Mbed TLS 4.x upgrade.

Author: rcasallas-silabs

slc/component/matter-platform/crypto/matter_crypto.slcc

@@ -86,3 +86,18 @@ define:
 template_contribution:
   - name: mbedtls_config
     value: MBEDTLS_MPI_WINDOW_SIZE 1
+
+source:
+  # The non-secure TrustZone image cannot include psa_crypto_source because it
+  # conflicts with the secure-key-library interface. CHIP's SPAKE2+ fallback
+  # still uses these Mbed TLS bignum and ECP APIs directly.
+  - path: third_party/simplicity_sdk/mbedtls/tf-psa-crypto/drivers/builtin/src/bignum_core.c
+    condition: [trustzone_nonsecure]
+  - path: third_party/simplicity_sdk/mbedtls/tf-psa-crypto/drivers/builtin/src/bignum.c
+    condition: [trustzone_nonsecure]
+  - path: third_party/simplicity_sdk/mbedtls/tf-psa-crypto/drivers/builtin/src/ecp_curves.c
+    condition: [trustzone_nonsecure]
+  - path: third_party/simplicity_sdk/mbedtls/tf-psa-crypto/drivers/builtin/src/ecp_curves_new.c
+    condition: [trustzone_nonsecure]
+  - path: third_party/simplicity_sdk/mbedtls/tf-psa-crypto/drivers/builtin/src/ecp.c
+    condition: [trustzone_nonsecure]

slc/component/matter-platform/siwx917/matter_crypto_tinycrypt_siwx917.slcc

@@ -27,9 +27,7 @@ requires:
   - name: mbedtls_ecdsa
   - name: mbedtls_ecc
   - name: mbedtls_hash
-  - name: mbedtls_hkdf
   - name: mbedtls_mpi
-  - name: mbedtls_oid
   - name: mbedtls_pem
   - name: mbedtls_pkcs5
   - name: mbedtls_pki

slc/component/matter-platform/wstk-leds/matter_rgb_leds.slcc

@@ -10,13 +10,17 @@ metadata:
 provides:
   - name: matter_rgb_leds
 requires:
+  # Si91x boards use sl_si91x_led_917 for RGB LEDs. simple_rgb_pwm_led is the
+  # EFR32 PWM driver and requires EFR32 HAL components.
   - name: simple_rgb_pwm_led
     condition: [hardware_board_has_rgb]
+    unless: [device_si91x]
 recommends:
   - id: simple_rgb_pwm_led
     vendor: silabs
     instance: [rgb_led0]
     condition: [hardware_board_has_rgb]
+    unless: [device_si91x]
 include:
   - path: third_party/matter_sdk/examples/platform/silabs/rgb_led
     file_list: