Roadmap

Note that the quarter when a feature is expected to be completed is based on very rough estimates of the effort involved and therefore can change. Items to be delivered beyond the current quarter may be pushed back, or change in scope.

If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Mbed TLS or PSA Crypto mailing lists.

2023 CQ2 (In Development)

• [Mbed TLS] Code size optimisation (driver only build - ECC - Initial)

• [PSA Crypto] Memory Optimizations (code size) - Phase1

• [PSA Crypto] PSA driver – Handle Opaque Persistent Key in Secure Element - Investigation

• [Bignum] ECP Curves field reduction - NIST

• [Mbed TLS] Use PSA: misc. gaps

• [PSA Crypto] PBKDF2 PSA SW Implementation

2023 CQ3

• [Mbed TLS] Code size optimisation (driver only build - ECC)

• [Mbed TLS] TLS1.3 early data

• [PSA Crypto] Memory Optimizations (code size)

• PAKE API investigation for SPAKE2+

• [PSA Crypto] PBKDF2 PSA Driver Implementation

2023 CQ4

• [Mbed TLS] Code size optimisation (driver only build - Cipher and AEAD)

• [PSA Crypto] PSA driver – Handle Opaque Persistent Key in Secure Element - Implementation

• [PSA Crypto] Memory Optimizations (code size)

• [PSA Crypto] Thread safety

Future

• [PSA Crypto] Separate repository from Mbed TLS

• [Mbed TLS] Mbed TLS4.0 - Remove legacy cipher APIs*

• [Mbed TLS] PSA Crypto 1.1 compliance

• [PSA Crypto] Extended PSA Crypto v1.0 spec compliance

• [Mbed TLS] TLS1.3 Continued

• [PSA Crypto]PSA Secure Element, Crypto Accelerator Support Enhancements

• Raw Public Key Mode

• EdDSA

• [PSA Crypto] SHA3

• [Mbed TLS]Performance Optimization - ECP and Bignum

• Publish Threat Model​

• [PSA Crypto] Clean up and Stabilization

• DTLS1.3

• [Mbed TLS] PKCS7 Generation

• Post Quantum Crypto

Completed

• [Mbed TLS] Code size optimisation (driver only build - hashes inc. HMAC)

• [Mbed TLS] PKCS7 Parser

• [PSA Crypto] PSA Crypto restartable sign message

• [PSA Crypto] ECJ-PAKE PSA Implementation

• [Mbed TLS] Connection ID DTLS1.2

• [Mbed TLS] Use PSA: code size optimisation via PSA_CRYPTO_CONFIG - part1: symmetric

• [Mbed TLS] TLS/X.509​ - Use PSA Long term secret isolation

• [Mbed TLS] TLS1.3 PSK

• [Mbed TLS] Mbed TLS3.2

• [Mbed TLS] TLS1.3 server side

• [Mbed TLS] TLS1.3 MVP

• [Mbed TLS] TLS/X.509​ - Use PSA Crypto APIs Fully​ - Phase1

• [Mbed TLS] ​SHA256/512 - Neon Optimization

• [Mbed TLS] New 2.x LTS

• [PSA Crypto] Support Missing PSA Crypto v1.0 APIs supported in MbedCrypto

• [PSA Crypto]​ M-AEAD Implementation

• [PSA Crypto]​ EdDSA API Design

• [PSA Crypto]​ PBKDF2 API Design

• [PSA Crypto]​ ECJPAKE API Design ​

• DTLS-SRTP

• Lucky13 Security Improvements

• [PSA Crypto] PSA Crypto API implementation v1.0 Specification - Phase1

• Unified PSA Driver Interface - API Design and initial support