Wi-Fi feature to crypto mapping

This page maps Wi-Fi features supported in Zephyr (via the hostap-based wpa_supplicant) to the underlying MbedTLS crypto primitives. Use it to see which features need bignum, ECDH, TLS, etc., and which code paths use Legacy crypto (MbedTLS legacy APIs) vs PSA crypto (Platform Security Architecture APIs) when CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_MBEDTLS_PSA is enabled.

The implementation lives in the hostap module: crypto_mbedtls_alt.c (generic crypto) and tls_mbedtls_alt.c (TLS/EAP). Only the MbedTLS backend is considered here.

Feature set (from hostap Kconfig)

Features are gated by Kconfig. Relevant options include:

• CONFIG_WIFI_NM_WPA_SUPPLICANT_WEP — WEP (legacy)

• CONFIG_WIFI_NM_WPA_SUPPLICANT_WPA3 — WPA3-SAE (default on)

• CONFIG_WIFI_NM_WPA_SUPPLICANT_DPP — Wi-Fi Easy Connect (DPP)

• CONFIG_WIFI_NM_WPA_SUPPLICANT_WPS — Wi-Fi Protected Setup

• CONFIG_WIFI_NM_WPA_SUPPLICANT_P2P — P2P / Wi-Fi Direct (implies WPS)

• CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE — EAP (EAP-TLS, EAP-TTLS-MSCHAPV2, EAP-PEAP-MSCHAPV2, EAP-PEAP-GTC, EAP-PEAP-TLS)

WPA2-PSK and WPA2-PSK-256 are available whenever crypto is not set to CRYPTO_NONE.

Feature → crypto primitives (MbedTLS)

Wi-Fi feature to crypto mapping

Feature	Crypto primitives	Legacy crypto	PSA crypto
WPA3-SAE	Bignum (mpi), modulo, exponentiation EC group HMAC-SHA256 AES (CCMP). SAE uses Dragonfly (PWE) with bignum + modulo.	Bignum (mbedtls_mpi) EC HMAC, AES (unless PSA build)	Hashes, HMAC, AES when PSA enabled Bignum/EC still legacy
SAE-PK	Same as WPA3-SAE plus ECDH and EC key operations (certificate-based SAE).	ECDH/EC key ops (legacy MbedTLS or PSA ECDH depending on config).	ECDH can use PSA Bignum/SAE core remain legacy
DPP (Easy Connect)	ECDH (P-256, P-384, P-521) EC key gen/sign/verify Hashes, AES. DPP2 adds PKCS#7; DPP3 adds HPKE.	ECDH, EC, RSA (if used) X.509/CSR in TLS/crypto layer	Hashes, HMAC, AES via PSA ECDH/EC may use PSA TLS/CSR/PKCS#7/HPKE layer legacy
WPA2-PSK / WPA2-PSK-256	PBKDF2-SHA1 (or SHA256 for -256) HMAC AES (CCMP) OMAC1-AES (key wrap)	All via mbedtls (PBKDF2, HMAC, AES, CMAC) if PSA disabled.	PBKDF2, HMAC, AES, OMAC1 implemented via PSA when PSA enabled.
WEP	RC4/ARC4 (stream cipher) Optionally AES for some wrappers. Deprecated.	Legacy MbedTLS only (no PSA path for WEP in current code).	N/A (WEP not migrated to PSA).
WPS	DH (finite-field) Bignum Hashes, HMAC, AES, TLS-PRF. Registrar uses TLS.	DH (mbedtls_dhm), bignum (mbedtls_mpi) TLS in tls_mbedtls_alt	Hashes, HMAC, AES, PBKDF2 via PSA DH/bignum and TLS legacy
EAP-TLS / EAP-TTLS / EAP-PEAP	TLS 1.2 (and optionally 1.3) RSA X.509 parse/verify Hashes, HMAC, AES (cipher suites)	Full TLS stack (mbedtls_ssl_*, mbedtls_x509_*) RSA No PSA in tls_mbedtls_alt	TLS layer remains legacy Underlying hashes/HMAC/AES can use PSA in crypto_mbedtls_alt
EAP-PWD	TLS-PRF Bignum DH (finite-field) EC (optional) Hashes, HMAC	Bignum, DH, EC (if used) via legacy MbedTLS.	Hashes/HMAC via PSA Bignum/DH/EC legacy
EAP-IKEV2	Cipher (AES), bignum, DH TLS-PRF style operations	Legacy cipher, bignum, DH.	AES/hashes/HMAC via PSA Bignum/DH legacy
Open	No authentication/encryption.	N/A	N/A

Note

WEP must be explicitly enabled with CONFIG_WIFI_NM_WPA_SUPPLICANT_WEP. It is deprecated and insecure; use only for legacy networks.

Summary: Legacy vs PSA (MbedTLS backend)

When CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_MBEDTLS_PSA is enabled, the implementation in crypto_mbedtls_alt.c (and supp_psa_api.h / supp_psa_api.c) splits as below. Use this table to see which operations use PSA vs Legacy MbedTLS.

Legacy vs PSA by crypto operation

Operation	API	Used by / notes
Message digests (MD5, SHA1, SHA256, SHA384, SHA512)	PSA
HMAC (all above hash types)	PSA
PBKDF2-SHA1	PSA	WPA2-PSK key derivation
AES (block, CBC, CTR, OMAC1-AES)	PSA	Key wrap, CCMP, etc.
Bignum (crypto_bignum_*)	Legacy	SAE, EAP-PWD, EAP-EKE, EAP-IKEV2, WPS; no PSA bignum in hostap
ECDH / EC key operations	Legacy	DPP, SAE-PK, EAP-PWD (EC). May be PSA-backed when MBEDTLS_ECDH_C / CONFIG_PSA_WANT_ALG_ECDH; wrapper layer common
TLS/SSL	Legacy	EAP-TLS, EAP-TTLS, EAP-PEAP; full stack in tls_mbedtls_alt.c
RSA	Legacy	TLS, X.509
X.509 / CSR	Legacy	Parse and generation
WEP	Legacy	No PSA path

So: WPA2-PSK and WPA2-PSK-256 use only PSA for their crypto; WPA3-SAE, DPP, SAE-PK, WPS, and Enterprise EAP still rely on legacy bignum, EC, or TLS. See the feature table above for per-feature impact.