Hello,

I am happy to announce the new release of TF-M v2.1.0.

New major features are:

• TF-M aligns the Crypto service to the same PSA Crypto headers used by the Mbed TLS 3.6.0 reference implementation.
• Initial support for on-core and off-core clients on Hybrid platforms (A-profile + M-profile or M-profile + M-profile) using solution 1. The functionality is still under active development.
• P256-M component is enabled on the BL2 stage for image signature verification based on ECDSA.
• MCUboot upgrade to v2.1.0.
• Mbed TLS upgrade to v3.6.0.
• BL2 now provides a thin PSA Crypto core layer when MCUBOOT_USE_PSA_CRYPTO=ON and can use builtin keys when ECDSA based signature verification is selected with MCUBOOT_SIGNATURE_TYPE="EC-P256".

This version is the first, intended for Long Term Support (LTS) after PSA certification and tagging TF-Mv2.1.0-LTS as described in the updated Release Process.

Please check the release notes for more information.

The release branch changes will be ported to the main branch shortly.

Many thanks to everyone for contributing, reviewing and supporting this milestone.

Anton and TF-M team.