS_SSL_TLS_C
|
|
#define MBEDTLS_X509_CRT_PARSE_C
|
|
#define MBEDTLS_X509_USE_C
|
|
|
|
/* Save ROM and a few bytes of RAM by specifying our own ciphersuite list */
|
|
#define MBEDTLS_SSL_CIPHERSUITES \
|
|
MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, \
|
|
MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
|
|
|
|
/*
|
|
* Save RAM at the expense of interoperability: do this only if you control
|
|
* both ends of the connection! (See comments in "mbedtls/ssl.h".)
|
|
* The minimum size here depends on the certificate chain used as well as the
|
|
* typical size of records.
|
|
*/
|
|
#define MBEDTLS_SSL_IN_CONTENT_LEN 1024
|
|
#define MBEDTLS_SSL_OUT_CONTENT_LEN 1024
|
|
|
|
/* Error messages and TLS debugging traces
|
|
* (huge code size increase, needed for tests/ssl-opt.sh) */
|
|
//#define MBEDTLS_DEBUG_C
|
|
//#define MBEDTLS_ERROR_C
|