crypto: Add unit tests for PSA core lite

-This adds unit-tests for PSA core lite for nRF54L15 devices. This
 only supports CRACEN PSA crypto driver. The test  does the following:
  -Provision keys (Ed25519, ECDSA with secp256r1, AES-256)
  -Run verify signature (Ed25519 and ECDSA with secp256r1)
  -Optionally AES CTR encryption
  -Optionally PSA generate random
  -Revoke provisioned keys (that are revokable)
  -Lock provisioned keys (that are read-only)
-For size comparison and configuration consistency there are targets
 in testcase.yaml for the original oberon-psa-crypto as well as
 PSA core lite.
-Provisioning of keys is using PSA crypto APIs. This is only valid for
 the unit-test. To be able to support this, specialized versions of
 psa_import_key and psa_export_key, which is not part of PSA core lite

Note: Since keys provisioned are revokable and read-only it is required
to use ERASEALL or fully recover the device with nrfutil to clear out
KMU slots before running the unit-tests

ref: NCSDK-30323

Signed-off-by: Frank Audun Kvamtrø <[email protected]>

Author: frkv

CODEOWNERS

@@ -916,6 +916,7 @@
 /tests/subsys/nrf_compress/               @nordicjm
 /tests/subsys/nrf_profiler/               @nrfconnect/ncs-si-bluebagel
 /tests/subsys/nrf_rpc/                    @nrfconnect/ncs-protocols-serialization
+/tests/subsys/nrf_security/psa_core_lite/ @nrfconnect/ncs-aegir
 /tests/subsys/partition_manager/region/   @nordicjm @tejlmand
 /tests/subsys/partition_manager/static_pm_file/ @nordicjm @tejlmand
 /tests/subsys/pcd/                        @nrfconnect/ncs-pluto

tests/subsys/nrf_security/psa_core_lite/CMakeLists.txt

@@ -0,0 +1,13 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+cmake_minimum_required(VERSION 3.20.0)
+
+find_package(Zephyr REQUIRED HINTS $ENV{ZEPHYR_BASE})
+project("PSA core lite unit tests")
+
+# Add test sources
+target_sources(app PRIVATE src/main.c)

tests/subsys/nrf_security/psa_core_lite/boards/nrf54l15dk_nrf54l15_cpuapp.conf

@@ -0,0 +1,7 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_CRYPTO_DRIVER_CRACEN=y

tests/subsys/nrf_security/psa_core_lite/overlays/ecdsa.conf

@@ -0,0 +1,9 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY=y
+CONFIG_PSA_WANT_ALG_ECDSA=y
+CONFIG_PSA_WANT_ECC_SECP_R1_256=y
+CONFIG_PSA_WANT_ALG_SHA_256=y

tests/subsys/nrf_security/psa_core_lite/overlays/eddsa.conf

@@ -0,0 +1,10 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY=y
+CONFIG_PSA_WANT_ALG_PURE_EDDSA=y
+CONFIG_PSA_WANT_ECC_TWISTED_EDWARDS_255=y
+CONFIG_PSA_WANT_ALG_SHA_512=y
+CONFIG_PSA_CORE_LITE_NSIB_ED25519_OPTIMIZATIONS=y

tests/subsys/nrf_security/psa_core_lite/overlays/encrypt.conf

@@ -0,0 +1,8 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_PSA_WANT_AES_KEY_SIZE_256=y
+CONFIG_PSA_WANT_KEY_TYPE_AES=y
+CONFIG_PSA_WANT_ALG_CTR=y

tests/subsys/nrf_security/psa_core_lite/overlays/lite.conf

@@ -0,0 +1,6 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_PSA_CORE_LITE=y

tests/subsys/nrf_security/psa_core_lite/overlays/rng.conf

@@ -0,0 +1,6 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_PSA_WANT_GENERATE_RANDOM=y

tests/subsys/nrf_security/psa_core_lite/prj.conf

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2025 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+CONFIG_ZTEST=y
+
+# The Zephyr CMSIS emulation assumes that ticks are ms, currently
+CONFIG_SYS_CLOCK_TICKS_PER_SEC=1000
+
+CONFIG_MAIN_STACK_SIZE=8192
+CONFIG_HEAP_MEM_POOL_SIZE=8192
+
+# Enable logging
+CONFIG_CONSOLE=y
+CONFIG_LOG=y
+
+# Enable nordic security backend and PSA APIs
+CONFIG_NRF_SECURITY=y
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y