# Security

[中文]

## Mbed TLS

Starting from ESP-IDF v6.0, some already deprecated mbedtls header files like `esp32/aes.h`, `esp32/sha.h`, `esp32s2/aes.h`, `esp32s2/sha.h` and `esp32s2/gcm.h` have been removed, instead, you should include `aes/esp_aes.h`, `sha/sha_core.h` and `aes/esp_aes_gcm.h` respectively.

The SHA module headers `sha/sha_dma.h` and `sha/sha_block.h` are also deprecated and removed. You should include `sha/sha_core.h` instead.

Removed Deprecated APIs

The following deprecated functions have been removed:

- `esp_aes_encrypt()` – Use `esp_internal_aes_encrypt()` instead.

- `esp_aes_decrypt()` – Use `esp_internal_aes_decrypt()` instead.

- `esp_crypto_shared_gdma_start()` – Use `esp_crypto_shared_gdma_start_axi_ahb()` instead.

Note that the new AES functions return error codes for better error handling, unlike the old void functions.

## Bootloader Support

Removed Deprecated APIs

The following deprecated functions have been removed:

- `esp_secure_boot_verify_signature_block()` – Use `esp_secure_boot_verify_ecdsa_signature_block()` instead.

Was this page helpful?

- Thank you! We received your feedback.
- If you have any comments, fill in Espressif Documentation Feedback Form.

- We value your feedback.
- Let us know how we can improve this page by filling in Espressif Documentation Feedback Form.