Mbed TLS

[English]

Overview

MbedTLS is a crypto algorithm library for embedded systems, which mainly implements basic crypto algorithms, X.509 certificate operations, SSL/TLS and DTLS protocols.

MbedTLS version

the currently supported version：3.5.2

MbedTLS introduction

API Reference

KnowledgeBase

Related Macro Explanation

- CONFIG_FULL_MBEDTLS                 #MbedTLS pruning, disabling it can optimize codesize
- CONFIG_PSA_MBEDTLS                  #Supports MbedTLS V3.5.2
- CONFIG_MBEDTLS_USE_PSA_CRYPTO       #TLS protocol supports PSA API
- CONFIG_TRUSTENGINE                  #Supports hardware acceleration, enabling it will increase codesize
- CONFIG_SW_CRYPTO                    #Supports pure software implementation, mutually exclusive with CONFIG_TRUSTENGINE
- CONFIG_TE200_ENTROPY                #Supports TrustEngine random number entropy source
- CONFIG_MBEDTLS_LOG_LEVEL="OFF"      #Sets MbedTLS debug log level (OFF/ERROR/WARNING/INFO/DEBUG)
- CONFIG_PSA_MBEDTLS_TEST             #Supports PSA API testing
- CONFIG_TRUSTENGINE_TEST             #Supports MbedTLS API and performance testing

project Default Configuration

CONFIG_FULL_MBEDTLS=n
CONFIG_PSA_MBEDTLS=y
CONFIG_MBEDTLS_USE_PSA_CRYPTO=n
CONFIG_TRUSTENGINE=n
CONFIG_SW_CRYPTO=y
CONFIG_TE200_ENTROPY=n
CONFIG_MBEDTLS_LOG_LEVEL="OFF"
CONFIG_PSA_MBEDTLS_TEST=n
CONFIG_TRUSTENGINE_TEST=n

Important

Note：TrustEngine can only run on a single CPU, hardware acceleration can be enabled by default on the AP

MbedTLS Algorithm Configuration File

components\psa_mbedtls\mbedtls_port\configs\mbedtls_psa_crypto_config.h