CONFIG_MBEDTLS_KEY_EXCHANGE_ALL_ENABLED

Enable all available ciphersuite modes

Enable all available ciphersuites

Enable all available ciphersuite modes

Type: bool

Help

The default behaviour with nrf_security is to always enable every ciphersuite
that is available. This configuration has no effect, but ensures that samples
and subsystem usage doesn't break.

Direct dependencies

(!(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = “config-tls-generic.h” && MBEDTLS) || (!(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = “config-tls-generic.h” && MBEDTLS) || !MBEDTLS_BUILTIN || (!(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = “config-tls-generic.h” && MBEDTLS && 0)

(Includes any dependencies from ifs and menus.)

Defaults

No defaults. Implicitly defaults to n.

Symbols selected by this symbol

Kconfig definitions

At <Zephyr>/modules/mbedtls/Kconfig.tls-generic:56

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:14 → <Zephyr>/modules/mbedtls/Kconfig:67

Menu path: (Top) → Modules → mbedtls (/home/runner/work/sdk-nrf/sdk-nrf/ncs/mbedtls) → mbed TLS Support → TLS configuration → Ciphersuite configuration

config MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
    bool "Enable all available ciphersuite modes"
    select MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
    depends on !(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS

At <Zephyr>/modules/mbedtls/Kconfig.tls-generic:56

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:68 → <Zephyr>/modules/mbedtls/Kconfig:67

Menu path: (Top) → Modules → mbedtls (/home/runner/work/sdk-nrf/sdk-nrf/ncs/modules/crypto/mbedtls) → mbed TLS Support → TLS configuration → Ciphersuite configuration

config MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
    bool "Enable all available ciphersuite modes"
    select MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
    depends on !(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS

At <nrfxlib>/nrf_security/Kconfig:133

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:92 → <nrfxlib>/Kconfig.nrfxlib:13

Menu path: (Top) → Modules → nrfxlib (/home/runner/work/sdk-nrf/sdk-nrf/ncs/nrfxlib) → Nordic nrfxlib → nrf_security module → Zephyr legacy configurations

config MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
    bool "Enable all available ciphersuites"
    depends on !MBEDTLS_BUILTIN
    help
      The default behaviour with nrf_security is to always enable every ciphersuite
      that is available. This configuration has no effect, but ensures that samples
      and subsystem usage doesn't break.

At <Zephyr>/modules/mbedtls/Kconfig.tls-generic:56

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:80 → <Zephyr>/modules/mbedtls/Kconfig:67

Menu path: (Top) → Modules → mbed TLS Support → TLS configuration → Ciphersuite configuration

config MBEDTLS_KEY_EXCHANGE_ALL_ENABLED
    bool "Enable all available ciphersuite modes"
    select MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
    select MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
    select MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
    depends on !(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS && 0

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)