{"id":2224483,"url":"http://patchwork.ozlabs.org/api/patches/2224483/?format=json","web_url":"http://patchwork.ozlabs.org/project/uboot/patch/20260417130204.49896-2-philippe.reynes@softathome.com/","project":{"id":18,"url":"http://patchwork.ozlabs.org/api/projects/18/?format=json","name":"U-Boot","link_name":"uboot","list_id":"u-boot.lists.denx.de","list_email":"u-boot@lists.denx.de","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260417130204.49896-2-philippe.reynes@softathome.com>","list_archive_url":null,"date":"2026-04-17T13:01:51","name":"[v4,01/14] mbedtls: enable support of ecc","commit_ref":null,"pull_url":null,"state":"superseded","archived":false,"hash":"e4986c7bb9744484a9a38ecb2d892360a8875112","submitter":{"id":74351,"url":"http://patchwork.ozlabs.org/api/people/74351/?format=json","name":"Philippe Reynes","email":"philippe.reynes@softathome.com"},"delegate":{"id":161313,"url":"http://patchwork.ozlabs.org/api/users/161313/?format=json","username":"raymo200915","first_name":"Raymond","last_name":"Mao","email":"raymondmaoca@gmail.com"},"mbox":"http://patchwork.ozlabs.org/project/uboot/patch/20260417130204.49896-2-philippe.reynes@softathome.com/mbox/","series":[{"id":500332,"url":"http://patchwork.ozlabs.org/api/series/500332/?format=json","web_url":"http://patchwork.ozlabs.org/project/uboot/list/?series=500332","date":"2026-04-17T13:02:04","name":"add software ecdsa support","version":4,"mbox":"http://patchwork.ozlabs.org/series/500332/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2224483/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2224483/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=softathome1.onmicrosoft.com header.i=@softathome1.onmicrosoft.com\n header.a=rsa-sha256 header.s=selector1-softathome1-onmicrosoft-com\n header.b=K4SfqWrT;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=2a01:238:438b:c500:173d:9f52:ddab:ee01; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)","phobos.denx.de;\n dmarc=none (p=none dis=none) header.from=softathome.com","phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de","phobos.denx.de;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=softathome1.onmicrosoft.com header.i=@softathome1.onmicrosoft.com\n header.b=\"K4SfqWrT\";\n\tdkim-atps=neutral","phobos.denx.de; dmarc=none (p=none dis=none)\n header.from=softathome.com","phobos.denx.de;\n spf=pass smtp.mailfrom=philippe.reynes@softathome.com"],"Received":["from phobos.denx.de (phobos.denx.de\n [IPv6:2a01:238:438b:c500:173d:9f52:ddab:ee01])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fxw6p72KQz1yCv\n\tfor ; Fri, 17 Apr 2026 23:03:30 +1000 (AEST)","from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id 6698784262;\n\tFri, 17 Apr 2026 15:02:20 +0200 (CEST)","by phobos.denx.de (Postfix, from userid 109)\n id F37B084372; Fri, 17 Apr 2026 15:02:18 +0200 (CEST)","from PA5P264CU001.outbound.protection.outlook.com\n (mail-francecentralazlp170100000.outbound.protection.outlook.com\n [IPv6:2a01:111:f403:c20a::])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id BFD20842D2\n for ; Fri, 17 Apr 2026 15:02:14 +0200 (CEST)","from MR1P264CA0032.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:2f::19)\n by MR0P264MB5032.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:4b::5) with\n Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9818.25; Fri, 17 Apr\n 2026 13:02:10 +0000","from MR1PEPF00000D57.FRAP264.PROD.OUTLOOK.COM\n (2603:10a6:501:2f:cafe::5) by MR1P264CA0032.outlook.office365.com\n (2603:10a6:501:2f::19) with Microsoft SMTP Server (version=TLS1_3,\n cipher=TLS_AES_256_GCM_SHA384) id 15.20.9769.52 via Frontend Transport; Fri,\n 17 Apr 2026 13:02:10 +0000","from proxy.softathome.com (149.6.166.170) by\n MR1PEPF00000D57.mail.protection.outlook.com (10.167.241.4) with Microsoft\n SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9769.17\n via Frontend Transport; Fri, 17 Apr 2026 13:02:09 +0000","from sah1lpt726.home (unknown [192.168.72.39])\n by proxy.softathome.com (Postfix) with ESMTPSA id 9965520AC1;\n Fri, 17 Apr 2026 15:02:09 +0200 (CEST)"],"X-Spam-Checker-Version":"SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de","X-Spam-Level":"","X-Spam-Status":"No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,RCVD_IN_DNSWL_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham\n autolearn_force=no version=3.4.2","ARC-Seal":"i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;\n b=nI2LEY+LyID3p0Wdehz9whbiGS7N1JpotGa0kUFnP3nt3gUsrConx6sEjX9xvcUTj5QofmOhOQbghW3tAg8myr2dRXCa66Yr8xJrb32Qlldg2jCDadvaxsTBMCVf3tdq6/j25nBGTRI+JTTs+eD2wQFUDo9gPuRCR1+8GyHECxFlC/nPI+V5aimSLrUvzew9yR/YQPqsqT+xfEy3rlFD75YOyCKOMbmUm0+BEivESy6gKXL1b1FQQ6cikbEMaZon1wGzYPjcRvSas995w+lpq3i+E5DndPufM1gWbuMnJUW6N2ihyCHy91df8HUv2IdhK19AcZj3wNwKvCykT5obcg==","ARC-Message-Signature":"i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;\n s=arcselector10001;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;\n bh=xHiwgIDhZsQh8CZIab8OGibVBtqLbCQ2Eh5ZrcjTAS4=;\n b=rmpMuBNJ5oFbl++5on6jqgNy0O+JW29VkSVWw0FfCbXeltBQ/LjZn1hC6+jVeoLtkHheoi2vOqgqCUysAwA22a3OIDgSn3JePP4jxM9yn3YJJgsc9usJJJdzt7YpjDcbyqWXpAqkhkaoLUUC0pwA6rn2l7cCj9+ycSyprNXDJGuYXmDL+5jtV5GATY82W2+p8ipRNIGT8+af67akh07dpreeNNlbSJ4Z3j8DrMaY2NbkD63hnPmI5UcNJGicnb2sOhPpVBlGUroCVISOFww11P9OfrA0wiOGvhHXI7OrSvYfYo4jEAJYWZZonePO0ZYkG0dYUIfZ/3IU32E+BR6zjA==","ARC-Authentication-Results":"i=1; mx.microsoft.com 1; spf=pass (sender ip is\n 149.6.166.170) smtp.rcpttodomain=canonical.com smtp.mailfrom=softathome.com;\n dmarc=bestguesspass action=none header.from=softathome.com; dkim=none\n (message not signed); arc=none (0)","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=softathome1.onmicrosoft.com; s=selector1-softathome1-onmicrosoft-com;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;\n bh=xHiwgIDhZsQh8CZIab8OGibVBtqLbCQ2Eh5ZrcjTAS4=;\n b=K4SfqWrTo0kOPPSBRpaBlEW54CPdOfau/0hgqCF42QJftXrFu4FUv9KOXZh8T323qRKkT/XoRrY93AS7TvnzPua/jd+eiqC+LNUQ0ZJ68aQRguFXDn2MgzG8JI4aKNUTywGp85noe+elDANKIBDIHLWWfcYLycgl8BWw4Q5t/JLeFF7rQKOBmFxgRzkVbeAEXFScS6FzOpf4NIDxJ7znMOWcDh/jaqnkDJApb6pdU4u+tIL2uNGvexz6YYqKMSqwUWkL4D1iThjhkdabAu5Y2URxxe6CLklvdIM06m8gun5ca0S3mwjy5F+iUY22TsJeRKq2lSz6wwZbkgWzJnnTvg==","X-MS-Exchange-Authentication-Results":"spf=pass (sender IP is 149.6.166.170)\n smtp.mailfrom=softathome.com; dkim=none (message not signed)\n header.d=none;dmarc=bestguesspass action=none header.from=softathome.com;","Received-SPF":"Pass (protection.outlook.com: domain of softathome.com\n designates 149.6.166.170 as permitted sender)\n receiver=protection.outlook.com; client-ip=149.6.166.170;\n helo=proxy.softathome.com; pr=C","From":"Philippe Reynes ","To":"marko.makela@iki.fi, jonny.green@keytechinc.com, raymondmaoca@gmail.com,\n trini@konsulko.com, simon.glass@canonical.com","Cc":"u-boot@lists.denx.de,\n\tPhilippe Reynes ","Subject":"[PATCH v4 01/14] mbedtls: enable support of ecc","Date":"Fri, 17 Apr 2026 15:01:51 +0200","Message-ID":"<20260417130204.49896-2-philippe.reynes@softathome.com>","X-Mailer":"git-send-email 2.43.0","In-Reply-To":"<20260417130204.49896-1-philippe.reynes@softathome.com>","References":"<20260417130204.49896-1-philippe.reynes@softathome.com>","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-EOPAttributedMessage":"0","X-MS-PublicTrafficType":"Email","X-MS-TrafficTypeDiagnostic":"MR1PEPF00000D57:EE_|MR0P264MB5032:EE_","Content-Type":"text/plain","X-MS-Office365-Filtering-Correlation-Id":"9c53c674-987c-43a6-2cfe-08de9c81892a","X-MS-Exchange-SenderADCheck":"1","X-MS-Exchange-AntiSpam-Relay":"0","X-Microsoft-Antispam":"BCL:0;\n ARA:13230040|82310400026|36860700016|376014|1800799024|18002099003|22082099003|56012099003;","X-Microsoft-Antispam-Message-Info":"\n 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","X-Forefront-Antispam-Report":"CIP:149.6.166.170; CTRY:FR; LANG:en; SCL:1; SRV:;\n IPV:CAL; SFV:NSPM; H:proxy.softathome.com; PTR:InfoDomainNonexistent;\n CAT:NONE;\n SFS:(13230040)(82310400026)(36860700016)(376014)(1800799024)(18002099003)(22082099003)(56012099003);\n DIR:OUT; SFP:1101;","X-MS-Exchange-AntiSpam-MessageData-ChunkCount":"1","X-MS-Exchange-AntiSpam-MessageData-0":"\n GMFahesIvEeNaKKafPHGliNqLVgjuGSb4eoOvnd3yssmqMfc2oYmY/zS9mgngnkSIJODR7AwJgO9GV6pA9LbiVVtP2Ho/UhUIntQq4EIjQDQ9Vokn1z9IvJiIqF0/Itsi77YotiflOpcTDQwGPnjHKYa2vE+HCu4TiNSmPz9ld0HLAaCiaWcxZ4R7D3UflW0A/akcfGWJOoVwh1339taTZfNT/l811Rb02Qy+sU0xz24m0Sg4XvxXjTISHBZzfSTzHl0XfTPmqabOQqYfx+bL/eg87l+uDr0g9yhZnft0aaMn606Sz2b1XXRaV9BBVqV1JWRE/MpWNd4eS0Vi+/gKda5orf6gp9w/BnNCg3GTDeiOxsAgGll337NSTL/OOqy4Ag2TmypwPCfuCU3gsKJfawn1Geyo2DWA2bH5sSn0QI0MdJRqfrBC7lv9hfEoWz5","X-OriginatorOrg":"softathome.com","X-MS-Exchange-CrossTenant-OriginalArrivalTime":"17 Apr 2026 13:02:09.8476 (UTC)","X-MS-Exchange-CrossTenant-Network-Message-Id":"\n 9c53c674-987c-43a6-2cfe-08de9c81892a","X-MS-Exchange-CrossTenant-Id":"aa10e044-e405-4c10-8353-36b4d0cce511","X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp":"\n TenantId=aa10e044-e405-4c10-8353-36b4d0cce511; Ip=[149.6.166.170];\n Helo=[proxy.softathome.com]","X-MS-Exchange-CrossTenant-AuthSource":"MR1PEPF00000D57.FRAP264.PROD.OUTLOOK.COM","X-MS-Exchange-CrossTenant-AuthAs":"Anonymous","X-MS-Exchange-CrossTenant-FromEntityHeader":"HybridOnPrem","X-MS-Exchange-Transport-CrossTenantHeadersStamped":"MR0P264MB5032","X-BeenThere":"u-boot@lists.denx.de","X-Mailman-Version":"2.1.39","Precedence":"list","List-Id":"U-Boot discussion ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"u-boot-bounces@lists.denx.de","Sender":"\"U-Boot\" ","X-Virus-Scanned":"clamav-milter 0.103.8 at phobos.denx.de","X-Virus-Status":"Clean"},"content":"Enables the support of ecc in mbedtls.\n\nSigned-off-by: Philippe Reynes \n---\nv2:\n- move ecdsa to MBEDTLS_LIB_X509\n- enhance depencendies\nv3:\n- do not use _MBEDTLS in mbedtls_def_config.h\n\nv4:\n- do not select ECDSA on some configs\n- remove duplicated MBEDTLS_ECP_DP_SECP256K1_ENABLED\n- change dependencies for ECDSA configs\n\n configs/sandbox_defconfig | 1 +\n lib/ecdsa/Kconfig | 1 +\n lib/mbedtls/Kconfig | 14 ++++++++++++++\n lib/mbedtls/Makefile | 17 +++++++++--------\n lib/mbedtls/mbedtls_def_config.h | 17 +++++++++++++++++\n 5 files changed, 42 insertions(+), 8 deletions(-)","diff":"diff --git a/configs/sandbox_defconfig b/configs/sandbox_defconfig\nindex f26295103f1..15831dd7e04 100644\n--- a/configs/sandbox_defconfig\n+++ b/configs/sandbox_defconfig\n@@ -391,6 +391,7 @@ CONFIG_PANIC_HANG=y\n CONFIG_CMD_DHRYSTONE=y\n CONFIG_MBEDTLS_LIB=y\n CONFIG_HKDF_MBEDTLS=y\n+CONFIG_ECDSA_MBEDTLS=y\n CONFIG_ECDSA=y\n CONFIG_ECDSA_VERIFY=y\n CONFIG_RSASSA_PSS=y\ndiff --git a/lib/ecdsa/Kconfig b/lib/ecdsa/Kconfig\nindex ca13b6bfa1f..dac8bcf23dd 100644\n--- a/lib/ecdsa/Kconfig\n+++ b/lib/ecdsa/Kconfig\n@@ -1,6 +1,7 @@\n config ECDSA\n \tbool \"Enable ECDSA support\"\n \tdepends on DM\n+\tselect ASN1_DECODER\n \thelp\n \t This enables the ECDSA (elliptic curve signature) algorithm for FIT\n \t image verification in U-Boot. The ECDSA algorithm is implemented\ndiff --git a/lib/mbedtls/Kconfig b/lib/mbedtls/Kconfig\nindex 789721ee6cd..cfc47152fc5 100644\n--- a/lib/mbedtls/Kconfig\n+++ b/lib/mbedtls/Kconfig\n@@ -247,6 +247,10 @@ config MBEDTLS_LIB_X509\n \n if MBEDTLS_LIB_X509\n \n+config BIGNUM_MBEDTLS\n+\tbool\n+\tdefault n\n+\n config ASN1_DECODER_MBEDTLS\n \tbool \"ASN1 decoder with MbedTLS certificate library\"\n \tdepends on MBEDTLS_LIB_X509 && ASN1_DECODER\n@@ -264,6 +268,7 @@ config RSA_PUBLIC_KEY_PARSER_MBEDTLS\n \tbool \"RSA public key parser with MbedTLS certificate library\"\n \tdepends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS\n \tselect ASN1_DECODER_MBEDTLS\n+\tselect BIGNUM_MBEDTLS\n \thelp\n \t This option chooses MbedTLS certificate library for RSA public key\n \t parser.\n@@ -292,6 +297,15 @@ config MSCODE_PARSER_MBEDTLS\n \t This option chooses MbedTLS certificate library for MS authenticode\n \t parser.\n \n+config ECDSA_MBEDTLS\n+\tbool \"Enable ECDSA support with MbedTLS certificate library\"\n+\tdepends on MBEDTLS_LIB_X509 && ECDSA_VERIFY\n+\tselect ASN1_DECODER_MBEDTLS\n+\tselect BIGNUM_MBEDTLS\n+\thelp\n+\t This option enables support of ECDSA with the MbedTLS certificate\n+\t library.\n+\n endif # MBEDTLS_LIB_X509\n \n config MBEDTLS_LIB_TLS\ndiff --git a/lib/mbedtls/Makefile b/lib/mbedtls/Makefile\nindex c5b445bd85c..aa1ca6d196b 100644\n--- a/lib/mbedtls/Makefile\n+++ b/lib/mbedtls/Makefile\n@@ -38,14 +38,20 @@ mbedtls_lib_crypto-$(CONFIG_$(PHASE_)HKDF_MBEDTLS) += \\\n \n # MbedTLS X509 library\n obj-$(CONFIG_$(XPL_)MBEDTLS_LIB_X509) += mbedtls_lib_x509.o\n-mbedtls_lib_x509-y := $(MBEDTLS_LIB_DIR)/x509.o\n+mbedtls_lib_x509-y := $(MBEDTLS_LIB_DIR)/x509.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecdsa.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecp.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecp_curves.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecp_curves_new.o \\\n+\t$(MBEDTLS_LIB_DIR)/pk_ecc.o\n+mbedtls_lib_x509-$(CONFIG_$(PHASE_)BIGNUM_MBEDTLS) += \\\n+\t$(MBEDTLS_LIB_DIR)/bignum.o \\\n+\t$(MBEDTLS_LIB_DIR)/bignum_core.o\n mbedtls_lib_x509-$(CONFIG_$(PHASE_)ASN1_DECODER_MBEDTLS) += \\\n \t$(MBEDTLS_LIB_DIR)/asn1parse.o \\\n \t$(MBEDTLS_LIB_DIR)/asn1write.o \\\n \t$(MBEDTLS_LIB_DIR)/oid.o\n mbedtls_lib_x509-$(CONFIG_$(PHASE_)RSA_PUBLIC_KEY_PARSER_MBEDTLS) += \\\n-\t$(MBEDTLS_LIB_DIR)/bignum.o \\\n-\t$(MBEDTLS_LIB_DIR)/bignum_core.o \\\n \t$(MBEDTLS_LIB_DIR)/rsa.o \\\n \t$(MBEDTLS_LIB_DIR)/rsa_alt_helpers.o\n mbedtls_lib_x509-$(CONFIG_$(PHASE_)ASYMMETRIC_PUBLIC_KEY_MBEDTLS) += \\\n@@ -64,7 +70,6 @@ mbedtls_lib_tls-y := \\\n \t$(MBEDTLS_LIB_DIR)/mps_reader.o \\\n \t$(MBEDTLS_LIB_DIR)/mps_trace.o \\\n \t$(MBEDTLS_LIB_DIR)/net_sockets.o \\\n-\t$(MBEDTLS_LIB_DIR)/pk_ecc.o \\\n \t$(MBEDTLS_LIB_DIR)/ssl_cache.o \\\n \t$(MBEDTLS_LIB_DIR)/ssl_ciphersuites.o \\\n \t$(MBEDTLS_LIB_DIR)/ssl_client.o \\\n@@ -82,8 +87,4 @@ mbedtls_lib_tls-y := \\\n \t$(MBEDTLS_LIB_DIR)/cipher.o \\\n \t$(MBEDTLS_LIB_DIR)/cipher_wrap.o \\\n \t$(MBEDTLS_LIB_DIR)/ecdh.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecdsa.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecp.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecp_curves.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecp_curves_new.o \\\n \t$(MBEDTLS_LIB_DIR)/gcm.o \\\ndiff --git a/lib/mbedtls/mbedtls_def_config.h b/lib/mbedtls/mbedtls_def_config.h\nindex dda3f4dd6e4..239215ecf85 100644\n--- a/lib/mbedtls/mbedtls_def_config.h\n+++ b/lib/mbedtls/mbedtls_def_config.h\n@@ -89,6 +89,23 @@\n #define MBEDTLS_ASN1_WRITE_C\n #endif\n \n+#if CONFIG_IS_ENABLED(ECDSA)\n+#define MBEDTLS_ECDSA_C\n+#define MBEDTLS_ECP_C\n+#define MBEDTLS_BIGNUM_C\n+#define MBEDTLS_ECP_DP_SECP192R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP224R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP256R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP384R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP521R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP192K1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP224K1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP256K1_ENABLED\n+#define MBEDTLS_ECP_DP_BP256R1_ENABLED\n+#define MBEDTLS_ECP_DP_BP384R1_ENABLED\n+#define MBEDTLS_ECP_DP_BP512R1_ENABLED\n+#endif\n+\n #endif /* #if CONFIG_IS_ENABLED(MBEDTLS_LIB_X509) */\n \n #if CONFIG_IS_ENABLED(MBEDTLS_LIB_TLS)\n","prefixes":["v4","01/14"]}