random-mirrors/smaeul-u-boot
1
0
Fork 0
mirror of https://github.com/smaeul/u-boot.git synced 2025-10-18 06:38:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

mbedtls: Enable smaller implementation for SHA256/512

Browse Source 
Smaller implementation for SHA256 and SHA512 helps to reduce the
ROM footprint though it has a certain impact on performance.
As a trade-off, enable it as a default config when MbedTLS is
enabled can reduce the target size significantly with acceptable
performance loss.

Signed-off-by: Raymond Mao <raymond.mao@linaro.org>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
This commit is contained in:
Raymond Mao 2024-10-03 14:50:20 -07:00 committed by Tom Rini
parent bdc3f44a6b
commit c60e99ff62
2 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
lib/mbedtls/Kconfig
View File

@ -164,6 +164,18 @@ config SHA256_MBEDTLS
This option enables support of hashing using SHA256 algorithm This option enables support of hashing using SHA256 algorithm
with MbedTLS crypto library. with MbedTLS crypto library.
if SHA256_MBEDTLS
config SHA256_SMALLER
bool "Enable SHA256 smaller implementation with MbedTLS crypto library"
depends on SHA256_MBEDTLS
default y if SHA256_MBEDTLS
help
This option enables support of hashing using SHA256 algorithm
smaller implementation with MbedTLS crypto library.
endif
config SHA512_MBEDTLS config SHA512_MBEDTLS
bool "Enable SHA512 support with MbedTLS crypto library" bool "Enable SHA512 support with MbedTLS crypto library"
depends on MBEDTLS_LIB_CRYPTO && SHA512 depends on MBEDTLS_LIB_CRYPTO && SHA512
@ -172,6 +184,18 @@ config SHA512_MBEDTLS
This option enables support of hashing using SHA512 algorithm This option enables support of hashing using SHA512 algorithm
with MbedTLS crypto library. with MbedTLS crypto library.
if SHA512_MBEDTLS
config SHA512_SMALLER
bool "Enable SHA512 smaller implementation with MbedTLS crypto library"
depends on SHA512_MBEDTLS
default y if SHA512_MBEDTLS
help
This option enables support of hashing using SHA512 algorithm
smaller implementation with MbedTLS crypto library.
endif
config SHA384_MBEDTLS config SHA384_MBEDTLS
bool "Enable SHA384 support with MbedTLS crypto library" bool "Enable SHA384 support with MbedTLS crypto library"
depends on MBEDTLS_LIB_CRYPTO && SHA384 depends on MBEDTLS_LIB_CRYPTO && SHA384

6
lib/mbedtls/mbedtls_def_config.h
View File

@ -35,6 +35,9 @@
#if defined CONFIG_MBEDTLS_LIB_CRYPTO_ALT #if defined CONFIG_MBEDTLS_LIB_CRYPTO_ALT
#define MBEDTLS_SHA256_ALT #define MBEDTLS_SHA256_ALT
#endif #endif
#if CONFIG_IS_ENABLED(SHA256_SMALLER)
#define MBEDTLS_SHA256_SMALLER
#endif
#endif #endif
#if CONFIG_IS_ENABLED(SHA384) #if CONFIG_IS_ENABLED(SHA384)
@ -48,6 +51,9 @@
#if defined CONFIG_MBEDTLS_LIB_CRYPTO_ALT #if defined CONFIG_MBEDTLS_LIB_CRYPTO_ALT
#define MBEDTLS_SHA512_ALT #define MBEDTLS_SHA512_ALT
#endif #endif
#if CONFIG_IS_ENABLED(SHA512_SMALLER)
#define MBEDTLS_SHA512_SMALLER
#endif
#endif #endif
#if defined CONFIG_MBEDTLS_LIB_X509 #if defined CONFIG_MBEDTLS_LIB_X509