openthread: Regenerate OT libraries

Regenerated OpenThread libraries to align to the new MBEDTls
version.

Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
(cherry picked from commit c6c1d07)

Author: ArekBalysNordic

openthread/include/openthread/message.h

@@ -88,6 +88,7 @@ typedef struct otMessageSettings
 {
     bool    mLinkSecurityEnabled; ///< TRUE if the message should be secured at Layer 2.
     uint8_t mPriority;            ///< Priority level (MUST be a `OT_MESSAGE_PRIORITY_*` from `otMessagePriority`).
+    bool    mTxTimestampEnabled;  ///< TRUE if the message should be populated with TX Timestamp.
 } otMessageSettings;
 
 /**
@@ -111,6 +112,15 @@ typedef struct otThreadLinkInfo
     uint8_t mRadioType; ///< Radio link type.
 } otThreadLinkInfo;
 
+/**
+ * Gets the `otInstance` associated with a given message.
+ *
+ * @param[in] aMessage  A message.
+ *
+ * @returns The `otInstance` associated with @p aMessage.
+ */
+otInstance *otMessageGetInstance(const otMessage *aMessage);
+
 /**
  * Free an allocated message buffer.
  *
@@ -306,6 +316,44 @@ int8_t otMessageGetRss(const otMessage *aMessage);
  */
 otError otMessageGetThreadLinkInfo(const otMessage *aMessage, otThreadLinkInfo *aLinkInfo);
 
+/**
+ * Represents the callback function pointer to notify the transmission outcome (success or failure) of a message.
+ *
+ * The error indicates the transmission status of the IPv6 message from this device to an immediate neighbor (one-hop
+ * transmission). It doesn't indicate that the message is received by its final intended destination (multi-hop away).
+ *
+ * For a unicast IPv6 message, an `OT_ERROR_NONE` error indicates that the message (all its corresponding fragment
+ * frames if the message is larger and requires fragmentation) was successfully delivered to the immediate neighbor,
+ * and a MAC layer acknowledgment was received for all fragments. This is reported regardless of whether the message
+ * is sent using direct TX or indirect TX (to a sleepy child using CSL or data poll triggered TX).
+ *
+ * For a multicast message, an `OT_ERROR_NONE` status indicates that the message (all its fragment frames) was
+ * successfully broadcast. Note that no MAC-level acknowledgment is required for broadcast frame TX.
+ *
+ * The OpenThread stack may alter the content of the message as it is prepared for transmission (e.g., IPv6 headers
+ * may be prepended, or additional metadata appended at the end). So, the content of @p aMessage when this callback
+ * is invoked may differ from its original content (e.g., when it was given as input in `otIp6Send()` for transmission).
+ *
+ * @param[in] aMessage   A pointer to the message.
+ * @param[in] aError     The TX error when sending the message.
+ * @param[in] aContext   A pointer to the user-provided context when the callback was registered.
+ */
+typedef void (*otMessageTxCallback)(const otMessage *aMessage, otError aError, void *aContext);
+
+/**
+ * Registers a callback to be notified of a message's transmission outcome.
+ *
+ * Calling this function again for the same message will replace any previously registered callback.
+ *
+ * If the message is never actually sent (e.g., it's not passed to `otIp6Send()` or other send APIs), the callback
+ * will still be invoked when the message is freed. In this case, `OT_ERROR_DROP` will be passed as the error.
+ *
+ * @param[in] aMessage   The message to register the callback with.
+ * @param[in] aCallback  The TX callback.
+ * @param[in] aContext   A pointer to a user-provided arbitrary context for the callback.
+ */
+void otMessageRegisterTxCallback(otMessage *aMessage, otMessageTxCallback aCallback, void *aContext);
+
 /**
  * Append bytes to a message.
  *

openthread/include/openthread/platform/radio.h

@@ -361,6 +361,7 @@ typedef struct otRadioFrame
             bool mCsmaCaEnabled : 1;       ///< Set to true to enable CSMA-CA for this packet, false otherwise.
             bool mCslPresent : 1;          ///< Set to true if CSL header IE is present.
             bool mIsSecurityProcessed : 1; ///< True if SubMac should skip the AES processing of this frame.
+            bool mTxTimestampEnabled : 1;  ///< Set to true to enable TX Timestamp Encoding for this packet, false otherwise.
         } mTxInfo;
 
         /**

openthread/lib/nrf52840/hard-float/v1.4/ftd/libopenthread-cli-ftd.a

@@ -1,13 +1,13 @@
 ###################### Compiler Version ######################
 
-GCC_version: arm-zephyr-eabi-gcc (Zephyr SDK 0.17.0) 12.2.0
+GCC_version: arm-zephyr-eabi-gcc (Zephyr SDK 1.0.1) 14.3.0
 
 ###################### SDK Version ###########################
 
-MBEDTLS_commit=mbedtls-2.26.0-17255-g44ce293d1
-NRFXLIB_commit=v2.9.0-nRF54H20-1-66-g4c6c4cee7
-OpenThread_commit=ncs-thread-reference-20250402-0-g0e2666713
-NRFXLIB_RELEASE_TAG=v3.0.0
+MBEDTLS_commit=ncs-v3.4.0-rc1-0-g92d4456620
+NRFXLIB_commit=v3.4.0-rc1-0-g45ab53a5b
+OpenThread_commit=ncs-thread-reference-20250402-18-g0fe68ff23
+NRFXLIB_RELEASE_TAG=v3.4.0
 
 ###################### OpenThread configuration ##############
 
@@ -38,7 +38,6 @@ CONFIG_OPENTHREAD_FTD=y
 CONFIG_OPENTHREAD_IP6_FRAGM=y
 CONFIG_OPENTHREAD_IP6_MAX_EXT_MCAST_ADDRS=2
 CONFIG_OPENTHREAD_IP6_MAX_EXT_UCAST_ADDRS=4
-CONFIG_OPENTHREAD_L2_LOG_LEVEL=0
 CONFIG_OPENTHREAD_LINK_METRICS_SUBJECT=y
 CONFIG_OPENTHREAD_LOG_LEVEL=0
 CONFIG_OPENTHREAD_MAC_SOFTWARE_ACK_TIMEOUT_ENABLE=y
@@ -59,9 +58,12 @@ CONFIG_OPENTHREAD_NETDIAG_CLIENT=y
 CONFIG_OPENTHREAD_NETDIAG_VENDOR_INFO=y
 CONFIG_OPENTHREAD_NETWORKKEY=
 CONFIG_OPENTHREAD_NETWORK_NAME=ot_zephyr
+CONFIG_OPENTHREAD_NET_DIAG_VENDOR_MODEL=Zephyr-OpenThread
+CONFIG_OPENTHREAD_NET_DIAG_VENDOR_NAME=Zephyr
+CONFIG_OPENTHREAD_NET_DIAG_VENDOR_SW_VERSION=Zephyr-OT-v1.0
 CONFIG_OPENTHREAD_NORDIC_LIBRARY_COMMON=y
 CONFIG_OPENTHREAD_NORDIC_LIBRARY_FTD=y
-CONFIG_OPENTHREAD_NRFXLIB_RELEASE_TAG=v3.0.0
+CONFIG_OPENTHREAD_NRFXLIB_RELEASE_TAG=v3.4.0
 CONFIG_OPENTHREAD_NRF_SECURITY_PSA=y
 CONFIG_OPENTHREAD_NRF_SECURITY_PSA_CHOICE=y
 CONFIG_OPENTHREAD_NUM_MESSAGE_BUFFERS=96
@@ -74,20 +76,26 @@ CONFIG_OPENTHREAD_PLATFORM_INFO=ZEPHYR
 CONFIG_OPENTHREAD_PLATFORM_KEYS_EXPORTABLE_ENABLE=y
 CONFIG_OPENTHREAD_PLATFORM_KEY_REF=y
 CONFIG_OPENTHREAD_PLATFORM_LOG_LEVEL=0
+CONFIG_OPENTHREAD_PLATFORM_PKT_TXTIME=y
 CONFIG_OPENTHREAD_POWER_SUPPLY=EXTERNAL
 CONFIG_OPENTHREAD_POWER_SUPPLY_EXTERNAL=y
 CONFIG_OPENTHREAD_PSA_ITS_NVM_MAX_KEYS=20
 CONFIG_OPENTHREAD_PSA_ITS_NVM_OFFSET=0x20000
 CONFIG_OPENTHREAD_PSA_NVM_BACKEND_ITS=y
 CONFIG_OPENTHREAD_RADIO_LINK_IEEE_802_15_4_ENABLE=y
+CONFIG_OPENTHREAD_RADIO_WORKQUEUE_PRIORITY=7
 CONFIG_OPENTHREAD_RADIO_WORKQUEUE_STACK_SIZE=1024
+CONFIG_OPENTHREAD_RCP_RESTORATION_MAX_COUNT=2
 CONFIG_OPENTHREAD_REPORT=y
 CONFIG_OPENTHREAD_REPORT_BUILD_ARTEFACT_NAME=ot_report.txt
 CONFIG_OPENTHREAD_SHELL=y
 CONFIG_OPENTHREAD_SLAAC=y
 CONFIG_OPENTHREAD_SOURCES=y
+CONFIG_OPENTHREAD_SRP=y
 CONFIG_OPENTHREAD_SRP_CLIENT=y
 CONFIG_OPENTHREAD_STORE_FRAME_COUNTER_AHEAD=100000
+CONFIG_OPENTHREAD_SYS_INIT=y
+CONFIG_OPENTHREAD_SYS_INIT_PRIORITY=90
 CONFIG_OPENTHREAD_THREAD_PRIORITY=8
 CONFIG_OPENTHREAD_THREAD_STACK_SIZE=3168
 CONFIG_OPENTHREAD_THREAD_VERSION=1.4
@@ -236,22 +244,61 @@ OT_WAKEUP_END_DEVICE=OFF
 ###################### Crypto configuration ##################
 
 CONFIG_MBEDTLS_ASN1_PARSE_C=y
-CONFIG_MBEDTLS_ASN1_WRITE_C=y
 CONFIG_MBEDTLS_BASE64_C=y
+CONFIG_MBEDTLS_BUILTIN=y
+CONFIG_MBEDTLS_CIPHER=y
+CONFIG_MBEDTLS_CONFIG_FILE=nrf-config.h
 CONFIG_MBEDTLS_ENABLE_HEAP=y
 CONFIG_MBEDTLS_ENTROPY_C=y
+CONFIG_MBEDTLS_HAS_CCM_CIPHERSUITE_REQUIREMENTS=y
+CONFIG_MBEDTLS_HAS_CHACHAPOLY_CIPHERSUITE_REQUIREMENTS=y
+CONFIG_MBEDTLS_HAS_CIPHER_MODE_CIPHERSUITE_REQUIREMENTS=y
+CONFIG_MBEDTLS_HAS_ECDH_CIPHERSUITE_REQUIREMENTS=y
+CONFIG_MBEDTLS_HAS_ECDSA_CIPHERSUITE_REQUIREMENTS=y
+CONFIG_MBEDTLS_INIT=y
+CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED=y
+CONFIG_MBEDTLS_MD_C=y
 CONFIG_MBEDTLS_MEMORY_BUFFER_ALLOC_C=y
 CONFIG_MBEDTLS_MEMORY_C=y
 CONFIG_MBEDTLS_MPI_MAX_SIZE=256
 CONFIG_MBEDTLS_MPI_WINDOW_SIZE=6
+CONFIG_MBEDTLS_OPENTHREAD_OPTIMIZATIONS_ENABLED=y
+CONFIG_MBEDTLS_PK_C=y
+CONFIG_MBEDTLS_PK_PARSE_C=y
+CONFIG_MBEDTLS_PK_PARSE_EC_EXTENDED=y
 CONFIG_MBEDTLS_PLATFORM_C=y
 CONFIG_MBEDTLS_PLATFORM_MEMORY=y
+CONFIG_MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT=y
+CONFIG_MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS=y
 CONFIG_MBEDTLS_PSA_CRYPTO_C=y
 CONFIG_MBEDTLS_PSA_CRYPTO_CLIENT=y
-CONFIG_TF_PSA_CRYPTO_CONFIG_FILE=nrf-psa-crypto-config.h
 CONFIG_MBEDTLS_PSA_CRYPTO_DRIVERS=y
+CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG=y
 CONFIG_MBEDTLS_PSA_CRYPTO_STORAGE_C=y
-CONFIG_TF_PSA_CRYPTO_USER_CONFIG_FILE=nrf-psa-crypto-user-config.h
+CONFIG_MBEDTLS_PSA_DRIVER_GET_ENTROPY=y
+CONFIG_MBEDTLS_PSK_MAX_LEN=32
+CONFIG_MBEDTLS_SHA256_SMALLER=y
+CONFIG_MBEDTLS_SOME_AEAD_CIPHER_ENABLED=y
+CONFIG_MBEDTLS_SOME_CIPHER_ENABLED=y
+CONFIG_MBEDTLS_SSL_ALL_ALERT_MESSAGES=y
+CONFIG_MBEDTLS_SSL_ENCRYPT_THEN_MAC=y
+CONFIG_MBEDTLS_SSL_EXPORT_KEYS=y
+CONFIG_MBEDTLS_SSL_EXTENDED_MASTER_SECRET=y
+CONFIG_MBEDTLS_SSL_IN_CONTENT_LEN=900
+CONFIG_MBEDTLS_SSL_KEEP_PEER_CERTIFICATE=y
+CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=0
+CONFIG_MBEDTLS_SSL_OUT_CONTENT_LEN=900
+CONFIG_MBEDTLS_SSL_PROTO_TLS1_2=y
+CONFIG_MBEDTLS_TLS_LIBRARY=y
+CONFIG_MBEDTLS_VERSION_4_x=y
+CONFIG_MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE=y
+CONFIG_MBEDTLS_X509_CHECK_KEY_USAGE=y
+CONFIG_MBEDTLS_X509_CRL_PARSE_C=y
+CONFIG_MBEDTLS_X509_CRT_PARSE_C=y
+CONFIG_MBEDTLS_X509_CSR_PARSE_C=y
+CONFIG_MBEDTLS_X509_LIBRARY=y
+CONFIG_MBEDTLS_X509_REMOVE_INFO=y
+CONFIG_MBEDTLS_X509_USE_C=y
 CONFIG_PSA_WANT_AES_KEY_SIZE_128=y
 CONFIG_PSA_WANT_AES_KEY_SIZE_192=y
 CONFIG_PSA_WANT_AES_KEY_SIZE_256=y
@@ -268,9 +315,12 @@ CONFIG_PSA_WANT_ALG_HMAC=y
 CONFIG_PSA_WANT_ALG_PBKDF2_AES_CMAC_PRF_128=y
 CONFIG_PSA_WANT_ALG_SHA_224=y
 CONFIG_PSA_WANT_ALG_SHA_256=y
+CONFIG_PSA_WANT_ALG_TLS12_PRF=y
+CONFIG_PSA_WANT_ALG_TLS12_PSK_TO_MS=y
 CONFIG_PSA_WANT_ECC_SECP_R1_256=y
 CONFIG_PSA_WANT_GENERATE_RANDOM=y
 CONFIG_PSA_WANT_KEY_TYPE_AES=y
+CONFIG_PSA_WANT_KEY_TYPE_CHACHA20=y
 CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC=y
 CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE=y
 CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT=y

openthread/lib/nrf52840/hard-float/v1.4/ftd/libopenthread-ftd.a

@@ -1,13 +1,13 @@
 ###################### Compiler Version ######################
 
-GCC_version: arm-zephyr-eabi-gcc (Zephyr SDK 0.17.0) 12.2.0
+GCC_version: arm-zephyr-eabi-gcc (Zephyr SDK 1.0.1) 14.3.0
 
 ###################### SDK Version ###########################
 
-MBEDTLS_commit=mbedtls-2.26.0-17255-g44ce293d1
-NRFXLIB_commit=v2.9.0-nRF54H20-1-66-g4c6c4cee7
-OpenThread_commit=ncs-thread-reference-20250402-0-g0e2666713
-NRFXLIB_RELEASE_TAG=v3.0.0
+MBEDTLS_commit=ncs-v3.4.0-rc1-0-g92d4456620
+NRFXLIB_commit=v3.4.0-rc1-0-g45ab53a5b
+OpenThread_commit=ncs-thread-reference-20250402-18-g0fe68ff23
+NRFXLIB_RELEASE_TAG=v3.4.0
 
 ###################### OpenThread configuration ##############
 
@@ -18,10 +18,12 @@ CONFIG_OPENTHREAD_CHANNEL=11
 CONFIG_OPENTHREAD_CHILD_SUPERVISION_CHECK_TIMEOUT=190
 CONFIG_OPENTHREAD_CHILD_SUPERVISION_INTERVAL=129
 CONFIG_OPENTHREAD_CLI_MAX_LINE_LENGTH=384
+CONFIG_OPENTHREAD_CLI_TCP_ENABLE=y
 CONFIG_OPENTHREAD_CLI_VENDOR_EXTENSION=
 CONFIG_OPENTHREAD_COAP=y
 CONFIG_OPENTHREAD_COAPS=y
 CONFIG_OPENTHREAD_COMMISSIONER=y
+CONFIG_OPENTHREAD_COMMISSIONER_JOINER=y
 CONFIG_OPENTHREAD_CONFIG_PLATFORM_INFO=Zephyr
 CONFIG_OPENTHREAD_CRYPTO_PSA=y
 CONFIG_OPENTHREAD_CSL_AUTO_SYNC=y
@@ -49,7 +51,6 @@ CONFIG_OPENTHREAD_IP6_MAX_EXT_MCAST_ADDRS=2
 CONFIG_OPENTHREAD_IP6_MAX_EXT_UCAST_ADDRS=4
 CONFIG_OPENTHREAD_JAM_DETECTION=y
 CONFIG_OPENTHREAD_JOINER=y
-CONFIG_OPENTHREAD_L2_LOG_LEVEL=0
 CONFIG_OPENTHREAD_LINK_METRICS_INITIATOR=y
 CONFIG_OPENTHREAD_LINK_METRICS_SUBJECT=y
 CONFIG_OPENTHREAD_LOG_LEVEL=0
@@ -72,37 +73,48 @@ CONFIG_OPENTHREAD_NETDIAG_CLIENT=y
 CONFIG_OPENTHREAD_NETDIAG_VENDOR_INFO=y
 CONFIG_OPENTHREAD_NETWORKKEY=
 CONFIG_OPENTHREAD_NETWORK_NAME=ot_zephyr
+CONFIG_OPENTHREAD_NET_DIAG_VENDOR_MODEL=Zephyr-OpenThread
+CONFIG_OPENTHREAD_NET_DIAG_VENDOR_NAME=Zephyr
+CONFIG_OPENTHREAD_NET_DIAG_VENDOR_SW_VERSION=Zephyr-OT-v1.0
 CONFIG_OPENTHREAD_NORDIC_LIBRARY_COMMON=y
 CONFIG_OPENTHREAD_NORDIC_LIBRARY_MASTER=y
-CONFIG_OPENTHREAD_NRFXLIB_RELEASE_TAG=v3.0.0
+CONFIG_OPENTHREAD_NRFXLIB_RELEASE_TAG=v3.4.0
 CONFIG_OPENTHREAD_NRF_SECURITY_PSA=y
 CONFIG_OPENTHREAD_NRF_SECURITY_PSA_CHOICE=y
 CONFIG_OPENTHREAD_NUM_MESSAGE_BUFFERS=96
 CONFIG_OPENTHREAD_OPERATIONAL_DATASET_AUTO_INIT=y
 CONFIG_OPENTHREAD_PANID=43981
 CONFIG_OPENTHREAD_PING_SENDER=y
 CONFIG_OPENTHREAD_PKT_LIST_SIZE=10
+CONFIG_OPENTHREAD_PLATFORM_CARRIER_FUNCTIONS=y
 CONFIG_OPENTHREAD_PLATFORM_CSL_UNCERT=12
 CONFIG_OPENTHREAD_PLATFORM_INFO=ZEPHYR
 CONFIG_OPENTHREAD_PLATFORM_KEYS_EXPORTABLE_ENABLE=y
 CONFIG_OPENTHREAD_PLATFORM_KEY_REF=y
 CONFIG_OPENTHREAD_PLATFORM_LOG_LEVEL=0
+CONFIG_OPENTHREAD_PLATFORM_PKT_TXTIME=y
+CONFIG_OPENTHREAD_PLATFORM_USEC_TIMER=y
 CONFIG_OPENTHREAD_POWER_SUPPLY=EXTERNAL
 CONFIG_OPENTHREAD_POWER_SUPPLY_EXTERNAL=y
 CONFIG_OPENTHREAD_PSA_ITS_NVM_MAX_KEYS=20
 CONFIG_OPENTHREAD_PSA_ITS_NVM_OFFSET=0x20000
 CONFIG_OPENTHREAD_PSA_NVM_BACKEND_ITS=y
 CONFIG_OPENTHREAD_RADIO_LINK_IEEE_802_15_4_ENABLE=y
+CONFIG_OPENTHREAD_RADIO_WORKQUEUE_PRIORITY=7
 CONFIG_OPENTHREAD_RADIO_WORKQUEUE_STACK_SIZE=1024
 CONFIG_OPENTHREAD_RAW=y
+CONFIG_OPENTHREAD_RCP_RESTORATION_MAX_COUNT=2
 CONFIG_OPENTHREAD_REPORT=y
 CONFIG_OPENTHREAD_REPORT_BUILD_ARTEFACT_NAME=ot_report.txt
 CONFIG_OPENTHREAD_SHELL=y
 CONFIG_OPENTHREAD_SLAAC=y
 CONFIG_OPENTHREAD_SNTP_CLIENT=y
 CONFIG_OPENTHREAD_SOURCES=y
+CONFIG_OPENTHREAD_SRP=y
 CONFIG_OPENTHREAD_SRP_CLIENT=y
 CONFIG_OPENTHREAD_STORE_FRAME_COUNTER_AHEAD=100000
+CONFIG_OPENTHREAD_SYS_INIT=y
+CONFIG_OPENTHREAD_SYS_INIT_PRIORITY=90
 CONFIG_OPENTHREAD_TCP_ENABLE=y
 CONFIG_OPENTHREAD_THREAD_PRIORITY=8
 CONFIG_OPENTHREAD_THREAD_STACK_SIZE=6240
@@ -253,8 +265,10 @@ OT_WAKEUP_END_DEVICE=OFF
 ###################### Crypto configuration ##################
 
 CONFIG_MBEDTLS_ASN1_PARSE_C=y
-CONFIG_MBEDTLS_ASN1_WRITE_C=y
 CONFIG_MBEDTLS_BASE64_C=y
+CONFIG_MBEDTLS_BUILTIN=y
+CONFIG_MBEDTLS_CIPHER=y
+CONFIG_MBEDTLS_CONFIG_FILE=nrf-config.h
 CONFIG_MBEDTLS_ENABLE_HEAP=y
 CONFIG_MBEDTLS_ENTROPY_C=y
 CONFIG_MBEDTLS_HAS_CCM_CIPHERSUITE_REQUIREMENTS=y
@@ -263,6 +277,7 @@ CONFIG_MBEDTLS_HAS_CIPHER_MODE_CIPHERSUITE_REQUIREMENTS=y
 CONFIG_MBEDTLS_HAS_ECDH_CIPHERSUITE_REQUIREMENTS=y
 CONFIG_MBEDTLS_HAS_ECDSA_CIPHERSUITE_REQUIREMENTS=y
 CONFIG_MBEDTLS_HAS_ECJPAKE_CIPHERSUITE_REQUIREMENTS=y
+CONFIG_MBEDTLS_INIT=y
 CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED=y
 CONFIG_MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED=y
 CONFIG_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED=y
@@ -271,23 +286,27 @@ CONFIG_MBEDTLS_MEMORY_BUFFER_ALLOC_C=y
 CONFIG_MBEDTLS_MEMORY_C=y
 CONFIG_MBEDTLS_MPI_MAX_SIZE=256
 CONFIG_MBEDTLS_MPI_WINDOW_SIZE=6
+CONFIG_MBEDTLS_OPENTHREAD_OPTIMIZATIONS_ENABLED=y
 CONFIG_MBEDTLS_PEM_PARSE_C=y
 CONFIG_MBEDTLS_PK_C=y
 CONFIG_MBEDTLS_PK_PARSE_C=y
 CONFIG_MBEDTLS_PK_PARSE_EC_EXTENDED=y
 CONFIG_MBEDTLS_PLATFORM_C=y
 CONFIG_MBEDTLS_PLATFORM_MEMORY=y
+CONFIG_MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT=y
+CONFIG_MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS=y
 CONFIG_MBEDTLS_PSA_CRYPTO_C=y
 CONFIG_MBEDTLS_PSA_CRYPTO_CLIENT=y
-CONFIG_TF_PSA_CRYPTO_CONFIG_FILE=nrf-psa-crypto-config.h
 CONFIG_MBEDTLS_PSA_CRYPTO_DRIVERS=y
+CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG=y
 CONFIG_MBEDTLS_PSA_CRYPTO_STORAGE_C=y
-CONFIG_TF_PSA_CRYPTO_USER_CONFIG_FILE=nrf-psa-crypto-user-config.h
-
+CONFIG_MBEDTLS_PSA_DRIVER_GET_ENTROPY=y
+CONFIG_MBEDTLS_PSK_MAX_LEN=32
+CONFIG_MBEDTLS_SHA256_SMALLER=y
+CONFIG_MBEDTLS_SOME_AEAD_CIPHER_ENABLED=y
+CONFIG_MBEDTLS_SOME_CIPHER_ENABLED=y
 CONFIG_MBEDTLS_SSL_ALL_ALERT_MESSAGES=y
-CONFIG_MBEDTLS_SSL_CLI_ALLOW_WEAK_CERTIFICATE_VERIFICATION_WITHOUT_HOSTNAME=y
 CONFIG_MBEDTLS_SSL_CLI_C=y
-CONFIG_MBEDTLS_SSL_CONTEXT_SERIALIZATION=y
 CONFIG_MBEDTLS_SSL_COOKIE_C=y
 CONFIG_MBEDTLS_SSL_DTLS_ANTI_REPLAY=y
 CONFIG_MBEDTLS_SSL_DTLS_HELLO_VERIFY=y
@@ -296,13 +315,15 @@ CONFIG_MBEDTLS_SSL_EXPORT_KEYS=y
 CONFIG_MBEDTLS_SSL_EXTENDED_MASTER_SECRET=y
 CONFIG_MBEDTLS_SSL_IN_CONTENT_LEN=900
 CONFIG_MBEDTLS_SSL_KEEP_PEER_CERTIFICATE=y
+CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=0
 CONFIG_MBEDTLS_SSL_MAX_FRAGMENT_LENGTH=y
 CONFIG_MBEDTLS_SSL_OUT_CONTENT_LEN=900
 CONFIG_MBEDTLS_SSL_PROTO_DTLS=y
 CONFIG_MBEDTLS_SSL_PROTO_TLS1_2=y
 CONFIG_MBEDTLS_SSL_SRV_C=y
 CONFIG_MBEDTLS_SSL_TLS_C=y
 CONFIG_MBEDTLS_TLS_LIBRARY=y
+CONFIG_MBEDTLS_VERSION_4_x=y
 CONFIG_MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE=y
 CONFIG_MBEDTLS_X509_CHECK_KEY_USAGE=y
 CONFIG_MBEDTLS_X509_CRL_PARSE_C=y
@@ -334,6 +355,7 @@ CONFIG_PSA_WANT_ALG_TLS12_PSK_TO_MS=y
 CONFIG_PSA_WANT_ECC_SECP_R1_256=y
 CONFIG_PSA_WANT_GENERATE_RANDOM=y
 CONFIG_PSA_WANT_KEY_TYPE_AES=y
+CONFIG_PSA_WANT_KEY_TYPE_CHACHA20=y
 CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC=y
 CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_DERIVE=y
 CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT=y