-crypto_types.h: Added definition of mbedtls_svc_key_id_t needed
 for NS build TLS/DTLS APIs

-crypto_values.h: Added lots of functions for mbedtls_svc_key_id_t
 needed for NS build TLS/DTLS APIs

Add missing function for TLS/DTLS usage in crypto_extra.h. This needs
to go upstream, but most likely containing more functions.

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 8390b3c)

Adjust CRYPTO_HW_ACCELERATOR build scripts to also support
nrf_security.

Signed-off-by: Sebastian Bøe <[email protected]>
(cherry picked from commit 39282af)

In some configurations there is no need for the non-volatile
counters. Allow users to opt-out of this feature to reduce the
memory footprint of TF-M.

This will also enable some minimal builds of TF-M to not reserve any
extra memory regions used for storing data persistently.

Signed-off-by: Håkon Øye Amundsen <[email protected]>
Signed-off-by: Sebastian Bøe <[email protected]>
(cherry picked from commit c9e5121)

-Adds non static key labels for the key derivation
-Client id + UID is used as the label
-The ps_table still has a static label

Ref: NCSDK-9006

Signed-off-by: Georgios Vasilakis <[email protected]>
(cherry picked from commit 8da5e43)

Fix missing header include needed in order to compile in the
tfm_platform_gpio_pin_mcu_select implementation based on whether
GPIO_PIN_CNF_MCUSEL_Msk is defined or not.

Upstream PR:
https://review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/13586

Change-Id: Ia7875f6906b6d32c6eede3f728ee6d3bca5d3589
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit cc4cfd1)

When OTP functions are not called, skip building some static ones to fix
warnings about "defined but not used".

Change-Id: I1f7b5c61c742f448a39e2bfabe54ab986eacc64f
Signed-off-by: David Hu <[email protected]>
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit b599a2e)

…d service

Add lairdconnectivity platform services for GPIO and read as core
platform services.
The services are added in a way that makes it possible for out-of-tree
boards to include these core services while still being able to add
their own.

Change-Id: If3163c4810f6578ccf76e80f5a8f3b97a95dc591
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit f1cf48f)

Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit 5d32c3e)
(cherry picked from commit 6fa4f64)

Simplify dependencies and use consistent style for mbedTLS
related targets both in BL2 and TF-M Crypto.

Signed-off-by: Antonio de Angelis <[email protected]>
Change-Id: I45b53a3ec18f34670560f20c2151a8c5e8d6f7c6
(cherry picked from commit 126122f)
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit 3448048)

…ing gpiote IRQ

Fix compilation error for gpiote IRO support in nordic platform.

Change-Id: I4247779f7390a5c0b8c480598760660d442a4a14
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit 096821c)

Change-Id: I532304533248f32fb6c2032031d0074a756fafe7
Signed-off-by: Kevin Peng <[email protected]>
(cherry picked from commit 0cffae2)
Signed-off-by: Joakim Andersson <[email protected]>

…ing serial IRQ

Fix compilation error for serial IRO support in nordic nrf9160 platform.

Change-Id: I796e5c9f0d3715f20a85b926dd976f56e776a141
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit c9fc16e)

…ng to name change

Update serial IRQ naming to match the IRQ naming change introduced in
the nordic MDK.
Since the startup files wasn't updated to declare the interrupt vectors
with the old name the name change redifinion in
nrf5340_application_name_change caused the interrupt handler to not be
defined.

Change-Id: Iab2ada4381164efb9b29a51dd6e7852e564e91c8
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit ec18ea2)

… SPIM3 IRQ handler

Fix accidental delete of the default SPIM3 IRQ handler.
Regression from: ec18ea2

Change-Id: I222cc5c7b7f641417282e4e7a6fe211bc7153d08
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit 4f6a729)

... platform

(cherry picked from commit 24c3dd0)

Since stm/b_u585i_iot02a platform needs 16 bytes align value. Align
value is now configurable up to 32 bytes and default value is fixed
to previous hardcoded settings(1 bytes). Move mcuboot for the support
of alignment larger than 8 bytes.

Change-Id: Id3cce340e10fafe74f17e0aad129bb83dbbe6e8f
Signed-off-by: Michel Jaouen <[email protected]>
(cherry picked from commit bfbd780)
Signed-off-by: Dominik Ermel <[email protected]>

Link the platform_s library against the mbedcrypto library.
The link against mbedtls for crypto_keys is incorrect since crypto_key
relies on mbedtls/hkdf.h header, which is part of the mbedcrypto library
exported by mbedtls project.
Reduce the conditional to crypto partition enabled since there are many
other cases where the mbedcrypto library is a dependency, such as
crypto_nv_seed and the accelerators.
The link is needed in order to propagate interface include and compile
options to the platform_s source files.

Upstream PR:
https://review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/13587

Change-Id: Ice918034997ae3fad7e17c3bcdc87abda43bb858
Signed-off-by: Joakim Andersson <[email protected]>
(cherry picked from commit c478ce0)

As described in the Product Specification the FPU is not
affected by any security configuration and the Present
field in the PERM SPU register is not enabled.

Upstream PR:
https://review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/13999

Change-Id: I76517363d548c9a5f4b3461aee2fdce801996842

Signed-off-by: Georgios Vasilakis <[email protected]>

…Y_TO_RAM

Add missing NRF_SKIP_FICR_NS_COPY_TO_RAM to BL2 build and nrf9160
platform.

Upstream PR:
https://review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/13994

Change-Id: Ib99dbc36b45bc4659cb8eebc8b9143b10fe32da4
Signed-off-by: Joakim Andersson <[email protected]>

This patch adds support in the TF-M Crypto service
frontend for AEAD multipart APIs.

Signed-off-by: Antonio de Angelis <[email protected]>
Change-Id: I81b55bc6ae1b0e1c1c015c90577518328a3286fa

This PR clean up PSA abort scenarios in TF-M secure services to ensure
the following:
-Proper abort handling of certain invalid input
-Propagating invalid handles after unsuccessful calls
-Establishing similar behavior with non TF-M usages of the same API

The changes involve some refactoring of internal and exposed APIs on
pointers to const, as well as simplifying the logic of error

ref: NCSDK-14420

Signed-off-by: Frank Audun Kvamtrø <[email protected]>

-Adds encryption support for ITS files
-Encryption is optional and is enabled using a
 CMake variable
-The encryption implementation is platform dependent,
 the signatures of the functions are provided in this change

Ref: NCSDK-14747

Signed-off-by: Georgios Vasilakis <[email protected]>