use orig. kconfig

hack does not work with IDF 5.3 to enable only a few ciphers to support WPA3
tasmota · Sep 6, 2024 · a01d38d · a01d38d
1 parent e3b7fae
commit a01d38d
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/components/esp_wifi/Kconfig b/components/esp_wifi/Kconfig
@@ -299,7 +299,7 @@ menu "Wi-Fi"
         config ESP_WIFI_ENABLE_WPA3_SAE
             bool "Enable WPA3-Personal"
             default y
-            depends on ESP_WIFI_MBEDTLS_CRYPTO
+            select ESP_WIFI_MBEDTLS_CRYPTO
             help
                 Select this option to allow the device to establish a WPA3-Personal connection with eligible AP's.
                 PMF (Protected Management Frames) is a prerequisite feature for a WPA3 connection, it needs to be
@@ -491,9 +491,16 @@ menu "Wi-Fi"
             select MBEDTLS_ECP_C
             select MBEDTLS_ECDH_C
             select MBEDTLS_ECDSA_C
-            select MBEDTLS_TLS_ENABLED
+            select MBEDTLS_CMAC_C
+            select MBEDTLS_ECP_DP_SECP256R1_ENABLED
             help
-                Select this option to use MbedTLS crypto APIs which utilize hardware acceleration.
+                Select this option to enable the use of MbedTLS crypto APIs.
+                The internal crypto support within the supplicant is limited
+                and may not suffice for all new security features, including WPA3.
+
+                It is recommended to always keep this option enabled. Additionally,
+                note that MbedTLS can leverage hardware acceleration if available,
+                resulting in significantly faster cryptographic operations.
 
         if ESP_WIFI_MBEDTLS_CRYPTO
             config ESP_WIFI_MBEDTLS_TLS_CLIENT
@@ -534,6 +541,7 @@ menu "Wi-Fi"
         config ESP_WIFI_SUITE_B_192
             bool "Enable NSA suite B support with 192 bit key"
             default n
+            depends on SOC_WIFI_GCMP_SUPPORT
             select ESP_WIFI_GCMP_SUPPORT
             select ESP_WIFI_GMAC_SUPPORT
             help