77menu "Mbed TLS configuration"
88 depends on MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h"
99
10- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
11-
1210menu "TLS"
1311
1412config MBEDTLS_TLS_VERSION_1_2
@@ -42,14 +40,10 @@ endif # MBEDTLS_TLS_VERSION_1_2 || MBEDTLS_TLS_VERSION_1_3
4240
4341endmenu # TLS
4442
45- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
46-
4743menu "Ciphersuite configuration"
4844
4945comment "Supported key exchange modes"
5046
51- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
52-
5347config MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
5448 bool "All available ciphersuite modes"
5549 select MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
@@ -77,17 +71,13 @@ config MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
7771config MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
7872 bool "RSA-PSK based ciphersuite modes"
7973
80- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
81-
8274config MBEDTLS_PSK_MAX_LEN
8375 int "Max size of TLS pre-shared keys"
8476 default 32
8577 help
8678 Max size of TLS pre-shared keys, in bytes. It has no effect if no
8779 PSK key exchange is used.
8880
89- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
90-
9181config MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
9282 bool "RSA-only based ciphersuite modes"
9383 default y if UOSCORE || UEDHOC
@@ -225,12 +215,8 @@ config MBEDTLS_ECP_NIST_OPTIM
225215
226216endif
227217
228- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
229-
230218comment "Supported ciphers and cipher modes"
231219
232- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
233-
234220config MBEDTLS_CIPHER_ALL_ENABLED
235221 bool "All available ciphers and modes"
236222 select MBEDTLS_CIPHER_AES_ENABLED
@@ -321,12 +307,8 @@ config MBEDTLS_CMAC
321307 bool "CMAC (Cipher-based Message Authentication Code) mode for block ciphers."
322308 depends on MBEDTLS_CIPHER_AES_ENABLED || MBEDTLS_CIPHER_DES_ENABLED
323309
324- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
325-
326310comment "Supported hash algorithms"
327311
328- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
329-
330312config MBEDTLS_HASH_ALL_ENABLED
331313 bool "All available MAC methods"
332314 select MBEDTLS_MD5
@@ -367,14 +349,10 @@ config MBEDTLS_SHA512
367349config MBEDTLS_POLY1305
368350 bool "Poly1305 hash family"
369351
370- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
371-
372352endmenu
373353
374354comment "Random number generators"
375355
376- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
377-
378356config MBEDTLS_CTR_DRBG_ENABLED
379357 bool "CTR_DRBG AES-256-based random generator"
380358 depends on MBEDTLS_CIPHER_AES_ENABLED
@@ -384,21 +362,15 @@ config MBEDTLS_HMAC_DRBG_ENABLED
384362 bool "HMAC_DRBG random generator"
385363 select MBEDTLS_MD
386364
387- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
388-
389365comment "Other configurations"
390366
391367config MBEDTLS_CIPHER
392368 bool "generic cipher layer."
393369 default y if PSA_WANT_ALG_CMAC
394370
395- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
396-
397371config MBEDTLS_MD
398372 bool "generic message digest layer."
399373
400- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
401-
402374config MBEDTLS_GENPRIME_ENABLED
403375 bool "prime-number generation code."
404376
@@ -416,8 +388,6 @@ config MBEDTLS_HAVE_ASM
416388 of asymmetric cryptography, however this might have an impact on the
417389 code size.
418390
419- if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
420-
421391config MBEDTLS_ENTROPY_C
422392 bool "Mbed TLS entropy accumulator"
423393 depends on MBEDTLS_SHA256 || MBEDTLS_SHA384 || MBEDTLS_SHA512
@@ -426,8 +396,6 @@ config MBEDTLS_ENTROPY_C
426396 mostly used in conjunction with CTR_DRBG or HMAC_DRBG to create
427397 a deterministic random number generator.
428398
429- endif # !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)
430-
431399config MBEDTLS_ENTROPY_POLL_ZEPHYR
432400 bool "Provide entropy data to Mbed TLS through entropy driver or random generator"
433401 default y
0 commit comments