Roadmap

Note that the quarter when a feature is expected to be completed is based on very rough estimates of the effort involved and therefore can change. Items to be delivered beyond the current quarter may be pushed back, or change in scope.

If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Mbed TLS or PSA Crypto mailing lists.

2024 CQ2 (In Development)

• [Mbed TLS] Mbed TLS4.0 Preparations & Planning

• [Mbed TLS] Bignum Improvements

• [PSA Crypto] PBKDF2 PSA SW Implementation

• [PSA Crypto] PSA Client-Server Testing

2024 CQ3

• [Mbed TLS] Mbed TLS4.0 Preparations

• [PSA Crypto] PSA Crypto repository becomes live

• [Mbed TLS] Mbed TLS uses PSA Crypto repository

• [PSA Crypto] SPAKE2+ Implementation

• [PSA Crypto] [PBKDF2 PSA SW Implementation]

2024 CQ4

• [Mbed TLS] Mbed TLS4.0 Preparations

• [PSA Crypto] PSA driver – Handle Opaque Persistent Key in Secure Element - Implementation

Future

• [Mbed TLS] Mbed TLS4.0 Release

• PSA Crypto restartable sign enhancements

• Multi-threading perf. improvements, testing

• [PSA Crypto] Memory Optimizations (code size)

• [Mbed TLS] PSA Crypto 1.1 compliance

• [PSA Crypto] Extended PSA Crypto v1.0 spec compliance

• [Mbed TLS] TLS1.3 Continued

• [PSA Crypto]PSA Secure Element, Crypto Accelerator Support Enhancements

• Raw Public Key Mode

• EdDSA

• [PSA Crypto] SHA3

• [Mbed TLS]Performance Optimization - ECP and Bignum

• Publish Threat Model​

• [PSA Crypto] Clean up and Stabilization

• DTLS1.3

• [Mbed TLS] PKCS7 Generation

• Post Quantum Crypto

Completed

• [Mbed TLS] 3.6 LTS release

• [Mbed TLS] TLS1.3 early data

• [Mbed TLS] TLS1.3 misc

• [PSA Crypto] PSA Crypto Thread safe

• [Mbed TLS] Code size optimisation (driver only build - Cipher and AEAD)

• [Mbed TLS] Code size optimisation (driver only build - ECC)

• [PSA Crypto] Memory Optimizations (code size)

• [Mbed TLS] Mbed TLS3.5 Release

• [PSA Crypto] Publish PSA Crypto prototype repository

• [Mbed TLS] Code size optimisation (driver only build - hashes inc. HMAC)

• [Mbed TLS] PKCS7 Parser

• [PSA Crypto] PSA Crypto restartable sign message

• [PSA Crypto] ECJ-PAKE PSA Implementation

• [Mbed TLS] Connection ID DTLS1.2

• [Mbed TLS] Use PSA: code size optimisation via PSA_CRYPTO_CONFIG - part1: symmetric

• [Mbed TLS] TLS/X.509​ - Use PSA Long term secret isolation

• [Mbed TLS] TLS1.3 PSK

• [Mbed TLS] Mbed TLS3.2

• [Mbed TLS] TLS1.3 server side

• [Mbed TLS] TLS1.3 MVP

• [Mbed TLS] TLS/X.509​ - Use PSA Crypto APIs Fully​ - Phase1

• [Mbed TLS] ​SHA256/512 - Neon Optimization

• [Mbed TLS] New 2.x LTS

• [PSA Crypto] Support Missing PSA Crypto v1.0 APIs supported in MbedCrypto

• [PSA Crypto]​ M-AEAD Implementation

• [PSA Crypto]​ EdDSA API Design

• [PSA Crypto]​ PBKDF2 API Design

• [PSA Crypto]​ ECJPAKE API Design ​

• DTLS-SRTP

• Lucky13 Security Improvements

• [PSA Crypto] PSA Crypto API implementation v1.0 Specification - Phase1

• Unified PSA Driver Interface - API Design and initial support

• [PSA Crypto] PSA driver – Handle Opaque Persistent Key in Secure Element - Design

• [Mbed TLS] Use PSA: misc. gaps

• [Bignum] ECP Curves field reduction - NIST