nRF54L15 - Fail to provision ED25519 keys in to the KMU (nrfutil)

RE: nRF54L15 - Fail to provision ED25519 keys in to the KMU (nrfutil)

Priyanka — Mon, 14 Jul 2025 09:22:37 GMT

Thanks for updating. Will convey this to the team.

-Priyanka

RE: nRF54L15 - Fail to provision ED25519 keys in to the KMU (nrfutil)

DanN — Fri, 11 Jul 2025 13:26:25 GMT

Hi Priyanka,

Thanks for the quick follow up and the information regarding the key bit size.

As for the error message, it's not very informative, we get the generic message same as the issue reported in the other ticket I mentioned:

"Failed to provision keys on "1050XXXXXX", Device error: Keys [123] failed provisioning."

Kind regards,

Daniyal

RE: nRF54L15 - Fail to provision ED25519 keys in to the KMU (nrfutil)

Priyanka — Fri, 11 Jul 2025 12:53:02 GMT

[quote user=""]1. the --size parameter must be 255, the ED25519 key pairs length are actually 256 bit, when we give 256 the provisioning fails, I guess somewhere the microcode checks for this, not sure if this is a issue or not just mentioning it here as information.[/quote]

ed25519 keys in PSA are 255-bit: https://arm-software.github.io/psa-api/crypto/1.2/api/keys/types.html

[quote user=""]2. the --cracen_usage parameter supposed to support both the "ENCRYPTED" and "RAW" based on the info provided by Nordic, however, the provisioning only works with the "RAW" option (--size 255). We kept other parameters same as above.
[/quote]

What error do you get when trying to provision with the ENCRYPTED option? Could be an issue with the script, but it is supported in the KMU.

-Priyanka

RE: nRF54L15 - Fail to provision ED25519 keys in to the KMU (nrfutil)

Priyanka — Fri, 11 Jul 2025 12:42:07 GMT

Hi Daniyal,

Checking this internally and will keep you updated.

Please expect a slight delay as it's the summer vacation here in Norway .

Thank you for understanding.

-Priyanka