Skip to content

mbedTLS 4.x upgrade. - #271

Merged
sarthak shaha (Sarthak-Shaha) merged 1 commit into
release_2.10-1.6.1from
feature/mbedtls4
Oct 30, 2026
Merged

sarthak shaha (Sarthak-Shaha) merged 1 commit into
release_2.10-1.6.1from
feature/mbedtls4

Conversation

@rcasallas-silabs

Copy link
Copy Markdown
Contributor

Problem / Feature

Migration to mbedTLS 4.x.

Change overview

Supports files adjusted.

Testing

  • Lighting-app built and commission with MG24, MG26, Six301 and Si907

@cursor

cursor Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

PR Summary

High Risk
Changes crypto library version, startup order, and hardware acceleration hooks across all supported boards; regressions would affect Matter commissioning, TLS, and key handling.

Overview
Migrates Silicon Labs board-support packages for mbedTLS 4.x by switching platform crypto bootstrap from sl_mbedtls to sl_psa_crypto.

Autogen sl_event_handler.c files across EFR32 (MG24/MG26/MGM24) and SiWx917 boards now include sl_psa_crypto.h and call sl_psa_crypto_init() instead of sl_mbedtls_init(). On EFR32 targets, sl_service_init() initializes the secure element first (sl_se_init()), then runs sl_psa_crypto_init() followed by psa_crypto_init() and the existing protocol/crypto helpers. SiWx917 boards follow the same header/init swap; BRD4338A only calls sl_psa_crypto_init() when SL_MBEDTLS_USE_TINYCRYPT is not defined.

Every touched sl_mbedtls_config.h pulls in sli_psa_acceleration.h instead of sli_mbedtls_acceleration.h when drivers are enabled. BRD4338A also drops the autogenerated MBEDTLS_ENTROPY_MAX_SOURCES define.

tinycrypt/src/ecc.c gains version-aware mbedTLS SHA-256 usage (private header and non-_ret APIs on 4.x) so TinyCrypt ECC parameter hashing still builds against mbedTLS 4.

Some autogen handler diffs additionally trim conditional stack allocation and SL_WIFI sl_spidrv driver init on specific MG24 boards—these look like collateral autogen updates rather than the core mbedTLS migration.

Reviewed by Cursor Bugbot for commit 1846cea. Configure here.

@github-actions

github-actions Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

All contributors have signed the CLA ✍️ ✅
Posted by the CLA Assistant Lite bot.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit 1846cea. Configure here.

@Sarthak-Shaha
sarthak shaha (Sarthak-Shaha) merged commit 88efe0f into release_2.10-1.6.1 Oct 30, 2026
2 checks passed
@Sarthak-Shaha
sarthak shaha (Sarthak-Shaha) deleted the feature/mbedtls4 branch October 30, 2026 20:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants