How to use CryptoCell310 with nRF Connect SDK

[ipener]

Hi there,

the nRF58240 SoC supports a wide range of hardware-accelerated cryptography features using ARM's CryptoCell310. However, I'm unable to use many of the features with the nRF Connect SDK. The samples included in the the official documentation don't use any of the code prefixed with `CRYS_` in contrast to the nRF5 SDK. I need to use the functions previously defined in:

#include <crys_srp.h>
#include <crys_rnd.h>
#include <crys_hkdf.h>
#include <crys_ec_edw_api.h>

They also don't seem to be available in nrfxlib. Any help would be most welcome.

[ipener]

Thanks for the reply. I'm aware of the Nordic Security Module and nrf_cc3xx_mbedcrypto library. However, the SRP and HKDF functionality seems doesn't seem to be accessible through those APIs although the nRF58240 data sheet states that the SoC supports it. As I understand it's possible to use the nRF5 SDK instead of nRF Connect but this comes with other tradeoffs. Do you know whether the nRF Connect SDK will eventually support all of the CryptoCell features?

[Einar Thorsrud]

Hi,

HKDF is supported (see cc3xx_mbedcrypto documentation for list of features). SRP is also available, but outside of mbed TLS (see mbedtls_cc_srp.h).

[ipener]

Awesome! Thanks for the pointers