nrf_security: Avoid enabling NRF_SECURITY by default

when the option GEN_ISR_TABLES is not enabled. NRF_SECURITY
for the nRF54L and nRF71 series uses the PSA CRACEN driver
which uses interrupts during its initialization. If the
GEN_ISR_TABLES is not enabled the user must manually configure
the CRACEN interrupts in order to boot the application. It is
better in such a case to require for the user to manually
enable NRF_SECURITY so that they can identify more easily
what caused the booting issue.

The GEN_ISR_TABLES is only disabled in one single Zephyr test
at the time of writing and it not widely used at all so this
should have very minimal impact.

Signed-off-by: Georgios Vasilakis <[email protected]>

Author: Vge0rge

subsys/nrf_security/Kconfig

@@ -35,8 +35,8 @@ config NRF_SECURITY
 	depends on SOC_FAMILY_NORDIC_NRF
 	default y if BUILD_WITH_TFM
 	# entropy is provided by PSA and NRF_SECURITY on NRF54LX and NRF71X
-	default y if DT_HAS_ZEPHYR_PSA_CRYPTO_RNG_ENABLED && SOC_SERIES_NRF54LX && !IS_BOOTLOADER_IMG
-	default y if DT_HAS_ZEPHYR_PSA_CRYPTO_RNG_ENABLED && SOC_SERIES_NRF71X && !IS_BOOTLOADER_IMG
+	default y if DT_HAS_ZEPHYR_PSA_CRYPTO_RNG_ENABLED && SOC_SERIES_NRF54LX && !IS_BOOTLOADER_IMG && GEN_ISR_TABLES
+	default y if DT_HAS_ZEPHYR_PSA_CRYPTO_RNG_ENABLED && SOC_SERIES_NRF71X && !IS_BOOTLOADER_IMG && GEN_ISR_TABLES
 	select DISABLE_MBEDTLS_BUILTIN if MBEDTLS
 	# NCS does not use TF-M's BL2 bootloader, but uses it's own fork
 	# of MCUBoot instead (CONFIG_BOOTLOADER_MCUBOOT).