To enable Nordic Security Module with the PSA driver support, set the
CONFIG_NRF_SECURITY Kconfig option along with additional configuration options, as described in Driver configurations and supported features.
The PSA driver support requires using PSA Crypto APIs.
To enable the legacy crypto support mode of Nordic Security Module, set the :kconfig:CONFIG_NORDIC_SECURITY_BACKEND` Kconfig option along with additional configuration options, as described in Legacy configurations and supported features.
The legacy crypto support allows backwards compatibility for software that requires usage of Mbed TLS crypto toolbox functions prefixed with mbedtls_.
The Nordic Security Module (nrf_security) Kconfig options are used to generate an Mbed TLS configuration file.
CONFIG_BUILD_WITH_TFM is enabled together with
CONFIG_NRF_SECURITY, the TF-M secure image will enable the use of the hardware acceleration of Arm CryptoCell.
In this case, the Kconfig configurations in the Nordic Security Module control the features enabled in TF-M.