From a88df39ceaa3c1f5189147ae045fdd2e80a56b83 Mon Sep 17 00:00:00 2001 From: Ron Eldor Date: Sun, 2 Dec 2018 15:37:27 +0200 Subject: [PATCH] Reduce default MBEDTLS_MPI_MAX_SIZE Reduce the default size of `MBEDTLS_MPI_MAX_SIZE` to 512 bytes, as the default 1024 consumes much stack, and supporting RSA 4096 bit may suffice at the moment. --- features/mbedtls/importer/adjust-config.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/features/mbedtls/importer/adjust-config.sh b/features/mbedtls/importer/adjust-config.sh index d6cc758a73..c1e7eb3855 100755 --- a/features/mbedtls/importer/adjust-config.sh +++ b/features/mbedtls/importer/adjust-config.sh @@ -140,6 +140,8 @@ conf unset MBEDTLS_SSL_TRUNCATED_HMAC conf unset MBEDTLS_PLATFORM_TIME_TYPE_MACRO +conf set MBEDTLS_MPI_MAX_SIZE 512 + # The following configurations are a needed for Mbed Crypto submodule. # They are related to the persistent key storage feature. conf set MBEDTLS_PSA_CRYPTO_STORAGE_C