Page MenuHomePhabricator

Plans for Mbed TLS 3.0
Updated 75 Days AgoPublic

This page describes plans for Mbed TLS 3.0 in some technical details. The plans are discussed on the mailing list in a series of threads, and this page's goal is to summarize and consolidate the results in one place.

General goals

Mailing-list thread. Target for release: CY20Q3.

  1. Clean up the code by removing old things.
  2. Improve existing APIs, behaviours, and defaults
  3. Reduce the surface of the public API
  4. Prepare the migration to PSA Crypto
List of accepted changes

(This section is populated when specific changes have been discussed on the mailing list and a consensus is reached on including them.)

Drop old TLS options from the code base entirely

Mailing-list thread.

  • Drop support for parsing SSLv2 ClientHello (MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO).
  • Drop support for SSLv3 (MBEDTLS_SSL_PROTO_SSL3).
  • Drop support for compatibility with our own previous buggy implementation of truncated HMAC (MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT).
  • Drop support for TLS record-level compression (MBEDTLS_ZLIB_SUPPORT).
  • Drop RC4 ciphersuites.
  • Drop the single-DES ciphersuites.
  • Support for SSL record hardware acceleration (MBEDTLS_SSL_HW_RECORD_ACCEL).
Drop some modules from the code base entirely
List of changes under discussion

(This section is populated as specific changes are discussed on the mailing list.)

Drop some modules from the code base entirely
Move some modules (partially) out of the library
  • Move certs.c out of the library - ml-thread.
  • Move timing.c out of the library - ml-thread.
  • Move net_sockets.c out of the library - ml-thread.
List of rejected changes

This section will be populated as specific changes are discussed on the mailing list and a consensus is reached on excluding them.

Last Author
mpg
Last Edited
Apr 21 2020, 10:17 AM

Event Timeline

mpg created this object.Apr 7 2020, 8:17 AM
mpg edited the content of this document. (Show Details)Apr 7 2020, 8:47 AM
mpg edited the content of this document. (Show Details)Apr 7 2020, 8:54 AM
mpg edited the content of this document. (Show Details)Apr 7 2020, 10:08 AM
mpg edited the content of this document. (Show Details)Apr 8 2020, 10:47 AM
mpg edited the content of this document. (Show Details)Apr 16 2020, 9:57 AM
mpg edited the content of this document. (Show Details)Apr 16 2020, 10:11 AM
mpg edited the content of this document. (Show Details)Apr 16 2020, 10:18 AM
mpg edited the content of this document. (Show Details)Apr 21 2020, 10:17 AM