Skip to content

Commit 4ba0539

Browse files
frkvbjarki-andreasen
authored andcommitted
[nrf noup] mbedtls: Adding helptext warnings for weak crypto
-This commit is a [nrf noup] because PSA crypto configs in upstream Zephyr doesn't have help-text in their configurations and we don't want to duplicate configurations to control the value -This adds warning for SHA-1 and MD5 usage Signed-off-by: Frank Audun Kvamtrø <[email protected]>
1 parent 47a1e03 commit 4ba0539

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

modules/mbedtls/Kconfig.psa

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,9 @@ config PSA_WANT_ALG_HMAC
8888
config PSA_WANT_ALG_MD5
8989
bool "PSA_WANT_ALG_MD5" if !MBEDTLS_PROMPTLESS
9090
default y if PSA_CRYPTO_ENABLE_ALL
91-
91+
help
92+
Warning: The MD5 hash is weak and deprecated and is only recommended
93+
for use in legacy protocols.
9294

9395
config PSA_WANT_ALG_PBKDF2_HMAC
9496
bool "PSA_WANT_ALG_PBKDF2_HMAC" if !MBEDTLS_PROMPTLESS
@@ -119,6 +121,9 @@ config PSA_WANT_ALG_RSA_PSS
119121
config PSA_WANT_ALG_SHA_1
120122
bool "PSA_WANT_ALG_SHA_1" if !MBEDTLS_PROMPTLESS
121123
default y if PSA_CRYPTO_ENABLE_ALL
124+
help
125+
Warning: The SHA-1 hash is weak and deprecated and is only recommended
126+
for use in legacy protocols.
122127

123128
config PSA_WANT_ALG_SHA_224
124129
bool "PSA_WANT_ALG_SHA_224" if !MBEDTLS_PROMPTLESS

0 commit comments

Comments
 (0)