mbedtls/ChangeLog.d/psa-always-on.txt
Janos Follath 0aac2e5f37 Fix broken reference in ChangeLog
Signed-off-by: Janos Follath <janos.follath@arm.com>
2024-12-18 19:23:11 +00:00

11 lines
585 B
Plaintext

Default behavior changes
* The PK, X.509, PKCS7 and TLS modules now always use the PSA subsystem
to perform cryptographic operations, with a few exceptions documented
in docs/architecture/psa-migration/psa-limitations.md. This
corresponds to the behavior of Mbed TLS 3.x when
MBEDTLS_USE_PSA_CRYPTO is enabled. In effect, MBEDTLS_USE_PSA_CRYPTO
is now always enabled.
* psa_crypto_init() must be called before performing any cryptographic
operation, including indirect requests such as parsing a key or
certificate or starting a TLS handshake.