An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
Mbed TLS needs this because the PSA Crypto API now has finalised the PAKE interface and we need to make this change to be compliant and to enable implementing new algorithms (like SPAKE2+).
Suggested enhancement
Add a key confirmation attribute to the PAKE cipher suite to be compliant with the standard: https://arm-software.github.io/psa-api/crypto/1.2/ext-pake/api/pake.html#c.psa_pake_cs_get_key_confirmation.
Justification
Mbed TLS needs this because the PSA Crypto API now has finalised the PAKE interface and we need to make this change to be compliant and to enable implementing new algorithms (like SPAKE2+).