samples: bluetooth: Enable PSA RNG on 54h in Dragoon-owned samples

gordonklaus · rlubos · commit 13675caf22cf · 2025-03-31T15:35:08.000+02:00
The PSA RNG is a cryptographically secure random number generator.

It will be enabled by default, eventually.  For now, enable it manually.

Signed-off-by: Gordon Klaus &lt;gordon.klaus@nordicsemi.no&gt;
diff --git a/samples/bluetooth/conn_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.conf b/samples/bluetooth/conn_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.conf
@@ -5,3 +5,11 @@
 #
 
 CONFIG_BT_RX_STACK_SIZE=2048
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/conn_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.overlay b/samples/bluetooth/conn_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.overlay
@@ -23,3 +23,17 @@
 	nonsecure-channels = < 0x5>;
 	owned-channels = < 0x4 0x5 0x6>;
 };
+
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/conn_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.conf b/samples/bluetooth/conn_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.conf
@@ -0,0 +1,13 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/conn_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/conn_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/event_trigger/boards/nrf54h20dk_nrf54h20_cpurad.conf b/samples/bluetooth/event_trigger/boards/nrf54h20dk_nrf54h20_cpurad.conf
@@ -0,0 +1,13 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/event_trigger/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/event_trigger/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -9,3 +9,17 @@
 		egu = &egu020;
 	};
 };
+
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/iso_combined_bis_and_cis/boards/nrf54h20dk_nrf54h20_cpuapp.conf b/samples/bluetooth/iso_combined_bis_and_cis/boards/nrf54h20dk_nrf54h20_cpuapp.conf
@@ -0,0 +1,13 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/iso_combined_bis_and_cis/boards/nrf54h20dk_nrf54h20_cpuapp.overlay b/samples/bluetooth/iso_combined_bis_and_cis/boards/nrf54h20dk_nrf54h20_cpuapp.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/iso_combined_bis_and_cis/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.conf b/samples/bluetooth/iso_combined_bis_and_cis/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.conf
@@ -0,0 +1,7 @@
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/iso_combined_bis_and_cis/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/iso_combined_bis_and_cis/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/iso_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.conf b/samples/bluetooth/iso_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.conf
@@ -5,3 +5,11 @@
 #
 
 CONFIG_BT_RX_STACK_SIZE=2048
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/iso_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.overlay b/samples/bluetooth/iso_time_sync/boards/nrf54h20dk_nrf54h20_cpuapp.overlay
@@ -23,3 +23,17 @@
 	nonsecure-channels = < 0x5>;
 	owned-channels = < 0x4 0x5 0x6>;
 };
+
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/iso_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.conf b/samples/bluetooth/iso_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.conf
@@ -0,0 +1,7 @@
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/iso_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/iso_time_sync/sysbuild/hci_ipc/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/radio_coex_1wire/boards/nrf54h20dk_nrf54h20_cpurad.conf b/samples/bluetooth/radio_coex_1wire/boards/nrf54h20dk_nrf54h20_cpurad.conf
@@ -0,0 +1,13 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/radio_coex_1wire/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/radio_coex_1wire/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -39,3 +39,17 @@
 &radio {
 	coex = <&nrf_radio_coex>;
 };
+
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/radio_notification_cb/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/radio_notification_cb/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/radio_notification_cb/prj.conf b/samples/bluetooth/radio_notification_cb/prj.conf
@@ -23,3 +23,11 @@ CONFIG_CONSOLE_HANDLER=y
 CONFIG_CONSOLE_GETCHAR=y
 
 CONFIG_HEAP_MEM_POOL_SIZE=2048
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/subrating/boards/nrf54h20dk_nrf54h20_cpuapp.conf b/samples/bluetooth/subrating/boards/nrf54h20dk_nrf54h20_cpuapp.conf
@@ -0,0 +1,13 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/subrating/boards/nrf54h20dk_nrf54h20_cpuapp.overlay b/samples/bluetooth/subrating/boards/nrf54h20dk_nrf54h20_cpuapp.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/bluetooth/subrating/sysbuild/ipc_radio/boards/nrf54h20dk_nrf54h20_cpurad.conf b/samples/bluetooth/subrating/sysbuild/ipc_radio/boards/nrf54h20dk_nrf54h20_cpurad.conf
@@ -0,0 +1,7 @@
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
diff --git a/samples/bluetooth/subrating/sysbuild/ipc_radio/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/bluetooth/subrating/sysbuild/ipc_radio/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/mpsl/timeslot/boards/nrf54h20dk_nrf54h20_cpurad.overlay b/samples/mpsl/timeslot/boards/nrf54h20dk_nrf54h20_cpurad.overlay
@@ -0,0 +1,13 @@
+// Enable PSA RNG
+/ {
+	chosen {
+		zephyr,entropy = &psa_rng;
+	};
+
+	psa_rng: psa-rng {
+		compatible = "zephyr,psa-crypto-rng";
+		status = "okay";
+	};
+
+	/delete-node/ prng;
+};
diff --git a/samples/mpsl/timeslot/prj.conf b/samples/mpsl/timeslot/prj.conf
@@ -15,3 +15,11 @@ CONFIG_MPSL_TIMESLOT_SESSION_COUNT=1
 CONFIG_RING_BUFFER=y
 CONFIG_LOG=y
 CONFIG_LOG_MODE_DEFERRED=y
+
+# Enable PSA RNG
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_SSF_CRYPTO_CLIENT=y
+CONFIG_SSF_PSA_CRYPTO_SERVICE_ENABLED=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_NRF_SECURITY=y
+CONFIG_DCACHE=n
