mbedtls/configs
Manuel Pégourié-Gonnard 1c1cc0d373 Add config.h option MBEDTLS_PK_SINGLE_HASH
No effect for now, just declaring it here, implemented in subsequent commits.

The option requires MBEDTLS_USE_TINYCRYPT and is incompatible with
MBEDTLS_PK_RSA_ALT_SUPPORT and MBEDTLS_RSA_C.

Currently users (including the X.509 and SSL libraries) assume that if both PK
and RSA are enabled, then RSA is available through PK. If we allowed RSA to be
enabled together with PK_SINGLE_TYPE, we'd break that assumption. Going
through the code to find all place that rely on that assumption and fix them
would be cumbersome, and people who want PK_SINGLE_TYPE are unlikely to care
about RSA anyway, so let's just make them incompatible.

This is also consistent with what's done in the MD module: MD_SINGLE_HASH
requires that exactly one hash be enabled.
2019-09-19 10:45:14 +02:00
..
baremetal.h Add config.h option MBEDTLS_PK_SINGLE_HASH 2019-09-19 10:45:14 +02:00
baremetal_test.h Remove CTR DRBG from baremetal test configuration 2019-09-03 08:59:36 +01:00
config-ccm-psk-tls1_2.h Exclude SHA-224 from some reduced config examples 2019-09-09 10:21:30 +02:00
config-mini-tls1_1.h Use negated option for controlling TLS support. 2019-06-17 15:26:34 +02:00
config-no-entropy.h Add a disabled CMAC define in the no-entropy configuration 2018-06-06 13:55:05 +02:00
config-suite-b.h Exclude SHA-224 from some reduced config examples 2019-09-09 10:21:30 +02:00
config-thread.h Exclude SHA-224 from some reduced config examples 2019-09-09 10:21:30 +02:00
README.txt Fix typo in configs/README.txt file 2017-10-06 11:58:50 +01:00

This directory contains example configuration files.

The examples are generally focused on a particular usage case (eg, support for
a restricted number of ciphersuites) and aim at minimizing resource usage for
this target. They can be used as a basis for custom configurations.

These files are complete replacements for the default config.h. To use one of
them, you can pick one of the following methods:

1. Replace the default file include/mbedtls/config.h with the chosen one.
   (Depending on your compiler, you may need to adjust the line with
   #include "mbedtls/check_config.h" then.)

2. Define MBEDTLS_CONFIG_FILE and adjust the include path accordingly.
   For example, using make:

    CFLAGS="-I$PWD/configs -DMBEDTLS_CONFIG_FILE='<foo.h>'" make

   Or, using cmake:

    find . -iname '*cmake*' -not -name CMakeLists.txt -exec rm -rf {} +
    CFLAGS="-I$PWD/configs -DMBEDTLS_CONFIG_FILE='<foo.h>'" cmake .
    make

Note that the second method also works if you want to keep your custom
configuration file outside the mbed TLS tree.