Disable XTS cipher mode by default when importing Mbed TLS

Krzysztof Stachowiak · Krzysztof Stachowiak · commit 7b22ede77ab0 · 2018-06-18T16:48:33.000+02:00
diff --git a/features/mbedtls/importer/adjust-config.sh b/features/mbedtls/importer/adjust-config.sh
@@ -85,6 +85,7 @@ conf unset MBEDTLS_CIPHER_MODE_CTR
 conf unset MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS
 conf unset MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
 conf unset MBEDTLS_CIPHER_PADDING_ZEROS
+conf unset MBEDTLS_CIPHER_MODE_XTS
 conf unset MBEDTLS_ECP_DP_SECP192R1_ENABLED
 conf unset MBEDTLS_ECP_DP_SECP224R1_ENABLED
 conf unset MBEDTLS_ECP_DP_SECP521R1_ENABLED
diff --git a/features/mbedtls/importer/adjust-no-entropy-config.sh b/features/mbedtls/importer/adjust-no-entropy-config.sh
@@ -36,3 +36,4 @@ add_code() {
 }
 
 conf set MBEDTLS_CMAC_C
+conf unset MBEDTLS_CIPHER_MODE_XTS

Original file line number	Diff line number	Diff line change
`@@ -36,3 +36,4 @@ add_code() {`
`36`	`36`	`}`
`37`	`37`
`38`	`38`	`conf set MBEDTLS_CMAC_C`
	`39`	`+conf unset MBEDTLS_CIPHER_MODE_XTS`