Home Explore Help
Register Sign In
OWEALs
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
2
0
Fork 0
Files Issues 8 Wiki
Branch: master
Branches Tags
wolfssl
/
zephyr
/
Kconfig.tls-generic

Kconfig.tls-generic 7.7 KB
Permalink History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272 
  1. # Kconfig.tls - TLS/DTLS related options
    2. 

  2. 

  3. #
    4. 

  4. # Copyright (c) 2018 Intel Corporation
    5. 

  5. # Copyright (c) 2018 Nordic Semiconductor ASA
    6. 

  6. #
    7. 

  7. # SPDX-License-Identifier: Apache-2.0
    8. 

  8. #
    9. 

  9. 

  10. menu "TLS configuration"
    11. 

  11. 

  12. menu "Supported TLS version"
    13. 

  13. 

  14. config WOLFSSL_TLS_VERSION_1_0
    15. 

  15. 	bool "Enable support for TLS 1.0"
    16. 

  16. 	select WOLFSSL_ALLOW_TLSV10_ENABLED
    17. 

  17. 

  18. config WOLFSSL_TLS_VERSION_1_1
    19. 

  19. 	bool "Enable support for TLS 1.1"
    20. 

  20. 	select WOLFSSL_NO_OLD_TLS_DISABLED
    21. 

  21. 

  22. config WOLFSSL_TLS_VERSION_1_2
    23. 

  23. 	bool "Enable support for TLS 1.2"
    24. 

  24. 	default y
    25. 

  25. 

  26. config WOLFSSL_TLS_VERSION_1_3
    27. 

  27. 	bool "Enable support for TLS 1.3"
    28. 

  28. 	select WOLFSSL_TLS13_ENABLED
    29. 

  29. 

  30. endmenu
    31. 

  31. 

  32. menu "Ciphersuite configuration"
    33. 

  33. 

  34. comment "Supported key exchange modes"
    35. 

  35. 

  36. config WOLFSSL_KEY_EXCHANGE_ALL_ENABLED
    37. 

  37. 	bool "Enable all available ciphersuite modes"
    38. 

  38. 	select WOLFSSL_KEY_EXCHANGE_PSK_ENABLED
    39. 

  39. 	select WOLFSSL_KEY_EXCHANGE_DHE_PSK_ENABLED
    40. 

  40. 	select WOLFSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED
    41. 

  41. 	select WOLFSSL_KEY_EXCHANGE_RSA_PSK_ENABLED
    42. 

  42. 	select WOLFSSL_KEY_EXCHANGE_RSA_ENABLED
    43. 

  43. 	select WOLFSSL_KEY_EXCHANGE_DHE_RSA_ENABLED
    44. 

  44. 	select WOLFSSL_KEY_EXCHANGE_ECDHE_RSA_ENABLED
    45. 

  45. 	select WOLFSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
    46. 

  46. 	select WOLFSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
    47. 

  47. 	select WOLFSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
    48. 

  48. 	select WOLFSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED
    49. 

  49. 	select WOLFSSL_KEY_EXCHANGE_ECJPAKE_ENABLED
    50. 

  50. 

  51. config WOLFSSL_KEY_EXCHANGE_PSK_ENABLED
    52. 

  52. 	bool "Enable the PSK based ciphersuite modes"
    53. 

  53. 

  54. config WOLFSSL_KEY_EXCHANGE_DHE_PSK_ENABLED
    55. 

  55. 	bool "Enable the DHE-PSK based ciphersuite modes"
    56. 

  56. 

  57. config WOLFSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED
    58. 

  58. 	bool "Enable the ECDHE-PSK based ciphersuite modes"
    59. 

  59. 

  60. config WOLFSSL_KEY_EXCHANGE_RSA_PSK_ENABLED
    61. 

  61. 	bool "Enable the RSA-PSK based ciphersuite modes"
    62. 

  62. 

  63. config WOLFSSL_KEY_EXCHANGE_RSA_ENABLED
    64. 

  64. 	bool "Enable the RSA-only based ciphersuite modes"
    65. 

  65. 	default y
    66. 

  66. 

  67. config WOLFSSL_KEY_EXCHANGE_DHE_RSA_ENABLED
    68. 

  68. 	bool "Enable the DHE-RSA based ciphersuite modes"
    69. 

  69. 

  70. config WOLFSSL_KEY_EXCHANGE_ECDHE_RSA_ENABLED
    71. 

  71. 	bool "Enable the ECDHE-RSA based ciphersuite modes"
    72. 

  72. 

  73. config WOLFSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
    74. 

  74. 	bool "Enable the ECDHE-ECDSA based ciphersuite modes"
    75. 

  75. 

  76. config WOLFSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
    77. 

  77. 	bool "Enable the ECDH-ECDSA based ciphersuite modes"
    78. 

  78. 

  79. config WOLFSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED
    80. 

  80. 	bool "Enable the ECDH-RSA based ciphersuite modes"
    81. 

  81. 

  82. config WOLFSSL_KEY_EXCHANGE_ECJPAKE_ENABLED
    83. 

  83. 	bool "Enable the ECJPAKE based ciphersuite modes"
    84. 

  84. 

  85. if WOLFSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED || \
    86. 

  86.    WOLFSSL_KEY_EXCHANGE_ECDHE_RSA_ENABLED || \
    87. 

  87.    WOLFSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED || \
    88. 

  88.    WOLFSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED || \
    89. 

  89.    WOLFSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED || \
    90. 

  90.    WOLFSSL_KEY_EXCHANGE_ECJPAKE_ENABLED
    91. 

  91. 

  92. comment "Supported elliptic curves"
    93. 

  93. 

  94. config WOLFSSL_ECP_ALL_ENABLED
    95. 

  95. 	bool "Enable all available elliptic curves"
    96. 

  96. 	select WOLFSSL_ECP_DP_SECP192R1_ENABLED
    97. 

  97. 	select WOLFSSL_ECP_DP_SECP192R1_ENABLED
    98. 

  98. 	select WOLFSSL_ECP_DP_SECP224R1_ENABLED
    99. 

  99. 	select WOLFSSL_ECP_DP_SECP256R1_ENABLED
    100. 

  100. 	select WOLFSSL_ECP_DP_SECP384R1_ENABLED
    101. 

  101. 	select WOLFSSL_ECP_DP_SECP521R1_ENABLED
    102. 

  102. 	select WOLFSSL_ECP_DP_SECP192K1_ENABLED
    103. 

  103. 	select WOLFSSL_ECP_DP_SECP224K1_ENABLED
    104. 

  104. 	select WOLFSSL_ECP_DP_SECP256K1_ENABLED
    105. 

  105. 	select WOLFSSL_ECP_DP_BP256R1_ENABLED
    106. 

  106. 	select WOLFSSL_ECP_DP_BP384R1_ENABLED
    107. 

  107. 	select WOLFSSL_ECP_DP_BP512R1_ENABLED
    108. 

  108. 	select WOLFSSL_ECP_DP_CURVE25519_ENABLED
    109. 

  109. 	select WOLFSSL_ECP_DP_CURVE448_ENABLED
    110. 

  110. 	select WOLFSSL_ECP_NIST_OPTIM
    111. 

  111. 

  112. config WOLFSSL_ECP_DP_SECP192R1_ENABLED
    113. 

  113. 	bool "Enable SECP192R1 elliptic curve"
    114. 

  114. 

  115. config WOLFSSL_ECP_DP_SECP224R1_ENABLED
    116. 

  116. 	bool "Enable SECP224R1 elliptic curve"
    117. 

  117. 

  118. config WOLFSSL_ECP_DP_SECP256R1_ENABLED
    119. 

  119. 	bool "Enable SECP256R1 elliptic curve"
    120. 

  120. 

  121. config WOLFSSL_ECP_DP_SECP384R1_ENABLED
    122. 

  122. 	bool "Enable SECP384R1 elliptic curve"
    123. 

  123. 

  124. config WOLFSSL_ECP_DP_SECP521R1_ENABLED
    125. 

  125. 	bool "Enable SECP521R1 elliptic curve"
    126. 

  126. 

  127. config WOLFSSL_ECP_DP_SECP192K1_ENABLED
    128. 

  128. 	bool "Enable SECP192K1 elliptic curve"
    129. 

  129. 

  130. config WOLFSSL_ECP_DP_SECP224K1_ENABLED
    131. 

  131. 	bool "Enable SECP224K1 elliptic curve"
    132. 

  132. 

  133. config WOLFSSL_ECP_DP_SECP256K1_ENABLED
    134. 

  134. 	bool "Enable SECP256K1 elliptic curve"
    135. 

  135. 

  136. config WOLFSSL_ECP_DP_BP256R1_ENABLED
    137. 

  137. 	bool "Enable BP256R1 elliptic curve"
    138. 

  138. 

  139. config WOLFSSL_ECP_DP_BP384R1_ENABLED
    140. 

  140. 	bool "Enable BP384R1 elliptic curve"
    141. 

  141. 

  142. config WOLFSSL_ECP_DP_BP512R1_ENABLED
    143. 

  143. 	bool "Enable BP512R1 elliptic curve"
    144. 

  144. 

  145. config WOLFSSL_ECP_DP_CURVE25519_ENABLED
    146. 

  146. 	bool "Enable CURVE25519 elliptic curve"
    147. 

  147. 

  148. config WOLFSSL_ECP_DP_CURVE448_ENABLED
    149. 

  149. 	bool "Enable CURVE448 elliptic curve"
    150. 

  150. 

  151. config WOLFSSL_ECP_NIST_OPTIM
    152. 

  152. 	bool "Enable NSIT curves optimization"
    153. 

  153. 

  154. endif
    155. 

  155. 

  156. comment "Supported cipher modes"
    157. 

  157. 

  158. config WOLFSSL_CIPHER_ALL_ENABLED
    159. 

  159. 	bool "Enable all available ciphers"
    160. 

  160. 	select WOLFSSL_CIPHER_AES_ENABLED
    161. 

  161. 	select WOLFSSL_CIPHER_CAMELLIA_ENABLED
    162. 

  162. 	select WOLFSSL_CIPHER_DES_ENABLED
    163. 

  163. 	select WOLFSSL_CIPHER_ARC4_ENABLED
    164. 

  164. 	select WOLFSSL_CIPHER_CHACHA20_ENABLED
    165. 

  165. 	select WOLFSSL_CIPHER_BLOWFISH_ENABLED
    166. 

  166. 	select WOLFSSL_CIPHER_CCM_ENABLED
    167. 

  167. 	select WOLFSSL_CIPHER_MODE_XTS_ENABLED
    168. 

  168. 	select WOLFSSL_CIPHER_MODE_GCM_ENABLED
    169. 

  169. 	select WOLFSSL_CIPHER_CBC_ENABLED
    170. 

  170. 	select WOLFSSL_CHACHAPOLY_AEAD_ENABLED
    171. 

  171. 

  172. config WOLFSSL_CIPHER_AES_ENABLED
    173. 

  173. 	bool "Enable the AES block cipher"
    174. 

  174. 	default y
    175. 

  175. 

  176. config WOLFSSL_AES_ROM_TABLES
    177. 

  177. 	depends on WOLFSSL_CIPHER_AES_ENABLED
    178. 

  178. 	bool "Use precomputed AES tables stored in ROM."
    179. 

  179. 	default y
    180. 

  180. 

  181. config WOLFSSL_CIPHER_CAMELLIA_ENABLED
    182. 

  182. 	bool "Enable the Camellia block cipher"
    183. 

  183. 

  184. config WOLFSSL_CIPHER_DES_ENABLED
    185. 

  185. 	bool "Enable the DES block cipher"
    186. 

  186. 	default y
    187. 

  187. 

  188. config WOLFSSL_CIPHER_ARC4_ENABLED
    189. 

  189. 	bool "Enable the ARC4 stream cipher"
    190. 

  190. 

  191. config WOLFSSL_CIPHER_CHACHA20_ENABLED
    192. 

  192. 	bool "Enable the ChaCha20 stream cipher"
    193. 

  193. 

  194. config WOLFSSL_CIPHER_BLOWFISH_ENABLED
    195. 

  195. 	bool "Enable the Blowfish block cipher"
    196. 

  196. 

  197. config WOLFSSL_CIPHER_CCM_ENABLED
    198. 

  198. 	bool "Enable the Counter with CBC-MAC (CCM) mode for 128-bit block cipher"
    199. 

  199. 	depends on WOLFSSL_CIPHER_AES_ENABLED || WOLFSSL_CIPHER_CAMELLIA_ENABLED
    200. 

  200. 

  201. config WOLFSSL_CIPHER_MODE_XTS_ENABLED
    202. 

  202. 	bool "Enable Xor-encrypt-xor with ciphertext stealing mode (XTS) for AES"
    203. 

  203. 	depends on WOLFSSL_CIPHER_AES_ENABLED || WOLFSSL_CIPHER_CAMELLIA_ENABLED
    204. 

  204. 

  205. config WOLFSSL_CIPHER_MODE_GCM_ENABLED
    206. 

  206. 	bool "Enable the Galois/Counter Mode (GCM) for AES"
    207. 

  207. 	depends on WOLFSSL_CIPHER_AES_ENABLED || WOLFSSL_CIPHER_CAMELLIA_ENABLED
    208. 

  208. 

  209. config WOLFSSL_CIPHER_CBC_ENABLED
    210. 

  210. 	bool "Enable Cipher Block Chaining mode (CBC) for symmetric ciphers"
    211. 

  211. 	default y
    212. 

  212. 

  213. config WOLFSSL_CHACHAPOLY_AEAD_ENABLED
    214. 

  214. 	bool "Enable the ChaCha20-Poly1305 AEAD algorithm"
    215. 

  215. 	depends on WOLFSSL_CIPHER_CHACHA20_ENABLED || WOLFSSL_MAC_POLY1305_ENABLED
    216. 

  216. 

  217. comment "Supported message authentication methods"
    218. 

  218. 

  219. config WOLFSSL_MAC_ALL_ENABLED
    220. 

  220. 	bool "Enable all available MAC methods"
    221. 

  221. 	select WOLFSSL_MAC_MD4_ENABLED
    222. 

  222. 	select WOLFSSL_MAC_MD5_ENABLED
    223. 

  223. 	select WOLFSSL_MAC_SHA1_ENABLED
    224. 

  224. 	select WOLFSSL_MAC_SHA256_ENABLED
    225. 

  225. 	select WOLFSSL_MAC_SHA512_ENABLED
    226. 

  226. 	select WOLFSSL_MAC_POLY1305_ENABLED
    227. 

  227. 

  228. config WOLFSSL_MAC_MD4_ENABLED
    229. 

  229. 	bool "Enable the MD4 hash algorithm"
    230. 

  230. 

  231. config WOLFSSL_MAC_MD5_ENABLED
    232. 

  232. 	bool "Enable the MD5 hash algorithm"
    233. 

  233. 	default y
    234. 

  234. 

  235. config WOLFSSL_MAC_SHA1_ENABLED
    236. 

  236. 	bool "Enable the SHA1 hash algorithm"
    237. 

  237. 	default y
    238. 

  238. 

  239. config WOLFSSL_MAC_SHA256_ENABLED
    240. 

  240. 	bool "Enable the SHA-224 and SHA-256 hash algorithms"
    241. 

  241. 	default y
    242. 

  242. 

  243. config WOLFSSL_MAC_SHA512_ENABLED
    244. 

  244. 	bool "Enable the SHA-384 and SHA-512 hash algorithms"
    245. 

  245. 

  246. config WOLFSSL_MAC_POLY1305_ENABLED
    247. 

  247. 	bool "Enable the Poly1305 MAC algorithm"
    248. 

  248. 

  249. endmenu
    250. 

  250. 

  251. comment "Random number generators"
    252. 

  252. 

  253. config WOLFSSL_HMAC_DRBG_ENABLED
    254. 

  254. 	bool "Enable the HMAC_DRBG random generator"
    255. 

  255. 	default y
    256. 

  256. 

  257. comment "Other configurations"
    258. 

  258. 

  259. config WOLFSSL_HAVE_ASM
    260. 

  260. 	bool "Enable use of assembly code"
    261. 

  261. 	default y
    262. 

  262. 	help
    263. 

  263. 	  Enable use of assembly code in wolfSSL. This improves the performances
    264. 

  264. 	  of asymmetric cryptography, however this might have an impact on the
    265. 

  265. 	  code size.
    266. 

  266. 

  267. config WOLFSSL_USER_SETTTINGS
    268. 

  268. 	string "User settings file for wolfSSL"
    269. 

  269. 	help
    270. 

  270. 	  User settings file that contains wolfSSL defines.
    271. 

  271. 

  272. endmenu
    273.