<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cannot use PSA Cryptography API with nCS + TF-M + MbedTLS</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/78313/cannot-use-psa-cryptography-api-with-ncs-tf-m-mbedtls</link><description>Hi, I want to use TrustedFirmware-M as a secure backend for an application that uses Mbed TLS in the non-secure domain, and this seems to be artificially limited - the MBEDTLS_USE_PSA_CRYPTO configuration flag is never enabled in the Mbed TLS config file</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Fri, 06 Aug 2021 14:05:47 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/78313/cannot-use-psa-cryptography-api-with-ncs-tf-m-mbedtls" /><item><title>RE: Cannot use PSA Cryptography API with nCS + TF-M + MbedTLS</title><link>https://devzone.nordicsemi.com/thread/323795?ContentTypeID=1</link><pubDate>Fri, 06 Aug 2021 14:05:47 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:cb8da7c8-86c3-4af0-b983-4075a59545d8</guid><dc:creator>Didrik Rokhaug</dc:creator><description>&lt;p&gt;Hi,&lt;/p&gt;
&lt;p&gt;Our implementation enables the MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER option, which is incompatible with USE_PSA_CRYPTO.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://github.com/nrfconnect/sdk-nrfxlib/blob/1a894638c438ce738c101b2c35894c9ffa2beb95/nrf_security/configs/nrf-config.h.template#L1256"&gt;https://github.com/nrfconnect/sdk-nrfxlib/blob/1a894638c438ce738c101b2c35894c9ffa2beb95/nrf_security/configs/nrf-config.h.template#L1256&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;However, on the master branch, we do have a sample that shows how to do TLS with TF-M: &lt;a href="https://github.com/nrfconnect/sdk-nrf/tree/master/samples/crypto/psa_tls"&gt;https://github.com/nrfconnect/sdk-nrf/tree/master/samples/crypto/psa_tls&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Best regards,&lt;/p&gt;
&lt;p&gt;Didrik&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>