nrfxlib Configuration Options

Kconfig files describe build-time configuration options (called symbols in Kconfig-speak), how they’re grouped into menus and sub-menus, and dependencies between them that determine what configurations are valid.

Kconfig files appear throughout the directory tree. For example, subsys/power/Kconfig defines power-related options.

This documentation is generated automatically from the Kconfig files by the gen_kconfig_rest.py script. Click on symbols for more information.

Configuration Options

Symbol name

Prompt

CONFIG_APP_LINK_WITH_ZBOSS

CONFIG_CC310_BACKEND

CONFIG_CC310_ONLY_ENABLED

CONFIG_CC310_ONLY_PSA_ENABLED

CONFIG_CC312_BACKEND

CONFIG_CC312_ONLY_ENABLED

CONFIG_CC312_ONLY_PSA_ENABLED

CONFIG_CC3XX_ATOMIC_LOCK

Use atomic variables for mutually exclusive access to CC3XX resources

CONFIG_CC3XX_BACKEND

Configuration to enable CryptoCell CC3XX for legacy mbed TLS APIs

CONFIG_CC3XX_BACKEND_FORCED

CONFIG_CC3XX_HW_MUTEX_LOCK

Use hardware mutex for mutually exclusive access to CC3XX resources

CONFIG_CC3XX_MUTEX_LOCK

Use mutex variables for mutually exclusive access to CC3XX resources

CONFIG_CHOICE_PSA_EITS_BACKEND_ZEPHYR_SETTINGS

Zephyr Settings

CONFIG_CRYPTOCELL_CC310_USABLE

CONFIG_CRYPTOCELL_CC312_USABLE

CONFIG_CRYPTOCELL_USABLE

CONFIG_GENERATE_MBEDTLS_CFG_FILE

Generate mbed TLS config files

CONFIG_GZLL

Enable Gazell Link Layer

CONFIG_HW_CC310_INTERRUPT

CONFIG_HW_CC3XX_INTERRUPT

Use interrupt version of nrf cc3xx platform library

CONFIG_MBEDTLS_512_SMALLER

Use smaller SHA-256 implementation

CONFIG_MBEDTLS_AES_ALT

CONFIG_MBEDTLS_AES_C

AES - Advanced Encryption Standard

CONFIG_MBEDTLS_AES_DECRYPT_ALT

CONFIG_MBEDTLS_AES_ENCRYPT_ALT

CONFIG_MBEDTLS_AES_FEWER_TABLES

Use fewer tables for AES

CONFIG_MBEDTLS_AES_ROM_TABLES

Use precomputed AES tables stored in ROM.

CONFIG_MBEDTLS_AES_SETKEY_DEC_ALT

CONFIG_MBEDTLS_AES_SETKEY_ENC_ALT

CONFIG_MBEDTLS_CCM_ALT

CONFIG_MBEDTLS_CCM_C

AES-CCM - AES Counter with CBC-MAC mode

CONFIG_MBEDTLS_CFG_FILE

mbed TLS configuration file

CONFIG_MBEDTLS_CHACHA20_ALT

CONFIG_MBEDTLS_CHACHA20_C

CHACHA20 stream cipher support

CONFIG_MBEDTLS_CHACHAPOLY_ALT

CONFIG_MBEDTLS_CHACHAPOLY_C

CHACHA-POLY module support

CONFIG_MBEDTLS_CIPHER

Enable the generic cipher layer.

CONFIG_MBEDTLS_CIPHER_ALL_ENABLED

Enable all available ciphers

CONFIG_MBEDTLS_CIPHER_C

Enable Cipher support

CONFIG_MBEDTLS_CIPHER_MODE_CBC

AES-CBC - AES Cipher Block Chaining mode

CONFIG_MBEDTLS_CIPHER_MODE_CFB

AES-CFB - AES Cipher Feedback mode

CONFIG_MBEDTLS_CIPHER_MODE_CTR

AES-CTR - AES Counter Block Cipher mode

CONFIG_MBEDTLS_CIPHER_MODE_OFB

AES-OFB - AES Output Feedback mode

CONFIG_MBEDTLS_CIPHER_MODE_XTS

AES-XTS - AES Xor-encrypt-xor with ciphertext stealing mode

CONFIG_MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS

Enable MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS

CONFIG_MBEDTLS_CIPHER_PADDING_PKCS7

Enable MBEDTLS_CIPHER_PADDING_PKCS7

CONFIG_MBEDTLS_CIPHER_PADDING_ZEROS

Enable MBEDTLS_CIPHER_PADDING_ZEROS

CONFIG_MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN

Enable MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN

CONFIG_MBEDTLS_CMAC_ALT

CONFIG_MBEDTLS_CMAC_C

AES-CMAC - AES Cipher-based Message Authentication Code mode for block ciphers

CONFIG_MBEDTLS_CTR_DRBG_C

PRNG using CTR_DRBG

CONFIG_MBEDTLS_CTR_DRBG_ENABLED

Enable the CTR_DRBG AES-256-based random generator

CONFIG_MBEDTLS_CTR_DRBG_USE_128_BIT_KEY

CONFIG_MBEDTLS_DEBUG_C

Enable the debug functions for TLS.

CONFIG_MBEDTLS_DHM_ALT

CONFIG_MBEDTLS_DHM_C

DHM - Diffie-Hellman-Merkel

CONFIG_MBEDTLS_DTLS

Enable support for DTLS

CONFIG_MBEDTLS_ECDH_C

ECDH - Elliptic Curve Diffie-Hellman

CONFIG_MBEDTLS_ECDH_COMPUTE_SHARED_ALT

CONFIG_MBEDTLS_ECDH_GEN_PUBLIC_ALT

CONFIG_MBEDTLS_ECDSA_C

ECDSA - Elliptic Curve Digital Signature Algorithm

CONFIG_MBEDTLS_ECDSA_DETERMINISTIC

Enable deterministic ECDSA (RFC 6979)

CONFIG_MBEDTLS_ECDSA_GENKEY_ALT

CONFIG_MBEDTLS_ECDSA_SIGN_ALT

CONFIG_MBEDTLS_ECDSA_VERIFY_ALT

CONFIG_MBEDTLS_ECJPAKE_ALT

CONFIG_MBEDTLS_ECJPAKE_C

ECJPAKE - Elliptic curve J-PAKE

CONFIG_MBEDTLS_ECP_ALL_ENABLED

Enable all available elliptic curves

CONFIG_MBEDTLS_ECP_ALT

CONFIG_MBEDTLS_ECP_C

ECC - Eliptic Curve Cryptography

CONFIG_MBEDTLS_ECP_DP_BP256R1_ENABLED

Enable BP256R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_BP384R1_ENABLED

Enable BP384R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_BP512R1_ENABLED

Enable BP512R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED

Enable CURVE25519 elliptic curve

CONFIG_MBEDTLS_ECP_DP_CURVE448_ENABLED

Enable CURVE448 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP192K1_ENABLED

Enable SECP192K1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP192R1_ENABLED

Enable SECP192R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP224K1_ENABLED

Enable SECP224K1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP224R1_ENABLED

Enable SECP224R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP256K1_ENABLED

Enable SECP256K1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED

Enable SECP256R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP384R1_ENABLED

Enable SECP384R1 elliptic curve

CONFIG_MBEDTLS_ECP_DP_SECP521R1_ENABLED

Enable SECP521R1 elliptic curve

CONFIG_MBEDTLS_ENABLE_HEAP

Enable global heap for mbed TLS

CONFIG_MBEDTLS_ENTROPY_ENABLED

Enable mbedTLS generic entropy pool

CONFIG_MBEDTLS_ENTROPY_FORCE_SHA256

CONFIG_MBEDTLS_ENTROPY_HARDWARE_ALT

CONFIG_MBEDTLS_ENTROPY_MAX_SOURCES

CONFIG_MBEDTLS_GCM_ALT

CONFIG_MBEDTLS_GCM_C

AES-GCM - AES Galois/Counter Mode support

CONFIG_MBEDTLS_GENPRIME

CONFIG_MBEDTLS_GENPRIME_ENABLED

Enable the prime-number generation code.

CONFIG_MBEDTLS_HARDWARE_POLL_WORKAROUND

Entropy hardware poll workaround

CONFIG_MBEDTLS_HAS_CBC_CIPHERSUITE_REQUIREMENTS

CONFIG_MBEDTLS_HAS_CBC_OR_GCM_CIPHERSUITE_REQUIREMENTS

CONFIG_MBEDTLS_HAS_ECDH_CIPHERSUITE_REQUIREMENTS

CONFIG_MBEDTLS_HAS_ECDSA_CIPHERSUITE_REQUIREMENTS

CONFIG_MBEDTLS_HAS_ECJPAKE_CIPHERSUITE_REQUIREMENTS

CONFIG_MBEDTLS_HAS_GCM_CIPHERSUITE_REQUIREMENT

CONFIG_MBEDTLS_HAS_RSA_CIPHERSUITE_REQUIREMENTS

CONFIG_MBEDTLS_HEAP_SIZE

Heap size for mbed TLS

CONFIG_MBEDTLS_HKDF_C

HKDF support

CONFIG_MBEDTLS_HMAC_DRBG_C

PRNG using HMAC_DRBG

CONFIG_MBEDTLS_HMAC_DRBG_ENABLED

Enable the HMAC_DRBG random generator

CONFIG_MBEDTLS_KEY_EXCHANGE_ALL_ENABLED

Enable all available ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED

Enable the DHE-PSK based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED

Enable the DHE-RSA based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED

Enable the ECDHE-ECDSA based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED

Enable the ECDHE-PSK based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED

Enable the ECDHE-RSA based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED

Enable the ECDH-ECDSA based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED

Enable the ECDH-RSA based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED

Enable the ECJPAKE based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED

Enable the PSK based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_ENABLED

Enable the RSA-only based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED

Enable the RSA-PSK based ciphersuite modes

CONFIG_MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED

Enable some PSK ciphersuites

CONFIG_MBEDTLS_LEGACY_CRYPTO_C

Enable (legacy) mbed TLS crypto APIs

CONFIG_MBEDTLS_MAC_ALL_ENABLED

Enable all available MAC methods

CONFIG_MBEDTLS_MAC_SHA256_ENABLED

Enable the SHA-224 and SHA-256 hash algorithms

CONFIG_MBEDTLS_MD

Enable the generic message digest layer.

CONFIG_MBEDTLS_MD5_C

CONFIG_MBEDTLS_MD_C

Enable MD support

CONFIG_MBEDTLS_MEMORY_BUFFER_ALLOC_C

CONFIG_MBEDTLS_MEMORY_C

CONFIG_MBEDTLS_NO_PLATFORM_ENTROPY

CONFIG_MBEDTLS_PKCS1_V15

PKCS1 v1.5 support

CONFIG_MBEDTLS_PKCS1_V21

PKCS1 v2.1 support

CONFIG_MBEDTLS_PKCS5_C

Enable password-based encryption functions

CONFIG_MBEDTLS_PK_C

Enable PK support

CONFIG_MBEDTLS_PK_PARSE_C

Enable PK parse support

CONFIG_MBEDTLS_PK_WRITE_C

Enable the generic public (asymetric) key writer

CONFIG_MBEDTLS_PLATFORM_C

CONFIG_MBEDTLS_PLATFORM_EXIT_ALT

CONFIG_MBEDTLS_PLATFORM_FPRINTF_ALT

CONFIG_MBEDTLS_PLATFORM_MEMORY

CONFIG_MBEDTLS_PLATFORM_PRINTF_ALT

CONFIG_MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT

CONFIG_MBEDTLS_PLATFORM_SNPRINTF_ALT

CONFIG_MBEDTLS_PLATFORM_ZEROIZE_ALT

CONFIG_MBEDTLS_POLY1305_ALT

CONFIG_MBEDTLS_POLY1305_C

POLY1305 module support

CONFIG_MBEDTLS_PSA_ACCEL_KEY_TYPE_AES

CONFIG_MBEDTLS_PSA_ACCEL_KEY_TYPE_CHACHA20

CONFIG_MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR

CONFIG_MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY

CONFIG_MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR

CONFIG_MBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY

CONFIG_MBEDTLS_PSA_BUILTIN_AEAD

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CBC_NO_PADDING

PSA CBC support (without padding) - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CBC_PKCS7

PSA CBC support (padded with PKCS#7) - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CCM

PSA AES CCM support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CFB

PSA AES CFB support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CHACHA20_POLY1305

PSA ChaCha20/Poly1305 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CMAC

PSA AES CMAC support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_CTR

PSA AES CTR mode support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_DETERMINISTIC_ECDSA

PSA ECDSA support (deterministic mode) - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_ECB_NO_PADDING

PSA AES ECB (no padding) - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_ECDH

PSA ECDH support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_ECDSA

PSA ECDSA support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_GCM

PSA AES GCM support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_HKDF

PSA HKDF support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_HMAC

PSA HMAC support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_MD5

PSA MD5 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_OFB

PSA AES OFB mode support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_RIPEMD160

PSA ripemd160 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_RSA_OAEP

PSA RSA OAEP support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_CRYPT

PSA RSA crypt support (PKCS1V15 mode - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_RSA_PKCS1V15_SIGN

PSA RSA signature support (PKCS1V15 mode) - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_RSA_PSS

PSA RSA (PSS mode) - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_SHA_1

PSA SHA1 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_SHA_224

PSA SHA-224 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_SHA_256

PSA SSH-256 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_SHA_384

PSA SHA-384 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_SHA_512

PSA SHA-512 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_STREAM_CIPHER

PSA stream cipher support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_TLS12_PRF

PSA TLS 1.2 PRF support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_TLS12_PSK_TO_MS

PSA TLS 1.2 PSK to MS support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ALG_XTS

PSA AES XTS mode support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_CIPHER

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_256

PSA ECC Brainpool256r1 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_BRAINPOOL_P_R1_384

PSA ECC Brainpool384r1 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_255

PSA ECC Curve25519 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_MONTGOMERY_448

PSA ECC Curve448 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_192

PSA ECC secp192k1 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_SECP_K1_256

PSA ECC secp256k1 support - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_192

PSA ECC secp192r1 - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_224

PSA ECC secp224r1 - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_256

PSA ECC secp256r1 - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_ECC_SECP_R1_384

PSA ECC secp384r1 - builtin

CONFIG_MBEDTLS_PSA_BUILTIN_HASH

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_AES

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_CAMELLIA

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_CHACHA20

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_DES

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_KEY_PAIR

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_ECC_PUBLIC_KEY

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_KEY_PAIR

CONFIG_MBEDTLS_PSA_BUILTIN_KEY_TYPE_RSA_PUBLIC_KEY

CONFIG_MBEDTLS_PSA_BUILTIN_MAC

CONFIG_MBEDTLS_PSA_BUILTIN_RSA

CONFIG_MBEDTLS_PSA_BUILTIN_SECP_R1_521

PSA ECC secp521r1 - builtin

CONFIG_MBEDTLS_PSA_CRYPTO_C

Enable PSA crypto APIs

CONFIG_MBEDTLS_PSA_CRYPTO_CLIENT

CONFIG_MBEDTLS_PSA_CRYPTO_DRIVERS

CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG

External RNG

CONFIG_MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER

CONFIG_MBEDTLS_PSA_CRYPTO_SPM

CONFIG_MBEDTLS_PSA_CRYPTO_STORAGE_C

PSA storage for persistent keys

CONFIG_MBEDTLS_RSA_ALT

CONFIG_MBEDTLS_RSA_C

RSA - Rivest–Shamir–Adleman cryptosystem

CONFIG_MBEDTLS_SHA1_ALT

CONFIG_MBEDTLS_SHA1_C

SHA-1 hash functionality

CONFIG_MBEDTLS_SHA224_ALT

CONFIG_MBEDTLS_SHA224_C

SHA-224 hash functionality

CONFIG_MBEDTLS_SHA256_ALT

CONFIG_MBEDTLS_SHA256_C

SHA-256 hash functionality

CONFIG_MBEDTLS_SHA256_SMALLER

Enable smaller SHA-256 implementation

CONFIG_MBEDTLS_SHA384_ALT

CONFIG_MBEDTLS_SHA384_C

SHA-384 hash functionality

CONFIG_MBEDTLS_SHA512_ALT

CONFIG_MBEDTLS_SHA512_C

SHA-512 hash functionality

CONFIG_MBEDTLS_SSL_ALL_ALERT_MESSAGES

Enable all SSL alert messages

CONFIG_MBEDTLS_SSL_CACHE_C

SSL - cache

CONFIG_MBEDTLS_SSL_CIPHERSUITES

SSL - Cipher suites tuning

CONFIG_MBEDTLS_SSL_CLI_C

Enable the SSL/TLS client code

CONFIG_MBEDTLS_SSL_CONTEXT_SERIALIZATION

Enable serialization of TLS conftext structures

CONFIG_MBEDTLS_SSL_COOKIE_C

Enable TLS server-side callbacks for session tickets

CONFIG_MBEDTLS_SSL_DEBUG_ALL

Enable debug messages in SSL module for all issues.

CONFIG_MBEDTLS_SSL_DTLS_ANTI_REPLAY

Provide DTLS Anti-replay functionality

CONFIG_MBEDTLS_SSL_DTLS_BADMAC_LIMIT

SSL - DTLS bad MAC limit

CONFIG_MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE

SSL - DTLS client port reuse

CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID

SSL - DTLS connection ID

CONFIG_MBEDTLS_SSL_DTLS_HELLO_VERIFY

Enable support for HellyVerifyRequiest on DTLS servers

CONFIG_MBEDTLS_SSL_DTLS_SRTP

Enable DTLS-SRTP (RFC5764)

CONFIG_MBEDTLS_SSL_ENCRYPT_THEN_MAC

CONFIG_MBEDTLS_SSL_EXPORT_KEYS

Enable support for exporting SSL key block and master secret

CONFIG_MBEDTLS_SSL_EXTENDED_MASTER_SECRET

CONFIG_MBEDTLS_SSL_IN_CONTENT_LEN

Max length for TLS outgoing fragments

CONFIG_MBEDTLS_SSL_KEEP_PEER_CERTIFICATE

Give acces to peer certificate after handshake

CONFIG_MBEDTLS_SSL_OUT_CONTENT_LEN

Max length for TLS outgoing fragments

CONFIG_MBEDTLS_SSL_PROTO_DTLS

Enable support for DTLS

CONFIG_MBEDTLS_SSL_PROTO_TLS1_2

Enable TLS version 1.2 protocol

CONFIG_MBEDTLS_SSL_RENEGOTIATION

SSL - Renegotiation

CONFIG_MBEDTLS_SSL_SERVER_NAME_INDICATION

SSL - RFC 6066 SNI

CONFIG_MBEDTLS_SSL_SESSION_TICKETS

SSL - RFC 5077 session tickets support

CONFIG_MBEDTLS_SSL_SRV_C

Enable the SSL/TLS server code

CONFIG_MBEDTLS_SSL_TICKET_C

SSL - tickets

CONFIG_MBEDTLS_SSL_TLS_C

CONFIG_MBEDTLS_THREADING_ALT

CONFIG_MBEDTLS_THREADING_C

CONFIG_MBEDTLS_TLS_LIBRARY

Create mbed TLS transport layer security library

CONFIG_MBEDTLS_TLS_VERSION_1_2

Enable support for TLS 1.2 (DTLS 1.2)

CONFIG_MBEDTLS_USER_CONFIG_FILE

User configuration file for mbed TLS

CONFIG_MBEDTLS_USE_PSA_CRYPTO

PSA APIs for X.509 and TLS library

CONFIG_MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE

X.509 - check extended key usage

CONFIG_MBEDTLS_X509_CHECK_KEY_USAGE

X.509 - check key usage

CONFIG_MBEDTLS_X509_CREATE_C

X.509 - creating certificates core

CONFIG_MBEDTLS_X509_CRL_PARSE_C

X.509 - CRL parsing

CONFIG_MBEDTLS_X509_CRT_PARSE_C

X.509 - CTR parsing

CONFIG_MBEDTLS_X509_CSR_PARSE_C

X.509 - CSR parsing

CONFIG_MBEDTLS_X509_CSR_WRITE_C

X.509 - CSR writing

CONFIG_MBEDTLS_X509_LIBRARY

Create mbed TLS x509 library

CONFIG_MBEDTLS_X509_USE_C

X.509 core for using certificates.

CONFIG_MPSL

Nordic Multi Protocol Service Layer (MPSL)

CONFIG_NFC_T2T_NRFXLIB

Enable NFC Type 2 Tag library

CONFIG_NFC_T4T_NRFXLIB

Enable NFC Type 4 Tag library

CONFIG_NORDIC_SECURITY_BACKEND

Use nrf_security module

CONFIG_NORDIC_SECURITY_PROMPTLESS

CONFIG_NRFXLIB_CRYPTO

CONFIG_NRF_802154_ENCRYPTION

nRF 802.15.4 AES-CCM* authentication & encryption

CONFIG_NRF_802154_SL

Nordic proprietary nRF 802.15.4 Service Layer.

CONFIG_NRF_802154_SOURCE_NRFXLIB

sdk-nrfxlib

CONFIG_NRF_CC310_BL

nrf_cc310_bl HW crypto library for nRF devices with CryptoCell CC310.

CONFIG_NRF_CC3XX_PLATFORM

nrf_cc3xx_platform HW crypto library for nRF devices with CryptoCell CC3xx.

CONFIG_NRF_DM

nRF DM (Distance Measurement) library [EXPERIMENTAL]

CONFIG_NRF_MODEM

CONFIG_NRF_MODEM_LINK_BINARY

Link binary

CONFIG_NRF_MODEM_LOG

Enable library logging

CONFIG_NRF_MODEM_SHMEM_CTRL_SIZE

CONFIG_NRF_OBERON

nrf_oberon SW crypto library for nRF5x.

CONFIG_NRF_RPC

nRF RPC (Remote Procedure Call) library

CONFIG_NRF_RPC_CBOR

Add TinyCBOR layer

CONFIG_NRF_RPC_CMD_CTX_POOL_SIZE

Number of available context structures for commands

CONFIG_NRF_RPC_THREAD_POOL_SIZE

Number of threads in local thread pool

CONFIG_NRF_RPC_TR_CUSTOM

User provided transport layer

CONFIG_NRF_RPC_TR_CUSTOM_INCLUDE

User provided include file for transport layer

CONFIG_NRF_RPC_TR_RPMSG

nRF RPC over RPMsg

CONFIG_NRF_SECURITY

Use nrf_security module

CONFIG_NRF_SECURITY_ADVANCED

Advanced mbed TLS Configuration Settings

CONFIG_NRF_SECURITY_RNG

Random Number Generator support

CONFIG_OBERON_BACKEND

Configuration to enable nrf_oberon for legacy mbed TLS APIs

CONFIG_OBERON_BACKEND_FORCED

CONFIG_OBERON_ONLY_ENABLED

CONFIG_OBERON_ONLY_PSA_ENABLED

CONFIG_OPENTHREAD_BUILD_OUTPUT_STRIPPED

Strip OpenThread libraries

CONFIG_OPENTHREAD_LIBRARY

OpenThread from library

CONFIG_OPENTHREAD_LIBRARY_1_1

(Legacy) OpenThread 1.1 from library

CONFIG_OPENTHREAD_NORDIC_LIBRARY

Nordic library feature sets

CONFIG_OPENTHREAD_NORDIC_LIBRARY_FTD

Nordic Optimized FTD configuration

CONFIG_OPENTHREAD_NORDIC_LIBRARY_MASTER

Nordic OpenThread master configuration

CONFIG_OPENTHREAD_NORDIC_LIBRARY_MTD

Nordic Optimized MTD configuration

CONFIG_OPENTHREAD_USER_CUSTOM_LIBRARY

User custom configuration

CONFIG_PSA_CRYPTO_ACCELERATOR_DRIVER_PRESENT

CONFIG_PSA_CRYPTO_DRIVER_ALG_CBC_NO_PADDING_CC3XX

PSA CBC support (without padding) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CBC_NO_PADDING_OBERON

PSA CBC support (without padding) - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_CBC_PKCS7_CC3XX

PSA CBC support (padded with PKCS#7) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CCM_CC3XX

PSA AES CCM support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CCM_OBERON

PSA AES CCM support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_CFB_CC3XX

PSA AES CFB support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CHACHA20_POLY1305_CC3XX

PSA ChaCha20/Poly1305 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CHACHA20_POLY1305_OBERON

PSA ChaCha20/Poly1305 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_CMAC_CC3XX

PSA AES CMAC support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CTR_CC3XX

PSA AES CTR mode support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_CTR_OBERON

PSA AES CTR mode support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_DETERMINISTIC_ECDSA_CC3XX

PSA ECDSA support (deterministic mode) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_DETERMINISTIC_ECDSA_OBERON

PSA ECDSA support (deterministic mode) - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_ECB_NO_PADDING_CC3XX

PSA AES ECB (no padding) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_ECB_NO_PADDING_OBERON

PSA AES ECB (no padding) - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_ECDH_CC3XX

PSA ECDH support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_ECDH_OBERON

PSA ECDH support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_ECDSA_CC3XX

PSA ECDSA support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_ECDSA_OBERON

PSA ECDSA support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_GCM_CC3XX

PSA AES GCM support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_HKDF_CC3XX

PSA HKDF support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_HMAC_CC3XX

PSA HMAC support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_RSA_OAEP_CC3XX

PSA RSA OAEP support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_RSA_PKCS1V15_CRYPT_CC3XX

PSA RSA crypt support (PKCS1V15 mode) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_RSA_PKCS1V15_SIGN_CC3XX

PSA RSA signature support (PKCS1V15 mode) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_RSA_PSS_CC3XX

PSA RSA (PSS mode) - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_1_CC3XX

PSA SHA1 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_1_OBERON

PSA SHA1 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_224_CC3XX

PSA SHA-224 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_224_OBERON

PSA SHA-224 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_256_CC3XX

PSA SSH-256 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_256_OBERON

PSA SSH-256 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_384_OBERON

PSA SHA-384 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_SHA_512_OBERON

PSA SHA-512 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ALG_STREAM_CIPHER_CC3XX

PSA stream cipher support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ALG_STREAM_CIPHER_OBERON

PSA stream cipher support - oberon

CONFIG_PSA_CRYPTO_DRIVER_BUILTIN

PSA Builtin

CONFIG_PSA_CRYPTO_DRIVER_CC3XX

PSA CryptoCell Driver

CONFIG_PSA_CRYPTO_DRIVER_ECC_BRAINPOOL_P_R1_256_CC3XX

PSA ECC Brainpool256r1 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_MONTGOMERY_255_CC3XX

PSA ECC Curve25519 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_MONTGOMERY_255_OBERON

PSA ECC Curve25519 support - oberon

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_K1_192_CC3XX

PSA ECC secp192k1 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_K1_256_CC3XX

PSA ECC secp256k1 support - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_192_CC3XX

PSA ECC secp192r1 - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_224_CC3XX

PSA ECC secp224r1 - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_224_OBERON

PSA ECC secp224r1 - oberon

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_256_CC3XX

PSA ECC secp256r1 - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_256_OBERON

PSA ECC secp256r1 - oberon

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_384_CC3XX

PSA ECC secp384r1 - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_ECC_SECP_R1_521_CC3XX

PSA ECC secp521r1 - cc3xx

CONFIG_PSA_CRYPTO_DRIVER_HAS_CIPHER

CONFIG_PSA_CRYPTO_DRIVER_OBERON

PSA Oberon Driver

CONFIG_PSA_CRYPTO_SECURE

CONFIG_PSA_DEFAULT_OFF

CONFIG_PSA_EITS_BACKEND_ZEPHYR

Native ITS backend based on Zephyr Settings subsystem

CONFIG_PSA_EITS_READ_BUFF_SIZE

The size of the buffer used when reading with an offset

CONFIG_PSA_NATIVE_ITS

PSA native Internal Trusted Storage

CONFIG_PSA_PROMPTLESS

CONFIG_ZBOSS_SOURCES_AVAILABLE

CONFIG_ZIGBEE_ENABLE_TRACES

Use ZBOSS libraries, dedicated for debugging issues [EXPERIMENTAL]

CONFIG_ZIGBEE_GP_CB

Enable Zigbee Green Power Combo Basic functionality [EXPERIMENTAL]

CONFIG_ZIGBEE_GP_NONE

Disable Zigbee Green Power functionality

CONFIG_ZIGBEE_GP_PB

Enable Zigbee Green Power Proxy Basic functionality

CONFIG_ZIGBEE_LIBRARY_DEVELOPMENT

Use development libraries [EXPERIMENTAL]

CONFIG_ZIGBEE_LIBRARY_NCP_DEV

Network co-processor (connectivity device)

CONFIG_ZIGBEE_LIBRARY_PRODUCTION

Use production libraries

CONFIG_ZIGBEE_LIBRARY_SOC

System-on-Chip