gh-Mbed-TLS/TF-PSA-Crypto
Watch
1
0
Fork
You've already forked TF-PSA-Crypto
 0
Code Issues 167 Pull requests 92 Releases 5 Activity
5 releases 10 tags
  • tf-psa-crypto-1.1.1 a0632be94d

    TF-PSA-Crypto 1.1.1 Stable

    archiver-bot released this 2026-07-01 08:46:11 -05:00 | 2093 commits to development since this release

    Description

    This release of TF-PSA-Crypto provides new features, bug fixes and minor enhancements. This release includes fixes for security issues.

    TF-PSA-Crypto 1.1 is a long-term support (LTS) branch. It will be supported with bug-fixes and security fixes until at least March 2029.

    Security Advisories

    For full details, please see the following links:

    Release Notes

    Security

    • Fix a side channel in RSA PKCS#1 v1.5 decryption: error handling in the
      library would reveal through timing the difference between success,
      invalid padding, or output too large for buffer, giving rise to a
      Bleichenbacher attack. Note that while the library now handles sensitive
      errors in constant-time, RSA PKCS#1 v1.5 decryption remains inherently
      dangerous, should be avoided when possible, and otherwise requires great
      care in application code. Found by zhengg. CVE-2026-50587
    • Added advice about compiler options in SECURITY.md.
    • Reject ChaCha20 operations that would make the 32-bit block counter wrap
      around, which could otherwise reuse keystream and compromise
      confidentiality. Reported by jiliang. CVE-2026-50584
    • Fix a side channel in ECC computations that allows a powerful local
      attacker (typically, untrusted OS attacking a secure enclave) to fully
      recover long-term secret keys. Found and reported by Alejandro Cabrera
      Aldaya from Tampere University. CVE-2026-54435
    • In configurations with MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED (non-default),
      when doing ECDH key agreement with x25519, it was possible for the peer to
      force the shared secret to all-zero by sending a low-order point. This is
      only a problem for protocols that expect contributory behaviour, that is,
      where neither party should be able to force the shared secret.
      CVE-2026-54434
    • Fix timing side channel in RSA key generation, prime generation and
      primality testing, on platforms where division is not constant-time. At
      this point this side channel is not known to be exploitable. Reported by
      Bhargava Shastry, Ethereum Foundation.
    • Fix a 1-byte buffer overread when parsing a malformed ECC public key
      in the PK module. CVE-2026-50583

    Bugfix

    • Fix a problem in library/alignment.h where the Zephyr Project use
      a pre-defined macro '__packed' which collides with the IAR keyword
      '__packed', causing the typedefs of unaligned types to remain aligned.
      Fixes mbedtls issue #10334
    • Doxygen documentation apidoc is now built into CMake's binary folder,
      not in-tree. For backward compatibility on Unix platforms an in-tree
      symlink named apidoc is created pointing to the folder in the build
      directory. Fixes #381.
    • Fixed a bug which prevented the inclusion of standard C library header
      files from the user provided configuration file. Fixes #784.

    Who should update

    We recommend all users should update to take advantage of the bug fixes contained in this release at an appropriate point in their development lifecycle.

    Note

    ❕ tf-psa-crypto-1.1.1.tar.bz2 are our official release files. source.tar.gz and source.zip are automatically generated snapshots that GitHub is generating. They do not include external dependencies, and can't be configured

    Checksum

    The SHA256 hashes for the archives are:

    3236f70e827fa693ae9e97499957a80c6dba25395d4617b7d21ecb60c82a480e
    Downloads