mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-02-06 03:40:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Document TLS 1.3 MVP limitation regarding MBEDTLS_USE_PSA_CRYPTO

Browse Source 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron 2022-02-11 15:08:48 +01:00
parent bebeae9428
commit 4279bac965
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/architecture/tls13-support.md
View File

@ -126,8 +126,11 @@ MVP definition
The TLS 1.3 MVP is compatible with all TLS 1.2 configuration options in the The TLS 1.3 MVP is compatible with all TLS 1.2 configuration options in the
sense that when enabling the TLS 1.3 MVP in the library there is no need to sense that when enabling the TLS 1.3 MVP in the library there is no need to
modify the configuration for TLS 1.2. Mbed TLS SSL/TLS related features are modify the configuration for TLS 1.2. The MBEDTLS_USE_PSA_CRYPTO configuration
not supported or not applicable to the TLS 1.3 MVP: option is an exception though, the TLS 1.3 MVP is not compatible with it.
Mbed TLS SSL/TLS related features are not supported or not applicable to the
TLS 1.3 MVP:
| Mbed TLS configuration option | Support | | Mbed TLS configuration option | Support |
| ---------------------------------------- | ------- | | ---------------------------------------- | ------- |
@ -161,7 +164,7 @@ MVP definition
| MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED | n/a | | MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED | n/a |
| MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED | n/a | | MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED | n/a |
| | | | | |
| MBEDTLS_USE_PSA_CRYPTO | no | | MBEDTLS_USE_PSA_CRYPTO | no (3) |
(1) Some support has already been upstreamed but it is incomplete. (1) Some support has already been upstreamed but it is incomplete.
(2) Key exchange configuration options for TLS 1.3 will likely to be (2) Key exchange configuration options for TLS 1.3 will likely to be