\def MBEDTLS_SSL_PROTO_TLS1_3 Enable support for TLS 1.3. Requires: MBEDTLS_SSL_KEEP_PEER_CERTIFICATE Requires: MBEDTLS_PSA_CRYPTO_C Uncomment this macro to enable the support for TLS 1.3.
See docs/architecture/tls13-support.md for a description of the TLS 1.3 support that this option enables. TLS 1.3 uses PSA crypto for cryptographic operations that are directly performed by TLS 1.3 code. As a consequence, when TLS 1.3 is enabled, a TLS handshake may call psa_crypto_init(), even if it ends up negotiating a different TLS version. Cryptographic operations performed indirectly via another module (X.509, PK) or by code shared with TLS 1.2 (record protection, running handshake hash) only use PSA crypto if #MBEDTLS_USE_PSA_CRYPTO is enabled.