Kconfig

# Copyright (c) 2020 Nordic Semiconductor
#
# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
#

# The purpose of this file is to override and extend settings related to
# building Thread from sources. It extends the zephyrs openthread Kconfig file.
# Separate Kconfig exists in nrfxlib repository responsible solely for managing
# OpenThread precompiled libraries.

if OPENTHREAD

menu "OpenThread"

choice OPENTHREAD_SECURITY_CONFIG

config OPENTHREAD_NRF_SECURITY_PSA_CHOICE
	bool "nRF Security with PSA crypto enabled"
	select OPENTHREAD_NRF_SECURITY_PSA

endchoice

config OPENTHREAD_NRF_SECURITY_PSA
	bool
	select MBEDTLS
	select MBEDTLS_ENABLE_HEAP if (!OPENTHREAD_COPROCESSOR_RCP && !BUILD_WITH_TFM && !PSA_SSF_CRYPTO_CLIENT)
	select MBEDTLS_TLS_LIBRARY if (OPENTHREAD_JOINER || OPENTHREAD_COMMISSIONER || OPENTHREAD_COAPS || OPENTHREAD_BLE_TCAT || OPENTHREAD_SHELL)
	select MBEDTLS_PEM_PARSE_C if (OPENTHREAD_COAPS || OPENTHREAD_BLE_TCAT)
	select PSA_CRYPTO
	select PSA_WANT_ALG_HKDF
	select PSA_WANT_ALG_CCM
	select PSA_WANT_ALG_CMAC
	select PSA_WANT_ALG_HMAC
	select PSA_WANT_ALG_ECB_NO_PADDING
	select PSA_WANT_ALG_SHA_224
	select PSA_WANT_ALG_SHA_256
	select PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128
	select PSA_WANT_ALG_GCM if OPENTHREAD_BLE_TCAT
	select PSA_WANT_ALG_JPAKE  if (OPENTHREAD_JOINER || OPENTHREAD_COMMISSIONER || OPENTHREAD_BLE_TCAT)
	select PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS  if (OPENTHREAD_JOINER || OPENTHREAD_COMMISSIONER || OPENTHREAD_BLE_TCAT)
	select PSA_WANT_ALG_DETERMINISTIC_ECDSA if OPENTHREAD_ECDSA
	select PSA_WANT_ALG_ECDSA if OPENTHREAD_ECDSA
	select PSA_WANT_ALG_ECDH if OPENTHREAD_ECDSA
	select PSA_WANT_ECC_SECP_R1_256
	select PSA_WANT_GENERATE_RANDOM
	select PSA_WANT_KEY_TYPE_AES
	select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE
	select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT
	select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT
	select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE
	imply OPENTHREAD_CRYPTO_PSA
	help
	  Enables nrf_security module for use by OpenThread with PSA Crypto enabled.
	  This allows OpenThread to make use of hardware accelerated cryptography
	  functions if available as well as fast oberon backend for software encryption.

config OPENTHREAD_NRF_SECURITY_PSA
	depends on !BUILD_WITH_TFM && !OPENTHREAD_COPROCESSOR_RCP
	imply SECURE_STORAGE if !PSA_SSF_CRYPTO_CLIENT
	imply SETTINGS
	imply HW_UNIQUE_KEY_WRITE_ON_CRYPTO_INIT if TRUSTED_STORAGE && \
						(SOC_NRF5340_CPUAPP || SOC_SERIES_NRF54L)

if OPENTHREAD_NRF_SECURITY_PSA && TRUSTED_STORAGE && !SOC_NRF5340_CPUAPP && !SOC_SERIES_NRF54L
# Set hash of UID as AEAD Key implementation for device that do not have hardware secure storage.

choice TRUSTED_STORAGE_BACKEND_AEAD_KEY
	default TRUSTED_STORAGE_BACKEND_AEAD_KEY_HASH_UID
endchoice # TRUSTED_STORAGE_BACKEND_AEAD_KEY

endif

config OPENTHREAD_MBEDTLS_LIB_NAME
	default "mbedtls_external" if OPENTHREAD_NRF_SECURITY_PSA

config OPENTHREAD_MBEDTLS_DEBUG
	bool "MbedTLS logs for OpenThread"
	select MBEDTLS
	select MBEDTLS_DEBUG
	select MBEDTLS_DEBUG_C

config OPENTHREAD_THREAD_STACK_SIZE
	int "OpenThread thread stack size"
	default 2048 if OPENTHREAD_COPROCESSOR_RCP
	default 7168 if (OPENTHREAD_COMMISSIONER || OPENTHREAD_JOINER) && PSA_CRYPTO_DRIVER_CRACEN
	default 6240 if (OPENTHREAD_COMMISSIONER || OPENTHREAD_JOINER)
	default 6144 if PSA_CRYPTO_DRIVER_CRACEN
	default 3168

config OPENTHREAD_RADIO_WORKQUEUE_STACK_SIZE
	int "OpenThread radio transmit workqueue stack size"
	default 512 if OPENTHREAD_COPROCESSOR_RCP
	default 1084 if SOC_NRF5340_CPUAPP
	default 1024

if OPENTHREAD_COPROCESSOR_RCP

config OPENTHREAD_COPROCESSOR_UART_RING_BUFFER_SIZE
	int "Set Co-Processor UART ring buffer size"
	default 2048
	help
	  TX buffer size for the OpenThread Co-Processor UART.

endif # OPENTHREAD_COPROCESSOR_RCP

endmenu # "OpenThread"

endif # OPENTHREAD

rsource "rpc/Kconfig"
rsource "report/Kconfig"
rsource "otperf/Kconfig"