cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-23 04:26:46 -04:00
Code Issues Packages Projects Releases Wiki Activity

Explicitly enable built-in entropy in sample and test configs

Browse Source 
Now that built-in entropy is a positive option
`MBEDTLS_PSA_BUILTIN_GET_ENTROPY` instead of a negative option
`MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES`, it needs to be enabled explicitly in
sample and test configurations.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2025-07-15 13:09:00 +02:00
parent aeac0b31ac
commit 606671b6a5
3 changed files with 3 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
configs/crypto-config-ccm-psk-tls1_2.h
View File

@ -31,15 +31,9 @@
#define MBEDTLS_CTR_DRBG_C #define MBEDTLS_CTR_DRBG_C
#define MBEDTLS_ENTROPY_C #define MBEDTLS_ENTROPY_C
#define MBEDTLS_PSA_BUILTIN_GET_ENTROPY
/* Save RAM at the expense of ROM */ /* Save RAM at the expense of ROM */
#define MBEDTLS_AES_ROM_TABLES #define MBEDTLS_AES_ROM_TABLES
/*
* You should adjust this to the exact number of sources you're using: default
* is the "platform_entropy_poll" source, but you may want to add other ones
* Minimum is 2 for the entropy test suite.
*/
#define MBEDTLS_ENTROPY_MAX_SOURCES 2
#endif /* PSA_CRYPTO_CONFIG_H */ #endif /* PSA_CRYPTO_CONFIG_H */

7
configs/crypto-config-suite-b.h
View File

@ -51,6 +51,7 @@
#define MBEDTLS_ENTROPY_C #define MBEDTLS_ENTROPY_C
#define MBEDTLS_PK_C #define MBEDTLS_PK_C
#define MBEDTLS_PK_PARSE_C #define MBEDTLS_PK_PARSE_C
#define MBEDTLS_PSA_BUILTIN_GET_ENTROPY
/* For test certificates */ /* For test certificates */
#define MBEDTLS_BASE64_C #define MBEDTLS_BASE64_C
@ -69,10 +70,4 @@
/* Significant speed benefit at the expense of some ROM */ /* Significant speed benefit at the expense of some ROM */
#define MBEDTLS_ECP_NIST_OPTIM #define MBEDTLS_ECP_NIST_OPTIM
/*
* You should adjust this to the exact number of sources you're using: default
* is the "mbedtls_platform_entropy_poll" source, but you may want to add other ones.
* Minimum is 2 for the entropy test suite.
*/
#define MBEDTLS_ENTROPY_MAX_SOURCES 2
#endif /* PSA_CRYPTO_CONFIG_H */ #endif /* PSA_CRYPTO_CONFIG_H */

1
configs/crypto-config-thread.h
View File

@ -60,6 +60,7 @@
#define MBEDTLS_MD_C #define MBEDTLS_MD_C
#define MBEDTLS_PK_C #define MBEDTLS_PK_C
#define MBEDTLS_PK_PARSE_C #define MBEDTLS_PK_PARSE_C
#define MBEDTLS_PSA_BUILTIN_GET_ENTROPY
/* Save RAM at the expense of ROM */ /* Save RAM at the expense of ROM */
#define MBEDTLS_AES_ROM_TABLES #define MBEDTLS_AES_ROM_TABLES