Manuel Pégourié-Gonnard

Review/remove uses of `MBEDTLS_PRIVATE` in programs

2

In https://github.com/ARMmbed/mbedtls/pull/4511 we made most struct fields private, however we took a shortcut, by allowing ourselves to use `MBEDTLS_PRIVATE` fields in programs. Most of the programs are supposed to be...

Improve support of `mbedtls_psa_get_random` in client-only builds

2

Context: PSA has as standard RNG API that is accessible from everywhere as soon as `psa_crypto_init()` has been called. Legacy crypto APIs tend to accept `f_rng, p_rng` arguments because the...

Officially drop support for MSVC 2013 and 2015 in 3.6

1

Rationale: - Both versions have a lifetime that's shorter than that of 3.6. - Additionally, MSVC 2015 crashes on current development https://github.com/Mbed-TLS/mbedtls/issues/8735 - Additionally, MSVC 2013 causes issues related to...

Simplify PSA built-in ECDH

6

## Description In PSA built-in ECDH, use ECP directly rather than the legacy ECDH module, which has a lot of unnecessary cruft. This reduces the code size of a configuration...

Make legacy crypto APIs internal

3

As part of making PSA Crypto the main crypto API in 4.0, we're making (most of) the legacy crypto API internal (that is, headers would be visible to other crypto...

Make sure accel list stays up-to-date in user-config-for-tests.h

1

Currently `user-config-for-tests.h` has to list all mechanisms that can be accelerate by a driver. This means that when a new mechanism is added, we need to remember to update that...

## Description Resolves #8736 ## PR checklist Please tick as appropriate and edit the reasons (e.g.: "backport: not needed because this is a new feature") - [ ] **changelog** provided,...

[DI] Use interruptible sign/verify in X.509 & TLS

3

PSA recently gained interruptible functions for signing and verifying hash-based signatures. So far, these functions are not used by X.509 or TLS, but they should be used when `MBEDTLS_USE_PSA_CRYPTO` enabled,...

Once PSAhas gained interruptible functions for ECDHE, these functions should be used by TLS when `MBEDTLS_USE_PSA_CRYPTO` is enabled, in all places that currently support restartable operations using the legacy API...

Add support for ECDHE-PSK-AES-GCM/CCM ciphersuites

2

### Description - Type: Feature Request - Priority: Minor ## Enhancement\Feature Request Add support for the new ciphersuites with ECDHE-PSK key exchange and AEAD encryption from https://tools.ietf.org/html/draft-ietf-tls-ecdhe-psk-aead-05 (the draft is...