samples: Add sample for PSA PBKDF2

[joerchan]

No description provided.

[NordicBuilder]

Test specification

CI/Jenkins/NRF

• Integration Platforms

CI/Jenkins/integration

Test Module	File based changes	Manually selected	West overwrite
test-fw-nrfconnect-nrf_crypto	X

Detailed information of selected test modules

Note: This message is automatically posted and updated by the CI

[mswarowsky]

Why are we skipping here CONFIG_PSA_CRYPTO_DRIVER_OBERON

[joerchan]

It's copy-paste from the HKDF sample.

It's skipped because TF-M makes sure of this, TF-M depend on key derivation from oberon.

[melwee01]

If these are actions of the sample, as the lead-in sentence says, can these be active instead of passive?

Imports the input key into the PSA crypto keystore.
Derives the output key.

[melwee01]

Removes the input and output keys from the PSA crypto keystore.

[melwee01]

I'm a little confused by the logic of these last two steps: it imports/derives the keys, then removes them? What's the end result?

[joerchan]

I've updated to say input password, instead of input key, since we are deriving from a password in this sample.

Also, the sample is using output_bytes, instead of output_key, so there is no output key after the key derivation.
I'm removing any mention of output key in the key store.

The end results is the derived key, in the application, instead of the key store.
Usually you would want to keep the derived key in the key_store and only use it by reference, but in this case we are outputting the key to the application

[NordicBuilder]

You can find the documentation preview for this PR at this link. It will be updated about 10 minutes after the documentation build succeeds.

Note: This comment is automatically posted by the Documentation Publishing GitHub Action.

[frkv]

Suggested change

	# driver to accelerate sub-operations.
	# driver which will use hardware accelerated crypto for low-level operations, if enabled.

[frkv]

Suggested change

	# driver to accelerate sub-operations.
	# driver which will use hardware accelerated crypto for low-level operations, if enabled.