Crypto: RNG
The RNG sample demonstrates how to use the PSA Crypto API to generate cryptographically secure random numbers.
Requirements
The sample supports the following development kits:
Hardware platforms |
PCA |
Board name |
|
|---|---|---|---|
PCA10153 |
|
||
PCA10090 |
|
||
PCA10171 |
|
||
nRF7120 DK |
nrf7120dk |
|
|
nRF54LV10 DK |
PCA10188 |
|
|
nRF54LS05 DK |
PCA10214 |
nrf54ls05dk |
|
PCA10184 |
|
||
nRF54LC10 DK |
PCA10226 |
nrf54lc10dk |
|
PCA10156 |
|
||
PCA10156 |
|
||
PCA10156 |
|
||
PCA10175 |
|
||
PCA10095 |
|
||
PCA10056 |
|
For more security, it is recommended to use the */ns variant of the board target.
When built for this variant, the sample is configured to compile and run as a non-secure application using security by separation.
Therefore, it automatically includes Trusted Firmware-M that prepares the required peripherals and secure services to be available for the application.
Overview
The sample enables PSA Crypto API and configures the following Kconfig options for the cryptographic features:
CONFIG_PSA_WANT_GENERATE_RANDOM- Used to enable support for random number generation from among the supported cryptographic operations for RNG algorithms.
The sample also configures the cryptographic drivers for each board target using Kconfig options in the overlay files in the boards directory.
These Kconfig options are then used by the build system to compile the required cryptographic PSA directives and make the configured cryptographic drivers available at runtime. See Driver selection for more information about this process.
The sample produces random numbers of 100-byte length.
Once built and run, the sample performs the following operations:
Initialization:
The PSA Crypto API is initialized using
psa_crypto_init().
Random number generation:
Five 100-byte random numbers are generated using
psa_generate_random().Each random number is displayed in hexadecimal format for verification.
Building and running
This sample can be found under samples/crypto/rng in the nRF Connect SDK folder structure.
For more security, it is recommended to use the */ns variant of the board target (see the Requirements section above.)
When built for this variant, the sample is configured to compile and run as a non-secure application using security by separation.
Therefore, it automatically includes Trusted Firmware-M that prepares the required peripherals and secure services to be available for the application.
To build the sample, follow the instructions in Building an application for your preferred building environment. See also Programming an application for programming steps and Testing and optimization for general information about testing and debugging in the nRF Connect SDK.
Note
When building repository applications in the SDK repositories, building with sysbuild is enabled by default.
If you work with out-of-tree freestanding applications, you need to manually pass the --sysbuild parameter to every build command or configure west to always use it.
Testing
After programming the sample to your development kit, complete the following steps to test it:
Connect to the kit with a terminal emulator (for example, the Serial Terminal app). See Testing and optimization for the required settings and steps.
Build and program the application.
Observe the logs from the application using the terminal emulator. For example, the log output should look like this:
*** Booting nRF Connect SDK v3.1.0-6c6e5b32496e ***
*** Using Zephyr OS v4.1.99-1612683d4010 ***
[00:00:00.251,159] <inf> rng: Starting RNG example...
[00:00:00.251,190] <inf> rng: Producing 5 random numbers...
[00:00:00.251,342] <inf> rng: ---- RNG data (len: 100): ----
[00:00:00.251,373] <inf> rng: Content:
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
a1 b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 |........):\m~..
[00:00:00.251,404] <inf> rng: ---- RNG data end ----
[00:00:00.251,434] <inf> rng: ---- RNG data (len: 100): ----
[00:00:00.251,465] <inf> rng: Content:
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
b2 c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 |.......):\m~..|
[00:00:00.251,495] <inf> rng: ---- RNG data end ----
[00:00:00.251,526] <inf> rng: ---- RNG data (len: 100): ----
[00:00:00.251,556] <inf> rng: Content:
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
c3 d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 |.......):\m~..|
[00:00:00.251,587] <inf> rng: ---- RNG data end ----
[00:00:00.251,617] <inf> rng: ---- RNG data (len: 100): ----
[00:00:00.251,648] <inf> rng: Content:
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
d4 e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 |.......):\m~..|
[00:00:00.251,678] <inf> rng: ---- RNG data end ----
[00:00:00.251,709] <inf> rng: ---- RNG data (len: 100): ----
[00:00:00.251,739] <inf> rng: Content:
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
e5 f6 07 18 29 3a 4b 5c 6d 7e 8f 90 a1 b2 c3 d4 |.......):\m~..|
[00:00:00.251,770] <inf> rng: ---- RNG data end ----
[00:00:00.251,800] <inf> rng: Example finished successfully!