Skip to content

Commit 3155b35

Browse files
tomi-fontrlubos
authored andcommitted
secure_storage: auto-write HUK when using that as key provider
The HUK library requires the HUK to be written to be able to derive keys. When Secure storage uses the HUK library to derive keys, default-enable the Kconfig option which allows to write the HUK automatically on PSA Crypto init so that the users don't have to do it themselves and don't get confused by Secure storage not working out of the box. Signed-off-by: Tomi Fontanilles <[email protected]>
1 parent c424269 commit 3155b35

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

subsys/secure_storage/Kconfig

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ config SECURE_STORAGE_ITS_TRANSFORM_AEAD_KEY_PROVIDER_HUK_LIBRARY
1313
depends on HW_UNIQUE_KEY_SUPPORTED && NRF_SECURITY
1414
select HW_UNIQUE_KEY
1515
select HW_UNIQUE_KEY_RANDOM
16+
imply HW_UNIQUE_KEY_WRITE_ON_CRYPTO_INIT
1617

1718
endchoice # SECURE_STORAGE_ITS_TRANSFORM_AEAD_KEY_PROVIDER
1819

0 commit comments

Comments
 (0)