espressif/mbedtls
1
0
Fork 0
mirror of https://github.com/espressif/mbedtls.git synced 2025-06-12 13:46:38 +08:00
Code Issues Packages Projects Releases Wiki Activity

mbedtls_config.h: add description for CTR_DRBG about AES-128 only

Browse Source 
Signed-off-by: Yanray Wang <yanray.wang@arm.com>
This commit is contained in:
Yanray Wang 2023-06-15 09:57:06 +08:00
parent 4292441a42
commit 55ef22c2cb
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
include/mbedtls/mbedtls_config.h
View File

@ -655,7 +655,8 @@
/** \def MBEDTLS_CTR_DRBG_USE_128_BIT_KEY /** \def MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
* *
* Uncomment this macro to use a 128-bit key in the CTR_DRBG module. * Uncomment this macro to use a 128-bit key in the CTR_DRBG module.
* By default, CTR_DRBG uses a 256-bit key. * Without this, CTR_DRBG uses a 256-bit key
* unless \c MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH is set.
*/ */
//#define MBEDTLS_CTR_DRBG_USE_128_BIT_KEY //#define MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
@ -2428,6 +2429,8 @@
* The CTR_DRBG generator uses AES-256 by default. * The CTR_DRBG generator uses AES-256 by default.
* To use AES-128 instead, enable \c MBEDTLS_CTR_DRBG_USE_128_BIT_KEY above. * To use AES-128 instead, enable \c MBEDTLS_CTR_DRBG_USE_128_BIT_KEY above.
* *
* \note AES-128 will be used if \c MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH is set.
*
* \note To achieve a 256-bit security strength with CTR_DRBG, * \note To achieve a 256-bit security strength with CTR_DRBG,
* you must use AES-256 *and* use sufficient entropy. * you must use AES-256 *and* use sufficient entropy.
* See ctr_drbg.h for more details. * See ctr_drbg.h for more details.