roadmap.md

Roadmap

Note that the quarter when a feature is expected to be completed is based on very rough estimates of the effort involved and therefore can change. Items to be delivered beyond the current quarter may be pushed back, or change in scope.

If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Mbed TLS or PSA Crypto mailing lists.

Completed

• Merge Mbed Crypto repository into Mbed TLS. Mbed Crypto still available and under active development in Mbed TLS repository
• Unified PSA Driver Interface - API Design and initial support
• [PSA Crypto] PSA Crypto API implementation v1.0 Specification - Phase1
• Lucky13 Security Improvements
• DTLS-SRTP
• [PSA Crypto]​ ECJPAKE API Design ​
• [PSA Crypto]​ PBKDF2 API Design
• [PSA Crypto]​ EdDSA API Design
• [PSA Crypto]​ M-AEAD Implementation
• [PSA Crypto] Support Missing PSA Crypto v1.0 APIs supported in MbedCrypto
• [Mbed TLS] New 2.x LTS
• [Mbed TLS] ​SHA256/512 - Neon Optimization
• [Mbed TLS] Open CI - Initial
• [Mbed TLS] TLS/X.509​ - Use PSA Crypto APIs Fully​ - Phase1
• [Mbed TLS] TLS1.3 MVP
• [Mbed TLS] TLS1.3 server side
• [Mbed TLS] Mbed TLS3.2
• [Mbed TLS] TLS1.3 PSK
• [Mbed TLS] TLS/X.509​ - Use PSA Long term secret isolation
• [Mbed TLS] Use PSA: code size optimisation via PSA_CRYPTO_CONFIG - part1: symmetric
• [Mbed TLS] Connection ID DTLS1.2

2023 CQ1 (In Development)

• [Bignum] ECP Curves field reduction - NIST
• [Mbed TLS] PKCS7
• [PSA Crypto] PSA Crypto restartable sign message
• [PSA Crypto] ECJ-PAKE PSA Implementation
• [Mbed TLS] Open CI Enhancements
• [Mbed TLS] Code size optimisation (driver only build - hashes inc. HMAC)
• [PSA Crypto] PBKDF2 PSA Implementation

2023 CQ2

• [Mbed TLS] Code size optimisation (driver only build - Cipher and AEAD)
• [Mbed TLS] TLS1.3 early data
• [PSA Crypto] Memory Optimizations

2023 CQ3

• [Mbed TLS] Code size optimisation (driver only build - ECC)
• [PSA Crypto] Memory Optimizations

Future

• [Mbed TLS] Use PSA: misc. gaps
• [Mbed TLS] PSA Crypto 1.1 compliance
• [PSA Crypto] Extended PSA Crypto v1.0 spec compliance
• [Mbed TLS] TLS1.3 Continued
• [PSA Crypto]PSA Secure Element, Crypto Accelerator Support Enhancements
• Raw Public Key Mode
• EdDSA
• [Mbed TLS]Performance Optimization - ECP and Bignum
• Publish Threat Model
• [PSA Crypto] Separate repository from Mbed TLS
• [Mbed TLS] Mbed TLS4.0 - Remove legacy cipher APIs​
• [PSA Crypto] Clean up and Stabilization
• [Mbed TLS] Memory Optimization
• DTLS1.3
• Post Quantum Crypto