blob: 456c77c74a56223f9797eddb30134ce0fb40056a [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/**
2 * \file config.h
3 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00004 * \brief Configuration options (set of defines)
5 *
Paul Bakker0a597072012-09-25 21:55:46 +00006 * Copyright (C) 2006-2012, Brainspark B.V.
Paul Bakkerb96f1542010-07-18 20:36:00 +00007 *
8 * This file is part of PolarSSL (http://www.polarssl.org)
Paul Bakker84f12b72010-07-18 10:13:04 +00009 * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>
Paul Bakkerb96f1542010-07-18 20:36:00 +000010 *
Paul Bakker77b385e2009-07-28 17:23:11 +000011 * All rights reserved.
Paul Bakkere0ccd0a2009-01-04 16:27:10 +000012 *
Paul Bakkere0ccd0a2009-01-04 16:27:10 +000013 * This program is free software; you can redistribute it and/or modify
14 * it under the terms of the GNU General Public License as published by
15 * the Free Software Foundation; either version 2 of the License, or
16 * (at your option) any later version.
17 *
18 * This program is distributed in the hope that it will be useful,
19 * but WITHOUT ANY WARRANTY; without even the implied warranty of
20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 * GNU General Public License for more details.
22 *
23 * You should have received a copy of the GNU General Public License along
24 * with this program; if not, write to the Free Software Foundation, Inc.,
25 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
26 *
Paul Bakker5121ce52009-01-03 21:22:43 +000027 * This set of compile-time options may be used to enable
28 * or disable features selectively, and reduce the global
29 * memory footprint.
30 */
Paul Bakker40e46942009-01-03 21:51:57 +000031#ifndef POLARSSL_CONFIG_H
32#define POLARSSL_CONFIG_H
Paul Bakker5121ce52009-01-03 21:22:43 +000033
Paul Bakkercce9d772011-11-18 14:26:47 +000034#if defined(_MSC_VER) && !defined(_CRT_SECURE_NO_DEPRECATE)
Paul Bakker5121ce52009-01-03 21:22:43 +000035#define _CRT_SECURE_NO_DEPRECATE 1
36#endif
37
Paul Bakkerf3b86c12011-01-27 15:24:17 +000038/**
Paul Bakker0a62cd12011-01-21 11:00:08 +000039 * \name SECTION: System support
40 *
41 * This section sets system specific settings.
42 * \{
43 */
44
Paul Bakkerf3b86c12011-01-27 15:24:17 +000045/**
46 * \def POLARSSL_HAVE_INT8
Paul Bakker5121ce52009-01-03 21:22:43 +000047 *
Paul Bakkerf3b86c12011-01-27 15:24:17 +000048 * The system uses 8-bit wide native integers.
49 *
50 * Uncomment if native integers are 8-bit wide.
Paul Bakker40e46942009-01-03 21:51:57 +000051#define POLARSSL_HAVE_INT8
Paul Bakker5121ce52009-01-03 21:22:43 +000052 */
53
Paul Bakkerf3b86c12011-01-27 15:24:17 +000054/**
55 * \def POLARSSL_HAVE_INT16
Paul Bakker5121ce52009-01-03 21:22:43 +000056 *
Paul Bakkerf3b86c12011-01-27 15:24:17 +000057 * The system uses 16-bit wide native integers.
58 *
59 * Uncomment if native integers are 16-bit wide.
Paul Bakker40e46942009-01-03 21:51:57 +000060#define POLARSSL_HAVE_INT16
Paul Bakker5121ce52009-01-03 21:22:43 +000061 */
62
Paul Bakkerf3b86c12011-01-27 15:24:17 +000063/**
Paul Bakker62261d62012-10-02 12:19:31 +000064 * \def POLARSSL_HAVE_LONGLONG
Paul Bakker5121ce52009-01-03 21:22:43 +000065 *
Paul Bakker62261d62012-10-02 12:19:31 +000066 * The compiler supports the 'long long' type.
67 * (Only used on 32-bit platforms)
Paul Bakker5121ce52009-01-03 21:22:43 +000068 */
Paul Bakker62261d62012-10-02 12:19:31 +000069#define POLARSSL_HAVE_LONGLONG
Paul Bakker5121ce52009-01-03 21:22:43 +000070
Paul Bakkerf3b86c12011-01-27 15:24:17 +000071/**
72 * \def POLARSSL_HAVE_ASM
73 *
74 * The compiler has support for asm()
75 *
Paul Bakker5121ce52009-01-03 21:22:43 +000076 * Uncomment to enable the use of assembly code.
Paul Bakker68041ec2009-04-19 21:17:55 +000077 *
78 * Requires support for asm() in compiler.
79 *
80 * Used in:
81 * library/timing.c
82 * library/padlock.c
83 * include/polarssl/bn_mul.h
84 *
Paul Bakker5121ce52009-01-03 21:22:43 +000085 */
Paul Bakker40e46942009-01-03 21:51:57 +000086#define POLARSSL_HAVE_ASM
Paul Bakker5121ce52009-01-03 21:22:43 +000087
Paul Bakkerf3b86c12011-01-27 15:24:17 +000088/**
89 * \def POLARSSL_HAVE_SSE2
90 *
Paul Bakkere23c3152012-10-01 14:42:47 +000091 * CPU supports SSE2 instruction set.
Paul Bakkerf3b86c12011-01-27 15:24:17 +000092 *
Paul Bakker5121ce52009-01-03 21:22:43 +000093 * Uncomment if the CPU supports SSE2 (IA-32 specific).
94 *
Paul Bakker40e46942009-01-03 21:51:57 +000095#define POLARSSL_HAVE_SSE2
Paul Bakker5121ce52009-01-03 21:22:43 +000096 */
Paul Bakker0a62cd12011-01-21 11:00:08 +000097/* \} name */
98
Paul Bakkerf3b86c12011-01-27 15:24:17 +000099/**
Paul Bakker0a62cd12011-01-21 11:00:08 +0000100 * \name SECTION: PolarSSL feature support
101 *
102 * This section sets support for features that are or are not needed
103 * within the modules that are enabled.
104 * \{
105 */
Paul Bakker5121ce52009-01-03 21:22:43 +0000106
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000107/**
Paul Bakker15566e42011-04-24 21:19:15 +0000108 * \def POLARSSL_AES_ROM_TABLES
109 *
110 * Store the AES tables in ROM.
111 *
112 * Uncomment this macro to store the AES tables in ROM.
113 *
114#define POLARSSL_AES_ROM_TABLES
115 */
116
117/**
Paul Bakkerb6ecaf52011-04-19 14:29:23 +0000118 * \def POLARSSL_CIPHER_MODE_CFB
119 *
120 * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
121 */
122#define POLARSSL_CIPHER_MODE_CFB
123
124/**
125 * \def POLARSSL_CIPHER_MODE_CTR
126 *
127 * Enable Counter Block Cipher mode (CTR) for symmetric ciphers.
128 */
129#define POLARSSL_CIPHER_MODE_CTR
130
131/**
Paul Bakkerfab5c822012-02-06 16:45:10 +0000132 * \def POLARSSL_CIPHER_NULL_CIPHER
133 *
134 * Enable NULL cipher.
135 * Warning: Only do so when you know what you are doing. This allows for
136 * encryption or channels without any security!
137 *
138 * Requires POLARSSL_ENABLE_WEAK_CIPHERSUITES as well to enable
139 * the following ciphersuites:
Paul Bakker645ce3a2012-10-31 12:32:41 +0000140 * TLS_RSA_WITH_NULL_MD5
141 * TLS_RSA_WITH_NULL_SHA
142 * TLS_RSA_WITH_NULL_SHA256
Paul Bakkerfab5c822012-02-06 16:45:10 +0000143 *
144 * Uncomment this macro to enable the NULL cipher and ciphersuites
145#define POLARSSL_CIPHER_NULL_CIPHER
146 */
147
148/**
Paul Bakkerfab5c822012-02-06 16:45:10 +0000149 * \def POLARSSL_ENABLE_WEAK_CIPHERSUITES
150 *
Paul Bakker645ce3a2012-10-31 12:32:41 +0000151 * Enable weak ciphersuites in SSL / TLS
Paul Bakkerfab5c822012-02-06 16:45:10 +0000152 * Warning: Only do so when you know what you are doing. This allows for
Paul Bakker9a736322012-11-14 12:39:52 +0000153 * channels with virtually no security at all!
Paul Bakkerfab5c822012-02-06 16:45:10 +0000154 *
155 * This enables the following ciphersuites:
Paul Bakker645ce3a2012-10-31 12:32:41 +0000156 * TLS_RSA_WITH_DES_CBC_SHA
157 * TLS_DHE_RSA_WITH_DES_CBC_SHA
Paul Bakkerfab5c822012-02-06 16:45:10 +0000158 *
159 * Uncomment this macro to enable weak ciphersuites
160#define POLARSSL_ENABLE_WEAK_CIPHERSUITES
161 */
162
163/**
Paul Bakker8fe40dc2013-02-02 12:43:08 +0100164 * \def POLARSSL_ERROR_STRERROR_DUMMY
165 *
166 * Enable a dummy error function to make use of error_strerror() in
167 * third party libraries easier.
168 *
169 * Disable if you run into name conflicts and want to really remove the
170 * error_strerror()
171 */
172#define POLARSSL_ERROR_STRERROR_DUMMY
173
174/**
Paul Bakker15566e42011-04-24 21:19:15 +0000175 * \def POLARSSL_GENPRIME
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000176 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000177 * Requires: POLARSSL_BIGNUM_C, POLARSSL_RSA_C
178 *
Paul Bakker15566e42011-04-24 21:19:15 +0000179 * Enable the RSA prime-number generation code.
Paul Bakker5121ce52009-01-03 21:22:43 +0000180 */
Paul Bakker15566e42011-04-24 21:19:15 +0000181#define POLARSSL_GENPRIME
Paul Bakker5121ce52009-01-03 21:22:43 +0000182
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000183/**
Paul Bakker335db3f2011-04-25 15:28:35 +0000184 * \def POLARSSL_FS_IO
185 *
186 * Enable functions that use the filesystem.
187 */
188#define POLARSSL_FS_IO
189
190/**
Paul Bakker43655f42011-12-15 20:11:16 +0000191 * \def POLARSSL_NO_DEFAULT_ENTROPY_SOURCES
192 *
193 * Do not add default entropy sources. These are the platform specific,
194 * hardclock and HAVEGE based poll functions.
195 *
196 * This is useful to have more control over the added entropy sources in an
197 * application.
198 *
199 * Uncomment this macro to prevent loading of default entropy functions.
200#define POLARSSL_NO_DEFAULT_ENTROPY_SOURCES
201 */
202
203/**
Paul Bakker6083fd22011-12-03 21:45:14 +0000204 * \def POLARSSL_NO_PLATFORM_ENTROPY
205 *
206 * Do not use built-in platform entropy functions.
207 * This is useful if your platform does not support
208 * standards like the /dev/urandom or Windows CryptoAPI.
209 *
210 * Uncomment this macro to disable the built-in platform entropy functions.
211#define POLARSSL_NO_PLATFORM_ENTROPY
212 */
213
214/**
Paul Bakker9dcc3222011-03-08 14:16:06 +0000215 * \def POLARSSL_PKCS1_V21
216 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000217 * Requires: POLARSSL_MD_C, POLARSSL_RSA_C
218 *
Paul Bakker9dcc3222011-03-08 14:16:06 +0000219 * Enable support for PKCS#1 v2.1 encoding.
220 * This enables support for RSAES-OAEP and RSASSA-PSS operations.
221 */
222#define POLARSSL_PKCS1_V21
223
224/**
Paul Bakker0216cc12011-03-26 13:40:23 +0000225 * \def POLARSSL_RSA_NO_CRT
226 *
227 * Do not use the Chinese Remainder Theorem for the RSA private operation.
228 *
229 * Uncomment this macro to disable the use of CRT in RSA.
230 *
231#define POLARSSL_RSA_NO_CRT
232 */
Paul Bakker15566e42011-04-24 21:19:15 +0000233
234/**
235 * \def POLARSSL_SELF_TEST
236 *
237 * Enable the checkup functions (*_self_test).
238 */
239#define POLARSSL_SELF_TEST
Paul Bakker5c721f92011-07-27 16:51:09 +0000240
241/**
Paul Bakker40865c82013-01-31 17:13:13 +0100242 * \def POLARSSL_SSL_ALL_ALERT_MESSAGES
243 *
244 * Enable sending of alert messages in case of encountered errors as per RFC.
245 * If you choose not to send the alert messages, PolarSSL can still communicate
246 * with other servers, only debugging of failures is harder.
247 *
248 * The advantage of not sending alert messages, is that no information is given
249 * about reasons for failures thus preventing adversaries of gaining intel.
250 *
251 * Enable sending of all alert messages
252 */
253#define POLARSSL_SSL_ALERT_MESSAGES
254
255/**
Paul Bakkerd66f0702013-01-31 16:57:45 +0100256 * \def POLARSSL_SSL_DEBUG_ALL
257 *
258 * Enable the debug messages in SSL module for all issues.
259 * Debug messages have been disabled in some places to prevent timing
260 * attacks due to (unbalanced) debugging function calls.
261 *
262 * If you need all error reporting you should enable this during debugging,
263 * but remove this for production servers that should log as well.
264 *
265 * Uncomment this macro to report all debug messages on errors introducing
266 * a timing side-channel.
267 *
268#define POLARSSL_SSL_DEBUG_ALL
269 */
270
271/**
Paul Bakker05ef8352012-05-08 09:17:57 +0000272 * \def POLARSSL_SSL_HW_RECORD_ACCEL
273 *
274 * Enable hooking functions in SSL module for hardware acceleration of
275 * individual records.
276 *
277 * Uncomment this macro to enable hooking functions.
278#define POLARSSL_SSL_HW_RECORD_ACCEL
279 */
280
281/**
Paul Bakker5c721f92011-07-27 16:51:09 +0000282 * \def POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
283 *
284 * If set, the X509 parser will not break-off when parsing an X509 certificate
285 * and encountering an unknown critical extension.
286 *
287 * Uncomment to prevent an error.
288 *
289#define POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
290 */
Paul Bakker2770fbd2012-07-03 13:30:23 +0000291
292/**
293 * \def POLARSSL_ZLIB_SUPPORT
294 *
295 * If set, the SSL/TLS module uses ZLIB to support compression and
296 * decompression of packet data.
297 *
298 * Used in: library/ssl_tls.c
299 * library/ssl_cli.c
300 * library/ssl_srv.c
301 *
302 * This feature requires zlib library and headers to be present.
303 *
304 * Uncomment to enable use of ZLIB
305#define POLARSSL_ZLIB_SUPPORT
306 */
Paul Bakker0a62cd12011-01-21 11:00:08 +0000307/* \} name */
308
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000309/**
Paul Bakker0a62cd12011-01-21 11:00:08 +0000310 * \name SECTION: PolarSSL modules
311 *
312 * This section enables or disables entire modules in PolarSSL
313 * \{
314 */
Paul Bakker5121ce52009-01-03 21:22:43 +0000315
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000316/**
317 * \def POLARSSL_AES_C
318 *
319 * Enable the AES block cipher.
320 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000321 * Module: library/aes.c
322 * Caller: library/ssl_tls.c
Paul Bakker96743fc2011-02-12 14:30:57 +0000323 * library/pem.c
Paul Bakker6083fd22011-12-03 21:45:14 +0000324 * library/ctr_drbg.c
Paul Bakker5121ce52009-01-03 21:22:43 +0000325 *
Paul Bakker645ce3a2012-10-31 12:32:41 +0000326 * This module enables the following ciphersuites (if other requisites are
327 * enabled as well):
328 * TLS_RSA_WITH_AES_128_CBC_SHA
329 * TLS_RSA_WITH_AES_256_CBC_SHA
330 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA
331 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA
332 * TLS_RSA_WITH_AES_128_CBC_SHA256
333 * TLS_RSA_WITH_AES_256_CBC_SHA256
334 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
335 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
336 * TLS_RSA_WITH_AES_128_GCM_SHA256
337 * TLS_RSA_WITH_AES_256_GCM_SHA384
Paul Bakker5121ce52009-01-03 21:22:43 +0000338 */
Paul Bakker40e46942009-01-03 21:51:57 +0000339#define POLARSSL_AES_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000340
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000341/**
342 * \def POLARSSL_ARC4_C
343 *
344 * Enable the ARCFOUR stream cipher.
345 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000346 * Module: library/arc4.c
347 * Caller: library/ssl_tls.c
348 *
349 * This module enables the following ciphersuites:
Paul Bakker645ce3a2012-10-31 12:32:41 +0000350 * TLS_RSA_WITH_RC4_128_MD5
351 * TLS_RSA_WITH_RC4_128_SHA
Paul Bakker5121ce52009-01-03 21:22:43 +0000352 */
Paul Bakker40e46942009-01-03 21:51:57 +0000353#define POLARSSL_ARC4_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000354
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000355/**
Paul Bakkerefc30292011-11-10 14:43:23 +0000356 * \def POLARSSL_ASN1_PARSE_C
357 *
358 * Enable the generic ASN1 parser.
359 *
360 * Module: library/asn1.c
361 * Caller: library/x509parse.c
362 */
363#define POLARSSL_ASN1_PARSE_C
364
365/**
Paul Bakkerbdb912d2012-02-13 23:11:30 +0000366 * \def POLARSSL_ASN1_WRITE_C
367 *
368 * Enable the generic ASN1 writer.
369 *
370 * Module: library/asn1write.c
371 */
372#define POLARSSL_ASN1_WRITE_C
373
374/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000375 * \def POLARSSL_BASE64_C
376 *
377 * Enable the Base64 module.
378 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000379 * Module: library/base64.c
Paul Bakker5690efc2011-05-26 13:16:06 +0000380 * Caller: library/pem.c
Paul Bakker5121ce52009-01-03 21:22:43 +0000381 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000382 * This module is required for PEM support (required by X.509).
Paul Bakker5121ce52009-01-03 21:22:43 +0000383 */
Paul Bakker40e46942009-01-03 21:51:57 +0000384#define POLARSSL_BASE64_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000385
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000386/**
387 * \def POLARSSL_BIGNUM_C
388 *
Paul Bakker9a736322012-11-14 12:39:52 +0000389 * Enable the multi-precision integer library.
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000390 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000391 * Module: library/bignum.c
392 * Caller: library/dhm.c
393 * library/rsa.c
394 * library/ssl_tls.c
395 * library/x509parse.c
396 *
397 * This module is required for RSA and DHM support.
398 */
Paul Bakker40e46942009-01-03 21:51:57 +0000399#define POLARSSL_BIGNUM_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000400
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000401/**
Paul Bakkera9379c02012-07-04 11:02:11 +0000402 * \def POLARSSL_BLOWFISH_C
403 *
404 * Enable the Blowfish block cipher.
405 *
406 * Module: library/blowfish.c
407 */
408#define POLARSSL_BLOWFISH_C
409
410/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000411 * \def POLARSSL_CAMELLIA_C
412 *
413 * Enable the Camellia block cipher.
414 *
Paul Bakker38119b12009-01-10 23:31:23 +0000415 * Module: library/camellia.c
Paul Bakker13e2dfe2009-07-28 07:18:38 +0000416 * Caller: library/ssl_tls.c
Paul Bakker38119b12009-01-10 23:31:23 +0000417 *
Paul Bakker645ce3a2012-10-31 12:32:41 +0000418 * This module enables the following ciphersuites (if other requisites are
419 * enabled as well):
420 * TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
421 * TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
422 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
423 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
424 * TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
425 * TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
426 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
427 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
Paul Bakker38119b12009-01-10 23:31:23 +0000428 */
429#define POLARSSL_CAMELLIA_C
430
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000431/**
432 * \def POLARSSL_CERTS_C
433 *
434 * Enable the test certificates.
435 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000436 * Module: library/certs.c
437 * Caller:
438 *
439 * This module is used for testing (ssl_client/server).
440 */
Paul Bakker40e46942009-01-03 21:51:57 +0000441#define POLARSSL_CERTS_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000442
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000443/**
444 * \def POLARSSL_CIPHER_C
445 *
446 * Enable the generic cipher layer.
447 *
Paul Bakker8123e9d2011-01-06 15:37:30 +0000448 * Module: library/cipher.c
449 * Caller:
450 *
451 * Uncomment to enable generic cipher wrappers.
452 */
453#define POLARSSL_CIPHER_C
454
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000455/**
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000456 * \def POLARSSL_CTR_DRBG_C
457 *
458 * Enable the CTR_DRBG AES-256-based random generator
459 *
460 * Module: library/ctr_drbg.c
461 * Caller:
462 *
Paul Bakker6083fd22011-12-03 21:45:14 +0000463 * Requires: POLARSSL_AES_C
464 *
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000465 * This module provides the CTR_DRBG AES-256 random number generator.
466 */
467#define POLARSSL_CTR_DRBG_C
468
469/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000470 * \def POLARSSL_DEBUG_C
471 *
472 * Enable the debug functions.
473 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000474 * Module: library/debug.c
475 * Caller: library/ssl_cli.c
476 * library/ssl_srv.c
477 * library/ssl_tls.c
478 *
479 * This module provides debugging functions.
480 */
Paul Bakker40e46942009-01-03 21:51:57 +0000481#define POLARSSL_DEBUG_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000482
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000483/**
484 * \def POLARSSL_DES_C
485 *
486 * Enable the DES block cipher.
487 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000488 * Module: library/des.c
489 * Caller: library/ssl_tls.c
490 *
Paul Bakker645ce3a2012-10-31 12:32:41 +0000491 * This module enables the following ciphersuites (if other requisites are
492 * enabled as well):
493 * TLS_RSA_WITH_3DES_EDE_CBC_SHA
494 * TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Paul Bakker5121ce52009-01-03 21:22:43 +0000495 */
Paul Bakker40e46942009-01-03 21:51:57 +0000496#define POLARSSL_DES_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000497
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000498/**
499 * \def POLARSSL_DHM_C
500 *
501 * Enable the Diffie-Hellman-Merkle key exchange.
502 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000503 * Module: library/dhm.c
504 * Caller: library/ssl_cli.c
505 * library/ssl_srv.c
506 *
Paul Bakker645ce3a2012-10-31 12:32:41 +0000507 * This module enables the following ciphersuites (if other requisites are
508 * enabled as well):
509 * TLS_DHE_RSA_WITH_DES_CBC_SHA
510 * TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
511 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA
512 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA
513 * TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
514 * TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
515 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
516 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
517 * TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
518 * TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
519 * TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
520 * TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Paul Bakker5121ce52009-01-03 21:22:43 +0000521 */
Paul Bakker40e46942009-01-03 21:51:57 +0000522#define POLARSSL_DHM_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000523
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000524/**
Paul Bakker6083fd22011-12-03 21:45:14 +0000525 * \def POLARSSL_ENTROPY_C
526 *
527 * Enable the platform-specific entropy code.
528 *
529 * Module: library/entropy.c
530 * Caller:
531 *
532 * Requires: POLARSSL_SHA4_C
533 *
534 * This module provides a generic entropy pool
535 */
536#define POLARSSL_ENTROPY_C
537
538/**
Paul Bakker9d781402011-05-09 16:17:09 +0000539 * \def POLARSSL_ERROR_C
540 *
541 * Enable error code to error string conversion.
542 *
543 * Module: library/error.c
544 * Caller:
545 *
546 * This module enables err_strerror().
547 */
548#define POLARSSL_ERROR_C
549
550/**
Paul Bakker89e80c92012-03-20 13:50:09 +0000551 * \def POLARSSL_GCM_C
552 *
553 * Enable the Galois/Counter Mode (GCM) for AES
554 *
555 * Module: library/gcm.c
556 *
557 * Requires: POLARSSL_AES_C
Paul Bakker645ce3a2012-10-31 12:32:41 +0000558 *
559 * This module enables the following ciphersuites (if other requisites are
560 * enabled as well):
561 * TLS_RSA_WITH_AES_128_GCM_SHA256
562 * TLS_RSA_WITH_AES_256_GCM_SHA384
Paul Bakker89e80c92012-03-20 13:50:09 +0000563 */
564#define POLARSSL_GCM_C
565
566/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000567 * \def POLARSSL_HAVEGE_C
568 *
569 * Enable the HAVEGE random generator.
570 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000571 * Module: library/havege.c
572 * Caller:
573 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000574 * Requires: POLARSSL_TIMING_C
575 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000576 * This module enables the HAVEGE random number generator.
577 */
Paul Bakker40e46942009-01-03 21:51:57 +0000578#define POLARSSL_HAVEGE_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000579
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000580/**
581 * \def POLARSSL_MD_C
582 *
583 * Enable the generic message digest layer.
584 *
Paul Bakker17373852011-01-06 14:20:01 +0000585 * Module: library/md.c
586 * Caller:
587 *
588 * Uncomment to enable generic message digest wrappers.
589 */
590#define POLARSSL_MD_C
591
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000592/**
593 * \def POLARSSL_MD2_C
594 *
595 * Enable the MD2 hash algorithm
596 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000597 * Module: library/md2.c
598 * Caller: library/x509parse.c
599 *
600 * Uncomment to enable support for (rare) MD2-signed X.509 certs.
601 *
Paul Bakker13e2dfe2009-07-28 07:18:38 +0000602#define POLARSSL_MD2_C
Paul Bakker6506aff2009-07-28 20:52:02 +0000603 */
Paul Bakker5121ce52009-01-03 21:22:43 +0000604
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000605/**
606 * \def POLARSSL_MD4_C
607 *
608 * Enable the MD4 hash algorithm
609 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000610 * Module: library/md4.c
611 * Caller: library/x509parse.c
612 *
613 * Uncomment to enable support for (rare) MD4-signed X.509 certs.
614 *
Paul Bakker13e2dfe2009-07-28 07:18:38 +0000615#define POLARSSL_MD4_C
Paul Bakker6506aff2009-07-28 20:52:02 +0000616 */
Paul Bakker5121ce52009-01-03 21:22:43 +0000617
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000618/**
619 * \def POLARSSL_MD5_C
620 *
621 * Enable the MD5 hash algorithm
622 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000623 * Module: library/md5.c
624 * Caller: library/ssl_tls.c
625 * library/x509parse.c
626 *
627 * This module is required for SSL/TLS and X.509.
628 */
Paul Bakker40e46942009-01-03 21:51:57 +0000629#define POLARSSL_MD5_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000630
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000631/**
632 * \def POLARSSL_NET_C
633 *
634 * Enable the TCP/IP networking routines.
635 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000636 * Module: library/net.c
637 * Caller:
638 *
639 * This module provides TCP/IP networking routines.
640 */
Paul Bakker40e46942009-01-03 21:51:57 +0000641#define POLARSSL_NET_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000642
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000643/**
644 * \def POLARSSL_PADLOCK_C
645 *
646 * Enable VIA Padlock support on x86.
647 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000648 * Module: library/padlock.c
649 * Caller: library/aes.c
650 *
651 * This modules adds support for the VIA PadLock on x86.
652 */
Paul Bakker40e46942009-01-03 21:51:57 +0000653#define POLARSSL_PADLOCK_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000654
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000655/**
Paul Bakkerf518b162012-08-23 13:03:18 +0000656 * \def POLARSSL_PBKDF2_C
657 *
658 * Enable PKCS#5 PBKDF2 key derivation function
659 *
660 * Module: library/pbkdf2.c
661 *
662 * Requires: POLARSSL_MD_C
663 *
664 * This module adds support for the PKCS#5 PBKDF2 key derivation function.
665#define POLARSSL_PBKDF2_C
666 */
667
668/**
Paul Bakker96743fc2011-02-12 14:30:57 +0000669 * \def POLARSSL_PEM_C
670 *
671 * Enable PEM decoding
672 *
673 * Module: library/pem.c
674 * Caller: library/x509parse.c
675 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000676 * Requires: POLARSSL_BASE64_C
677 *
Paul Bakker96743fc2011-02-12 14:30:57 +0000678 * This modules adds support for decoding PEM files.
679 */
680#define POLARSSL_PEM_C
681
682/**
Paul Bakker5690efc2011-05-26 13:16:06 +0000683 * \def POLARSSL_PKCS11_C
684 *
Paul Bakkereb2c6582012-09-27 19:15:01 +0000685 * Enable wrapper for PKCS#11 smartcard support.
Paul Bakker5690efc2011-05-26 13:16:06 +0000686 *
687 * Module: library/ssl_srv.c
688 * Caller: library/ssl_cli.c
689 * library/ssl_srv.c
690 *
691 * Requires: POLARSSL_SSL_TLS_C
692 *
Paul Bakkereb2c6582012-09-27 19:15:01 +0000693 * This module enables SSL/TLS PKCS #11 smartcard support.
Paul Bakker5690efc2011-05-26 13:16:06 +0000694 * Requires the presence of the PKCS#11 helper library (libpkcs11-helper)
695#define POLARSSL_PKCS11_C
696 */
697
698/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000699 * \def POLARSSL_RSA_C
700 *
701 * Enable the RSA public-key cryptosystem.
702 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000703 * Module: library/rsa.c
704 * Caller: library/ssl_cli.c
705 * library/ssl_srv.c
706 * library/ssl_tls.c
707 * library/x509.c
708 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000709 * Requires: POLARSSL_BIGNUM_C
710 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000711 * This module is required for SSL/TLS and MD5-signed certificates.
712 */
Paul Bakker40e46942009-01-03 21:51:57 +0000713#define POLARSSL_RSA_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000714
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000715/**
716 * \def POLARSSL_SHA1_C
717 *
718 * Enable the SHA1 cryptographic hash algorithm.
719 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000720 * Module: library/sha1.c
721 * Caller: library/ssl_cli.c
722 * library/ssl_srv.c
723 * library/ssl_tls.c
724 * library/x509parse.c
725 *
726 * This module is required for SSL/TLS and SHA1-signed certificates.
727 */
Paul Bakker40e46942009-01-03 21:51:57 +0000728#define POLARSSL_SHA1_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000729
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000730/**
731 * \def POLARSSL_SHA2_C
732 *
733 * Enable the SHA-224 and SHA-256 cryptographic hash algorithms.
734 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000735 * Module: library/sha2.c
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000736 * Caller: library/md_wrap.c
737 * library/x509parse.c
Paul Bakker5121ce52009-01-03 21:22:43 +0000738 *
739 * This module adds support for SHA-224 and SHA-256.
Paul Bakker769075d2012-11-24 11:26:46 +0100740 * This module is required for the SSL/TLS 1.2 PRF function.
Paul Bakker5121ce52009-01-03 21:22:43 +0000741 */
Paul Bakker40e46942009-01-03 21:51:57 +0000742#define POLARSSL_SHA2_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000743
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000744/**
745 * \def POLARSSL_SHA4_C
746 *
747 * Enable the SHA-384 and SHA-512 cryptographic hash algorithms.
748 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000749 * Module: library/sha4.c
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000750 * Caller: library/md_wrap.c
751 * library/x509parse.c
Paul Bakker5121ce52009-01-03 21:22:43 +0000752 *
753 * This module adds support for SHA-384 and SHA-512.
754 */
Paul Bakker40e46942009-01-03 21:51:57 +0000755#define POLARSSL_SHA4_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000756
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000757/**
Paul Bakker0a597072012-09-25 21:55:46 +0000758 * \def POLARSSL_SSL_CACHE_C
759 *
760 * Enable simple SSL cache implementation.
761 *
762 * Module: library/ssl_cache.c
763 * Caller:
764 *
765 * Requires: POLARSSL_SSL_CACHE_C
766 */
767#define POLARSSL_SSL_CACHE_C
768
769/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000770 * \def POLARSSL_SSL_CLI_C
771 *
772 * Enable the SSL/TLS client code.
773 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000774 * Module: library/ssl_cli.c
775 * Caller:
776 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000777 * Requires: POLARSSL_SSL_TLS_C
778 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000779 * This module is required for SSL/TLS client support.
780 */
Paul Bakker40e46942009-01-03 21:51:57 +0000781#define POLARSSL_SSL_CLI_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000782
Paul Bakker9a736322012-11-14 12:39:52 +0000783/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000784 * \def POLARSSL_SSL_SRV_C
785 *
786 * Enable the SSL/TLS server code.
787 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000788 * Module: library/ssl_srv.c
789 * Caller:
790 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000791 * Requires: POLARSSL_SSL_TLS_C
792 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000793 * This module is required for SSL/TLS server support.
794 */
Paul Bakker40e46942009-01-03 21:51:57 +0000795#define POLARSSL_SSL_SRV_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000796
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000797/**
798 * \def POLARSSL_SSL_TLS_C
799 *
Paul Bakkere29ab062011-05-18 13:26:54 +0000800 * Enable the generic SSL/TLS code.
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000801 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000802 * Module: library/ssl_tls.c
803 * Caller: library/ssl_cli.c
804 * library/ssl_srv.c
805 *
Paul Bakker5690efc2011-05-26 13:16:06 +0000806 * Requires: POLARSSL_MD5_C, POLARSSL_SHA1_C, POLARSSL_X509_PARSE_C
807 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000808 * This module is required for SSL/TLS.
809 */
Paul Bakker40e46942009-01-03 21:51:57 +0000810#define POLARSSL_SSL_TLS_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000811
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000812/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000813 * \def POLARSSL_TIMING_C
814 *
815 * Enable the portable timing interface.
816 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000817 * Module: library/timing.c
818 * Caller: library/havege.c
819 *
820 * This module is used by the HAVEGE random number generator.
821 */
Paul Bakker40e46942009-01-03 21:51:57 +0000822#define POLARSSL_TIMING_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000823
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000824/**
825 * \def POLARSSL_VERSION_C
826 *
827 * Enable run-time version information.
828 *
Paul Bakker0a62cd12011-01-21 11:00:08 +0000829 * Module: library/version.c
830 *
831 * This module provides run-time version information.
832 */
833#define POLARSSL_VERSION_C
834
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000835/**
836 * \def POLARSSL_X509_PARSE_C
837 *
838 * Enable X.509 certificate parsing.
839 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000840 * Module: library/x509parse.c
841 * Caller: library/ssl_cli.c
842 * library/ssl_srv.c
843 * library/ssl_tls.c
844 *
Paul Bakkerefc30292011-11-10 14:43:23 +0000845 * Requires: POLARSSL_ASN1_PARSE_C, POLARSSL_BIGNUM_C, POLARSSL_RSA_C
Paul Bakker5690efc2011-05-26 13:16:06 +0000846 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000847 * This module is required for X.509 certificate parsing.
848 */
Paul Bakker40e46942009-01-03 21:51:57 +0000849#define POLARSSL_X509_PARSE_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000850
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000851/**
Paul Bakkerbdb912d2012-02-13 23:11:30 +0000852 * \def POLARSSL_X509_WRITE_C
853 *
854 * Enable X.509 buffer writing.
855 *
856 * Module: library/x509write.c
857 *
858 * Requires: POLARSSL_BIGNUM_C, POLARSSL_RSA_C
859 *
860 * This module is required for X.509 certificate request writing.
861 */
862#define POLARSSL_X509_WRITE_C
863
864/**
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000865 * \def POLARSSL_XTEA_C
Paul Bakker5121ce52009-01-03 21:22:43 +0000866 *
Paul Bakkerf3b86c12011-01-27 15:24:17 +0000867 * Enable the XTEA block cipher.
868 *
Paul Bakker7a7c78f2009-01-04 18:15:48 +0000869 * Module: library/xtea.c
870 * Caller:
871 */
872#define POLARSSL_XTEA_C
Paul Bakker0a62cd12011-01-21 11:00:08 +0000873/* \} name */
Paul Bakker7a7c78f2009-01-04 18:15:48 +0000874
Paul Bakker5121ce52009-01-03 21:22:43 +0000875#endif /* config.h */