Skip to content

Conversation

@juhaylinen
Copy link

Set CONFIG_TFM_PROFILE_TYPE_NOT_SET for boards with TF-M to enable ITS and PS. Enable also CONFIG_PSA_WANT_GENERATE_RANDOM.

native_sim target needs CONFIG_PSA_WANT_ALG_ECB_NO_PADDING.

Skip checking of private_reserved field in psa_key_attributes if present.

Signed-off-by: Juha Ylinen [email protected]

anangl added 30 commits January 29, 2025 10:31
…nfo without MCUboot"

This reverts commit adb4588.

Signed-off-by: Andrzej Głąbek <[email protected]>
…opping"

This reverts commit 1a60098.

Signed-off-by: Andrzej Głąbek <[email protected]>
…re in serialized 802.15.4"

This reverts commit 4ea0c03.

Signed-off-by: Andrzej Głąbek <[email protected]>
… strlcpy"

This reverts commit 03363a9.

Signed-off-by: Andrzej Głąbek <[email protected]>
… descriptors"

This reverts commit 643506a.

Signed-off-by: Andrzej Głąbek <[email protected]>
…verflowing"

This reverts commit f1dc0e4.

Signed-off-by: Andrzej Głąbek <[email protected]>
This reverts commit e42d302.

Signed-off-by: Andrzej Głąbek <[email protected]>
…port get"

This reverts commit 1f8e370.

Signed-off-by: Andrzej Głąbek <[email protected]>
This reverts commit 5b87a8a.

Signed-off-by: Andrzej Głąbek <[email protected]>
…ror conditions"

This reverts commit c57352e.

Signed-off-by: Andrzej Głąbek <[email protected]>
This reverts commit 29b9b3e.

Signed-off-by: Andrzej Głąbek <[email protected]>
…flash by default"

This reverts commit 90d4047.

Signed-off-by: Andrzej Głąbek <[email protected]>
…warder Kconfig"

This reverts commit e2c87e8.

Signed-off-by: Andrzej Głąbek <[email protected]>
…utomatic"

This reverts commit 4ba4cab.

Signed-off-by: Andrzej Głąbek <[email protected]>
…ies"

This reverts commit 173223e.

Signed-off-by: Andrzej Głąbek <[email protected]>
…ase"

This reverts commit 841d6ce.

Signed-off-by: Andrzej Głąbek <[email protected]>
… quirks"

This reverts commit fb52d17.

Signed-off-by: Andrzej Głąbek <[email protected]>
… core"

This reverts commit 97e7184.

Signed-off-by: Andrzej Głąbek <[email protected]>
…nes"

This reverts commit b1e8294.

Signed-off-by: Andrzej Głąbek <[email protected]>
…sable"

This reverts commit 0bb05fc.

Signed-off-by: Andrzej Głąbek <[email protected]>
Nicolas Pitre and others added 29 commits January 29, 2025 12:27
Repeated references to _current won't produce a different result as the
executing thread instance is always the same. Use the const attribute to
let the compiler know it may reuse a previously obtained value. This offset
the penalty for moving z_smp_current_get() out of line and provides yet
more binary size reduction.

This change is isolated in its own commit to ease bisecting in case some
unexpected misbehavior is eventually observed.

Signed-off-by: Nicolas Pitre <[email protected]>
(cherry picked from commit bc6eded)
Allowed toolchains was not set in 'board' metadata causing those to not
build and get filtered.

Fixes #83792

Signed-off-by: Anas Nashif <[email protected]>
(cherry picked from commit 1f48740)
… handling

Move enabling of counter to the test instead of test setup. Test may be
skipped in some configurations and in that case counter shall not be
started so by moving setup to the test code allows skipping test before
counter is started.

Signed-off-by: Krzysztof Chruściński <[email protected]>
(cherry picked from commit 1ee434a)
…e PM

uart120 requires device runtime to be enable. Enable it for nrf54h20dk.

When device runtime PM is used for interrupt driven and polling API
then UART device is initially suspended. It means that RX is disabled.
In order to enable RX device must be explicitly resumed using PM API.

Test is enabling UART RX (uart_rx_enable) from counter callback
(interrupt handler context). For fast instance on nrf54h20dk (uart120)
it is not allowed because PM resume can only be called from the thread
context. Because of that, test is skipped for uart120 and asynchronous
API.

Signed-off-by: Krzysztof Chruściński <[email protected]>
(cherry picked from commit cc12f65)
Add check for MBO feature before including the source file.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit 0953ea0)
Zephyr introduced postive feature flags to make advanced features
conditional but the upstream has followed a negative feature flag
for advanced features, and during upmerge these two weren't reconciled.

Fix the build in case advanced features are disabled.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit d909634)
…ed features

This feature is handy to free up some memory, so, make sure it always
builds.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit 7532e73)
Default is always disabled.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit 819acf1)
Fixes build issue when WMM AC feature is disabled.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit 2350b6b)
Remove the HCI command & event emulation layer for ECDH commands and
events. This means that we always do the necessary operations in the host.
The existing BT_ECC Kconfig option stays, but now gets automatically
enabled when necessary (e.g. based on the BT_SMP option), which is why this
commit removes so many explicit assignments in prj.conf files.

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 09e86f3)
This option only exposes internal APIs, so there should be no need to allow
applications to set an explicit value. Instead, users of the API should
select it through Kconfig.

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit d3c8cb4)
Mention the removed prompt for BT_ECC in the migration guide, and also add
a note about the removed HCI emulation layer to the release notes.

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit b3c6151)
…got deprecated

This is a follow-up to commit 8cfad44.

Replace the deprecated BT_LE_ADV_CONN macro with BT_LE_ADV_CONN_FAST_2.

Signed-off-by: Andrzej Głąbek <[email protected]>
(cherry picked from commit f930739)
-liblc3 added a library-internal path to zephyr_interface containing
 a file that collides with common.h required e.g. by Mbed TLS
 This commit fixes build-issues by making this include-folder
 PRIVATE to the named library liblc3

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 2ca64a3)
-Mbed TLS requires common.h to build. The sample provides common.h
 in sample folder level but included the path to zephyr_interface.
 This commit changes the include to be sample-specific

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 627d2f9)
…rm_zeroize

-Adding explicit include for mbedtls/platform_util.h to get acces
 to mbedtls_platform_zeroize in ITS. Somehow not visibile in Zephyr but
 it caused build issues in nRF Connect SDK.

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 202c2c4)
…he boards

Bring the change that was already in place for the qemu_cortex_m3 board
to all the other ones, since also nrf52840 had a similar problem
(see issue #82812).

Signed-off-by: Valerio Setti <[email protected]>
(cherry picked from commit 9d0b124)
The BT Host module also uses import/export PSA functions alongside the
generate one, so these PSA_WANT should be added as well.

Previously it happened to work only because Mbed TLS is enabling
IMPORT/EXPORT internally whenever GENERATE/DERIVE is set. However the
same might not be true for all PSA Crypto providers.

Signed-off-by: Valerio Setti <[email protected]>
(cherry picked from commit 222f8d8)
…rver

The unicast server does not need GATT caching and it was likely
incorrectly added earlier as a dependency.

Upstream PR #: 84232

Signed-off-by: Emil Gydesen <[email protected]>
… updates

-Update hostap to PR nrfconnect#76 which adds support for
 CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG instead of relying on legacy
 Mbed TLS ctr_drbg and entropy APIs. This change is in line with
 PSA crypto entropy changes in Zephyr happening with TinyCrypt
 deprecation and advancement of PSA crypto mechanisms
-Remove defconfigs for currently sets the Kconfigs:
 -CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
 -CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG_ALLOW_NON_CSPRNG

Upstream PR #: 84517

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
…endencies

-PSA_WANT_ALG_CMAC must be set for PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128
 to be valid. This commit fixes this mismatch for hostap

Upstream PR #: 84517

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
…nfigurations

-Mbed TLS has come up with its own naming-convention with regards
 to certain Mbed TLS configurations for TLS/DTLS and X.509. This
 commit fixes a couple of them by depending on MBEDTLS_BUILTIN
 which is set when Kconfig.tls-generic is used
 1. Make MBEDTLS_PEM_CERTIFICATE_FORMAT depend on MBEDTLS_BUILTIN
    The proper name for this functionaity is MBEDTL_PEM_PARSE_C and
    MBEDTLS_PEM_WRITE_C
 2. Make MBEDTLS_SERVER_NAME_INDICATION depend on MBEDTLS_BUILTIN
    The proper name for this is MBEDTLS_SSL_SERVER_NAME_INDICATION

Upstream PR #: 84517

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
This is a follow-up to commit 12eee61.

Explicitly enable "PSA_WANT_ALG_ECB_NO_PADDING" to select the AES ECB
mode that it is used in CMAC operation.

This is done because CMAC uses AES-ECB, so both AES and ECB must
be explicitly enabled. Previously it worked because Mbed TLS is
not currently performing any check internally on this and it's
just enabling ECB automatically.

Upstream PR #: 84638

Signed-off-by: Andrzej Głąbek <[email protected]>
There's no point building the sample for platforms that do not support
networking, hence add netif dependency to reduce the CI execution
scope.

Upstream PR #: 84857

Signed-off-by: Robert Lubos <[email protected]>
Non-secure variants for nRF7002 DK were removed from upstream
in commit 10d4973. Revert these
changes downstream, so that the NS variants are still available.

Signed-off-by: Andrzej Głąbek <[email protected]>
…en built-in in PSA"

This reverts commit ac6d834.

Temporarily revert an upstream change that leads to a Kconfig dependency
loop with MBEDTLS_CIPHER_AES_ENABLED. This is supposed to be replaced
with a better fix later.

Signed-off-by: Andrzej Głąbek <[email protected]>
This needs to be revisited but the newly added dependency on
the entropy_generator doesn't work with nrf_security.

Signed-off-by: Georgios Vasilakis <[email protected]>
This test cannot be executed with the SDFW Service Framework client
started, so disable its initialization.

Signed-off-by: Andrzej Głąbek <[email protected]>
Set CONFIG_TFM_PROFILE_TYPE_NOT_SET for boards with TF-M to enable
ITS and PS. Enable also CONFIG_PSA_WANT_GENERATE_RANDOM.

native_sim target needs CONFIG_PSA_WANT_ALG_ECB_NO_PADDING.

Skip checking of private_reserved field in psa_key_attributes if
present.

Signed-off-by: Juha Ylinen <[email protected]>
@juhaylinen juhaylinen closed this Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.