nrf_security: Added cache handling in PSA Crypto service

Added cache handling in PSA Crypto service

Ref: NCSDK-NONE

Signed-off-by: Ole Sæther <[email protected]>

Author: osaether

include/sdfw/sdfw_services/crypto_service.h

@@ -481,35 +481,6 @@ psa_status_t ssf_psa_generate_random(uint8_t *output, size_t output_size);
 psa_status_t ssf_psa_generate_key(const psa_key_attributes_t *attributes,
 				  mbedtls_svc_key_id_t *key);
 
-/** @brief Execute psa_sign_hash_start over SSF.
- *
- * See psa_sign_hash_start for details.
- */
-psa_status_t ssf_psa_sign_hash_start(psa_sign_hash_interruptible_operation_t *operation,
-				     mbedtls_svc_key_id_t key, psa_algorithm_t alg,
-				     const uint8_t *hash, size_t hash_length);
-
-/** @brief Execute psa_sign_hash_abort over SSF.
- *
- * See psa_sign_hash_abort for details.
- */
-psa_status_t ssf_psa_sign_hash_abort(psa_sign_hash_interruptible_operation_t *operation);
-
-/** @brief Execute psa_verify_hash_start over SSF.
- *
- * See psa_verify_hash_start for details.
- */
-psa_status_t ssf_psa_verify_hash_start(psa_verify_hash_interruptible_operation_t *operation,
-				       mbedtls_svc_key_id_t key, psa_algorithm_t alg,
-				       const uint8_t *hash, size_t hash_length,
-				       const uint8_t *signature, size_t signature_length);
-
-/** @brief Execute psa_verify_hash_abort over SSF.
- *
- * See psa_verify_hash_abort for details.
- */
-psa_status_t ssf_psa_verify_hash_abort(psa_verify_hash_interruptible_operation_t *operation);
-
 /** @brief Execute psa_pake_setup over SSF.
  *
  * See psa_pake_setup for details.

subsys/nrf_security/src/ssf_secdom/ssf_crypto.c

@@ -423,32 +423,6 @@ psa_status_t psa_generate_key(const psa_key_attributes_t *attributes, mbedtls_sv
 	return ssf_psa_generate_key(attributes, key);
 }
 
-psa_status_t psa_sign_hash_start(psa_sign_hash_interruptible_operation_t *operation,
-				 mbedtls_svc_key_id_t key, psa_algorithm_t alg, const uint8_t *hash,
-				 size_t hash_length)
-{
-	return ssf_psa_sign_hash_start(operation, key, alg, hash, hash_length);
-}
-
-psa_status_t psa_sign_hash_abort(psa_sign_hash_interruptible_operation_t *operation)
-{
-	return ssf_psa_sign_hash_abort(operation);
-}
-
-psa_status_t psa_verify_hash_start(psa_verify_hash_interruptible_operation_t *operation,
-				   mbedtls_svc_key_id_t key, psa_algorithm_t alg,
-				   const uint8_t *hash, size_t hash_length,
-				   const uint8_t *signature, size_t signature_length)
-{
-	return ssf_psa_verify_hash_start(operation, key, alg, hash, hash_length, signature,
-					 signature_length);
-}
-
-psa_status_t psa_verify_hash_abort(psa_verify_hash_interruptible_operation_t *operation)
-{
-	return ssf_psa_verify_hash_abort(operation);
-}
-
 psa_status_t psa_pake_setup(psa_pake_operation_t *operation, mbedtls_svc_key_id_t password_key,
 			    const psa_pake_cipher_suite_t *cipher_suite)
 {

subsys/sdfw_services/services/psa_crypto/Kconfig

@@ -8,6 +8,6 @@ service_name = PSA_CRYPTO
 service_default_enabled = n
 service_id = 0x71
 service_version = 1
-service_buffer_size = 64
+service_buffer_size = 128
 service_name_str = PSA Crypto
 rsource "../Kconfig.template.service"