Minimal Build

The following compile time settings produce a SharkSSL library less than 20Kb. The library disables all ciphers except for the following cipher combination:

TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

The Certificate Management for IoT tutorial provides details on the benefits of using this cipher combination.

• SHARKSSL_USE_AES_256=0
  
• SHARKSSL_USE_AES_128=0
  
• SHARKSSL_ENABLE_AES_GCM=0
  
• SHARKSSL_USE_SHA_384=0
  
• SHARKSSL_USE_SHA_512=0
  
• SHARKSSL_SSL_SERVER_CODE=0
  
• SHARKSSL_ENABLE_CLIENT_AUTH=0
  
• SHARKSSL_ENABLE_SNI=1
  
• SHARKSSL_ENABLE_RSA=0
  
• SHARKSSL_ENABLE_SESSION_CACHE=0
  
• SHARKSSL_ENABLE_SECURE_RENEGOTIATION=0
• SHARKSSL_ENABLE_DHE_RSA=0
  
• SHARKSSL_ENABLE_SELECT_CIPHERSUITE=0
  
• SHARKSSL_ENABLE_ALPN_EXTENSION=1
  
• SHARKSSL_ENABLE_RSA_API=0
  
• SHARKSSL_ENABLE_RSA_PKCS1=0
  
• SHARKSSL_ENABLE_ECDSA_API=0
  
• SHARKSSL_ENABLE_PEM_API=0
  
• SHARKSSL_ENABLE_INFO_API=0
  
• SHARKSSL_ENABLE_CERT_CHAIN=0
  
• SHARKSSL_ENABLE_CA_LIST=1
  
• SHARKSSL_ENABLE_CERTSTORE_API=0
  
• SHARKSSL_SHA256_SMALL_FOOTPRINT=1
  
• SHARKSSL_BIGINT_EXP_SLIDING_WINDOW_K=1
• SHARKSSL_ENABLE_AES_CTR_MODE=0
  
• SHARKSSL_AES_CIPHER_LOOP_UNROLL=0
  
• SHARKSSL_UNALIGNED_ACCESS=1
  
• SHARKSSL_BIGINT_WORDSIZE 32
  
• SHARKSSL_USE_ECC=1
  
• SHARKSSL_ENABLE_ECDSA=1
  
• SHARKSSL_ECC_VERIFY_POINT=0
  
• SHARKSSL_ECC_TIMING_RESISTANT=0
  
• SHARKSSL_ECC_USE_SECP521R1=0
  
• SHARKSSL_ECC_USE_BRAINPOOLP512R1=0
  
• SHARKSSL_ENABLE_ECDHE_RSA=0
  
• SHARKSSL_USE_RNG_TINYMT=1
  
• BASIC_TRUST_CHECK
  
• NDEBUG

The following settings require that you also include the assembler files in your build.

• SHARKSSL_OPTIMIZED_BIGINT_ASM=1
• SHARKSSL_OPTIMIZED_CHACHA_ASM=1
• SHARKSSL_OPTIMIZED_POLY1305_ASM=1