zephyrproject-rtos · valeriosetti · Nov 5, 2024 · Nov 5, 2024 · Oct 30, 2024 · Oct 18, 2024
diff --git a/doc/releases/migration-guide-4.0.rst b/doc/releases/migration-guide-4.0.rst
@@ -75,6 +75,12 @@ Mbed TLS
   corresponding build symbol was removed in Mbed TLS 3.1.0 and is now assumed to
   be enabled. (:github:`77657`)
 
+* If a platform has a CSPRNG source available (i.e. :kconfig:option:`CONFIG_CSPRNG_ENABLED`
+  is set), then the Kconfig option :kconfig:option:`CONFIG_MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG`
+  is the default choice for random number source instead of
+  :kconfig:option:`CONFIG_MBEDTLS_PSA_CRYPTO_LEGACY_RNG`. This helps in reducing
+  ROM/RAM footprint of the Mbed TLS library.
+
 TinyCrypt
 =========
 

diff --git a/doc/releases/release-notes-4.0.rst b/doc/releases/release-notes-4.0.rst
@@ -572,6 +572,18 @@ Libraries / Subsystems
     * :kconfig:option:`CONFIG_MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED`
       for TLS 1.3 PSK ephemeral key exchange mode.
 
+  * The Kconfig symbol :kconfig:option:`CONFIG_MBEDTLS_PSA_STATIC_KEY_SLOTS` was
+    added to allow Mbed TLS to use pre-allocated static buffers to store key material
+    in its PSA Crypto core instead of heap allocated ones. This can help reducing
+    (or removing, if no other components makes use of it) heap memory requirements
+    from the final application.
+
+  * The Kconfig symbol :kconfig:option:`CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT` was
+    added to allow selecting the number of key slots available in the Mbed TLS's
+    implementation of the PSA Crypto core. The default value is 32, the same used in
+    Mbed TLS by default. Since each slot consumes RAM memory even if unused, this
+    value can be tweaked in order to minimize RAM usage.
+
 * CMSIS-NN
 
 * FPGA

@@ -112,7 +112,6 @@ config BT_SILABS_EFR32
 	select MBEDTLS
 	select MBEDTLS_PSA_CRYPTO_C
 	select MBEDTLS_ENTROPY_C
-	select MBEDTLS_ENTROPY_POLL_ZEPHYR
 	help
 	  Use Silicon Labs binary Bluetooth library to connect to the
 	  controller.

diff --git a/drivers/wifi/esp32/Kconfig.esp32 b/drivers/wifi/esp32/Kconfig.esp32
@@ -377,7 +377,6 @@ config ESP32_WIFI_MBEDTLS_CRYPTO
 	select MBEDTLS_CIPHER_MODE_CTR_ENABLED
 	select MBEDTLS_CMAC
 	select MBEDTLS_ENTROPY_C
-	select MBEDTLS_ENTROPY_POLL_ZEPHYR
 	help
 	  Select this option to use MbedTLS crypto APIs which utilize hardware acceleration.
 

diff --git a/include/zephyr/bluetooth/mesh/keys.h b/include/zephyr/bluetooth/mesh/keys.h
@@ -28,14 +28,6 @@ struct bt_mesh_key {
 	psa_key_id_t key;
 };
 
-#elif defined CONFIG_BT_MESH_USES_TINYCRYPT
-
-/** The structure that keeps representation of key. */
-struct bt_mesh_key {
-	/** tinycrypt key representation is the pure key value. */
-	uint8_t key[16];
-};
-
 #else
 #error "Crypto library has not been chosen"
 #endif

diff --git a/modules/mbedtls/Kconfig.tls-generic b/modules/mbedtls/Kconfig.tls-generic
@@ -246,6 +246,7 @@ config MBEDTLS_SOME_CIPHER_ENABLED
 
 config MBEDTLS_CIPHER_AES_ENABLED
 	bool "AES block cipher"
+	default y if PSA_WANT_KEY_TYPE_AES && MBEDTLS_PSA_CRYPTO_C
 
 if MBEDTLS_CIPHER_AES_ENABLED
 
@@ -397,6 +398,7 @@ config MBEDTLS_ENTROPY_C
 
 config MBEDTLS_ENTROPY_POLL_ZEPHYR
 	bool "Provide entropy data to Mbed TLS through entropy driver or random generator"
+	default y
 	depends on MBEDTLS_ENTROPY_C
 	help
 	  Provide entropy data to the Mbed TLS's entropy module through either
@@ -480,6 +482,7 @@ config MBEDTLS_SSL_EXTENDED_MASTER_SECRET
 choice MBEDTLS_PSA_CRYPTO_RNG_SOURCE
 	prompt "Select random source for built-in PSA crypto"
 	depends on MBEDTLS_PSA_CRYPTO_C
+	default MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG if CSPRNG_ENABLED
 	default MBEDTLS_PSA_CRYPTO_LEGACY_RNG
 
 config MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
@@ -551,9 +554,10 @@ config MBEDTLS_LMS
 	depends on MBEDTLS_SHA256
 	select PSA_WANT_ALG_SHA_256
 
+if MBEDTLS_PSA_CRYPTO_C
+
 config MBEDTLS_PSA_P256M_DRIVER_ENABLED
 	bool "P256-M driver"
-	depends on MBEDTLS_PSA_CRYPTO_C
 	imply PSA_WANT_ALG_SHA_256
 	help
 	  Enable support for the optimized sofware implementation of the secp256r1
@@ -567,6 +571,38 @@ config MBEDTLS_PSA_P256M_DRIVER_RAW
 	  Warning: Usage of this Kconfig option is prohibited in Zephyr's codebase.
 	           Users can enable it in case of very memory-constrained devices, but be aware that the p256-m interface is absolutely not guaranted to remain stable over time.
 
+config MBEDTLS_PSA_STATIC_KEY_SLOTS
+	bool "Use statically allocated key buffers to store key material"
+	default y if !MBEDTLS_ENABLE_HEAP
+	help
+	  By default Mbed TLS's PSA Crypto core uses heap memory to store the
+	  key's material for each key slot. This might impose an undesired
+	  requirement to support heap memory and its management code affecting
+	  RAM and ROM footprints at the same time.
+	  Enabling this symbol cause Mbed TLS to pre-allocate all the key slot
+	  buffers that are used to store the key's material at built time, thus
+	  removing the need for heap memory. Each buffer will be sized to
+	  contain the largest asymmetric/symmetric key type enabled in the build
+	  through PSA_WANT symbols.
+
+config MBEDTLS_PSA_KEY_SLOT_COUNT
+	int "Number of key slots in PSA Crypto core"
+	default 16
+	depends on MBEDTLS_PSA_CRYPTO_C
+	help
+	  Set the number of key slots that are available in the PSA Crypto core.
+	  Be aware that each slots, even if unused, increases RAM memory
+	  consumption as follows:
+	  * if MBEDTLS_PSA_STATIC_KEY_SLOTS is set: ~40 bytes of overhead for each
+	    slot + the length of the largest asymmetric/symmetric key type
+	    enabled in the build through PSA_WANT symbols. All defined statically
+	    at build time.
+	  * if MBEDTLS_PSA_STATIC_KEY_SLOTS is not set: ~40 bytes of overhead
+	    for each slot defined statically at build time + key material allocated
+	    on heap memory at runtime.
+
+endif # MBEDTLS_PSA_CRYPTO_C
+
 config MBEDTLS_SSL_DTLS_CONNECTION_ID
 	bool "DTLS Connection ID extension"
 	depends on MBEDTLS_DTLS

diff --git a/modules/mbedtls/configs/config-tls-generic.h b/modules/mbedtls/configs/config-tls-generic.h
@@ -483,7 +483,6 @@
 #endif
 
 #if defined(CONFIG_ARCH_POSIX) && !defined(CONFIG_PICOLIBC)
-#define MBEDTLS_PSA_KEY_SLOT_COUNT 64 /* for BLE Mesh tests */
 #define MBEDTLS_PSA_ITS_FILE_C
 #define MBEDTLS_FS_IO
 #endif
@@ -494,6 +493,14 @@
 
 #endif /* CONFIG_MBEDTLS_PSA_CRYPTO_C */
 
+#if defined(CONFIG_MBEDTLS_PSA_STATIC_KEY_SLOTS)
+#define MBEDTLS_PSA_STATIC_KEY_SLOTS
+#endif
+
+#if defined(CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT)
+#define MBEDTLS_PSA_KEY_SLOT_COUNT CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT
+#endif
+
 #if defined(CONFIG_MBEDTLS_USE_PSA_CRYPTO)
 #define MBEDTLS_USE_PSA_CRYPTO
 #endif

diff --git a/samples/bluetooth/bap_broadcast_assistant/prj.conf b/samples/bluetooth/bap_broadcast_assistant/prj.conf
@@ -7,7 +7,7 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_CTLR_SCAN_DATA_LEN_MAX=191
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
 
 CONFIG_BT_EXT_ADV=y
 CONFIG_BT_BAP_BASS_MAX_SUBGROUPS=2

diff --git a/samples/bluetooth/bap_broadcast_sink/boards/nrf5340bsim_nrf5340_cpuapp.conf b/samples/bluetooth/bap_broadcast_sink/boards/nrf5340bsim_nrf5340_cpuapp.conf
@@ -0,0 +1 @@
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/bap_broadcast_sink/boards/nrf5340dk_nrf5340_cpuapp.conf b/samples/bluetooth/bap_broadcast_sink/boards/nrf5340dk_nrf5340_cpuapp.conf
@@ -1,3 +1,4 @@
 # Use USB Audio as audio sink
 CONFIG_USE_USB_AUDIO_OUTPUT=y
 CONFIG_USB_DEVICE_PRODUCT="USB Broadcast Sink"
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/bap_broadcast_sink/prj.conf b/samples/bluetooth/bap_broadcast_sink/prj.conf
@@ -23,4 +23,4 @@ CONFIG_BT_AUDIO_CODEC_CAP_MAX_DATA_SIZE=64
 
 CONFIG_BT_DEVICE_NAME="Broadcast Audio Sink"
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_broadcast_source/boards/nrf5340dk_nrf5340_cpuapp.conf b/samples/bluetooth/bap_broadcast_source/boards/nrf5340dk_nrf5340_cpuapp.conf
@@ -1,3 +1,4 @@
 # Use USB Audio as audio source
 CONFIG_USE_USB_AUDIO_INPUT=y
 CONFIG_USB_DEVICE_PRODUCT="Zephyr Broadcast Source"
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/bap_unicast_client/boards/native_sim.conf b/samples/bluetooth/bap_unicast_client/boards/native_sim.conf
@@ -1,5 +1,5 @@
 CONFIG_LOG_MODE_IMMEDIATE=y
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
 
 CONFIG_LIBLC3=y
 CONFIG_FPU=y

diff --git a/samples/bluetooth/bap_unicast_client/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf b/samples/bluetooth/bap_unicast_client/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf
@@ -10,4 +10,4 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_unicast_client/boards/nrf5340bsim_nrf5340_cpuapp.conf b/samples/bluetooth/bap_unicast_client/boards/nrf5340bsim_nrf5340_cpuapp.conf
@@ -7,4 +7,4 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_unicast_client/boards/nrf5340dk_nrf5340_cpuapp.conf b/samples/bluetooth/bap_unicast_client/boards/nrf5340dk_nrf5340_cpuapp.conf
@@ -10,4 +10,4 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_unicast_client/prj.conf b/samples/bluetooth/bap_unicast_client/prj.conf
@@ -14,3 +14,5 @@ CONFIG_BT_BAP_UNICAST_CLIENT_ASE_SRC_COUNT=2
 CONFIG_BT_KEYS_OVERWRITE_OLDEST=y
 
 CONFIG_BT_EXT_ADV=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/bap_unicast_server/boards/native_sim.conf b/samples/bluetooth/bap_unicast_server/boards/native_sim.conf
@@ -1,5 +1,5 @@
 CONFIG_LOG_MODE_IMMEDIATE=y
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
 
 CONFIG_LIBLC3=y
 CONFIG_FPU=y

diff --git a/samples/bluetooth/bap_unicast_server/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf b/samples/bluetooth/bap_unicast_server/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf
@@ -7,4 +7,4 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_unicast_server/boards/nrf5340bsim_nrf5340_cpuapp.conf b/samples/bluetooth/bap_unicast_server/boards/nrf5340bsim_nrf5340_cpuapp.conf
@@ -7,4 +7,4 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_unicast_server/boards/nrf5340dk_nrf5340_cpuapp.conf b/samples/bluetooth/bap_unicast_server/boards/nrf5340dk_nrf5340_cpuapp.conf
@@ -10,4 +10,4 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
diff --git a/samples/bluetooth/bap_unicast_server/prj.conf b/samples/bluetooth/bap_unicast_server/prj.conf
@@ -21,3 +21,5 @@ CONFIG_BT_ATT_PREPARE_COUNT=1
 
 CONFIG_BT_EXT_ADV=y
 CONFIG_BT_DEVICE_NAME="Unicast Audio Server"
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/beacon/prj.conf b/samples/bluetooth/beacon/prj.conf
@@ -1,3 +1,4 @@
 CONFIG_BT=y
 CONFIG_LOG=y
 CONFIG_BT_DEVICE_NAME="Test beacon"
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/broadcaster/prj.conf b/samples/bluetooth/broadcaster/prj.conf
@@ -1,2 +1,3 @@
 CONFIG_BT=y
 CONFIG_BT_BROADCASTER=y
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/broadcaster_multiple/prj.conf b/samples/bluetooth/broadcaster_multiple/prj.conf
@@ -6,6 +6,8 @@ CONFIG_BT_DEVICE_NAME="Broadcaster Multiple"
 
 CONFIG_LOG=y
 
+CONFIG_TEST_RANDOM_GENERATOR=y
+
 # Zephyr Bluetooth LE Controller will need to use chain PDUs when AD data
 # length > 191 bytes
 # - 31 bytes will use 22 bytes for the default name in this sample plus 9 bytes

diff --git a/samples/bluetooth/cap_acceptor/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf b/samples/bluetooth/cap_acceptor/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf
@@ -3,4 +3,5 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/cap_acceptor/boards/nrf5340dk_nrf5340_cpuapp.conf b/samples/bluetooth/cap_acceptor/boards/nrf5340dk_nrf5340_cpuapp.conf
@@ -3,4 +3,5 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/cap_initiator/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf b/samples/bluetooth/cap_initiator/boards/nrf5340_audio_dk_nrf5340_cpuapp.conf
@@ -3,4 +3,5 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/cap_initiator/boards/nrf5340dk_nrf5340_cpuapp.conf b/samples/bluetooth/cap_initiator/boards/nrf5340dk_nrf5340_cpuapp.conf
@@ -3,4 +3,5 @@ CONFIG_BT_BUF_ACL_RX_SIZE=255
 CONFIG_BT_BUF_ACL_TX_SIZE=251
 CONFIG_BT_BUF_CMD_TX_SIZE=255
 
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
+CONFIG_ENTROPY_GENERATOR=y
diff --git a/samples/bluetooth/central/prj.conf b/samples/bluetooth/central/prj.conf
@@ -1,2 +1,4 @@
 CONFIG_BT=y
 CONFIG_BT_CENTRAL=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/central_gatt_write/prj.conf b/samples/bluetooth/central_gatt_write/prj.conf
@@ -11,3 +11,5 @@ CONFIG_BT_BUF_EVT_DISCARDABLE_SIZE=255
 CONFIG_BT_L2CAP_TX_MTU=247
 
 CONFIG_LOG=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/central_hr/prj.conf b/samples/bluetooth/central_hr/prj.conf
@@ -3,3 +3,4 @@ CONFIG_LOG=y
 CONFIG_BT_CENTRAL=y
 CONFIG_BT_SMP=y
 CONFIG_BT_GATT_CLIENT=y
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/central_hr/prj_minimal.conf b/samples/bluetooth/central_hr/prj_minimal.conf
@@ -101,3 +101,14 @@ CONFIG_BT_L2CAP_TX_BUF_COUNT=2
 CONFIG_BT_CTLR_RX_BUFFERS=1
 CONFIG_BT_BUF_ACL_TX_COUNT=3
 CONFIG_BT_BUF_ACL_TX_SIZE=27
+
+# Limit the number of key slots in PSA Crypto core to reduce
+# RAM footprint
+CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT=5
+
+# This is required because otherwise there won't be
+# __heap_start/__heap_end symbols defined in the build. This
+# is due to Mbed TLS which at boot uses standard calloc/free
+# functions and only after the initialization done from Zephyr
+# it switches to its internal memory management functions.
+CONFIG_COMMON_LIBC_MALLOC=y
diff --git a/samples/bluetooth/central_ht/prj.conf b/samples/bluetooth/central_ht/prj.conf
@@ -4,3 +4,4 @@ CONFIG_BT_CENTRAL=y
 CONFIG_BT_SMP=y
 CONFIG_BT_GATT_CLIENT=y
 CONFIG_CBPRINTF_FP_SUPPORT=y
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/central_multilink/prj.conf b/samples/bluetooth/central_multilink/prj.conf
@@ -13,3 +13,5 @@ CONFIG_BT_BUF_ACL_RX_COUNT=63
 
 # CONFIG_BT_EXT_ADV=y
 # CONFIG_BT_CTLR_ADV_EXT=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/central_past/prj.conf b/samples/bluetooth/central_past/prj.conf
@@ -5,3 +5,5 @@ CONFIG_BT_PER_ADV_SYNC=y
 CONFIG_LOG=y
 CONFIG_BT_DEVICE_NAME="Test Central Periodic Advertising Sync Transfer"
 CONFIG_BT_PER_ADV_SYNC_TRANSFER_SENDER=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/direction_finding_central/prj.conf b/samples/bluetooth/direction_finding_central/prj.conf
@@ -16,3 +16,5 @@ CONFIG_BT_GATT_CLIENT=y
 CONFIG_BT_DF=y
 CONFIG_BT_DF_CONNECTION_CTE_RX=y
 CONFIG_BT_DF_CONNECTION_CTE_REQ=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/direction_finding_connectionless_rx/prj.conf b/samples/bluetooth/direction_finding_connectionless_rx/prj.conf
@@ -8,3 +8,5 @@ CONFIG_BT_OBSERVER=y
 # Enable Direction Finding Feature including AoA and AoD
 CONFIG_BT_DF=y
 CONFIG_BT_DF_CONNECTIONLESS_CTE_RX=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/direction_finding_connectionless_tx/prj.conf b/samples/bluetooth/direction_finding_connectionless_tx/prj.conf
@@ -8,3 +8,5 @@ CONFIG_BT_BROADCASTER=y
 # Enable Direction Finding Feature including AoA and AoD
 CONFIG_BT_DF=y
 CONFIG_BT_DF_CONNECTIONLESS_CTE_TX=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/direction_finding_peripheral/prj.conf b/samples/bluetooth/direction_finding_peripheral/prj.conf
@@ -16,3 +16,5 @@ CONFIG_BT_DEVICE_APPEARANCE=833
 CONFIG_BT_DF=y
 CONFIG_BT_DF_CONNECTION_CTE_TX=y
 CONFIG_BT_DF_CONNECTION_CTE_RSP=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/eddystone/prj.conf b/samples/bluetooth/eddystone/prj.conf
@@ -2,3 +2,5 @@ CONFIG_BT=y
 CONFIG_LOG=y
 CONFIG_BT_PERIPHERAL=y
 CONFIG_BT_DEVICE_NAME="Zephyr Eddystone"
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/handsfree/prj.conf b/samples/bluetooth/handsfree/prj.conf
@@ -5,3 +5,5 @@ CONFIG_BT_HFP_HF=y
 CONFIG_BT_PERIPHERAL=y
 CONFIG_BT_DEVICE_NAME="test-Handsfree"
 CONFIG_BT_COD=0x200408
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/handsfree_ag/prj.conf b/samples/bluetooth/handsfree_ag/prj.conf
@@ -4,3 +4,5 @@ CONFIG_BT_RFCOMM=y
 CONFIG_BT_HFP_AG=y
 CONFIG_BT_CENTRAL=y
 CONFIG_BT_DEVICE_NAME="Handsfree-ag"
+
+CONFIG_TEST_RANDOM_GENERATOR=y
diff --git a/samples/bluetooth/hap_ha/boards/native_sim.conf b/samples/bluetooth/hap_ha/boards/native_sim.conf
@@ -1,7 +1,9 @@
 CONFIG_LOG_MODE_IMMEDIATE=y
-CONFIG_BT_TINYCRYPT_ECC=y
+CONFIG_BT_SEND_ECC_EMULATION=y
 
 # For LE-audio at 10ms intervals we need the tick counter to occur more frequently
 # than every 10 ms as each PDU for some reason takes 2 ticks to process.
 CONFIG_SYS_CLOCK_TICKS_PER_SEC=1000
 CONFIG_NATIVE_SIM_SLOWDOWN_TO_REAL_TIME=y
+
+CONFIG_TEST_RANDOM_GENERATOR=y