# Install mbedtls with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper Cryptographic & SSL/TLS library. Version 4.2.0 via Homebrew; verified 2026-07-07. ## Install ```sh sudo av install brew:mbedtls ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install mbedtls ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install mbedtls ``` Evidence: MacPorts ports tree: devel/mbedtls/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add mbedtls ``` Evidence: Alpine Linux edge package indexes: mbedtls from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install libmbedcrypto16 ``` Evidence: Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install mbedtls ``` Evidence: Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#mbedtls ``` Evidence: nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S mbedtls ``` Evidence: Arch Linux sync databases: mbedtls from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - Ubuntu apt (92%): ```sh sudo apt install libmbedcrypto7t64 ``` Evidence: Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz - zypper (92%): ```sh sudo zypper install libeverest ``` Evidence: openSUSE Tumbleweed package metadata: libeverest from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:mbedtls - **Package manager:** Homebrew - **Package manager page:** - **Version:** 4.2.0 - **Source summary:** Cryptographic & SSL/TLS library - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-07T16:39:09Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - aead_demo (cli) - cert_app (cli) - cert_req (cli) - cert_write (cli) - crl_app (cli) - crypto_examples (cli) - dtls_client (cli) - dtls_server (cli) - generate_random_uuid (cli) - hmac_demo (cli) - key_ladder_demo (cli) - key_ladder_demo.sh (cli) - load_roots (cli) - metatest (cli) - mini_client (cli) - pem2der (cli) - psa_constant_names (cli) - psa_hash (cli) - query_compile_time_config (cli) - query_included_headers (cli) - req_app (cli) - selftest (cli) - ssl_client1 (cli) - ssl_client2 (cli) - ssl_context_info (cli) - ssl_fork_server (cli) - ssl_mail_client (cli) - ssl_pthread_server (cli) - ssl_server (cli) - ssl_server2 (cli) - strerror (cli) - udp_proxy (cli) - zeroize (cli) - aead_demo (alias) - cert_app (alias) - cert_req (alias) - cert_write (alias) - crl_app (alias) - crypto_examples (alias) - dtls_client (alias) - dtls_server (alias) - generate_random_uuid (alias) - hmac_demo (alias) - key_ladder_demo (alias) - key_ladder_demo.sh (alias) - load_roots (alias) - metatest (alias) - mini_client (alias) - pem2der (alias) - psa_constant_names (alias) - psa_hash (alias) - query_compile_time_config (alias) - query_included_headers (alias) - req_app (alias) - selftest (alias) - ssl_client1 (alias) - ssl_client2 (alias) - ssl_context_info (alias) - ssl_fork_server (alias) - ssl_mail_client (alias) - ssl_pthread_server (alias) - ssl_server (alias) - ssl_server2 (alias) - strerror (alias) - udp_proxy (alias) - zeroize (alias) ## Build dependencies - cmake ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 4.2.0 - Package-manager updated: 2026-07-07 - Local data: ok - Upstream repository: https://github.com/Mbed-TLS/mbedtls - info: No cached GitHub release or tag data was available. ## Project history and usage Mbed TLS is a portable C TLS, DTLS, X.509, and cryptography library now hosted under TrustedFirmware.org, with TF-PSA-Crypto providing its PSA Crypto implementation. ### Project history TrustedFirmware.org presents Mbed TLS and TF-PSA-Crypto together: Mbed TLS implements TLS, DTLS, and X.509 certificate handling, while TF-PSA-Crypto implements the PSA Cryptography API and related driver interfaces. The licensing documentation records the earlier PolarSSL name and says the project is owned by TrustedFirmware.org. The official GitHub repository describes the library as open source, portable, readable, flexible, and a reference implementation of the PSA Cryptography API. Current releases are made on a roughly three-to-six-month cadence, with the repository tracking dozens of releases. ### Adoption history Mbed TLS is adopted where TLS and crypto need to fit into small systems. TrustedFirmware.org explicitly notes its small code footprint and names TF-A, TF-M, and OP-TEE among its users, placing it in the embedded firmware and secure software supply chain rather than only in server-side TLS stacks. ### How it is used Package users typically consume Mbed TLS as C libraries and headers plus example utilities. Build-time feature selection is central to its use: the default configuration is `include/mbedtls/mbedtls_config.h`, and PSA crypto mechanisms can be selected in `tf-psa-crypto/include/psa/crypto_config.h` or overridden with compile-time configuration macros. ### Why package nerds care Mbed TLS is important to package maintainers because small compile-time choices alter ABI surface, algorithm availability, footprint, and security posture. Its examples and utilities also make Homebrew-style packages useful for testing certificates, TLS clients, servers, and cryptographic primitives from the shell. ### Timeline - Pre-2015: Project is known as PolarSSL before the Mbed TLS name. - 2020: Official mailing-list archive references the transition from PolarSSL-era private history to public Git history. - 2026: TrustedFirmware.org lists Mbed TLS with TF-PSA-Crypto and notes users including TF-A, TF-M, and OP-TEE. - 2026: GitHub repository lists Mbed TLS 4.1.0 as a latest release. ### Related projects - PolarSSL, TF-PSA-Crypto, PSA Crypto API, Trusted Firmware-A, Trusted Firmware-M, OP-TEE, OpenSSL, wolfSSL ### Sources - - - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: include/mbedtls/mbedtls_config.h, tf-psa-crypto/include/psa/crypto_config.h ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** mbedtls - **Aliases:** mbedtls@4 - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - libmbedcrypto16 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedtls-dev - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedtls-doc - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedtls21 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls21 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/ - Debian apt - libmbedx509-7 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedx509-7 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/ - Nix - mbedtls: normalized package name match | nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libmbedcrypto7t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedtls-dev - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedtls-doc - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedtls14t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls14t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/ - Ubuntu apt - libmbedx509-1t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedx509-1t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls - 4.1.0-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls-dev - 4.1.0-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (development files) | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls-static - 4.1.0-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (static library) | https://www.trustedfirmware.org/projects/mbed-tls/ - apk - mbedtls-utils - 4.1.0-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-utils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Utilities for mbedtls (including gen_key / cert_write) | https://www.trustedfirmware.org/projects/mbed-tls/ - dnf - mbedtls - 3.6.6-2.fc45: normalized package name match | Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew. - [mbedtls@3](https://www.automicvault.com/pkg/brew/mbedtls-3/) - Package name indicates the same formula family. - [gnutls](https://www.automicvault.com/pkg/brew/gnutls/) - Shares av.db curated category or tags: cli, cryptography, dtls, security, ssl. - [gmssl](https://www.automicvault.com/pkg/brew/gmssl/) - Shares av.db curated category or tags: cli, cryptography, security, ssl, tls. - [libressl](https://www.automicvault.com/pkg/brew/libressl/) - Shares av.db curated category or tags: cli, cryptography, security, ssl, tls. - [wolfssl](https://www.automicvault.com/pkg/brew/wolfssl/) - Shares av.db curated category or tags: cli, cryptography, security, ssl, tls. - [botan](https://www.automicvault.com/pkg/brew/botan/) - Shares av.db curated category or tags: cli, cryptography, security, tls. - [cfssl](https://www.automicvault.com/pkg/brew/cfssl/) - Shares av.db curated category or tags: cli, cryptography, security, tls. - [nettle](https://www.automicvault.com/pkg/brew/nettle/) - Shares av.db curated category or tags: c-library, cli, cryptography, security. - [nss](https://www.automicvault.com/pkg/brew/nss/) - Shares av.db curated category or tags: cli, cryptography, security, tls. ## Combined YAML source View the package source record on GitHub. [combined/mbedtls.yml](https://github.com/automic-vault/db/blob/main/combined/mbedtls.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph