Modem communication in Secure applications for nrf9160

[jfpastrana]

Hello,

As far as i understand we can only use modem library in Non-secure applications, due to a hardware limitation.

The question is simple, do we have any other way to have network connectivity in nRF9160 for Secure applications?

Best regards,

Javi

[Sigurd Hellesvik]

Hi Javi,

It is generally correct to use Non-Secure applications when using the nRF9160.

Therefore, I will check if this is an XY problem before looking into your question.

Why would you need to have network connectivity in nRF9160 for Secure applications?

Regards,
Sigurd Hellesvik

[jfpastrana]

Hello Sigurd,

I am using an application which depends on MBEDTLS_MAC_MD5_ENABLED and MBEDTLS_MAC_SHA512_ENABLED which as far as I understand need security backend.

Then I need network connectivity to send the transactions that I perform in the board over the network. I only need a simple http client to manage get and post requests.

Best regards,

[Sigurd Hellesvik]

To avoid misunderstandings, building for Secure means not getting Security by Separation. See An Introduction to Trusted Firmware-M (TF-M) for more information.

jfpastrana said:

I am using an application which depends on MBEDTLS_MAC_MD5_ENABLED and MBEDTLS_MAC_SHA512_ENABLED which as far as I understand need security backend.

To use the security backend for this, you can still build for "_ns". See our nRF9160: HTTPS Client on Using Mbed TLS and TF-M.

If you do not need TLS and want to do the cryptography in the application, build for "_ns" and use the PSA Crypto API. See Cryptography samples for generic samples.

Does this make sense?

Regards,
Sigurd Hellesvik