MBEDTLS_USE_PSA_CRYPTO support in nRF SDK

[ajokinen]

Hello,

Is the MBEDTLS_USE_PSA_CRYPTO functionality supported in nRF SDK 1.6.0 (nRF9160)? Setting this value in Kconfig doesn't seem to propagate to nrf-config.h.

If I try to add kconfig_mbedtls_config("MBEDTLS_USE_PSA_CRYPTO") to kconfig_psa_configure.cmake, there is a linking issue:
build/modules/nrfxlib/nrfxlib/nrf_security/include/mbedtls_copied/mbedtls/psa_util.h:91: undefined reference to `PSA_ALG_AEAD_WITH_SHORTENED_TAG'

Thanks!

[Albrecht Markus Schellenberger]

Hello Antti,

Yes, this is supported in NCS v1.6.0. But MBEDTLS_USE_PSA_CRYPTO has some direct dependencies. Have you considered them in your build?

Regards,

Markus

[ajokinen]

Hello,

Dependencies should be OK and if I check e.g. guiconfig CONFIG_MBEDTLS_USE_PSA_CRYPTO is set.

Functions like psa_generate_key work, but then for example mbedtls_pk_setup_opaque does not compile, as CONFIG_MBEDTLS_USE_PSA_CRYPTO seems to not propagate to MBEDTLS_USE_PSA_CRYPTO in nrf-config.h.
I can also confirm this by setting the cmake flag DEBUG_NRF_SECURITY -> MBEDTLS_USE_PSA_CRYPTO is not set.