-
Couldn't load subscription status.
- Fork 1.4k
entropy: 54h20 PSA RNG fixes #20896
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
entropy: 54h20 PSA RNG fixes #20896
Conversation
|
The following west manifest projects have changed revision in this Pull Request:
✅ All manifest checks OK Note: This message is automatically posted and updated by the Manifest GitHub Action. |
CI InformationTo view the history of this post, clich the 'edited' button above Inputs:Sources:sdk-nrf: PR head: 9819aeec0deb0dd22ce7266fc215d8dadc78bd3b more detailssdk-nrf:
Github labels
List of changed files detected by CI (4)Outputs:ToolchainVersion: 7dbe0e2658 Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped;
|
|
You can find the documentation preview for this PR here. |
aa89b5b to
c4e6382
Compare
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just some minor comments.
subsys/nrf_security/src/ssf_secdom/ssf_psa_core_compatibility.c
Outdated
Show resolved
Hide resolved
subsys/nrf_security/src/ssf_secdom/ssf_psa_core_compatibility.c
Outdated
Show resolved
Hide resolved
|
ping @nrfconnect/ncs-si-muffin @nrfconnect/ncs-aurora @nrfconnect/ncs-protocols-serialization @nrfconnect/ncs-merge |
19eb219 to
46e6572
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
956366c to
4ee343b
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added comments to nrfxlib PR but this one alone lgtm
4ee343b to
4e12e65
Compare
Initialize the ssf_client earlier during the boot process during post kernel. ssf_client needs to be initialized before the CONFIG_NRF_802154_SER_RADIO_INIT_PRIO since it is used by the "nRF IEEE 802.15.4" protocol. It also needs to be initialied after the IPC IPC_SERVICE_REG_BACKEND_PRIORITY since the IPC expects the protocol to be initialized. Failing to do that will also trigger an assertion in Zephyr. Signed-off-by: Georgios Vasilakis <[email protected]>
There are two functions which are defined in the psa_crypto_core.h and are implemented in psa_crypto.c which are used by the TLS library. These functions are: psa_can_do_hash psa_can_do_cipher These functions just check if the drivers are initialized before the relevant PSA crypto functions can be used. In the case of SSF there is no initialization needed because the PSA initialization happens inside the secure domain firmware before the application boots. These functions are added in a separate file since they only exist to maintain compatibility with the PSA core from Oberon/mbedTLS and they don't need to forward any call to the secure domain. Signed-off-by: Georgios Vasilakis <[email protected]>
4e12e65 to
9819aee
Compare



This PR is a subset of the following PR here:
#17200
The commits are identical apart from some formatting in the commit which adds PSA compatibility layer for SSF.
This mainly fixes an initialization issue with the nRF IEEE 802.15.4 and IPC, please check the commits messages.