1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
RIOT/pkg/mbedtls/Kconfig

63 lines
2.1 KiB
Plaintext
Raw Normal View History

# Copyright (c) 2021 HAW Hamburg
#
# This file is subject to the terms and conditions of the GNU Lesser
# General Public License v2.1. See the file LICENSE in the top level
# directory for more details.
menu "mbed TLS"
depends on USEPKG_MBEDTLS
config MBEDTLS_SELF_TEST
bool "Enable the checkup functions (*_self_test)"
default y
config MBEDTLS_ENTROPY_C
bool "Enable the platform-specific entropy code."
default y
depends on MBEDTLS_SHA256_C # || MBEDTLS_SHA512_C
help
This module provides a generic entropy pool.
config MBEDTLS_SHA256_C
bool "Enable the SHA-224 and SHA-256 cryptographic hash algorithms"
default y
help
This module adds support for SHA-224 and SHA-256.
This module is required for the SSL/TLS 1.2 PRF
function.
config MBEDTLS_SHA256_ALT
bool "Enable to let mbed TLS use an alternate SHA2xx core implementation"
default y
help
In case you enable MBEDTLS_SHA256_ALT, mbed TLS
will no longer provide the "struct
mbedtls_sha256_context" definition and omit the
base function declarations and implementations.
"sha256_alt.h" will be included from "sha256.h"
to include the new function definitions.
config MBEDTLS_THREADING_C
bool "Enable this layer to allow use of mutexes within mbed TLS"
default y
help
Enable the threading abstraction layer. If you do intend to
use contexts between threads, you will need to enable this
layer to prevent race condition. See also the mbed TLS
Knowledge Base article about threading: https://tls.mbed.org/
kb/development/thread-safety-and-multi-threading
This allows different threading implementations
(self-implemented or provided). In RIOT, we enable this
layer by default and utilize MBEDTLS_THREADING_ALT with RIOT
mutexes.
config MBEDTLS_THREADING_ALT
bool "Provide your own alternate threading implementation"
default y if MBEDTLS_THREADING_C
help
This to allows your own alternate threading implementation.
rsource "contrib/entropy/Kconfig"
endmenu # mbed TLS