Custom SPM dependencies

RE: Custom SPM dependencies

NelsonGoncalves — Tue, 29 Jun 2021 08:46:09 GMT

I found the cause this morning, while trying to figure out the reason behind this issue.

Because I am using crypto functions in my non-secure app, the crypto library needs an entropy source from the secure side. This is implemented as a secure service, in function "`spm_request_random_number_nse".

I need to explicitly set CONFIG_SPM_SERVICE_RNG=y in the custom SPM prj.conf, so that it gets build in the SPM image and can latter be used by the non-secure application.

Because I do not use an entropy source, I believed it was not needed. But it turns out it is required by the crypto library. Hence the confusion.

RE: Custom SPM dependencies

Heidi — Tue, 29 Jun 2021 08:36:23 GMT

Hi, I'm able to reproduce the error you're seeing when building the application you provided.

Unfortunately, I have not been able to solve the issue yet as we are very short-staffed due to the summer holidays.

RE: Custom SPM dependencies

NelsonGoncalves — Tue, 22 Jun 2021 13:59:30 GMT

Hello Heidi,

Searching through the menuconfig, it seems that option CONFIG_SPM_SERVICE_RNG is set (=y) because CONFIG_SECURE_SERVICES is set, which in turn is set by CONFIG_SPM.

So I believe it is mandatory whem building a custom SPM. And it's strange that you are not able to reproduce it.

Here is the skeleton of my application, which reproduces the error.

devzone.nordicsemi.com/.../custom_5F00_spm_5F00_dependencies.zip

RE: Custom SPM dependencies

Heidi — Mon, 21 Jun 2021 11:19:40 GMT

Hi, you can use menuconfig (run west menuconfig in the build directory) to see why a configuration is set and then go up from there.

Use "/" to search for symbols and "?" to see more information about the symbol (for instance, why it's been set).

Note that if it's been set by prj.conf directly, then that won't show up here.

I'm not able to reproduce what you're seeing but if you send over your application I can try to do this myself.

RE: Custom SPM dependencies

NelsonGoncalves — Thu, 17 Jun 2021 12:50:09 GMT

Hello Heidi,

We are using roughly the same configuration options and directory structure, the differences are:

my custom SPM does not use the UARTE2 nor the PWM peripherals
my custom SPM uses the crypto hardware and the mbedtls library

Looking at the documentation here https://developer.nordicsemi.com/nRF_Connect_SDK/doc/1.5.0/kconfig/CONFIG_SPM_SERVICE_RNG.html?highlight=config_spm_service_rng#cmdoption-arg-CONFIG_SPM_SERVICE_RNG, I believe that CONFIG_SPM_SERVICE_RNG is set when building the SPM.

Maybe it is because I am including the mbedtls library ?

RE: Custom SPM dependencies

Heidi — Thu, 17 Jun 2021 09:37:47 GMT

Hi!

I'm not able to reproduce this build error when following the tutorial.

Here is the application I am building with, can you see if there are any difference to your application.

devzone.nordicsemi.com/.../custom_5F00_spm_5F00_NCS_5F00_1_5F00_5_5F00_0.7z

Best regards,

Heidi