Skip to content

cherry-picks of MBEDTLS_PSA_CRYPTO_C-related fixes#4031

Merged
rlubos merged 4 commits into
nrfconnect:mainfrom
tomi-font:fromlist_mbedtls_psa_crypto_c_custom_rng
May 5, 2026
Merged

cherry-picks of MBEDTLS_PSA_CRYPTO_C-related fixes#4031
rlubos merged 4 commits into
nrfconnect:mainfrom
tomi-font:fromlist_mbedtls_psa_crypto_c_custom_rng

Conversation

@tomi-font
Copy link
Copy Markdown
Contributor

@tomi-font tomi-font commented Apr 30, 2026

The noup is actually a fromtree of upstream commit 21e55f26e244e7d95fd0a918090e01f1fcd69fc4 (PR # 108256) but the cherry-pick conflicts too badly. It is reverted and cherry-picked properly from upstream in the Mbed TLS update PR: #4039

manifest-pr-skip

@tomi-font tomi-font force-pushed the fromlist_mbedtls_psa_crypto_c_custom_rng branch from bc259f6 to ab57421 Compare April 30, 2026 10:13
@tomi-font tomi-font changed the title [nrf fromlist] modules: mbedtls: do not always enable entropy on MBEDTLS_PSA_CRYPTO_C [nrf noup] modules: mbedtls: do not always enable entropy on MBEDTLS_PSA_CRYPTO_C Apr 30, 2026
NordicBuilder added a commit to NordicBuilder/sdk-nrf that referenced this pull request Apr 30, 2026
Automatically created by action-manifest-pr GH action from PR:
nrfconnect/sdk-zephyr#4031

Signed-off-by: Nordic Builder <pylon@nordicsemi.no>
@tomi-font tomi-font requested review from a team and MarekPieta May 4, 2026 06:47
tomi-font added 4 commits May 5, 2026 10:22
…PSA_CRYPTO_C

This is actually a fromtree of upstream PR # 108256
(commit 21e55f2)
but the cherry-pick conflicts too badly.

This will be reverted and cherry-picked properly from upstream in the
Mbed TLS update PR.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
The standard way to enable PSA Crypto is to enable CONFIG_PSA_CRYPTO
and not CONFIG_MBEDTLS_PSA_CRYPTO_C directly.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>

Upstream PR #: 108469
It should not depend on CONFIG_MBEDTLS nor CONFIG_MBEDTLS_PSA_CRYPTO_C
as a PSA Crypto provider other than Mbed TLS may be enabled.
In fact, it doesn't even need to depend on CONFIG_PSA_CRYPTO
because CONFIG_PSA_WANT_ALG_SHA_1 is already guarded behind
CONFIG_PSA_CRYPTO_CLIENT.

At the same time, replace all the `depends on UUID` by a single if
which is the standard way to do. Also turn CONFIG_UUID into a menuconfig
instead of creating a menu manually.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>

Upstream PR #: 108469
…ILTIN

Otherwise the CMake library may not exist and the linker command would
wrongfully get populated with `-lmbedTLS`.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>

Upstream PR #: 108469
@tomi-font tomi-font force-pushed the fromlist_mbedtls_psa_crypto_c_custom_rng branch from ab57421 to 70926d1 Compare May 5, 2026 07:23
@tomi-font tomi-font changed the title [nrf noup] modules: mbedtls: do not always enable entropy on MBEDTLS_PSA_CRYPTO_C MBEDTLS_PSA_CRYPTO_C-related fixes cherry-picks May 5, 2026
@tomi-font tomi-font added this to the ncs-3.4.0 milestone May 5, 2026
@tomi-font tomi-font changed the title MBEDTLS_PSA_CRYPTO_C-related fixes cherry-picks MBEDTLS_PSA_CRYPTO_C fixes cherry-picks May 5, 2026
@tomi-font tomi-font changed the title MBEDTLS_PSA_CRYPTO_C fixes cherry-picks cherry-picks of MBEDTLS_PSA_CRYPTO_C-related fixes May 5, 2026
@rlubos rlubos merged commit 2b3d253 into nrfconnect:main May 5, 2026
29 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants