Hi Jeff,
Mbed TLS 3.4 supports ECDH/FFDH/PSK for key exchange and RSA/ECDSA/PSK 
for authentication in TLS 1.3. I'm not sure what you mean by “generated 
session keys”: are you trying to do session resumption, or a handshake 
authenticated with an X.509 certificate?
Best regards,
-- 
Gilles Peskine
Mbed TLS developer
On 25/08/2023 13:55, Thompson, Jeff via mbed-tls wrote:
>
> I’ve got mbedTLS 3.1.4 and want to use TLS 1.3. My handshake fails 
> very early because I don’t have any Pre-Shared Keys. Does mbedTLS 
> TLS1.3 only support PSKs, or can I still use generated session keys as 
> does TLS 1.2? If so, how?
>
> *Jeff Thompson* |  Senior Electrical Engineer - Firmware
> +1 704 752 6513 x1394
> www.invue.com <www.invue.com>
>
>