Move all SSL constants into PROGMEM, free 1.2KB (esp8266#6162)

Rewrite all the integer math operations with const input parameters to use PROGMEM properly (pgm_read_xx or memcpy_P), and move all the EC order and generators and SHA OIDs to PROGMEM. This frees around 1.2KB of heap for any SSL applications. Also delete unneeded objects from the bearssl.a library to shrink the GIT repo size.
wldxpc · Jun 6, 2019 · 6bfb1ba · 6bfb1ba
1 parent 6722d1d
commit 6bfb1ba
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 2 deletions.
diff --git a/tools/sdk/include/bearssl/bearssl_git.h b/tools/sdk/include/bearssl/bearssl_git.h
@@ -1,2 +1,2 @@
 // Do not edit -- Automatically generated by tools/sdk/ssl/bearssl/Makefile
-#define BEARSSL_GIT 6b9587f
+#define BEARSSL_GIT 0d7d5e2
diff --git a/tools/sdk/lib/libbearssl.a b/tools/sdk/lib/libbearssl.a
diff --git a/tools/sdk/ssl/Makefile b/tools/sdk/ssl/Makefile
@@ -7,6 +7,7 @@ all T0 clean: bearssl/README.txt
 
 install: all version-header
 	cp bearssl/esp8266/libbearssl.a ../lib/.
+	ar d ../lib/libbearssl.a `ar t ../lib/libbearssl.a | egrep 'i31|i32|x86|sse|pwr8|i62|m31|m32|m62|m64|ct64|ctmul64'` # Remove unneeded objects
 	cp bearssl/inc/bearssl*.h ../include/bearssl/.
 
 bearssl/README.txt:

diff --git a/tools/sdk/ssl/bearssl b/tools/sdk/ssl/bearssl
+5 −5		src/ec/ec_c25519_i15.c
+5 −5		src/ec/ec_c25519_m15.c
+2 −2		src/ec/ec_curve25519.c
+13 −13		src/ec/ec_prime_i15.c
+2 −2		src/ec/ec_secp256r1.c
+2 −2		src/ec/ec_secp384r1.c
+2 −2		src/ec/ec_secp521r1.c
+1 −1		src/ec/ecdsa_i15_vrfy_raw.c
+1 −1		src/int/i15_add.c
+4 −4		src/int/i15_decmod.c
+1 −1		src/int/i15_decode.c
+2 −2		src/int/i15_decred.c
+2 −2		src/int/i15_encode.c
+2 −2		src/int/i15_fmont.c
+2 −2		src/int/i15_iszero.c
+8 −8		src/int/i15_moddiv.c
+3 −3		src/int/i15_modpow.c
+5 −5		src/int/i15_modpow2.c
+15 −15		src/int/i15_montmul.c
+6 −6		src/int/i15_mulacc.c
+5 −5		src/int/i15_muladd.c
+5 −5		src/int/i15_reduce.c
+1 −1		src/int/i15_sub.c
+1 −1		src/int/i15_tmont.c
+8 −6		src/ssl/ssl_ccert_single_rsa.c
+2 −2		src/ssl/ssl_hs_client.c
+2 −2		src/ssl/ssl_hs_client.t0
+1 −1		src/ssl/ssl_hs_server.c
+1 −1		src/ssl/ssl_hs_server.t0
+8 −6		src/ssl/ssl_scert_single_rsa.c