boards: modules: tfm: reduce secure RAM for minimal profile

Shrink TF-M stack sizes, IO vector buffer, and shared-data region
when `TFM_PROFILE_TYPE_MINIMAL` is selected. This makes it possible to
reduce the TF-M SRAM partition for minimal profile from 16 to 8 KiB.

The minimal profile only runs a small fixed set of services (RNG,
hash crypto, platform reset, SPM logging), so the larger defaults
waste RAM.

Signed-off-by: Simen S. Røstad <simen.rostad@nordicsemi.no>

Author: simensrostad

modules/trusted-firmware-m/Kconfig

@@ -52,6 +52,7 @@ config TFM_PLATFORM_SERVICE_OUTPUT_BUFFER_SIZE
 
 config TFM_PLATFORM_SP_STACK_SIZE
 	hex "Stack size"
+	default 0x400 if TFM_PROFILE_TYPE_MINIMAL
 	default 0x500
 
 config TFM_PLATFORM_NV_COUNTER_MODULE_DISABLED
@@ -114,7 +115,7 @@ config TFM_CRYPTO_CONC_OPER_NUM
 config TFM_CRYPTO_IOVEC_BUFFER_SIZE
 	int
 	prompt "TF-M Crypto - PSA FF IO vector buffer size" if !TFM_PROFILE_TYPE_MINIMAL
-	default 1024 if TFM_PROFILE_TYPE_MINIMAL
+	default 512 if TFM_PROFILE_TYPE_MINIMAL
 	default 8192 if TFM_PARTITION_PROTECTED_STORAGE && TFM_PS_MAX_ASSET_SIZE > 2048
 	default 5120
 	help
@@ -127,7 +128,7 @@ config TFM_CRYPTO_IOVEC_BUFFER_SIZE
 config TFM_CRYPTO_PARTITION_STACK_SIZE
 	hex
 	prompt "TF-M Crypto Partition - Stack size" if !TFM_PROFILE_TYPE_MINIMAL
-	default 0x800 if TFM_PROFILE_TYPE_MINIMAL
+	default 0x600 if TFM_PROFILE_TYPE_MINIMAL
 	default 0x4000 if PSA_WANT_RSA_KEY_SIZE_4096 || PSA_WANT_RSA_KEY_SIZE_3072
 	default 0x2000
 	help

modules/trusted-firmware-m/tfm_boards/partition/region_defs.h

@@ -13,8 +13,13 @@
 #define S_HEAP_SIZE (0x00001000)
 #endif
 
+#ifdef CONFIG_TFM_PROFILE_TYPE_MINIMAL
+#define S_MSP_STACK_SIZE (0x00000500)
+#define S_PSP_STACK_SIZE (0x00000400)
+#else
 #define S_MSP_STACK_SIZE (0x00000800)
 #define S_PSP_STACK_SIZE (0x00000800)
+#endif
 
 #define NS_HEAP_SIZE  (0x00001000)
 #define NS_STACK_SIZE (0x000001E0)
@@ -171,7 +176,11 @@
 #else
 #define BOOT_TFM_SHARED_DATA_BASE  TFM_DT_REG_ADDR(TFM_DT_NODELABEL(sram0_s))
 #endif
+#ifdef CONFIG_TFM_PROFILE_TYPE_MINIMAL
+#define BOOT_TFM_SHARED_DATA_SIZE  (0x100)
+#else
 #define BOOT_TFM_SHARED_DATA_SIZE  (0x400)
+#endif
 #define BOOT_TFM_SHARED_DATA_LIMIT (BOOT_TFM_SHARED_DATA_BASE + BOOT_TFM_SHARED_DATA_SIZE - 1)
 
 /* Regions used by psa-arch-tests to keep state */

west.yml

@@ -159,7 +159,7 @@ manifest:
     - name: matter
       repo-path: sdk-connectedhomeip
       path: modules/lib/matter
-      revision: 106cf3d26c6b3354fc2006aa71684a9905d1af64
+      revision: pull/717/head
       west-commands: scripts/west/west-commands.yml
       submodules:
         - name: nlio