eb1ed1205f
Use dynamic allocation for key material for better compatibility as a fully static key store is a new feature that not all PSA Crypto implementations support. Explicitly enable CONFIG_MBEDTLS_ENABLE_HEAP to ensure that Mbed TLS uses heap for the PSA keys' data (instead of failing at runtime). This will turn off CONFIG_MBEDTLS_PSA_STATIC_KEY_SLOTS, making the implementation default to dynamic key slots. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
19 lines
484 B
Plaintext
19 lines
484 B
Plaintext
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
CONFIG_MBEDTLS=y
|
|
CONFIG_MBEDTLS_PSA_CRYPTO_C=y
|
|
CONFIG_MBEDTLS_ENABLE_HEAP=y
|
|
CONFIG_MBEDTLS_HEAP_SIZE=1024
|
|
|
|
# The default stack size (1024) is not enough for the PSA Crypto core.
|
|
# On top of that, the ITS implementation uses the stack for buffers.
|
|
CONFIG_MAIN_STACK_SIZE=3072
|
|
|
|
CONFIG_SECURE_STORAGE=y
|
|
CONFIG_SECURE_STORAGE_ITS_STORE_IMPLEMENTATION_SETTINGS=y
|
|
CONFIG_SETTINGS=y
|
|
CONFIG_SETTINGS_NVS=y
|
|
CONFIG_NVS=y
|
|
CONFIG_FLASH=y
|
|
CONFIG_FLASH_MAP=y
|