nrf_security: Always enable builtin keys for 54L

Enable the builtin keys for the nRF54L series when
nrf_security is being used. This option for
builtin keys is needed for the KMU keys which
don't always have dependencies on the hardware unique key
or the identity key.

We guard this option on the PSA Cracen driver because the
driver implements the necessary builtin key functions.

Signed-off-by: Georgios Vasilakis <[email protected]>

Author: Vge0rge

subsys/nrf_security/Kconfig

@@ -55,7 +55,7 @@ if NRF_SECURITY
 
 config MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
 	bool
-	default y if SOC_SERIES_NRF54LX && (HW_UNIQUE_KEY || IDENTITY_KEY)
+	default y if SOC_SERIES_NRF54LX && PSA_CRYPTO_DRIVER_CRACEN
 	default y if SOC_SERIES_NRF54HX && (SOC_NRF54H20_CPUSEC || SOC_NRF54H20_ENGB_CPUSEC)
 	help
 	  Promptless option used to control if the PSA Crypto core should have support for builtin keys or not.

subsys/nrf_security/src/drivers/cracen/cracenpsa/cracenpsa.cmake

@@ -59,7 +59,7 @@ if(CONFIG_PSA_NEED_CRACEN_MAC_DRIVER)
   )
 endif()
 
-if(CONFIG_PSA_NEED_CRACEN_KEY_MANAGEMENT_DRIVER OR CONFIG_PSA_NEED_CRACEN_KMU_DRIVER)
+if(CONFIG_PSA_NEED_CRACEN_KEY_MANAGEMENT_DRIVER OR CONFIG_PSA_NEED_CRACEN_KMU_DRIVER OR CONFIG_MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS)
   list(APPEND cracen_driver_sources
     ${CMAKE_CURRENT_LIST_DIR}/src/key_management.c
   )