Thread PSKc calculation fails in SDK 2.6.0

RE: Thread PSKc calculation fails in SDK 2.6.0

Sigurd Hellesvik — Wed, 17 Apr 2024 13:03:19 GMT

https://github.com/nrfconnect/sdk-nrf/pull/14869

https://github.com/nrfconnect/sdk-zephyr/pull/1631

RE: Thread PSKc calculation fails in SDK 2.6.0

Max Peter — Tue, 16 Apr 2024 16:33:51 GMT

Thank you. Looking forward to receiving further input.

RE: Thread PSKc calculation fails in SDK 2.6.0

Sigurd Hellesvik — Mon, 08 Apr 2024 10:50:26 GMT

Thread developers asked me to make an internal ticket so they could look into this as a potential issue. So you know there are some work being done on this

RE: Thread PSKc calculation fails in SDK 2.6.0

Sigurd Hellesvik — Mon, 08 Apr 2024 08:13:11 GMT

Yes, you are correct, that is the change here.

[quote user="Max Peter"]>> The default cryptography backend for Thread is now Arm PSA Crypto API instead of Mbed TLS, which was used in earlier versions.[/quote]

For the PSA Crypto API, see developer.nordicsemi.com/.../driver_config.html Feature configurations and driver support for how to configure features.

I am guessing you need something from Key derivation function configurations, for example CONFIG_PSA_WANT_ALG_PBKDF2_HMAC.

[quote user="Max Peter"]Now that otPlatCryptoPbkdf2GenerateKey(..) is also used inside the Thread stack it may also impact the integrity of the Thread stack.[/quote]

I will mention this to our Thread developers, so they know about this, thanks!

RE: Thread PSKc calculation fails in SDK 2.6.0

Max Peter — Sat, 06 Apr 2024 11:13:12 GMT

The new default setting is:

>> The default cryptography backend for Thread is now Arm PSA Crypto API instead of Mbed TLS, which was used in earlier versions.

See: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/releases_and_maturity/releases/release-notes-2.6.0.htm

otPlatCryptoPbkdf2GenerateKey(..) did work in SDK 2.5.x and earlier.

My use case is using otPlatCryptoPbkdf2GenerateKey(..) for key deviation on applikation level.

Now that otPlatCryptoPbkdf2GenerateKey(..) is also used inside the Thread stack it may also impact the integrity of the Thread stack.

RE: Thread PSKc calculation fails in SDK 2.6.0

Sigurd Hellesvik — Wed, 03 Apr 2024 09:15:27 GMT

Hi,

[quote user=""]which is the new default setting in SDK 2.6.0.[/quote]

Does this mean that what you do worked before?

[quote user=""]>> ot dataset pskc -p 123456[/quote]

What is your end goal?

Regards,
Sigurd Hellesvik