1 /** 2 * \file config-thread.h 3 * 4 * \brief Minimal configuration for using TLS as part of Thread 5 */ 6 /* 7 * Copyright The Mbed TLS Contributors 8 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later 9 */ 10 11 /* 12 * Minimal configuration for using TLS a part of Thread 13 * http://threadgroup.org/ 14 * 15 * Distinguishing features: 16 * - no RSA or classic DH, fully based on ECC 17 * - no X.509 18 * - support for experimental EC J-PAKE key exchange 19 * 20 * To be used in conjunction with configs/crypto-config-thread.h. 21 * See README.txt for usage instructions. 22 */ 23 24 /* Mbed TLS feature support */ 25 #define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED 26 #define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH 27 #define MBEDTLS_SSL_PROTO_TLS1_2 28 #define MBEDTLS_SSL_PROTO_DTLS 29 #define MBEDTLS_SSL_DTLS_ANTI_REPLAY 30 #define MBEDTLS_SSL_DTLS_HELLO_VERIFY 31 32 /* Mbed TLS modules */ 33 #define MBEDTLS_SSL_COOKIE_C 34 #define MBEDTLS_SSL_CLI_C 35 #define MBEDTLS_SSL_SRV_C 36 #define MBEDTLS_SSL_TLS_C 37 38 /* For tests using ssl-opt.sh */ 39 #define MBEDTLS_NET_C 40 #define MBEDTLS_TIMING_C 41 42 /* Save ROM and a few bytes of RAM by specifying our own ciphersuite list */ 43 #define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8 44