nrf_security: Change default value of PSA_WANT configurations to disabled #11610
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
joerchan
requested review from
frkv,
Vge0rge,
vili-nordic,
SebastianBoe,
mswarowsky,
torsteingrindvik,
magnev,
tejlmand and
carlescufi
as code owners
github-actions
bot
added
changelog-entry-required
|
The following west manifest projects have been modified in this Pull Request:
Note: This message is automatically posted and updated by the Manifest GitHub Action. |
Test specificationCI/Jenkins/NRF
CI/Jenkins/integration
test-fw-nrfconnect-chip: added because there was no .github/test-spec.yml in 'matter' Detailed information of selected test modules Note: This message is automatically posted and updated by the CI |
|
You can find the documentation preview for this PR at this link. It will be updated about 10 minutes after the documentation build succeeds. Note: This comment is automatically posted by the Documentation Publishing GitHub Action. |
joerchan
force-pushed
the
psa-default-off
branch
from
473d602
to
d116c7f
Compare
joerchan
force-pushed
the
psa-default-off
branch
9 times, most recently
from
ab8ed5d
to
0f1c23f
Compare
joerchan
changed the title
vili-nordic
reviewed
Jun 29, 2023
SebastianBoe
approved these changes
Jun 29, 2023
joerchan
force-pushed
the
psa-default-off
branch
2 times, most recently
from
4a0ac81
to
4ddb97a
Compare
mswarowsky
approved these changes
Jul 6, 2023
joerchan
force-pushed
the
psa-default-off
branch
2 times, most recently
from
e330d31
to
987ad5f
Compare
Add sample configurations for the PSA algorithms being used. This makes the samples not rely on default configurations. NCSDK-18031 Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Add sample configurations for the PSA algorithms being used. This makes the samples not rely on default configurations. NCSDK-18031 Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Add sample configurations for the PSA algorithms being used. This makes the sample not rely on default configurations. NCSDK-18031 Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Add sample configurations for the PSA algorithms being used. This makes the sample not rely on default configurations. NCSDK-18031 Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Add test configurations for the PSA algorithms being used. This makes the test not rely on default configurations. NCSDK-18031 Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Add PSA default configuration with select for the required PSA algorithms needed by TF-M. key derivation is used by TF-M builtin keys and Protected Storage. AEAD algorithm is used by Protected Storage. Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Explicitly enable the default set of PSA want algorithms in the psa_tls sample. The set of algorithms is not neccesarily the required set of algorithms but instead just what was already enabled as a simplifiction in order to not cause any configuration changes in the sample. Remove PSA want configuration from other kconfig fragments. Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Add missing CCM dependency for ciphersuites. The CCM cipher mode can be used in ciphersuites so it should satisfy the requirements. Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Update sdk-zephyr to disable PSA configurations by default. Remove default configuration overrides in matter project. Fix TF-M compilation error in ITS when disabling PS. Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Change the default value of PSA_WANT configurations to be default disabled.
Kconfig options that required PSA crypto should use
select PSA_WANT_<feature>.Samples or tests that use PSA crypto should use
CONFIG_PSA_WANT_<feature_>=yThis simplifies the use of Kconfig default value overrides that are present in OpenThread and Matter.
This is a step towards making the PSA_WANT configurations available in upstream zephyr.