Some issues with running the Zephyr psa_crypto sample on the nRF5340 DK board

[andywe]

Build the sample using west ... like so ...

 west build  -b nrf5340dk_nrf5340_cpuapp_ns -p=auto  --force -d "C:\nRF-Projects-2\psa_crypto\"  ".\zephyr\samples\tfm_integration\psa_crypto\"

west flash,

connect to PuTTY console and reset ...

output is shown below ... my question is how to set up the example so that the Already exists errors are not displayed .. the tf-m startup details are displayed.

*** Booting Zephyr OS build v3.1.99-ncs1  ***
[00:00:00.365,631] <err> app: Generic error
[00:00:00.365,661] <err> app: Function: 'att_get_iat'
[00:00:00.365,722] <inf> app: Persisting SECP256R1 key as #1
[00:00:00.382,720] <err> app: Already exists
[00:00:00.382,751] <err> app: Function: 'crp_gen_key_secp256r1'
[00:00:00.382,781] <err> app: Failed to generate key.
[00:00:00.399,963] <inf> app: Calculating SHA-256 hash of value

          0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
00000000 50 6C 65 61 73 65 20 68 61 73 68 20 61 6E 64 20 Please hash and
00000010 73 69 67 6E 20 74 68 69 73 20 6D 65 73 73 61 67 sign this messag
00000020 65 2E                                           e.


          0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
00000000 9D 08 E3 E6 DB 1C 12 39 C0 9B 9A 83 84 83 72 7A .......9......rz
00000010 EA 96 9E 1D 13 72 1E 4D 35 75 CC D4 C8 01 41 9C .....r.M5u....A.

[00:00:00.448,608] <inf> app: Signing SHA-256 hash

          0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
00000000 80 15 46 E0 D6 5E 5C DB E8 82 B8 EF 97 1D C7 A0 ..F..^\.........
00000010 4F 04 40 00 00 12 A4 EC 7B 17 55 70 D9 F5 63 43 O.@.....{.Up..cC
00000020 F0 09 49 79 34 93 87 A3 16 EB 5F 5D 6D A5 99 05 ..Iy4....._]m...
00000030 06 8E 7D 3F 88 8F EA C5 99 1B 22 33 39 CC AB 31 ..}?......"39..1

[00:00:00.514,831] <inf> app: Verifying signature for SHA-256 hash
[00:00:00.600,677] <inf> app: Signature verified.
[00:00:00.698,028] <inf> app: Destroyed persistent key #1
[00:00:00.704,284] <inf> app: Generating 256 bytes of random data.

          0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
00000000 90 36 E3 69 71 DD 06 86 62 5E 0F 85 77 B7 39 D7 .6.iq...b^..w.9.
00000010 35 5C FB E9 9B 07 C9 83 83 C7 F5 7B 7C 8A 39 6C 5\.........{|.9l
00000020 17 18 FF 7F C4 23 50 E7 07 98 55 80 96 76 88 CA .....#P...U..v..
00000030 D7 8D 6A E1 23 5D 85 2B 92 F4 83 03 25 56 58 5A ..j.#].+....%VXZ
00000040 7E E4 54 9C 14 03 C2 C1 87 D8 B4 6D 7F 3F B3 BC ~.T........m.?..
00000050 1E E6 E3 0B CC A5 7D 40 C2 32 EE 32 BE 1D 5B BD ......}@.2.2..[.
00000060 60 FB D3 52 73 54 C5 1E 5B 8A 32 18 8C 91 A9 E6 `..RsT..[.2.....
00000070 45 31 4D 6D 67 1B 6A C4 B9 79 74 E0 00 7F 46 95 E1Mmg.j..yt...F.
00000080 8D DC 88 E7 95 7E 2E 36 28 5E D8 A7 27 09 4D D9 .....~.6(^..'.M.
00000090 E3 09 C4 BD CA A1 BF 07 DF 4F FA 78 76 47 CF 47 .........O.xvG.G
000000A0 33 CC 8B 12 01 19 D6 84 B2 86 4D 6D F8 3C 94 38 3.........Mm.<.8
000000B0 85 ED BD 57 44 15 C9 69 D5 91 D1 62 75 F7 27 65 ...WD..i...bu.'e
000000C0 4C D0 A5 03 CB 7B 49 1B 75 34 A1 CF 9D 48 CB EE L....{I.u4...H..
000000D0 65 F9 FE 1C 14 F4 30 27 8E E2 D5 C1 7B 0A EA B6 e.....0'....{...
000000E0 6B C4 2D 7C 23 B8 A7 41 28 BD A5 AE E0 29 FE 8B k.-|#..A(....)..
000000F0 A1 6B 55 15 17 0B 0D AE CF 5E AF 7E 67 17 31 FE .kU......^.~g.1.

[00:00:00.820,068] <inf> app: Initialising PSA crypto
[00:00:00.825,500] <inf> app: PSA crypto init completed
[00:00:00.831,115] <inf> app: Persisting SECP256R1 key as #1
[00:00:00.929,748] <inf> app: Retrieving public key for key #1

          0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F
00000000 04 2F D5 0B 78 1B 43 E5 30 97 D9 CD 91 27 D2 5A ./..x.C.0....'.Z
00000010 D0 23 8E 03 83 EB 48 C8 5E DE 42 92 88 98 BF E4 .#....H.^.B.....
00000020 C1 CA 8F A2 86 A0 89 8D F1 A4 02 A4 60 07 50 19 ............`.P.
00000030 C9 F7 DB 08 C8 47 A5 BC B3 19 3C 5D 30 7C 3C 2E .....G....<]0|<.
00000040 CD                                              .

[00:00:00.998,199] <inf> app: Adding subject name to CSR
[00:00:01.003,967] <inf> app: Adding subject name to CSR completed
[00:00:01.010,498] <inf> app: Adding EC key to PK container
[00:00:01.016,754] <inf> app: Adding EC key to PK container completed
[00:00:01.023,559] <inf> app: Create device Certificate Signing Request
[00:00:01.086,212] <inf> app: Create device Certificate Signing Request completed
[00:00:01.094,085] <inf> app: Certificate Signing Request:

-----BEGIN CERTIFICATE REQUEST-----

[andywe]

Building the application on a modern Ubuntu platform, using a Python venv based environment works

It would be good to know why a build on Windows fails and one on Linux does not ...

.. and the following output (as expected) is displayed in the console ...

Welcome to minicom 2.7.1

OPTIONS: I18n

Compiled on Dec 23 2019, 02:06:26.

Port /dev/ttyACM1, 10:12:49

Press CTRL-A Z for help on special keys

*** Booting Zephyr OS build zephyr-v3.0.0-2733-g13f382287ad0 ***

[00:00:01.048,858] <inf> app: att: System IAT size is: 543 bytes.

[00:00:01.048,858] <inf> app: att: Requesting IAT with 64 byte challenge.

[00:00:01.384,307] <inf> app: att: IAT data received: 543 bytes.

0 1 2 3 4 5 6 7 8 9 A B C D E F

00000000 D2 84 43 A1 01 26 A0 59 01 D3 AA 3A 00 01 24 FF ..C..&.Y...:..$.

00000010 58 40 00 11 22 33 44 55 66 77 88 99 AA BB CC DD X@.."3DUfw......

00000020 EE FF 00 11 22 33 44 55 66 77 88 99 AA BB CC DD ...."3DUfw......

00000030 EE FF 00 11 22 33 44 55 66 77 88 99 AA BB CC DD ...."3DUfw......

00000040 EE FF 00 11 22 33 44 55 66 77 88 99 AA BB CC DD ...."3DUfw......

00000050 EE FF 3A 00 01 24 FB 58 20 A0 A1 A2 A3 A4 A5 A6 ..:..$.X .......

00000060 A7 A8 A9 AA AB AC AD AE AF B0 B1 B2 B3 B4 B5 B6 ................

00000070 B7 B8 B9 BA BB BC BD BE BF 3A 00 01 25 00 58 21 .........:..%.X!

00000080 01 FA 58 75 5F 65 86 27 CE 54 60 F2 9B 75 29 67 ..Xu_e.'.T`..u)g

00000090 13 24 8C AE 7A D9 E2 98 4B 90 28 0E FC BC B5 02 .$..z...K.(.....

000000A0 48 3A 00 01 24 FA 58 20 AA AA AA AA AA AA AA AA H:..$.X ........

000000B0 BB BB BB BB BB BB BB BB CC CC CC CC CC CC CC CC ................

000000C0 DD DD DD DD DD DD DD DD 3A 00 01 24 F8 20 3A 00 ........:..$. :.

000000D0 01 24 F9 19 30 00 3A 00 01 24 FD 82 A5 01 63 53 .$..0.:..$....cS

000000E0 50 45 04 65 30 2E 30 2E 30 05 58 20 BF E6 D8 6F PE.e0.0.0.X ...o

000000F0 88 26 F4 FF 97 FB 96 C4 E6 FB C4 99 3E 46 19 FC .&..........>F..

00000100 56 5D A2 6A DF 34 C3 29 48 9A DC 38 06 66 53 48 V].j.4.)H..8.fSH

00000110 41 32 35 36 02 58 20 39 52 3A 64 6C C4 4E 8B 0D A256.X 9R:dl.N..

00000120 BC 6B 8A 7F A9 E7 C1 60 40 8A A6 FB 44 4D 6B F1 .k.....`@...DMk.

00000130 FF 42 27 F9 CD FC 9B A5 01 64 4E 53 50 45 04 65 .B'......dNSPE.e

00000140 30 2E 30 2E 30 05 58 20 B3 60 CA F5 C9 8C 6B 94 0.0.0.X .`....k.

00000150 2A 48 82 FA 9D 48 23 EF B1 66 A9 EF 6A 6E 4A A3 *H...H#..f..jnJ.

00000160 7C 19 19 ED 1F CC C0 49 06 66 53 48 41 32 35 36 |......I.fSHA256

00000170 02 58 20 68 14 A0 B7 30 D1 84 85 22 3D 71 B5 ED .X h...0..."=q..

00000180 46 B2 F1 E7 E1 17 CC 58 5C DB DA 09 03 DC 6A B6 F......X\.....j.

00000190 00 9D 0E 3A 00 01 25 01 77 77 77 77 2E 74 72 75 ...:..%.wwww.tru

000001A0 73 74 65 64 66 69 72 6D 77 61 72 65 2E 6F 72 67 stedfirmware.org

000001B0 3A 00 01 24 F7 71 50 53 41 5F 49 4F 54 5F 50 52 :..$.qPSA_IOT_PR

000001C0 4F 46 49 4C 45 5F 31 3A 00 01 24 FC 70 30 36 30 OFILE_1:..$.p060

000001D0 34 35 36 35 32 37 32 38 32 39 31 30 30 58 40 68 4565272829100X@h

000001E0 0B 2B C6 28 FE 5A 2A 25 CF C2 61 D2 84 28 EE 34 .+.(.Z*%..a..(.4

000001F0 05 CC 9B FB 09 99 57 1A A4 FB 56 11 55 6F E6 EB ......W...V.Uo..

00000200 DD B7 FF 07 1E 80 19 0D 1C A0 B4 FE FF 18 A9 B5 ................

00000210 8E EC A0 2C 22 66 0A B2 2F 0D 17 74 BB 8B EC ...,"f../..t...

[00:00:01.629,882] <inf> app: Persisting SECP256R1 key as #1

[00:00:01.954,772] <err> app: Already exists

[00:00:01.954,803] <err> app: Function: 'crp_gen_key_secp256r1'

[00:00:01.954,803] <err> app: Failed to generate key.

[00:00:01.971,984] <inf> app: Calculating SHA-256 hash of value

0 1 2 3 4 5 6 7 8 9 A B C D E F

00000000 50 6C 65 61 73 65 20 68 61 73 68 20 61 6E 64 20 Please hash and

00000010 73 69 67 6E 20 74 68 69 73 20 6D 65 73 73 61 67 sign this messag

00000020 65 2E e.

0 1 2 3 4 5 6 7 8 9 A B C D E F

00000000 9D 08 E3 E6 DB 1C 12 39 C0 9B 9A 83 84 83 72 7A .......9......rz

00000010 EA 96 9E 1D 13 72 1E 4D 35 75 CC D4 C8 01 41 9C .....r.M5u....A.

00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

[00:00:02.033,538] <inf> app: Signing SHA-256 hash

0 1 2 3 4 5 6 7 8 9 A B C D E F

00000000 95 DD C2 9B 52 92 2B 69 3A E2 7F 18 92 5A 92 2A ....R.+i:....Z.*

00000010 FC DA 72 EC 39 4B B3 D4 D7 5D AA 83 37 C7 E8 EF ..r.9K...]..7...

00000020 EB A1 69 18 D7 38 B8 CA E3 F6 DC C6 EA 0A E9 B0 ..i..8..........

00000030 3D 1A 3A 57 BF 15 D7 DE F0 6E A1 43 0E 18 DB 94 =.:W.....n.C....

[00:00:02.403,045] <inf> app: Verifying signature for SHA-256 hash

[00:00:03.382,446] <inf> app: Signature verified.

[00:00:03.477,722] <inf> app: Destroyed persistent key #1

[00:00:03.484,100] <inf> app: Generating 256 bytes of random data.

0 1 2 3 4 5 6 7 8 9 A B C D E F

00000000 76 28 E0 DF F5 BC B1 A3 B1 97 DD 44 03 40 38 D0 v(.........D.@8.

00000010 45 43 B7 0A FF D3 42 E7 C5 84 5D 98 7F 2C 22 12 EC....B...]..,".

00000020 23 CE E0 61 69 C6 95 0D 99 FE 20 6D 95 5E 27 41 #..ai..... m.^'A

00000030 3D 23 7D 3A EE 93 4F B1 77 53 72 02 0E 62 25 EF =#}:..O.wSr..b%.

00000040 AD 49 14 86 86 1E 77 EC 29 85 B5 31 F4 0D 6B 6E .I....w.)..1..kn

00000050 3E DC C3 74 80 B0 85 0C C7 2E 17 8B BF 91 4A D5 >..t..........J.

00000060 CE 49 67 41 96 2D E7 B5 6B 15 65 BB 24 3E DB 7C .IgA.-..k.e.$>.|

00000070 3F 6D F2 69 90 78 14 00 B8 CC C3 0B 58 CD 4C 86 ?m.i.x......X.L.

00000080 F1 C8 AF 6E B0 BF DC C0 D7 43 21 E4 0F C6 CC B0 ...n.....C!.....

00000090 39 64 02 6B 3E 67 CD BE 98 10 83 C4 DC 9D 01 C1 9d.k>g..........

000000A0 37 B5 95 57 11 72 F2 78 04 A7 89 24 69 23 C1 69 7..W.r.x...$i#.i

000000B0 8F 3F 69 5A A0 85 86 A3 1A 8B 7F 4A 14 42 92 E1 .?iZ.......J.B..

000000C0 57 D1 C3 E4 50 3B B5 E3 11 5C 4D 33 96 96 52 3D W...P;...\M3..R=

000000D0 C1 7E 2A B2 62 11 3B E5 1D 1C 3F 6D B1 7E 03 4B .~*.b.;...?m.~.K

000000E0 C0 44 16 9B 3D BB A2 11 C9 DD 7C 63 E6 52 F5 11 .D..=.....|c.R..

000000F0 58 FD C1 38 C8 1B 51 A9 84 E0 A0 A6 70 7F 00 60 X..8..Q.....p..`

[00:00:03.599,761] <inf> app: Initialising PSA crypto

[00:00:03.605,194] <inf> app: PSA crypto init completed

[00:00:03.610,809] <inf> app: Persisting SECP256R1 key as #1

[00:00:04.026,702] <inf> app: Retrieving public key for key #1

0 1 2 3 4 5 6 7 8 9 A B C D E F

00000000 04 24 27 47 DB 4A 4B EE 65 4F 08 A8 90 98 56 07 .$'G.JK.eO....V.

00000010 0F 96 6F 75 60 86 11 25 BD DF 6B C6 D6 9E 79 3E ..ou`..%..k...y>

00000020 14 FE BF 6E E8 D5 31 1B 3F A7 4D 27 9B D8 07 56 ...n..1.?.M'...V

00000030 50 DC C3 91 17 98 87 50 29 7C 85 AB 0E 9C 31 4B P......P)|....1K

00000040 31 1

[00:00:04.389,739] <inf> app: Adding subject name to CSR

[00:00:04.395,507] <inf> app: Adding subject name to CSR completed

[00:00:04.402,038] <inf> app: Adding EC key to PK container

[00:00:04.408,264] <inf> app: Adding EC key to PK container completed

[00:00:04.415,069] <inf> app: Create device Certificate Signing Request

[00:00:05.081,970] <inf> app: Create device Certificate Signing Request completd

[00:00:05.089,813] <inf> app: Certificate Signing Request:

-----BEGIN CERTIFICATE REQUEST-----

MIHsMIGQAgEAMC4xDzANBgNVBAoMBkxpbmFybzEbMBkGA1UEAwwSRGV2aWNlIENl

cnRpZmljYXRlMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEJCdH20pL7mVPCKiQ

mFYHD5ZvdWCGESW932vG1p55PhT+v27o1TEbP6dNJ5vYB1ZQ3MORF5iHUCl8hasO

nDFLMaAAMAwGCCqGSM49BAMCBQADSQAwRgIhAMAd1eOTOautwoHjrHVzSpJ17MF4

RYXPGFAT+Ycy9VlgAiEA45ETFi0+dhfWwVc0PEGRCSzH1TtiFiCjt95SGHa5hQI=

-----END CERTIFICATE REQUEST-----

[00:00:05.130,676] <inf> app: Encoding CSR as json

[00:00:05.136,596] <inf> app: Encoding CSR as json completed

[00:00:05.142,608] <inf> app: Certificate Signing Request in JSON:

{"CSR":"-----BEGIN CERTIFICATE REQUEST-----\nMIHsMIGQAgEAMC4xDzANBgNVBAoMBkxpbm}

[Einar Thorsrud]

I do not immediately have an explanation for that. Do you get the same behavior when using the toolchain manager to get the toolchain (both for Linux and Windows)? (As mentioned this sample is not developed by us though, so I suggest referring to the crypto samples under nrf going forward).