From c9614a4dd4e09d5196476ba97827769664c1d8da Mon Sep 17 00:00:00 2001 From: Nordic Builder Date: Mon, 14 Jul 2025 07:27:52 +0000 Subject: [PATCH 1/4] manifest: Update sdk-zephyr revision (auto-manifest PR) Automatically created by Github Action Signed-off-by: Nordic Builder --- west.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/west.yml b/west.yml index 1f4553317b7..d92b49784b2 100644 --- a/west.yml +++ b/west.yml @@ -65,7 +65,7 @@ manifest: # https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/zephyr/guides/modules.html - name: zephyr repo-path: sdk-zephyr - revision: 237ef2e9225a5130047a24f368650c279b676f0b + revision: pull/3045/head import: # In addition to the zephyr repository itself, NCS also # imports the contents of zephyr/west.yml at the above From d34e1fd7cdae4940a1951540de1cc6c4f86b14b3 Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Mon, 14 Jul 2025 13:13:30 +0530 Subject: [PATCH 2/4] nrf_security: Increase default maximum size of MPI Max MPI size is set to 256 by default. This needs to be increased to 384 to handle RSA-3072 signature. Signed-off-by: Ravi Dondaputi --- subsys/nrf_security/Kconfig.legacy | 1 + 1 file changed, 1 insertion(+) diff --git a/subsys/nrf_security/Kconfig.legacy b/subsys/nrf_security/Kconfig.legacy index f1ffe4ec092..c271c779321 100644 --- a/subsys/nrf_security/Kconfig.legacy +++ b/subsys/nrf_security/Kconfig.legacy @@ -288,6 +288,7 @@ config MBEDTLS_MPI_MAX_SIZE prompt "Maximum number of bytes for usable MPIs." if !(CC312_BACKEND || CC310_BACKEND) default 256 if CC310_BACKEND default 384 if CC312_BACKEND + default 384 # Needed to support RSA 3072 range 256 2048 config MBEDTLS_LEGACY_CRYPTO_C_SILENCE_DEPRECATION From e2dfe607ad75fa7cd0a26490fe2d603cf19f507b Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Wed, 16 Jul 2025 16:21:18 +0530 Subject: [PATCH 3/4] modules: tf-m: Increase protected partition size Increase size of Protected Storage partition to accommodate the certificates required for W-Fi enterprise security. Signed-off-by: Ravi Dondaputi --- modules/trusted-firmware-m/Kconfig.tfm.pm | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/trusted-firmware-m/Kconfig.tfm.pm b/modules/trusted-firmware-m/Kconfig.tfm.pm index 58f4b3b115f..fcb544499f2 100644 --- a/modules/trusted-firmware-m/Kconfig.tfm.pm +++ b/modules/trusted-firmware-m/Kconfig.tfm.pm @@ -49,6 +49,7 @@ config PM_PARTITION_SIZE_TFM config PM_PARTITION_SIZE_TFM_PROTECTED_STORAGE hex "Memory reserved for TFM Protected Storage" + default 0x5000 if TFM_PARTITION_PROTECTED_STORAGE && WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE default 0x4000 if TFM_PARTITION_PROTECTED_STORAGE default 0 help From aa70867a9ff8136f27df1769bd8e7bab9d3a8b1e Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Wed, 16 Jul 2025 16:55:37 +0530 Subject: [PATCH 4/4] samples: wifi: shell: Make space in RAM for TFM build For build with TFM and support for protected storage enabled, additional RAM needs to be freed to accommodate the additional features. Signed-off-by: Ravi Dondaputi --- samples/wifi/shell/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/samples/wifi/shell/Kconfig b/samples/wifi/shell/Kconfig index 5b4ea8a6a4b..f9cc3a8e333 100644 --- a/samples/wifi/shell/Kconfig +++ b/samples/wifi/shell/Kconfig @@ -20,6 +20,7 @@ if NET_BUF_VARIABLE_DATA_SIZE # so smaller pool sizes are recommended for these targets. config NET_PKT_BUF_TX_DATA_POOL_SIZE default 40000 if SOC_SERIES_NRF54HX + default 35000 if !SOC_SERIES_NRF52X && !SOC_SERIES_NRF54LX && BUILD_WITH_TFM default 50000 if !SOC_SERIES_NRF52X && !SOC_SERIES_NRF54LX config NET_PKT_BUF_RX_DATA_POOL_SIZE