raiden00pl opened a new pull request, #3932: URL: https://github.com/apache/nuttx-apps/pull/3932
## Summary
Bump NimBLE to upstream master (e00b85cc). Upstream NimBLE dropped its
bundled TinyCrypt and now uses Mbed TLS for the Security Manager and mesh
crypto, so the NuttX glue switches with it:
- select CRYPTO_MBEDTLS with AES, CMAC, ECP, ECDH and P-256, link mbedtls,
remove NIMBLE_TINYCRYPT,
- follow upstream source changes: config key store instead of the RAM
store, new host sources (ble_cs.c, ble_eatt.c, ble_iso.c),
- default unset syscfg values from the upstream NuttX port,
- add NIMBLE_EVENTQ_SIZE (default 32 with NIMBLE_MESH, 16 otherwise). Mesh
deadlocks the host during provisioning with 16 entries.
## Impact
Flash and RAM grow because Mbed TLS replaces TinyCrypt.
| Crypto | text | bss | delta
|
|--------------------------------|---------|--------|--------------------|
| TinyCrypt (old NimBLE) | 232,996 | 31,024 | - |
| Mbed TLS, default options | 274,984 | 40,272 | **+42.0 KB / +9.2
KB** |
| Mbed TLS, MBEDTLS_MINIMAL + AES/ECP size options | 244,896 | 31,528 |
+11.9 KB / +0.5 KB |
Size options used for the last row:
CONFIG_MBEDTLS_MINIMAL=y
CONFIG_MBEDTLS_AES_ROM_TABLES=y
CONFIG_MBEDTLS_AES_FEWER_TABLES=y
CONFIG_MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH=y
CONFIG_MBEDTLS_BLOCK_CIPHER_NO_DECRYPT=y
CONFIG_MBEDTLS_ECP_WINDOW_SIZE=2
## Testing
nrf52, nrf53, nrf54l
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
