commit 19892184567dd3ae908000220c68f6e29a613dee
author Gilles Peskine <Gilles.Peskine@arm.com> Thu Oct 03 14:21:14 2019 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Fri Oct 04 11:21:25 2019 +0200
tree 5a6e071bd1268bcf8d93d870969efd1b374afd98
parent dd5b67b4f4c0ce60e391f7ccf8a385143f5a4e7c

Move MBEDTLS_CTR_DRBG_USE_128_BIT_KEY to the correct section

It's an on/off feature, so it should be listed in version_features.

include/mbedtls/config.h

diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 5df962e..085f40a 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -689,6 +689,13 @@
 #define MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
 #define MBEDTLS_CIPHER_PADDING_ZEROS
 
+/** \def MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
+ *
+ * Uncomment this macro to use a 128-bit key in the CTR_DRBG module.
+ * By default, CTR_DRBG uses a 256-bit key.
+ */
+//#define MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
+
 /**
  * \def MBEDTLS_ENABLE_WEAK_CIPHERSUITES
  *
@@ -2149,7 +2156,7 @@
  *
  * Enable the CTR_DRBG AES-based random generator.
  * The CTR_DRBG generator uses AES-256 by default.
- * To use AES-128 instead, enable MBEDTLS_CTR_DRBG_USE_128_BIT_KEY below.
+ * To use AES-128 instead, enable \c MBEDTLS_CTR_DRBG_USE_128_BIT_KEY above.
  *
  * Module:  library/ctr_drbg.c
  * Caller:
@@ -3041,7 +3048,6 @@
 //#define MBEDTLS_CTR_DRBG_MAX_INPUT                256 /**< Maximum number of additional input bytes */
 //#define MBEDTLS_CTR_DRBG_MAX_REQUEST             1024 /**< Maximum number of requested bytes per call */
 //#define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT           384 /**< Maximum size of (re)seed buffer */
-//#define MBEDTLS_CTR_DRBG_USE_128_BIT_KEY              /**< Use 128-bit key for CTR_DRBG - may reduce security (see ctr_drbg.h) */
 
 /* HMAC_DRBG options */
 //#define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL   10000 /**< Interval before reseed is performed by default */