From 043f34215a3624985dc8932b8d32b9c41dd78d11 Mon Sep 17 00:00:00 2001 From: Nordic Builder Date: Mon, 14 Jul 2025 07:27:52 +0000 Subject: [PATCH 1/4] manifest: Update sdk-zephyr revision (auto-manifest PR) Automatically created by Github Action. Signed-off-by: Nordic Builder --- west.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/west.yml b/west.yml index ea1a787185e1..848c88a63382 100644 --- a/west.yml +++ b/west.yml @@ -65,7 +65,7 @@ manifest: # https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/zephyr/guides/modules.html - name: zephyr repo-path: sdk-zephyr - revision: 8cba1f6198f880ce025d6f69625e42cdfdb0d4d0 + revision: cebbc7c0b844060ba2f344432ecba0482caf3b39 import: # In addition to the zephyr repository itself, NCS also # imports the contents of zephyr/west.yml at the above From 4d588b5b47123965c9dc78a31e9378d6fe13b814 Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Mon, 14 Jul 2025 13:13:30 +0530 Subject: [PATCH 2/4] nrf_security: Increase default maximum size of MPI Max MPI size is set to 256 by default. This needs to be increased to 384 to handle RSA-3072 signature. Signed-off-by: Ravi Dondaputi --- subsys/nrf_security/Kconfig.legacy | 1 + 1 file changed, 1 insertion(+) diff --git a/subsys/nrf_security/Kconfig.legacy b/subsys/nrf_security/Kconfig.legacy index f1ffe4ec092f..c271c779321b 100644 --- a/subsys/nrf_security/Kconfig.legacy +++ b/subsys/nrf_security/Kconfig.legacy @@ -288,6 +288,7 @@ config MBEDTLS_MPI_MAX_SIZE prompt "Maximum number of bytes for usable MPIs." if !(CC312_BACKEND || CC310_BACKEND) default 256 if CC310_BACKEND default 384 if CC312_BACKEND + default 384 # Needed to support RSA 3072 range 256 2048 config MBEDTLS_LEGACY_CRYPTO_C_SILENCE_DEPRECATION From b8bf16d93d37429aaf617788ee5753c98f148cca Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Wed, 16 Jul 2025 16:21:18 +0530 Subject: [PATCH 3/4] modules: tf-m: Increase protected partition size Increase size of Protected Storage partition to accommodate the certificates required for W-Fi enterprise security. Signed-off-by: Ravi Dondaputi --- modules/trusted-firmware-m/Kconfig.tfm.pm | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/trusted-firmware-m/Kconfig.tfm.pm b/modules/trusted-firmware-m/Kconfig.tfm.pm index 58f4b3b115fd..fcb544499f23 100644 --- a/modules/trusted-firmware-m/Kconfig.tfm.pm +++ b/modules/trusted-firmware-m/Kconfig.tfm.pm @@ -49,6 +49,7 @@ config PM_PARTITION_SIZE_TFM config PM_PARTITION_SIZE_TFM_PROTECTED_STORAGE hex "Memory reserved for TFM Protected Storage" + default 0x5000 if TFM_PARTITION_PROTECTED_STORAGE && WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE default 0x4000 if TFM_PARTITION_PROTECTED_STORAGE default 0 help From 49789e5fd7b0c210503653572ed8f6d4343b6d74 Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Wed, 16 Jul 2025 16:55:37 +0530 Subject: [PATCH 4/4] samples: wifi: shell: Make space in RAM for TFM build For build with TFM and support for protected storage enabled, additional RAM needs to be freed to accommodate the additional features. Signed-off-by: Ravi Dondaputi --- samples/wifi/shell/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/samples/wifi/shell/Kconfig b/samples/wifi/shell/Kconfig index 5b4ea8a6a4bc..f9cc3a8e3336 100644 --- a/samples/wifi/shell/Kconfig +++ b/samples/wifi/shell/Kconfig @@ -20,6 +20,7 @@ if NET_BUF_VARIABLE_DATA_SIZE # so smaller pool sizes are recommended for these targets. config NET_PKT_BUF_TX_DATA_POOL_SIZE default 40000 if SOC_SERIES_NRF54HX + default 35000 if !SOC_SERIES_NRF52X && !SOC_SERIES_NRF54LX && BUILD_WITH_TFM default 50000 if !SOC_SERIES_NRF52X && !SOC_SERIES_NRF54LX config NET_PKT_BUF_RX_DATA_POOL_SIZE