Enable ECDH with _ns build

[Jithin A]

Hi,

I am trying to implement the ECDH functionality in the TF-M application.

I am referring Crypto: ECDH (nordicsemi.com) and in the build target I see, the example can be built with _ns.

When I try to build the above example with the _ns build, I am getting an error "PSA_ERROR_NOT_SUPPORTED (-134)"

Whereas when I build it without _ns, the example works fine.

Am I missing any configuration here? No changes were made to prj.conf

Please help me I need the ECDH with _ns build.

Target board: nrf5340dk_nrf5340_cpuapp_ns

[Hieu]

Hi Jithin,

Are there any other relevant logs?

Please try enabling CONFIG_PSA_WANT_ALG_ECDH.

Hieu

[Jithin A]

Hi Hieu,

Thank you for the reply,

We have now fixed the issue.

The issue is with the config: CONFIG_BUILD_WITH_TFM

After debugging we see some includes were not included due to above config and adding it into the prj file, I got the output.

I thought CONFIG_BUILD_WITH_TFM would be added automatically when we choose to build with _ns which did not and so we were seeing the error.

Thank you for the support.

[Hieu]

Hi Jithin,

An answer was verified, and the case was closed, so I didn't notice your reply. Sorry.

What nRF Connect SDK version are you working with? If 2.7.0, where is your project located, and how are you building it?

The reason I ask is because CONFIG_BUILD_WITH_TFM should be enabled by default. See: nRF5340 DK (nordicsemi.com)

Another factor is that in 2.7.0, sysbuild was introduced.
When building from inside the SDK folder, sysbuild is used automatically.
When building from outside, the previous parent-child image system is used instead.

[Jithin A]

Hi Hieu,

Sorry for the late reply

Hieu said:

What nRF Connect SDK version are you working with? If 2.7.0, where is your project located, and how are you building it?

--> I am using SDKv2.6.0, my project is located outside the SDK directory.

I am building the project with VS Code NRF SDK extensions.

[Hieu]

Hi Jithin,

Then CONFIG_BUILD_WITH_TFM should be enabled by default. Please check the compiled Kconfig at <build dir>/zephyr/.config. It should be there.