# Install mbedtls@3 with Homebrew, apk, MacPorts, pacman, apt, dnf, Nix, zypper Cryptographic & SSL/TLS library. Version 3.6.7 via Homebrew; verified 2026-07-07. ## Install ```sh sudo av install brew:mbedtls@3 ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install mbedtls@3 ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install mbedtls3 ``` Evidence: MacPorts ports tree: devel/mbedtls3/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add mbedtls3 ``` Evidence: Alpine Linux edge package indexes: mbedtls3 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - pacman (92%): ```sh sudo pacman -S mbedtls3 ``` Evidence: Arch Linux sync databases: mbedtls3 from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - Debian apt (92%): ```sh sudo apt install libmbedcrypto16 ``` Evidence: Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install mbedtls ``` Evidence: Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#mbedtls ``` Evidence: nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt (92%): ```sh sudo apt install libmbedcrypto7t64 ``` Evidence: Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz - zypper (92%): ```sh sudo zypper install libeverest ``` Evidence: openSUSE Tumbleweed package metadata: libeverest from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:mbedtls@3 - **Package manager:** Homebrew - **Package manager page:** - **Version:** 3.6.7 - **Source summary:** Cryptographic & SSL/TLS library - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-07T16:38:54Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - cipher_aead_demo (cli) - crypt_and_hash (cli) - dh_client (cli) - dh_genprime (cli) - dh_server (cli) - ecdh_curve25519 (cli) - ecdsa (cli) - gen_entropy (cli) - gen_key (cli) - gen_random_ctr_drbg (cli) - generic_sum (cli) - key_app (cli) - key_app_writer (cli) - mbedtls-benchmark (cli) - mbedtls-selftest (cli) - md_hmac_demo (cli) - pk_decrypt (cli) - pk_encrypt (cli) - pk_sign (cli) - pk_verify (cli) - rsa_decrypt (cli) - rsa_encrypt (cli) - rsa_genkey (cli) - rsa_sign (cli) - rsa_sign_pss (cli) - rsa_verify (cli) - rsa_verify_pss (cli) - cipher_aead_demo (alias) - crypt_and_hash (alias) - dh_client (alias) - dh_genprime (alias) - dh_server (alias) - ecdh_curve25519 (alias) - ecdsa (alias) - gen_entropy (alias) - gen_key (alias) - gen_random_ctr_drbg (alias) - generic_sum (alias) - key_app (alias) - key_app_writer (alias) - mbedtls-benchmark (alias) - mbedtls-selftest (alias) - md_hmac_demo (alias) - pk_decrypt (alias) - pk_encrypt (alias) - pk_sign (alias) - pk_verify (alias) - rsa_decrypt (alias) - rsa_encrypt (alias) - rsa_genkey (alias) - rsa_sign (alias) - rsa_sign_pss (alias) - rsa_verify (alias) - rsa_verify_pss (alias) ## Build dependencies - cmake ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 3.6.7 - Package-manager updated: 2026-07-07 - Local data: ok - Upstream repository: https://github.com/Mbed-TLS/mbedtls - info: No cached GitHub release or tag data was available. ## Project history and usage Mbed TLS is a C cryptography and SSL/TLS library aimed at embedded and constrained systems, but it is also packaged broadly as a general-purpose TLS stack for Unix-like systems. Homebrew's mbedtls@3 formula tracks the 3.x major series, whose API and configuration model matter to downstream packages that have not moved to later ABI lines. ### Project history The project began as PolarSSL and became Mbed TLS under Arm's Mbed ecosystem before moving into the TrustedFirmware.org family. Its official documentation describes a small, portable TLS and cryptography implementation with build-time configuration through headers such as mbedtls_config.h, which is why distribution packages expose both libraries and a set of diagnostic and test command-line programs. Mbed TLS 3.0.0 was the major compatibility break for the 3.x line: the release removed deprecated APIs and pushed users toward the PSA Crypto interfaces. Later 3.x releases, especially the 3.6 long-term-support branch, became important for packagers because they offered a stable line for applications that needed Mbed TLS 3 rather than the newer major series. ### Adoption history The package is widely present across Unix package managers, including Homebrew, Debian/Ubuntu, Fedora, Alpine, Arch, MacPorts, Nix, and openSUSE package names listed in the input metadata. That spread reflects Mbed TLS's role as a dependency for embedded tooling, network software, and projects that want a compact TLS implementation instead of OpenSSL. For package managers, mbedtls@3 is specifically useful as a parallel-installable major version. It lets downstream formulae and ports continue building against the 3.x ABI while other consumers migrate on their own schedule. ### How it is used Most users consume Mbed TLS as C libraries and headers rather than as an end-user CLI. The installed example and utility programs, such as mbedtls-selftest, mbedtls-benchmark, ssl_client, ssl_server, cert_app, and key_app, are useful for smoke tests, performance checks, and certificate/key experiments. Configuration is traditionally handled at build time through include/mbedtls/mbedtls_config.h or an alternate MBEDTLS_CONFIG_FILE. That makes the package unusually sensitive to distribution build flags, enabled algorithms, and ABI compatibility. ### Why package nerds care Mbed TLS is package-nerd relevant because it is both a library dependency and a security-sensitive ABI surface. Its major-versioned Homebrew formula records the practical reality that TLS libraries cannot always be upgraded in lockstep across an ecosystem. The 3.x line is also a useful marker for the PSA Crypto transition in C cryptography libraries: package maintainers care which consumers use legacy Mbed TLS APIs, which use PSA APIs, and which need LTS security backports. ### Timeline - 2014: The PolarSSL codebase became Mbed TLS in the Arm Mbed ecosystem. - 2021: Mbed TLS 3.0.0 introduced a major API transition and removed deprecated interfaces. - 2024: Mbed TLS 3.6 became a long-term-support line for the 3.x series. - 2026: Homebrew continues to package the 3.x line separately as mbedtls@3. ### Related projects - Related TLS and cryptography stacks include OpenSSL, LibreSSL, BoringSSL, wolfSSL, and GnuTLS. Within the same project family, TF-PSA-Crypto is closely related to Mbed TLS's PSA Crypto work. ### Sources - - - - - - source_facts.package-manager ## Security Notes No matching local secret-handling manifest was found for mbedtls@3. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: include/mbedtls/mbedtls_config.h ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** mbedtls@3 - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** yes - **URL Keys:** stable ## Other Package-Manager Records - MacPorts - mbedtls3: package manager index match | MacPorts ports tree: devel/mbedtls3/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - apk - mbedtls3 - 3.6.6-r0: package manager index match | Alpine Linux edge package indexes: mbedtls3 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls3-dev - 3.6.6-r0: package manager index match | Alpine Linux edge package indexes: mbedtls3-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (development files) | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls3-static - 3.6.6-r0: package manager index match | Alpine Linux edge package indexes: mbedtls3-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (static library) | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls3-utils - 3.6.6-r0: package manager index match | Alpine Linux edge package indexes: mbedtls3-utils from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Utilities for mbedtls (including gen_key / cert_write) | https://www.trustedfirmware.org/projects/mbed-tls/ - pacman - mbedtls3 - 3.6.6-1: package manager index match | Arch Linux sync databases: mbedtls3 from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | An open source, portable, easy to use, readable and flexible TLS library | https://tls.mbed.org - Debian apt - libmbedcrypto16 - 3.6.5-0.1~deb13u1: versioned package alias match | Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedtls-dev - 3.6.5-0.1~deb13u1: versioned package alias match | Debian stable package indexes: libmbedtls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedtls-doc - 3.6.5-0.1~deb13u1: versioned package alias match | Debian stable package indexes: libmbedtls-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedtls21 - 3.6.5-0.1~deb13u1: versioned package alias match | Debian stable package indexes: libmbedtls21 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedx509-7 - 3.6.5-0.1~deb13u1: versioned package alias match | Debian stable package indexes: libmbedx509-7 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/ - Nix - mbedtls: versioned package alias match | nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libmbedcrypto7t64 - 2.28.8-1: versioned package alias match | Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedtls-dev - 2.28.8-1: versioned package alias match | Ubuntu 24.04 LTS package indexes: libmbedtls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedtls-doc - 2.28.8-1: versioned package alias match | Ubuntu 24.04 LTS package indexes: libmbedtls-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedtls14t64 - 2.28.8-1: versioned package alias match | Ubuntu 24.04 LTS package indexes: libmbedtls14t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/ ## Related links - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew. - [blast](https://www.automicvault.com/pkg/brew/blast/) - Popular package that depends on this formula. - [dislocker](https://www.automicvault.com/pkg/brew/dislocker/) - Popular package that depends on this formula. - [gauche](https://www.automicvault.com/pkg/brew/gauche/) - Popular package that depends on this formula. - [hashlink](https://www.automicvault.com/pkg/brew/hashlink/) - Popular package that depends on this formula. - [haxe](https://www.automicvault.com/pkg/brew/haxe/) - Popular package that depends on this formula. - [librist](https://www.automicvault.com/pkg/brew/librist/) - Popular package that depends on this formula. - [neko](https://www.automicvault.com/pkg/brew/neko/) - Popular package that depends on this formula. - [mbedtls](https://www.automicvault.com/pkg/brew/mbedtls/) - Package name indicates the same formula family. - [jscrypto](https://www.automicvault.com/pkg/npm/jscrypto/) - Local package facts share a topical domain. Shared terms: cipher, crypt, hash, hmac. - [jshashes](https://www.automicvault.com/pkg/npm/jshashes/) - Local metadata places this package in an adjacent workflow. Shared terms: client, hash, hmac, server. ## Combined YAML source View the package source record on GitHub. [combined/mbedtls@3.yml](https://github.com/automic-vault/db/blob/main/combined/mbedtls@3.yml) ## Sources - Nucleus package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - package relationship graph - external package-manager database matches - cross-ecosystem install command graph