Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-08-10 01:02:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

change(mbedtls): update mbedTLS default configs

Browse Source 
1. Disables MBEDTLS_ARIA_C by default
2. SECP192R1 support is disabled by default
This commit is contained in:
Ashish Sharma
2026-01-22 15:39:03 +08:00
parent fff49a4555
commit 08f02b0faa
4 changed files with 15 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
docs/en/migration-guides/release-6.x/6.0/security.rst
View File

@@ -60,6 +60,16 @@ ESP-IDF v6.0 updates to Mbed TLS v4.0, where **PSA Crypto is the primary cryptog
- 41084
- 4.97
Default configuration changes
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Note: The default Mbed TLS configuration in ESP-IDF v6.0 has been tightened for security and footprint:
- ``MBEDTLS_ARIA_C`` is disabled by default. Applications that rely on ARIA must explicitly enable it in ``menuconfig`` (Component config -> mbedTLS) or by customizing ``components/mbedtls/config/mbedtls_preset_default.conf``.
- Support for ``secp192r1`` is disabled by default, consistent with the removal of support for elliptic curves smaller than 250 bits in certificates and TLS. If an application still requires legacy curve support outside TLS/certificates, it must be enabled explicitly (for example by defining ``PSA_WANT_ECC_SECP_R1_192=1``) and validated for compatibility. Note: this legacy support may be disabled in the next minor ESP-IDF release.
References
^^^^^^^^^^