How to use CryptoCell310 with nRF Connect SDK

[ipener]

Hi there,

the nRF58240 SoC supports a wide range of hardware-accelerated cryptography features using ARM's CryptoCell310. However, I'm unable to use many of the features with the nRF Connect SDK. The samples included in the the official documentation don't use any of the code prefixed with `CRYS_` in contrast to the nRF5 SDK. I need to use the functions previously defined in:

#include <crys_srp.h>
#include <crys_rnd.h>
#include <crys_hkdf.h>
#include <crys_ec_edw_api.h>

They also don't seem to be available in nrfxlib. Any help would be most welcome.

[Einar Thorsrud]

Hi,

The nRF5 SDK included the CC310 runtime library with CRYS_ based API functions, but in most cases users were/are intended to use the nrf_crypto based API's (that is of course optional, though).

For the Connect SDK SDK there are also several layers of libraries and APIs available, but not the CRYS_ based APIs. The intention there is to primarily use the PSA APIs demonstrated by the crypto examples you linked to. However, you can also use the  Nordic security module, which in turn interface nrf_cc3xx_mbedcrypto library (among other backends), which you can also use directly. This is the lowest level API you get for CryptoCell in the nRF Connect SDK. You can refer to the Cryptography tests to see examples of using the Nordic security module.