// mbedtls build configuration for the firmware: SHA-256, HMAC, P-256 ECDSA/ECDH
// and AES-256-CBC (PIN protocols) only.
#ifndef SKEY_MBEDTLS_CONFIG_H
#define SKEY_MBEDTLS_CONFIG_H

#define MBEDTLS_NO_PLATFORM_ENTROPY

#define MBEDTLS_MD_C
#define MBEDTLS_SHA256_C

#define MBEDTLS_BIGNUM_C
#define MBEDTLS_ECP_C
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
#define MBEDTLS_ECP_NIST_OPTIM
#define MBEDTLS_ECDSA_C
#define MBEDTLS_ECDSA_DETERMINISTIC
#define MBEDTLS_HMAC_DRBG_C
#define MBEDTLS_ASN1_PARSE_C
#define MBEDTLS_ASN1_WRITE_C

#define MBEDTLS_AES_C
#define MBEDTLS_CIPHER_MODE_CBC
#define MBEDTLS_AES_ROM_TABLES  // keep the lookup tables in flash, not RAM
#define MBEDTLS_AES_FEWER_TABLES

#endif