Roadmap

Updated 87 Days AgoPublic

Actions

Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ3'22 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth.

If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Mbed TLS or PSA Crypto mailing lists

Completed

• Merge Mbed Crypto repository into Mbed TLS. Mbed Crypto still available and under active development in Mbed TLS repository
• Unified PSA Driver Interface - API Design and initial support
• [PSA Crypto] PSA Crypto API implementation v1.0 Specification - Phase1
• Lucky13 Security Improvements
• DTLS-SRTP
• [PSA Crypto]​ ECJPAKE API Design ​
• [PSA Crypto]​ PBKDF2 API Design
• [PSA Crypto]​ EdDSA API Design
• [PSA Crypto]​ M-AEAD Implementation
• [PSA Crypto] Support Missing PSA Crypto v1.0 APIs supported in MbedCrypto
• [Mbed TLS] New 2.x LTS
• [Mbed TLS] ​SHA256/512 - Neon Optimization
• [Mbed TLS] Open CI - Initial
• [Mbed TLS] TLS/X.509​ - Use PSA Crypto APIs Fully​ - Phase1
• [Mbed TLS] TLS1.3 MVP
• [Mbed TLS] TLS1.3 server side

2022 CQ3 (In Development)

• [Mbed TLS] Mbed TLS3.2
• [Mbed TLS] TLS1.3 PSK
• [Mbed TLS] TLS/X.509​ - Use PSA Long term secret isolation
• [Mbed TLS] Use PSA: code size optimisation via PSA_CRYPTO_CONFIG - part 1: symmetric
• [Mbed TLS] PKCS7 PR Review
• [Mbed TLS] ECJ-PAKE PSA Implementation
• [Mbed TLS] Open CI Enhancements

2022 CQ4

• [Mbed TLS] Performance Optimization - ECP and Bignum
• [Mbed TLS] PSA Crypto restartable sign message
• [PSA Crypto] Extended PSA Crypto v1.0 spec compliance
• [Mbed TLS] Use PSA: code size optimisation via PSA_CRYPTO_CONFIG - part 2: ECC
• [Mbed TLS] Use PSA: misc. gaps
• [Mbed TLS] PSA Crypto 1.1 compliance
• [Mbed TLS] |TLS1.3 Continued

2023 CQ1

• [PSA Crypto] PSA Secure Element, Crypto Accelerator Support Enhancements
• Raw Public Key Mode
• EdDSA
• DTLS1.3

Future

• Publish Threat Model
• [PSA Crypto] Separate repository from Mbed TLS
• [Mbed TLS] Mbed TLS4.0 - Remove legacy cipher APIs​
• [PSA Crypto] Clean up and Stabilization
• [Mbed TLS] Memory Optimization
• Post Quantum Crypto