Skip to content

Commit edc09cf

Browse files
Ron EldorRon Eldor
authored andcommitted
Add comment for reasoning for changing default
Add a comment in the `adjust-config.sh` script, for effects and benefits of the new value.
1 parent 097996c commit edc09cf

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

features/mbedtls/importer/adjust-config.sh

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -140,6 +140,10 @@ conf unset MBEDTLS_SSL_TRUNCATED_HMAC
140140

141141
conf unset MBEDTLS_PLATFORM_TIME_TYPE_MACRO
142142

143+
# The default size of MBEDTLS_MPI_MAX_SIZE is 1024 bytes.
144+
# In some cases, this value is set to stack buffers.
145+
# Reduce the maximal MBEDTLS_MPI_MAX_SIZE to 512 bytes,
146+
# which should fit RSA 4096 bit keys.
143147
conf set MBEDTLS_MPI_MAX_SIZE 512
144148

145149
# The following configurations are a needed for Mbed Crypto submodule.

0 commit comments

Comments
 (0)