MBEDTLS_USE_PSA_CRYPTO support in nRF SDK

[ajokinen]

Hello,

Is the MBEDTLS_USE_PSA_CRYPTO functionality supported in nRF SDK 1.6.0 (nRF9160)? Setting this value in Kconfig doesn't seem to propagate to nrf-config.h.

If I try to add kconfig_mbedtls_config("MBEDTLS_USE_PSA_CRYPTO") to kconfig_psa_configure.cmake, there is a linking issue:
build/modules/nrfxlib/nrfxlib/nrf_security/include/mbedtls_copied/mbedtls/psa_util.h:91: undefined reference to `PSA_ALG_AEAD_WITH_SHORTENED_TAG'

Thanks!

[Albrecht Markus Schellenberger]

Hello Antti,

ajokinen said:

The target is a custom board based on nrf9160dk_nrf9160ns, so this feature is probably not supported with this board either?

Yes you are right, this will not work neither then. 

ajokinen said:

Do you know if the support is coming in future releases?

I have forwarded this question to our development team.

However, I will be on vacation for the next couple of weeks, so I unfortunately will not be able to provide you with an answer before I’m back to the office.

Regards,

Markus

[Kaja]

Hi,

since Markus is out of office, I will cover for him.

Albrecht Markus Schellenberger said:

ajokinen said:

Do you know if the support is coming in future releases?

I have forwarded this question to our development team.

 - For road map questions please direct them to your local RSM, regional sales manager. 

The officially supported way to run TLS is currently in the TLS sample: 

https://github.com/nrfconnect/sdk-nrf/tree/master/samples/crypto/psa_tls

Best regards,
Kaja