(mynewt-core) 01/03: crypto/mbedtls: Remove options not available in mbedtls 3.x

[an...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

andrzej-kaczmarek pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mynewt-core.git

commit b93c098f094ff028c3a08f2e8c844811e82ab43c
Author: Andrzej Kaczmarek <an...@codecoup.pl>
AuthorDate: Sun Oct 18 20:50:57 2026 +0200

    crypto/mbedtls: Remove options not available in mbedtls 3.x
    
    ARC4, Blowfish, MD2 and MD4 modules, alternative bignum implementation,
    TLS 1.0 and 1.1 protocol versions, CBC record splitting and DTLS bad MAC
    limit were removed in mbedtls 3.0, so related settings have no effect.
    
    Assisted-by: Claude:claude-opus-5-5
---
 crypto/mbedtls/include/mbedtls/config_mynewt.h | 37 --------------------------
 crypto/mbedtls/selftest/syscfg.yml             |  4 ---
 crypto/mbedtls/syscfg.yml                      | 10 -------
 3 files changed, 51 deletions(-)

diff --git a/crypto/mbedtls/include/mbedtls/config_mynewt.h b/crypto/mbedtls/include/mbedtls/config_mynewt.h
index ebe3676b3..80e757c10 100644
--- a/crypto/mbedtls/include/mbedtls/config_mynewt.h
+++ b/crypto/mbedtls/include/mbedtls/config_mynewt.h
@@ -57,7 +57,6 @@ extern "C" {
 #define MBEDTLS_ECDSA_SIGN_ALT          /* Enable alternative sign() */
 #define MBEDTLS_ECDSA_VERIFY_ALT        /* Enable alternative verify() */
 #define MBEDTLS_ECDSA_GENKEY_ALT        /* Enable alternative genkey() */
-#define MBEDTLS_BIGNUM_ALT              /* Enable alternative MPI implementation */
 
 /**
  * \name SECTION: Module configuration options
@@ -278,21 +277,11 @@ extern "C" {
 #define MBEDTLS_AES_FEWER_TABLES
 #endif
 
-#undef MBEDTLS_ARC4_C
-#if MYNEWT_VAL(MBEDTLS_ARC4_C)
-#define MBEDTLS_ARC4_C
-#endif
-
 #undef MBEDTLS_ARIA_C
 #if MYNEWT_VAL(MBEDTLS_ARIA_C)
 #define MBEDTLS_ARIA_C
 #endif
 
-#undef MBEDTLS_BLOWFISH_C
-#if MYNEWT_VAL(MBEDTLS_BLOWFISH_C)
-#define MBEDTLS_BLOWFISH_C
-#endif
-
 #undef MBEDTLS_CAMELLIA_C
 #if MYNEWT_VAL(MBEDTLS_CAMELLIA_C)
 #define MBEDTLS_CAMELLIA_C
@@ -373,16 +362,6 @@ extern "C" {
 #define MBEDTLS_SHA256_C
 #endif
 
-#undef MBEDTLS_MD2_C
-#if MYNEWT_VAL(MBEDTLS_MD2_C)
-#define MBEDTLS_MD2_C
-#endif
-
-#undef MBEDTLS_MD4_C
-#if MYNEWT_VAL(MBEDTLS_MD4_C)
-#define MBEDTLS_MD4_C
-#endif
-
 #undef MBEDTLS_MD5_C
 #if MYNEWT_VAL(MBEDTLS_MD5_C)
 #define MBEDTLS_MD5_C
@@ -403,15 +382,6 @@ extern "C" {
 #define MBEDTLS_RIPEMD160_C
 #endif
 
-#undef MBEDTLS_SSL_PROTO_TLS1
-#undef MBEDTLS_SSL_PROTO_TLS1_1
-#undef MBEDTLS_SSL_CBC_RECORD_SPLITTING
-#if MYNEWT_VAL(MBEDTLS_MD5_C) && MYNEWT_VAL(MBEDTLS_SHA1_C)
-#define MBEDTLS_SSL_PROTO_TLS1
-#define MBEDTLS_SSL_PROTO_TLS1_1
-#define MBEDTLS_SSL_CBC_RECORD_SPLITTING
-#endif
-
 #undef MBEDTLS_HKDF_C
 #if MYNEWT_VAL(MBEDTLS_HKDF_C)
 #define MBEDTLS_HKDF_C
@@ -476,13 +446,11 @@ extern "C" {
 #undef MBEDTLS_SSL_CLI_C
 #undef MBEDTLS_SSL_SRV_C
 #undef MBEDTLS_SSL_DTLS_ANTI_REPLAY
-#undef MBEDTLS_SSL_DTLS_BADMAC_LIMIT
 #if MYNEWT_VAL(MBEDTLS_SSL_TLS_C)
 #define MBEDTLS_SSL_TLS_C
 #define MBEDTLS_SSL_CLI_C
 #define MBEDTLS_SSL_SRV_C
 #define MBEDTLS_SSL_DTLS_ANTI_REPLAY
-#define MBEDTLS_SSL_DTLS_BADMAC_LIMIT
 #endif
 
 #if MYNEWT_VAL(MBEDTLS_MPI_MAX_SIZE) == 0
@@ -491,11 +459,6 @@ extern "C" {
 #define MBEDTLS_MPI_MAX_SIZE MYNEWT_VAL(MBEDTLS_MPI_MAX_SIZE)
 #endif
 
-#undef MBEDTLS_BIGNUM_ALT
-#if MYNEWT_VAL(MBEDTLS_BIGNUM_ALT)
-#define MBEDTLS_BIGNUM_ALT
-#endif
-
 /* TODO configure when supported */
 #undef MBEDTLS_PSA_CRYPTO_C
 #undef MBEDTLS_PSA_CRYPTO_SE_C
diff --git a/crypto/mbedtls/selftest/syscfg.yml b/crypto/mbedtls/selftest/syscfg.yml
index 748e17eb7..db924e46f 100644
--- a/crypto/mbedtls/selftest/syscfg.yml
+++ b/crypto/mbedtls/selftest/syscfg.yml
@@ -35,9 +35,7 @@ syscfg.vals:
   # Ciphers
   MBEDTLS_AES_C: 1
   MBEDTLS_AES_ALT: 0
-  MBEDTLS_ARC4_C: 1
   MBEDTLS_ARIA_C: 1
-  MBEDTLS_BLOWFISH_C: 1
   MBEDTLS_CAMELLIA_C: 1
   MBEDTLS_DES_C: 1
 
@@ -61,8 +59,6 @@ syscfg.vals:
   # Hash functions
   MBEDTLS_SHA256_C: 1
   MBEDTLS_SHA256_ALT: 0
-  MBEDTLS_MD2_C: 1
-  MBEDTLS_MD4_C: 1
   MBEDTLS_MD5_C: 1
   MBEDTLS_SHA1_C: 1
   MBEDTLS_SHA512_C: 1
diff --git a/crypto/mbedtls/syscfg.yml b/crypto/mbedtls/syscfg.yml
index 485144f41..8ad33b5b9 100644
--- a/crypto/mbedtls/syscfg.yml
+++ b/crypto/mbedtls/syscfg.yml
@@ -82,12 +82,8 @@ syscfg.defs:
     value: 0
   MBEDTLS_AES_FEWER_TABLES:
     value: 0
-  MBEDTLS_ARC4_C:
-    value: 0
   MBEDTLS_ARIA_C:
     value: 0
-  MBEDTLS_BLOWFISH_C:
-    value: 0
   MBEDTLS_CAMELLIA_C:
     value: 0
   MBEDTLS_DES_C:
@@ -134,10 +130,6 @@ syscfg.defs:
     value: 0
   MBEDTLS_SHA256_C:
     value: 1
-  MBEDTLS_MD2_C:
-    value: 0
-  MBEDTLS_MD4_C:
-    value: 0
   MBEDTLS_MD5_C:
     value: 0
   MBEDTLS_SHA1_C:
@@ -194,5 +186,3 @@ syscfg.defs:
   # MPI
   MBEDTLS_MPI_MAX_SIZE:
     value: 1024
-  MBEDTLS_BIGNUM_ALT:
-    value: 0