Skip to content

nrf_security: remove CONFIG_PSA_ITS_ENCRYPTED #24876

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 7, 2025
Merged

nrf_security: remove CONFIG_PSA_ITS_ENCRYPTED #24876

merged 1 commit into from
Oct 7, 2025
+2 −9

Conversation

tomi-font
Copy link
Contributor

CONFIG_TFM_ITS_ENCRYPTED is the one that matters here, and this is only about TF-M.
Get rid of this confusing Kconfig option.

@tomi-font tomi-font requested a review from a team October 6, 2025 10:57
@tomi-font tomi-font requested review from a team as code owners October 6, 2025 10:57
@NordicBuilder NordicBuilder added doc-required PR must not be merged without tech writer approval. changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. labels Oct 6, 2025
@tomi-font tomi-font removed the changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. label Oct 6, 2025
degjorva
degjorva approved these changes Oct 6, 2025
View reviewed changes
Copy link
Contributor

@degjorva degjorva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice

@NordicBuilder
Copy link
Contributor

NordicBuilder commented Oct 6, 2025 •
edited
Loading

CI Information

To view the history of this post, clich the 'edited' button above
Build number: 3

Inputs:

Sources:

sdk-nrf: PR head: 9e7c57925df6199106bb40630b1d8b0cb27df0ba

more details

sdk-nrf:

PR head: 9e7c57925df6199106bb40630b1d8b0cb27df0ba
merge base: 2ebd1b31e066390097e9451c52d34a315a96fd29
target head (main): 492a2e909230366db298db9ca4bc4bc8a13c8bf2
Diff

Github labels

Enabled Name Description
ci-disabled Disable the ci execution
ci-all-test Run all of ci, no test spec filtering will be done
ci-force-downstream Force execution of downstream even if twister fails
ci-run-twister Force run twister
ci-run-zephyr-twister Force run zephyr twister
List of changed files detected by CI (4) 
doc
│  ├── nrf
│  │  ├── security
│  │  │  │ psa_certified_api_overview.rst
modules
│  ├── trusted-firmware-m
│  │  │ Kconfig
subsys
│  ├── nrf_security
│  │  ├── Kconfig.psa
│  │  ├── cmake
│  │  │  │ config_to_tf-m.cmake

Outputs:

Toolchain

Version: a7529a11f4
Build docker image: docker-dtr.nordicsemi.no/sw-production/ncs-build:a7529a11f4_bba2ea5f2e

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

  • ◻️ Toolchain - Skipped: existing toolchain is used
  • ✅ Build twister
    • sdk-nrf test count: 30
  • ✅ Integration tests
    • ✅ test_ble_nrf_config
    • ✅ test-fw-nrfconnect-chip
    • ✅ test-fw-nrfconnect-nrf-iot_cloud
    • ✅ test-fw-nrfconnect-nrf_crypto
    • ✅ test-fw-nrfconnect-rs
    • ✅ test-fw-nrfconnect-tfm
    • ✅ test-sdk-find-my
    • ✅ test-sdk-mcuboot
    • ✅ test-sdk-dfu
Disabled integration tests
    • desktop52_verification
    • test-fw-nrfconnect-apps
    • test-fw-nrfconnect-ble_mesh
    • test-fw-nrfconnect-ble_samples
    • test-fw-nrfconnect-fem
    • test-fw-nrfconnect-nfc
    • test-fw-nrfconnect-nrf-iot_libmodem-nrf
    • test-fw-nrfconnect-nrf-iot_lwm2m
    • test-fw-nrfconnect-nrf-iot_samples
    • test-fw-nrfconnect-nrf-iot_serial_lte_modem
    • test-fw-nrfconnect-nrf-iot_thingy91
    • test-fw-nrfconnect-nrf-iot_zephyr_lwm2m
    • test-fw-nrfconnect-proprietary_esb
    • test-fw-nrfconnect-ps-main
    • test-fw-nrfconnect-rpc
    • test-fw-nrfconnect-thread-main
    • test-low-level
    • test-sdk-audio
    • test-sdk-pmic-samples
    • test-sdk-wifi
    • test-secdom-samples-public

Note: This message is automatically posted and updated by the CI

greg-fer
greg-fer approved these changes Oct 6, 2025
View reviewed changes
Copy link
Contributor

@greg-fer greg-fer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

changelog entry maybe?

@tomi-font
Copy link
Contributor Author

tomi-font commented Oct 6, 2025 •
edited
Loading

changelog entry maybe?

Good point but IMO not necessary, the Kconfig option was promptless, never was advertised (in release notes or so), and didn't serve any purpose.

@tomi-font tomi-font force-pushed the remove_CONFIG_PSA_ITS_ENCRYPTED branch from 88e31c9 to 01d1e06 Compare October 6, 2025 11:03
@NordicBuilder NordicBuilder added the changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. label Oct 6, 2025
@tomi-font
Copy link
Contributor Author

tomi-font commented Oct 6, 2025 •
edited
Loading

Also, removed experimental from the docs as the Kconfig option itself (CONFIG_TFM_ITS_ENCRYPTED) is not marked as experimental and is in fact also promptless (so not meant to be configured).

@tomi-font
nrf_security: remove CONFIG_PSA_ITS_ENCRYPTED
9e7c579 
`CONFIG_TFM_ITS_ENCRYPTED` is the one that matters here, and this is
only about TF-M.
Get rid of this confusing Kconfig option.

Signed-off-by: Tomi Fontanilles <[email protected]>
@tomi-font tomi-font force-pushed the remove_CONFIG_PSA_ITS_ENCRYPTED branch from 01d1e06 to 9e7c579 Compare October 6, 2025 11:33
@tomi-font tomi-font removed the changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. label Oct 6, 2025
@github-actions GitHub Actions
Copy link

github-actions bot commented Oct 6, 2025

You can find the documentation preview for this PR here.

Preview links for modified nRF Connect SDK documents:

https://ncsdoc.z6.web.core.windows.net/PR-24876/nrf/security/psa_certified_api_overview.html

@rlubos rlubos merged commit 47e5668 into nrfconnect:main Oct 7, 2025
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@degjorva degjorva degjorva approved these changes

@nordicjm nordicjm nordicjm approved these changes

@greg-fer greg-fer greg-fer approved these changes

Assignees
No one assigned
Labels
doc-required PR must not be merged without tech writer approval.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
6 participants
@tomi-font @NordicBuilder @degjorva @nordicjm @greg-fer @rlubos