subsys: mgmt: updatehub: remove support for legacy Mbed TLS crypto #97614
+31
−72
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
zephyrbot
added
area: Samples
valeriosetti
force-pushed
the
updatehub-remove-legacy-crypto
branch
from
f0d3c90 to
9e008eb
Compare
jhedberg
previously approved these changes
Oct 15, 2025
maass-hamburg
previously approved these changes
Oct 15, 2025
valeriosetti
dismissed stale reviews from maass-hamburg and jhedberg
via
48d9e67
valeriosetti
force-pushed
the
updatehub-remove-legacy-crypto
branch
from
9e008eb to
48d9e67
Compare
The long-term Zephyr's goal is rely only on PSA Crypto API for crypto support in Zephyr and at the same time Mbed TLS will remove this support from the next release. Therefore this commit removes usage of legacy crypto hash support from updatehub. Signed-off-by: Valerio Setti <[email protected]>
valeriosetti
force-pushed
the
updatehub-remove-legacy-crypto
branch
from
48d9e67 to
5b28986
Compare
|
The double force push is intentional:
|
maass-hamburg
previously approved these changes
Oct 17, 2025
jhedberg
previously approved these changes
Oct 17, 2025
tomi-font
requested changes
Oct 20, 2025
Following the removal of legacy crypto support the code could be further simplified so this commit accomplish to this part. Signed-off-by: Valerio Setti <[email protected]>
Updatehub now only use PSA Crypto API for crypto support and it automatically enables Mbed TLS when TF-M is not available in the build, so there is no need for neither a specific test case for PSA nor the overlay file. Signed-off-by: Valerio Setti <[email protected]>
valeriosetti
dismissed stale reviews from jhedberg and maass-hamburg
via
f716bfc
valeriosetti
force-pushed
the
updatehub-remove-legacy-crypto
branch
from
5b28986 to
f716bfc
Compare
maass-hamburg
previously approved these changes
Oct 20, 2025
tomi-font
previously approved these changes
Oct 20, 2025
doc/releases/migration-guide-4.3.rst
Outdated
Comment on lines
356
to
357
| cases. :kconfig:option:`CONFIG_UPDATEHUB` will automatically enable Mbed TLS PSA Crypto | ||
| implemementation if TF-M is not enabled in the build. |
There was a problem hiding this comment.
Suggested change
| cases. :kconfig:option:`CONFIG_UPDATEHUB` will automatically enable Mbed TLS PSA Crypto | |
| implemementation if TF-M is not enabled in the build. | |
| cases. :kconfig:option:`CONFIG_UPDATEHUB` will automatically enable Mbed TLS's PSA Crypto | |
| implemementation if TF-M is not enabled in the build. |
or
Suggested change
| cases. :kconfig:option:`CONFIG_UPDATEHUB` will automatically enable Mbed TLS PSA Crypto | |
| implemementation if TF-M is not enabled in the build. | |
| cases. :kconfig:option:`CONFIG_UPDATEHUB` will automatically enable the Mbed TLS implementation of PSA Crypto | |
| if TF-M is not enabled in the build. |
Add a note about the removal of legacy Mbed TLS crypto support from UpdateHub. Signed-off-by: Valerio Setti <[email protected]>
valeriosetti
dismissed stale reviews from tomi-font and maass-hamburg
via
f54ba07
valeriosetti
force-pushed
the
updatehub-remove-legacy-crypto
branch
from
f716bfc to
f54ba07
Compare
maass-hamburg
approved these changes
Oct 20, 2025
|
nandojve
approved these changes
Oct 20, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The long-term goal of Zephyr is to rely exclusively on PSA Crypto API to get crypto support. In parallel Mbed TLS is removing legacy crypto support from the upcoming release (v.4.0).
This PR removes usage of legacy crypto from UpdateHub, updates test and migration-guide documentation.