Known implementations and projects related to the PSA Certified APIs

Updated Dec 2022.

Software implementations

The reference implementation for PSA Crypto API can be found inside Mbed TLS. mbed-tls.readthedocs.io/en/latest
Other PSA Certified APIs are included in the TF-M project. www.trustedfirmware.org/projects/tf-m
Trusted Services implements those services in a Trusted Execution Environment on Cortex A processors. www.trustedfirmware.org/projects/trusted-services
PARSEC is a Rust-based Linux microservice based on the Crypto API. parsec.community
Oberon PSA Crypto offers a way to support both hardware and optimized software crypto routines under the PSA Crypto API. www.oberon-psa-crypto.ch
RIOT OS is integrating the Crypto API at a system-level for all crypto needs. www.riot-os.org and the associated paper at https://arxiv.org/abs/2208.09281. The RIOT OS uses the Crypto Driver Interface to integrate secure elements.

Mbed TLS is developing a hardware driver interface that complements the Crypto API. The aim is to simplify the integration of cryptographic peripherals and secure elements into implementations of the Crypto API. See github.com/Mbed-TLS/mbedtls/blob/development/docs/proposed/psa-driver-interface.md.

The Silicon Labs SDK uses PSA driver API conventions. www.silabs.com/developers/gecko-software-development-kit
The Nordic SDK uses PSA driver API conventions. github.com/nrfconnect/sdk-nrf/tree/main/samples/crypto/psa_tls
Oberon PSA Crypto contains software drivers (also used in the Nordic SDK) that implement the PSA driver API. See https://www.oberon.ch/products/oberon-psa-crypto/qualities/

Mbed TLS implements TLS stack for embedded usage, based on Crypto API. Mbed TLS also uses the Secure Storage API for the Crypto implementation of key storage. mbed-tls.readthedocs.io/en/latest
WolfSSL can consume PSA-compliant crypto backends. www.wolfssl.com/platform-security-architecture-psa-crypto-api-support-wolfssl
t_cose uses PSA Crypto APIs for portability. github.com/laurencelundblade/t_cose
The EEMBC Securemark-TLS Benchmark uses PSA Crypto APIs. github.com/eembc/securemark-tls
The Matter project offers a PSA-compliant crypto adapter. github.com/project-chip/connectedhomeip/tree/master/src/crypto
Zephyr OS integrates PSA Crypto APIs. docs.zephyrproject.org/latest/samples/tfm_integration/psa_crypto/README.html