3 ms·

I worked with mbedTLS on a desktop/mobile project a couple of years ago. I'd previously used OpenSSL, and I wasn't very impressed, but mbedTLS seemed OK: easy t

by tom_ 8y ago

I worked with mbedTLS on a desktop/mobile project a couple of years ago. I'd previously used OpenSSL, and I wasn't very impressed, but mbedTLS seemed OK: easy to get it building with cmake, easy to get it building on Windows/OS X/iOS/Linux, no actual I/O in the library. I remember finding integration with libuv a mite annoying, as mbedTLS is rather pull-minded, and I didn't find the documentation for the I/O callbacks super-clear. If your I/O callbacks are making blocking calls of a pipe or socket, though, I'm sure it's much simpler. Would use again. (Would not use OpenSSL again.)

Gibbon1 8y ago
> (Would not use OpenSSL again.) Reminds me of someone using this gif to describe working with OpenSSL. https://imgur.com/gallery/ikBZF82 https://imgur.com/gallery/ikBZF82
kevin_thibedeau 8y ago
mbedTLS is mostly nice but it does suffer from some poor coding practices like large buffers allocated on the stack. I would warn anyone to stay away from Cypress/Broadcom's WICED OS which has a modified version of mbedTLS with foolish changes to the API that makes porting code extremely challenging.