| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 1 | This directory contains example configuration files. |
| 2 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 3 | The examples are generally focused on a particular use case (eg, support for |
| 4 | a restricted set of ciphersuites) and aim to minimize resource usage for |
| 5 | the target. They can be used as a basis for custom configurations. |
| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 6 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 7 | These files come in pairs and are complete replacements for the default |
| 8 | mbedtls_config.h and crypto_config.h. The two files of a pair share the same or |
| 9 | very similar name, with the crypto file prefixed by "crypto-". Note |
| 10 | that some of the cryptography configuration files may be located in |
| 11 | tf-psa-crypto/configs. |
| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 12 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 13 | To use one of these pairs, you can pick one of the following methods: |
| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 14 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 15 | 1. Replace the default files include/mbedtls/mbedtls_config.h and |
| 16 | tf-psa-crypto/include/psa/crypto_config.h with the chosen ones. |
| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 17 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 18 | 2. Use the MBEDTLS_CONFIG_FILE and TF_PSA_CRYPTO_CONFIG_FILE options of the |
| 19 | CMake build system: |
| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 20 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 21 | cmake -DMBEDTLS_CONFIG_FILE="path-to-your-mbedtls-config-file" \ |
| 22 | -DTF_PSA_CRYPTO_CONFIG_FILE="path-to-your-tf-psa-crypto-config-file" . |
| 23 | make |
| Manuel Pégourié-Gonnard | 0bc1f23 | 2014-04-30 11:53:50 +0200 | [diff] [blame] | 24 | |
| Ronald Cron | 0f2ef4a | 2025-09-30 18:30:32 +0200 | [diff] [blame^] | 25 | The second method also works if you want to keep your custom configuration |
| 26 | files outside the Mbed TLS tree. |