]>
cvs.zerfleddert.de Git - proxmark3-svn/blob - common/polarssl/polarssl_config.h
3d9a2f67d31fbebaa9aa17a0f445cd760aa194b7
4 * \brief Configuration options (set of defines) 6 * Copyright (C) 2006-2014, Brainspark B.V. 8 * This file is part of PolarSSL (http://www.polarssl.org) 9 * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org> 11 * All rights reserved. 13 * This program is free software; you can redistribute it and/or modify 14 * it under the terms of the GNU General Public License as published by 15 * the Free Software Foundation; either version 2 of the License, or 16 * (at your option) any later version. 18 * This program is distributed in the hope that it will be useful, 19 * but WITHOUT ANY WARRANTY; without even the implied warranty of 20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 21 * GNU General Public License for more details. 23 * You should have received a copy of the GNU General Public License along 24 * with this program; if not, write to the Free Software Foundation, Inc., 25 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. 27 * This set of compile-time options may be used to enable 28 * or disable features selectively, and reduce the global 31 #ifndef POLARSSL_CONFIG_H 32 #define POLARSSL_CONFIG_H 34 #if defined(_MSC_VER) && !defined(_CRT_SECURE_NO_DEPRECATE) 35 #define _CRT_SECURE_NO_DEPRECATE 1 39 * \name SECTION: System support 41 * This section sets system specific settings. 46 * \def POLARSSL_HAVE_INT8 48 * The system uses 8-bit wide native integers. 50 * Uncomment if native integers are 8-bit wide. 52 //#define POLARSSL_HAVE_INT8 55 * \def POLARSSL_HAVE_INT16 57 * The system uses 16-bit wide native integers. 59 * Uncomment if native integers are 16-bit wide. 61 //#define POLARSSL_HAVE_INT16 64 * \def POLARSSL_HAVE_LONGLONG 66 * The compiler supports the 'long long' type. 67 * (Only used on 32-bit platforms) 69 #define POLARSSL_HAVE_LONGLONG 72 * \def POLARSSL_HAVE_ASM 74 * The compiler has support for asm(). 76 * Requires support for asm() in compiler. 81 * include/polarssl/bn_mul.h 83 * Comment to disable the use of assembly code. 85 //#define POLARSSL_HAVE_ASM 88 * \def POLARSSL_HAVE_SSE2 90 * CPU supports SSE2 instruction set. 92 * Uncomment if the CPU supports SSE2 (IA-32 specific). 94 //#define POLARSSL_HAVE_SSE2 97 * \def POLARSSL_HAVE_TIME 99 * System has time.h and time() / localtime() / gettimeofday(). 101 * Comment if your system does not support time functions 103 #define POLARSSL_HAVE_TIME 106 * \def POLARSSL_HAVE_IPV6 108 * System supports the basic socket interface for IPv6 (RFC 3493), 109 * specifically getaddrinfo(), freeaddrinfo() and struct sockaddr_storage. 111 * Note: on Windows/MingW, XP or higher is required. 113 * Comment if your system does not support the IPv6 socket interface 115 #define POLARSSL_HAVE_IPV6 118 * \def POLARSSL_PLATFORM_MEMORY 120 * Enable the memory allocation layer. 122 * By default PolarSSL uses the system-provided malloc() and free(). 123 * This allows different allocators (self-implemented or provided) to be 124 * provided to the platform abstraction layer. 126 * Enabling POLARSSL_PLATFORM_MEMORY will provide "platform_set_malloc_free()" 127 * to allow you to set an alternative malloc() and free() function pointer. 129 * Requires: POLARSSL_PLATFORM_C 131 * Enable this layer to allow use of alternative memory allocators. 133 //#define POLARSSL_PLATFORM_MEMORY 136 * \def POLARSSL_PLATFORM_NO_STD_FUNCTIONS 138 * Do not assign standard functions in the platform layer (e.g. malloc() to 139 * POLARSSL_PLATFORM_STD_MALLOC and printf() to POLARSSL_PLATFORM_STD_PRINTF) 141 * This makes sure there are no linking errors on platforms that do not support 142 * these functions. You will HAVE to provide alternatives, either at runtime 143 * via the platform_set_xxx() functions or at compile time by setting 144 * the POLARSSL_PLATFORM_STD_XXX defines. 146 * Requires: POLARSSL_PLATFORM_C 148 * Uncomment to prevent default assignment of standard functions in the 151 //#define POLARSSL_PLATFORM_NO_STD_FUNCTIONS 154 * \def POLARSSL_PLATFORM_XXX_ALT 156 * Uncomment a macro to let PolarSSL support the function in the platform 159 * Example: In case you uncomment POLARSSL_PLATFORM_PRINTF_ALT, PolarSSL will 160 * provide a function "platform_set_printf()" that allows you to set an 161 * alternative printf function pointer. 163 * All these define require POLARSSL_PLATFORM_C to be defined! 165 * Uncomment a macro to enable alternate implementation of specific base 168 //#define POLARSSL_PLATFORM_PRINTF_ALT 169 //#define POLARSSL_PLATFORM_FPRINTF_ALT 170 /* \} name SECTION: System support */ 173 * \name SECTION: PolarSSL feature support 175 * This section sets support for features that are or are not needed 176 * within the modules that are enabled. 181 * \def POLARSSL_TIMING_ALT 183 * Uncomment to provide your own alternate implementation for hardclock(), 184 * get_timer(), set_alarm() and m_sleep(). 186 * Only works if you have POLARSSL_TIMING_C enabled. 188 * You will need to provide a header "timing_alt.h" and an implementation at 191 //#define POLARSSL_TIMING_ALT 194 * \def POLARSSL_XXX_ALT 196 * Uncomment a macro to let PolarSSL use your alternate core implementation of 197 * a symmetric or hash algorithm (e.g. platform specific assembly optimized 198 * implementations). Keep in mind that the function prototypes should remain 201 * Example: In case you uncomment POLARSSL_AES_ALT, PolarSSL will no longer 202 * provide the "struct aes_context" definition and omit the base function 203 * declarations and implementations. "aes_alt.h" will be included from 204 * "aes.h" to include the new function definitions. 206 * Uncomment a macro to enable alternate implementation for core algorithm 209 //#define POLARSSL_AES_ALT 210 //#define POLARSSL_ARC4_ALT 211 //#define POLARSSL_BLOWFISH_ALT 212 //#define POLARSSL_CAMELLIA_ALT 213 //#define POLARSSL_DES_ALT 214 //#define POLARSSL_XTEA_ALT 215 //#define POLARSSL_MD2_ALT 216 //#define POLARSSL_MD4_ALT 217 //#define POLARSSL_MD5_ALT 218 //#define POLARSSL_RIPEMD160_ALT 219 //#define POLARSSL_SHA1_ALT 220 //#define POLARSSL_SHA256_ALT 221 //#define POLARSSL_SHA512_ALT 224 * \def POLARSSL_AES_ROM_TABLES 226 * Store the AES tables in ROM. 228 * Uncomment this macro to store the AES tables in ROM. 231 //#define POLARSSL_AES_ROM_TABLES 234 * \def POLARSSL_CIPHER_MODE_CBC 236 * Enable Cipher Block Chaining mode (CBC) for symmetric ciphers. 238 #define POLARSSL_CIPHER_MODE_CBC 241 * \def POLARSSL_CIPHER_MODE_CFB 243 * Enable Cipher Feedback mode (CFB) for symmetric ciphers. 245 #define POLARSSL_CIPHER_MODE_CFB 248 * \def POLARSSL_CIPHER_MODE_CTR 250 * Enable Counter Block Cipher mode (CTR) for symmetric ciphers. 252 #define POLARSSL_CIPHER_MODE_CTR 255 * \def POLARSSL_CIPHER_NULL_CIPHER 257 * Enable NULL cipher. 258 * Warning: Only do so when you know what you are doing. This allows for 259 * encryption or channels without any security! 261 * Requires POLARSSL_ENABLE_WEAK_CIPHERSUITES as well to enable 262 * the following ciphersuites: 263 * TLS_ECDH_ECDSA_WITH_NULL_SHA 264 * TLS_ECDH_RSA_WITH_NULL_SHA 265 * TLS_ECDHE_ECDSA_WITH_NULL_SHA 266 * TLS_ECDHE_RSA_WITH_NULL_SHA 267 * TLS_ECDHE_PSK_WITH_NULL_SHA384 268 * TLS_ECDHE_PSK_WITH_NULL_SHA256 269 * TLS_ECDHE_PSK_WITH_NULL_SHA 270 * TLS_DHE_PSK_WITH_NULL_SHA384 271 * TLS_DHE_PSK_WITH_NULL_SHA256 272 * TLS_DHE_PSK_WITH_NULL_SHA 273 * TLS_RSA_WITH_NULL_SHA256 274 * TLS_RSA_WITH_NULL_SHA 275 * TLS_RSA_WITH_NULL_MD5 276 * TLS_RSA_PSK_WITH_NULL_SHA384 277 * TLS_RSA_PSK_WITH_NULL_SHA256 278 * TLS_RSA_PSK_WITH_NULL_SHA 279 * TLS_PSK_WITH_NULL_SHA384 280 * TLS_PSK_WITH_NULL_SHA256 281 * TLS_PSK_WITH_NULL_SHA 283 * Uncomment this macro to enable the NULL cipher and ciphersuites 285 //#define POLARSSL_CIPHER_NULL_CIPHER 288 * \def POLARSSL_CIPHER_PADDING_XXX 290 * Uncomment or comment macros to add support for specific padding modes 291 * in the cipher layer with cipher modes that support padding (e.g. CBC) 293 * If you disable all padding modes, only full blocks can be used with CBC. 295 * Enable padding modes in the cipher layer. 297 #define POLARSSL_CIPHER_PADDING_PKCS7 298 #define POLARSSL_CIPHER_PADDING_ONE_AND_ZEROS 299 #define POLARSSL_CIPHER_PADDING_ZEROS_AND_LEN 300 #define POLARSSL_CIPHER_PADDING_ZEROS 303 * \def POLARSSL_ENABLE_WEAK_CIPHERSUITES 305 * Enable weak ciphersuites in SSL / TLS. 306 * Warning: Only do so when you know what you are doing. This allows for 307 * channels with virtually no security at all! 309 * This enables the following ciphersuites: 310 * TLS_RSA_WITH_DES_CBC_SHA 311 * TLS_DHE_RSA_WITH_DES_CBC_SHA 313 * Uncomment this macro to enable weak ciphersuites 315 //#define POLARSSL_ENABLE_WEAK_CIPHERSUITES 318 * \def POLARSSL_REMOVE_ARC4_CIPHERSUITES 320 * Remove RC4 ciphersuites by default in SSL / TLS. 321 * This flag removes the ciphersuites based on RC4 from the default list as 322 * returned by ssl_list_ciphersuites(). However, it is still possible to 323 * enable (some of) them with ssl_set_ciphersuites() by including them 326 * Uncomment this macro to remove RC4 ciphersuites by default. 328 //#define POLARSSL_REMOVE_ARC4_CIPHERSUITES 331 * \def POLARSSL_ECP_XXXX_ENABLED 333 * Enables specific curves within the Elliptic Curve module. 334 * By default all supported curves are enabled. 336 * Comment macros to disable the curve and functions for it 338 #define POLARSSL_ECP_DP_SECP192R1_ENABLED 339 #define POLARSSL_ECP_DP_SECP224R1_ENABLED 340 #define POLARSSL_ECP_DP_SECP256R1_ENABLED 341 #define POLARSSL_ECP_DP_SECP384R1_ENABLED 342 #define POLARSSL_ECP_DP_SECP521R1_ENABLED 343 #define POLARSSL_ECP_DP_SECP192K1_ENABLED 344 #define POLARSSL_ECP_DP_SECP224K1_ENABLED 345 #define POLARSSL_ECP_DP_SECP256K1_ENABLED 346 #define POLARSSL_ECP_DP_BP256R1_ENABLED 347 #define POLARSSL_ECP_DP_BP384R1_ENABLED 348 #define POLARSSL_ECP_DP_BP512R1_ENABLED 349 //#define POLARSSL_ECP_DP_M221_ENABLED // Not implemented yet! 350 #define POLARSSL_ECP_DP_M255_ENABLED 351 //#define POLARSSL_ECP_DP_M383_ENABLED // Not implemented yet! 352 //#define POLARSSL_ECP_DP_M511_ENABLED // Not implemented yet! 355 * \def POLARSSL_ECP_NIST_OPTIM 357 * Enable specific 'modulo p' routines for each NIST prime. 358 * Depending on the prime and architecture, makes operations 4 to 8 times 359 * faster on the corresponding curve. 361 * Comment this macro to disable NIST curves optimisation. 363 #define POLARSSL_ECP_NIST_OPTIM 366 * \def POLARSSL_ECDSA_DETERMINISTIC 368 * Enable deterministic ECDSA (RFC 6979). 369 * Standard ECDSA is "fragile" in the sense that lack of entropy when signing 370 * may result in a compromise of the long-term signing key. This is avoided by 371 * the deterministic variant. 373 * Requires: POLARSSL_HMAC_DRBG_C 375 * Comment this macro to disable deterministic ECDSA. 377 #define POLARSSL_ECDSA_DETERMINISTIC 380 * \def POLARSSL_KEY_EXCHANGE_PSK_ENABLED 382 * Enable the PSK based ciphersuite modes in SSL / TLS. 384 * This enables the following ciphersuites (if other requisites are 386 * TLS_PSK_WITH_AES_256_GCM_SHA384 387 * TLS_PSK_WITH_AES_256_CBC_SHA384 388 * TLS_PSK_WITH_AES_256_CBC_SHA 389 * TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 390 * TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 391 * TLS_PSK_WITH_AES_128_GCM_SHA256 392 * TLS_PSK_WITH_AES_128_CBC_SHA256 393 * TLS_PSK_WITH_AES_128_CBC_SHA 394 * TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 395 * TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 396 * TLS_PSK_WITH_3DES_EDE_CBC_SHA 397 * TLS_PSK_WITH_RC4_128_SHA 399 #define POLARSSL_KEY_EXCHANGE_PSK_ENABLED 402 * \def POLARSSL_KEY_EXCHANGE_DHE_PSK_ENABLED 404 * Enable the DHE-PSK based ciphersuite modes in SSL / TLS. 406 * Requires: POLARSSL_DHM_C 408 * This enables the following ciphersuites (if other requisites are 410 * TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 411 * TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 412 * TLS_DHE_PSK_WITH_AES_256_CBC_SHA 413 * TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 414 * TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 415 * TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 416 * TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 417 * TLS_DHE_PSK_WITH_AES_128_CBC_SHA 418 * TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 419 * TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 420 * TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA 421 * TLS_DHE_PSK_WITH_RC4_128_SHA 423 #define POLARSSL_KEY_EXCHANGE_DHE_PSK_ENABLED 426 * \def POLARSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED 428 * Enable the ECDHE-PSK based ciphersuite modes in SSL / TLS. 430 * Requires: POLARSSL_ECDH_C 432 * This enables the following ciphersuites (if other requisites are 434 * TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 435 * TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA 436 * TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 437 * TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 438 * TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA 439 * TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 440 * TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA 441 * TLS_ECDHE_PSK_WITH_RC4_128_SHA 443 #define POLARSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED 446 * \def POLARSSL_KEY_EXCHANGE_RSA_PSK_ENABLED 448 * Enable the RSA-PSK based ciphersuite modes in SSL / TLS. 450 * Requires: POLARSSL_RSA_C, POLARSSL_PKCS1_V15, 451 * POLARSSL_X509_CRT_PARSE_C 453 * This enables the following ciphersuites (if other requisites are 455 * TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 456 * TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 457 * TLS_RSA_PSK_WITH_AES_256_CBC_SHA 458 * TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 459 * TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 460 * TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 461 * TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 462 * TLS_RSA_PSK_WITH_AES_128_CBC_SHA 463 * TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 464 * TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 465 * TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA 466 * TLS_RSA_PSK_WITH_RC4_128_SHA 468 #define POLARSSL_KEY_EXCHANGE_RSA_PSK_ENABLED 471 * \def POLARSSL_KEY_EXCHANGE_RSA_ENABLED 473 * Enable the RSA-only based ciphersuite modes in SSL / TLS. 475 * Requires: POLARSSL_RSA_C, POLARSSL_PKCS1_V15, 476 * POLARSSL_X509_CRT_PARSE_C 478 * This enables the following ciphersuites (if other requisites are 480 * TLS_RSA_WITH_AES_256_GCM_SHA384 481 * TLS_RSA_WITH_AES_256_CBC_SHA256 482 * TLS_RSA_WITH_AES_256_CBC_SHA 483 * TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 484 * TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 485 * TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 486 * TLS_RSA_WITH_AES_128_GCM_SHA256 487 * TLS_RSA_WITH_AES_128_CBC_SHA256 488 * TLS_RSA_WITH_AES_128_CBC_SHA 489 * TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 490 * TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 491 * TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 492 * TLS_RSA_WITH_3DES_EDE_CBC_SHA 493 * TLS_RSA_WITH_RC4_128_SHA 494 * TLS_RSA_WITH_RC4_128_MD5 496 #define POLARSSL_KEY_EXCHANGE_RSA_ENABLED 499 * \def POLARSSL_KEY_EXCHANGE_DHE_RSA_ENABLED 501 * Enable the DHE-RSA based ciphersuite modes in SSL / TLS. 503 * Requires: POLARSSL_DHM_C, POLARSSL_RSA_C, POLARSSL_PKCS1_V15, 504 * POLARSSL_X509_CRT_PARSE_C 506 * This enables the following ciphersuites (if other requisites are 508 * TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 509 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 510 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA 511 * TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 512 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 513 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 514 * TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 515 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 516 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA 517 * TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 518 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 519 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 520 * TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA 522 #define POLARSSL_KEY_EXCHANGE_DHE_RSA_ENABLED 525 * \def POLARSSL_KEY_EXCHANGE_ECDHE_RSA_ENABLED 527 * Enable the ECDHE-RSA based ciphersuite modes in SSL / TLS. 529 * Requires: POLARSSL_ECDH_C, POLARSSL_RSA_C, POLARSSL_PKCS1_V15, 530 * POLARSSL_X509_CRT_PARSE_C 532 * This enables the following ciphersuites (if other requisites are 534 * TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 535 * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 536 * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 537 * TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 538 * TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 539 * TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 540 * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 541 * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 542 * TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 543 * TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 544 * TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 545 * TLS_ECDHE_RSA_WITH_RC4_128_SHA 547 #define POLARSSL_KEY_EXCHANGE_ECDHE_RSA_ENABLED 550 * \def POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED 552 * Enable the ECDHE-ECDSA based ciphersuite modes in SSL / TLS. 554 * Requires: POLARSSL_ECDH_C, POLARSSL_ECDSA_C, POLARSSL_X509_CRT_PARSE_C, 556 * This enables the following ciphersuites (if other requisites are 558 * TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 559 * TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 560 * TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 561 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 562 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 563 * TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 564 * TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 565 * TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 566 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 567 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 568 * TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA 569 * TLS_ECDHE_ECDSA_WITH_RC4_128_SHA 571 #define POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED 574 * \def POLARSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED 576 * Enable the ECDH-ECDSA based ciphersuite modes in SSL / TLS. 578 * Requires: POLARSSL_ECDH_C, POLARSSL_X509_CRT_PARSE_C 580 * This enables the following ciphersuites (if other requisites are 582 * TLS_ECDH_ECDSA_WITH_RC4_128_SHA 583 * TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA 584 * TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA 585 * TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA 586 * TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 587 * TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 588 * TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 589 * TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 590 * TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 591 * TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 592 * TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 593 * TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 595 #define POLARSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED 598 * \def POLARSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED 600 * Enable the ECDH-RSA based ciphersuite modes in SSL / TLS. 602 * Requires: POLARSSL_ECDH_C, POLARSSL_X509_CRT_PARSE_C 604 * This enables the following ciphersuites (if other requisites are 606 * TLS_ECDH_RSA_WITH_RC4_128_SHA 607 * TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA 608 * TLS_ECDH_RSA_WITH_AES_128_CBC_SHA 609 * TLS_ECDH_RSA_WITH_AES_256_CBC_SHA 610 * TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 611 * TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 612 * TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 613 * TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 614 * TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 615 * TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 616 * TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 617 * TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 619 #define POLARSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED 622 * \def POLARSSL_PK_PARSE_EC_EXTENDED 624 * Enhance support for reading EC keys using variants of SEC1 not allowed by 625 * RFC 5915 and RFC 5480. 627 * Currently this means parsing the SpecifiedECDomain choice of EC 628 * parameters (only known groups are supported, not arbitrary domains, to 629 * avoid validation issues). 631 * Disable if you only need to support RFC 5915 + 5480 key formats. 633 #define POLARSSL_PK_PARSE_EC_EXTENDED 636 * \def POLARSSL_ERROR_STRERROR_BC 638 * Make available the backward compatible error_strerror() next to the 639 * current polarssl_strerror(). 641 * For new code, it is recommended to use polarssl_strerror() instead and 644 * Disable if you run into name conflicts and want to really remove the 647 #define POLARSSL_ERROR_STRERROR_BC 650 * \def POLARSSL_ERROR_STRERROR_DUMMY 652 * Enable a dummy error function to make use of polarssl_strerror() in 653 * third party libraries easier when POLARSSL_ERROR_C is disabled 654 * (no effect when POLARSSL_ERROR_C is enabled). 656 * You can safely disable this if POLARSSL_ERROR_C is enabled, or if you're 657 * not using polarssl_strerror() or error_strerror() in your application. 659 * Disable if you run into name conflicts and want to really remove the 660 * polarssl_strerror() 662 #define POLARSSL_ERROR_STRERROR_DUMMY 665 * \def POLARSSL_GENPRIME 667 * Enable the prime-number generation code. 669 * Requires: POLARSSL_BIGNUM_C 671 #define POLARSSL_GENPRIME 674 * \def POLARSSL_FS_IO 676 * Enable functions that use the filesystem. 678 #define POLARSSL_FS_IO 681 * \def POLARSSL_NO_DEFAULT_ENTROPY_SOURCES 683 * Do not add default entropy sources. These are the platform specific, 684 * hardclock and HAVEGE based poll functions. 686 * This is useful to have more control over the added entropy sources in an 689 * Uncomment this macro to prevent loading of default entropy functions. 691 //#define POLARSSL_NO_DEFAULT_ENTROPY_SOURCES 694 * \def POLARSSL_NO_PLATFORM_ENTROPY 696 * Do not use built-in platform entropy functions. 697 * This is useful if your platform does not support 698 * standards like the /dev/urandom or Windows CryptoAPI. 700 * Uncomment this macro to disable the built-in platform entropy functions. 702 //#define POLARSSL_NO_PLATFORM_ENTROPY 705 * \def POLARSSL_ENTROPY_FORCE_SHA256 707 * Force the entropy accumulator to use a SHA-256 accumulator instead of the 708 * default SHA-512 based one (if both are available). 710 * Requires: POLARSSL_SHA256_C 712 * On 32-bit systems SHA-256 can be much faster than SHA-512. Use this option 713 * if you have performance concerns. 715 * This option is only useful if both POLARSSL_SHA256_C and 716 * POLARSSL_SHA512_C are defined. Otherwise the available hash module is used. 718 //#define POLARSSL_ENTROPY_FORCE_SHA256 721 * \def POLARSSL_MEMORY_DEBUG 723 * Enable debugging of buffer allocator memory issues. Automatically prints 724 * (to stderr) all (fatal) messages on memory allocation issues. Enables 725 * function for 'debug output' of allocated memory. 727 * Requires: POLARSSL_MEMORY_BUFFER_ALLOC_C 729 * Uncomment this macro to let the buffer allocator print out error messages. 731 //#define POLARSSL_MEMORY_DEBUG 734 * \def POLARSSL_MEMORY_BACKTRACE 736 * Include backtrace information with each allocated block. 738 * Requires: POLARSSL_MEMORY_BUFFER_ALLOC_C 739 * GLIBC-compatible backtrace() an backtrace_symbols() support 741 * Uncomment this macro to include backtrace information 743 //#define POLARSSL_MEMORY_BACKTRACE 746 * \def POLARSSL_PKCS1_V15 748 * Enable support for PKCS#1 v1.5 encoding. 750 * Requires: POLARSSL_RSA_C 752 * This enables support for PKCS#1 v1.5 operations. 754 #define POLARSSL_PKCS1_V15 757 * \def POLARSSL_PKCS1_V21 759 * Enable support for PKCS#1 v2.1 encoding. 761 * Requires: POLARSSL_MD_C, POLARSSL_RSA_C 763 * This enables support for RSAES-OAEP and RSASSA-PSS operations. 765 //#define POLARSSL_PKCS1_V21 768 * \def POLARSSL_RSA_NO_CRT 770 * Do not use the Chinese Remainder Theorem for the RSA private operation. 772 * Uncomment this macro to disable the use of CRT in RSA. 775 //#define POLARSSL_RSA_NO_CRT 778 * \def POLARSSL_SELF_TEST 780 * Enable the checkup functions (*_self_test). 782 #define POLARSSL_SELF_TEST 785 * \def POLARSSL_SSL_ALL_ALERT_MESSAGES 787 * Enable sending of alert messages in case of encountered errors as per RFC. 788 * If you choose not to send the alert messages, PolarSSL can still communicate 789 * with other servers, only debugging of failures is harder. 791 * The advantage of not sending alert messages, is that no information is given 792 * about reasons for failures thus preventing adversaries of gaining intel. 794 * Enable sending of all alert messages 796 #define POLARSSL_SSL_ALERT_MESSAGES 799 * \def POLARSSL_SSL_DEBUG_ALL 801 * Enable the debug messages in SSL module for all issues. 802 * Debug messages have been disabled in some places to prevent timing 803 * attacks due to (unbalanced) debugging function calls. 805 * If you need all error reporting you should enable this during debugging, 806 * but remove this for production servers that should log as well. 808 * Uncomment this macro to report all debug messages on errors introducing 809 * a timing side-channel. 812 //#define POLARSSL_SSL_DEBUG_ALL 815 * \def POLARSSL_SSL_HW_RECORD_ACCEL 817 * Enable hooking functions in SSL module for hardware acceleration of 818 * individual records. 820 * Uncomment this macro to enable hooking functions. 822 //#define POLARSSL_SSL_HW_RECORD_ACCEL 825 * \def POLARSSL_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO 827 * Enable support for receiving and parsing SSLv2 Client Hello messages for the 828 * SSL Server module (POLARSSL_SSL_SRV_C). 830 * Comment this macro to disable support for SSLv2 Client Hello messages. 832 #define POLARSSL_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO 835 * \def POLARSSL_SSL_SRV_RESPECT_CLIENT_PREFERENCE 837 * Pick the ciphersuite according to the client's preferences rather than ours 838 * in the SSL Server module (POLARSSL_SSL_SRV_C). 840 * Uncomment this macro to respect client's ciphersuite order 842 //#define POLARSSL_SSL_SRV_RESPECT_CLIENT_PREFERENCE 845 * \def POLARSSL_SSL_MAX_FRAGMENT_LENGTH 847 * Enable support for RFC 6066 max_fragment_length extension in SSL. 849 * Comment this macro to disable support for the max_fragment_length extension 851 #define POLARSSL_SSL_MAX_FRAGMENT_LENGTH 854 * \def POLARSSL_SSL_PROTO_SSL3 856 * Enable support for SSL 3.0. 858 * Requires: POLARSSL_MD5_C 861 * Comment this macro to disable support for SSL 3.0 863 #define POLARSSL_SSL_PROTO_SSL3 866 * \def POLARSSL_SSL_PROTO_TLS1 868 * Enable support for TLS 1.0. 870 * Requires: POLARSSL_MD5_C 873 * Comment this macro to disable support for TLS 1.0 875 #define POLARSSL_SSL_PROTO_TLS1 878 * \def POLARSSL_SSL_PROTO_TLS1_1 880 * Enable support for TLS 1.1. 882 * Requires: POLARSSL_MD5_C 885 * Comment this macro to disable support for TLS 1.1 887 #define POLARSSL_SSL_PROTO_TLS1_1 890 * \def POLARSSL_SSL_PROTO_TLS1_2 892 * Enable support for TLS 1.2. 894 * Requires: POLARSSL_SHA1_C or POLARSSL_SHA256_C or POLARSSL_SHA512_C 895 * (Depends on ciphersuites) 897 * Comment this macro to disable support for TLS 1.2 899 #define POLARSSL_SSL_PROTO_TLS1_2 902 * \def POLARSSL_SSL_ALPN 904 * Enable support for Application Layer Protocol Negotiation. 905 * draft-ietf-tls-applayerprotoneg-05 907 * Comment this macro to disable support for ALPN. 909 #define POLARSSL_SSL_ALPN 912 * \def POLARSSL_SSL_SESSION_TICKETS 914 * Enable support for RFC 5077 session tickets in SSL. 916 * Requires: POLARSSL_AES_C 918 * POLARSSL_CIPHER_MODE_CBC 920 * Comment this macro to disable support for SSL session tickets 922 #define POLARSSL_SSL_SESSION_TICKETS 925 * \def POLARSSL_SSL_SERVER_NAME_INDICATION 927 * Enable support for RFC 6066 server name indication (SNI) in SSL. 929 * Comment this macro to disable support for server name indication in SSL 931 #define POLARSSL_SSL_SERVER_NAME_INDICATION 934 * \def POLARSSL_SSL_TRUNCATED_HMAC 936 * Enable support for RFC 6066 truncated HMAC in SSL. 938 * Comment this macro to disable support for truncated HMAC in SSL 940 #define POLARSSL_SSL_TRUNCATED_HMAC 943 * \def POLARSSL_SSL_SET_CURVES 945 * Enable ssl_set_curves(). 947 * This is disabled by default since it breaks binary compatibility with the 948 * 1.3.x line. If you choose to enable it, you will need to rebuild your 949 * application against the new header files, relinking will not be enough. 950 * It will be enabled by default, or no longer an option, in the 1.4 branch. 952 * Uncomment to make ssl_set_curves() available. 954 //#define POLARSSL_SSL_SET_CURVES 957 * \def POLARSSL_THREADING_ALT 959 * Provide your own alternate threading implementation. 961 * Requires: POLARSSL_THREADING_C 963 * Uncomment this to allow your own alternate threading implementation. 965 //#define POLARSSL_THREADING_ALT 968 * \def POLARSSL_THREADING_PTHREAD 970 * Enable the pthread wrapper layer for the threading layer. 972 * Requires: POLARSSL_THREADING_C 974 * Uncomment this to enable pthread mutexes. 976 //#define POLARSSL_THREADING_PTHREAD 979 * \def POLARSSL_VERSION_FEATURES 981 * Allow run-time checking of compile-time enabled features. Thus allowing users 982 * to check at run-time if the library is for instance compiled with threading 983 * support via version_check_feature(). 985 * Requires: POLARSSL_VERSION_C 987 * Comment this to disable run-time checking and save ROM space 989 #define POLARSSL_VERSION_FEATURES 992 * \def POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3 994 * If set, the X509 parser will not break-off when parsing an X509 certificate 995 * and encountering an extension in a v1 or v2 certificate. 997 * Uncomment to prevent an error. 999 //#define POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3 1002 * \def POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION 1004 * If set, the X509 parser will not break-off when parsing an X509 certificate 1005 * and encountering an unknown critical extension. 1007 * Uncomment to prevent an error. 1009 //#define POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION 1012 * \def POLARSSL_X509_CHECK_KEY_USAGE 1014 * Enable verification of the keyUsage extension (CA and leaf certificates). 1016 * Disabling this avoids problems with mis-issued and/or misused 1017 * (intermediate) CA and leaf certificates. 1019 * \warning Depending on your PKI use, disabling this can be a security risk! 1021 * Comment to skip keyUsage checking for both CA and leaf certificates. 1023 #define POLARSSL_X509_CHECK_KEY_USAGE 1026 * \def POLARSSL_X509_CHECK_EXTENDED_KEY_USAGE 1028 * Enable verification of the extendedKeyUsage extension (leaf certificates). 1030 * Disabling this avoids problems with mis-issued and/or misused certificates. 1032 * \warning Depending on your PKI use, disabling this can be a security risk! 1034 * Comment to skip extendedKeyUsage checking for certificates. 1036 #define POLARSSL_X509_CHECK_EXTENDED_KEY_USAGE 1039 * \def POLARSSL_X509_RSASSA_PSS_SUPPORT 1041 * Enable parsing and verification of X.509 certificates, CRLs and CSRS 1042 * signed with RSASSA-PSS (aka PKCS#1 v2.1). 1044 * Comment this macro to disallow using RSASSA-PSS in certificates. 1046 #define POLARSSL_X509_RSASSA_PSS_SUPPORT 1049 * \def POLARSSL_ZLIB_SUPPORT 1051 * If set, the SSL/TLS module uses ZLIB to support compression and 1052 * decompression of packet data. 1054 * \warning TLS-level compression MAY REDUCE SECURITY! See for example the 1055 * CRIME attack. Before enabling this option, you should examine with care if 1056 * CRIME or similar exploits may be a applicable to your use case. 1058 * Used in: library/ssl_tls.c 1062 * This feature requires zlib library and headers to be present. 1064 * Uncomment to enable use of ZLIB 1066 //#define POLARSSL_ZLIB_SUPPORT 1067 /* \} name SECTION: PolarSSL feature support */ 1070 * \name SECTION: PolarSSL modules 1072 * This section enables or disables entire modules in PolarSSL 1077 * \def POLARSSL_AESNI_C 1079 * Enable AES-NI support on x86-64. 1081 * Module: library/aesni.c 1082 * Caller: library/aes.c 1084 * Requires: POLARSSL_HAVE_ASM 1086 * This modules adds support for the AES-NI instructions on x86-64 1088 //#define POLARSSL_AESNI_C 1091 * \def POLARSSL_AES_C 1093 * Enable the AES block cipher. 1095 * Module: library/aes.c 1096 * Caller: library/ssl_tls.c 1098 * library/ctr_drbg.c 1100 * This module enables the following ciphersuites (if other requisites are 1102 * TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA 1103 * TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA 1104 * TLS_ECDH_RSA_WITH_AES_128_CBC_SHA 1105 * TLS_ECDH_RSA_WITH_AES_256_CBC_SHA 1106 * TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 1107 * TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 1108 * TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 1109 * TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 1110 * TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 1111 * TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 1112 * TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 1113 * TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 1114 * TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 1115 * TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 1116 * TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 1117 * TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 1118 * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 1119 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 1120 * TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 1121 * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 1122 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA 1123 * TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 1124 * TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 1125 * TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 1126 * TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 1127 * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 1128 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 1129 * TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 1130 * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 1131 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA 1132 * TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 1133 * TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 1134 * TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 1135 * TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA 1136 * TLS_DHE_PSK_WITH_AES_256_CBC_SHA 1137 * TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 1138 * TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 1139 * TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 1140 * TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA 1141 * TLS_DHE_PSK_WITH_AES_128_CBC_SHA 1142 * TLS_RSA_WITH_AES_256_GCM_SHA384 1143 * TLS_RSA_WITH_AES_256_CBC_SHA256 1144 * TLS_RSA_WITH_AES_256_CBC_SHA 1145 * TLS_RSA_WITH_AES_128_GCM_SHA256 1146 * TLS_RSA_WITH_AES_128_CBC_SHA256 1147 * TLS_RSA_WITH_AES_128_CBC_SHA 1148 * TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 1149 * TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 1150 * TLS_RSA_PSK_WITH_AES_256_CBC_SHA 1151 * TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 1152 * TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 1153 * TLS_RSA_PSK_WITH_AES_128_CBC_SHA 1154 * TLS_PSK_WITH_AES_256_GCM_SHA384 1155 * TLS_PSK_WITH_AES_256_CBC_SHA384 1156 * TLS_PSK_WITH_AES_256_CBC_SHA 1157 * TLS_PSK_WITH_AES_128_GCM_SHA256 1158 * TLS_PSK_WITH_AES_128_CBC_SHA256 1159 * TLS_PSK_WITH_AES_128_CBC_SHA 1161 * PEM_PARSE uses AES for decrypting encrypted keys. 1163 #define POLARSSL_AES_C 1166 * \def POLARSSL_ARC4_C 1168 * Enable the ARCFOUR stream cipher. 1170 * Module: library/arc4.c 1171 * Caller: library/ssl_tls.c 1173 * This module enables the following ciphersuites (if other requisites are 1175 * TLS_ECDH_ECDSA_WITH_RC4_128_SHA 1176 * TLS_ECDH_RSA_WITH_RC4_128_SHA 1177 * TLS_ECDHE_ECDSA_WITH_RC4_128_SHA 1178 * TLS_ECDHE_RSA_WITH_RC4_128_SHA 1179 * TLS_ECDHE_PSK_WITH_RC4_128_SHA 1180 * TLS_DHE_PSK_WITH_RC4_128_SHA 1181 * TLS_RSA_WITH_RC4_128_SHA 1182 * TLS_RSA_WITH_RC4_128_MD5 1183 * TLS_RSA_PSK_WITH_RC4_128_SHA 1184 * TLS_PSK_WITH_RC4_128_SHA 1186 #define POLARSSL_ARC4_C 1189 * \def POLARSSL_ASN1_PARSE_C 1191 * Enable the generic ASN1 parser. 1193 * Module: library/asn1.c 1194 * Caller: library/x509.c 1200 #define POLARSSL_ASN1_PARSE_C 1203 * \def POLARSSL_ASN1_WRITE_C 1205 * Enable the generic ASN1 writer. 1207 * Module: library/asn1write.c 1208 * Caller: library/ecdsa.c 1210 * library/x509_create.c 1211 * library/x509write_crt.c 1212 * library/x509write_csr.c 1214 #define POLARSSL_ASN1_WRITE_C 1217 * \def POLARSSL_BASE64_C 1219 * Enable the Base64 module. 1221 * Module: library/base64.c 1222 * Caller: library/pem.c 1224 * This module is required for PEM support (required by X.509). 1226 #define POLARSSL_BASE64_C 1229 * \def POLARSSL_BIGNUM_C 1231 * Enable the multi-precision integer library. 1233 * Module: library/bignum.c 1234 * Caller: library/dhm.c 1240 * This module is required for RSA, DHM and ECC (ECDH, ECDSA) support. 1242 #define POLARSSL_BIGNUM_C 1245 * \def POLARSSL_BLOWFISH_C 1247 * Enable the Blowfish block cipher. 1249 * Module: library/blowfish.c 1251 #define POLARSSL_BLOWFISH_C 1254 * \def POLARSSL_CAMELLIA_C 1256 * Enable the Camellia block cipher. 1258 * Module: library/camellia.c 1259 * Caller: library/ssl_tls.c 1261 * This module enables the following ciphersuites (if other requisites are 1263 * TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 1264 * TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 1265 * TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 1266 * TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 1267 * TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 1268 * TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 1269 * TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 1270 * TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 1271 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 1272 * TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 1273 * TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 1274 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 1275 * TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 1276 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 1277 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 1278 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 1279 * TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 1280 * TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 1281 * TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 1282 * TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 1283 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 1284 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 1285 * TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 1286 * TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 1287 * TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 1288 * TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 1289 * TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 1290 * TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 1291 * TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 1292 * TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 1293 * TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 1294 * TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 1295 * TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 1296 * TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 1297 * TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 1298 * TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 1299 * TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 1300 * TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 1301 * TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 1302 * TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 1303 * TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 1304 * TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 1306 #define POLARSSL_CAMELLIA_C 1309 * \def POLARSSL_CCM_C 1311 * Enable the Counter with CBC-MAC (CCM) mode for 128-bit block cipher. 1313 * Module: library/ccm.c 1315 * Requires: POLARSSL_AES_C or POLARSSL_CAMELLIA_C 1317 * This module enables the AES-CCM ciphersuites, if other requisites are 1320 #define POLARSSL_CCM_C 1323 * \def POLARSSL_CERTS_C 1325 * Enable the test certificates. 1327 * Module: library/certs.c 1330 * Requires: POLARSSL_PEM_PARSE_C 1332 * This module is used for testing (ssl_client/server). 1334 #define POLARSSL_CERTS_C 1337 * \def POLARSSL_CIPHER_C 1339 * Enable the generic cipher layer. 1341 * Module: library/cipher.c 1342 * Caller: library/ssl_tls.c 1344 * Uncomment to enable generic cipher wrappers. 1346 #define POLARSSL_CIPHER_C 1349 * \def POLARSSL_CTR_DRBG_C 1351 * Enable the CTR_DRBG AES-256-based random generator. 1353 * Module: library/ctr_drbg.c 1356 * Requires: POLARSSL_AES_C 1358 * This module provides the CTR_DRBG AES-256 random number generator. 1360 #define POLARSSL_CTR_DRBG_C 1363 * \def POLARSSL_DEBUG_C 1365 * Enable the debug functions. 1367 * Module: library/debug.c 1368 * Caller: library/ssl_cli.c 1372 * This module provides debugging functions. 1374 #define POLARSSL_DEBUG_C 1377 * \def POLARSSL_DES_C 1379 * Enable the DES block cipher. 1381 * Module: library/des.c 1382 * Caller: library/pem.c 1385 * This module enables the following ciphersuites (if other requisites are 1387 * TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA 1388 * TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA 1389 * TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA 1390 * TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 1391 * TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA 1392 * TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA 1393 * TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA 1394 * TLS_RSA_WITH_3DES_EDE_CBC_SHA 1395 * TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA 1396 * TLS_PSK_WITH_3DES_EDE_CBC_SHA 1398 * PEM_PARSE uses DES/3DES for decrypting encrypted keys. 1400 #define POLARSSL_DES_C 1403 * \def POLARSSL_DHM_C 1405 * Enable the Diffie-Hellman-Merkle module. 1407 * Module: library/dhm.c 1408 * Caller: library/ssl_cli.c 1411 * This module is used by the following key exchanges: 1414 #define POLARSSL_DHM_C 1417 * \def POLARSSL_ECDH_C 1419 * Enable the elliptic curve Diffie-Hellman library. 1421 * Module: library/ecdh.c 1422 * Caller: library/ssl_cli.c 1425 * This module is used by the following key exchanges: 1426 * ECDHE-ECDSA, ECDHE-RSA, DHE-PSK 1428 * Requires: POLARSSL_ECP_C 1430 #define POLARSSL_ECDH_C 1433 * \def POLARSSL_ECDSA_C 1435 * Enable the elliptic curve DSA library. 1437 * Module: library/ecdsa.c 1440 * This module is used by the following key exchanges: 1443 * Requires: POLARSSL_ECP_C, POLARSSL_ASN1_WRITE_C, POLARSSL_ASN1_PARSE_C 1445 #define POLARSSL_ECDSA_C 1448 * \def POLARSSL_ECP_C 1450 * Enable the elliptic curve over GF(p) library. 1452 * Module: library/ecp.c 1453 * Caller: library/ecdh.c 1456 * Requires: POLARSSL_BIGNUM_C and at least one POLARSSL_ECP_DP_XXX_ENABLED 1458 #define POLARSSL_ECP_C 1461 * \def POLARSSL_ENTROPY_C 1463 * Enable the platform-specific entropy code. 1465 * Module: library/entropy.c 1468 * Requires: POLARSSL_SHA512_C or POLARSSL_SHA256_C 1470 * This module provides a generic entropy pool 1472 #define POLARSSL_ENTROPY_C 1475 * \def POLARSSL_ERROR_C 1477 * Enable error code to error string conversion. 1479 * Module: library/error.c 1482 * This module enables polarssl_strerror(). 1484 #define POLARSSL_ERROR_C 1487 * \def POLARSSL_GCM_C 1489 * Enable the Galois/Counter Mode (GCM) for AES. 1491 * Module: library/gcm.c 1493 * Requires: POLARSSL_AES_C or POLARSSL_CAMELLIA_C 1495 * This module enables the AES-GCM and CAMELLIA-GCM ciphersuites, if other 1496 * requisites are enabled as well. 1498 #define POLARSSL_GCM_C 1501 * \def POLARSSL_HAVEGE_C 1503 * Enable the HAVEGE random generator. 1505 * Warning: the HAVEGE random generator is not suitable for virtualized 1508 * Warning: the HAVEGE random generator is dependent on timing and specific 1509 * processor traits. It is therefore not advised to use HAVEGE as 1510 * your applications primary random generator or primary entropy pool 1511 * input. As a secondary input to your entropy pool, it IS able add 1512 * the (limited) extra entropy it provides. 1514 * Module: library/havege.c 1517 * Requires: POLARSSL_TIMING_C 1519 * Uncomment to enable the HAVEGE random generator. 1521 //#define POLARSSL_HAVEGE_C 1524 * \def POLARSSL_HMAC_DRBG_C 1526 * Enable the HMAC_DRBG random generator. 1528 * Module: library/hmac_drbg.c 1531 * Requires: POLARSSL_MD_C 1533 * Uncomment to enable the HMAC_DRBG random number geerator. 1535 #define POLARSSL_HMAC_DRBG_C 1538 * \def POLARSSL_MD_C 1540 * Enable the generic message digest layer. 1542 * Module: library/md.c 1545 * Uncomment to enable generic message digest wrappers. 1547 #define POLARSSL_MD_C 1550 * \def POLARSSL_MD2_C 1552 * Enable the MD2 hash algorithm. 1554 * Module: library/md2.c 1557 * Uncomment to enable support for (rare) MD2-signed X.509 certs. 1559 //#define POLARSSL_MD2_C 1562 * \def POLARSSL_MD4_C 1564 * Enable the MD4 hash algorithm. 1566 * Module: library/md4.c 1569 * Uncomment to enable support for (rare) MD4-signed X.509 certs. 1571 //#define POLARSSL_MD4_C 1574 * \def POLARSSL_MD5_C 1576 * Enable the MD5 hash algorithm. 1578 * Module: library/md5.c 1579 * Caller: library/md.c 1583 * This module is required for SSL/TLS and X.509. 1584 * PEM_PARSE uses MD5 for decrypting encrypted keys. 1586 #define POLARSSL_MD5_C 1589 * \def POLARSSL_MEMORY_C 1590 * Deprecated since 1.3.5. Please use POLARSSL_PLATFORM_MEMORY instead. 1592 //#define POLARSSL_MEMORY_C 1595 * \def POLARSSL_MEMORY_BUFFER_ALLOC_C 1597 * Enable the buffer allocator implementation that makes use of a (stack) 1598 * based buffer to 'allocate' dynamic memory. (replaces malloc() and free() 1601 * Module: library/memory_buffer_alloc.c 1603 * Requires: POLARSSL_PLATFORM_C 1604 * POLARSSL_PLATFORM_MEMORY (to use it within PolarSSL) 1606 * Enable this module to enable the buffer memory allocator. 1608 //#define POLARSSL_MEMORY_BUFFER_ALLOC_C 1611 * \def POLARSSL_NET_C 1613 * Enable the TCP/IP networking routines. 1615 * Module: library/net.c 1617 * This module provides TCP/IP networking routines. 1619 #define POLARSSL_NET_C 1622 * \def POLARSSL_OID_C 1624 * Enable the OID database. 1626 * Module: library/oid.c 1627 * Caller: library/asn1write.c 1633 * library/x509_create.c 1634 * library/x509_crl.c 1635 * library/x509_crt.c 1636 * library/x509_csr.c 1637 * library/x509write_crt.c 1638 * library/x509write_csr.c 1640 * This modules translates between OIDs and internal values. 1642 #define POLARSSL_OID_C 1645 * \def POLARSSL_PADLOCK_C 1647 * Enable VIA Padlock support on x86. 1649 * Module: library/padlock.c 1650 * Caller: library/aes.c 1652 * Requires: POLARSSL_HAVE_ASM 1654 * This modules adds support for the VIA PadLock on x86. 1656 //#define POLARSSL_PADLOCK_C 1659 * \def POLARSSL_PBKDF2_C 1661 * Enable PKCS#5 PBKDF2 key derivation function. 1662 * DEPRECATED: Use POLARSSL_PKCS5_C instead 1664 * Module: library/pbkdf2.c 1666 * Requires: POLARSSL_PKCS5_C 1668 * This module adds support for the PKCS#5 PBKDF2 key derivation function. 1670 #define POLARSSL_PBKDF2_C 1673 * \def POLARSSL_PEM_PARSE_C 1675 * Enable PEM decoding / parsing. 1677 * Module: library/pem.c 1678 * Caller: library/dhm.c 1680 * library/x509_crl.c 1681 * library/x509_crt.c 1682 * library/x509_csr.c 1684 * Requires: POLARSSL_BASE64_C 1686 * This modules adds support for decoding / parsing PEM files. 1688 #define POLARSSL_PEM_PARSE_C 1691 * \def POLARSSL_PEM_WRITE_C 1693 * Enable PEM encoding / writing. 1695 * Module: library/pem.c 1696 * Caller: library/pkwrite.c 1697 * library/x509write_crt.c 1698 * library/x509write_csr.c 1700 * Requires: POLARSSL_BASE64_C 1702 * This modules adds support for encoding / writing PEM files. 1704 #define POLARSSL_PEM_WRITE_C 1707 * \def POLARSSL_PK_C 1709 * Enable the generic public (asymetric) key layer. 1711 * Module: library/pk.c 1712 * Caller: library/ssl_tls.c 1716 * Requires: POLARSSL_RSA_C or POLARSSL_ECP_C 1718 * Uncomment to enable generic public key wrappers. 1720 #define POLARSSL_PK_C 1723 * \def POLARSSL_PK_PARSE_C 1725 * Enable the generic public (asymetric) key parser. 1727 * Module: library/pkparse.c 1728 * Caller: library/x509_crt.c 1729 * library/x509_csr.c 1731 * Requires: POLARSSL_PK_C 1733 * Uncomment to enable generic public key parse functions. 1735 #define POLARSSL_PK_PARSE_C 1738 * \def POLARSSL_PK_WRITE_C 1740 * Enable the generic public (asymetric) key writer. 1742 * Module: library/pkwrite.c 1743 * Caller: library/x509write.c 1745 * Requires: POLARSSL_PK_C 1747 * Uncomment to enable generic public key write functions. 1749 #define POLARSSL_PK_WRITE_C 1752 * \def POLARSSL_PKCS5_C 1754 * Enable PKCS#5 functions. 1756 * Module: library/pkcs5.c 1758 * Requires: POLARSSL_MD_C 1760 * This module adds support for the PKCS#5 functions. 1762 #define POLARSSL_PKCS5_C 1765 * \def POLARSSL_PKCS11_C 1767 * Enable wrapper for PKCS#11 smartcard support. 1769 * Module: library/pkcs11.c 1770 * Caller: library/pk.c 1772 * Requires: POLARSSL_PK_C 1774 * This module enables SSL/TLS PKCS #11 smartcard support. 1775 * Requires the presence of the PKCS#11 helper library (libpkcs11-helper) 1777 //#define POLARSSL_PKCS11_C 1780 * \def POLARSSL_PKCS12_C 1782 * Enable PKCS#12 PBE functions. 1783 * Adds algorithms for parsing PKCS#8 encrypted private keys 1785 * Module: library/pkcs12.c 1786 * Caller: library/pkparse.c 1788 * Requires: POLARSSL_ASN1_PARSE_C, POLARSSL_CIPHER_C, POLARSSL_MD_C 1789 * Can use: POLARSSL_ARC4_C 1791 * This module enables PKCS#12 functions. 1793 #define POLARSSL_PKCS12_C 1796 * \def POLARSSL_PLATFORM_C 1798 * Enable the platform abstraction layer that allows you to re-assign 1799 * functions like malloc(), free(), printf(), fprintf() 1801 * Module: library/platform.c 1802 * Caller: Most other .c files 1804 * This module enables abstraction of common (libc) functions. 1806 //#define POLARSSL_PLATFORM_C 1809 * \def POLARSSL_RIPEMD160_C 1811 * Enable the RIPEMD-160 hash algorithm. 1813 * Module: library/ripemd160.c 1814 * Caller: library/md.c 1817 #define POLARSSL_RIPEMD160_C 1820 * \def POLARSSL_RSA_C 1822 * Enable the RSA public-key cryptosystem. 1824 * Module: library/rsa.c 1825 * Caller: library/ssl_cli.c 1830 * This module is used by the following key exchanges: 1831 * RSA, DHE-RSA, ECDHE-RSA, RSA-PSK 1833 * Requires: POLARSSL_BIGNUM_C, POLARSSL_OID_C 1835 #define POLARSSL_RSA_C 1838 * \def POLARSSL_SHA1_C 1840 * Enable the SHA1 cryptographic hash algorithm. 1842 * Module: library/sha1.c 1843 * Caller: library/md.c 1847 * library/x509write_crt.c 1849 * This module is required for SSL/TLS and SHA1-signed certificates. 1851 #define POLARSSL_SHA1_C 1854 * \def POLARSSL_SHA256_C 1856 * Enable the SHA-224 and SHA-256 cryptographic hash algorithms. 1857 * (Used to be POLARSSL_SHA2_C) 1859 * Module: library/sha256.c 1860 * Caller: library/entropy.c 1866 * This module adds support for SHA-224 and SHA-256. 1867 * This module is required for the SSL/TLS 1.2 PRF function. 1869 #define POLARSSL_SHA256_C 1872 * \def POLARSSL_SHA512_C 1874 * Enable the SHA-384 and SHA-512 cryptographic hash algorithms. 1875 * (Used to be POLARSSL_SHA4_C) 1877 * Module: library/sha512.c 1878 * Caller: library/entropy.c 1883 * This module adds support for SHA-384 and SHA-512. 1885 #define POLARSSL_SHA512_C 1888 * \def POLARSSL_SSL_CACHE_C 1890 * Enable simple SSL cache implementation. 1892 * Module: library/ssl_cache.c 1895 * Requires: POLARSSL_SSL_CACHE_C 1897 #define POLARSSL_SSL_CACHE_C 1900 * \def POLARSSL_SSL_CLI_C 1902 * Enable the SSL/TLS client code. 1904 * Module: library/ssl_cli.c 1907 * Requires: POLARSSL_SSL_TLS_C 1909 * This module is required for SSL/TLS client support. 1911 #define POLARSSL_SSL_CLI_C 1914 * \def POLARSSL_SSL_SRV_C 1916 * Enable the SSL/TLS server code. 1918 * Module: library/ssl_srv.c 1921 * Requires: POLARSSL_SSL_TLS_C 1923 * This module is required for SSL/TLS server support. 1925 #define POLARSSL_SSL_SRV_C 1928 * \def POLARSSL_SSL_TLS_C 1930 * Enable the generic SSL/TLS code. 1932 * Module: library/ssl_tls.c 1933 * Caller: library/ssl_cli.c 1936 * Requires: POLARSSL_CIPHER_C, POLARSSL_MD_C 1937 * and at least one of the POLARSSL_SSL_PROTO_* defines 1939 * This module is required for SSL/TLS. 1941 #define POLARSSL_SSL_TLS_C 1944 * \def POLARSSL_THREADING_C 1946 * Enable the threading abstraction layer. 1947 * By default PolarSSL assumes it is used in a non-threaded environment or that 1948 * contexts are not shared between threads. If you do intend to use contexts 1949 * between threads, you will need to enable this layer to prevent race 1952 * Module: library/threading.c 1954 * This allows different threading implementations (self-implemented or 1957 * You will have to enable either POLARSSL_THREADING_ALT or 1958 * POLARSSL_THREADING_PTHREAD. 1960 * Enable this layer to allow use of mutexes within PolarSSL 1962 //#define POLARSSL_THREADING_C 1965 * \def POLARSSL_TIMING_C 1967 * Enable the portable timing interface. 1969 * Module: library/timing.c 1970 * Caller: library/havege.c 1972 * This module is used by the HAVEGE random number generator. 1974 #define POLARSSL_TIMING_C 1977 * \def POLARSSL_VERSION_C 1979 * Enable run-time version information. 1981 * Module: library/version.c 1983 * This module provides run-time version information. 1985 #define POLARSSL_VERSION_C 1988 * \def POLARSSL_X509_USE_C 1990 * Enable X.509 core for using certificates. 1992 * Module: library/x509.c 1993 * Caller: library/x509_crl.c 1994 * library/x509_crt.c 1995 * library/x509_csr.c 1997 * Requires: POLARSSL_ASN1_PARSE_C, POLARSSL_BIGNUM_C, POLARSSL_OID_C, 1998 * POLARSSL_PK_PARSE_C 2000 * This module is required for the X.509 parsing modules. 2002 #define POLARSSL_X509_USE_C 2005 * \def POLARSSL_X509_CRT_PARSE_C 2007 * Enable X.509 certificate parsing. 2009 * Module: library/x509_crt.c 2010 * Caller: library/ssl_cli.c 2014 * Requires: POLARSSL_X509_USE_C 2016 * This module is required for X.509 certificate parsing. 2018 #define POLARSSL_X509_CRT_PARSE_C 2021 * \def POLARSSL_X509_CRL_PARSE_C 2023 * Enable X.509 CRL parsing. 2025 * Module: library/x509_crl.c 2026 * Caller: library/x509_crt.c 2028 * Requires: POLARSSL_X509_USE_C 2030 * This module is required for X.509 CRL parsing. 2032 #define POLARSSL_X509_CRL_PARSE_C 2035 * \def POLARSSL_X509_CSR_PARSE_C 2037 * Enable X.509 Certificate Signing Request (CSR) parsing. 2039 * Module: library/x509_csr.c 2040 * Caller: library/x509_crt_write.c 2042 * Requires: POLARSSL_X509_USE_C 2044 * This module is used for reading X.509 certificate request. 2046 #define POLARSSL_X509_CSR_PARSE_C 2049 * \def POLARSSL_X509_CREATE_C 2051 * Enable X.509 core for creating certificates. 2053 * Module: library/x509_create.c 2055 * Requires: POLARSSL_BIGNUM_C, POLARSSL_OID_C, POLARSSL_PK_WRITE_C 2057 * This module is the basis for creating X.509 certificates and CSRs. 2059 #define POLARSSL_X509_CREATE_C 2062 * \def POLARSSL_X509_CRT_WRITE_C 2064 * Enable creating X.509 certificates. 2066 * Module: library/x509_crt_write.c 2068 * Requires: POLARSSL_CREATE_C 2070 * This module is required for X.509 certificate creation. 2072 #define POLARSSL_X509_CRT_WRITE_C 2075 * \def POLARSSL_X509_CSR_WRITE_C 2077 * Enable creating X.509 Certificate Signing Requests (CSR). 2079 * Module: library/x509_csr_write.c 2081 * Requires: POLARSSL_CREATE_C 2083 * This module is required for X.509 certificate request writing. 2085 #define POLARSSL_X509_CSR_WRITE_C 2088 * \def POLARSSL_XTEA_C 2090 * Enable the XTEA block cipher. 2092 * Module: library/xtea.c 2095 #define POLARSSL_XTEA_C 2097 /* \} name SECTION: PolarSSL modules */ 2100 * \name SECTION: Module configuration options 2102 * This section allows for the setting of module specific sizes and 2103 * configuration options. The default values are already present in the 2104 * relevant header files and should suffice for the regular use cases. 2106 * Our advice is to enable options and change their values here 2107 * only if you have a good reason and know the consequences. 2109 * Please check the respective header file for documentation on these 2110 * parameters (to prevent duplicate documentation). 2114 /* MPI / BIGNUM options */ 2115 //#define POLARSSL_MPI_WINDOW_SIZE 6 /**< Maximum windows size used. */ 2116 //#define POLARSSL_MPI_MAX_SIZE 1024 /**< Maximum number of bytes for usable MPIs. */ 2118 /* CTR_DRBG options */ 2119 //#define CTR_DRBG_ENTROPY_LEN 48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */ 2120 //#define CTR_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */ 2121 //#define CTR_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */ 2122 //#define CTR_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */ 2123 //#define CTR_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */ 2125 /* HMAC_DRBG options */ 2126 //#define POLARSSL_HMAC_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */ 2127 //#define POLARSSL_HMAC_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */ 2128 //#define POLARSSL_HMAC_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */ 2129 //#define POLARSSL_HMAC_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */ 2132 //#define POLARSSL_ECP_MAX_BITS 521 /**< Maximum bit size of groups */ 2133 //#define POLARSSL_ECP_WINDOW_SIZE 6 /**< Maximum window size used */ 2134 //#define POLARSSL_ECP_FIXED_POINT_OPTIM 1 /**< Enable fixed-point speed-up */ 2136 /* Entropy options */ 2137 //#define ENTROPY_MAX_SOURCES 20 /**< Maximum number of sources supported */ 2138 //#define ENTROPY_MAX_GATHER 128 /**< Maximum amount requested from entropy sources */ 2140 /* Memory buffer allocator options */ 2141 //#define POLARSSL_MEMORY_ALIGN_MULTIPLE 4 /**< Align on multiples of this value */ 2143 /* Platform options */ 2144 //#define POLARSSL_PLATFORM_STD_MEM_HDR <stdlib.h> /**< Header to include if POLARSSL_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */ 2145 //#define POLARSSL_PLATFORM_STD_MALLOC malloc /**< Default allocator to use, can be undefined */ 2146 //#define POLARSSL_PLATFORM_STD_FREE free /**< Default free to use, can be undefined */ 2147 //#define POLARSSL_PLATFORM_STD_PRINTF printf /**< Default printf to use, can be undefined */ 2148 //#define POLARSSL_PLATFORM_STD_FPRINTF fprintf /**< Default fprintf to use, can be undefined */ 2150 /* SSL Cache options */ 2151 //#define SSL_CACHE_DEFAULT_TIMEOUT 86400 /**< 1 day */ 2152 //#define SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */ 2155 //#define SSL_MAX_CONTENT_LEN 16384 /**< Size of the input / output buffer */ 2156 //#define SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */ 2157 //#define POLARSSL_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */ 2160 * Complete list of ciphersuites to use, in order of preference. 2162 * \warning No dependency checking is done on that field! This option can only 2163 * be used to restrict the set of available ciphersuites. It is your 2164 * responsibility to make sure the needed modules are active. 2166 * Use this to save a few hundred bytes of ROM (default ordering of all 2167 * available ciphersuites) and a few to a few hundred bytes of RAM. 2169 * The value below is only an example, not the default. 2171 //#define SSL_CIPHERSUITES TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 2174 //#define POLARSSL_DEBUG_DFL_MODE POLARSSL_DEBUG_LOG_FULL /**< Default log: Full or Raw */ 2176 /* \} name SECTION: Module configuration options */ 2179 #endif /* POLARSSL_CONFIG_H */
projects / proxmark3-svn / blob