Skip to content

Commit

Permalink
[nrf noup] modules: tfm: Add Kconfig for CRYPTO_PAKE_MODULE_ENABLED
Browse files Browse the repository at this point in the history
Add a Kconfig for th TFM_CRYPTO_PAKE_MODULE_ENABLED to support the PAKE
APIs.

noup as the PAKE support including the PAKE module doesn't exist yet in
upstream TF-M as they depend on mbed TLS support for it

Ref: NCSDK-22416
Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
  • Loading branch information
mswarowsky authored and rlubos committed Mar 18, 2024
1 parent 920b9fc commit b8f9cb9
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions modules/trusted-firmware-m/Kconfig.tfm.crypto_modules
Original file line number Diff line number Diff line change
Expand Up @@ -88,6 +88,17 @@ config TFM_CRYPTO_KEY_DERIVATION_MODULE_ENABLED
is not used.
Note that key agreement is under key derivation in the current implementation.

config TFM_CRYPTO_PAKE_MODULE_ENABLED
bool "PAKE crypto module"
default y
depends on PSA_HAS_PAKE_SUPPORT
depends on NRF_SECURITY
depends on PSA_CRYPTO_DRIVER_OBERON || PSA_CRYPTO_DRIVER_CRACEN
help
Enables the PAKE crypto module within the crypto partition.
Unset this option if the functionality provided by 'crypto_pake.c'
is not used.

endif # TFM_PARTITION_CRYPTO

endif # BUILD_WITH_TFM

0 comments on commit b8f9cb9

Please sign in to comment.