I don’t know you are still hacking on this project. I too tried MBEDTLS and it is huge. I also tried axtls and that works, but the I/O needs to get an overhaul. There was a mention of wolfssl that is now ported and available as a library. Please see information over in this post.