[Zephyr-users] [Zephyr-devel] TinyCrypt end of life - Help needed

Hristozov, Stefan <stefan.hristozov@...>

Dear Flavio,

thank you for the information!

we are using TinyCrypt in the uoscore-uedhoc [1] project, which we want to contribute to zephyr OS. We are in contact already with the responsible people at Zephyr. Our project is however agnostic regarding the crypto library, i.e., we can exchange TinyCrypt with another library. Which will be the preferred crypto library that should be used in projects like ours with Zephyr OS? mbedTLS?

Best regards

On Fri, 2021-10-01 at 13:37 -0700, Flavio Ceolin wrote:
Send it to users list as well.


Recently Intel notify us about TinyCrypt end of life because Zephyr is
one major project still using it.

In order to respond it properly, the Zephyr PSIRT team needs to
understand how TinyCrypt is currently used on Zephyr. An
initial research shows that only the Bluetooth subsystem depends
(exclusively) on this library for hashing and elliptic curves.

We need the community feedback to know which other places are using
TinyCrypt, which features are being used and finally what is the most
constraint platform currently supported that is using TinyCrypt.

Based on the answers we will come up with some proposals to mitigate
this problem.

Flavio Ceolin

Stefan Hristozov
Department Hardware Security
Fraunhofer Institute for Applied and Integrated Security AISEC
Lichtenbergstraße 11, 85748 Garching near Munich, Germany
Tel. +49 89 32299 86 157