Skip to content

Commit

Permalink
esp32/boards/sdkconfig.base: Disable unused mbedtls options.
Browse files Browse the repository at this point in the history 
Disable unused EC curves and default certificate bundle which is not
implemented in MicroPython.  This reduces the firmware size significantly.

This follows commit 68f166d.

Signed-off-by: Carlos Gil Gonzalez <[email protected]>
  • Loading branch information
@Carglglz @dpgeorge
Carglglz authored and dpgeorge committed Dec 11, 2023
1 parent e1a7aa2 commit c393cd7
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions ports/esp32/boards/sdkconfig.base
View file
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,16 @@ CONFIG_MBEDTLS_HAVE_TIME=y
# Disable ALPN support as it's not implemented in MicroPython
CONFIG_MBEDTLS_SSL_ALPN=n

# Disable slow or unused EC curves
CONFIG_MBEDTLS_ECP_DP_BP256R1_ENABLED=n
CONFIG_MBEDTLS_ECP_DP_BP384R1_ENABLED=n
CONFIG_MBEDTLS_ECP_DP_BP512R1_ENABLED=n
CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED=n

# Disable certificate bundle as it's not implemented in MicroPython
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=n
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=n

# Allow mbedTLS to allocate from PSRAM or internal memory
#
# (The ESP-IDF default is internal-only, partly for physical security to prevent
Expand Down

0 comments on commit c393cd7

Please sign in to comment.