Directly access mbedTLS from nRF-SDK

RE: Directly access mbedTLS from nRF-SDK

Amanda Hsieh — Fri, 21 Feb 2020 12:20:42 GMT

Hi,

I have not tested it, but I don't see why it should be a problem. But neither do I see a reason for it (other than saving compilation time)

you can use the mbed tls directly anyway, without building it as a separate library first (like we do in nrf_crypto).

-Amanda H.

RE: Directly access mbedTLS from nRF-SDK

M. David. — Thu, 20 Feb 2020 14:33:19 GMT

Thanks for your answer, I'm aware that the nordic SDK does not provide the ecjpake API.That's the reason, why I currently use the mbedtls directly.

My question goes more in the direction: what's the best approach to access/link the mbedtls library in my project?

- link it as static library

- Access via the SDK source (external)

- what else?

What I'm currently doing is, I've just added the ecjpake.c file, which is available in the nordic SDK (because nordic is using the mbedtls implementation) into my Makefile and then I was ready to use the ecjpake from mbedtls directly.

I'm not interested in Elliptic Curve Cryptography directly but only in regard of the ec-jpake.

RE: Directly access mbedTLS from nRF-SDK

Amanda Hsieh — Thu, 20 Feb 2020 12:42:13 GMT

Hi,

[quote user=""]What would be the best approach to get access to the ecjpake API from mbedtls, there seem to be various ways?[/quote]

SDK 15.3 does not support the ecjpake API. It only supports Elliptic Curve Cryptography Key Management, Elliptic Curve Diffie-Hellman (ECDH) and Elliptic Curve Digital Signature (ECDSA).

[quote user=""]And how can I get this security-module (they are using some kconfig files) to work?[/quote]

If you want to use Elliptic Curve Cryptography Library, please enable ECC_ENABLED in the sdk_config.h

-Amanda H.