CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG

External RNG

Type: bool

Help

Convenience layer for handling entropy before it is fully supported in
PSA Crypto APIs and drivers. This is set by default for legacy and PSA
modes.

Direct dependencies

NET_L2_OPENTHREAD || (MBEDTLS_PSA_CRYPTO_C && NRF_SECURITY) || (NRF_SECURITY_RNG && MBEDTLS_LEGACY_CRYPTO_C && NRF_SECURITY)

(Includes any dependencies from ifs and menus.)

Defaults

Kconfig definitions

At <nRF>/subsys/net/openthread/Kconfig.defconfig:121

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:2 → <nRF>/Kconfig.nrf:7

Menu path: (Top) → Modules → nrf (/home/runner/work/sdk-nrf/sdk-nrf/ncs/nrf)

config MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
    bool
    default n
    depends on NET_L2_OPENTHREAD

At <nrfxlib>/nrf_security/Kconfig.psa:22

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:92 → <nrfxlib>/Kconfig.nrfxlib:13 → <nrfxlib>/nrf_security/Kconfig:108

Menu path: (Top) → Modules → nrfxlib (/home/runner/work/sdk-nrf/sdk-nrf/ncs/nrfxlib) → Nordic nrfxlib → nrf_security module → Enable PSA crypto APIs

config MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
    bool
    default y if CRYPTOCELL_USABLE
    depends on MBEDTLS_PSA_CRYPTO_C && NRF_SECURITY

At <nrfxlib>/nrf_security/Kconfig.legacy:349

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:92 → <nrfxlib>/Kconfig.nrfxlib:13 → <nrfxlib>/nrf_security/Kconfig:111

Menu path: (Top) → Modules → nrfxlib (/home/runner/work/sdk-nrf/sdk-nrf/ncs/nrfxlib) → Nordic nrfxlib → nrf_security module → Legacy mbed TLS crypto APIs → Enable (legacy) mbed TLS crypto APIs → Random Number Generator support

config MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
    bool "External RNG"
    default y if CRYPTOCELL_USABLE
    depends on NRF_SECURITY_RNG && MBEDTLS_LEGACY_CRYPTO_C && NRF_SECURITY
    help
      Convenience layer for handling entropy before it is fully supported in
      PSA Crypto APIs and drivers. This is set by default for legacy and PSA
      modes.

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)