wolfSSH + Keil MDK/RTX on STM32H573 with PSA Crypto (Secure Manager) - support status and RSA coverage?

[zaaynn123]

Hi wolfSSL team,

I’m evaluating wolfSSL + wolfSSH for a project on STM32H573 running Keil MDK-Pro with RTX, and using ST’s Secure Manager (PSA Crypto services).

Current requirements:

• HTTPS (TLS) via wolfSSL
• SFTP via wolfSSH
• Cryptography routed through the PSA Crypto API provided by Secure Manager

Questions:

1. Keil MDK / RTX support for wolfSSH
wolfSSL has an official CMSIS pack and documented Keil MDK + RTX support.
Is wolfSSH also officially supported / tested under Keil MDK (µVision) + RTX on STM32H5/H573?
Or is it currently a manual port only (sources + custom I/O callbacks)? Any guide please if it is a manual port ?

2. PSA Crypto backend coverage
The original PSA port (wolfSSL 5.2.0) listed: ECDSA, ECDH, HKDF, AES, SHA-1/224/256, RNG.
Has RSA (and any other algorithms useful for TLS/SSH) been added to the PSA backend since then?
Specifically, can RSA key exchange / signatures / certificates now go through PSA, or do they still fall back to software wolfCrypt?

3. STM32H573 + Secure Manager
Are there any known working examples or configuration notes for using the PSA port with ST Secure Manager on STM32H573 (or H5 family in general) together with wolfSSH?

Thanks in advance for any clarification. Happy to provide more details about the exact Secure Manager profile if needed.

[kareem-wolfssl]

Hi @zaaynn123,

It looks like this is a duplicate of your Zendesk ticket. Please let me know if you'd like to proceed with the ticket or with this issue. I am copying my answer from your ticket here:

1. We do support Keil MDK in wolfSSH as long as the appropriate defines are set (WOLFSSH_MDK5, WOLFSSL_MDK_ARM, WOLFSSL_KEIL_TCP_NET etc). However we don't currently have an example Keil project for wolfSSH. You can use our wolfSSL project as an example and add wolfSSH yourself, or we can assist you with this as part of our kickstart program if you're interested.
2. No, we don't currently have RSA support in our PSA crypto backend. If this is a requirement for your project, we can look into adding this support.
3. For the STM32H573 I would recommend our STM32Cube example which you can find here: https://github.com/wolfSSL/wolfssl/tree/master/IDE/STM32Cube https://github.com/wolfSSL/wolfssh/tree/master/ide/STM32CUBE To enable PSA support you'll need to define WOLFSSL_HAVE_PSA in your build settings and include the PSA library and headers in your project.

Can you share some more information about your project and where you're located? Are you working on a personal or commercial project?