crypto: PSA core lite addition: Disable verify-message fallback

frkv · bjarki-andreasen · commit 53c555d01cd6 · 2025-04-04T13:17:02.000+02:00
-Adding an ifdef to prevent call to psa_verfy_message_builtin. This
 API is only possible to use in a full PSA core and is unnecessary
 when the driver(s) provides explict support for verify message

ref: NCSDK-30323

Signed-off-by: Frank Audun Kvamtrø &lt;frank.kvamtro@nordicsemi.no&gt;
diff --git a/subsys/nrf_security/src/psa_crypto_driver_wrappers.c b/subsys/nrf_security/src/psa_crypto_driver_wrappers.c
@@ -303,11 +303,15 @@ psa_status_t psa_driver_wrapper_verify_message(const psa_key_attributes_t *attri
 		break;
 	}
 
+#if defined(CONFIG_PSA_CORE_LITE)
+	return PSA_ERROR_NOT_SUPPORTED;
+#else
 	/* Call back to the core with psa_verify_message_builtin.
 	 * This will in turn forward this to use psa_crypto_driver_wrapper_verify_hash
 	 */
 	return psa_verify_message_builtin(attributes, key_buffer, key_buffer_size, alg, input,
 					  input_length, signature, signature_length);
+#endif
 }
 
 psa_status_t psa_driver_wrapper_sign_hash(const psa_key_attributes_t *attributes,

Original file line number	Diff line number	Diff line change
`@@ -303,11 +303,15 @@ psa_status_t psa_driver_wrapper_verify_message(const psa_key_attributes_t *attri`
`303`	`303`	`break;`
`304`	`304`	`}`
`305`	`305`
	`306`	`+#if defined(CONFIG_PSA_CORE_LITE)`
	`307`	`+ return PSA_ERROR_NOT_SUPPORTED;`
	`308`	`+#else`
`306`	`309`	`/* Call back to the core with psa_verify_message_builtin.`
`307`	`310`	`* This will in turn forward this to use psa_crypto_driver_wrapper_verify_hash`
`308`	`311`	`*/`
`309`	`312`	`return psa_verify_message_builtin(attributes, key_buffer, key_buffer_size, alg, input,`
`310`	`313`	`input_length, signature, signature_length);`
	`314`	`+#endif`
`311`	`315`	`}`
`312`	`316`
`313`	`317`	`psa_status_t psa_driver_wrapper_sign_hash(const psa_key_attributes_t *attributes,`