From 67a26d52ac05826e0eaf6a69af9966b36c9beb4e Mon Sep 17 00:00:00 2001 From: Angus Gratton Date: Wed, 14 Sep 2016 17:52:39 +1000 Subject: [PATCH] mbedtls: Temporarily disable default hardware crypto SHA & bignum Due to limitations referenced in the comments of the changes. --- .../mbedtls/port/include/mbedtls/esp_config.h | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) diff --git a/components/mbedtls/port/include/mbedtls/esp_config.h b/components/mbedtls/port/include/mbedtls/esp_config.h index 8ef44c00cb..68be319c35 100644 --- a/components/mbedtls/port/include/mbedtls/esp_config.h +++ b/components/mbedtls/port/include/mbedtls/esp_config.h @@ -238,16 +238,21 @@ uncommenting each _ALT macro will use the hardware-accelerated implementation. */ #define MBEDTLS_AES_ALT -#define MBEDTLS_SHA1_ALT -#define MBEDTLS_SHA256_ALT -#define MBEDTLS_SHA512_ALT + +/* Currently hardware SHA does not work with TLS handshake, + due to concurrency issue. Internal TW#7111. */ +//#define MBEDTLS_SHA1_ALT +//#define MBEDTLS_SHA256_ALT +//#define MBEDTLS_SHA512_ALT /* The following MPI (bignum) functions have ESP32 hardware support, Uncommenting these macros will use the hardware-accelerated implementations. + + Disabled as number of limbs limited by bug. Internal TW#7112. */ -#define MBEDTLS_MPI_EXP_MOD_ALT -#define MBEDTLS_MPI_MUL_MPI_ALT +//#define MBEDTLS_MPI_EXP_MOD_ALT +//#define MBEDTLS_MPI_MUL_MPI_ALT /** * \def MBEDTLS_MD2_PROCESS_ALT