Do Not Review: Upmerge TF-M v2.1.0 and Mbed TLS v3.6.0 #1462
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
frkv
changed the title
frkv
force-pushed
the
upmerge-TF-M-2.1-mbedtls-3.6
branch
2 times, most recently
from
ad5af2e
to
985a7a6
Compare
frkv
changed the title
-This adds support for the 3 new mutexes that is required when building with Mbed TLS 3.6.0 with PSA crypto: - mbedtls_threading_key_slot_mutex - mbedtls_threading_psa_globaldata_mutex - mbedtls_threading_psa_rngdata_mutex -Fixed typo Note: There is a counterpart to this for devices that doesn't enable CC3XX_BACKEND (Legacy crypto features) present in nrf_security to allow thread-safe PSA core in all types of build in NCS. Signed-off-by: Frank Audun Kvamtrø <[email protected]>
-This removes setting of MBEDTLS_ECP_MAX_BITS as this would result in a build-issue when trying to resolve the largest enabled curve size. This needs to be followed up with a cleanup of MBEDTLS_ECP_LIGHT which is still dependent on BIGNUM and BUILTIN types to be enabled Signed-off-by: Frank Audun Kvamtrø <[email protected]>
This is now upstreamed to Zephyr, but FW binaries are still hosted here as Zephyr does not allow blobs. Signed-off-by: Chaitanya Tata <[email protected]>
Fix the indentation to fix the doc build error. Signed-off-by: Chaitanya Tata <[email protected]>
Part of the nrf_dm library is placed in the init_array section by the linker. Zephyr requires STATIC_INIT_GNU to be enabled for proper initialization of the init_array section, and therefore the setting must be enabled for NRF_DM. Signed-off-by: Torsten Rasmussen <[email protected]>
-Don't reuse RNG mutex for the PSA rng mutex type Signed-off-by: Frank Audun Kvamtrø <[email protected]>
frkv
force-pushed
the
upmerge-TF-M-2.1-mbedtls-3.6
branch
from
985a7a6
to
7acb5ae
Compare
frkv
requested review from
udaynordic,
rajb9,
srkanordic,
krish2718,
sachinthegreen,
rado17,
rlubos,
Tschet1,
eriksandgren and
a team
as code owners
github-actions
bot
added
the
doc-required
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This adds improved threading support for CryptoCell enabled devices
The change is necessary due to Mbed TLS v3.6.0 adding support for thread safety for the PSA core.
Note: This is not synchronized with the current expected checkout in sdk-nrf