-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
sdk-nrf-upmerge #16860
base: main
Are you sure you want to change the base?
sdk-nrf-upmerge #16860
Commits on Sep 27, 2024
-
manifest: update manifest for upmerge
Updates manifest for upmerge Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ea7a472 - Browse repository at this point
Copy the full SHA ea7a472View commit details -
lib: date_time: define _POSIX_C_SOURCE for gmtime_r
We need to define _POSIX_C_SOURCE to include gmtime_r from the standard library. Include minimum required _POSIX_C_SOURCE version. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5458959 - Browse repository at this point
Copy the full SHA 5458959View commit details -
libraries: Change autoconf.h to zephyr/autoconf.h
-During the last Zephyr upmerge the includes changed from autoconf.h to zephyr/autoconf.h which this commit fixes for the following: - TF-M header for IOCTL API - Out-of-tree device nrf device integration for TF-M - HW unique key library (and sysbuild) - lwm2m_carrier (sysbuild) - Bootloader (Partition Manager) - Netboot (Partition Manager) - Lots of Partition Manager yml files Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fff4e01 - Browse repository at this point
Copy the full SHA fff4e01View commit details -
tf-m: Replace deprecated z_arch_esf_t types
-There is a deprecation of "z_arch_esf_t" in favor of using the type "struct arch_esf" that is changed in fault handling code for TF-M. This commit fixes this Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for af51da2 - Browse repository at this point
Copy the full SHA af51da2View commit details -
nrf_modem_lib: Fix removed CONFIG_LOG_DOMAIN_ID config
-Changed CONFIG_LOG_DOMAIN_ID to Z_LOG_LOCAL_DOMAIN_ID as the former is removed Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2a1529d - Browse repository at this point
Copy the full SHA 2a1529dView commit details -
crypto: Add pk_ecc.c to the build
-Align with Mbed TLS 3.6.0 by adding a new interface pk_ecc.c NOTE: This interface is built around the idea of fallback-to-ECP_C which likely needs to be resolved in a change of this file in Mbed TLS distribution, because of conflicting ideas on what should be happening in a pure configuration of crypto (only using PSA crypto, not enabling anything in legacy) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7526083 - Browse repository at this point
Copy the full SHA 7526083View commit details -
crypto: Removal of unsupported PSA crypto algorithm and key types
-Removal of unsupported algorithms in nRF Connect SDK: -ARC4 -ARIA -CAMELLIA -DES -SM3 -SM4 -SHAKE256_512 -RIPEMD160 -MD2 -MD4 -AES OFB - AES Output Feedback blockcipher -AES CFB - AES Cipher Feedback blockcipher -FFDH -DH -AES CBC MAC -Removal of deprecated configurations for ECC, RSA, SPAKE2P and SRP key pair (use IMPORT, EXPORT, GENERATE and DERIVE) -Adjusting Bluetooth Fast Pair to set ECC IMPORT, EXPORT, GENERATE and DERIVE key types (KEY_PAIR removed) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3c89824 - Browse repository at this point
Copy the full SHA 3c89824View commit details -
bluetooth: crypto: Adding missing key-types for ECC
-PSA_WANT_KEY_TYPE_ECC_KEY_PAIR is deprecated in Mbed TLS and Bluetooth Fast Pairh have been enabling PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT for key type support. This commit adds the remaining (required): -PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT -PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE -PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3dadf08 - Browse repository at this point
Copy the full SHA 3dadf08View commit details -
crypto: Add missing config for key types for SPAKE2+ and RSA
-Adding config PSA_WANT_TYPE_SPAKE2P_KEY_PAIR_GENERATE -Adding config PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_DERIVE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d96fc31 - Browse repository at this point
Copy the full SHA d96fc31View commit details -
crypto: Cleanup ordering of PAKE and RSA split configurations
-This orders the configuration according to upstream Zephyr and Mbed TLS code on PAKE and RSA in the following order _IMPORT _EXPORT _GENERATE _DERIVE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 02cfccd - Browse repository at this point
Copy the full SHA 02cfccdView commit details -
crypto: Enable Kconfig NRF_SECURITY by default
-This commit adds more TLS/DTLS related configurations for the PSA Crypto oriented build-strategy. It's intent is to enable TLS/DTLS using PSA crypto by default while e.g. supporting PEM file input in NS world. -Removes a default y if BUILD_WITH_TFM for NORDIC_SECURITY_BACKEND -Add MBEDTLS_BASE64_C, MBEDTLS_ASN1_WRITE_C and MBEDTLS_ASN1_PARSE_C as prompt-less configurations that is enabled if PEM is enabled -Removed some dependencies for MBEDTLS_CIPHER_C to ensure it is only enabled when MBEDTLS_LEGACY_CRYPTO_C is enabled -Default enable MBEDTLS_PK_C when MBEDTLS_TLS_LIBRARY is enabled -Added dependencies for MBEDTLS_PK_WRITE_C/MBEDTLS_PK_PARSE_C towards MBEDTLS_PK_C being enabled -Added generation of aforementioned legacy configs for the PSA crypto centric configuration when SPM (TF-M secure image) is not enabled -Enabled X.509 in PSA crypto configuration scope (possible post Mbed TLS 3.6.0 addition, ensuring MBEDTLS_PSA_CRYPTO_CLIENT being properly supported... Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4e28173 - Browse repository at this point
Copy the full SHA 4e28173View commit details -
crypto: Removing weak and/or unused ciphers in nrf_security
-Removing the following ciphers: - Ripemd160 - Aria - Camellia - DES Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1c96127 - Browse repository at this point
Copy the full SHA 1c96127View commit details -
crypto: Align psa_crypto_driver_wrappers to PSA key attributes
-There is a big change in structuring of PSA key attributes with TF-M 2.1. Previously there was a sub-type called "core" inside the PSA key attributes, but this has been swallowed into the top-level structure. This commit removes references to ->core. in code -This code also improves some return-codes to prevent unused variables for a few cases where no crypto drivers are enabled Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bea4748 - Browse repository at this point
Copy the full SHA bea4748View commit details -
crypto: configs: Disable setting of PSA_WANT_KEY_TYPE_ECC_XXXX_PAIR_B…
…ASIC -PSA_WANT_KEY_TYPE_XXXX_KEY_PAIR_BASIC is a configuration that previously was used to signal "basic type". It is no longer needed to set this configuration as it is only an internal construct. These has been made prompt-less configuration that is automatically enabled when key type support for _IMPORT, _EXPORT, _GENERATE or _DERIVE is requested -This updates the following project configs: - SUIT - psa_tls overlays for RSA - RSA sample Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f1ead0d - Browse repository at this point
Copy the full SHA f1ead0dView commit details -
crypto: Unify Mbed TLS configuration generation
-This commit improves generation of nrf-config.h which can be built either using PSA crypto or legacy crypto as starting-point. It enables more legacy/platform configurations in case PSA crypto is favored, to ensure that we can split the files: - nrf-config.h: Legacy and platform configurations - nrf-psa-crypto-config.h: PSA_WANT_ALG_XXXX etc. - nrf-psa-crypto-user-config: PSA_NEED_XXXX -Changed platform defines generation using the macro kconfig_check_and_set_base_to_one to kconfig_check_and_set_base. This ensures defines are set to be used for cmakedefine without value for standard configurations in Mbed TLS config. PSA_WANT_ALG_XXX etc. are the only ones that need to use kconfig_check_and_set_base_to_one as it is using #define SOME_DEFINE 1 and have #if checks based on the value -Adding nrf_config.cmake used by PSA crypto generation -Removing all legacy TLS/DTLS and and platform defines from psa_crypto_config.cmake. These are moved to nrf_config.cmake NOTE: This will be renamed to psa_crypto_user_config.cmake in a later commit as this will have PSA_NEED_XXXX configurations only! -Minor adjustments to comments in psa_crypto_want_config.cmake -Auto-enable MBEDTLS_PSA_CRYPTO_CONFIG to legacy_crypto_config.h.template to favor using MBEDTLS_PSA_CRYPTO_CONFIG_FILE and MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE -Fix include-guards for psa_crypto_want_config.h so it fits for the coming rename of this file. We are now using the standardized definition PSA_CRYPTO_CONFIG_H found in Mbed TLS code and TF-M -Simplified the content of nrf-config.h.template. This now contains Platform, _ALT and TLS/DTS and X.509 and cipher-suites. Note: This addition adds a guard against enabling TLS/DTLS and X.509 in TF-M SPM and ARoT builds -The include guard in nrf-config.h.template is changed from MBEDTLS_CONFIG_PSA_H to MBEDTLS_CONFIG_FILE_H to reuse the guard found in Mbed TLS and TF-M .Removing legacy, platform and TLS/DTLS and X.509 configurations from psa_crypto_config.h.template. This is now provided by the generated nrf-config.h file -Changed the include-guard for psa_crypto_config.h.template to the standardized PSA_CRYPTO_USER_CONFIG_H used in TF-M and Mbed TLS. This file has PSA_NEED_XXXX and will be renamed to state that this is a PSA crypto user config file in a later commit Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4d8d474 - Browse repository at this point
Copy the full SHA 4d8d474View commit details -
tf-m: Adding config_extra.cmake generation
-This commit introduces using a standardized construct in TF-M to add configurations that gets loaded through a CMake file that is passed to TF-M build. -The configurations passed to TF-M is generated from config_extra.cmake.in which is passed with configure_file from Zephyr to inject static configurations that is necessary for building with/without TF-M and within TF-M's code as well as being compatible with nrf_security -config_extra.cmake will be generated with the following: -Static paths for folders relevant for TF-M and non TF-M build -nrfxlib folder -nrf_security root folder -Oberon PSA core module directory -Arm Mbed TLS module directory -PSA_CRYPTO_EXTERNAL_CORE, which is a signal that a PSA core external to TF-M is intended to be built -Static names to Mbed TLS (and PSA crypto) configurations, without full path that is used both inside and outside of TF-M -MBEDTLS_CONFIG_FILE -MBEDTLS_PSA_CRYPTO_CONFIG_FILE -MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE -Paths to generated folders for configurations in two sets according to what is the usage: -PSA_CRYPTO_CONFIG_INTERFACE_PATH: Interface configurations used by ARoTs in TF-M image, and in Zephyr NS image in a TF-M enabled builds -PSA_CRYPTO_CONFIG_LIBRARY_PATH: Library configurations used by the actual build of crypto (TF-M crypto services in PRoT) or Mbed TLS and PSA core build in secure-only builds (no TF-M) -Additional state configurations relevant for external core build Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2d543f2 - Browse repository at this point
Copy the full SHA 2d543f2View commit details -
tf-m: Add use of generated crypto_extra.cmake file
-This adds use of the generated crypto_extra.cmake file used to pass -This is added both in TF-M and in Zephyr builds as it simplifies path-handling for both cases in nrf_security. -This commit removes versions of CMake variables for paths in both entry points to building nrf_security (nrf_security/CMakeLists.txt and nrf_security/tfm/CMakeLists.txt) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 12b1e11 - Browse repository at this point
Copy the full SHA 12b1e11View commit details -
tf-m: crypto keys: Update platform HUK APIs
-tfm_plat_get_huk and tfm_plat_get_iak APIs have changed a parameter from size_t to psa_key_bits_t. This commit aligns the APIs with TF-M 2.1 Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b449a48 - Browse repository at this point
Copy the full SHA b449a48View commit details -
tf-m: Remove nordic-internal configuration for PSA attestation
-Removing the Nordic-internal configuratio PSA_WANT_GENERATE_RANDOM for TFM_PARTITION_INITIAL_ATTESTATION, under the assumption that random generator is a default-enabled feature in a standard system Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1439fff - Browse repository at this point
Copy the full SHA 1439fffView commit details -
tf-m: Add support for building PSA core externally
-TF-M has no active support for out-of-tree builds of PSA core, and they have decided to place every PSA core (and interface file) in a common folder that we will have problem to use directly, as it conflicts with changed files on our end or files provided by the Oberon PSA core. This commit likely will be adjusted at some later point, but it tries to control include-order towards our replacement files and our strategy of handling generated crypto configurations for the build of the PSA interface and the library containing crypto support -This commit relies on the CMake variable PSA_CRYPTO_EXTERNAL_CORE which is added as a [nrf noup] in TF-M -This commit adds external_core.cmake which handles the following: - Ensure includes happen right after TF-M creates library targets to ensure that include-order dependency is resolved for taking in out-of-tree include folder from nrf_security, generated config file folder, Oberon PSA core include folders and out-of-tree addition of Arm Mbed TLS distribution (include and library folder) - Ensure that the generated config files (configured in NCS) are propagated to the TF-M build and is used for every library that depends on either PSA interface or library version of these -This commit adds external_core_install.cmake which will be used instead of the TF-M install target for specific PSA interface files. -Adding lots of files from TF-M tree into nrf_security include folder. nrf_security/include is added early in the include order to override equivalently named files from Arm Mbed TLS distribution in the PSA interface usage Note: It is frustrating that TF-M is include order dependent, and parts of the work to fix this will go towards ensuring that this is not in effect in upstream TF-M code. The files copied here are unfortunate and is only done to accelerate TF-M 2.1 integration... Please see NCSDK-XXXXX for details on how to fix this in upstream TF-M ref: NCSDK-XXXXX Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for be8be23 - Browse repository at this point
Copy the full SHA be8be23View commit details -
tf-m: Updated out-of-tree crypto_spe.h to aling with TF-M 2.1
-This adjusts the out-of-tree file used for TF-M builds to adjust the PSA crypto APIs symbol names for crypto service build (prefixed with e.g. mbedcrypto__ to not collide with the PSA crypto APIs calls made from any other service and/or testing done from inside TF-M image. -This includes additions for PAKE APIs currently not supported in TF-M Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 482c458 - Browse repository at this point
Copy the full SHA 482c458View commit details -
tf-m: Add TF-M compiler flags to TF-M config libraries
-This resolves an issue transferring compiler-flags and linker-options aggregated from TF-M build into all libraries built by nrf_security. The libraries psa_crypto_config and psa_crypto_library_config was chosen as this would previously be used by the now removed mbedcrypto_common, but this has been erased. By setting the compiler- flags and linker-options to these targets we ensure that the right floating-point configurations are used when building and linking with crypto-libraries Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3b72fbe - Browse repository at this point
Copy the full SHA 3b72fbeView commit details -
crypto: PSA core: Add psa_crypto_config and psa_crypto_library_config
-This commit adds usage of psa_crypto_config and psa_crypto_config_library and it is a major refactoring on the PSA core in build -Previously we have made choices on whether or not to build specific features dependent on CMake variables constructed by nrf_security (BUILD_INSIDE_TFM and/or COMPILE_PSA_APIS). These have been removed in favor of the standard signals that exists in Mbed TLS and TF-M (MBEDTLS_PSA_CRYPTO_SPM and MBEDTLS_PSA_CRYPTO_C). This commit tries to fix a technical debt issue of using multiple competing signals for the same meaning. From this commit on, the standard signals will be used in all cases. -Added early exit in PSA crypto core build in case MBEDTLS_PSA_CRYPTO_C is not set (meaning it doesn't need to be built) -Added an early exit in all PSA driver build in case MBEDTLS_PSA_CRYPTO_C is not set (meaning it doesn't build the PSA core and no drivers are needed) -Adding cmake/generate_configs.cmake that includes macros generate_mbedcrypto_interface_configs and generate_mbedcrypto_library_configs which is used to ensure -Adding macros to store/restore specific configurations that needs to be changed depending on whether you have an interface build or a library build (generated in two sets) -Removing Kconfig GENERATE_MBEDTLS_CFG_FILE as it is unsupported -Removing MBEDTLS_USER_CONFIG_FILE as we are now using MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE -Changing the default names for Mbed TLS config files according to the generated files named earlier in this commit-message -Removed all references to mbedcrypto_common which was used to transfer information both to PSA crypto interface and library build. This is now handled by psa_crypto_config and psa_crypto_library_config Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bd9db23 - Browse repository at this point
Copy the full SHA bd9db23View commit details -
crypto: Cleaning up PSA driver and core CMake logic
-Creating named library: oberon_psa_core -Creating libraries for PSA crypto drivers: -cracen_psa_driver -oberon_psa_driver (nrf_cc3xx and nrf_cc3xx_platform are skipped as these come pre-built and are only linked in to the new oberon_psa_core library) -Make all drivers reference the new target psa_crypto_library_config both for include-folders and for configurations -Make oberon_psa_core link to every PSA crypto driver -Make all warning-disablement private to the relevant drivers -Adding NRF_RNG entropy driver to oberon_psa_core (was ${mbedcrypto_target} -Removing CONFIG_NRF_SECURITY_LEGACY_AND_PSA as it is now possible to configure both PSA crypto and at the same time enable legacy configurations by enabling by setting MBEDTLS_LEGACY_CRYPTO_C -Making PSA crypto driver CMake only relevant for PSA crypto drivers instead of doing this as well as legacy support -Fix coding standard in all driver CMake logic -Move interrupts.c addition for CRACEN internal to the sxsymcrypt runtime -Simplified oberon_psa_driver and cracen_psa_driver CMake logic so it has a unified look-and-feel and don't infer e.g. TF-M builds -Made PSA_CRYPTO_DRIVER_CRACEN default enabled Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f8dad4e - Browse repository at this point
Copy the full SHA f8dad4eView commit details -
crypto: tls: Don't depend on MBEDTLS_CIPHER_C for TLS use-cases
-This removes a dependency for MBEDTLS_CIPHER_C if TLS is enabled Now only MBEDTLS_MD_C is a legacy dependency for this module Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 54aa6b9 - Browse repository at this point
Copy the full SHA 54aa6b9View commit details -
crypto: Removal of unused out-of-tree files
-Some out-of-tree files from Mbed TLS have been kept in nrf_security to get around issues with compiler warnings for unused functions and symbols and to remove unnecessary code when nrf_oberon is in use and is providing the Mbed TLS legacy support. This commit removes unused files (changed earlier) as well as finally removing aes.c and aes_oberon.c from the build as these are no longer needed. We now use Mbed TLS sources for most use-cases... Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 01a9478 - Browse repository at this point
Copy the full SHA 01a9478View commit details -
crypto: Adding threading support for PSA core
-Add support for threading in PSA core to align with Mbed TLS 3.6.0 Mbed TLS 3.6.0 requires 3 mutex-symbols being globally accessible: - mbedtls_threading_key_slot_mutex - mbedtls_threading_psa_globaldata_mutex - mbedtls_threading_psa_rngdata_mutex Note: This is not used when CryptoCell is enabled, which has a different solution for threading support available in platform integration files found in nrfxlib. Note: This commit will likely be replaced with a implementation upstream, but is added here temporarily Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for cd4d8e3 - Browse repository at this point
Copy the full SHA cd4d8e3View commit details -
sample: tls: Enable SSL CLI for psa_tls
-Enabling CONFIG_MBEDTLS_SSL_CLI_C for psa_tls sample This seems required to be set after Mbed TLS 3.6.0... Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7e0c886 - Browse repository at this point
Copy the full SHA 7e0c886View commit details -
crypto: nrf_security: Fix coding standard issues
-This commit contains coding-standard fixes for CMake. This doesn't change any functionality Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 431db4d - Browse repository at this point
Copy the full SHA 431db4dView commit details -
crypto: legacy: Enable more PSA core/crypto awareness
-Ensure MBEDTLS_THREADING_C is enabled when either CC3XX_BACKEND or PSA core is enabled. Enabling this will only happen when the core is built in secure-only builds. TF-M circumvents threading in its build -Ensure MBEDTLS_THREADING_ALT is set -Ensure MBEDTLS_BASE64_C is enabled always to simplify adding support for PEM (parse and write -Adding Kconfig MBEDTLS_OID_C so it can be generated in nrf-config.h both when building PSA centric and with MBEDTLS_LEGACY_CRYPTO_C enabled -Enabling MBEDTLS_ASN1_WRITE_C/MBEDTLS_ASN1_PARSE_C additionally when MBEDTLS_USE_PSA_CRYPTO is set for X.509 support -Remove MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT depending on !BUILD_WITH_TFM -Remove default enablement of MBEDTLS_LEGACY_CRYPTO_C when BUILD_WITH_TFM is set -Ensure all legacy configurations aren't built when PSA crypto is used (using the Zephyr Kconfig PSA_CRYPTO_CLIENT to test) -Resolve PSA_WANT_ALG_XXXX and PSA_WANT_KEY_TYPE_XXXX from all enabled legacy crypto configurations Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for dee9e7b - Browse repository at this point
Copy the full SHA dee9e7bView commit details -
libraries: Update all includes to <zephyr/net_buf.h>
-The current upmerge deprecated <zephyr/net/buf.h> and replaces it with <zephyr/net_buf.h>. This change is on HCI, DTM, WIFI, RPC bluetooth and applications (to mention a few) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f209b9f - Browse repository at this point
Copy the full SHA f209b9fView commit details -
suit: Fix Kconfig for SUIT (missing type)
-Suit overrides for MBEDTLS_PSA_CRYPTO and MBEDTLS_ZEPHYR_ENTROPY was missing the Kconfig type and was giving warnings Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7d33a15 - Browse repository at this point
Copy the full SHA 7d33a15View commit details -
drivers: Remove nRF70 Wi-Fi driver
This is now part of the Zephyr upstream. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 818be33 - Browse repository at this point
Copy the full SHA 818be33View commit details -
Now that nRF70 support is upstream, switch to upstream hostap. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 18cfdf5 - Browse repository at this point
Copy the full SHA 18cfdf5View commit details -
treewide: Migrate to nRF70 upstream driver
Upstream driver namespace is renamed from nrf700x -> nrf70. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 29a932d - Browse repository at this point
Copy the full SHA 29a932dView commit details -
boards: shields: Use upstream nRF7002EK shields
nRF70 EK shields are now upstreamed. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for df71f87 - Browse repository at this point
Copy the full SHA df71f87View commit details -
treewide: Migrate to upstream Zephyr WPA supplicant
nRF70 now uses upstream Zephyr WPA supplicant. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b01ec88 - Browse repository at this point
Copy the full SHA b01ec88View commit details -
modules: hostap: Remove hostap module
Migrate to using Zephyr upstream. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b63cf67 - Browse repository at this point
Copy the full SHA b63cf67View commit details -
boards: Remove nRF7002DK board
This board is upstreamed to Zephyr. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ae0580a - Browse repository at this point
Copy the full SHA ae0580aView commit details -
treewide: Fix CMake warning for nRF70 driver heap
nRF70 driver is the primary user for kernel heap and already sets a higher value which is typical, but for some configurations e.g., scan-only we need to set it to lower value to optimize memory, so, enable the option to ignore minimum mandated value from driver and instead use the value from the sample. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c9b10ad - Browse repository at this point
Copy the full SHA c9b10adView commit details -
samples: wifi: shell: Increase kernel heap
nRF70 upstream driver now needs more heap, not sure about the cause, but without this OOM messages during boot are seen. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c87e019 - Browse repository at this point
Copy the full SHA c87e019View commit details -
migration: Add notes for nRF70 upstream switch
Document changes that affect customer samples or applications. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 47cd7d5 - Browse repository at this point
Copy the full SHA 47cd7d5View commit details -
doc: changelog: Update with upstream migration
Update Drivers, Wi-Fi protocols and documentation with notes about upstream migration. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for cb83287 - Browse repository at this point
Copy the full SHA cb83287View commit details -
treewide: Use nRF7000 for scan only
With latest upstream, scan only mode now only works with nRF7000. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 545178e - Browse repository at this point
Copy the full SHA 545178eView commit details -
ci: Quarantine nRF7002 unsupported boards
These are still unsupported in nRF70 upstream. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 22a3961 - Browse repository at this point
Copy the full SHA 22a3961View commit details -
samples: wifi: Fix Raw mode build
Remove the driver header dependency and inline the structures for now, this needs to be properly fixed in the future where nRF70 driver should have public headers. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4f42137 - Browse repository at this point
Copy the full SHA 4f42137View commit details -
samples: wifi: coex: Explicitly enable co-existence
With the upstream nRF70 driver, the co-ex is not auto-enabled based on the DTS, this was implemented improperly, now user has to explicitly choose to enable co-existence. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 26a8965 - Browse repository at this point
Copy the full SHA 26a8965View commit details -
ci: quanratine: Disable Matter for nRF7002DK
Almost all matter samples rely on PM which needs EXT_FLASH support for nRF70 which isn't supported yet, so, Quarnatine them for now. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d7620e1 - Browse repository at this point
Copy the full SHA d7620e1View commit details -
ci: Quarantine Thingy and Wi-Fi tests
Thingy is not supported yet for nRF70 companion chips. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bc52bbb - Browse repository at this point
Copy the full SHA bc52bbbView commit details -
samples: Remove unsupported platforms from integration
Though these platforms are excluded for Wi-Fi tags, twister still fails as this is still part of integration platforms, remove it to fix the twister. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a46865b - Browse repository at this point
Copy the full SHA a46865bView commit details -
In latest nrfxlib this tag is removed, so, remove the reference to fix the doc build. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1ff9efa - Browse repository at this point
Copy the full SHA 1ff9efaView commit details -
samples: wifi: Remove raw modes for nRF7000
As of now the raw mode is couple with system mode which is unsupported for nRF7000, so, remove them. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bcffc64 - Browse repository at this point
Copy the full SHA bcffc64View commit details -
samples: wifi: shutdown: Fix build errors
Shutdown sample assumes default nRF70 mode is scan and doesn't support any other mode. With the migration to upstream scan only is limited to nRF7000 shield, so, remove other combinations. Also, add nRF7000 with 5340 as this was the main usecase for testing this sample. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ee9baca - Browse repository at this point
Copy the full SHA ee9bacaView commit details -
ci: quarantine: Quarantine few mysterious memory overflows
These overflows are only happening in the CI, locally the same twister command works fine, quarantine them for now, and investigate later. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 518cd49 - Browse repository at this point
Copy the full SHA 518cd49View commit details -
sysbuild: Remove some Kconfigs
Removes some Kconfig options that have been added to zephyr Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ddcf828 - Browse repository at this point
Copy the full SHA ddcf828View commit details -
[nrf noup] Remove CFB and OFB from OpenThread defconfig
-This removes MBEDTLS_CIPHER_MODE_CFB and MBEDTLS_CIPHER_MODE_OFB which is no longer actively supported in nRF Connect SDK Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3fa1d8d - Browse repository at this point
Copy the full SHA 3fa1d8dView commit details -
github: workflows: compliance: add unidiff to requirenments
Add unidiff dependency to requirenments-fixed.txt and add it to the compliance.yml job "Install python dependencies" Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c50d181 - Browse repository at this point
Copy the full SHA c50d181View commit details -
samples: libraries: Fixing deprecated z_arch_esf_t
-The upmerge brings in a deprecation of const z_arch_esf_t in favor of struct arch_esf. This commit fixes this for applications, samples and tests in the following domain: -fatal_error library -ipc_radio application -Audio application -Matter diagnostics (used by multiple samples) -fprotect tests -hw_unique_key tests -Audio tests Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 51cb633 - Browse repository at this point
Copy the full SHA 51cb633View commit details -
applications: ipc_radio: align net_buf to new API
The net_buf_put/get is deprecated, align to recommended API. Signed-off-by: Dominik Chat <dominik.chat@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1f3418c - Browse repository at this point
Copy the full SHA 1f3418cView commit details -
boards: shields: remove nrf7002eb
The nrf7002eb is now part of sdk-zephyr. Remove out-of-tree shield. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d825871 - Browse repository at this point
Copy the full SHA d825871View commit details -
boards: shields: remove nrf700x_nrf54h20dk
nrf700x_nrf54h20dk has been replaced by the nrf7002eb and nrf7002eb_interposer_p1 shields along with the nrf70-wifi snippet. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d9c2ec8 - Browse repository at this point
Copy the full SHA d9c2ec8View commit details -
boards: shields: remove nrf700x_nrf54h15dk
nrf700x_nrf54h15dk has been replaced by the nrf7002eb and nrf7002eb_interposer_p1 shields along with the nrf70-wifi snippet. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ca72e19 - Browse repository at this point
Copy the full SHA ca72e19View commit details -
boards: shields: remove nrf700x_nrf54l15pdk
nrf700x_nrf54l15pdk has been replaced by the nrf7002eb and nrf7002eb_interposer_p1 shields along with the nrf70-wifi snippet. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6193a2e - Browse repository at this point
Copy the full SHA 6193a2eView commit details -
cmake: modules: kconfig: Update autoconf path
Updates the path to the autoconf file as this has changed in Zephyr Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for eb387cf - Browse repository at this point
Copy the full SHA eb387cfView commit details -
boards: shields: add nrf7002eb_interposer_p1 shield
Add the nrf7002eb_interposer_p1 shield which is connected to P1. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2760cbb - Browse repository at this point
Copy the full SHA 2760cbbView commit details -
doc: cmake: inject DOCS_HTML_DIR
Since the addition of sphinx-autobuild support in Zephyr, the ZEPHYR_BUILD variable in conf.py requires knowledge of the HTML build dir from the environment, using DOCS_HTML_DIR. Ref: Zephyr 2e99de80472b80f36303ff85c8ed5d54dfe73ef4 Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no> Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1cb3a70 - Browse repository at this point
Copy the full SHA 1cb3a70View commit details -
tf-m: Fix removed PSA_WANT_KEY_TYPE_RSA_KEY_PAIR configuration for tests
-This commit removes selection of PSA_WANT_KEY_TYPE_RSA_KEY_PAIR for TF-M tests as this is no longer a Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for faa2173 - Browse repository at this point
Copy the full SHA faa2173View commit details -
tf-m: Add a dummy PLAT_OTP_ID_LCS define for TF-M Minimal configuration
-This adds a dummy OTP element in include/tfm/platform_otp_ids.h which is a file that is only used when TFM_PROFILE_TYPE_MINIMAL is set. It was added as TF-M 2.1 references this directly in the psa_api.c file. Note that calling to retrieve the LCS will always report "TFM_PLAT_ERR_UNSUPPORTED" as dummy_otp.c is enabled in this case. This commit is only fixing a build issue Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ad6834a - Browse repository at this point
Copy the full SHA ad6834aView commit details -
crypto: Adding missing include-folder to CRACEN library
fixup! crypto: Cleaning up PSA driver and core CMake logic -This fixes missing link to nrfx.h in CRACEN PSA crypto library (fixup of commit eccaa21) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0c73511 - Browse repository at this point
Copy the full SHA 0c73511View commit details -
crypto: CRACEN: Remove unused parameter
-Removing a compilationg warning Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f884570 - Browse repository at this point
Copy the full SHA f884570View commit details -
tf-m: Clean up PSA crypto interface/library config addition
fixup! tf-m: Add support for building PSA core externally -This commit changes to install the PSA crypto interface config files to the TF-M install target, for use by Zephyr when TF-M is enabled -This commit prevents the interface-config (required for main app and NS image build in TF-M) from being enabled in any library build by using generator expressions in nrf_security_add_zephyr_options to filter out of the list that gets retrofitted into nrf_security libraries -This commit removes unneeded duplications of includes for ${mbedcrypto_target} which is already available in mbedcrypto_Base (fixup of commit 6791e0a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a494f43 - Browse repository at this point
Copy the full SHA a494f43View commit details -
crypto: Adjusting threading to also work with no multithreading support
fixup! crypto: Adding threading support for PSA core -This commit changes from threading/CMakeLists.txt to threading/threading.cmake to ensure that include can be used instead of add_subdirectory. This is necessary to keep the variables used to pass to build the mbedcrypto lib working inside and outside -Added support for the faux no threading suppport mode by reusing the nrf_security_mutexes.h API -Adding init/free to nrf_security_mutexes.h APIs Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 164aace - Browse repository at this point
Copy the full SHA 164aaceView commit details -
crypto: Removing unused target names mbedx509_target and mbedtls_target
-TF-M renames the mbedcrypto target and previously it was also needed to rename mbedx509 and mbedtls (TLS/DTLS library). TF-M no longer builds this so we can use the standard names instead of keeping the aforementioned targets as CMake variables -Changing ${mbedx509_target} => mbedx509 -Changing ${mbedtls_target} => mbedtls Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5932ec3 - Browse repository at this point
Copy the full SHA 5932ec3View commit details -
crypto: Fix legacy API support for TLS/DTLS and X.509
-This commit moves some TLS-dependent APIs into ${mbedcrypto_target} as they are required for PSA to legacy conversions e.g. using psa_util.c APIs. Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 695b106 - Browse repository at this point
Copy the full SHA 695b106View commit details -
crypto: Reworking the structure of psa driver/core
fixup! crypto: Cleaning up PSA driver and core CMake logic -This improves include paths (putting things closer to where they are generated/imported -This ensures that legacy-world gets access to the include folders for nrf_cc3xx_platform and oberon imported libs without depending on PSA core build -This removes some return-guards which may be considered to be added on again (to resolve a CMake/linking issue) (fixup of commit fc0112a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 37d1669 - Browse repository at this point
Copy the full SHA 37d1669View commit details -
crypto: Fixup of threading for path resolvement
fixup! crypto: Adding threading support for PSA core (fixup of commit 0667ab2= Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5bbe1b6 - Browse repository at this point
Copy the full SHA 5bbe1b6View commit details -
crypto: Separating library and interface configs for nrf_security libs
-This commit adds nrf_security_add_zephyr_options_library which adds includes from the zephyr_interface without PSA crypto interface configurations (include-folder addition where nrf-crypto.h is added) -Moving calls to nrf_security_add_zephyr_options closer to where the libraries are built (cleanup) -Made Oberon, CRACEN and core use nrf_security_add_zephyr_options_library Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fccdf4a - Browse repository at this point
Copy the full SHA fccdf4aView commit details -
crypto: Cleaning up dependencies for psa_crypto_config/psa_interface
fixup! crypto: PSA core: Add psa_crypto_config and psa_crypto_library_config (fixup of commit cbf737a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d7d3d4e - Browse repository at this point
Copy the full SHA d7d3d4eView commit details -
crypto: MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER for Nordic security b…
…ackend fixup! crypto: Fix legacy API support for TLS/DTLS and X.509 -This enables MBEDTLS_PSA_CRYPTO_KEY_ENCODES_OWNER to allow for NORDIC_SECURITY_BACKEND being used as a configuration when building with TF-M (fixup of commit da97260) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 47cf88a - Browse repository at this point
Copy the full SHA 47cf88aView commit details -
crypto: TF-M: Add filter for legacy API addition for ARoTs etc.
fixup! crypto: Fix legacy API support for TLS/DTLS and X.509 -This commit ensures that md/pk etc. is not added when building inside TF-M. There is a define called MBEDTLS_PSA_CRYPTO_SPM that is used as a signal that the SPM partition is going to be buitl, but unfortunately this configuration is too vague in our current build (fixup of commit da97260) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for de78578 - Browse repository at this point
Copy the full SHA de78578View commit details -
crypto: Threading: Ensure linking against libkernel.a by path
fixup! crypto: Adding threading support for PSA core -This resolves an issue with CRACEN builds where trying to get a proper link to kernel involves using kernel library by full path to avoid issues in build. -Make includes local for nrf_security_mutexes/events -Establish nrf_security_utils library to localize the issue and to try to find a better way to resolve this in the future Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4a599bc - Browse repository at this point
Copy the full SHA 4a599bcView commit details -
crypto: TF-M: Add better filter for non PSA builds
fixup! crypto: Fix legacy API support for TLS/DTLS and X.509 -This commit is unfortunate, but it is required as there is no cleanliness to legacy symbols in non SPM targets in TF-M. This commit can be changed with a properly supported BUILD_INSIDE_TFM or similar signal (fixup of commit da97260) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d025882 - Browse repository at this point
Copy the full SHA d025882View commit details -
crypto: Resolve path-issues with CRACEN builds
fixup! crypto: Cleaning up PSA driver and core CMake logic -This commit resolves some path-issue with HUK library where APIs internal to PSA crypto is required to be accessible in PSA crypto interface scope. Exposing the CRACEN API towards NCS libraries is currently unavoidable. (fixup of commit fc0112a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 22e8ee3 - Browse repository at this point
Copy the full SHA 22e8ee3View commit details -
samples: wifi: privisioning: softap: add missing integration_platforms
This is requires because sample documentation uses the table-from-sample-yaml directive. Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ad9dc72 - Browse repository at this point
Copy the full SHA ad9dc72View commit details -
doc: nrf: update references to Zephyr docs
Zephyr has increased usage of :zephyr:code-sample:, also some have changed their name. Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fb7c275 - Browse repository at this point
Copy the full SHA fb7c275View commit details -
doc: redirects: remove invalid entries
Redirects are now validated against all available documents within a docset, so we cannot have random redirects to external docsets. Delete entries which were crossing boundaries, these will need to be handled manually somewhere else. Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b160a73 - Browse repository at this point
Copy the full SHA b160a73View commit details -
ieee802154: 802154_rpmsg: Fix path in CMake and sysbuild conf
Fix ieee802154/802154_rpmsg path in CMake and sysbuild conf. Signed-off-by: Dawid Przybylo <dawid.przybylo@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4978752 - Browse repository at this point
Copy the full SHA 4978752View commit details -
samples: Align samples to new recommeneded net_buf API.
Align the usage of net_buf_put/get to use k_fifo_put/get as recommended per Zephyr upstream. Signed-off-by: Dominik Chat <dominik.chat@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4290e8d - Browse repository at this point
Copy the full SHA 4290e8dView commit details -
tf-m: Add ${NRF_DIR} to external core and added include
fixup! tf-m: Add support for building PSA core externally -This adds include for /nrf/include/tfm which has a file used for builtin key support. This is using the same mechanism as other types of paths passed to TF-M (fixup of commit 96a5924) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5fddf72 - Browse repository at this point
Copy the full SHA 5fddf72View commit details -
crypto: Handling threading support a bit more accurately
fixup! crypto: Adding threading support for PSA core -This commit ensures the appropriate linking from nrf-security_utils to libraries in tf-M related to low-level OS integration like the addition of __assert.h and the debvug log used whe asserts happen -This commit also moves nrf_security_utils into private scope for mbedcrypto-base and cracen PSA crypto library Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 52bee4d - Browse repository at this point
Copy the full SHA 52bee4dView commit details -
ble: Fix const correctness for bt_le_adv_parms
-This fixes build warnings for certain samples for BLE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 295b996 - Browse repository at this point
Copy the full SHA 295b996View commit details -
crypto: Resolving more PSA features from legacy
fixup! crypto: legacy: Enable more PSA core/crypto awareness -This commit enabled MBEDTLS_WANT_KEY_TYPE_AES for any cipher-usge (by select) -This commit resolves PSA_WANT_ALG_ECB_NO_PADDING when MBEDTLS_CMAC_C is set -The changes is made to conform with check_config.h (fixup of commit 39f2cbc) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f3d21b7 - Browse repository at this point
Copy the full SHA f3d21b7View commit details -
crypto: Made imported (legacy) libraries use psa_crypto-config
fixup! crypto: Cleaning up PSA driver and core CMake logic -This commit changes link dependency on nrf_cc3xx_core_imported towards psa_crypto_config (was _config_library) to prevent propagation of multiple sets of configs -Same also done for mbedcrypto-oberon_mbedtls_imported Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 20d978f - Browse repository at this point
Copy the full SHA 20d978fView commit details -
modem: tests: Change z => zvfs
-Changed z_reserve_fd => zvfs_reserve_fd -Changed z-free_fd => zvfs_free-fd -Changed z_finalize_fd => zvfs_finalize-fd -Bonus points: fixed comments referencing the non-existent APIs, as well Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c36707f - Browse repository at this point
Copy the full SHA c36707fView commit details -
net: download client: Added K_THREAD_STACK_MEMBER definition
-One of the structures in this file was using K_THREAD_STACK_MEMBER which didn't exists. Added a define to point to K_KERNEL_STACK_MEMBER in the header-file to resolve some build issues Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d5b66cd - Browse repository at this point
Copy the full SHA d5b66cdView commit details -
bluetooth: controller: align softdevice with BT_CTLR_CRYPTO_SUPPORT
Aligned the Softdevice controller with the BT_CTLR_CRYPTO_SUPPORT Kconfig from upstream. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 32679be - Browse repository at this point
Copy the full SHA 32679beView commit details -
tests: nrf_compress: Enable legacy crypto for mbedtls_sha256_c
-This enables two missing configurations for this test: CONFIG_MBEDTLS_SHA256_C CONFIG_MBEDTLS-LEGACY_CRYPTO_C Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 620f3bd - Browse repository at this point
Copy the full SHA 620f3bdView commit details -
crypto: Adding "-Wno-unused-function" to avoid oberon_ecdsa errors
-This commit allows unused functions for Oberon PSA crypto driver Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c50c1db - Browse repository at this point
Copy the full SHA c50c1dbView commit details -
crypto: Resolving CHACHA20 into PSA crypto configs
fixup! crypto: legacy: Enable more PSA core/crypto awareness -Resolving PSA_WANT_ALG_STREAM_CIPHER if MBEDTLS_CHACHA20_C is set (fixup of commit 39f2cbc) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8254cbb - Browse repository at this point
Copy the full SHA 8254cbbView commit details -
boards: thingy91x: replace removed Kconfig option
`CONFIG_SPI_NOR_IDLE_IN_DPD` doesn't exist anymore. `CONFIG_PM_DEVICE_RUNTIME` enables its previous behavior, which is now tunable with `CONFIG_SPI_NOR_ACTIVE_DWELL_MS`. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a20fb69 - Browse repository at this point
Copy the full SHA a20fb69View commit details -
applications: serial_lte_modem: fix "'noreturn' function does return"
Remove the `noreturn` attribute from functions because functions they call (e.g. `nrf_regulators_system_off()`) miss it. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 880594c - Browse repository at this point
Copy the full SHA 880594cView commit details -
nrf_security: add missing Mbed TLS source file
Add block_cipher.c to fix undefined references to functions in there. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1b3b35a - Browse repository at this point
Copy the full SHA 1b3b35aView commit details -
nrf_security: fix MBEDTLS_HKDF_C dependency
Make it select PSA_WANT_ALG_HMAC as the latter is a requirement of the former. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a4391e6 - Browse repository at this point
Copy the full SHA a4391e6View commit details -
tests: crypto: add missing Mbed TLS Kconfig options
With the default-enabled Mbed TLS Kconfig options having been reduced in Zephyr, it's now necessary to manually enable them. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b09f40f - Browse repository at this point
Copy the full SHA b09f40fView commit details -
bindings: usb: zephyr,hid-device: rename in-polling-rate
in-polling-rate has been renamed in-polling-period-us, adapt nrf overlays to reflect this. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f31220c - Browse repository at this point
Copy the full SHA f31220cView commit details -
applications: nrf_desktop: update usbd config define macro usage
Update USBD_CONFIGURATION_DEFINE() macro usage in nrf_desktop app. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d20a93e - Browse repository at this point
Copy the full SHA d20a93eView commit details -
crypto: Add fallback to get PSA crypto driver APIs
-This is necessary to avoid failing to include psa/crypto.h when BUILD_WITH_TFM or MBEDTLS_PSA_CRYPTO_C is not set Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 414a778 - Browse repository at this point
Copy the full SHA 414a778View commit details -
crypto: Fix collision with mbedtls_ecdsa_can_do for nrf_oberon
-This adds a copy of ecdsa.c from Mbed TLS to allow us to adjust the code to remove a symbol inside the ecdsa.c which is duplicated in the library. -The nrf_oberon Mbed TLS library needs to be rebuilt without this symbol to be able to remove this special adjustment Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e8dc75e - Browse repository at this point
Copy the full SHA e8dc75eView commit details -
crypto: Fix access to Mbed TLS base APIs for nrf_cc3xx imported libs
-This provides access to more APIs from legacy Mbed TLS for the imported nrf_cc3xx libraries, which should fix some build issues Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 146e491 - Browse repository at this point
Copy the full SHA 146e491View commit details -
samples: bluetooth: fast_pair: locator_tag: align Kconfigs from libc
Aligned the Kconfig options from the libc library related to the dynamic memory allocation with the newest Zephyr synchronization point. The library-specific Kconfigs were renamed and placed in the common directory. Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 77393b1 - Browse repository at this point
Copy the full SHA 77393b1View commit details -
bluetooth: controller: ecdh: enable security backend for tf-m builds
Enabled the CONFIG_NORDIC_SECURITY_BACKEND Kconfig for TF-m builds when the CONFIG_BT_CTLR_ECDH_LIB_OBERON is enabled in the Bluetooth Controller library. The change is required as previously the CONFIG_NORDIC_SECURITY_BACKEND Kconfig was enabled for TF-m builds (CONFIG_BUILD_WITH_TFM). Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0827137 - Browse repository at this point
Copy the full SHA 0827137View commit details -
crypto: Adding legacy headers gave mismatch for nRF54H SSF samples
-Fallback to include ARM includes was a bad idea. This changes it to Oberon-psa-crypto include folder instead. This issue impacted nRF54H20 samples which isn't building the PSA core locally (meaning the build has PSA crypto APIs available, but is a coreless build). Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 62508ed - Browse repository at this point
Copy the full SHA 62508edView commit details -
tfm: tests: Enable PSA_WANT_ALG_ECDSA
-The regression test config (prj.conf) was missing PSA_WANT_ALG_ECDSA and likely was assuming that setting PSA_WANT_ALG_DETERMINISTIC_ECDSA would internally resolve both. This is not the case. This commit fixes this Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5ab9ffa - Browse repository at this point
Copy the full SHA 5ab9ffaView commit details -
tf-m: tests: Add better filtering of CRACEN devices for regression tests
-The nRF54L15 device only supports enabling CRACEN, an attempt to enable PSA_CRYPTO_DRIVER_OBERON will lead to a Kconfig warning stating that something tried to set it to 'y' and then it got the value 'n'. This commit moves platform_allow/integration_platforms from common scope in to per-testcase, as well as adding cracen test target for certain regression tests Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for db1c1bd - Browse repository at this point
Copy the full SHA db1c1bdView commit details -
crypto: Simplify include folder passing in legacy crypto binaries
fixup! crypto: Cleaning up PSA driver and core CMake logic -Simplify include folders for legacy usage by moving resolving of include folder for nrf_cc3xx and nrf_oberon binary libraries into drivers/legacy/CMakeLists.txt. -This commit also resolves an issue with include-folders used for Mbed TLS legacy APIs for nrf_oberon as well as resolving a linkage towards legacy APIs used in context of nrf_oberon Mbed TLS library Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0767348 - Browse repository at this point
Copy the full SHA 0767348View commit details -
crypto: Avoid OpenThread issue with MBEDTLS_SSL_EXPORT_KEYS
-Mbed TLS has decided that MBEDLS_SSL_EXPORT_KEYS is always set but this is not reflected in nrf_security or in OpenThread (where the config is passed regardless). This commit tries to circumvent issues by adding ifndef checks before potentially doubly defining this Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d5c9870 - Browse repository at this point
Copy the full SHA d5c9870View commit details -
samples: bluetooth: Remove CONFIG_BT_DEBUG_LOG use
CONFIG_BT_DEBUG_LOG no longer exists, a hidden symbol CONFIG_BT_LOG should be enabled instead, hence make sure the dependencies for the symbol are satisfied (CONFIG_BT && CONFIG_LOG). Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ccc6c93 - Browse repository at this point
Copy the full SHA ccc6c93View commit details -
applications: remove Kconfig for selecting HCI driver
Removed the BT_HCI_IPC Kconfig from the application configuration, as this option for selecting the Bluetooth HCI driver over IPC does not have a Kconfig prompt anymore. The selection of the Bluetooth HCI driver is now done using DTS. Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9aeb601 - Browse repository at this point
Copy the full SHA 9aeb601View commit details -
treewide: Remove remaining CONFIG_WIFI_NRF700X use
The Wi-Fi driver now defines CONFIG_WIFI_NRF70 config. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for aae5036 - Browse repository at this point
Copy the full SHA aae5036View commit details -
Bluetooth: Controller: Kconfig: select BT_CTLR_CRYPTO_SUPPORT for sdc
Config BT_CTLR_CRYPTO now has dependency to BT_CTLR_CRYPTO_SUPPORT. Signed-off-by: Lang Xie <lang.xie@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9cac65c - Browse repository at this point
Copy the full SHA 9cac65cView commit details -
wifi: shell: Remove usage of Kconfig MBEDTLS_GENERATE_CFG_FILE
-This configuration was always set for all usage of nrf_secrity This has now been removed. This removes reference to the Kconfig from a wifi shell scan-only sample Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6e03a38 - Browse repository at this point
Copy the full SHA 6e03a38View commit details -
applications: serial_lte_modem: fix native_tls Kconfig overlay
Remove the disabling of 2 Kconfig options that do not exist anymore, and a third one that is not needed. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2b210d1 - Browse repository at this point
Copy the full SHA 2b210d1View commit details -
tests: suit: fix "MBEDTLS_ECDSA_C defined, but not all prerequisites"
Add the missing definition of MBEDTLS_ASN1_PARSE_C to the user Mbed TLS configuration file. The whole thing could be made better by switching to using Kconfig symbols for selection of Mbed TLS features, but this would be a separate cleanup task. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6de9ba7 - Browse repository at this point
Copy the full SHA 6de9ba7View commit details -
Bluetooth: Mesh: align rpl with subnet bridge changes
Align rpl with subnet bridge changes. Signed-off-by: alperen sener <alperen.sener@nordicsemi.no> Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4b6971b - Browse repository at this point
Copy the full SHA 4b6971bView commit details -
unity: Fix cmock headers generation (syscalls)
Syscalls headers location is now prefixed with "zephyr", so need to take this into account when generating cmock headers for unity. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6bd496f - Browse repository at this point
Copy the full SHA 6bd496fView commit details -
snippets: add nrf70-wifi snippet
This snippet is used for nrf54h20 and nrf54l15 boards which are ressource constrained on the cpuapp core, requiring reallocation of sram, rram, and custom kconfig settings to fit the wifi driver onto the cpuapp core. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b194595 - Browse repository at this point
Copy the full SHA b194595View commit details -
samples: wifi: shell: Update nrf7002eb_interposer tests
The nrf7002_interposer board now is a proper shield, along with the proper shield nrf7002eb. Update the tests which use the interposer + nrf7002eb shield, and combine them into a single test suite since the test is identical for any board using this combo. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c73ae9e - Browse repository at this point
Copy the full SHA c73ae9eView commit details -
crypto: Simplify psa_crypto_config/psa_crypto_library_config selection
-Make a selection of the interface vs library build by adding the interface-target psa_crypto_config_chosen and reference by INTERFACE linkage which of the two possible candidate targets is used in the current scope -Also simplify handling of MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER by protecting it behind CONFIG_BUILD_WITH_TFM Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4c6c72b - Browse repository at this point
Copy the full SHA 4c6c72bView commit details -
crypto: Fix SSF for psa_crypto_config selection
-Choosing psa_crypto_config for SSF client builds Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bc0f8de - Browse repository at this point
Copy the full SHA bc0f8deView commit details -
doc: nrf: adjust references to hello world sample
Sample now uses :zephyr:code-sample: Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 58a5884 - Browse repository at this point
Copy the full SHA 58a5884View commit details -
nrf_security: remove CFB and OFB Mbed TLS cipher modes
Remove the possibility to enable these two cipher modes in Mbed TLS. They have existed for historical reasons. Other, stronger alternatives should be used instead. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9567adb - Browse repository at this point
Copy the full SHA 9567adbView commit details -
Bluetooth: tester: testing.h is moved under mesh directory
Align the bluetooth tester for testing.h directory and api changes Signed-off-by: alperen sener <alperen.sener@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4efa938 - Browse repository at this point
Copy the full SHA 4efa938View commit details -
bluetooth: fast_pair: crypto: enable security backend for tf-m builds
Enabled the CONFIG_NORDIC_SECURITY_BACKEND Kconfig option for TF-m builds that use the Fast Pair cryptographic backend that is available via the CONFIG_BT_FAST_PAIR_CRYPTO_OBERON Kconfig option. The change is required as previously the CONFIG_NORDIC_SECURITY_BACKEND Kconfig option was enabled for TF-m builds (CONFIG_BUILD_WITH_TFM). Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 95e7cd3 - Browse repository at this point
Copy the full SHA 95e7cd3View commit details -
crypto: Allow for more legacy-only API support
-This commit changes HAS_XXXX_CIPHERSUITE_REQUIREMENTS to be a bit more accurate with regards to eiher using legacy or PSA configurations -This commit allows for more legacy support by changing default y from PSA_CRYPTO_CLIENT to the symbol MBEDTLS_USE_PSA_CRYPTO which is a lot more friendly as it dictates "usage". Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e741e5b - Browse repository at this point
Copy the full SHA e741e5bView commit details -
crypto: Add missing API for RSA (Mbed TLS 3.6.0 + RSA_ALT)
-This API is currently not part of the nrf_cc3xx Mbed TLS library -Adding rsa_ext.c to ${mbedcrypto_target} Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2f72160 - Browse repository at this point
Copy the full SHA 2f72160View commit details -
crypto: legacy psa_tls: Add enabledment of MBEDTLS_ECDSA_C/ECDH_C
-Add these configurations as they are needed to be set manually for legacy support Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b29c049 - Browse repository at this point
Copy the full SHA b29c049View commit details -
crypto: Make MD support non-local build of PSA core
-This created an additional file md_ext that contains a couple of functions that are run to check if PSA crypto is initialized. In our TF-M implementation we always boot TF-M image first, so the check doesn't make sense. Nevertheless we need the symbol and choose to solve it here, rather than adjusting the md.c in Mbed TLS. -Add phony version of psa_can_do_hash and psacan_do_cipher for use wnen TF-M is enabled Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for dfa9371 - Browse repository at this point
Copy the full SHA dfa9371View commit details -
crypto: Add resolvement of HMAC when enabling DETERMINISTIC_ECDSA
-Resolves issue in building certain samples Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 94cc40e - Browse repository at this point
Copy the full SHA 94cc40eView commit details -
crypto: Wider mask to prevent duplicate mbdtls_eccdsa_can_do
-First it was tested against CONFIG_OBERON_BACKEND, now we test with this and PSA_CRYPTO_DRIVER_OBERON. This commit will be squashed Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for de9922e - Browse repository at this point
Copy the full SHA de9922eView commit details -
kconfig: change MINIMAL_LIBC_MALLOC to COMMON_LIBC_MALLOC
MINIMAL_LIBC_MALLOC has been deprecated and removed in favor of COMMON_LIBC_MALLOC, therefore change CONFIG_MINIMAL_LIBC_MALLOC=n to CONFIG_COMMON_LIBC_MALLOC=n. Ref: zephyrproject-rtos/zephyr#56309 zephyrproject-rtos/zephyr#74322 Signed-off-by: Torsten Rasmussen <Torsten.Rasmussen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bb12fa5 - Browse repository at this point
Copy the full SHA bb12fa5View commit details -
applications: nrf_desktop: Handle USBD_MSG_CONFIGURATION
Change introduces handling USBD_MSG_CONFIGURATION to USB state module to prevent emitting error logs. Jira: NCSDK-29326 Signed-off-by: Marek Pieta <Marek.Pieta@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 519cc73 - Browse repository at this point
Copy the full SHA 519cc73View commit details -
applications: nrf_desktop: Align USB HID buffers
Change aligns USB HID buffers with requirements of USB next stack. Jira: NCSDK-29326 Signed-off-by: Marek Pieta <Marek.Pieta@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1d4ae68 - Browse repository at this point
Copy the full SHA 1d4ae68View commit details -
crypto: Standardizing on using MBEDTLS_USE_PSA_CRYPTO for Kconfig.legacy
-The control over default values is done with MBEDTLS_USE_PSA_CRYPTO instead of PSA_CRYPTO_CLIENT as this is more in line with wishes on usage Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5005afc - Browse repository at this point
Copy the full SHA 5005afcView commit details -
crypto: Add wider mask for enabling legacy Mbed TLS files
-Adding CONFIG_OBERON_BACKEND and CONFIG_CC3XX_BACKEND as a criteria for adding legacy Mbed TLS files like rsa.c etc.. Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e6de68e - Browse repository at this point
Copy the full SHA e6de68eView commit details -
scripts: quarantine_zephyr: Update net_buf entry
net_buf tests were moved and now have a different test signature. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 57c5cd6 - Browse repository at this point
Copy the full SHA 57c5cd6View commit details -
suit: crypto: Remove filtering of SOC_FAMILY_NORDIC_NRF
-Removed filtering of SOC_FAMILY_NORDIC_NRF for the following configurations required to run native_posix test: - PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT - PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT - PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE - PSA_WANT_ECC_TWISTED_EDWARDS_255 Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a450111 - Browse repository at this point
Copy the full SHA a450111View commit details -
tests: lib: location: Align with upstream device.h changes
z_device_is_ready() was removed, and conditionally compiled device_get_dt_nodelabels has to be excluded from cmock generation. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4bb93be - Browse repository at this point
Copy the full SHA 4bb93beView commit details -
samples: matter: Disable unused cpuflpr from DTS.
Removed cpuflpr support and its partition since it is not used in Matter. This saves the MRAM memory for the application code. Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 832556c - Browse repository at this point
Copy the full SHA 832556cView commit details -
applications: machine_learning: remove flpr nodes to fix missing label
Removed DTS nodes associated with the cpuflpr target as they refer to the cpuflpr_code_partition label from the cpuapp_rx_partitions node. The label has been removed in this file due to the modification of the cpuapp_rx_partitions node. The cpuflpr_vpr and cpuapp_cpuflpr_ipc DTS nodes are removed to prevent build failures. Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for aa0657d - Browse repository at this point
Copy the full SHA aa0657dView commit details -
crypto: Add CONFIG_MBEDTLS_LEGACY_C to net/download sample
-This sample is using mbedtls_sha which was not resolved. By enabling CONFIG_MBEDTLS_LEGACY_C we allow that this for now Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d7e60f8 - Browse repository at this point
Copy the full SHA d7e60f8View commit details -
tests: net: lib: nrf_provisioning: Define COAP_CLIENT_BLOCK_SIZE
New config for coap_client was introduced upstream so need to define it in the test. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4a88229 - Browse repository at this point
Copy the full SHA 4a88229View commit details -
samples: bluetooth: Fix build warning about bt_le_adv_params
Fix the compile warnings in NCS bluetooth samples. Signed-off-by: Lang Xie <lang.xie@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d92ea3a - Browse repository at this point
Copy the full SHA d92ea3aView commit details -
doc: nrf: update mcumgr references
These are now local (nrf docset). Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fe4580f - Browse repository at this point
Copy the full SHA fe4580fView commit details -
crypto: Fix wrong label oberon_psa_core
-For some reason this was quoted (which is not right). Changing ${oberon_psa_core} to oberon_psa_core (which is the actual target) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 18bb5ac - Browse repository at this point
Copy the full SHA 18bb5acView commit details -
samples: cellular: nrf_cloud_multi_service: Use correct config option
Config option for WPA_SUPPLICANT module has been modified. Use the updated config option instead of `WPA_SUPP`. Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ed2d7f3 - Browse repository at this point
Copy the full SHA ed2d7f3View commit details -
scripts: quarantine: quarantine nrfx_spim samples
The nrfx_spim blocking and non_blocking samples which are in hal_nordic are blocking upmerge, and can not be fixed as part of upmerge. Therefore quarantine them. They will be fixed upstream and included in next upmerge. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d1acbf0 - Browse repository at this point
Copy the full SHA d1acbf0View commit details -
tests: suit: temporarily disable native_posix signature check
This is done to unblock the upmerge, as psa signature verification stopped working, as well as the imported volatile key_id has changed. Will be reverted when PSA on native posix works correctly again. Signed-off-by: Artur Hadasz <artur.hadasz@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b4f6dbf - Browse repository at this point
Copy the full SHA b4f6dbfView commit details -
samples: Fix BLE adv params build warning
Fix the compile warning in samples, i.e., initialization discards 'const' qualifier from pointer target type. Signed-off-by: Lang Xie <lang.xie@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7cc0eb9 - Browse repository at this point
Copy the full SHA 7cc0eb9View commit details -
samples: openthread: Disable unused cpuflpr
Disabled cpuflpr in the Openthread CLI sample DTS overlay file. Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9e8674f - Browse repository at this point
Copy the full SHA 9e8674fView commit details -
Applications: Audio: Upmerge sept 24
- Changelog pass done - Made changes to BCT and added bt_bap_unicast_server_register - BIS bitfield change Signed-off-by: Kristoffer Rist Skøien <kristoffer.skoien@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8d64316 - Browse repository at this point
Copy the full SHA 8d64316View commit details -
crypto: Fix aliasing issues of mbedtl_mutex_xxxx APIs
fixup! crypto: Adding threading support for PSA core -Needs to be pointer to function not functions Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for df5d67c - Browse repository at this point
Copy the full SHA df5d67cView commit details -
samples: wifi: shell: Reduce static RAM usage
Static RAM usage is exceeding the `RAM` region at build time. Decrease the number of RX buffers to fix this. Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c8e73d1 - Browse repository at this point
Copy the full SHA c8e73d1View commit details -
modules: wifi: provisioning: softap: Enable WIFI_NRF70
Add sysbuild conf to override the default setting for `WIFI_NRF70`. Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0544e41 - Browse repository at this point
Copy the full SHA 0544e41View commit details -
nrf_security: Use the renamed header file
The common header file is now renamed with the module prefix. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 416f60c - Browse repository at this point
Copy the full SHA 416f60cView commit details -
subsys: dfu: dfu_target: Add support for flatten
Adds support for devices that support flatten and not (or as well) as erase Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no> Signed-off-by: Andrzej Puzdrowski <andrzej.puzdrowski@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e9c82cb - Browse repository at this point
Copy the full SHA e9c82cbView commit details -
Revert "applications: nrf_desktop: Disable USB remote wakeup on nRF54…
…H20" This reverts commit bd0c4b2.
Configuration menu - View commit details
-
Copy full SHA for 01397bf - Browse repository at this point
Copy the full SHA 01397bfView commit details -
samples: net: Add sysbuild Wi-Fi config
When sysbuild Wi-Fi needs to be enabled explicitly to avoid build issues. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fba7a7d - Browse repository at this point
Copy the full SHA fba7a7dView commit details -
crypto: Defer mutex operation in pre-kernel
fixup! crypto: Adding threading support for PSA core Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2cee54f - Browse repository at this point
Copy the full SHA 2cee54fView commit details -
tfm: Propagate PSA_CRYPTO_DRIVER_TFM_BUILTIN_KEY_LOADER
-Fixes issues booting TF-M Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 556a221 - Browse repository at this point
Copy the full SHA 556a221View commit details -
quarantine: native_sim, samples, drivers, tests which use sdl2
This will be re-enabled when sdl2 is added to toolchain. Signed-off-by: Thomas Stilwell <Thomas.Stilwell@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1de453c - Browse repository at this point
Copy the full SHA 1de453cView commit details -
crypto: Rename to nrf_security_mutex_t to mbedtls_threading_mutex_t
-Fixes issues on nRF54L15 devices (uses CRACEN) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0ba024e - Browse repository at this point
Copy the full SHA 0ba024eView commit details -
quarantine_zephyr: sample.filesystem.fat_fs.nrf54l15pdk added
Added this sample scenario to quarantine. Signed-off-by: Andrzej Puzdrowski <andrzej.puzdrowski@nordicsemi.no> Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0144e78 - Browse repository at this point
Copy the full SHA 0144e78View commit details -
tests: subsys: wifi_credentials_backend_psa: Fix build error
Fix build error by including missing file mbedtls_config.h. Signed-off-by: Simen S. Røstad <simen.rostad@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4329970 - Browse repository at this point
Copy the full SHA 4329970View commit details -
samples: net: Enable WIFI_NRF70 only for Wi-Fi builds
Enable WIFI_NRF70 only for Wi-Fi builds Signed-off-by: Simen S. Røstad <simen.rostad@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for de8169e - Browse repository at this point
Copy the full SHA de8169eView commit details -
crypto: mutex: set intialized flag
-Setting the flag was missing Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2ac0a35 - Browse repository at this point
Copy the full SHA 2ac0a35View commit details -
tf-m: Add PSA_CRYPTO_DRIVER_TFM_BUILTIN_KEY_LOADER
-Added regression trying to fix tfm_hello_Word. This commmit fixes it Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6d7a8f3 - Browse repository at this point
Copy the full SHA 6d7a8f3View commit details -
New failures from upmerge Signed-off-by: Maciej Perkowski <Maciej.Perkowski@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8dd1621 - Browse repository at this point
Copy the full SHA 8dd1621View commit details -
tests: benchmarks: peripheral_load: update flash_thread log name
The flash_thread is using a colliding name when registering with the log module LOG_MODULE_REGISTER(flash, LOG_LEVEL_INF). Update name to flash_thd to avoid naming collision. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a5e84fe - Browse repository at this point
Copy the full SHA a5e84feView commit details