From 99c34238e2afb9051671e3a986b112982fa42794 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Wed, 9 Oct 2024 18:01:49 +0200 Subject: [PATCH] Changelog entry for MBEDTLS_USE_PSA_CRYPTO always enabled Signed-off-by: Gilles Peskine --- ChangeLog.d/psa-always-on.txt | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 ChangeLog.d/psa-always-on.txt diff --git a/ChangeLog.d/psa-always-on.txt b/ChangeLog.d/psa-always-on.txt new file mode 100644 index 0000000000..49edb3ed22 --- /dev/null +++ b/ChangeLog.d/psa-always-on.txt @@ -0,0 +1,9 @@ +Default behavior changes + * The PK, X.509, PKCS7 and TLS modules now always use the PSA subsystem + to perform cryptographic operations, with a few exceptions documented + in docs/use-psa-crypto.md. This corresponds to the behavior of + Mbed TLS 3.x when MBEDTLS_USE_PSA_CRYPTO is enabled. In effect, + MBEDTLS_USE_PSA_CRYPTO is now always enabled. + * psa_crypto_init() must be called before performing any cryptographic + operation, including indirect requests such as parsing a key or + certificate or starting a TLS handshake.