Update contents of the Pelion lite config file

Author: k-stachowiak

tls-client-pelion/mbedtls_pelion_lite_config.h

@@ -15,7 +15,83 @@
 #ifndef MBEDTLS_PELION_LITE_CONFIG_H
 #define MBEDTLS_PELION_LITE_CONFIG_H
 
-/* TODO: Put the Pelion Lite config here */
+#if !defined(MBEDTLS_ENTROPY_HARDWARE_ALT) && \
+    !defined(MBEDTLS_ENTROPY_NV_SEED) && !defined(MBEDTLS_TEST_NULL_ENTROPY)
+#error "This hardware does not have an entropy source."
+#endif /* !MBEDTLS_ENTROPY_HARDWARE_ALT && !MBEDTLS_ENTROPY_NV_SEED &&
+        * !MBEDTLS_TEST_NULL_ENTROPY */
+
+/* Minimize to semi-minimal base */
+#undef MBEDTLS_ASN1_PARSE_C
+#undef MBEDTLS_ASN1_WRITE_C
+#undef MBEDTLS_CIPHER_MODE_CBC
+#undef MBEDTLS_CIPHER_PADDING_PKCS7
+#undef MBEDTLS_ECDSA_DETERMINISTIC
+#undef MBEDTLS_ECDH_C
+#undef MBEDTLS_ECDSA_C
+#undef MBEDTLS_ECP_DP_SECP384R1_ENABLED
+#undef MBEDTLS_ECP_DP_CURVE25519_ENABLED
+#undef MBEDTLS_ECP_NIST_OPTIM
+#undef MBEDTLS_GCM_C
+#undef MBEDTLS_HMAC_DRBG_C
+#undef MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
+#undef MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
+#undef MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
+#undef MBEDTLS_OID_C
+#undef MBEDTLS_PEM_PARSE_C
+#undef MBEDTLS_PK_C
+#undef MBEDTLS_PK_PARSE_C
+#undef MBEDTLS_PK_RSA_ALT_SUPPORT
+#undef MBEDTLS_PK_WRITE_C
+#undef MBEDTLS_RSA_C
+#undef MBEDTLS_SHA512_C
+#undef MBEDTLS_SSL_SERVER_NAME_INDICATION
+#undef MBEDTLS_SSL_TICKET_C
+#undef MBEDTLS_X509_USE_C
+#undef MBEDTLS_X509_CRT_PARSE_C
+#undef MBEDTLS_X509_CRL_PARSE_C
+
+/* These options are needed only if MBEDTLS_ECJPAKE_C is enabled (needed for thread security) */
+#ifndef MBEDTLS_ECJPAKE_C
+#undef MBEDTLS_BIGNUM_C
+#undef MBEDTLS_ECP_C
+#undef MBEDTLS_ECP_DP_SECP256R1_ENABLED
+#undef MBEDTLS_SSL_EXPORT_KEYS
+#endif
+
+/* Client-only configuration */
+#undef MBEDTLS_CERTS_C
+#undef MBEDTLS_SSL_CACHE_C
+#undef MBEDTLS_SSL_SRV_C
+// needed for Base64 encoding Opaque data for
+// registration payload, adds 500 bytes to flash.
+#define MBEDTLS_BASE64_C
+
+#define MBEDTLS_SSL_MAX_CONTENT_LEN 2048
+#define MBEDTLS_ENTROPY_MAX_SOURCES 2
+
+#define MBEDTLS_CIPHER_MODE_CTR
+
+/* Disable the speed optimizations of SHA256, makes binary size smaller
+ * on Cortex-M by 1800B with ARMCC5 and 1384B with GCC 6.3.
+ */
+#define MBEDTLS_SHA256_SMALLER
+
+/* Support only PSK with AES 128 in CCM-8 mode */
+#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8
+
+/* Disable some of the speed optimizations on AES code to save
+ * ~6200 bytes of ROM. According to comments on the mbedtls PR 394,
+ * the speed on Cortex M4 is not even reduced by this. */
+#define MBEDTLS_AES_FEWER_TABLES
+
+/* Disable debug options */
+#undef MBEDTLS_ERROR_C
+#undef MBEDTLS_SELF_TEST
+#undef MBEDTLS_ERROR_STRERROR_DUMMY
+#undef MBEDTLS_VERSION_FEATURES
+#undef MBEDTLS_VERSION_C
+#undef MBEDTLS_DEBUG_C
 
 #include "mbedtls/check_config.h"