# mbedtls を Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper でインストール

mbedtls のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:mbedtls
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install mbedtls
```

  証拠: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install mbedtls
```

  証拠: MacPorts ports tree: devel/mbedtls/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add mbedtls
```

  証拠: Alpine Linux edge package indexes: mbedtls from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install mbedtls
```

  証拠: Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#mbedtls
```

  証拠: nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S mbedtls
```

  証拠: Arch Linux sync databases: mbedtls from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- Debian apt (92%):

```sh
sudo apt install libmbedcrypto16
```

  証拠: Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Ubuntu apt (92%):

```sh
sudo apt install libmbedcrypto7t64
```

  証拠: Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

- zypper (92%):

```sh
sudo zypper install libmbedtls23
```

  証拠: openSUSE Tumbleweed package metadata: libmbedtls23 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## パッケージ情報

- **パッケージキー:** brew:mbedtls
- **パッケージマネージャ:** Homebrew
- **バージョン:** 4.2.0
- **ソース概要:** Cryptographic & SSL/TLS library
- **ホームページ:** <https://www.trustedfirmware.org/projects/mbed-tls/>
- **リポジトリ:** <https://github.com/Mbed-TLS/mbedtls>
- **最終更新:** 2026-07-07T16:39:09Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- aead_demo (エイリアス)
- cert_app (エイリアス)
- cert_req (エイリアス)
- cert_write (エイリアス)
- crl_app (エイリアス)
- crypto_examples (エイリアス)
- dtls_client (エイリアス)
- dtls_server (エイリアス)
- generate_random_uuid (エイリアス)
- hmac_demo (エイリアス)
- key_ladder_demo (エイリアス)
- key_ladder_demo.sh (エイリアス)
- load_roots (エイリアス)
- metatest (エイリアス)
- mini_client (エイリアス)
- pem2der (エイリアス)
- psa_constant_names (エイリアス)
- psa_hash (エイリアス)
- query_compile_time_config (エイリアス)
- query_included_headers (エイリアス)
- req_app (エイリアス)
- selftest (エイリアス)
- ssl_client1 (エイリアス)
- ssl_client2 (エイリアス)
- ssl_context_info (エイリアス)
- ssl_fork_server (エイリアス)
- ssl_mail_client (エイリアス)
- ssl_pthread_server (エイリアス)
- ssl_server (エイリアス)
- ssl_server2 (エイリアス)
- strerror (エイリアス)
- udp_proxy (エイリアス)
- zeroize (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 4.2.0
## プロジェクトの歴史と使われ方

Mbed TLS is a portable C TLS, DTLS, X.509, and cryptography library now hosted under TrustedFirmware.org, with TF-PSA-Crypto providing its PSA Crypto implementation.

### プロジェクトの歴史

TrustedFirmware.org presents Mbed TLS and TF-PSA-Crypto together: Mbed TLS implements TLS, DTLS, and X.509 certificate handling, while TF-PSA-Crypto implements the PSA Cryptography API and related driver interfaces. The licensing documentation records the earlier PolarSSL name and says the project is owned by TrustedFirmware.org.

The official GitHub repository describes the library as open source, portable, readable, flexible, and a reference implementation of the PSA Cryptography API. Current releases are made on a roughly three-to-six-month cadence, with the repository tracking dozens of releases.

### 採用の歴史

Mbed TLS is adopted where TLS and crypto need to fit into small systems. TrustedFirmware.org explicitly notes its small code footprint and names TF-A, TF-M, and OP-TEE among its users, placing it in the embedded firmware and secure software supply chain rather than only in server-side TLS stacks.

### 使われ方

Package users typically consume Mbed TLS as C libraries and headers plus example utilities. Build-time feature selection is central to its use: the default configuration is `include/mbedtls/mbedtls_config.h`, and PSA crypto mechanisms can be selected in `tf-psa-crypto/include/psa/crypto_config.h` or overridden with compile-time configuration macros.

### パッケージ好きにとっての重要性

Mbed TLS is important to package maintainers because small compile-time choices alter ABI surface, algorithm availability, footprint, and security posture. Its examples and utilities also make Homebrew-style packages useful for testing certificates, TLS clients, servers, and cryptographic primitives from the shell.

### タイムライン

- Pre-2015: Project is known as PolarSSL before the Mbed TLS name.
- 2020: Official mailing-list archive references the transition from PolarSSL-era private history to public Git history.
- 2026: TrustedFirmware.org lists Mbed TLS with TF-PSA-Crypto and notes users including TF-A, TF-M, and OP-TEE.
- 2026: GitHub repository lists Mbed TLS 4.1.0 as a latest release.

### Related projects

- PolarSSL, TF-PSA-Crypto, PSA Crypto API, Trusted Firmware-A, Trusted Firmware-M, OP-TEE, OpenSSL, wolfSSL

### ソース

- <https://github.com/Mbed-TLS/mbedtls>
- <https://mbed-tls.readthedocs.io/en/latest/kb/compiling-and-building/how-do-i-configure-mbedtls/>
- <https://mbed-tls.readthedocs.io/en/latest/kb/licensing/how-is-mbedtls-protected/>
- <https://mbed-tls.readthedocs.io/projects/api/en/v4.0.0-beta/api/file/crypto__config_8h/>
- <https://www.trustedfirmware.org/projects/mbed-tls/>


## セキュリティノート

broad file, network, media, or database tool signal.

- **Geiger リスク:** blue / 中
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: include/mbedtls/mbedtls_config.h, tf-psa-crypto/include/psa/crypto_config.h
## 他のパッケージマネージャ記録

- Debian apt - libmbedcrypto16 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedtls-dev - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedtls-doc - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedtls21 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls21 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedx509-7 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedx509-7 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/
- Nix - mbedtls: normalized package name match | nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libmbedcrypto7t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedtls-dev - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedtls-doc - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedtls14t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls14t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedx509-1t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedx509-1t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls-dev - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (development files) | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls-static - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (static library) | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls-utils - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-utils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Utilities for mbedtls (including gen_key / cert_write) | https://www.trustedfirmware.org/projects/mbed-tls/
- dnf - mbedtls - 3.6.7-2.fc45: normalized package name match | Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls


## Combined YAML source

View the package source record on GitHub. [combined/mbedtls.yml](https://github.com/mxcl/pkgdb/blob/main/combined/mbedtls.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph