Help¶

Use a SHA-256 implementation with smaller footprint. Note, that this implementation will also have a lower performance. On a Cortex-M4 the size of mbedtls_sha256_process() will be reduced from ~2KB to ~0.5KB, however it will also perform around 30% slower. MBEDTLS_SHA256_SMALLER setting in mbed TLS config file.

Help¶

Enable an implementation of SHA-256 that has lower ROM footprint but also lower performance

Help¶

Enable an implementation of SHA-256 that has lower ROM footprint but also lower performance

Direct dependencies¶

(NRF_SECURITY_ADVANCED && (VANILLA_MBEDTLS_SHA256_C || (MBEDTLS_SHA256_C && !NRF_CRYPTO_BACKEND_COMBINATION_0)) && NRF_SECURITY_ADVANCED && MBEDTLS_VANILLA_BACKEND && NORDIC_SECURITY_BACKEND) || (MBEDTLS_MAC_SHA256_ENABLED && MBEDTLS && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = “config-tls-generic.h” && MBEDTLS) || (MBEDTLS_MAC_SHA256_ENABLED && MBEDTLS)

(Includes any dependencies from ifs and menus.)

Defaults¶

y
y

Kconfig definitions¶

At /jenkins_workspace/workspace/nrfconnect-nrf_doc_v1.2-branch_2/nrfxlib/nrf_security/Kconfig:887

Included via Kconfig:8 → Kconfig.zephyr:9 → /jenkins_workspace/workspace/nrfconnect-nrf_doc_v1.2-branch_2/test_doc/_build/Kconfig.modules:5 → /jenkins_workspace/workspace/nrfconnect-nrf_doc_v1.2-branch_2/nrfxlib/Kconfig.nrfxlib:14

Menu path: (Top) → Modules → Nordic nrfxlib → Nordic Security → Use Nordic provided security backend → Advanced mbed TLS Configuration Settings

config MBEDTLS_SHA256_SMALLER
    bool "Use SHA256 small footprint implementation"
    depends on NRF_SECURITY_ADVANCED && (VANILLA_MBEDTLS_SHA256_C || (MBEDTLS_SHA256_C && !NRF_CRYPTO_BACKEND_COMBINATION_0)) && NRF_SECURITY_ADVANCED && MBEDTLS_VANILLA_BACKEND && NORDIC_SECURITY_BACKEND
    help
      Use a SHA-256 implementation with smaller footprint.
      Note, that this implementation will also have a lower performance.
      On a Cortex-M4 the size of mbedtls_sha256_process() will be reduced from ~2KB to ~0.5KB,
      however it will also perform around 30% slower.
      MBEDTLS_SHA256_SMALLER setting in mbed TLS config file.

At modules/Kconfig.tls-generic:250

Included via Kconfig:8 → Kconfig.zephyr:10 → modules/Kconfig:6 → modules/Kconfig.mbedtls:42

Menu path: (Top) → Modules → mbedTLS Support → TLS configuration → Ciphersuite configuration → Enable the SHA-224 and SHA-256 hash algorithms

config MBEDTLS_SHA256_SMALLER
    bool "Enable smaller SHA-256 implementation"
    default y
    depends on MBEDTLS_MAC_SHA256_ENABLED && MBEDTLS && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS
    help
      Enable an implementation of SHA-256 that has lower ROM footprint but also
      lower performance

At modules/Kconfig.tls-generic:250

Included via Kconfig:8 → Kconfig.zephyr:10 → modules/Kconfig:6

Menu path: (Top) → Modules → TLS configuration → Ciphersuite configuration → Enable the SHA-224 and SHA-256 hash algorithms

config MBEDTLS_SHA256_SMALLER
    bool "Enable smaller SHA-256 implementation"
    default y
    depends on MBEDTLS_MAC_SHA256_ENABLED && MBEDTLS
    help
      Enable an implementation of SHA-256 that has lower ROM footprint but also
      lower performance

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)