mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-08 04:00:48 +02:00
Tobias Frauenschläger
c3289f8aa9
* Enable ML-KEM by default in build systems (autoconf and CMake) * Only allow three to-be-standardized hybrid PQ/T combinations by default * Use X25519MLKEM768 as the default KeyShare in the ClientHello (if user does not override that). When Curve25519 is disabled, then either WOLFSSL_SECP384R1MLKEM1024 or WOLFSSL_SECP256R1MLKEM768 is used as default depending on the ECC configuration * Disable standalone ML-KEM in supported groups by default (enable with --enable-tls-mlkem-standalone) * Disable extra OQS-based hybrid PQ/T curves by default and gate behind --enable-experimental (enable with --enable-extra-pqc-hybrids) * Reorder the SupportedGroups extension to reflect the preferences * Reorder the preferredGroup array to also reflect the same preferences * Add async support for ML-KEM hybrids
49 lines
1022 B
Plaintext
49 lines
1022 B
Plaintext
# Kernel options
|
|
CONFIG_MAIN_STACK_SIZE=16384
|
|
CONFIG_ENTROPY_GENERATOR=y
|
|
CONFIG_INIT_STACKS=y
|
|
CONFIG_COMMON_LIBC_MALLOC_ARENA_SIZE=8192
|
|
|
|
# Networking config
|
|
CONFIG_NETWORKING=y
|
|
CONFIG_NET_IPV4=y
|
|
CONFIG_NET_IPV6=n
|
|
CONFIG_NET_TCP=y
|
|
CONFIG_NET_SOCKETS=y
|
|
|
|
CONFIG_NET_TEST=y
|
|
CONFIG_NET_LOOPBACK=y
|
|
|
|
# Network driver config
|
|
CONFIG_TEST_RANDOM_GENERATOR=y
|
|
|
|
# Network address config
|
|
CONFIG_NET_CONFIG_SETTINGS=y
|
|
CONFIG_NET_CONFIG_NEED_IPV4=y
|
|
CONFIG_NET_CONFIG_MY_IPV4_ADDR="192.0.2.1"
|
|
CONFIG_NET_CONFIG_PEER_IPV4_ADDR="192.0.2.2"
|
|
CONFIG_NET_CONFIG_MY_IPV4_GW="192.0.2.2"
|
|
|
|
CONFIG_NET_PKT_TX_COUNT=10
|
|
|
|
# Network debug config
|
|
#CONFIG_NET_LOG=y
|
|
#CONFIG_NET_PKT_LOG_LEVEL_DBG=y
|
|
|
|
# Logging
|
|
CONFIG_PRINTK=y
|
|
#CONFIG_WOLFSSL_DEBUG=y
|
|
CONFIG_LOG=y
|
|
CONFIG_LOG_MODE_IMMEDIATE=y
|
|
|
|
# TLS configuration
|
|
CONFIG_WOLFSSL=y
|
|
CONFIG_WOLFSSL_BUILTIN=y
|
|
|
|
CONFIG_WOLFSSL_TLS_VERSION_1_3=y
|
|
CONFIG_WOLFSSL_KEY_EXCHANGE_ALL_ENABLED=y
|
|
CONFIG_WOLFSSL_CIPHER_ALL_ENABLED=y
|
|
CONFIG_WOLFSSL_MAC_ALL_ENABLED=y
|
|
CONFIG_WOLFSSL_HMAC_DRBG_ENABLED=y
|
|
CONFIG_WOLFSSL_MLKEM=y
|