Oberon AEAD drivers not enabled even though configs are set.

RE: Oberon AEAD drivers not enabled even though configs are set.

alexdr5398 — Fri, 15 Nov 2024 15:49:11 GMT

Hi Einar,

I have managed to solve it. The `oberon_config.h` is not included unless `CONFIG_NRF_SECURITY_LEGACY_AND_PSA` is defined (See the top of `ext/oberon/psa/core/library/common.h`).

This is not defined unless `CONFIG_TRUSTED_STORE` is defined. I was able to get this enabled and now the oberon drivers are being compiled in.

Thanks for your help

Alex

RE: Oberon AEAD drivers not enabled even though configs are set.

Einar Thorsrud — Fri, 15 Nov 2024 09:02:19 GMT

Hi Alex,

I did a quick test with the Crypto: AES GCM sample running on the nRF52840 DK, and this runs out of the box, using Oberon AEAD, and oberon_aead_decrypt_setup() is called from psa_driver_wrapper_aead_decrypt_setup() in psa_crypto_driver_wrappers.c as it should. So I wonder if there is somethign else with your project.

Have you tested the sample and verified that it works also on your end? If you don't make progress on getting it to work in your application as well, perhaps you can share a complete failing project that I can test on a DK on my end?

RE: Oberon AEAD drivers not enabled even though configs are set.

alexdr5398 — Thu, 14 Nov 2024 15:05:48 GMT

devzone.nordicsemi.com/.../configs.zip

RE: Oberon AEAD drivers not enabled even though configs are set.

Einar Thorsrud — Thu, 14 Nov 2024 14:41:56 GMT

Can you share your prj.conf and the generated .config?

RE: Oberon AEAD drivers not enabled even though configs are set.

alexdr5398 — Thu, 14 Nov 2024 14:24:27 GMT

Hi Einar,

I have confirmed that `CONFIG_PSA_NEED_OBERON_AEAD_DRIVER` is indeed enabled.This is what is being printed in the example that I posted. `config 1` is the result of `printk("config %d\n", CONFIG_PSA_NEED_OBERON_AEAD_DRIVER);`

I have enabled all the prerequisites for `PSA_NEED_OBERON_AEAD_DRIVER` but it seems it is still disabled.

RE: Oberon AEAD drivers not enabled even though configs are set.

Einar Thorsrud — Thu, 14 Nov 2024 14:20:13 GMT

Hi,

CONFIG_PSA_NEED_OBERON_AEAD_DRIVER is not directly set. However, it is set based on combinations of wanted algorithms. You can see the full list from line 17 in oberon_config.h. So for instance, if you add both CONFIG_PSA_WANT_KEY_TYPE_AES=y and CONFIG_PSA_WANT_ALG_GCM=y, CONFIG_PSA_NEED_OBERON_AEAD_DRIVER will also be enabled (any combination that need AEAD will cause it to be automatically set).

RE: Oberon AEAD drivers not enabled even though configs are set.

alexdr5398 — Wed, 13 Nov 2024 17:32:03 GMT

nrf sdk 2.6.1
zephyr sdk 0.16.4

RE: Oberon AEAD drivers not enabled even though configs are set.

JeffW — Wed, 13 Nov 2024 16:58:15 GMT

Which SDK are you using?