RE: Provisioning a X25519 key pair in KMU

Ramakrishnan — Wed, 05 Aug 2026 07:16:26 GMT

Okay. That's helpful. Thank you for trying it out and confirming.

RE: Provisioning a X25519 key pair in KMU

Amanda Hsieh — Tue, 04 Aug 2026 14:30:24 GMT

Hi,

The developer added test vectors for x25519 and successfully ran a few ECDH KMU tests on nRF54L15. This confirms that nrfutil-provisioned x25519 KMU keys are working as expected. Note that it's only tested RAW keys with PERSISTENCE_DEFAULT.

In generate_psa_key_attributes.py, add:

and

To generate the key, call the script like this:

python3 generate_psa_key_attributes.py --id 5 --type ECC_KEY_PAIR_MONTGOMERY --key-bits 255 --algorithm ECDH --location LOCATION_CRACEN_KMU --persistence PERSISTENCE_DEFAULT --cracen-usage RAW --key 0xa546e36bf0527c9d3b16154b82465edd62144c0ac1fc5a18506a2244ba449ac4 --file out.txt --usage DERIVE

The used key_pair is taken from RFC-7748

We will create a PR that updates the generate_psa_key_attributes.py to include x25519 for ECDH sometime this sprint (next 2 weeks).

-Amanda H.

RE: Provisioning a X25519 key pair in KMU

Amanda Hsieh — Mon, 03 Aug 2026 18:57:24 GMT

Hi,

Let me check with the team, then update the case.

Regards,
Amanda H.