Skip to content

Commit 7128ebe

Browse files
greg-fernordicjm
greg-fer
authored and
nordicjm
committed
doc: crypto: CRACEN SHA/SHAKE algorithm support
Changed the support status for SHA-256/192 and SHAKE algorithms to not supported in the CRACEN driver and to experimental in nrf_oberon. SHAKE256 512 bits is an exception, supported in both CRACEN and nrf_oberon. NCSDK-38885. Signed-off-by: Grzegorz Ferenc <Grzegorz.Ferenc@nordicsemi.no>
1 parent 956185f commit 7128ebe

2 files changed

Lines changed: 74 additions & 72 deletions

File tree

‎doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -161,6 +161,8 @@ Security
161161
* The post-quantum cryptography algorithms for nrf_oberon under Key types and key management are now correctly listed as experimental instead of supported.
162162
* The SPAKE2+ for Matter is now correctly listed as supported instead of experimental.
163163
* The WPA3-SAE hash-to-element algorithm is now correctly listed as a KDF algorithm, not a PAKE algorithm.
164+
* The SHA-256/192 and SHAKE hashing algorithms are now correctly listed as not supported in the CRACEN driver and Experimental in the nrf_oberon driver.
165+
The only exception is the SHAKE256 512 bits algorithm, which is supported in the both the CRACEN and nrf_oberon drivers.
164166

165167
* Removed:
166168

‎doc/nrf/security/crypto/crypto_supported_features.rst‎

Lines changed: 72 additions & 72 deletions
Original file line numberDiff line numberDiff line change
@@ -8118,24 +8118,24 @@ The options are grouped by Series and drivers available for the device Series, a
81188118
- --
81198119
* - SHA-256/192
81208120
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_256_192`
8121-
- Supported
8122-
- Supported
8123-
- Supported
8121+
- Experimental
8122+
- Experimental
8123+
- Experimental
81248124
* - SHAKE128 256 bits
81258125
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE128_256`
81268126
- Experimental
81278127
- Experimental
81288128
- Experimental
81298129
* - SHAKE256 192 bits
81308130
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_192`
8131-
- Supported
8132-
- Supported
8133-
- Supported
8131+
- Experimental
8132+
- Experimental
8133+
- Experimental
81348134
* - SHAKE256 256 bits
81358135
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_256`
8136-
- Supported
8137-
- Supported
8138-
- Supported
8136+
- Experimental
8137+
- Experimental
8138+
- Experimental
81398139
* - SHAKE256 512 bits
81408140
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_512`
81418141
- Supported
@@ -8243,16 +8243,16 @@ The options are grouped by Series and drivers available for the device Series, a
82438243
- --
82448244
* - SHA-256/192
82458245
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_256_192`
8246-
- Supported
8246+
- Experimental
82478247
* - SHAKE128 256 bits
82488248
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE128_256`
82498249
- Experimental
82508250
* - SHAKE256 192 bits
82518251
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_192`
8252-
- Supported
8252+
- Experimental
82538253
* - SHAKE256 256 bits
82548254
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_256`
8255-
- Supported
8255+
- Experimental
82568256
* - SHAKE256 512 bits
82578257
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_512`
82588258
- Supported
@@ -8427,48 +8427,48 @@ The options are grouped by Series and drivers available for the device Series, a
84278427
- --
84288428
* - SHA-256/192
84298429
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_256_192`
8430-
- Supported
8431-
- Supported
8432-
- Supported
8433-
- Supported
8434-
- Supported
8435-
- Experimental
8430+
- --
8431+
- --
8432+
- --
8433+
- --
8434+
- --
8435+
- --
84368436
- --
84378437
* - SHAKE128 256 bits
84388438
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE128_256`
8439-
- Experimental
8440-
- Experimental
8441-
- Experimental
8442-
- Experimental
8443-
- Experimental
8444-
- Experimental
8439+
- --
8440+
- --
8441+
- --
8442+
- --
8443+
- --
8444+
- --
84458445
- --
84468446
* - SHAKE256 192 bits
84478447
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_192`
8448-
- Supported
8449-
- Supported
8450-
- Supported
8451-
- Experimental
8452-
- Experimental
8453-
- Experimental
8448+
- --
8449+
- --
8450+
- --
8451+
- --
8452+
- --
8453+
- --
84548454
- --
84558455
* - SHAKE256 256 bits
84568456
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_256`
8457-
- Supported
8458-
- Supported
8459-
- Supported
8460-
- Experimental
8461-
- Experimental
8462-
- Experimental
8457+
- --
8458+
- --
8459+
- --
8460+
- --
8461+
- --
8462+
- --
84638463
- --
84648464
* - SHAKE256 512 bits
84658465
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_512`
84668466
- Supported
84678467
- Supported
84688468
- Supported
8469-
- Experimental
8470-
- Experimental
8471-
- Experimental
8469+
- Supported
8470+
- Supported
8471+
- Supported
84728472
- --
84738473

84748474
.. tab:: nrf_oberon
@@ -8569,13 +8569,13 @@ The options are grouped by Series and drivers available for the device Series, a
85698569
- --
85708570
* - SHA-256/192
85718571
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_256_192`
8572-
- Supported
8573-
- Supported
8574-
- Supported
8575-
- Supported
8576-
- Supported
8577-
- Supported
8578-
- Supported
8572+
- Experimental
8573+
- Experimental
8574+
- Experimental
8575+
- Experimental
8576+
- Experimental
8577+
- Experimental
8578+
- Experimental
85798579
* - SHAKE128 256 bits
85808580
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE128_256`
85818581
- Experimental
@@ -8587,22 +8587,22 @@ The options are grouped by Series and drivers available for the device Series, a
85878587
- Experimental
85888588
* - SHAKE256 192 bits
85898589
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_192`
8590-
- Supported
8591-
- Supported
8592-
- Supported
8593-
- Supported
8594-
- Supported
8595-
- Supported
8596-
- Supported
8590+
- Experimental
8591+
- Experimental
8592+
- Experimental
8593+
- Experimental
8594+
- Experimental
8595+
- Experimental
8596+
- Experimental
85978597
* - SHAKE256 256 bits
85988598
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_256`
8599-
- Supported
8600-
- Supported
8601-
- Supported
8602-
- Supported
8603-
- Supported
8604-
- Supported
8605-
- Supported
8599+
- Experimental
8600+
- Experimental
8601+
- Experimental
8602+
- Experimental
8603+
- Experimental
8604+
- Experimental
8605+
- Experimental
86068606
* - SHAKE256 512 bits
86078607
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_512`
86088608
- Supported
@@ -8793,10 +8793,10 @@ The options are grouped by Series and drivers available for the device Series, a
87938793
- --
87948794
* - SHA-256/192
87958795
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHA_256_192`
8796-
- Supported
8797-
- Supported
8798-
- Supported
8799-
- Supported
8796+
- Experimental
8797+
- Experimental
8798+
- Experimental
8799+
- Experimental
88008800
* - SHAKE128 256 bits
88018801
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE128_256`
88028802
- Experimental
@@ -8805,16 +8805,16 @@ The options are grouped by Series and drivers available for the device Series, a
88058805
- Experimental
88068806
* - SHAKE256 192 bits
88078807
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_192`
8808-
- Supported
8809-
- Supported
8810-
- Supported
8811-
- Supported
8808+
- Experimental
8809+
- Experimental
8810+
- Experimental
8811+
- Experimental
88128812
* - SHAKE256 256 bits
88138813
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_256`
8814-
- Supported
8815-
- Supported
8816-
- Supported
8817-
- Supported
8814+
- Experimental
8815+
- Experimental
8816+
- Experimental
8817+
- Experimental
88188818
* - SHAKE256 512 bits
88198819
- :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256_512`
88208820
- Supported

0 commit comments

Comments
 (0)