Skip to content

Commit 347a15d

Browse files
ArekBalysNordicrlubos
authored andcommitted
doc: Add HMAC SHA256 to KMU key types in docs.
Added a release note and update the Supported key types table. Signed-off-by: Arkadiusz Balys <[email protected]>
1 parent f62d635 commit 347a15d

File tree

2 files changed

+10
-2
lines changed

2 files changed

+10
-2
lines changed

doc/nrf/app_dev/device_guides/nrf54l/cryptography.rst

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -263,11 +263,19 @@ The following table lists all key types that can be stored in the KMU, indicatin
263263
- Yes
264264
* - ED25519 public key
265265
- | ``key_type``: ``PSA_KEY_TYPE_ECC_PUBLIC_KEY(PSA_ECC_FAMILY_TWISTED_EDWARDS)``
266-
| ``key bits``: 255
266+
| ``key_bits``: 255
267267
- 2
268268
- No
269269
- Yes
270270
- Yes
271+
* - HMAC SHA-256 128-bit keys
272+
- | ``key_type``: ``PSA_KEY_TYPE_HMAC``
273+
| ``key_bits``: 128
274+
| ``key_algorithm``: ``PSA_ALG_HMAC(PSA_ALG_SHA_256)``
275+
- 1
276+
- No
277+
- No
278+
- Yes
271279
.. [1] Keys with the Encrypted usage scheme (``CRACEN_KMU_KEY_USAGE_SCHEME_ENCRYPTED``) will require two additional KMU slots to store the nonce and the authentication tag.
272280
273281
Storing keys in KMU

doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ Working with nRF54H Series
6868
Developing with nRF54L Series
6969
=============================
7070

71-
|no_changes_yet_note|
71+
* Added HMAC SHA-256 with a 128-bit key type to KMU, as detailed in the :ref:`ug_nrf54l_crypto_kmu_supported_key_types` documentation section.
7272

7373
Developing with nRF53 Series
7474
============================

0 commit comments

Comments
 (0)