Skip to content

Enable TLS1.3#2711

Merged
kilograham merged 1 commit intoraspberrypi:developfrom
martijnvwezel:master
Mar 2, 2026
Merged

Enable TLS1.3#2711
kilograham merged 1 commit intoraspberrypi:developfrom
martijnvwezel:master

Conversation

@martijnvwezel
Copy link
Copy Markdown

Fixes #2710

Added these files to get TLS1.3 actually working: handshake/session handling + data transfer, and the crypto the PSA bits TLS1.3 needs.

TLS1.3 flow

  • ssl_tls13_client.c — client-side TLS1.3 handshake & state machine (connect, key schedule, etc).
  • ssl_tls13_server.c — server-side TLS1.3 handshake & state machine (accept, resume, keys).
  • ssl_tls13_generic.c — shared TLS1.3 code used by client+server (common handshake steps, key derivation, cipher handling).

Needed crypto stuffc for TLS1.3

  • psa_crypto_driver_wrappers_no_static.c — PSA driver wrapper glue so mbedtls can call platform crypto implementations without static binding.
  • psa_crypto_ffdh.c — finite-field Diffie-Hellman PSA glue (for any non-ECC FFDH needs).
  • psa_crypto_pake.c — PAKE support via PSA (if you need password-authenticated key exchange helpers).
  • psa_util.c — helper utils for PSA integration (common conversions, checks).
  • sha3.c — SHA-3 family implementation — some profiles / ciphersuites or future proofing.

@fedailyuseinexperiencedata
Copy link
Copy Markdown

Awesome, we were having the same issue

@lurch lurch linked an issue Oct 29, 2025 that may be closed by this pull request
@lurch lurch added the mbedtls label Oct 29, 2025
@martijnED
Copy link
Copy Markdown

What is the eta for this merge?

@martijnvwezel
Copy link
Copy Markdown
Author

can we merge this

@ljn0099
Copy link
Copy Markdown

ljn0099 commented Feb 17, 2026

This works flawlessly for me

@martijnED
Copy link
Copy Markdown

Waiting for this merge way too long

@kilograham kilograham added this to the 2.2.1 milestone Mar 2, 2026
@kilograham kilograham merged commit 33c01e9 into raspberrypi:develop Mar 2, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enable TLS1.3

7 participants