nrf_security: CRACEN: Default IKG to off

degjorva · rlubos · commit 10adaa6772a0 · 2025-08-22T10:07:24.000+02:00
Change CRACEN_IKG to default off
Update HW_UNIQUE_KEY to turn it on when CRACEN_HW enabled
This saves flash in cases where the IKG is not required

Signed-off-by: Dag Erik Gjørvad &lt;dag.erik.gjorvad@nordicsemi.no&gt;
diff --git a/lib/hw_unique_key/Kconfig b/lib/hw_unique_key/Kconfig
@@ -45,6 +45,7 @@ config HW_UNIQUE_KEY
 	select PSA_WANT_ALG_ECB_NO_PADDING if CRACEN_HW_PRESENT
 	select PSA_WANT_ALG_GCM if CRACEN_HW_PRESENT
 	select PSA_NEED_CRACEN_KMU_DRIVER if CRACEN_HW_PRESENT
+	select CRACEN_IKG if CRACEN_HW_PRESENT
 	select FPROTECT if HAS_HW_NRF_ACL
 	imply NRFX_NVMC if !CRACEN_HW_PRESENT
 	default y if BUILD_WITH_TFM
diff --git a/subsys/nrf_security/src/drivers/cracen/Kconfig b/subsys/nrf_security/src/drivers/cracen/Kconfig
@@ -56,8 +56,7 @@ config CRACEN_PROVISION_PROT_RAM_INV_DATA
 	  manually, otherwise the protected RAM keys will not be usable.
 
 config CRACEN_IKG
-	bool "Enable CRACEN IKG"
-	default y
+	bool "CRACEN IKG"
 	help
 	  Enable the Cracen Isolated Key Generator.
 
