Cryptography Support in Zephyr - Recent Changes and Upcomings

Explore the evolution of cryptographic support in the Zephyr real-time operating system through this 42-minute conference talk from the Linux Foundation. Discover the significant changes that have occurred in Zephyr's cryptographic landscape over the past year, including the deprecation of TinyCrypt and the increased adoption of PSA Crypto API as part of the ongoing effort to establish a unified interface for cryptographic operations. Learn why TinyCrypt was deprecated due to lack of maintenance and inability to receive security fixes or adapt to the PSA interface, leaving Mbed TLS as the sole cryptographic provider in Zephyr. Understand how Mbed TLS can be utilized either directly as a linked library or integrated within TF-M images. Gain insights into the historical context of Zephyr's crypto support and the rationale behind adopting PSA Crypto API. Examine Mbed TLS architecture, including its TLS and crypto layers, its relationship with TF-M, and recent improvements designed to address footprint concerns. Look ahead to future developments for Mbed TLS, including anticipated features in the September 2025 release and upcoming vendor driver support capabilities.