nrf_security: Update configurations for Oberon PSA 1.5.1

Update the configurations to align with the new Oberon PSA 1.5.1.
This aligns the PSA_ACCELs, the PSA_NEEDs and the PSA_WANTs symbols
as required.

Ref: NCSDK-34275

Signed-off-by: Georgios Vasilakis <[email protected]>

Author: Vge0rge

subsys/nrf_security/Kconfig.psa.nordic

@@ -164,6 +164,36 @@ config PSA_WANT_ALG_ED448PH
 	bool "PSA ED448PH support" if !PSA_PROMPTLESS
 	default y if PSA_CRYPTO_ENABLE_ALL
 
+config PSA_WANT_ALG_HSS
+	bool "PSA HSS support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_LMS
+	bool "PSA LMS support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_ML_DSA
+	bool "PSA ML_DSA support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_XMSS
+	bool "PSA XMSS support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_XMSS_MT
+	bool "PSA XMSS_MT support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_ML_KEM
+	bool "PSA ML_KEM support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
 config PSA_WANT_ALG_PURE_EDDSA
 	bool "PSA PURE_EDDSA support" if !PSA_PROMPTLESS
 
@@ -175,6 +205,10 @@ config PSA_WANT_ALG_RSA_PSS_ANY_SALT
 	bool "PSA RSA PSS message signature support, any salt length" if !PSA_PROMPTLESS
 	default y if PSA_CRYPTO_ENABLE_ALL
 
+config PSA_WANT_ALG_SHA_256_192
+	bool "PSA SHA-256/192 support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
 config PSA_WANT_ALG_SHA_512_224
 	bool "PSA SHA-512/224 support" if !PSA_PROMPTLESS
 	default y if PSA_CRYPTO_ENABLE_ALL
@@ -229,6 +263,24 @@ config PSA_WANT_ALG_CHACHA20
 	bool "PSA CHACHA20 stream cipher support" if !PSA_PROMPTLESS
 	default y if PSA_CRYPTO_ENABLE_ALL
 
+config PSA_WANT_ALG_XCHACHA20_POLY1305
+	bool "PSA XCHACHA20 POLY1305 support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_SHAKE128_256
+	bool "PSA SHAKE128 256 bits support [EXPERIMENTAL]" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+	select EXPERIMENTAL
+
+config PSA_WANT_ALG_SHAKE256_192
+	bool "PSA SHAKE256 192 bits support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_ALG_SHAKE256_256
+	bool "PSA SHAKE256 256 bits support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
 config PSA_WANT_ALG_SHAKE256_512
 	bool "PSA SHAKE256 512 bits support" if !PSA_PROMPTLESS
 	default y if PSA_CRYPTO_ENABLE_ALL
@@ -241,8 +293,8 @@ config PSA_WANT_ALG_AES_KWP
 	bool "AES Key Wrap with padding support (NIST-SP-800-38F and RFC5649) [EXPERIMENTAL]" if !MBEDTLS_PROMPTLESS
 	select EXPERIMENTAL
 
-config PSA_WANT_ALG_WPA3_SAE_PT
-	bool "WPA3-SAE-PT support [EXPERIMENTAL]" if !MBEDTLS_PROMPTLESS
+config PSA_WANT_ALG_WPA3_SAE_H2E
+	bool "WPA3-SAE-H2E support [EXPERIMENTAL]" if !PSA_PROMPTLESS
 	select EXPERIMENTAL
 
 config PSA_WANT_ALG_WPA3_SAE
@@ -433,3 +485,129 @@ config PSA_WANT_KEY_TYPE_SRP_PUBLIC_KEY
 
 config PSA_WANT_KEY_TYPE_WPA3_SAE_PT
 	bool "WPA3-SAE-PT key support" if !PSA_PROMPTLESS
+
+config PSA_WANT_KEY_TYPE_XCHACHA20
+	bool "PSA XCHACHA20 key type support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_KEY_TYPE_HSS_PUBLIC_KEY
+	bool "PSA HSS public key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_KEY_TYPE_LMS_PUBLIC_KEY
+	bool "PSA LMS public key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_KEY_TYPE_XMSS_PUBLIC_KEY
+	bool "PSA XMSS public key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_KEY_TYPE_XMSS_MT_PUBLIC_KEY
+	bool "PSA XMSS_MT public key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_ML_DSA_KEY_SIZE_44
+	bool "PSA ML-DSA-44 security level key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_ML_DSA_KEY_SIZE_65
+	bool "PSA ML-DSA-65 security level key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_ML_DSA_KEY_SIZE_87
+	bool "PSA ML-DSA-87 security level key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_BASIC
+	bool
+	default y
+	depends on PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_IMPORT	|| \
+		   PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_EXPORT	|| \
+		   PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_GENERATE	|| \
+		   PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_DERIVE
+
+config PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_IMPORT
+	bool "ML_DSA key pair import support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_DSA key pair: import key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_EXPORT
+	bool "ML_DSA key pair export support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_DSA key pair: export key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_GENERATE
+	bool "ML_DSA key pair generate support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_DSA key pair: generate key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_DERIVE
+	bool "ML_DSA key pair derive support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_DSA key pair: derive key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY
+	bool "ML_DSA public key support" if !PSA_PROMPTLESS
+	help
+	  ML_DSA public key support.
+
+config PSA_WANT_ML_KEM_KEY_SIZE_512
+	bool "PSA ML-KEM-512 security level key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_ML_KEM_KEY_SIZE_768
+	bool "PSA ML-KEM-768 security level key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_ML_KEM_KEY_SIZE_1024
+	bool "PSA ML-KEM-1024 security level key support" if !PSA_PROMPTLESS
+	default y if PSA_CRYPTO_ENABLE_ALL
+
+config PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_BASIC
+	bool
+	default y
+	depends on PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_IMPORT	|| \
+		   PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_EXPORT	|| \
+		   PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_GENERATE	|| \
+		   PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_DERIVE
+
+config PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_IMPORT
+	bool "ML_KEM key pair import support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_KEM_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_KEM key pair: import key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_EXPORT
+	bool "ML_KEM key pair export support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_KEM_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_KEM key pair: export key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_GENERATE
+	bool "ML_KEM key pair generate support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_KEM_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_KEM key pair: generate key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_KEM_KEY_PAIR_DERIVE
+	bool "ML_KEM key pair derive support" if !PSA_PROMPTLESS
+	select PSA_WANT_KEY_TYPE_ML_KEM_PUBLIC_KEY
+	default y if PSA_CRYPTO_ENABLE_ALL
+	help
+	  ML_KEM key pair: derive key for both the private and public key.
+
+config PSA_WANT_KEY_TYPE_ML_KEM_PUBLIC_KEY
+	bool "ML_KEM public key support" if !PSA_PROMPTLESS
+	help
+	  ML_KEM public key support.

subsys/nrf_security/cmake/psa_crypto_config.cmake

@@ -445,15 +445,52 @@ kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_TLS12_PSK_TO_MS)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_AES_KW)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_AES_KWP)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_WRAP_DRIVER)
-kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_WPA3_SAE_PT)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT_SECP)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT_SECP_R1_256)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_WPA3_SAE)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_WPA3_SAE_SECP_R1_256)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_SP800_108_COUNTER_CMAC)
 kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_SP800_108_COUNTER_HMAC)
-
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ECDH_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ECDSA_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_HSS_VERIFY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_ENCAPSULATION_DRIVER)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_DERIVE_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_EXPORT_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_GENERATE_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_IMPORT_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ECC_PUBLIC_KEY_SECP_K1_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_HSS_PUBLIC_KEY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_LMS_PUBLIC_KEY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ML_DSA_KEY_PAIR_EXPORT)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ML_DSA_KEY_PAIR_IMPORT)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ML_DSA_PUBLIC_KEY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ML_KEM_KEY_PAIR_EXPORT)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ML_KEM_KEY_PAIR_IMPORT)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_ML_KEM_PUBLIC_KEY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_XMSS_MT_PUBLIC_KEY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_KEY_TYPE_XMSS_PUBLIC_KEY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_LMS_VERIFY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_DSA)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_DSA_44)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_DSA_65)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_DSA_87)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_DSA_SIGN)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_DSA_VERIFY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_KEM)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_KEM_1024)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_KEM_512)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_ML_KEM_768)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_SHAKE128_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_SHAKE256_192)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_SHAKE256_256)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_SHA_256_192)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_STREAM_CIPHER_XCHACHA20)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_WPA3_SAE_H2E)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_XCHACHA20_POLY1305)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_XMSS_MT_VERIFY)
+kconfig_check_and_set_base_to_one(PSA_NEED_OBERON_XMSS_VERIFY)
 
 # Convert NRF_RNG driver configuration
 kconfig_check_and_set_base_to_one(PSA_NEED_NRF_RNG_ENTROPY_DRIVER)

subsys/nrf_security/configs/psa_crypto_config.h.template

@@ -204,14 +204,52 @@
 #cmakedefine PSA_NEED_OBERON_TLS12_PSK_TO_MS                                        @PSA_NEED_OBERON_TLS12_PSK_TO_MS@
 #cmakedefine PSA_NEED_OBERON_AES_KW                                                 @PSA_NEED_OBERON_AES_KW@
 #cmakedefine PSA_NEED_OBERON_AES_KWP                                                @PSA_NEED_OBERON_AES_KWP@
-#cmakedefine PSA_NEED_OBERON_WPA3_SAE_PT                                            @PSA_NEED_OBERON_WPA3_SAE_PT@
 #cmakedefine PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT                                   @PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT@
 #cmakedefine PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT_SECP                              @PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT_SECP@
 #cmakedefine PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT_SECP_R1_256                       @PSA_NEED_OBERON_KEY_TYPE_WPA3_SAE_PT_SECP_R1_256@
 #cmakedefine PSA_NEED_OBERON_WPA3_SAE                                               @PSA_NEED_OBERON_WPA3_SAE@
 #cmakedefine PSA_NEED_OBERON_WPA3_SAE_SECP_R1_256                                   @PSA_NEED_OBERON_WPA3_SAE_SECP_R1_256@
 #cmakedefine PSA_NEED_OBERON_SP800_108_COUNTER_CMAC                                 @PSA_NEED_OBERON_SP800_108_COUNTER_CMAC@
 #cmakedefine PSA_NEED_OBERON_SP800_108_COUNTER_HMAC                                 @PSA_NEED_OBERON_SP800_108_COUNTER_HMAC@
+#cmakedefine PSA_NEED_OBERON_ECDH_SECP_K1_256                                       @PSA_NEED_OBERON_ECDH_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_ECDSA_SECP_K1_256                                      @PSA_NEED_OBERON_ECDSA_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_HSS_VERIFY                                             @PSA_NEED_OBERON_HSS_VERIFY@
+#cmakedefine PSA_NEED_OBERON_KEY_ENCAPSULATION_DRIVER                               @PSA_NEED_OBERON_KEY_ENCAPSULATION_DRIVER@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_DERIVE_SECP_K1_256               @PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_DERIVE_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_EXPORT_SECP_K1_256               @PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_EXPORT_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_GENERATE_SECP_K1_256             @PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_GENERATE_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_IMPORT_SECP_K1_256               @PSA_NEED_OBERON_KEY_TYPE_ECC_KEY_PAIR_IMPORT_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ECC_PUBLIC_KEY_SECP_K1_256                    @PSA_NEED_OBERON_KEY_TYPE_ECC_PUBLIC_KEY_SECP_K1_256@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_HSS_PUBLIC_KEY                                @PSA_NEED_OBERON_KEY_TYPE_HSS_PUBLIC_KEY@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_LMS_PUBLIC_KEY                                @PSA_NEED_OBERON_KEY_TYPE_LMS_PUBLIC_KEY@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ML_DSA_KEY_PAIR_EXPORT                        @PSA_NEED_OBERON_KEY_TYPE_ML_DSA_KEY_PAIR_EXPORT@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ML_DSA_KEY_PAIR_IMPORT                        @PSA_NEED_OBERON_KEY_TYPE_ML_DSA_KEY_PAIR_IMPORT@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ML_DSA_PUBLIC_KEY                             @PSA_NEED_OBERON_KEY_TYPE_ML_DSA_PUBLIC_KEY@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ML_KEM_KEY_PAIR_EXPORT                        @PSA_NEED_OBERON_KEY_TYPE_ML_KEM_KEY_PAIR_EXPORT@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ML_KEM_KEY_PAIR_IMPORT                        @PSA_NEED_OBERON_KEY_TYPE_ML_KEM_KEY_PAIR_IMPORT@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_ML_KEM_PUBLIC_KEY                             @PSA_NEED_OBERON_KEY_TYPE_ML_KEM_PUBLIC_KEY@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_XMSS_MT_PUBLIC_KEY                            @PSA_NEED_OBERON_KEY_TYPE_XMSS_MT_PUBLIC_KEY@
+#cmakedefine PSA_NEED_OBERON_KEY_TYPE_XMSS_PUBLIC_KEY                               @PSA_NEED_OBERON_KEY_TYPE_XMSS_PUBLIC_KEY@
+#cmakedefine PSA_NEED_OBERON_LMS_VERIFY                                             @PSA_NEED_OBERON_LMS_VERIFY@
+#cmakedefine PSA_NEED_OBERON_ML_DSA                                                 @PSA_NEED_OBERON_ML_DSA@
+#cmakedefine PSA_NEED_OBERON_ML_DSA_44                                              @PSA_NEED_OBERON_ML_DSA_44@
+#cmakedefine PSA_NEED_OBERON_ML_DSA_65                                              @PSA_NEED_OBERON_ML_DSA_65@
+#cmakedefine PSA_NEED_OBERON_ML_DSA_87                                              @PSA_NEED_OBERON_ML_DSA_87@
+#cmakedefine PSA_NEED_OBERON_ML_DSA_SIGN                                            @PSA_NEED_OBERON_ML_DSA_SIGN@
+#cmakedefine PSA_NEED_OBERON_ML_DSA_VERIFY                                          @PSA_NEED_OBERON_ML_DSA_VERIFY@
+#cmakedefine PSA_NEED_OBERON_ML_KEM                                                 @PSA_NEED_OBERON_ML_KEM@
+#cmakedefine PSA_NEED_OBERON_ML_KEM_1024                                            @PSA_NEED_OBERON_ML_KEM_1024@
+#cmakedefine PSA_NEED_OBERON_ML_KEM_512                                             @PSA_NEED_OBERON_ML_KEM_512@
+#cmakedefine PSA_NEED_OBERON_ML_KEM_768                                             @PSA_NEED_OBERON_ML_KEM_768@
+#cmakedefine PSA_NEED_OBERON_SHAKE128_256                                           @PSA_NEED_OBERON_SHAKE128_256@
+#cmakedefine PSA_NEED_OBERON_SHAKE256_192                                           @PSA_NEED_OBERON_SHAKE256_192@
+#cmakedefine PSA_NEED_OBERON_SHAKE256_256                                           @PSA_NEED_OBERON_SHAKE256_256@
+#cmakedefine PSA_NEED_OBERON_SHA_256_192                                            @PSA_NEED_OBERON_SHA_256_192@
+#cmakedefine PSA_NEED_OBERON_STREAM_CIPHER_XCHACHA20                                @PSA_NEED_OBERON_STREAM_CIPHER_XCHACHA20@
+#cmakedefine PSA_NEED_OBERON_WPA3_SAE_H2E                                           @PSA_NEED_OBERON_WPA3_SAE_H2E@
+#cmakedefine PSA_NEED_OBERON_XCHACHA20_POLY1305                                     @PSA_NEED_OBERON_XCHACHA20_POLY1305@
+#cmakedefine PSA_NEED_OBERON_XMSS_MT_VERIFY                                         @PSA_NEED_OBERON_XMSS_MT_VERIFY@
+#cmakedefine PSA_NEED_OBERON_XMSS_VERIFY                                            @PSA_NEED_OBERON_XMSS_VERIFY@
 
 #cmakedefine PSA_NEED_NRF_RNG_ENTROPY_DRIVER                    @PSA_NEED_NRF_RNG_ENTROPY_DRIVER@