Hi Ronan,
yes that is a good point. We should really remove that option from mainline completely as there support for MCUBOOT_USE_MBED_TLS is not available anymore since the move to TF-PSA-Crypto.
Thanks, Antonio
Sent from Outlook for Mac
From: Ronan GABOU via TF-M tf-m@lists.trustedfirmware.org Date: Monday, 9 February 2026 at 16:22 To: Bohdan.Hunko--- via TF-M tf-m@lists.trustedfirmware.org Subject: [TF-M] MCUBOOT_USE_PSA_CRYPTO : default value
Hello,
As latest TFM version now supports MbedTLS 4.0 which use TF PSA CRYPTO (I understood only PSA API are available and no more mbed API) Don’t you think that the default value for MCUBOOT_USE_PSA_CRYPTO in file : \trusted-firmware-m\bl2\ext\mcuboot\mcuboot_default_config.cmake should be ON instead of OFF ? Thank you.
Ronan,
[Shape, rectangle Description automatically generated]
Ronan GABOU MDRF / Embedded Processing / General Purpose and Automotive MCU / Ecosystem / Security
STMicroelectronics 134 avenue Aristide Briand, 92120 Montrouge, France
This communication is confidential and intended solely for the addressee(s). If you are not the intended recipient, you should not review, retain, copy or distribute the e-mail itself or the information it contains. In such case, we kindly request you notify the sender by replying to this transmission and delete the message without disclosing it. Thank you!
[cid:image002.png@01DC99E8.84F4A440]https://www.facebook.com/STMicroelectronics.NV/ [cid:image003.png@01DC99E8.84F4A440] https://twitter.com/st_world [cid:image004.png@01DC99E8.84F4A440] https://www.linkedin.com/company/stmicroelectronics/ [cid:image005.png@01DC99E8.84F4A440] https://www.instagram.com/stmicroelectronics.nv/ [cid:image006.png@01DC99E8.84F4A440] https://www.youtube.com/user/STonlineMedia ST online: www.st.com
