-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Do Not Review: Upmerge TF-M v2.1.0 Mbed TLS v3.6.0 (only for testing) #17229
base: main
Are you sure you want to change the base?
Commits on Sep 27, 2024
-
manifest: update manifest for upmerge
Updates manifest for upmerge Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 084c1ec - Browse repository at this point
Copy the full SHA 084c1ecView commit details -
lib: date_time: define _POSIX_C_SOURCE for gmtime_r
We need to define _POSIX_C_SOURCE to include gmtime_r from the standard library. Include minimum required _POSIX_C_SOURCE version. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6e73158 - Browse repository at this point
Copy the full SHA 6e73158View commit details -
libraries: Change autoconf.h to zephyr/autoconf.h
-During the last Zephyr upmerge the includes changed from autoconf.h to zephyr/autoconf.h which this commit fixes for the following: - TF-M header for IOCTL API - Out-of-tree device nrf device integration for TF-M - HW unique key library (and sysbuild) - lwm2m_carrier (sysbuild) - Bootloader (Partition Manager) - Netboot (Partition Manager) - Lots of Partition Manager yml files Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for eed3d5a - Browse repository at this point
Copy the full SHA eed3d5aView commit details -
tf-m: Replace deprecated z_arch_esf_t types
-There is a deprecation of "z_arch_esf_t" in favor of using the type "struct arch_esf" that is changed in fault handling code for TF-M. This commit fixes this Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 36ca7ee - Browse repository at this point
Copy the full SHA 36ca7eeView commit details -
nrf_modem_lib: Fix removed CONFIG_LOG_DOMAIN_ID config
-Changed CONFIG_LOG_DOMAIN_ID to Z_LOG_LOCAL_DOMAIN_ID as the former is removed Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ccff0b1 - Browse repository at this point
Copy the full SHA ccff0b1View commit details -
crypto: Add pk_ecc.c to the build
-Align with Mbed TLS 3.6.0 by adding a new interface pk_ecc.c NOTE: This interface is built around the idea of fallback-to-ECP_C which likely needs to be resolved in a change of this file in Mbed TLS distribution, because of conflicting ideas on what should be happening in a pure configuration of crypto (only using PSA crypto, not enabling anything in legacy) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b3454eb - Browse repository at this point
Copy the full SHA b3454ebView commit details -
crypto: Removal of unsupported PSA crypto algorithm and key types
-Removal of unsupported algorithms in nRF Connect SDK: -ARC4 -ARIA -CAMELLIA -DES -SM3 -SM4 -SHAKE256_512 -RIPEMD160 -MD2 -MD4 -AES OFB - AES Output Feedback blockcipher -AES CFB - AES Cipher Feedback blockcipher -FFDH -DH -AES CBC MAC -Removal of deprecated configurations for ECC, RSA, SPAKE2P and SRP key pair (use IMPORT, EXPORT, GENERATE and DERIVE) -Adjusting Bluetooth Fast Pair to set ECC IMPORT, EXPORT, GENERATE and DERIVE key types (KEY_PAIR removed) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0c48801 - Browse repository at this point
Copy the full SHA 0c48801View commit details -
bluetooth: crypto: Adding missing key-types for ECC
-PSA_WANT_KEY_TYPE_ECC_KEY_PAIR is deprecated in Mbed TLS and Bluetooth Fast Pairh have been enabling PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT for key type support. This commit adds the remaining (required): -PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT -PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE -PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f624bf6 - Browse repository at this point
Copy the full SHA f624bf6View commit details -
crypto: Add missing config for key types for SPAKE2+ and RSA
-Adding config PSA_WANT_TYPE_SPAKE2P_KEY_PAIR_GENERATE -Adding config PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_DERIVE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0ba7090 - Browse repository at this point
Copy the full SHA 0ba7090View commit details -
crypto: Cleanup ordering of PAKE and RSA split configurations
-This orders the configuration according to upstream Zephyr and Mbed TLS code on PAKE and RSA in the following order _IMPORT _EXPORT _GENERATE _DERIVE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9c00d1f - Browse repository at this point
Copy the full SHA 9c00d1fView commit details -
crypto: Enable Kconfig NRF_SECURITY by default
-This commit adds more TLS/DTLS related configurations for the PSA Crypto oriented build-strategy. It's intent is to enable TLS/DTLS using PSA crypto by default while e.g. supporting PEM file input in NS world. -Removes a default y if BUILD_WITH_TFM for NORDIC_SECURITY_BACKEND -Add MBEDTLS_BASE64_C, MBEDTLS_ASN1_WRITE_C and MBEDTLS_ASN1_PARSE_C as prompt-less configurations that is enabled if PEM is enabled -Removed some dependencies for MBEDTLS_CIPHER_C to ensure it is only enabled when MBEDTLS_LEGACY_CRYPTO_C is enabled -Default enable MBEDTLS_PK_C when MBEDTLS_TLS_LIBRARY is enabled -Added dependencies for MBEDTLS_PK_WRITE_C/MBEDTLS_PK_PARSE_C towards MBEDTLS_PK_C being enabled -Added generation of aforementioned legacy configs for the PSA crypto centric configuration when SPM (TF-M secure image) is not enabled -Enabled X.509 in PSA crypto configuration scope (possible post Mbed TLS 3.6.0 addition, ensuring MBEDTLS_PSA_CRYPTO_CLIENT being properly supported... Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fa44184 - Browse repository at this point
Copy the full SHA fa44184View commit details -
crypto: Removing weak and/or unused ciphers in nrf_security
-Removing the following ciphers: - Ripemd160 - Aria - Camellia - DES Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5c547a9 - Browse repository at this point
Copy the full SHA 5c547a9View commit details -
crypto: Align psa_crypto_driver_wrappers to PSA key attributes
-There is a big change in structuring of PSA key attributes with TF-M 2.1. Previously there was a sub-type called "core" inside the PSA key attributes, but this has been swallowed into the top-level structure. This commit removes references to ->core. in code -This code also improves some return-codes to prevent unused variables for a few cases where no crypto drivers are enabled Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d29c2d9 - Browse repository at this point
Copy the full SHA d29c2d9View commit details -
crypto: configs: Disable setting of PSA_WANT_KEY_TYPE_ECC_XXXX_PAIR_B…
…ASIC -PSA_WANT_KEY_TYPE_XXXX_KEY_PAIR_BASIC is a configuration that previously was used to signal "basic type". It is no longer needed to set this configuration as it is only an internal construct. These has been made prompt-less configuration that is automatically enabled when key type support for _IMPORT, _EXPORT, _GENERATE or _DERIVE is requested -This updates the following project configs: - SUIT - psa_tls overlays for RSA - RSA sample Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for aae7800 - Browse repository at this point
Copy the full SHA aae7800View commit details -
crypto: Unify Mbed TLS configuration generation
-This commit improves generation of nrf-config.h which can be built either using PSA crypto or legacy crypto as starting-point. It enables more legacy/platform configurations in case PSA crypto is favored, to ensure that we can split the files: - nrf-config.h: Legacy and platform configurations - nrf-psa-crypto-config.h: PSA_WANT_ALG_XXXX etc. - nrf-psa-crypto-user-config: PSA_NEED_XXXX -Changed platform defines generation using the macro kconfig_check_and_set_base_to_one to kconfig_check_and_set_base. This ensures defines are set to be used for cmakedefine without value for standard configurations in Mbed TLS config. PSA_WANT_ALG_XXX etc. are the only ones that need to use kconfig_check_and_set_base_to_one as it is using #define SOME_DEFINE 1 and have #if checks based on the value -Adding nrf_config.cmake used by PSA crypto generation -Removing all legacy TLS/DTLS and and platform defines from psa_crypto_config.cmake. These are moved to nrf_config.cmake NOTE: This will be renamed to psa_crypto_user_config.cmake in a later commit as this will have PSA_NEED_XXXX configurations only! -Minor adjustments to comments in psa_crypto_want_config.cmake -Auto-enable MBEDTLS_PSA_CRYPTO_CONFIG to legacy_crypto_config.h.template to favor using MBEDTLS_PSA_CRYPTO_CONFIG_FILE and MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE -Fix include-guards for psa_crypto_want_config.h so it fits for the coming rename of this file. We are now using the standardized definition PSA_CRYPTO_CONFIG_H found in Mbed TLS code and TF-M -Simplified the content of nrf-config.h.template. This now contains Platform, _ALT and TLS/DTS and X.509 and cipher-suites. Note: This addition adds a guard against enabling TLS/DTLS and X.509 in TF-M SPM and ARoT builds -The include guard in nrf-config.h.template is changed from MBEDTLS_CONFIG_PSA_H to MBEDTLS_CONFIG_FILE_H to reuse the guard found in Mbed TLS and TF-M .Removing legacy, platform and TLS/DTLS and X.509 configurations from psa_crypto_config.h.template. This is now provided by the generated nrf-config.h file -Changed the include-guard for psa_crypto_config.h.template to the standardized PSA_CRYPTO_USER_CONFIG_H used in TF-M and Mbed TLS. This file has PSA_NEED_XXXX and will be renamed to state that this is a PSA crypto user config file in a later commit Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for cdf138f - Browse repository at this point
Copy the full SHA cdf138fView commit details -
tf-m: Adding config_extra.cmake generation
-This commit introduces using a standardized construct in TF-M to add configurations that gets loaded through a CMake file that is passed to TF-M build. -The configurations passed to TF-M is generated from config_extra.cmake.in which is passed with configure_file from Zephyr to inject static configurations that is necessary for building with/without TF-M and within TF-M's code as well as being compatible with nrf_security -config_extra.cmake will be generated with the following: -Static paths for folders relevant for TF-M and non TF-M build -nrfxlib folder -nrf_security root folder -Oberon PSA core module directory -Arm Mbed TLS module directory -PSA_CRYPTO_EXTERNAL_CORE, which is a signal that a PSA core external to TF-M is intended to be built -Static names to Mbed TLS (and PSA crypto) configurations, without full path that is used both inside and outside of TF-M -MBEDTLS_CONFIG_FILE -MBEDTLS_PSA_CRYPTO_CONFIG_FILE -MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE -Paths to generated folders for configurations in two sets according to what is the usage: -PSA_CRYPTO_CONFIG_INTERFACE_PATH: Interface configurations used by ARoTs in TF-M image, and in Zephyr NS image in a TF-M enabled builds -PSA_CRYPTO_CONFIG_LIBRARY_PATH: Library configurations used by the actual build of crypto (TF-M crypto services in PRoT) or Mbed TLS and PSA core build in secure-only builds (no TF-M) -Additional state configurations relevant for external core build Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d77deaf - Browse repository at this point
Copy the full SHA d77deafView commit details -
tf-m: Add use of generated crypto_extra.cmake file
-This adds use of the generated crypto_extra.cmake file used to pass -This is added both in TF-M and in Zephyr builds as it simplifies path-handling for both cases in nrf_security. -This commit removes versions of CMake variables for paths in both entry points to building nrf_security (nrf_security/CMakeLists.txt and nrf_security/tfm/CMakeLists.txt) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 418ee28 - Browse repository at this point
Copy the full SHA 418ee28View commit details -
tf-m: crypto keys: Update platform HUK APIs
-tfm_plat_get_huk and tfm_plat_get_iak APIs have changed a parameter from size_t to psa_key_bits_t. This commit aligns the APIs with TF-M 2.1 Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2aaf9c4 - Browse repository at this point
Copy the full SHA 2aaf9c4View commit details -
tf-m: Remove nordic-internal configuration for PSA attestation
-Removing the Nordic-internal configuratio PSA_WANT_GENERATE_RANDOM for TFM_PARTITION_INITIAL_ATTESTATION, under the assumption that random generator is a default-enabled feature in a standard system Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8106021 - Browse repository at this point
Copy the full SHA 8106021View commit details -
tf-m: Add support for building PSA core externally
-TF-M has no active support for out-of-tree builds of PSA core, and they have decided to place every PSA core (and interface file) in a common folder that we will have problem to use directly, as it conflicts with changed files on our end or files provided by the Oberon PSA core. This commit likely will be adjusted at some later point, but it tries to control include-order towards our replacement files and our strategy of handling generated crypto configurations for the build of the PSA interface and the library containing crypto support -This commit relies on the CMake variable PSA_CRYPTO_EXTERNAL_CORE which is added as a [nrf noup] in TF-M -This commit adds external_core.cmake which handles the following: - Ensure includes happen right after TF-M creates library targets to ensure that include-order dependency is resolved for taking in out-of-tree include folder from nrf_security, generated config file folder, Oberon PSA core include folders and out-of-tree addition of Arm Mbed TLS distribution (include and library folder) - Ensure that the generated config files (configured in NCS) are propagated to the TF-M build and is used for every library that depends on either PSA interface or library version of these -This commit adds external_core_install.cmake which will be used instead of the TF-M install target for specific PSA interface files. -Adding lots of files from TF-M tree into nrf_security include folder. nrf_security/include is added early in the include order to override equivalently named files from Arm Mbed TLS distribution in the PSA interface usage Note: It is frustrating that TF-M is include order dependent, and parts of the work to fix this will go towards ensuring that this is not in effect in upstream TF-M code. The files copied here are unfortunate and is only done to accelerate TF-M 2.1 integration... Please see NCSDK-XXXXX for details on how to fix this in upstream TF-M ref: NCSDK-XXXXX Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1cc6837 - Browse repository at this point
Copy the full SHA 1cc6837View commit details -
tf-m: Updated out-of-tree crypto_spe.h to aling with TF-M 2.1
-This adjusts the out-of-tree file used for TF-M builds to adjust the PSA crypto APIs symbol names for crypto service build (prefixed with e.g. mbedcrypto__ to not collide with the PSA crypto APIs calls made from any other service and/or testing done from inside TF-M image. -This includes additions for PAKE APIs currently not supported in TF-M Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0381d44 - Browse repository at this point
Copy the full SHA 0381d44View commit details -
tf-m: Add TF-M compiler flags to TF-M config libraries
-This resolves an issue transferring compiler-flags and linker-options aggregated from TF-M build into all libraries built by nrf_security. The libraries psa_crypto_config and psa_crypto_library_config was chosen as this would previously be used by the now removed mbedcrypto_common, but this has been erased. By setting the compiler- flags and linker-options to these targets we ensure that the right floating-point configurations are used when building and linking with crypto-libraries Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 56d1b1b - Browse repository at this point
Copy the full SHA 56d1b1bView commit details -
crypto: PSA core: Add psa_crypto_config and psa_crypto_library_config
-This commit adds usage of psa_crypto_config and psa_crypto_config_library and it is a major refactoring on the PSA core in build -Previously we have made choices on whether or not to build specific features dependent on CMake variables constructed by nrf_security (BUILD_INSIDE_TFM and/or COMPILE_PSA_APIS). These have been removed in favor of the standard signals that exists in Mbed TLS and TF-M (MBEDTLS_PSA_CRYPTO_SPM and MBEDTLS_PSA_CRYPTO_C). This commit tries to fix a technical debt issue of using multiple competing signals for the same meaning. From this commit on, the standard signals will be used in all cases. -Added early exit in PSA crypto core build in case MBEDTLS_PSA_CRYPTO_C is not set (meaning it doesn't need to be built) -Added an early exit in all PSA driver build in case MBEDTLS_PSA_CRYPTO_C is not set (meaning it doesn't build the PSA core and no drivers are needed) -Adding cmake/generate_configs.cmake that includes macros generate_mbedcrypto_interface_configs and generate_mbedcrypto_library_configs which is used to ensure -Adding macros to store/restore specific configurations that needs to be changed depending on whether you have an interface build or a library build (generated in two sets) -Removing Kconfig GENERATE_MBEDTLS_CFG_FILE as it is unsupported -Removing MBEDTLS_USER_CONFIG_FILE as we are now using MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE -Changing the default names for Mbed TLS config files according to the generated files named earlier in this commit-message -Removed all references to mbedcrypto_common which was used to transfer information both to PSA crypto interface and library build. This is now handled by psa_crypto_config and psa_crypto_library_config Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for aa03f9c - Browse repository at this point
Copy the full SHA aa03f9cView commit details -
crypto: Cleaning up PSA driver and core CMake logic
-Creating named library: oberon_psa_core -Creating libraries for PSA crypto drivers: -cracen_psa_driver -oberon_psa_driver (nrf_cc3xx and nrf_cc3xx_platform are skipped as these come pre-built and are only linked in to the new oberon_psa_core library) -Make all drivers reference the new target psa_crypto_library_config both for include-folders and for configurations -Make oberon_psa_core link to every PSA crypto driver -Make all warning-disablement private to the relevant drivers -Adding NRF_RNG entropy driver to oberon_psa_core (was ${mbedcrypto_target} -Removing CONFIG_NRF_SECURITY_LEGACY_AND_PSA as it is now possible to configure both PSA crypto and at the same time enable legacy configurations by enabling by setting MBEDTLS_LEGACY_CRYPTO_C -Making PSA crypto driver CMake only relevant for PSA crypto drivers instead of doing this as well as legacy support -Fix coding standard in all driver CMake logic -Move interrupts.c addition for CRACEN internal to the sxsymcrypt runtime -Simplified oberon_psa_driver and cracen_psa_driver CMake logic so it has a unified look-and-feel and don't infer e.g. TF-M builds -Made PSA_CRYPTO_DRIVER_CRACEN default enabled Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9ce43df - Browse repository at this point
Copy the full SHA 9ce43dfView commit details -
crypto: tls: Don't depend on MBEDTLS_CIPHER_C for TLS use-cases
-This removes a dependency for MBEDTLS_CIPHER_C if TLS is enabled Now only MBEDTLS_MD_C is a legacy dependency for this module Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 83f88e1 - Browse repository at this point
Copy the full SHA 83f88e1View commit details -
crypto: Removal of unused out-of-tree files
-Some out-of-tree files from Mbed TLS have been kept in nrf_security to get around issues with compiler warnings for unused functions and symbols and to remove unnecessary code when nrf_oberon is in use and is providing the Mbed TLS legacy support. This commit removes unused files (changed earlier) as well as finally removing aes.c and aes_oberon.c from the build as these are no longer needed. We now use Mbed TLS sources for most use-cases... Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for af97c30 - Browse repository at this point
Copy the full SHA af97c30View commit details -
crypto: Adding threading support for PSA core
-Add support for threading in PSA core to align with Mbed TLS 3.6.0 Mbed TLS 3.6.0 requires 3 mutex-symbols being globally accessible: - mbedtls_threading_key_slot_mutex - mbedtls_threading_psa_globaldata_mutex - mbedtls_threading_psa_rngdata_mutex Note: This is not used when CryptoCell is enabled, which has a different solution for threading support available in platform integration files found in nrfxlib. Note: This commit will likely be replaced with a implementation upstream, but is added here temporarily Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8b50d2b - Browse repository at this point
Copy the full SHA 8b50d2bView commit details -
sample: tls: Enable SSL CLI for psa_tls
-Enabling CONFIG_MBEDTLS_SSL_CLI_C for psa_tls sample This seems required to be set after Mbed TLS 3.6.0... Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 586855a - Browse repository at this point
Copy the full SHA 586855aView commit details -
crypto: nrf_security: Fix coding standard issues
-This commit contains coding-standard fixes for CMake. This doesn't change any functionality Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 554dcdb - Browse repository at this point
Copy the full SHA 554dcdbView commit details -
crypto: legacy: Enable more PSA core/crypto awareness
-Ensure MBEDTLS_THREADING_C is enabled when either CC3XX_BACKEND or PSA core is enabled. Enabling this will only happen when the core is built in secure-only builds. TF-M circumvents threading in its build -Ensure MBEDTLS_THREADING_ALT is set -Ensure MBEDTLS_BASE64_C is enabled always to simplify adding support for PEM (parse and write -Adding Kconfig MBEDTLS_OID_C so it can be generated in nrf-config.h both when building PSA centric and with MBEDTLS_LEGACY_CRYPTO_C enabled -Enabling MBEDTLS_ASN1_WRITE_C/MBEDTLS_ASN1_PARSE_C additionally when MBEDTLS_USE_PSA_CRYPTO is set for X.509 support -Remove MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT depending on !BUILD_WITH_TFM -Remove default enablement of MBEDTLS_LEGACY_CRYPTO_C when BUILD_WITH_TFM is set -Ensure all legacy configurations aren't built when PSA crypto is used (using the Zephyr Kconfig PSA_CRYPTO_CLIENT to test) -Resolve PSA_WANT_ALG_XXXX and PSA_WANT_KEY_TYPE_XXXX from all enabled legacy crypto configurations Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4dca9fe - Browse repository at this point
Copy the full SHA 4dca9feView commit details -
libraries: Update all includes to <zephyr/net_buf.h>
-The current upmerge deprecated <zephyr/net/buf.h> and replaces it with <zephyr/net_buf.h>. This change is on HCI, DTM, WIFI, RPC bluetooth and applications (to mention a few) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 33af3b9 - Browse repository at this point
Copy the full SHA 33af3b9View commit details -
suit: Fix Kconfig for SUIT (missing type)
-Suit overrides for MBEDTLS_PSA_CRYPTO and MBEDTLS_ZEPHYR_ENTROPY was missing the Kconfig type and was giving warnings Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 96a601f - Browse repository at this point
Copy the full SHA 96a601fView commit details -
drivers: Remove nRF70 Wi-Fi driver
This is now part of the Zephyr upstream. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3f36e8e - Browse repository at this point
Copy the full SHA 3f36e8eView commit details -
Now that nRF70 support is upstream, switch to upstream hostap. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 630c20c - Browse repository at this point
Copy the full SHA 630c20cView commit details -
treewide: Migrate to nRF70 upstream driver
Upstream driver namespace is renamed from nrf700x -> nrf70. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5f67ede - Browse repository at this point
Copy the full SHA 5f67edeView commit details -
boards: shields: Use upstream nRF7002EK shields
nRF70 EK shields are now upstreamed. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6134718 - Browse repository at this point
Copy the full SHA 6134718View commit details -
treewide: Migrate to upstream Zephyr WPA supplicant
nRF70 now uses upstream Zephyr WPA supplicant. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7ef8902 - Browse repository at this point
Copy the full SHA 7ef8902View commit details -
modules: hostap: Remove hostap module
Migrate to using Zephyr upstream. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a93a432 - Browse repository at this point
Copy the full SHA a93a432View commit details -
boards: Remove nRF7002DK board
This board is upstreamed to Zephyr. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9155219 - Browse repository at this point
Copy the full SHA 9155219View commit details -
treewide: Fix CMake warning for nRF70 driver heap
nRF70 driver is the primary user for kernel heap and already sets a higher value which is typical, but for some configurations e.g., scan-only we need to set it to lower value to optimize memory, so, enable the option to ignore minimum mandated value from driver and instead use the value from the sample. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fe59ee3 - Browse repository at this point
Copy the full SHA fe59ee3View commit details -
samples: wifi: shell: Increase kernel heap
nRF70 upstream driver now needs more heap, not sure about the cause, but without this OOM messages during boot are seen. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b7d4c4f - Browse repository at this point
Copy the full SHA b7d4c4fView commit details -
migration: Add notes for nRF70 upstream switch
Document changes that affect customer samples or applications. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 065a767 - Browse repository at this point
Copy the full SHA 065a767View commit details -
doc: changelog: Update with upstream migration
Update Drivers, Wi-Fi protocols and documentation with notes about upstream migration. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6315787 - Browse repository at this point
Copy the full SHA 6315787View commit details -
treewide: Use nRF7000 for scan only
With latest upstream, scan only mode now only works with nRF7000. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for a98eaf6 - Browse repository at this point
Copy the full SHA a98eaf6View commit details -
ci: Quarantine nRF7002 unsupported boards
These are still unsupported in nRF70 upstream. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c4e5ffe - Browse repository at this point
Copy the full SHA c4e5ffeView commit details -
samples: wifi: Fix Raw mode build
Remove the driver header dependency and inline the structures for now, this needs to be properly fixed in the future where nRF70 driver should have public headers. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 375291b - Browse repository at this point
Copy the full SHA 375291bView commit details -
samples: wifi: coex: Explicitly enable co-existence
With the upstream nRF70 driver, the co-ex is not auto-enabled based on the DTS, this was implemented improperly, now user has to explicitly choose to enable co-existence. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c3d737c - Browse repository at this point
Copy the full SHA c3d737cView commit details -
ci: quanratine: Disable Matter for nRF7002DK
Almost all matter samples rely on PM which needs EXT_FLASH support for nRF70 which isn't supported yet, so, Quarnatine them for now. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c76cb28 - Browse repository at this point
Copy the full SHA c76cb28View commit details -
ci: Quarantine Thingy and Wi-Fi tests
Thingy is not supported yet for nRF70 companion chips. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c09ef00 - Browse repository at this point
Copy the full SHA c09ef00View commit details -
samples: Remove unsupported platforms from integration
Though these platforms are excluded for Wi-Fi tags, twister still fails as this is still part of integration platforms, remove it to fix the twister. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6c55115 - Browse repository at this point
Copy the full SHA 6c55115View commit details -
In latest nrfxlib this tag is removed, so, remove the reference to fix the doc build. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 87cd44e - Browse repository at this point
Copy the full SHA 87cd44eView commit details -
samples: wifi: Remove raw modes for nRF7000
As of now the raw mode is couple with system mode which is unsupported for nRF7000, so, remove them. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 259836b - Browse repository at this point
Copy the full SHA 259836bView commit details -
samples: wifi: shutdown: Fix build errors
Shutdown sample assumes default nRF70 mode is scan and doesn't support any other mode. With the migration to upstream scan only is limited to nRF7000 shield, so, remove other combinations. Also, add nRF7000 with 5340 as this was the main usecase for testing this sample. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for db633c5 - Browse repository at this point
Copy the full SHA db633c5View commit details -
ci: quarantine: Quarantine few mysterious memory overflows
These overflows are only happening in the CI, locally the same twister command works fine, quarantine them for now, and investigate later. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 35219f6 - Browse repository at this point
Copy the full SHA 35219f6View commit details -
sysbuild: Remove some Kconfigs
Removes some Kconfig options that have been added to zephyr Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2dafbff - Browse repository at this point
Copy the full SHA 2dafbffView commit details -
[nrf noup] Remove CFB and OFB from OpenThread defconfig
-This removes MBEDTLS_CIPHER_MODE_CFB and MBEDTLS_CIPHER_MODE_OFB which is no longer actively supported in nRF Connect SDK Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2e2db8a - Browse repository at this point
Copy the full SHA 2e2db8aView commit details -
github: workflows: compliance: add unidiff to requirenments
Add unidiff dependency to requirenments-fixed.txt and add it to the compliance.yml job "Install python dependencies" Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6e75894 - Browse repository at this point
Copy the full SHA 6e75894View commit details -
samples: libraries: Fixing deprecated z_arch_esf_t
-The upmerge brings in a deprecation of const z_arch_esf_t in favor of struct arch_esf. This commit fixes this for applications, samples and tests in the following domain: -fatal_error library -ipc_radio application -Audio application -Matter diagnostics (used by multiple samples) -fprotect tests -hw_unique_key tests -Audio tests Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c34a846 - Browse repository at this point
Copy the full SHA c34a846View commit details -
applications: ipc_radio: align net_buf to new API
The net_buf_put/get is deprecated, align to recommended API. Signed-off-by: Dominik Chat <dominik.chat@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e5a5bb9 - Browse repository at this point
Copy the full SHA e5a5bb9View commit details -
boards: shields: remove nrf7002eb
The nrf7002eb is now part of sdk-zephyr. Remove out-of-tree shield. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 07839cc - Browse repository at this point
Copy the full SHA 07839ccView commit details -
boards: shields: remove nrf700x_nrf54h20dk
nrf700x_nrf54h20dk has been replaced by the nrf7002eb and nrf7002eb_interposer_p1 shields along with the nrf70-wifi snippet. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 15a1ffd - Browse repository at this point
Copy the full SHA 15a1ffdView commit details -
boards: shields: remove nrf700x_nrf54h15dk
nrf700x_nrf54h15dk has been replaced by the nrf7002eb and nrf7002eb_interposer_p1 shields along with the nrf70-wifi snippet. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6ff0ca2 - Browse repository at this point
Copy the full SHA 6ff0ca2View commit details -
boards: shields: remove nrf700x_nrf54l15pdk
nrf700x_nrf54l15pdk has been replaced by the nrf7002eb and nrf7002eb_interposer_p1 shields along with the nrf70-wifi snippet. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 21f9386 - Browse repository at this point
Copy the full SHA 21f9386View commit details -
cmake: modules: kconfig: Update autoconf path
Updates the path to the autoconf file as this has changed in Zephyr Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 11e602f - Browse repository at this point
Copy the full SHA 11e602fView commit details -
boards: shields: add nrf7002eb_interposer_p1 shield
Add the nrf7002eb_interposer_p1 shield which is connected to P1. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8186535 - Browse repository at this point
Copy the full SHA 8186535View commit details -
doc: cmake: inject DOCS_HTML_DIR
Since the addition of sphinx-autobuild support in Zephyr, the ZEPHYR_BUILD variable in conf.py requires knowledge of the HTML build dir from the environment, using DOCS_HTML_DIR. Ref: Zephyr 2e99de80472b80f36303ff85c8ed5d54dfe73ef4 Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no> Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e2aa883 - Browse repository at this point
Copy the full SHA e2aa883View commit details -
tf-m: Fix removed PSA_WANT_KEY_TYPE_RSA_KEY_PAIR configuration for tests
-This commit removes selection of PSA_WANT_KEY_TYPE_RSA_KEY_PAIR for TF-M tests as this is no longer a Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e2fd6e8 - Browse repository at this point
Copy the full SHA e2fd6e8View commit details -
tf-m: Add a dummy PLAT_OTP_ID_LCS define for TF-M Minimal configuration
-This adds a dummy OTP element in include/tfm/platform_otp_ids.h which is a file that is only used when TFM_PROFILE_TYPE_MINIMAL is set. It was added as TF-M 2.1 references this directly in the psa_api.c file. Note that calling to retrieve the LCS will always report "TFM_PLAT_ERR_UNSUPPORTED" as dummy_otp.c is enabled in this case. This commit is only fixing a build issue Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c431b06 - Browse repository at this point
Copy the full SHA c431b06View commit details -
crypto: Adding missing include-folder to CRACEN library
fixup! crypto: Cleaning up PSA driver and core CMake logic -This fixes missing link to nrfx.h in CRACEN PSA crypto library (fixup of commit eccaa21) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9fff1e8 - Browse repository at this point
Copy the full SHA 9fff1e8View commit details -
crypto: CRACEN: Remove unused parameter
-Removing a compilationg warning Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 11d58f5 - Browse repository at this point
Copy the full SHA 11d58f5View commit details -
tf-m: Clean up PSA crypto interface/library config addition
fixup! tf-m: Add support for building PSA core externally -This commit changes to install the PSA crypto interface config files to the TF-M install target, for use by Zephyr when TF-M is enabled -This commit prevents the interface-config (required for main app and NS image build in TF-M) from being enabled in any library build by using generator expressions in nrf_security_add_zephyr_options to filter out of the list that gets retrofitted into nrf_security libraries -This commit removes unneeded duplications of includes for ${mbedcrypto_target} which is already available in mbedcrypto_Base (fixup of commit 6791e0a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for cd882f2 - Browse repository at this point
Copy the full SHA cd882f2View commit details -
crypto: Adjusting threading to also work with no multithreading support
fixup! crypto: Adding threading support for PSA core -This commit changes from threading/CMakeLists.txt to threading/threading.cmake to ensure that include can be used instead of add_subdirectory. This is necessary to keep the variables used to pass to build the mbedcrypto lib working inside and outside -Added support for the faux no threading suppport mode by reusing the nrf_security_mutexes.h API -Adding init/free to nrf_security_mutexes.h APIs Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8860876 - Browse repository at this point
Copy the full SHA 8860876View commit details -
crypto: Removing unused target names mbedx509_target and mbedtls_target
-TF-M renames the mbedcrypto target and previously it was also needed to rename mbedx509 and mbedtls (TLS/DTLS library). TF-M no longer builds this so we can use the standard names instead of keeping the aforementioned targets as CMake variables -Changing ${mbedx509_target} => mbedx509 -Changing ${mbedtls_target} => mbedtls Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6abf7bd - Browse repository at this point
Copy the full SHA 6abf7bdView commit details -
crypto: Fix legacy API support for TLS/DTLS and X.509
-This commit moves some TLS-dependent APIs into ${mbedcrypto_target} as they are required for PSA to legacy conversions e.g. using psa_util.c APIs. Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 192ef3c - Browse repository at this point
Copy the full SHA 192ef3cView commit details -
crypto: Reworking the structure of psa driver/core
fixup! crypto: Cleaning up PSA driver and core CMake logic -This improves include paths (putting things closer to where they are generated/imported -This ensures that legacy-world gets access to the include folders for nrf_cc3xx_platform and oberon imported libs without depending on PSA core build -This removes some return-guards which may be considered to be added on again (to resolve a CMake/linking issue) (fixup of commit fc0112a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9862925 - Browse repository at this point
Copy the full SHA 9862925View commit details -
crypto: Fixup of threading for path resolvement
fixup! crypto: Adding threading support for PSA core (fixup of commit 0667ab2= Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for eaf8976 - Browse repository at this point
Copy the full SHA eaf8976View commit details -
crypto: Separating library and interface configs for nrf_security libs
-This commit adds nrf_security_add_zephyr_options_library which adds includes from the zephyr_interface without PSA crypto interface configurations (include-folder addition where nrf-crypto.h is added) -Moving calls to nrf_security_add_zephyr_options closer to where the libraries are built (cleanup) -Made Oberon, CRACEN and core use nrf_security_add_zephyr_options_library Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for c5ead67 - Browse repository at this point
Copy the full SHA c5ead67View commit details -
crypto: Cleaning up dependencies for psa_crypto_config/psa_interface
fixup! crypto: PSA core: Add psa_crypto_config and psa_crypto_library_config (fixup of commit cbf737a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9fda197 - Browse repository at this point
Copy the full SHA 9fda197View commit details -
crypto: MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER for Nordic security b…
…ackend fixup! crypto: Fix legacy API support for TLS/DTLS and X.509 -This enables MBEDTLS_PSA_CRYPTO_KEY_ENCODES_OWNER to allow for NORDIC_SECURITY_BACKEND being used as a configuration when building with TF-M (fixup of commit da97260) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 264a56e - Browse repository at this point
Copy the full SHA 264a56eView commit details -
crypto: TF-M: Add filter for legacy API addition for ARoTs etc.
fixup! crypto: Fix legacy API support for TLS/DTLS and X.509 -This commit ensures that md/pk etc. is not added when building inside TF-M. There is a define called MBEDTLS_PSA_CRYPTO_SPM that is used as a signal that the SPM partition is going to be buitl, but unfortunately this configuration is too vague in our current build (fixup of commit da97260) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 219edb1 - Browse repository at this point
Copy the full SHA 219edb1View commit details -
crypto: Threading: Ensure linking against libkernel.a by path
fixup! crypto: Adding threading support for PSA core -This resolves an issue with CRACEN builds where trying to get a proper link to kernel involves using kernel library by full path to avoid issues in build. -Make includes local for nrf_security_mutexes/events -Establish nrf_security_utils library to localize the issue and to try to find a better way to resolve this in the future Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e5a643a - Browse repository at this point
Copy the full SHA e5a643aView commit details -
crypto: TF-M: Add better filter for non PSA builds
fixup! crypto: Fix legacy API support for TLS/DTLS and X.509 -This commit is unfortunate, but it is required as there is no cleanliness to legacy symbols in non SPM targets in TF-M. This commit can be changed with a properly supported BUILD_INSIDE_TFM or similar signal (fixup of commit da97260) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9d06a88 - Browse repository at this point
Copy the full SHA 9d06a88View commit details -
crypto: Resolve path-issues with CRACEN builds
fixup! crypto: Cleaning up PSA driver and core CMake logic -This commit resolves some path-issue with HUK library where APIs internal to PSA crypto is required to be accessible in PSA crypto interface scope. Exposing the CRACEN API towards NCS libraries is currently unavoidable. (fixup of commit fc0112a) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fde33e0 - Browse repository at this point
Copy the full SHA fde33e0View commit details -
samples: wifi: privisioning: softap: add missing integration_platforms
This is requires because sample documentation uses the table-from-sample-yaml directive. Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 046aad0 - Browse repository at this point
Copy the full SHA 046aad0View commit details -
doc: nrf: update references to Zephyr docs
Zephyr has increased usage of :zephyr:code-sample:, also some have changed their name. Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b397a97 - Browse repository at this point
Copy the full SHA b397a97View commit details -
doc: redirects: remove invalid entries
Redirects are now validated against all available documents within a docset, so we cannot have random redirects to external docsets. Delete entries which were crossing boundaries, these will need to be handled manually somewhere else. Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 349b14d - Browse repository at this point
Copy the full SHA 349b14dView commit details -
ieee802154: 802154_rpmsg: Fix path in CMake and sysbuild conf
Fix ieee802154/802154_rpmsg path in CMake and sysbuild conf. Signed-off-by: Dawid Przybylo <dawid.przybylo@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for cda014f - Browse repository at this point
Copy the full SHA cda014fView commit details -
samples: Align samples to new recommeneded net_buf API.
Align the usage of net_buf_put/get to use k_fifo_put/get as recommended per Zephyr upstream. Signed-off-by: Dominik Chat <dominik.chat@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 959bea3 - Browse repository at this point
Copy the full SHA 959bea3View commit details -
tf-m: Add ${NRF_DIR} to external core and added include
fixup! tf-m: Add support for building PSA core externally -This adds include for /nrf/include/tfm which has a file used for builtin key support. This is using the same mechanism as other types of paths passed to TF-M (fixup of commit 96a5924) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 29a9cc6 - Browse repository at this point
Copy the full SHA 29a9cc6View commit details -
crypto: Handling threading support a bit more accurately
fixup! crypto: Adding threading support for PSA core -This commit ensures the appropriate linking from nrf-security_utils to libraries in tf-M related to low-level OS integration like the addition of __assert.h and the debvug log used whe asserts happen -This commit also moves nrf_security_utils into private scope for mbedcrypto-base and cracen PSA crypto library Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for effe1db - Browse repository at this point
Copy the full SHA effe1dbView commit details -
ble: Fix const correctness for bt_le_adv_parms
-This fixes build warnings for certain samples for BLE Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 857728c - Browse repository at this point
Copy the full SHA 857728cView commit details -
crypto: Resolving more PSA features from legacy
fixup! crypto: legacy: Enable more PSA core/crypto awareness -This commit enabled MBEDTLS_WANT_KEY_TYPE_AES for any cipher-usge (by select) -This commit resolves PSA_WANT_ALG_ECB_NO_PADDING when MBEDTLS_CMAC_C is set -The changes is made to conform with check_config.h (fixup of commit 39f2cbc) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 23e90cc - Browse repository at this point
Copy the full SHA 23e90ccView commit details -
crypto: Made imported (legacy) libraries use psa_crypto-config
fixup! crypto: Cleaning up PSA driver and core CMake logic -This commit changes link dependency on nrf_cc3xx_core_imported towards psa_crypto_config (was _config_library) to prevent propagation of multiple sets of configs -Same also done for mbedcrypto-oberon_mbedtls_imported Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3e47eed - Browse repository at this point
Copy the full SHA 3e47eedView commit details -
modem: tests: Change z => zvfs
-Changed z_reserve_fd => zvfs_reserve_fd -Changed z-free_fd => zvfs_free-fd -Changed z_finalize_fd => zvfs_finalize-fd -Bonus points: fixed comments referencing the non-existent APIs, as well Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e50f7d0 - Browse repository at this point
Copy the full SHA e50f7d0View commit details -
net: download client: Added K_THREAD_STACK_MEMBER definition
-One of the structures in this file was using K_THREAD_STACK_MEMBER which didn't exists. Added a define to point to K_KERNEL_STACK_MEMBER in the header-file to resolve some build issues Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 989df26 - Browse repository at this point
Copy the full SHA 989df26View commit details -
bluetooth: controller: align softdevice with BT_CTLR_CRYPTO_SUPPORT
Aligned the Softdevice controller with the BT_CTLR_CRYPTO_SUPPORT Kconfig from upstream. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for db5cd9e - Browse repository at this point
Copy the full SHA db5cd9eView commit details -
tests: nrf_compress: Enable legacy crypto for mbedtls_sha256_c
-This enables two missing configurations for this test: CONFIG_MBEDTLS_SHA256_C CONFIG_MBEDTLS-LEGACY_CRYPTO_C Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 61d9d54 - Browse repository at this point
Copy the full SHA 61d9d54View commit details -
crypto: Adding "-Wno-unused-function" to avoid oberon_ecdsa errors
-This commit allows unused functions for Oberon PSA crypto driver Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7404dee - Browse repository at this point
Copy the full SHA 7404deeView commit details -
crypto: Resolving CHACHA20 into PSA crypto configs
fixup! crypto: legacy: Enable more PSA core/crypto awareness -Resolving PSA_WANT_ALG_STREAM_CIPHER if MBEDTLS_CHACHA20_C is set (fixup of commit 39f2cbc) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for cdfafe0 - Browse repository at this point
Copy the full SHA cdfafe0View commit details -
boards: thingy91x: replace removed Kconfig option
`CONFIG_SPI_NOR_IDLE_IN_DPD` doesn't exist anymore. `CONFIG_PM_DEVICE_RUNTIME` enables its previous behavior, which is now tunable with `CONFIG_SPI_NOR_ACTIVE_DWELL_MS`. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6cc0bdf - Browse repository at this point
Copy the full SHA 6cc0bdfView commit details -
applications: serial_lte_modem: fix "'noreturn' function does return"
Remove the `noreturn` attribute from functions because functions they call (e.g. `nrf_regulators_system_off()`) miss it. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f5d8d83 - Browse repository at this point
Copy the full SHA f5d8d83View commit details -
nrf_security: add missing Mbed TLS source file
Add block_cipher.c to fix undefined references to functions in there. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2b288ea - Browse repository at this point
Copy the full SHA 2b288eaView commit details -
nrf_security: fix MBEDTLS_HKDF_C dependency
Make it select PSA_WANT_ALG_HMAC as the latter is a requirement of the former. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e074612 - Browse repository at this point
Copy the full SHA e074612View commit details -
tests: crypto: add missing Mbed TLS Kconfig options
With the default-enabled Mbed TLS Kconfig options having been reduced in Zephyr, it's now necessary to manually enable them. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8d3e554 - Browse repository at this point
Copy the full SHA 8d3e554View commit details -
bindings: usb: zephyr,hid-device: rename in-polling-rate
in-polling-rate has been renamed in-polling-period-us, adapt nrf overlays to reflect this. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1ab4a3f - Browse repository at this point
Copy the full SHA 1ab4a3fView commit details -
applications: nrf_desktop: update usbd config define macro usage
Update USBD_CONFIGURATION_DEFINE() macro usage in nrf_desktop app. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2a98653 - Browse repository at this point
Copy the full SHA 2a98653View commit details -
samples: net: fix linkage failures on native_sim
Enable CONFIG_MBEDTLS_PSA_CRYPTO_C to fix undefined references to PSA Crypto functions. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 52cc9a9 - Browse repository at this point
Copy the full SHA 52cc9a9View commit details -
crypto: Add fallback to get PSA crypto driver APIs
-This is necessary to avoid failing to include psa/crypto.h when BUILD_WITH_TFM or MBEDTLS_PSA_CRYPTO_C is not set Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for afcc5b5 - Browse repository at this point
Copy the full SHA afcc5b5View commit details -
crypto: Fix collision with mbedtls_ecdsa_can_do for nrf_oberon
-This adds a copy of ecdsa.c from Mbed TLS to allow us to adjust the code to remove a symbol inside the ecdsa.c which is duplicated in the library. -The nrf_oberon Mbed TLS library needs to be rebuilt without this symbol to be able to remove this special adjustment Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3863b5e - Browse repository at this point
Copy the full SHA 3863b5eView commit details -
crypto: Fix access to Mbed TLS base APIs for nrf_cc3xx imported libs
-This provides access to more APIs from legacy Mbed TLS for the imported nrf_cc3xx libraries, which should fix some build issues Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fea0637 - Browse repository at this point
Copy the full SHA fea0637View commit details -
samples: bluetooth: fast_pair: locator_tag: align Kconfigs from libc
Aligned the Kconfig options from the libc library related to the dynamic memory allocation with the newest Zephyr synchronization point. The library-specific Kconfigs were renamed and placed in the common directory. Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7949be8 - Browse repository at this point
Copy the full SHA 7949be8View commit details -
bluetooth: controller: ecdh: enable security backend for tf-m builds
Enabled the CONFIG_NORDIC_SECURITY_BACKEND Kconfig for TF-m builds when the CONFIG_BT_CTLR_ECDH_LIB_OBERON is enabled in the Bluetooth Controller library. The change is required as previously the CONFIG_NORDIC_SECURITY_BACKEND Kconfig was enabled for TF-m builds (CONFIG_BUILD_WITH_TFM). Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 963aa19 - Browse repository at this point
Copy the full SHA 963aa19View commit details -
crypto: Adding legacy headers gave mismatch for nRF54H SSF samples
-Fallback to include ARM includes was a bad idea. This changes it to Oberon-psa-crypto include folder instead. This issue impacted nRF54H20 samples which isn't building the PSA core locally (meaning the build has PSA crypto APIs available, but is a coreless build). Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 5f7740d - Browse repository at this point
Copy the full SHA 5f7740dView commit details -
tfm: tests: Enable PSA_WANT_ALG_ECDSA
-The regression test config (prj.conf) was missing PSA_WANT_ALG_ECDSA and likely was assuming that setting PSA_WANT_ALG_DETERMINISTIC_ECDSA would internally resolve both. This is not the case. This commit fixes this Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9ef1383 - Browse repository at this point
Copy the full SHA 9ef1383View commit details -
tf-m: tests: Add better filtering of CRACEN devices for regression tests
-The nRF54L15 device only supports enabling CRACEN, an attempt to enable PSA_CRYPTO_DRIVER_OBERON will lead to a Kconfig warning stating that something tried to set it to 'y' and then it got the value 'n'. This commit moves platform_allow/integration_platforms from common scope in to per-testcase, as well as adding cracen test target for certain regression tests Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for eb82b99 - Browse repository at this point
Copy the full SHA eb82b99View commit details -
crypto: Simplify include folder passing in legacy crypto binaries
fixup! crypto: Cleaning up PSA driver and core CMake logic -Simplify include folders for legacy usage by moving resolving of include folder for nrf_cc3xx and nrf_oberon binary libraries into drivers/legacy/CMakeLists.txt. -This commit also resolves an issue with include-folders used for Mbed TLS legacy APIs for nrf_oberon as well as resolving a linkage towards legacy APIs used in context of nrf_oberon Mbed TLS library Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6a53add - Browse repository at this point
Copy the full SHA 6a53addView commit details -
crypto: Avoid OpenThread issue with MBEDTLS_SSL_EXPORT_KEYS
-Mbed TLS has decided that MBEDLS_SSL_EXPORT_KEYS is always set but this is not reflected in nrf_security or in OpenThread (where the config is passed regardless). This commit tries to circumvent issues by adding ifndef checks before potentially doubly defining this Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for f723414 - Browse repository at this point
Copy the full SHA f723414View commit details -
samples: bluetooth: Remove CONFIG_BT_DEBUG_LOG use
CONFIG_BT_DEBUG_LOG no longer exists, a hidden symbol CONFIG_BT_LOG should be enabled instead, hence make sure the dependencies for the symbol are satisfied (CONFIG_BT && CONFIG_LOG). Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7b05ace - Browse repository at this point
Copy the full SHA 7b05aceView commit details -
applications: remove Kconfig for selecting HCI driver
Removed the BT_HCI_IPC Kconfig from the application configuration, as this option for selecting the Bluetooth HCI driver over IPC does not have a Kconfig prompt anymore. The selection of the Bluetooth HCI driver is now done using DTS. Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fa25f48 - Browse repository at this point
Copy the full SHA fa25f48View commit details -
treewide: Remove remaining CONFIG_WIFI_NRF700X use
The Wi-Fi driver now defines CONFIG_WIFI_NRF70 config. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 62d4fe9 - Browse repository at this point
Copy the full SHA 62d4fe9View commit details -
Bluetooth: Controller: Kconfig: select BT_CTLR_CRYPTO_SUPPORT for sdc
Config BT_CTLR_CRYPTO now has dependency to BT_CTLR_CRYPTO_SUPPORT. Signed-off-by: Lang Xie <lang.xie@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0791a9b - Browse repository at this point
Copy the full SHA 0791a9bView commit details -
wifi: shell: Remove usage of Kconfig MBEDTLS_GENERATE_CFG_FILE
-This configuration was always set for all usage of nrf_secrity This has now been removed. This removes reference to the Kconfig from a wifi shell scan-only sample Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6ccc4f8 - Browse repository at this point
Copy the full SHA 6ccc4f8View commit details -
applications: serial_lte_modem: fix native_tls Kconfig overlay
Remove the disabling of 2 Kconfig options that do not exist anymore, and a third one that is not needed. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3a220f6 - Browse repository at this point
Copy the full SHA 3a220f6View commit details -
tests: suit: fix "MBEDTLS_ECDSA_C defined, but not all prerequisites"
Add the missing definition of MBEDTLS_ASN1_PARSE_C to the user Mbed TLS configuration file. The whole thing could be made better by switching to using Kconfig symbols for selection of Mbed TLS features, but this would be a separate cleanup task. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bb25bcc - Browse repository at this point
Copy the full SHA bb25bccView commit details -
Bluetooth: Mesh: align rpl with subnet bridge changes
Align rpl with subnet bridge changes. Signed-off-by: alperen sener <alperen.sener@nordicsemi.no> Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 030adbd - Browse repository at this point
Copy the full SHA 030adbdView commit details -
unity: Fix cmock headers generation (syscalls)
Syscalls headers location is now prefixed with "zephyr", so need to take this into account when generating cmock headers for unity. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7d3fcff - Browse repository at this point
Copy the full SHA 7d3fcffView commit details -
snippets: add nrf70-wifi snippet
This snippet is used for nrf54h20 and nrf54l15 boards which are ressource constrained on the cpuapp core, requiring reallocation of sram, rram, and custom kconfig settings to fit the wifi driver onto the cpuapp core. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b21b2c4 - Browse repository at this point
Copy the full SHA b21b2c4View commit details -
samples: wifi: shell: Update nrf7002eb_interposer tests
The nrf7002_interposer board now is a proper shield, along with the proper shield nrf7002eb. Update the tests which use the interposer + nrf7002eb shield, and combine them into a single test suite since the test is identical for any board using this combo. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1d2985f - Browse repository at this point
Copy the full SHA 1d2985fView commit details -
crypto: Simplify psa_crypto_config/psa_crypto_library_config selection
-Make a selection of the interface vs library build by adding the interface-target psa_crypto_config_chosen and reference by INTERFACE linkage which of the two possible candidate targets is used in the current scope -Also simplify handling of MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER by protecting it behind CONFIG_BUILD_WITH_TFM Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for b1b361d - Browse repository at this point
Copy the full SHA b1b361dView commit details -
crypto: Fix SSF for psa_crypto_config selection
-Choosing psa_crypto_config for SSF client builds Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2be4a60 - Browse repository at this point
Copy the full SHA 2be4a60View commit details -
doc: nrf: adjust references to hello world sample
Sample now uses :zephyr:code-sample: Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e41a507 - Browse repository at this point
Copy the full SHA e41a507View commit details -
nrf_security: remove CFB and OFB Mbed TLS cipher modes
Remove the possibility to enable these two cipher modes in Mbed TLS. They have existed for historical reasons. Other, stronger alternatives should be used instead. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0724eb8 - Browse repository at this point
Copy the full SHA 0724eb8View commit details -
Bluetooth: tester: testing.h is moved under mesh directory
Align the bluetooth tester for testing.h directory and api changes Signed-off-by: alperen sener <alperen.sener@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7080359 - Browse repository at this point
Copy the full SHA 7080359View commit details -
bluetooth: fast_pair: crypto: enable security backend for tf-m builds
Enabled the CONFIG_NORDIC_SECURITY_BACKEND Kconfig option for TF-m builds that use the Fast Pair cryptographic backend that is available via the CONFIG_BT_FAST_PAIR_CRYPTO_OBERON Kconfig option. The change is required as previously the CONFIG_NORDIC_SECURITY_BACKEND Kconfig option was enabled for TF-m builds (CONFIG_BUILD_WITH_TFM). Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 90580b7 - Browse repository at this point
Copy the full SHA 90580b7View commit details -
crypto: Allow for more legacy-only API support
-This commit changes HAS_XXXX_CIPHERSUITE_REQUIREMENTS to be a bit more accurate with regards to eiher using legacy or PSA configurations -This commit allows for more legacy support by changing default y from PSA_CRYPTO_CLIENT to the symbol MBEDTLS_USE_PSA_CRYPTO which is a lot more friendly as it dictates "usage". Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0fa2cdf - Browse repository at this point
Copy the full SHA 0fa2cdfView commit details -
crypto: Add missing API for RSA (Mbed TLS 3.6.0 + RSA_ALT)
-This API is currently not part of the nrf_cc3xx Mbed TLS library -Adding rsa_ext.c to ${mbedcrypto_target} Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 57eb29c - Browse repository at this point
Copy the full SHA 57eb29cView commit details -
crypto: legacy psa_tls: Add enabledment of MBEDTLS_ECDSA_C/ECDH_C
-Add these configurations as they are needed to be set manually for legacy support Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8a5b364 - Browse repository at this point
Copy the full SHA 8a5b364View commit details -
crypto: Make MD support non-local build of PSA core
-This created an additional file md_ext that contains a couple of functions that are run to check if PSA crypto is initialized. In our TF-M implementation we always boot TF-M image first, so the check doesn't make sense. Nevertheless we need the symbol and choose to solve it here, rather than adjusting the md.c in Mbed TLS. -Add phony version of psa_can_do_hash and psacan_do_cipher for use wnen TF-M is enabled Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 501b9ea - Browse repository at this point
Copy the full SHA 501b9eaView commit details -
crypto: Add resolvement of HMAC when enabling DETERMINISTIC_ECDSA
-Resolves issue in building certain samples Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 8bb07bd - Browse repository at this point
Copy the full SHA 8bb07bdView commit details -
crypto: Wider mask to prevent duplicate mbdtls_eccdsa_can_do
-First it was tested against CONFIG_OBERON_BACKEND, now we test with this and PSA_CRYPTO_DRIVER_OBERON. This commit will be squashed Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 0ed809a - Browse repository at this point
Copy the full SHA 0ed809aView commit details -
kconfig: change MINIMAL_LIBC_MALLOC to COMMON_LIBC_MALLOC
MINIMAL_LIBC_MALLOC has been deprecated and removed in favor of COMMON_LIBC_MALLOC, therefore change CONFIG_MINIMAL_LIBC_MALLOC=n to CONFIG_COMMON_LIBC_MALLOC=n. Ref: zephyrproject-rtos/zephyr#56309 zephyrproject-rtos/zephyr#74322 Signed-off-by: Torsten Rasmussen <Torsten.Rasmussen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4b18472 - Browse repository at this point
Copy the full SHA 4b18472View commit details -
applications: nrf_desktop: Handle USBD_MSG_CONFIGURATION
Change introduces handling USBD_MSG_CONFIGURATION to USB state module to prevent emitting error logs. Jira: NCSDK-29326 Signed-off-by: Marek Pieta <Marek.Pieta@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3089f84 - Browse repository at this point
Copy the full SHA 3089f84View commit details -
applications: nrf_desktop: Align USB HID buffers
Change aligns USB HID buffers with requirements of USB next stack. Jira: NCSDK-29326 Signed-off-by: Marek Pieta <Marek.Pieta@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 768f12b - Browse repository at this point
Copy the full SHA 768f12bView commit details -
crypto: Standardizing on using MBEDTLS_USE_PSA_CRYPTO for Kconfig.legacy
-The control over default values is done with MBEDTLS_USE_PSA_CRYPTO instead of PSA_CRYPTO_CLIENT as this is more in line with wishes on usage Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 7c5ffa8 - Browse repository at this point
Copy the full SHA 7c5ffa8View commit details -
crypto: Add wider mask for enabling legacy Mbed TLS files
-Adding CONFIG_OBERON_BACKEND and CONFIG_CC3XX_BACKEND as a criteria for adding legacy Mbed TLS files like rsa.c etc.. Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 1711f2b - Browse repository at this point
Copy the full SHA 1711f2bView commit details -
scripts: quarantine_zephyr: Update net_buf entry
net_buf tests were moved and now have a different test signature. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bc145e2 - Browse repository at this point
Copy the full SHA bc145e2View commit details -
suit: crypto: Remove filtering of SOC_FAMILY_NORDIC_NRF
-Removed filtering of SOC_FAMILY_NORDIC_NRF for the following configurations required to run native_posix test: - PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT - PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT - PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE - PSA_WANT_ECC_TWISTED_EDWARDS_255 Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3e03ed3 - Browse repository at this point
Copy the full SHA 3e03ed3View commit details -
tests: lib: location: Align with upstream device.h changes
z_device_is_ready() was removed, and conditionally compiled device_get_dt_nodelabels has to be excluded from cmock generation. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 3ed7aa1 - Browse repository at this point
Copy the full SHA 3ed7aa1View commit details -
samples: matter: Disable unused cpuflpr from DTS.
Removed cpuflpr support and its partition since it is not used in Matter. This saves the MRAM memory for the application code. Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d403f99 - Browse repository at this point
Copy the full SHA d403f99View commit details -
applications: machine_learning: remove flpr nodes to fix missing label
Removed DTS nodes associated with the cpuflpr target as they refer to the cpuflpr_code_partition label from the cpuapp_rx_partitions node. The label has been removed in this file due to the modification of the cpuapp_rx_partitions node. The cpuflpr_vpr and cpuapp_cpuflpr_ipc DTS nodes are removed to prevent build failures. Ref: NCSDK-29186 Signed-off-by: Kamil Piszczek <Kamil.Piszczek@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 60b1835 - Browse repository at this point
Copy the full SHA 60b1835View commit details -
crypto: Add CONFIG_MBEDTLS_LEGACY_C to net/download sample
-This sample is using mbedtls_sha which was not resolved. By enabling CONFIG_MBEDTLS_LEGACY_C we allow that this for now Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6d3bbeb - Browse repository at this point
Copy the full SHA 6d3bbebView commit details -
tests: net: lib: nrf_provisioning: Define COAP_CLIENT_BLOCK_SIZE
New config for coap_client was introduced upstream so need to define it in the test. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 51752ba - Browse repository at this point
Copy the full SHA 51752baView commit details -
samples: bluetooth: Fix build warning about bt_le_adv_params
Fix the compile warnings in NCS bluetooth samples. Signed-off-by: Lang Xie <lang.xie@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ca642bf - Browse repository at this point
Copy the full SHA ca642bfView commit details -
doc: nrf: update mcumgr references
These are now local (nrf docset). Signed-off-by: Gerard Marull-Paretas <gerard.marull@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4d7209a - Browse repository at this point
Copy the full SHA 4d7209aView commit details -
crypto: Fix wrong label oberon_psa_core
-For some reason this was quoted (which is not right). Changing ${oberon_psa_core} to oberon_psa_core (which is the actual target) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 4eb530b - Browse repository at this point
Copy the full SHA 4eb530bView commit details -
samples: cellular: nrf_cloud_multi_service: Use correct config option
Config option for WPA_SUPPLICANT module has been modified. Use the updated config option instead of `WPA_SUPP`. Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for d70a9be - Browse repository at this point
Copy the full SHA d70a9beView commit details -
scripts: quarantine: quarantine nrfx_spim samples
The nrfx_spim blocking and non_blocking samples which are in hal_nordic are blocking upmerge, and can not be fixed as part of upmerge. Therefore quarantine them. They will be fixed upstream and included in next upmerge. Signed-off-by: Bjarki Arge Andreasen <bjarki.andreasen@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 10ef358 - Browse repository at this point
Copy the full SHA 10ef358View commit details -
tests: suit: temporarily disable native_posix signature check
This is done to unblock the upmerge, as psa signature verification stopped working, as well as the imported volatile key_id has changed. Will be reverted when PSA on native posix works correctly again. Signed-off-by: Artur Hadasz <artur.hadasz@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 56a6c2a - Browse repository at this point
Copy the full SHA 56a6c2aView commit details -
samples: Fix BLE adv params build warning
Fix the compile warning in samples, i.e., initialization discards 'const' qualifier from pointer target type. Signed-off-by: Lang Xie <lang.xie@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 16c5b06 - Browse repository at this point
Copy the full SHA 16c5b06View commit details -
samples: openthread: Disable unused cpuflpr
Disabled cpuflpr in the Openthread CLI sample DTS overlay file. Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 46f76e2 - Browse repository at this point
Copy the full SHA 46f76e2View commit details -
Applications: Audio: Upmerge sept 24
- Changelog pass done - Made changes to BCT and added bt_bap_unicast_server_register - BIS bitfield change Signed-off-by: Kristoffer Rist Skøien <kristoffer.skoien@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 89367da - Browse repository at this point
Copy the full SHA 89367daView commit details -
crypto: Fix aliasing issues of mbedtl_mutex_xxxx APIs
fixup! crypto: Adding threading support for PSA core -Needs to be pointer to function not functions Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ed7392a - Browse repository at this point
Copy the full SHA ed7392aView commit details -
samples: wifi: shell: Reduce static RAM usage
Static RAM usage is exceeding the `RAM` region at build time. Decrease the number of RX buffers to fix this. Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for ff0f75f - Browse repository at this point
Copy the full SHA ff0f75fView commit details -
modules: wifi: provisioning: softap: Enable WIFI_NRF70
Add sysbuild conf to override the default setting for `WIFI_NRF70`. Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 475a543 - Browse repository at this point
Copy the full SHA 475a543View commit details -
nrf_security: Use the renamed header file
The common header file is now renamed with the module prefix. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 6ee2c6c - Browse repository at this point
Copy the full SHA 6ee2c6cView commit details -
subsys: dfu: dfu_target: Add support for flatten
Adds support for devices that support flatten and not (or as well) as erase Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for e0fb752 - Browse repository at this point
Copy the full SHA e0fb752View commit details -
Revert "applications: nrf_desktop: Disable USB remote wakeup on nRF54…
…H20" This reverts commit bd0c4b2.
Configuration menu - View commit details
-
Copy full SHA for a08fdbf - Browse repository at this point
Copy the full SHA a08fdbfView commit details -
samples: net: Add sysbuild Wi-Fi config
When sysbuild Wi-Fi needs to be enabled explicitly to avoid build issues. Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for bc8d138 - Browse repository at this point
Copy the full SHA bc8d138View commit details -
crypto: Defer mutex operation in pre-kernel
fixup! crypto: Adding threading support for PSA core Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 9cffb66 - Browse repository at this point
Copy the full SHA 9cffb66View commit details -
tfm: Propagate PSA_CRYPTO_DRIVER_TFM_BUILTIN_KEY_LOADER
-Fixes issues booting TF-M Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 98bbbff - Browse repository at this point
Copy the full SHA 98bbbffView commit details -
crypto: Rename to nrf_security_mutex_t to mbedtls_threading_mutex_t
-Fixes issues on nRF54L15 devices (uses CRACEN) Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for 2425f3f - Browse repository at this point
Copy the full SHA 2425f3fView commit details -
crypto: mutex: set intialized flag
-Setting the flag was missing Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for aea8ec4 - Browse repository at this point
Copy the full SHA aea8ec4View commit details -
tf-m: Add PSA_CRYPTO_DRIVER_TFM_BUILTIN_KEY_LOADER
-Added regression trying to fix tfm_hello_Word. This commmit fixes it Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>
Configuration menu - View commit details
-
Copy full SHA for fc1d638 - Browse repository at this point
Copy the full SHA fc1d638View commit details