dropbear: enable curve25519 support by default, increases compressed binary size...
[15.05/openwrt.git] / package / network / services / dropbear / Config.in
1 menu "Configuration"
2         depends on PACKAGE_dropbear
3
4 config DROPBEAR_CURVE25519
5         bool "Curve25519 support"
6         default y
7         help
8                 This enables the following key exchange algorithm:
9                   curve25519-sha256@libssh.org
10
11                 Increases binary size by about 13 kB uncompressed (MIPS).
12
13 config DROPBEAR_ECC
14         bool "Elliptic curve cryptography (ECC)"
15         default n
16         help
17                 Enables elliptic curve cryptography (ECC) support in key exchange and public key
18                 authentication.
19
20                 Key exchange algorithms:
21                   ecdh-sha2-nistp256
22                   ecdh-sha2-nistp384
23                   ecdh-sha2-nistp521
24
25                 Public key algorithms:
26                   ecdsa-sha2-nistp256
27                   ecdsa-sha2-nistp384
28                   ecdsa-sha2-nistp521
29
30                 Does not generate ECC host keys by default (ECC key exchange will not be used,
31                 only ECC public key auth).
32
33                 Increases binary size by about 23 kB (MIPS).
34
35 endmenu