

More.Įnable the checkup functions (*_self_test).Įnable sending of alert messages in case of encountered errors as per RFC. More.Įnable support for PKCS#1 v2.1 encoding. More.Įnable support for PKCS#1 v1.5 encoding. Support external private RSA keys (eg from a HSM) in the PK layer. More.Įnable functions that use the filesystem. More.Įnable the prime-number generation code. More.Įnable a dummy error function to make use of mbedtls_strerror() in third party libraries easier when MBEDTLS_ERROR_C is disabled (no effect when MBEDTLS_ERROR_C is enabled).

More.Įnhance support for reading EC keys using variants of SEC1 not allowed by RFC 5915 and RFC 5480. More.Įnable the ECDH-RSA based ciphersuite modes in SSL / TLS. More.Įnable the ECDH-ECDSA based ciphersuite modes in SSL / TLS. More.Įnable the ECDHE-ECDSA based ciphersuite modes in SSL / TLS. More.Įnable the ECDHE-RSA based ciphersuite modes in SSL / TLS. More.Įnable the DHE-RSA based ciphersuite modes in SSL / TLS. More.Įnable the RSA-only based ciphersuite modes in SSL / TLS. More.Įnable the RSA-PSK based ciphersuite modes in SSL / TLS. More.Įnable the ECDHE-PSK based ciphersuite modes in SSL / TLS. More.Įnable the DHE-PSK based ciphersuite modes in SSL / TLS. More.Įnable the PSK based ciphersuite modes in SSL / TLS. More.Įnable deterministic ECDSA (RFC 6979). More.Įnable specific 'modulo p' routines for each NIST prime. MBEDTLS_ECP_XXXX_ENABLED: Enables specific curves within the Elliptic Curve module. Remove RC4 ciphersuites by default in SSL / TLS. MBEDTLS_CIPHER_PADDING_XXX: Uncomment or comment macros to add support for specific padding modes in the cipher layer with cipher modes that support padding (e.g. This section sets support for features that are or are not needed within the modules that are enabled.Įnable Cipher Block Chaining mode (CBC) for symmetric ciphers.Įnable Cipher Feedback mode (CFB) for symmetric ciphers.Įnable Counter Block Cipher mode (CTR) for symmetric ciphers.
