Skip to content

Commit fb8acff

Browse files
greg-ferrlubos
greg-fer
authored and
rlubos
committed
doc: crypto: updates to supported features page
Removed table entries that are not supported for all three crypto drivers. NCSDK-22842 and follow-up to #22893 and #23023. Signed-off-by: Grzegorz Ferenc <[email protected]>
1 parent 4eba163 commit fb8acff

File tree

2 files changed

+2
-181
lines changed

2 files changed

+2
-181
lines changed

‎doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,8 @@ Security
128128

129129
* The :ref:`ug_tfm_logging` page with more details about how to configure logging on the same UART instance as the application for nRF5340 and nRF91 Series devices.
130130
* The :ref:`crypto_drivers` page with more details about the driver selection process.
131+
* The :ref:`ug_crypto_supported_features` page with updated values for the supported cryptographic operations and algorithms.
132+
Now, the page only lists features and algorithms that are supported by at least one driver.
131133

132134
Protocols
133135
=========

‎doc/nrf/security/crypto/crypto_supported_features.rst‎

Lines changed: 0 additions & 181 deletions
Original file line numberDiff line numberDiff line change
@@ -55,31 +55,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
5555
- Supported
5656
- Supported
5757
- Supported
58-
* - ARIA
59-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_ARIA`
60-
- Not supported
61-
- Not supported
62-
- Not supported
63-
* - DES (weak)
64-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_DES`
65-
- Not supported
66-
- Not supported
67-
- Not supported
68-
* - CAMELLIA
69-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_CAMELLIA`
70-
- Not supported
71-
- Not supported
72-
- Not supported
73-
* - SM4
74-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_SM4`
75-
- Not supported
76-
- Not supported
77-
- Not supported
78-
* - ARC4 (weak)
79-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_ARC4`
80-
- Not supported
81-
- Not supported
82-
- Not supported
8358
* - Chacha20
8459
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_CHACHA20`
8560
- Supported
@@ -105,16 +80,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
10580
- Supported
10681
- Supported
10782
- Supported
108-
* - DH Key Pair
109-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_DH_KEY_PAIR`
110-
- Not supported
111-
- Not supported
112-
- Not supported
113-
* - DH Public Key
114-
- :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_DH_PUBLIC_KEY`
115-
- Not supported
116-
- Not supported
117-
- Not supported
11883

11984
Key management
12085
--------------
@@ -177,11 +142,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
177142
- Not supported
178143
- Not supported
179144
- Supported
180-
* - XTS
181-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_XTS`
182-
- Not supported
183-
- Not supported
184-
- Not supported
185145
* - Stream cipher
186146
- :kconfig:option:`CONFIG_PSA_WANT_ALG_STREAM_CIPHER`
187147
- Supported
@@ -235,11 +195,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
235195
- Supported
236196
- Supported
237197
- Supported
238-
* - FFDH
239-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_FFDH`
240-
- Not supported
241-
- Not supported
242-
- Not supported
243198

244199
.. note::
245200
The algorithm support when using ECC key types is dependent on one or more Kconfig options enabling curve support according to `ECC curve types`_.
@@ -374,11 +329,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
374329
- Supported
375330
- Supported
376331
- Supported
377-
* - CBC-MAC
378-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_CBC_MAC`
379-
- Not supported
380-
- Not supported
381-
- Not supported
382332

383333
.. note::
384334
Key size configuration for CMAC is supported as described in `AES key size configuration`_.
@@ -500,11 +450,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
500450
- Not supported
501451
- Supported
502452
- Not supported
503-
* - HashEdDSA Edwards448
504-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_ED448PH`
505-
- Not supported
506-
- Not supported
507-
- Not supported
508453
* - RSA PKCS#1 v1.5 sign
509454
- :kconfig:option:`CONFIG_PSA_WANT_ALG_RSA_PKCS1V15_SIGN`
510455
- Supported
@@ -616,11 +561,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
616561
- :ref:`nrf_cc3xx <crypto_drivers_cc3xx>`
617562
- :ref:`CRACEN <crypto_drivers_cracen>`
618563
- :ref:`nrf_oberon <crypto_drivers_oberon>`
619-
* - BrainpoolP160r1 (weak)
620-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_BRAINPOOL_P_R1_160`
621-
- Not supported
622-
- Not supported
623-
- Not supported
624564
* - BrainpoolP192r1
625565
- :kconfig:option:`CONFIG_PSA_WANT_ECC_BRAINPOOL_P_R1_192`
626566
- Not supported
@@ -656,11 +596,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
656596
- Supported
657597
- Supported
658598
- Supported
659-
* - Curve448 (X448)
660-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_MONTGOMERY_448`
661-
- Not supported
662-
- Not supported
663-
- Not supported
664599
* - Edwards25519 (Ed25519)
665600
- :kconfig:option:`CONFIG_PSA_WANT_ECC_TWISTED_EDWARDS_255`
666601
- Supported
@@ -676,11 +611,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
676611
- Supported
677612
- Supported
678613
- Not supported
679-
* - secp224k1
680-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECP_K1_224`
681-
- Not supported
682-
- Not supported
683-
- Not supported
684614
* - secp256k1
685615
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECP_K1_256`
686616
- Supported
@@ -711,76 +641,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
711641
- Not supported
712642
- Supported
713643
- Not supported
714-
* - secp160r2 (weak)
715-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECP_R2_160`
716-
- Not supported
717-
- Not supported
718-
- Not supported
719-
* - sect163k1 (weak)
720-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_K1_163`
721-
- Not supported
722-
- Not supported
723-
- Not supported
724-
* - sect233k1
725-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_K1_233`
726-
- Not supported
727-
- Not supported
728-
- Not supported
729-
* - sect239k1
730-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_K1_239`
731-
- Not supported
732-
- Not supported
733-
- Not supported
734-
* - sect283k1
735-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_K1_283`
736-
- Not supported
737-
- Not supported
738-
- Not supported
739-
* - sect409k1
740-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_K1_409`
741-
- Not supported
742-
- Not supported
743-
- Not supported
744-
* - sect571k1
745-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_K1_571`
746-
- Not supported
747-
- Not supported
748-
- Not supported
749-
* - sect163r1 (weak)
750-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_R1_163`
751-
- Not supported
752-
- Not supported
753-
- Not supported
754-
* - sect233r1
755-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_R1_233`
756-
- Not supported
757-
- Not supported
758-
- Not supported
759-
* - sect283r1
760-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_R1_283`
761-
- Not supported
762-
- Not supported
763-
- Not supported
764-
* - sect409r1
765-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_R1_409`
766-
- Not supported
767-
- Not supported
768-
- Not supported
769-
* - sect571r1
770-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_R1_571`
771-
- Not supported
772-
- Not supported
773-
- Not supported
774-
* - sect163r2 (weak)
775-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_SECT_R2_163`
776-
- Not supported
777-
- Not supported
778-
- Not supported
779-
* - FRP256v1
780-
- :kconfig:option:`CONFIG_PSA_WANT_ECC_FRP_V1_256`
781-
- Not supported
782-
- Not supported
783-
- Not supported
784644

785645
ECC curve driver
786646
----------------
@@ -901,16 +761,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
901761
- Not supported
902762
- Supported
903763
- Supported
904-
* - SHA-512/224
905-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_512_224`
906-
- Not supported
907-
- Not supported
908-
- Not supported
909-
* - SHA-512/256
910-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_512_256`
911-
- Not supported
912-
- Not supported
913-
- Not supported
914764
* - SHA3-224
915765
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA3_224`
916766
- Not supported
@@ -931,40 +781,9 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
931781
- Not supported
932782
- Supported
933783
- Not supported
934-
* - SM3
935-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SM3`
936-
- Not supported
937-
- Not supported
938-
- Not supported
939-
* - SHAKE256 512 bits
940-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_512`
941-
- Not supported
942-
- Not supported
943-
- Not supported
944-
* - MD2 (weak)
945-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_MD2`
946-
- Not supported
947-
- Not supported
948-
- Not supported
949-
* - MD4 (weak)
950-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_MD4`
951-
- Not supported
952-
- Not supported
953-
- Not supported
954-
* - MD5 (weak)
955-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_MD5`
956-
- Not supported
957-
- Not supported
958-
- Not supported
959-
* - RIPEMD-160
960-
- :kconfig:option:`CONFIG_PSA_WANT_ALG_RIPEMD160`
961-
- Not supported
962-
- Not supported
963-
- Not supported
964784

965785
.. note::
966786
* The SHA-1 hash is weak and deprecated and is only recommended for use in legacy protocols.
967-
* The MD5 hash is weak and deprecated and is only recommended for use in legacy protocols.
968787

969788
Hash driver
970789
-----------

0 commit comments

Comments
 (0)