Crypto (PSA/mbedtls) ERRORS when migrating from SDK 2.1.1 to SDK 2.5.0

[Mathi]

Hi,

We are migrating from SDK 2.1.1 to SDK 2.5.0 on nrf5340.

The below is our crypto configuration when using SDK 2.1.1. We use both both PSA and mbedtls API(reason in the link below).

>>>>>>>>>

# Enable nordic security backend

CONFIG_NRF_SECURITY=y

# Select the Nordic Security Backend, as the default backednd does not support RSA OAEP 3072 [b],
# Refer (+) RSA example fails on psa_sign_hash returning -133 - Nordic Q&A - Nordic DevZone - Nordic DevZone (nordicsemi.com) Sigurd Hellesvik 

CONFIG_NORDIC_SECURITY_BACKEND=y

# Enable PSA CryptoCell support.

CONFIG_PSA_CRYPTO_DRIVER_CC3XX=y

# Enable base64 API.

CONFIG_BASE64=y

# Mbedtls configuration.

CONFIG_MBEDTLS=y

CONFIG_MBEDTLS_ENABLE_HEAP=y

CONFIG_MBEDTLS_HEAP_SIZE=16384

# Enable cipers accessed through the mbed_tsl API.

CONFIG_MBEDTLS_RSA_C=y

CONFIG_MBEDTLS_ECDSA_C=y

CONFIG_MBEDTLS_PK_PARSE_C=y

CONFIG_MBEDTLS_ECDSA_DETERMINISTIC=n

>>>>>>>>>

Now, Iam able to build our application with the above configuration using SDK 2.5.0, but when trying to run the application (with above crypto configuration)
psa_driver_wrapper_cipher_decrypt_setup(blockDecrypt, blockDecryptKeyHandle, PSA_ALG_CBC_PKCS7) returns PSA_ERROR_NOT_SUPPORTED.

The release notes of 2.4 and 2.5 describes significant changes to the crypto support.

Iam trying to solve the following scenarios:

(a) Existing configuration(mbedtls API plus PSA API):

Is there a way to get the above configuration to work with SDK 2.5.0? I don't know if CONFIG_MBEDTLS_LEGACY_CRYPTO_C is relevant anymore. I did try to make configuration changes based on the release note and documentation, but can't resolve the above error.

Surprisingly there are no build errors while running with the above configuration on 2.5.0. I would have then expected the mbedTLS API to not work, but it's the PSA API that's failing.
Please suggest changes to the configuration that are needed to make the above work.

(b) New PSA only configuration, in future:
We would ideally like to stick to only PSA APIs and secure key storage, for our use case. And the choice of cryptocell/oberon for security and efficiency reasons.
Do the PSA APIs support the below cases?:

RSAES-OAEP - Key length 3072

AES-CBC, key length 128

ECDSA, NIST-P256

Note: Our application is built as SECURE.

Thanks,

Mathi.

[dejans]

Hi,

Whether TF-M is included or not in your build is specified by the way you build your application. If you build for _ns build target then TF-M is included in your build. In this case, your application is built as non-secure image and TF-M as secure image.

Best regards,
Dejan

[Mathi]

Hi,

Okay, I understand that.
I am simply trying to find out why psa_cipher_decrypt_setup() returns PSA_ERROR_NOT_SUPPORTED when migrating from SDK version 2.1.1 to 2.5.0.
I have shared above the crypto related configuration that we are using.
Is there something that has changed in the SDK that impacts our configuration? Should we build differently?

Thanks,

Mathi.

[dejans]

Hi Mathi,

Have you tried building with only one of the 2 configuration options enabled - either CONFIG_NRF_SECURITY=y or CONFIG_NORDIC_SECURITY_BACKEND=y?

Best regards,
Dejan

[Mathi]

Hi,

Thanks for the quick response. I tried enable only one of those two configurations, unfortunately it didn't help.

Also, What about 
CONFIG_PSA_CRYPTO_DRIVER_CC3XX versus CONFIG_PSA_CRYPTO_DRIVER_OBERON ? Which one of these should i use? Would you be aware if anything changed between the choice of these two drivers?

Thanks,

Mathi.

[dejans]

Hi Mathi,

Please have a look at nRF Security drivers. Configuring multiple drivers page specifies that multiple PSA drivers can be enabled at the same time.

Best regards,
Dejan