This is an automated email from the ASF dual-hosted git repository.
acassis pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/nuttx-apps.git
The following commit(s) were added to refs/heads/master by this push:
new 297f99826 crypto/mbedtls: Remove the option MBEDTLS_DES_C.
297f99826 is described below
commit 297f998262f844ee37ec653b68e665efb61b4a94
Author: Marco Casaroli <[email protected]>
AuthorDate: Fri Oct 16 20:08:05 2026 +0200
crypto/mbedtls: Remove the option MBEDTLS_DES_C.
c16a266ac added the Kconfig option MBEDTLS_DES_C. The Espressif HAL
reads CONFIG_MBEDTLS_DES_C, an ESP-IDF option with the same name, and
then defines MBEDTLS_DES_C for its own Mbed TLS. That Mbed TLS
(TF-PSA-crypto) does not support DES and stops the build, so
esp32s3-devkit:mbedtls fails.
Remove the option. Define MBEDTLS_DES_C unless MBEDTLS_MINIMAL is
set, as the option's default did.
Assisted-by: Claude Code:claude-opus-5-5
Signed-off-by: Marco Casaroli <[email protected]>
---
crypto/mbedtls/Kconfig | 4 ----
crypto/mbedtls/include/mbedtls/mbedtls_config.h | 7 ++++++-
2 files changed, 6 insertions(+), 5 deletions(-)
diff --git a/crypto/mbedtls/Kconfig b/crypto/mbedtls/Kconfig
index 8b418e575..f256eb0d5 100644
--- a/crypto/mbedtls/Kconfig
+++ b/crypto/mbedtls/Kconfig
@@ -766,10 +766,6 @@ config MBEDTLS_CTR_DRBG_C
bool "Enable the CTR_DRBG AES-based random generator."
default !MBEDTLS_MINIMAL
-config MBEDTLS_DES_C
- bool "Enable the DES block cipher."
- default !MBEDTLS_MINIMAL
-
config MBEDTLS_ENTROPY_C
bool "Enable the platform-specific entropy code."
default !MBEDTLS_MINIMAL
diff --git a/crypto/mbedtls/include/mbedtls/mbedtls_config.h
b/crypto/mbedtls/include/mbedtls/mbedtls_config.h
index 9c54bee67..c278cbf85 100644
--- a/crypto/mbedtls/include/mbedtls/mbedtls_config.h
+++ b/crypto/mbedtls/include/mbedtls/mbedtls_config.h
@@ -3089,7 +3089,12 @@
* a security risk. We recommend considering stronger ciphers
*instead.
*/
-#ifdef CONFIG_MBEDTLS_DES_C
+
+/* No Kconfig option: the Espressif HAL reads CONFIG_MBEDTLS_DES_C for its
+ * own Mbed TLS, which does not support DES.
+ */
+
+#ifndef CONFIG_MBEDTLS_MINIMAL
#define MBEDTLS_DES_C
#endif
