Where is QSPI Encryption function and registers ((ENC.KEY, ENC.NONCE. ENC.ENABLE, and etc)) in nrf5340

[Jaewook]

Dear, 

Based on the material (https://infocenter.nordicsemi.com/index.jsp?topic=%2Fps_nrf5340%2Fqspi.html), Encryption should be enabled independently for XIP and EasyDMA, with separate keys and nonce like as shown in Figure 3. Steam Cipher. 

However, I couldn't find any related function or registers (like ENC.KEY, ENC.NONCE, ENC.ENABLE in Figure 3.) for this Encryption feature.

Where are they?    How can I use the Encryption feature indepentaly?

Also, in the hal/nordic/nrfx/hal/nrf_qspi.h, I could find only XIP and EasyDMA functions only as shown blow:

#if NRF_QSPI_HAS_XIP_ENC

NRF_STATIC_INLINE void nrf_qspi_xip_encryption_configure(NRF_QSPI_Type * p_reg,

nrf_qspi_encryption_t const * p_cfg)

{

p_reg->XIP_ENC.KEY0 = p_cfg->key[0];

p_reg->XIP_ENC.KEY1 = p_cfg->key[1];

p_reg->XIP_ENC.KEY2 = p_cfg->key[2];

p_reg->XIP_ENC.KEY3 = p_cfg->key[3];

p_reg->XIP_ENC.NONCE0 = p_cfg->nonce[0];

p_reg->XIP_ENC.NONCE1 = p_cfg->nonce[1];

p_reg->XIP_ENC.NONCE2 = p_cfg->nonce[2];

}

NRF_STATIC_INLINE void nrf_qspi_xip_encryption_set(NRF_QSPI_Type * p_reg, bool enable)

{

p_reg->XIP_ENC.ENABLE =

(enable ? QSPI_XIP_ENC_ENABLE_ENABLE_Enabled << QSPI_XIP_ENC_ENABLE_ENABLE_Pos

: QSPI_XIP_ENC_ENABLE_ENABLE_Disabled << QSPI_XIP_ENC_ENABLE_ENABLE_Pos);

}

#endif

#if NRF_QSPI_HAS_DMA_ENC

NRF_STATIC_INLINE void nrf_qspi_dma_encryption_configure(NRF_QSPI_Type * p_reg,

nrf_qspi_encryption_t const * p_cfg)

{

p_reg->DMA_ENC.KEY0 = p_cfg->key[0];

p_reg->DMA_ENC.KEY1 = p_cfg->key[1];

p_reg->DMA_ENC.KEY2 = p_cfg->key[2];

p_reg->DMA_ENC.KEY3 = p_cfg->key[3];

p_reg->DMA_ENC.NONCE0 = p_cfg->nonce[0];

p_reg->DMA_ENC.NONCE1 = p_cfg->nonce[1];

p_reg->DMA_ENC.NONCE2 = p_cfg->nonce[2];

}

NRF_STATIC_INLINE void nrf_qspi_dma_encryption_set(NRF_QSPI_Type * p_reg, bool enable)

{

p_reg->DMA_ENC.ENABLE =

(enable ? QSPI_DMA_ENC_ENABLE_ENABLE_Enabled << QSPI_DMA_ENC_ENABLE_ENABLE_Pos

: QSPI_DMA_ENC_ENABLE_ENABLE_Disabled << QSPI_DMA_ENC_ENABLE_ENABLE_Pos);

}

#endif

Regards,

Jae

[Simonr]

Hi

The Hardware unique key sample uses the KMU and shows how a key can be used to derive an encryption key through psa_crypto APIs.

The KMU peripheral description should explain how it pushes key values over a dedicated secure APB to pre-configured secure locations within the memory map.

Best regards,

Simon