From ac7dd33de1b68011318cc751eb346f39344c7cab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= Date: Thu, 3 Jul 2014 16:17:59 +0200 Subject: [PATCH] Update the ccm-psk config with psk_len 128 bits --- configs/config-ccm-psk-tls1_2.h | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/configs/config-ccm-psk-tls1_2.h b/configs/config-ccm-psk-tls1_2.h index c80c912ed..1da9f6a6b 100644 --- a/configs/config-ccm-psk-tls1_2.h +++ b/configs/config-ccm-psk-tls1_2.h @@ -13,7 +13,7 @@ /* System support */ //#define POLARSSL_HAVE_IPV6 /* Optional */ -//#define POLARSSL_HAVE_TIME /* Optionnaly used in Hello messages */ +//#define POLARSSL_HAVE_TIME /* Optionally used in Hello messages */ /* Other POLARSSL_HAVE_XXX flags irrelevant for this configuration */ /* PolarSSL feature support */ @@ -36,6 +36,9 @@ /* Save RAM at the expense of ROM */ #define POLARSSL_AES_ROM_TABLES +/* Save some RAM by adjusting to your exact needs */ +#define POLARSSL_PSK_MAX_LEN 16 /* 128-bits keys are generally enough */ + /* * You should adjust this to the exact number of sources you're using: default * is the "platform_entropy_poll" source, but you may want to add other ones @@ -50,9 +53,10 @@ #define SSL_CIPHERSUITES \ TLS_PSK_WITH_AES_256_CCM_8, \ TLS_PSK_WITH_AES_128_CCM_8 + /* * Save RAM at the expense of interoperability: do this only if you control - * both ends of the connection! (See coments in "polarssl/ssl.h".) + * both ends of the connection! (See comments in "polarssl/ssl.h".) * The optimal size here depends on the typical size of records. */ #define SSL_MAX_CONTENT_LEN 512