Regarding OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE

[Chandra-s11]

Is OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE mandatory for RCP?
Can someone please help me understand its significance?

[abtink]

It is not mandatory.

When OPENTHREAD_CONFIG_PLATFORM_KEY_REFERENCES_ENABLE is set to 1, it changes how cryptographic keys are stored and used:

1. Key Storage: Instead of storing raw key material (the actual bytes of a key) in the OpenThread volatile settings, the OT core code uses an opaque handle called a KeyRef. This KeyRef is a reference to a key that is then securely managed by the underlying platform, typically for example in secure storage (e.g. PSA ITS).

2. Key Handling: When this feature is disabled, OpenThread passes the actual key bytes to the crypto functions. When enabled, OpenThread passes the KeyRef instead. The platform's cryptographic module receives this reference, need to retrieves the actual key from its secure storage, performs the requested cryptographic operation (e.g., encryption, signing), and returns the result.

[Chandra-s11]

Thanks a lot for detailed information