RE: Mbedtls compilation with DES enabled by default

jb73 — Wed, 21 Dec 2022 15:05:08 GMT

Hi Einar,

Thank you for the response,

indeed that's what I see in VS Code, MBEDTLS_CIPHER_DES_ENABLED is already configured in my case in Kconfig.tls-generic.

Best regards,

Jean-Baptiste

RE: Mbedtls compilation with DES enabled by default

Einar Thorsrud — Wed, 21 Dec 2022 13:03:52 GMT

Hi Jean-Baptiste,

DES is not supported nor tested in the nRF Connect SDK, and so this will never match the criteria in zephyr/modules/mbedtls/Kconfig.tls-generic. Therefor it will be set to 0, and you should see a warning similar to this if you check the prj.conf in VS Code:

CONFIG_MBEDTLS_CIPHER_DES_ENABLED was assigned the value y, but got the value n. Missing dependencies:
(!(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS) || (!(NRF_SECURITY || NORDIC_SECURITY_BACKEND) && MBEDTLS_BUILTIN && MBEDTLS_CFG_FILE = "config-tls-generic.h" && MBEDTLS && 0)

I did not get a chances to test this myself, but it should be possible to modify Kconfig.tls-generic to allow CONFIG_MBEDTLS_CIPHER_DES_ENABLED.