Extend the shared BFLB HCI driver with BL61x (BL616/BL618) support:
BL61x include paths and RF init routing through bflb_rf_init().
Kconfig adds BT_BFLB_BL61X with four controller variant choices, a
configurable PHY/RF retention memory size, and a 64 KB exchange memory
option for the BR/EDR variant.
Signed-off-by: William Markezana <william.markezana@gmail.com>
It has been deprecated and broken for some time.
CONFIG_MBEDTLS_CUSTOM is its replacement.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
393350fd65 made it so that the `mbedTLS`
library is only created when `CONFIG_MBEDTLS_BUILTIN`.
Before this commit, users of Mbed TLS did the following:
`zephyr_library_link_libraries_ifdef(CONFIG_MBEDTLS mbedTLS)`
If the `mbedTLS` CMake library doesn't exist but is still linked to
(as is the case when `CONFIG_MBEDTLS && !CONFIG_MBEDTLS_BUILTIN`),
the linker command is populated with `-lmbedTLS` which makes the build
fail because there is no `libmbedTLS.a` in the build.
Make it so that users of Mbed TLS only link to the `mbedTLS` CMake
library when the builtin version is used.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
This PR implements support for DNS Private Resource Records (RR)
as defined in RFC 6895, enabling an OpenThread Border Router application
to query and handle DNS records in the private use range
(type codes 65280-65534) on behalf of a Thread node.
Also, fixed an issue where `net_buf_unref` could have been called
with a null pointer argument.
Signed-off-by: Cristian Bulacu <cristian.bulacu@nxp.com>
Add new inline function entropy_get_default_device which returns
the "zephyr,entropy" device or the architectural entropy device,
if the former is not set, and use that in all places to query the
entropy device.
This allows using architectural drivers which do not have a DT
node.
Signed-off-by: Christoph Busold <cbusold@qti.qualcomm.com>
Add total heap size and free bytes to the 'mbedtls heap' shell command
output. Also move the entire shell registration inside the
MBEDTLS_MEMORY_DEBUG guard so the 'mbedtls' command is only registered
when the memory debug APIs are available.
Signed-off-by: Rithic Chellaram Hariharan <gr8rithic@gmail.com>
Add a help text to their Kconfig options to warn about that.
In addition, make CONFIG_PSA_WANT_ALG_MD5 select NOT_SECURE but not
CONFIG_PSA_WANT_ALG_SHA_1 because for instance HMAC-SHA1 is still
considered secure, which means SHA-1 usage might not necessarily
be insecure.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Fix the path to TF-PSA-Crypto now that we moved it outside of the Mbed
TLS repo.
Also replace the "Do not edit it manually" note from the Kconfig file
in order to start making manual additions to it.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Make `CONFIG_MBEDTLS_PSA_CRYPTO_C` look for and enable an entropy driver
only when the Mbed TLS PSA Crypto core is used. Others don't necessarily
require entropy unconditionally, it can be an optional feature.
Additionally, make the RNG source default to
`CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG` also when some other PSA
Crypto core is used. This allows avoiding code bloat by default
to avoid falling back to `CONFIG_MBEDTLS_PSA_CRYPTO_LEGACY_RNG`
which would enable more features. It may seem a bit silly to have
`CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG` enabled even if we don't have
actual entropy but some places assume that if it's not defined then
the legacy path is used.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
Add IEEE 802.15.4 radio driver configuration option to set the CSMA CA
backoff attempts from IEEE 802.15.4-2003+ MAC PIB attributes.
Signed-off-by: David Boullie <David.Boullie@silabs.com>
These were only used in 'samples/tfm_integration/tfm_regression_test' and
when that application is built they are both assumed to be enabled, so
it's not really meaningful to have these Kconfigs generally available.
Extra parameters that need to be passed to the TF-M's CMake build are now
added from
'samples/tfm_integration/tfm_regression_test/CMakeLists.txt'.
In this way regression testing is self contained in that folder and it
doesn't pollute the main TF-M build.
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
In order to properly build non-regression tests for the TF-M secure side
we need to pass 2 additional parameters:
- tf-m-tests build folder
- secure test configuration file
Previously these values were added from
'samples/tfm_integration/tfm_regression_tests' sample.
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
To have a way to tell whether PS rollback protection is enabled and
also possibly to turn it off.
The Kconfig option is put in a new Kconfig file dedicated to the
Protected Storage, just as we have for the Crypto modules.
`if BUILD_WITH_TFM` is moved to the main Kconfig file so that we don't
have it in every subfile.
`Kconfig.tfm.crypto_modules` is renamed to `Kconfig.tfm.crypto` for
consistency with the partition name.
A CMake macro is introduced to more easily pass boolean Kconfig options
to TF-M and is applied to relevant places.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
as the ethernet api already includes
struct net_if as a argument for its
functions also add it to struct wifi_mgmt_ops.
Signed-off-by: Fin Maaß <f.maass@vogl-electronic.com>
Pass local hal_infineon asset paths to the TF-M build instead
of relying on CMake FetchContent to download them from GitHub.
Fixes: https://github.com/zephyrproject-rtos/zephyr/issues/107215
Signed-off-by: Sreeram Tatapudi <sreeram.praveen@infineon.com>
Introduce CONFIG_NXP_COMPRESSED_WIFI_NB_FW to allow selecting
compressed Wi-Fi or Narrowband firmware images.
Using compressed firmware reduces flash usage at the cost of
additional decompression time during initialization.
Signed-off-by: Maochen Wang <maochen.wang@nxp.com>
Replace CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN with the new
CONFIG_MBEDTLS_SSL_IN_CONTENT_LEN and CONFIG_MBEDTLS_SSL_OUT_CONTENT_LEN
options across all in-tree .conf files, hostap Kconfig defaults, and
socket subsystem help text.
This completes the deprecation of MBEDTLS_SSL_MAX_CONTENT_LEN in favor
of independent incoming/outgoing buffer size control.
Signed-off-by: Rithic Chellaram Hariharan <gr8rithic@gmail.com>
Include psa/crypto.h in zephyr_init.c when CONFIG_MBEDTLS_PSA_CRYPTO_CLIENT
is enabled to ensure PSA types are available during initialization.
Signed-off-by: Rithic Chellaram Hariharan <gr8rithic@gmail.com>
Move the SHELL_STATIC_SUBCMD_SET_CREATE and SHELL_CMD_REGISTER calls
inside the MBEDTLS_MEMORY_DEBUG guard to avoid registering an empty
shell command set when memory debugging is disabled.
Signed-off-by: Rithic Chellaram Hariharan <gr8rithic@gmail.com>
Add MBEDTLS_SSL_ENCRYPT_THEN_MAC as a dedicated Kconfig option inside
if MBEDTLS_SSL_PROTO_TLS1_2, with default y. Wire it into
config-mbedtls.h replacing the unconditional TLS1_2 && PSA_CRYPTO_C
guard.
Add MBEDTLS_SSL_IN_CONTENT_LEN and MBEDTLS_SSL_OUT_CONTENT_LEN Kconfig
options to allow independent control of incoming and outgoing TLS buffer
sizes. Both default to 1500, with fallback to MBEDTLS_SSL_MAX_CONTENT_LEN
if set. This enables constrained devices to use asymmetric buffer sizes
to save heap.
Deprecate MBEDTLS_SSL_MAX_CONTENT_LEN in Kconfig.deprecated in favor of
the independent IN/OUT buffer size controls.
Signed-off-by: Rithic Chellaram Hariharan <gr8rithic@gmail.com>
Add MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE and MBEDTLS_SSL_EARLY_DATA
as Kconfig options so they can be individually controlled rather than
being unconditionally enabled. Place EARLY_DATA after SESSION_TICKETS
with a depends on, and COMPATIBILITY_MODE after EARLY_DATA with
default y. Wire both into config-mbedtls.h: un-nest
MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE from the TLS1_3 proto guard,
and consolidate MBEDTLS_SSL_EARLY_DATA to a single standalone block.
Signed-off-by: Rithic Chellaram Hariharan <gr8rithic@gmail.com>
add driver support for TI MSPM0 AES module
Introduced a hardware accelerated AES driver for the TI MSPM0
enable support for encryption and decryption using ECB and CBC mode
of operation.
Signed-off-by: Girinandha Manivelpandiyan <girinandha@linumiz.com>
CONFIG_SOC_SIWX91X_PM_BACKEND_PMGR adds an unnecessary layer,
as everything can be handled by the CONFIG_PM symbol.
Removing it reduces complexity in the siwx91x SoC files.
Signed-off-by: Martin Hoff <martin.hoff@silabs.com>
Add driver for the NXP RTC analog module found on MCX L series
SoCs. This RTC supports BCD time/date mode with hundredths-of-second
resolution and 3 independent alarms.
Signed-off-by: Yves Wang <zhengjia.wang@nxp.com>
Add driver support for TI MSPM0 ADC module.
Add a configurable reference voltage support with vref.
Add this driver in shell.
Signed-off-by: Jackson Farley <j-farley@ti.com>
Signed-off-by: Alexpandi Muniyandi <alexpandi@linumiz.com>
Move PSE84 platform sources from mtb-template-cat1 to
mtb-template-pse8xxgp in a dedicated CMakefile.
Signed-off-by: Sreeram Tatapudi <sreeram.praveen@infineon.com>
Remove in-tree support for the optional CANopenNode module. This will be
provided as an external module instead, as there are no bindings from
Zephyr towards this module.
Signed-off-by: Henrik Brix Andersen <hebad@vestas.com>
TI MSPM0 VREF module is used by analog peripherals for reference voltage
Add support for TI MSPM0 VREF module.
Signed-off-by: Girinandha Manivelpandiyan <girinandha@linumiz.com>
Add the gdma driver component (driver.gdma) to the MCUX SDK build
system when CONFIG_DMA_NXP_GDMA is enabled.
Signed-off-by: Qiang Zhang <qiang.zhang_6@nxp.com>
Add support for the SPI module on TI’s MSPM0 MCUs.
The driver supports master mode transfers with configurable
frame size (4–16 bits), clock polarity/phase, bit order.
Signed-off-by: Santhosh Charles <santhosh@linumiz.com>
Signed-off-by: Jackson Farley <j-farley@ti.com>
Co-authored-by: Hans Binderup <habi@bang-olufsen.dk>
Add CMake integration to link the precompiled BLE controller library
(variant-specific), RF driver, and ROM patch library from the
hal_bouffalolab blobs directory. The variant is selected via Kconfig
(CONFIG_BFLB_BL70XL_BLE_*).
Signed-off-by: William Markezana <william.markezana@gmail.com>
Update CMakeLists to include all files needed for SRF support
on cm33ns. These are split between mtb-srf, mtb-dsl-pse8xxgp
and zephyr-ifx-cycfg.
Signed-off-by: Laura Carlesso <laura.carlesso@infineon.com>
- update module CMakeLists.txt compile definesfor non secure
- add infineon_kconfig.h file for definitions needed by non securesoc
Signed-off-by: Laura Carlesso <laura.carlesso@infineon.com>
Move files which are specific to nrf54h20 global domain from nrf54h
folder to common. Rename those files to use sd2ppi name instead of
nrf54h. SD2PPI (or SD^2PPI) is an abbrevation for Secure Distributed
(multi-Domain) DPPI - PPI system where DPPI resources requires
Ironside service.
Signed-off-by: Krzysztof Chruściński <krzysztof.chruscinski@nordicsemi.no>
Enabling such options by default is not great, and with Mbed TLS 4
it's now part of the APIs that should not be used anymore, so remove
its default enabling.
Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
1. Remove the NRF_PLATFORM_HALTIUM and NRF_PLATFORM_LUMOS Kconfig
symbols and eliminate all "haltium"/"lumos" naming from the zephyr
directory.
2. The shared haltium_power.c/h and haltium_pm_s2ram.c/h files from
soc/nordic/common/ are duplicated into the per-SoC-series directories
(nrf54h/ and nrf92/) as soc_power.c/h and soc_pm_s2ram.c/h. The
corresponding build rules are moved from common/CMakeLists.txt to the
per-series CMakeLists.txt files.
3. Kconfig guards that relied on the platform symbols are replaced with
individual hardware feature checks derived from nrfx/MDK:
- select NRFX_POWER if !NRF_PLATFORM_HALTIUM -> if HAS_HW_NRF_POWER
- CLOCK_CONTROL default ... !NRF_PLATFORM_HALTIUM -> HAS_HW_NRF_CLOCK
- depends on NRF_PLATFORM_LUMOS -> SOC_SERIES_NRF54L||SOC_SERIES_NRF71
4. C preprocessor guards using CONFIG_NRF_PLATFORM_HALTIUM are replaced
with explicit SoC series checks (CONFIG_SOC_SERIES_NRF54H ||
CONFIG_SOC_SERIES_NRF92).
5. The sysbuild option NRF_HALTIUM_GENERATE_UICR is renamed to
NRF_GENERATE_UICR.
Signed-off-by: Jakub Zymelka <jakub.zymelka@nordicsemi.no>
Increase heap requirement of hostap. This fixes
memory allocation errors seen with certificates'
processing.
Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
In wps pin support, WIFI_WPS_PIN_GET case only
retrieves the PIN but never starts WPS negotiation.
Signed-off-by: Kapil Bhatt <kapil.bhatt@nordicsemi.no>
