Manuel Pégourié-Gonnard | 1a74a26 | 2014-06-24 15:51:32 +0200 | [diff] [blame] | 1 | /* |
| 2 | * Minimal configuration for TLS 1.2 with PSK and AES-CCM ciphersuites |
Manuel Pégourié-Gonnard | 0ac844c | 2014-06-24 16:30:49 +0200 | [diff] [blame^] | 3 | * Distinguishing features: |
| 4 | * - no bignum, no PK, no X509 |
| 5 | * - fully modern and secure (provided the pre-shared keys have high entropy) |
| 6 | * - very low record overhead if using the CCM-8 suites |
| 7 | * - optimized for low RAM usage |
Manuel Pégourié-Gonnard | 1a74a26 | 2014-06-24 15:51:32 +0200 | [diff] [blame] | 8 | * |
| 9 | * See README.txt for usage instructions. |
| 10 | */ |
| 11 | #ifndef POLARSSL_CONFIG_H |
| 12 | #define POLARSSL_CONFIG_H |
| 13 | |
| 14 | /* System support */ |
| 15 | #define POLARSSL_HAVE_IPV6 |
| 16 | #define POLARSSL_HAVE_TIME |
| 17 | |
| 18 | /* PolarSSL feature support */ |
| 19 | #define POLARSSL_KEY_EXCHANGE_PSK_ENABLED |
| 20 | #define POLARSSL_SSL_PROTO_TLS1_2 |
| 21 | |
| 22 | /* PolarSSL modules */ |
| 23 | #define POLARSSL_AES_C |
Manuel Pégourié-Gonnard | 1a74a26 | 2014-06-24 15:51:32 +0200 | [diff] [blame] | 24 | #define POLARSSL_CCM_C |
| 25 | #define POLARSSL_CIPHER_C |
| 26 | #define POLARSSL_CTR_DRBG_C |
| 27 | #define POLARSSL_ENTROPY_C |
| 28 | #define POLARSSL_MD_C |
| 29 | #define POLARSSL_NET_C |
Manuel Pégourié-Gonnard | 1a74a26 | 2014-06-24 15:51:32 +0200 | [diff] [blame] | 30 | #define POLARSSL_SHA256_C |
| 31 | #define POLARSSL_SSL_CLI_C |
| 32 | #define POLARSSL_SSL_SRV_C |
| 33 | #define POLARSSL_SSL_TLS_C |
| 34 | |
Manuel Pégourié-Gonnard | 0ac844c | 2014-06-24 16:30:49 +0200 | [diff] [blame^] | 35 | /* Save RAM at the expense of ROM */ |
| 36 | #define POLARSSL_AES_ROM_TABLES |
| 37 | |
| 38 | /* |
| 39 | * You should adjust this to the exact number of sources you're using: default |
| 40 | * is the "platform_entrpy_poll" source, but you may want to add other ones |
| 41 | */ |
| 42 | #define ENTROPY_MAX_SOURCES 1 |
| 43 | |
| 44 | /* |
| 45 | * Save RAM at the expense of interoperability: do this only if you control |
| 46 | * both ends of the connection! (See coments in "polarssl/ssl.h".) |
| 47 | */ |
| 48 | #define SSL_MAX_CONTENT_LEN 512 |
| 49 | |
Manuel Pégourié-Gonnard | 1a74a26 | 2014-06-24 15:51:32 +0200 | [diff] [blame] | 50 | #include "check_config.h" |
| 51 | |
| 52 | #endif /* POLARSSL_CONFIG_H */ |