nrfxlib Configuration Options

Kconfig files describe build-time configuration options (called symbols in Kconfig-speak), how they’re grouped into menus and sub-menus, and dependencies between them that determine what configurations are valid.

Kconfig files appear throughout the directory tree. For example, subsys/power/Kconfig defines power-related options.

This documentation is generated automatically from the Kconfig files by the gen_kconfig_rest.py script. Click on symbols for more information.

Configuration Options

Symbol name

Prompt

CONFIG_APP_LINK_WITH_MBEDTLS_INCLUDES

CONFIG_APP_LINK_WITH_ZBOSS

CONFIG_CC310_BACKEND

CONFIG_CC312_BACKEND

CONFIG_CC3XX_ATOMIC_LOCK

Use atomic variables for mutually exclusive access to CC3XX resources

CONFIG_CC3XX_BACKEND

Use cc3xx backend

CONFIG_CC3XX_HW_MUTEX_LOCK

Use hardware mutex for mutually exclusive access to CC3XX resources

CONFIG_CC3XX_MBEDTLS_AES_C

cc310 (AES-128)

CONFIG_CC3XX_MBEDTLS_CCM_C

cc310 (Using AES-128)

CONFIG_CC3XX_MBEDTLS_CHACHA20_C

CONFIG_CC3XX_MBEDTLS_CHACHAPOLY_C

CONFIG_CC3XX_MBEDTLS_CIPHER_MODE_CBC

CONFIG_CC3XX_MBEDTLS_CIPHER_MODE_CTR

CONFIG_CC3XX_MBEDTLS_CIPHER_MODE_ECB

CONFIG_CC3XX_MBEDTLS_CMAC_C

CONFIG_CC3XX_MBEDTLS_DHM_C

cc3xx

CONFIG_CC3XX_MBEDTLS_ECDH_C

CONFIG_CC3XX_MBEDTLS_ECDSA_C

CONFIG_CC3XX_MBEDTLS_ECJPAKE_C

CONFIG_CC3XX_MBEDTLS_ECP_C

CONFIG_CC3XX_MBEDTLS_GCM_C

CONFIG_CC3XX_MBEDTLS_POLY1305_C

CONFIG_CC3XX_MBEDTLS_RSA_C

CONFIG_CC3XX_MBEDTLS_SHA1_C

CONFIG_CC3XX_MBEDTLS_SHA256_C

CONFIG_CC3XX_MUTEX_LOCK

Use mutex variables for mutually exclusive access to CC3XX resources

CONFIG_CC3XX_SINGLE_BACKEND

CONFIG_CHOICE_CC3XX_MBEDTLS_CHACHA20_C

cc3xx

CONFIG_CHOICE_CC3XX_MBEDTLS_CHACHAPOLY_C

cc3xx

CONFIG_CHOICE_CC3XX_MBEDTLS_CMAC_C

cc310 (CMAC using AES-128)

CONFIG_CHOICE_CC3XX_MBEDTLS_ECP_C

cc3xx

CONFIG_CHOICE_CC3XX_MBEDTLS_POLY1305_C

cc3xx

CONFIG_CHOICE_CC3XX_MBEDTLS_RSA_C

cc3xx

CONFIG_CHOICE_CC3XX_MBEDTLS_SHA1_C

cc3xx

CONFIG_CHOICE_CC3XX_MBEDTLS_SHA256_C

cc3xx

CONFIG_CHOICE_OBERON_MBEDTLS_CHACHA20_C

nrf_oberon

CONFIG_CHOICE_OBERON_MBEDTLS_CMAC_C

nrf_oberon (CMAC using AES-128, AES-192, AES-256)

CONFIG_CHOICE_OBERON_MBEDTLS_ECP_C

nrf_oberon

CONFIG_CHOICE_OBERON_MBEDTLS_POLY1305_C

nrf_oberon

CONFIG_CHOICE_OBERON_MBEDTLS_SHA1_C

nrf_oberon

CONFIG_CHOICE_OBERON_MBEDTLS_SHA256_C

nrf_oberon

CONFIG_CHOICE_PSA_EITS_BACKEND_ZEPHYR_SETTINGS

Zephyr Settings

CONFIG_CHOICE_VANILLA_MBEDTLS_CHACHA20_C

Original mbed TLS

CONFIG_CHOICE_VANILLA_MBEDTLS_CHACHAPOLY_C

Original mbed TLS

CONFIG_CHOICE_VANILLA_MBEDTLS_CMAC_C

mbed TLS (CMAC using AES-128, AES-192, AES-256)

CONFIG_CHOICE_VANILLA_MBEDTLS_ECP_C

Original mbed TLS

CONFIG_CHOICE_VANILLA_MBEDTLS_POLY1305_C

Original mbed TLS

CONFIG_CHOICE_VANILLA_MBEDTLS_RSA_C

Original mbed TLS

CONFIG_CHOICE_VANILLA_MBEDTLS_SHA1_C

Original mbed TLS

CONFIG_CHOICE_VANILLA_MBEDTLS_SHA256_C

Original mbed TLS

CONFIG_CRYPTOCELL_CC310_USABLE

CONFIG_CRYPTOCELL_CC312_USABLE

CONFIG_CRYPTOCELL_FOR_TFM

CONFIG_CRYPTOCELL_USABLE

CONFIG_GENERATE_MBEDTLS_CFG_FILE

Generate mbed TLS config file

CONFIG_GLUE_CC3XX_MBEDTLS_AES_C

CONFIG_GLUE_CC3XX_MBEDTLS_CCM_C

CONFIG_GLUE_CC3XX_MBEDTLS_DHM_C

CONFIG_GLUE_MBEDTLS_AES_C

CONFIG_GLUE_MBEDTLS_CCM_C

CONFIG_GLUE_MBEDTLS_CIPHER_MODE_CBC

CONFIG_GLUE_MBEDTLS_CIPHER_MODE_CFB

CONFIG_GLUE_MBEDTLS_CIPHER_MODE_CTR

CONFIG_GLUE_MBEDTLS_CIPHER_MODE_OFB

CONFIG_GLUE_MBEDTLS_CIPHER_MODE_XTS

CONFIG_GLUE_MBEDTLS_DHM_C

CONFIG_GLUE_OBERON_MBEDTLS_AES_C

CONFIG_GLUE_OBERON_MBEDTLS_CCM_C

CONFIG_GLUE_VANILLA_MBEDTLS_AES_C

CONFIG_GLUE_VANILLA_MBEDTLS_CCM_C

CONFIG_GLUE_VANILLA_MBEDTLS_DHM_C

CONFIG_GZLL

Enable Gazell Link Layer

CONFIG_HW_CC310_INTERRUPT

CONFIG_HW_CC3XX_INTERRUPT

Use interrupt version of nrf cc3xx platform library

CONFIG_MBEDTLS_AES_256_CMAC_C

CONFIG_MBEDTLS_AES_ALT

CONFIG_MBEDTLS_AES_C

AES - Advanced Encryption Standard

CONFIG_MBEDTLS_AES_FEWER_TABLES

Use fewer AES tables

CONFIG_MBEDTLS_AES_ROM_TABLES

Use precomputed AES tables stored in ROM.

CONFIG_MBEDTLS_CCM_ALT

CONFIG_MBEDTLS_CCM_C

AES-CCM - AES Counter with CBC-MAC mode

CONFIG_MBEDTLS_CFG_FILE

Use built-in Mbed TLS with configuration file

CONFIG_MBEDTLS_CHACHA20_ALT

CONFIG_MBEDTLS_CHACHA20_C

CHACHA20 stream cipher support

CONFIG_MBEDTLS_CHACHAPOLY_ALT

CONFIG_MBEDTLS_CHACHAPOLY_C

CHACHA-POLY module support

CONFIG_MBEDTLS_CIPHER_AES_256_CBC_C

CONFIG_MBEDTLS_CIPHER_AES_256_CCM_C

CONFIG_MBEDTLS_CIPHER_AES_256_CFB_C

CONFIG_MBEDTLS_CIPHER_AES_256_CTR_C

CONFIG_MBEDTLS_CIPHER_AES_256_ECB_C

CONFIG_MBEDTLS_CIPHER_AES_256_OFB_C

CONFIG_MBEDTLS_CIPHER_MODE_CBC

AES-CBC - AES Cipher Block Chaining mode

CONFIG_MBEDTLS_CIPHER_MODE_CFB

AES-CFB - AES Cipher Feedback mode

CONFIG_MBEDTLS_CIPHER_MODE_CTR

AES-CTR - AES Counter Block Cipher mode

CONFIG_MBEDTLS_CIPHER_MODE_OFB

AES-OFB - AES Output Feedback mode

CONFIG_MBEDTLS_CIPHER_MODE_XTS

AES-XTS - AES Xor-encrypt-xor with ciphertext stealing mode

CONFIG_MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS

Enable MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS

CONFIG_MBEDTLS_CIPHER_PADDING_PKCS7

Enable MBEDTLS_CIPHER_PADDING_PKCS7

CONFIG_MBEDTLS_CIPHER_PADDING_ZEROS

Enable MBEDTLS_CIPHER_PADDING_ZEROS

CONFIG_MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN

Enable MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN

CONFIG_MBEDTLS_CMAC_ALT

CONFIG_MBEDTLS_CMAC_C

AES-CMAC - AES Cipher-based Message Authentication Code mode for block ciphers

CONFIG_MBEDTLS_CTR_DRBG_C

PRNG using CTR_DRBG

CONFIG_MBEDTLS_DHM_ALT

CONFIG_MBEDTLS_DHM_C

DHM - Diffie-Hellman-Merkel

CONFIG_MBEDTLS_ECDH_C

ECDH - Elliptic Curve Diffie-Hellman

CONFIG_MBEDTLS_ECDH_COMPUTE_SHARED_ALT

CONFIG_MBEDTLS_ECDH_GEN_PUBLIC_ALT

CONFIG_MBEDTLS_ECDSA_C

ECDSA - Elliptic Curve Digital Signature Algorithm

CONFIG_MBEDTLS_ECDSA_DETERMINISTIC

Enable deterministic ECDSA (RFC 6979)

CONFIG_MBEDTLS_ECDSA_GENKEY_ALT

CONFIG_MBEDTLS_ECDSA_SIGN_ALT

CONFIG_MBEDTLS_ECDSA_VERIFY_ALT

CONFIG_MBEDTLS_ECJPAKE_ALT

CONFIG_MBEDTLS_ECJPAKE_C

ECJPAKE - Elliptic curve J-PAKE

CONFIG_MBEDTLS_ECP_ALT

CONFIG_MBEDTLS_ECP_C

ECC - Eliptic Curve Cryptography

CONFIG_MBEDTLS_ECP_DP_BP256R1_ENABLED

Enable BP256R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_BP384R1_ENABLED

Enable BP384R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_BP512R1_ENABLED

Enable BP512R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED

Enable CURVE25519 elliptic curve

CONFIG_MBEDTLS_ECP_DP_CURVE448_ENABLED

Enable CURVE448 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP192K1_ENABLED

Enable SECP192K1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP192R1_ENABLED

Enable SECP192R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP224K1_ENABLED

Enable SECP224K1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP224R1_ENABLED

Enable SECP224R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP256K1_ENABLED

Enable SECP256K1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED

Enable SECP256R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP384R1_ENABLED

Enable SECP384R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP521R1_ENABLED

Enable SECP521R1 elliptic curve

CONFIG_MBEDTLS_ECP_FIXED_POINT_OPTIM

ECP - Elliptic Curve fixed point optimization

CONFIG_MBEDTLS_ECP_MAX_BITS

ECP - Max bit size of Elliptic Curves

CONFIG_MBEDTLS_ECP_WINDOW_SIZE

ECP - Elliptic Curve multiplication window size

CONFIG_MBEDTLS_ENABLE_HEAP

Enable global heap for mbed TLS

CONFIG_MBEDTLS_ENTROPY_MAX_SOURCES

Maximum number of entropy sources

CONFIG_MBEDTLS_GCM_ALT

CONFIG_MBEDTLS_GCM_C

AES-GCM - AES Galois/Counter Mode support

CONFIG_MBEDTLS_HEAP_SIZE

Heap size for mbed TLS

CONFIG_MBEDTLS_HMAC_DRBG_C

PRNG using HMAC_DRBG

CONFIG_MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED

CONFIG_MBEDTLS_MD5_C

CONFIG_MBEDTLS_MPI_MAX_SIZE

MPI - Multiple Precision Integers maximum size

CONFIG_MBEDTLS_MPI_WINDOW_SIZE

MPI - Multiple Precision Integers window size

CONFIG_MBEDTLS_PKCS1_V15

PKCS1 v1.5 support

CONFIG_MBEDTLS_PKCS1_V21

PKCS1 v2.1 support

CONFIG_MBEDTLS_PK_C

PK - Enable the generic public (asymetric) key layer

CONFIG_MBEDTLS_PK_WRITE_C

Enable the generic public (asymetric) key writer

CONFIG_MBEDTLS_POLY1305_ALT

CONFIG_MBEDTLS_POLY1305_C

POLY1305 module support

CONFIG_MBEDTLS_PSA_CRYPTO_C

Enable PSA API support

CONFIG_MBEDTLS_PSA_CRYPTO_SPM

CONFIG_MBEDTLS_PSA_CRYPTO_STORAGE_C

PSA storage for persistent keys

CONFIG_MBEDTLS_RSA_ALT

CONFIG_MBEDTLS_RSA_C

RSA - Rivest–Shamir–Adleman cryptosystem

CONFIG_MBEDTLS_SHA1_ALT

CONFIG_MBEDTLS_SHA1_C

SHA-1 hash functionality

CONFIG_MBEDTLS_SHA256_ALT

CONFIG_MBEDTLS_SHA256_C

SHA-256 hash functionality

CONFIG_MBEDTLS_SHA256_SMALLER

Enable smaller SHA-256 implementation

CONFIG_MBEDTLS_SHA512_C

SHA-512 hash functionality

CONFIG_MBEDTLS_SSL_ALPN

Enable support for setting the supported Application Layer Protocols

CONFIG_MBEDTLS_SSL_CACHE_C

SSL - cache

CONFIG_MBEDTLS_SSL_CIPHERSUITES

SSL - Cipher suites tuning

CONFIG_MBEDTLS_SSL_CLI_C

Enable the SSL/TLS client code

CONFIG_MBEDTLS_SSL_CONTEXT_SERIALIZATION

SSL - context serialization

CONFIG_MBEDTLS_SSL_DTLS_BADMAC_LIMIT

SSL - DTLS bad MAC limit

CONFIG_MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE

SSL - DTLS client port reuse

CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID

SSL - DTLS connection ID

CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN

Max payload size for TLS protocol message

CONFIG_MBEDTLS_SSL_PROTO_TLS1_2

CONFIG_MBEDTLS_SSL_RENEGOTIATION

SSL - Renegotiation

CONFIG_MBEDTLS_SSL_SERVER_NAME_INDICATION

SSL - RFC 6066 SNI

CONFIG_MBEDTLS_SSL_SESSION_TICKETS

SSL - RFC 5077 session tickets support

CONFIG_MBEDTLS_SSL_SRV_C

Enable the SSL/TLS server code

CONFIG_MBEDTLS_SSL_TICKET_C

SSL - tickets

CONFIG_MBEDTLS_SSL_TLS_C

CONFIG_MBEDTLS_TLS_LIBRARY

Create mbed TLS transport layer security library

CONFIG_MBEDTLS_USE_PSA_CRYPTO

PSA APIs for X.509 and TLS library

CONFIG_MBEDTLS_VANILLA_BACKEND

Use Original mbed TLS backend

CONFIG_MBEDTLS_VANILLA_SINGLE_BACKEND

CONFIG_MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE

X.509 - check extended key usage

CONFIG_MBEDTLS_X509_CHECK_KEY_USAGE

X.509 - check key usage

CONFIG_MBEDTLS_X509_CREATE_C

X.509 - creating certificates core

CONFIG_MBEDTLS_X509_CRL_PARSE_C

X.509 - CRL parsing

CONFIG_MBEDTLS_X509_CSR_PARSE_C

X.509 - CSR parsing

CONFIG_MBEDTLS_X509_CSR_WRITE_C

X.509 - CSR writing

CONFIG_MBEDTLS_X509_LIBRARY

Create mbed TLS x509 library

CONFIG_MPSL

Nordic Multi Protocol Service Layer (MPSL)

CONFIG_NFC_T2T_NRFXLIB

Enable NFC Type 2 Tag library

CONFIG_NFC_T4T_NRFXLIB

Enable NFC Type 4 Tag library

CONFIG_NORDIC_SECURITY_BACKEND

Use Nordic provided security backend

CONFIG_NORDIC_SECURITY_PROMPTLESS

CONFIG_NRFXLIB_CRYPTO

CONFIG_NRF_802154_ENCRYPTION

nRF 802.15.4 AES-CCM* authentication & encryption

CONFIG_NRF_802154_SL

Nordic proprietary nRF 802.15.4 Service Layer.

CONFIG_NRF_802154_SOURCE_NRFXLIB

sdk-nrfxlib

CONFIG_NRF_CC310_BL

nrf_cc310_bl HW crypto library for nRF devices with CryptoCell CC310.

CONFIG_NRF_CC3XX_PLATFORM

nrf_cc3xx_platform HW crypto library for nRF devices with CryptoCell CC3xx.

CONFIG_NRF_MODEM

CONFIG_NRF_MODEM_LINK_BINARY

Link binary

CONFIG_NRF_MODEM_LOG

Enable library logging

CONFIG_NRF_MODEM_SHMEM_CTRL_SIZE

CONFIG_NRF_OBERON

nrf_oberon SW crypto library for nRF5x.

CONFIG_NRF_RPC

nRF RPC (Remote Procedure Call) library

CONFIG_NRF_RPC_CBOR

Add TinyCBOR layer

CONFIG_NRF_RPC_CMD_CTX_POOL_SIZE

Number of available context structures for commands

CONFIG_NRF_RPC_THREAD_POOL_SIZE

Number of threads in local thread pool

CONFIG_NRF_RPC_TR_CUSTOM

User provided transport layer

CONFIG_NRF_RPC_TR_CUSTOM_INCLUDE

User provided include file for transport layer

CONFIG_NRF_RPC_TR_RPMSG

nRF RPC over RPMsg

CONFIG_NRF_SECURITY_ADVANCED

Advanced mbed TLS Configuration Settings

CONFIG_NRF_SECURITY_ANY_BACKEND

CONFIG_NRF_SECURITY_GLUE_LIBRARY

CONFIG_NRF_SECURITY_MULTI_BACKEND

CONFIG_NRF_SECURITY_RNG

Random Number Generator support

CONFIG_OBERON_ALTERNATE_AES_KEY_ENC

CONFIG_OBERON_BACKEND

Use nrf_oberon backend

CONFIG_OBERON_MBEDTLS_AES_C

nrf_oberon (AES-128, AES-192, AES-256)

CONFIG_OBERON_MBEDTLS_CCM_C

nrf_oberon (Using AES-128, AES-192, AES-256)

CONFIG_OBERON_MBEDTLS_CHACHA20_C

CONFIG_OBERON_MBEDTLS_CIPHER_MODE_CBC

CONFIG_OBERON_MBEDTLS_CIPHER_MODE_CFB

CONFIG_OBERON_MBEDTLS_CIPHER_MODE_CTR

CONFIG_OBERON_MBEDTLS_CIPHER_MODE_ECB

CONFIG_OBERON_MBEDTLS_CIPHER_MODE_OFB

CONFIG_OBERON_MBEDTLS_CIPHER_MODE_XTS

CONFIG_OBERON_MBEDTLS_CMAC_C

CONFIG_OBERON_MBEDTLS_ECDH_C

CONFIG_OBERON_MBEDTLS_ECDSA_C

CONFIG_OBERON_MBEDTLS_ECJPAKE_C

CONFIG_OBERON_MBEDTLS_ECP_C

CONFIG_OBERON_MBEDTLS_POLY1305_C

CONFIG_OBERON_MBEDTLS_SHA1_C

CONFIG_OBERON_MBEDTLS_SHA256_C

CONFIG_OBERON_SINGLE_BACKEND

CONFIG_OPENTHREAD_BUILD_OUTPUT_STRIPPED

Strip OpenThread libraries

CONFIG_OPENTHREAD_LIBRARY_1_1

OpenThread 1.1 from library

CONFIG_OPENTHREAD_NORDIC_LIBRARY

Nordic library feature sets

CONFIG_OPENTHREAD_NORDIC_LIBRARY_FTD

Nordic Optimized FTD configuration

CONFIG_OPENTHREAD_NORDIC_LIBRARY_MASTER

Nordic OpenThread master configuration

CONFIG_OPENTHREAD_NORDIC_LIBRARY_MTD

Nordic Optimized MTD configuration

CONFIG_OPENTHREAD_USER_CUSTOM_LIBRARY

User custom configuration

CONFIG_PSA_EITS_BACKEND_ZEPHYR

Native ITS backend based on Zephyr Settings subsystem

CONFIG_PSA_EITS_READ_BUFF_SIZE

The size of the buffer used when reading with an offset

CONFIG_PSA_NATIVE_ITS

PSA native Internal Trusted Storage

CONFIG_VANILLA_MBEDTLS_AES_C

mbed TLS (AES-128, AES-192, AES-256)

CONFIG_VANILLA_MBEDTLS_CCM_C

mbed TLS (Using AES-128, AES-192, AES-256)

CONFIG_VANILLA_MBEDTLS_CHACHA20_C

CONFIG_VANILLA_MBEDTLS_CHACHAPOLY_C

CONFIG_VANILLA_MBEDTLS_CIPHER_MODE_CBC

CONFIG_VANILLA_MBEDTLS_CIPHER_MODE_CFB

CONFIG_VANILLA_MBEDTLS_CIPHER_MODE_CTR

CONFIG_VANILLA_MBEDTLS_CIPHER_MODE_ECB

CONFIG_VANILLA_MBEDTLS_CIPHER_MODE_OFB

CONFIG_VANILLA_MBEDTLS_CIPHER_MODE_XTS

CONFIG_VANILLA_MBEDTLS_CMAC_C

CONFIG_VANILLA_MBEDTLS_DHM_C

Original mbed TLS

CONFIG_VANILLA_MBEDTLS_ECDH_C

CONFIG_VANILLA_MBEDTLS_ECDSA_C

CONFIG_VANILLA_MBEDTLS_ECJPAKE_C

CONFIG_VANILLA_MBEDTLS_ECP_C

CONFIG_VANILLA_MBEDTLS_POLY1305_C

CONFIG_VANILLA_MBEDTLS_RSA_C

CONFIG_VANILLA_MBEDTLS_SHA1_C

CONFIG_VANILLA_MBEDTLS_SHA256_C

CONFIG_ZBOSS_SOURCES_AVAILABLE

CONFIG_ZIGBEE_GP_CB

Enable Zigbee Green Power Combo Basic functionality [EXPERIMENTAL]

CONFIG_ZIGBEE_GP_NONE

Disable Zigbee Green Power functionality

CONFIG_ZIGBEE_GP_PB

Enable Zigbee Green Power Proxy Basic functionality

CONFIG_ZIGBEE_LIBRARY_NCP_DEV

Network co-processor (connectivity device) [EXPERIMENTAL]

CONFIG_ZIGBEE_LIBRARY_SOC

System-on-Chip