Skip to content

doc: crypto: updates to supported features page #22893

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

doc: crypto: updates to supported features page #22893

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 13 additions & 13 deletions doc/nrf/security/crypto/crypto_supported_features.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ Cryptographic feature support
The following sections list the supported cryptographic features and algorithms for each of the drivers: :ref:`nrf_cc3xx <crypto_drivers_cc3xx>`, :ref:`CRACEN <crypto_drivers_cracen>`, and :ref:`nrf_oberon <crypto_drivers_oberon>`.
The listed Kconfig options enable the features and algorithms for the drivers that support them.

The Kconfig options follow the ``CONFIG_PSA_WANT_`` + ``CONFIG_PSA_USE_`` configuration scheme, which is described in detail on the :ref:`crypto_drivers` page.

Key types and key management
============================

Expand Down Expand Up @@ -306,12 +308,12 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
* - TLS 1.2 PRF
- :kconfig:option:`CONFIG_PSA_WANT_ALG_TLS12_PRF`
- Not supported
- Not supported
- Supported
- Supported
* - TLS 1.2 PSK to MS
- :kconfig:option:`CONFIG_PSA_WANT_ALG_TLS12_PSK_TO_MS`
- Not supported
- Not supported
- Supported
- Supported
* - TLS 1.2 EC J-PAKE to PMS
- :kconfig:option:`CONFIG_PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS`
Expand Down Expand Up @@ -651,7 +653,7 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
* - Curve448 (X448)
- :kconfig:option:`CONFIG_PSA_WANT_ECC_MONTGOMERY_448`
- Not supported
- Supported
- Not supported
- Not supported
* - Edwards25519 (Ed25519)
- :kconfig:option:`CONFIG_PSA_WANT_ECC_TWISTED_EDWARDS_255`
Expand Down Expand Up @@ -799,10 +801,8 @@ The following table shows the Kconfig options for configuring Oberon PSA Crypto
RNG algorithms
==============

Enable RNG using the :kconfig:option:`CONFIG_PSA_WANT_GENERATE_RANDOM` Kconfig option.

RNG uses PRNG seeded by entropy (also known as TRNG).
The following table shows the Kconfig options for requesting Oberon PSA Crypto to use specific PRNG algorithms, as well as their support for each driver:
The following table shows the Kconfig options for enabling RNG and requesting Oberon PSA Crypto to use specific PRNG algorithms, as well as their support for each driver:

.. list-table:: PRNG algorithm configuration options and support per driver
:header-rows: 1
Expand All @@ -813,6 +813,11 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
- :ref:`nrf_cc3xx <crypto_drivers_cc3xx>`
- :ref:`CRACEN <crypto_drivers_cracen>`
- :ref:`nrf_oberon <crypto_drivers_oberon>`
* - RNG support
- :kconfig:option:`CONFIG_PSA_WANT_GENERATE_RANDOM`
- Supported
- Supported
- Supported
* - CTR-DRBG
- :kconfig:option:`CONFIG_PSA_WANT_ALG_CTR_DRBG`
- Supported
Expand Down Expand Up @@ -1047,14 +1052,12 @@ The following table shows the Kconfig options for configuring Oberon PSA Crypto
Key size configurations
=======================

All AES and RSA key size configurations are introduced by the :ref:`nrf_security` library and are not described by the PSA Crypto specification.
The following sections list the supported AES and RSA key size Kconfig options.
The Kconfig options follow the ``CONFIG_PSA_WANT_`` configuration scheme, which is described in detail on the :ref:`crypto_drivers` page.

AES key size configuration
--------------------------

.. note::
All AES key size configurations are introduced by the :ref:`nrf_security` library and are not described by the PSA Crypto specification.

The following table shows the Kconfig options for requesting Oberon PSA Crypto to use specific AES key sizes, as well as their support for each driver:

.. list-table:: AES key size configuration options and support per driver
Expand Down Expand Up @@ -1085,9 +1088,6 @@ The following table shows the Kconfig options for requesting Oberon PSA Crypto t
RSA key size configuration
--------------------------

.. note::
All RSA key size configurations are introduced by the :ref:`nrf_security` library and are not described by the PSA Crypto specification.

The following table shows the Kconfig options for requesting Oberon PSA Crypto to use specific RSA key sizes, as well as their support for each driver:

.. list-table:: RSA key size configuration options and support per driver
Expand Down
Loading