modules: tf-m: build Crypto partition only when CONFIG_PSA_CRYPTO=y

To align with how it works when building without TF-M.

At the same time remove a `depends on` because it had no effect on
the upstream Kconfig option it was redefining.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>

Author: tomi-font

modules/trusted-firmware-m/Kconfig.tfm.defconfig

@@ -82,11 +82,6 @@ config TFM_PARTITION_PROTECTED_STORAGE
 	select PSA_WANT_ALG_GCM if SOC_NRF5340_CPUAPP
 	select PSA_WANT_ALG_GCM if SOC_SERIES_NRF54L || SOC_SERIES_NRF71
 
-# Override TF-M crypto dependency on ITS when using KMU
-config TFM_PARTITION_CRYPTO
-	bool
-	depends on TFM_PARTITION_INTERNAL_TRUSTED_STORAGE || CRACEN_KMU
-
 configdefault TFM_INSTALL_TF_PSA_CRYPTO_HEADERS
 	default n
 

modules/trusted-firmware-m/Kconfig.tfm_minimal.defconfig

@@ -8,6 +8,13 @@ config TFM_MCUBOOT_IMAGE_NUMBER
 	int
 	default 1
 
+config TFM_PARTITION_CRYPTO
+	bool
+	depends on PSA_CRYPTO_PROVIDER_TFM
+	default y
+
+if TFM_PARTITION_CRYPTO
+
 config TFM_CRYPTO_RNG_MODULE_ENABLED
 	bool
 	default y
@@ -17,9 +24,7 @@ config TFM_CRYPTO_HASH_MODULE_ENABLED
 	depends on PSA_HAS_HASH_SUPPORT
 	default y
 
-config TFM_PARTITION_CRYPTO
-	bool
-	default y
+endif # TFM_PARTITION_CRYPTO
 
 config TFM_PARTITION_PLATFORM
 	bool

west.yml

@@ -65,7 +65,7 @@ manifest:
     # https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/zephyr/guides/modules.html
     - name: zephyr
       repo-path: sdk-zephyr
-      revision: 389e70196936e7634d1a954e9de9652cb4363838
+      revision: e3ed6b35ca605705a8a53e9e975c7be5b565975e
       import:
         # In addition to the zephyr repository itself, NCS also
         # imports the contents of zephyr/west.yml at the above