Add link to TF-PSA-Crypto SECURITY.md

To avoid confusion about the threat model of cryptographic code, add a
link to the SECURITY.md of TF-PSA-Crypto. This should help users who are
unaware that the cryptography has been split into a separate repository.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
This commit is contained in:
David Horstmann
2026-01-30 12:23:16 +00:00
parent 75eec4b477
commit 7bba265eed

View File

@@ -19,6 +19,12 @@ Only the maintained branches, as listed in [`BRANCHES.md`](BRANCHES.md),
get security fixes. get security fixes.
Users are urged to always use the latest version of a maintained branch. Users are urged to always use the latest version of a maintained branch.
## Use of TF-PSA-Crypto
Note that Mbed TLS uses the cryptography API provided by TF-PSA-Crypto. Its
security policy can be found
[here](https://github.com/Mbed-TLS/TF-PSA-Crypto/blob/development/SECURITY.md).
## Threat model ## Threat model
We classify attacks based on the capabilities of the attacker. We classify attacks based on the capabilities of the attacker.