CONFIG_MBEDTLS_SHA256_SMALLER

Use SHA256 small footprint implementation

Enable smaller SHA-256 implementation

Enable smaller SHA-256 implementation

Type: bool

Help

Use a SHA-256 implementation with smaller footprint. Note, that this implementation will also have a lower performance. On a Cortex-M4 the size of mbedtls_sha256_process() will be reduced from ~2KB to ~0.5KB, however it will also perform around 30% slower. MBEDTLS_SHA256_SMALLER setting in mbed TLS config file.

Help

Enable an implementation of SHA-256 that has lower ROM footprint but also lower performance

Help

Enable an implementation of SHA-256 that has lower ROM footprint but also lower performance

Defaults

  • y

  • y

Kconfig definitions

At /jenkins_workspace/workspace/nrfconnect-nrf_doc_v1.2-branch_2/nrfxlib/nrf_security/Kconfig:887

Included via Kconfig:8Kconfig.zephyr:9/jenkins_workspace/workspace/nrfconnect-nrf_doc_v1.2-branch_2/test_doc/_build/Kconfig.modules:5/jenkins_workspace/workspace/nrfconnect-nrf_doc_v1.2-branch_2/nrfxlib/Kconfig.nrfxlib:14

Menu path: (Top) → Modules → Nordic nrfxlib → Nordic Security → Use Nordic provided security backend → Advanced mbed TLS Configuration Settings

config MBEDTLS_SHA256_SMALLER
    bool "Use SHA256 small footprint implementation"
    depends on NRF_SECURITY_ADVANCED && (VANILLA_MBEDTLS_SHA256_C || (MBEDTLS_SHA256_C && !NRF_CRYPTO_BACKEND_COMBINATION_0)) && NRF_SECURITY_ADVANCED && MBEDTLS_VANILLA_BACKEND && NORDIC_SECURITY_BACKEND
    help
      Use a SHA-256 implementation with smaller footprint.
      Note, that this implementation will also have a lower performance.
      On a Cortex-M4 the size of mbedtls_sha256_process() will be reduced from ~2KB to ~0.5KB,
      however it will also perform around 30% slower.
      MBEDTLS_SHA256_SMALLER setting in mbed TLS config file.

At modules/Kconfig.tls-generic:250

Included via Kconfig:8Kconfig.zephyr:10modules/Kconfig:6modules/Kconfig.mbedtls:42

Menu path: (Top) → Modules → mbedTLS Support → TLS configuration → Ciphersuite configuration → Enable the SHA-224 and SHA-256 hash algorithms

config MBEDTLS_SHA256_SMALLER
    bool "Enable smaller SHA-256 implementation"
    default y
    depends on MBEDTLS_MAC_SHA256_ENABLED && MBEDTLS && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS
    help
      Enable an implementation of SHA-256 that has lower ROM footprint but also
      lower performance

At modules/Kconfig.tls-generic:250

Included via Kconfig:8Kconfig.zephyr:10modules/Kconfig:6

Menu path: (Top) → Modules → TLS configuration → Ciphersuite configuration → Enable the SHA-224 and SHA-256 hash algorithms

config MBEDTLS_SHA256_SMALLER
    bool "Enable smaller SHA-256 implementation"
    default y
    depends on MBEDTLS_MAC_SHA256_ENABLED && MBEDTLS
    help
      Enable an implementation of SHA-256 that has lower ROM footprint but also
      lower performance

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)