psa_hash_compute with 8k message got error -141 built with nrf54l15dk_nrf54l15_cpuapp_ns target

[Sophak]

I am implementing sha256 with hash message bigger than or equal to 8KB. I tried with nrf54l15dk_nrf54l15_cpuapp target, and it's working fine but if I try with nrf54l15dk_nrf54l15_cpuapp_ns I got an error -141(PSA_ERROR_INSUFFICIENT_MEMORY). Likewise, I tried on sample code and got the same error: C:\ncs\v2.9.1\nrf\samples\crypto\sha256

Device: nRF54L15-DK

NCS: V2.9.1

int hash_singlepart_sha256(void)
{
    uint32_t olen;
    psa_status_t status;

    uint8_t* ptrs = malloc(1024 * 8);
    if(ptrs == NULL) {
        LOG_INF("Malloc Error %d...", 1024 * 8);
    }

    memset(ptrs, 1, 8 * 1024);


    LOG_INF("Hashing using SHA256...");

    /* Calculate the SHA256 hash */
    status = psa_hash_compute(
        PSA_ALG_SHA_256, ptrs, 1024 * 8, m_hash, sizeof(m_hash), &olen);
    if (status != PSA_SUCCESS) {
        LOG_INF("psa_hash_compute failed! (Error: %d)", status);
        return APP_ERROR;
    }

    LOG_INF("Hashing successful!");
    PRINT_HEX("SHA256 hash", m_hash, sizeof(m_hash));

    return APP_SUCCESS;
}

Could you please help and advise?

Thanks,

Sophak

[Sophak]

Hello Håkon,

Have implemented it in secure application and implement non-secure callable function for call from non-secure application, but it still the problem.

Thanks and Regards

Sophak

[Håkon Alseth]

Hi Sophak,

 

Can you share your .config file?

 

Kind regards,

Håkon

[Sophak]

Hello Håkon,

Here is the config file

3603.prj.conf

Thanks and regards,

Sophak

[Håkon Alseth]

Hi Sophak,

 

Do you have CONFIG_PSA_CRYPTO_DRIVER_CRACEN selected in your project?

sec_spi.c::9 seems to trigger this error. Do you have a guard against if this is only imported for the secure build (check for CONFIG_TRUSTED_EXECUTION_SECURE) ?

 

Kind regards,

Håkon

[Sophak]

Hello Håkon,

Yes, I have selected CONFIG_PSA_CRYPTO_DRIVER_CRACEN in the project.

nrf54l15dk_nrf54l15_cpuapp_ns.conf

Yes, sec_spi.c is my source implement in secure partition (TFM secure peripheral) and I have included low level CRECAN driver in that file. That is why error triggered on that file.

#include <cracen/mem_helpers.h>
#include <cracen/statuscodes.h>
#include <sicrypto/drbghash.h>
...

Yes, It should import to the secure build only. CONFIG_TRUSTED_EXECUTION_SECURE is enabled

but the problem still occurred.

Thanks,

Sophak