Roadmap

Note that the quarter when a feature is expected to be completed is based on very rough estimates of the effort involved and therefore can change. Items to be delivered beyond the current quarter may be pushed back, or change in scope.

If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Mbed TLS or PSA Crypto mailing lists.

2025 CQ4 (In Development)

  • TF-PSA-Crypto CI Optimization

  • TF-PSA-Crypto 1.0 Follow up, Fixes

  • ML-DSA Investigation

2026 CQ1

  • Mbed TLS 4.1, TF-PSA-Crypto 1.1 LTS release

  • Mbed TLS 4.x API Consolidation Investigation

  • ML-DSA Prototype

  • SPAKE2+ Implementation

2026 CQ2

  • Memory Optimizations (code size)

  • ML-DSA - Initial support

  • Mbed TLS 4.x API Consolidation

  • PSA driver - Handle Opaque Persistent Key in Secure Element - Implementation

Future

  • ML-KEM Support

  • Memory Optimizations (code size)

  • MbedTLS, TF-PSA-Crypto - Next LTS release

  • Bignum Improvements

  • PSA Client-Server Testing

  • PSA Crypto restartable sign enhancements

  • Multi-threading perf. improvements, testing

  • PSA Crypto 1.2 compliance

  • PSA Secure Element, Crypto Accelerator Support Enhancements

  • Raw Public Key Mode

  • EdDSA

  • Performance Optimization - ECP and Bignum

Completed

  • [PSA Crypto] SHA3

  • [PSA Crypto] PSA Crypto 1.1 compliance

  • [Mbed TLS] Mbed TLS 4.0, TF-PSA-Crypto 1.0 release

  • [Mbed TLS4.0] Remove TLS cipher suites

  • [PSA Crypto] TF-PSACrypto repository becomes live

  • [Mbed TLS] Mbed TLS uses PSA Crypto repository

  • [Mbed TLS] [Mbed TLS 3.6.1, 3.6.2, 3.6.3]

  • [PSA Crypto] [PBKDF2 PSA SW Implementation]

  • [Mbed TLS] [3.6 LTS release]

  • [Mbed TLS] [TLS1.3 early data]

  • [Mbed TLS] [TLS1.3 misc]

  • [PSA Crypto] [PSA Crypto Thread safe]

  • [Mbed TLS] [Code size optimisation (driver only build - Cipher and AEAD)]

  • [Mbed TLS] [Code size optimisation (driver only build - ECC)]

  • [PSA Crypto] [Memory Optimizations (code size)]

  • [Mbed TLS] [Mbed TLS 3.5 Release]

  • [PSA Crypto] [Publish PSA Crypto prototype repository]

  • [Mbed TLS] [Code size optimisation (driver only build - hashes inc. HMAC)]

  • [Mbed TLS] [PKCS7 Parser]

  • [PSA Crypto] [PSA Crypto restartable sign message]

  • [PSA Crypto] [ECJ-PAKE PSA Implementation]

  • [Mbed TLS] [Connection ID DTLS 1.2]

  • [Mbed TLS] [Use PSA: code size optimisation via PSA_CRYPTO_CONFIG - part1: symmetric]

  • [Mbed TLS] [TLS/X.509 - Use PSA Long term secret isolation]

  • [Mbed TLS] [TLS1.3 PSK]

  • [Mbed TLS] [Mbed TLS3.2]

  • [Mbed TLS] [TLS1.3 server side]

  • [Mbed TLS] [TLS1.3 MVP]

  • [Mbed TLS] [TLS/X.509 - Use PSA Crypto APIs Fully - Phase1]

  • [Mbed TLS] [SHA256/512 - Neon Optimization]

  • [Mbed TLS] [New 2.x LTS]

  • [PSA Crypto] [Support Missing PSA Crypto v1.0 APIs supported in MbedCrypto]

  • [PSA Crypto] M-AEAD Implementation

  • [PSA Crypto] EdDSA API Design

  • [PSA Crypto] PBKDF2 API Design

  • [PSA Crypto] ECJPAKE API Design

  • DTLS-SRTP

  • Lucky13 Security Improvements

  • [PSA Crypto] [PSA Crypto API implementation v1.0 Specification - Phase1]

  • [Unified PSA Driver Interface]- API Design and initial support

  • [PSA Crypto] PSA driver - Handle Opaque Persistent Key in Secure Element - [Design]

  • [Mbed TLS] [Use PSA: misc. gaps]

  • [Bignum] [ECP Curves field reduction - NIST]