hardware acceleration of mbedtls-2021 , - does ST have that?

[TThom.2]

Does ST offer an implementation of hardware acceleration of mbedtls-2021?

I found this:

STM32CubeL5\Projects\STM32L562E-DK\Applications\TFM\TFM_Appli\Secure\Src\ecdsa_alt.c

STM32CubeL5\Projects\STM32L562E-DK\Applications\TFM\TFM_Appli\Secure\Src\ecdsa_curves_alt.c

from https://github.com/STMicroelectronics/STM32CubeL5.git

This is excactly what I want (a bridge between mbedtls and the PKA_HAL driver), but it's for a 2019 version of mbedtls, and the mbedtls folks since broke the interface, so it doesn't compile. (and it doesn't look like an quick/easy fix)

Is there a newer version somewhere?

/Troels

[Amel NASRI]

Hi @TThom.2​ ,

I'll share your request with our Experts & I'll keep you informed once I get the answer.

Internal ticket number: 112434 (PS: This is an internal tracking number and is not accessible or usable by customers).

-Amel

[TThom.2]

Thx , and sorry for the vague versions mentioned.

 https://github.com/STMicroelectronics/STM32CubeL5.git uses mbedtls 2.16.2

I would like to use 2.26.x (or 2.27 or 3.0.0)

/Troels

[Amel NASRI]

Hi @TThom.2​ ,

Our Expert was quick to provide an answer :)

Unfortunately, there is no plan to integrate new mbedtls version in the near future.

However, there is a suggested workaround to get rid of the compilation errors which is an ECC mbed TLS to PKA wrapper with recent mbed TLS version.

You find it attached and it will be interesting to keep us informed about the results on your side.

-Amel

[HendrikSchutter]

Any updates about newer versions of mbedTLS? I am using 3.6.2. The provided  wrapper is not longer suitable. 

Greetings Hendrik

[Jocelyn RICARD]

Hello @HendrikSchutter ,

The MBEDTLS 3.6.2 version will be supported in next delivery around Wk8 2025 on some STM32Cube.

Now I don't think STM32L5 is part of this delivery?

As far as I could see, there is no need to change the alternate files (wrapper) to make it work. I'll try check and come back to you

Best regards

Jocelyn

[henrik23]

---

@Jocelyn RICARD wrote:

As far as I could see, there is no need to change the alternate files (wrapper) to make it work. I'll try check and come back to you

I tried to use the ALT driver published for mbedTLS 2.16.2 with mbedTLS 3.6 and only the aes_alt.c works. The others will not compile. This leaves users without hardware acceleration for AES-GCM, SHA256, RSA  and ecdsa. 

So no HW acceleration support for modern mbedTLS with ST MCUs at this stage and probably in the foreseeable future?