Security

[中文]

Mbed TLS

Starting from ESP-IDF v6.0, some already deprecated mbedtls header files like esp32/aes.h, esp32/sha.h, esp32s2/aes.h, esp32s2/sha.h and esp32s2/gcm.h have been removed, instead, you should include aes/esp_aes.h, sha/sha_core.h and aes/esp_aes_gcm.h respectively.

The SHA module headers sha/sha_dma.h and sha/sha_block.h are also deprecated and removed. You should include sha/sha_core.h instead.

Removed Deprecated APIs

The following deprecated functions have been removed:

  • esp_aes_encrypt() – Use esp_internal_aes_encrypt() instead.

  • esp_aes_decrypt() – Use esp_internal_aes_decrypt() instead.

  • esp_crypto_shared_gdma_start() – Use esp_crypto_shared_gdma_start_axi_ahb() instead.

Note that the new AES functions return error codes for better error handling, unlike the old void functions.

Bootloader Support

Removed Deprecated APIs

The following deprecated functions have been removed:

  • esp_secure_boot_verify_signature_block() – Use esp_secure_boot_verify_ecdsa_signature_block() instead.

Was this page helpful?