Updated Key policy with spec

[jepenven-silabs]

Problem

Fix #14966

Change overview

Implemented remaining changes

Testing

Unit test/ Test suite

[github-actions]

PR #15804: Size comparison from c275d1f to 7d264c0

Increases above 0.2%:

platform	target	config	section	c275d1f	7d264c0	change	% change
nrfconnect	all-clusters-app	nrf52840dk_nrf52840	(read/write)	1039911	1076443	36532	3.5
			bss	125700	127816	2116	1.7
			rodata	135792	141716	5924	4.4
			text	701180	729484	28304	4.0

Increases (6 builds for cyw30739, efr32, esp32, nrfconnect, p6, telink)

platform	target	config	section	c275d1f	7d264c0	change	% change
cyw30739	light	cyw930739m2evb_01	(read/write)	600170	600178	8	0.0
			.app_xip_area	505192	505200	8	0.0
efr32	lighting-app	BRD4161A+rpc	(read only)	948228	948244	16	0.0
			.text	948220	948236	16	0.0
esp32	all-clusters-app	c3devkit	(read only)	953232	953240	8	0.0
			.flash.text	953232	953240	8	0.0
nrfconnect	all-clusters-app	nrf52840dk_nrf52840	(read/write)	1039911	1076443	36532	3.5
			bss	125700	127816	2116	1.7
			rodata	135792	141716	5924	4.4
			text	701180	729484	28304	4.0
p6	all-clusters-app	default	(read/write)	2489872	2489888	16	0.0
			.text	1448136	1448152	16	0.0
telink	lighting-app	tlsr9518adk80d	text	625098	625100	2	0.0

Decreases (2 builds for k32w, mbed)

platform	target	config	section	c275d1f	7d264c0	change	% change
k32w	lock	k32w061+release	(read/write)	695932	695916	-16	-0.0
			.text	610544	610528	-16	-0.0
mbed	lock-app	CY8CPROTO_062_4343W+release	(read/write)	2350972	2350908	-64	-0.0
			.text	1313572	1313508	-64	-0.0

Full report (31 builds for cyw30739, efr32, esp32, k32w, linux, mbed, nrfconnect, p6, qpg, telink)

platform	target	config	section	c275d1f	7d264c0	change	% change
cyw30739	light	cyw930739m2evb_01	(read/write)	600170	600178	8	0.0
			.app_xip_area	505192	505200	8	0.0
			.bss	77660	77660	0	0.0
			.data	660	660	0	0.0
			.rodata	0	0	0	0.0
			.text	0	0	0	0.0
	lock	cyw930739m2evb_01	(read/write)	558170	558170	0	0.0
			.app_xip_area	464728	464728	0	0.0
			.bss	76164	76164	0	0.0
			.data	624	624	0	0.0
			.rodata	0	0	0	0.0
			.text	0	0	0	0.0
	ota-requestor	cyw930739m2evb_01	(read/write)	578802	578802	0	0.0
			.app_xip_area	475664	475664	0	0.0
			.bss	85532	85532	0	0.0
			.data	568	568	0	0.0
			.rodata	0	0	0	0.0
			.text	112	112	0	0.0
efr32	lighting-app	BRD4161A	(read only)	918160	918160	0	0.0
			(read/write)	128816	128816	0	0.0
			.bss	126760	126760	0	0.0
			.data	2056	2056	0	0.0
			.text	918152	918152	0	0.0
		BRD4161A+rpc	(read only)	948228	948244	16	0.0
			(read/write)	145756	145756	0	0.0
			.bss	143536	143536	0	0.0
			.data	2220	2220	0	0.0
			.text	948220	948236	16	0.0
	lock-app	BRD4161A+wf200	(read only)	987964	987964	0	0.0
			(read/write)	120312	120312	0	0.0
			.bss	118380	118380	0	0.0
			.data	1932	1932	0	0.0
			.text	987956	987956	0	0.0
	window-app	BRD4161A	(read only)	852696	852696	0	0.0
			(read/write)	126784	126784	0	0.0
			.bss	124856	124856	0	0.0
			.data	1924	1924	0	0.0
			.text	852688	852688	0	0.0
esp32	all-clusters-app	c3devkit	(read only)	953232	953240	8	0.0
			(read/write)	1392714	1392714	0	0.0
			.dram0.bss	62536	62536	0	0.0
			.dram0.data	14236	14236	0	0.0
			.flash.rodata	197024	197024	0	0.0
			.flash.text	953232	953240	8	0.0
			.iram0.text	62016	62016	0	0.0
		m5stack	(read only)	1008419	1008419	0	0.0
			(read/write)	459828	459828	0	0.0
			.dram0.bss	68056	68056	0	0.0
			.dram0.data	34080	34080	0	0.0
			.flash.rodata	225856	225856	0	0.0
			.flash.text	1003035	1003035	0	0.0
			.iram0.text	123107	123107	0	0.0
k32w	light	k32w061+release	(read/write)	692780	692780	0	0.0
			.bss	77688	77688	0	0.0
			.data	1932	1932	0	0.0
			.text	607360	607360	0	0.0
	lock	k32w061+release	(read/write)	695932	695916	-16	-0.0
			.bss	77616	77616	0	0.0
			.data	1972	1972	0	0.0
			.text	610544	610528	-16	-0.0
linux	all-clusters-app	debug	(read only)	2402593	2402593	0	0.0
			(read/write)	144600	144600	0	0.0
			.bss	59104	59104	0	0.0
			.data	1392	1392	0	0.0
			.data.rel.ro	78392	78392	0	0.0
			.dynamic	592	592	0	0.0
			.got	4160	4160	0	0.0
			.init	27	27	0	0.0
			.init_array	912	912	0	0.0
			.rodata	205157	205157	0	0.0
			.text	2034690	2034690	0	0.0
	bridge-app	debug+rpc	(read only)	1728061	1728061	0	0.0
			(read/write)	92560	92560	0	0.0
			.bss	47400	47400	0	0.0
			.data	2048	2048	0	0.0
			.data.rel.ro	38040	38040	0	0.0
			.dynamic	592	592	0	0.0
			.got	3912	3912	0	0.0
			.init	27	27	0	0.0
			.init_array	544	544	0	0.0
			.rodata	141684	141684	0	0.0
			.text	1470597	1470597	0	0.0
	chip-tool	debug	(read only)	9299085	9299085	0	0.0
			(read/write)	288008	288008	0	0.0
			.bss	25440	25440	0	0.0
			.data	1136	1136	0	0.0
			.data.rel.ro	255424	255424	0	0.0
			.dynamic	608	608	0	0.0
			.got	4760	4760	0	0.0
			.init	27	27	0	0.0
			.init_array	608	608	0	0.0
			.rodata	497045	497045	0	0.0
			.text	8180789	8180789	0	0.0
	chip-tool-ipv6only	arm64	(read only)	9000804	9000804	0	0.0
			(read/write)	400753	400753	0	0.0
			.bss	43761	43761	0	0.0
			.data	1192	1192	0	0.0
			.data.rel.ro	300192	300192	0	0.0
			.dynamic	560	560	0	0.0
			.got	51832	51832	0	0.0
			.init	24	24	0	0.0
			.init_array	192	192	0	0.0
			.rodata	473020	473020	0	0.0
			.text	7650052	7650052	0	0.0
	door-lock-app	debug	(read only)	1943097	1943097	0	0.0
			(read/write)	119008	119008	0	0.0
			.bss	50400	50400	0	0.0
			.data	1056	1056	0	0.0
			.data.rel.ro	62168	62168	0	0.0
			.dynamic	592	592	0	0.0
			.got	4096	4096	0	0.0
			.init	27	27	0	0.0
			.init_array	664	664	0	0.0
			.rodata	173724	173724	0	0.0
			.text	1620914	1620914	0	0.0
	lighting-app	debug+rpc	(read only)	2078545	2078545	0	0.0
			(read/write)	124400	124400	0	0.0
			.bss	51328	51328	0	0.0
			.data	1472	1472	0	0.0
			.data.rel.ro	66136	66136	0	0.0
			.dynamic	608	608	0	0.0
			.got	4128	4128	0	0.0
			.init	27	27	0	0.0
			.init_array	712	712	0	0.0
			.rodata	166108	166108	0	0.0
			.text	1757010	1757010	0	0.0
	ota-provider-app	debug	(read only)	1875441	1875441	0	0.0
			(read/write)	114640	114640	0	0.0
			.bss	50208	50208	0	0.0
			.data	1352	1352	0	0.0
			.data.rel.ro	57448	57448	0	0.0
			.dynamic	608	608	0	0.0
			.got	4352	4352	0	0.0
			.init	27	27	0	0.0
			.init_array	616	616	0	0.0
			.rodata	158995	158995	0	0.0
			.text	1565906	1565906	0	0.0
	ota-requestor-app	debug	(read only)	1886649	1886649	0	0.0
			(read/write)	116952	116952	0	0.0
			.bss	51360	51360	0	0.0
			.data	1480	1480	0	0.0
			.data.rel.ro	58696	58696	0	0.0
			.dynamic	592	592	0	0.0
			.got	4152	4152	0	0.0
			.init	27	27	0	0.0
			.init_array	624	624	0	0.0
			.rodata	152516	152516	0	0.0
			.text	1585298	1585298	0	0.0
	shell	debug	(read only)	2371225	2371225	0	0.0
			(read/write)	146832	146832	0	0.0
			.bss	67176	67176	0	0.0
			.data	864	864	0	0.0
			.data.rel.ro	73128	73128	0	0.0
			.dynamic	592	592	0	0.0
			.got	4144	4144	0	0.0
			.init	27	27	0	0.0
			.init_array	896	896	0	0.0
			.rodata	205138	205138	0	0.0
			.text	2009554	2009554	0	0.0
	thermostat-no-ble	arm64	(read only)	2169076	2169076	0	0.0
			(read/write)	148385	148385	0	0.0
			.bss	65121	65121	0	0.0
			.data	1072	1072	0	0.0
			.data.rel.ro	75032	75032	0	0.0
			.dynamic	560	560	0	0.0
			.got	4208	4208	0	0.0
			.init	24	24	0	0.0
			.init_array	352	352	0	0.0
			.rodata	133044	133044	0	0.0
			.text	1817824	1817824	0	0.0
	tv-app	debug	(read only)	2609505	2609505	0	0.0
			(read/write)	250744	250744	0	0.0
			.bss	167904	167904	0	0.0
			.data	3200	3200	0	0.0
			.data.rel.ro	73608	73608	0	0.0
			.dynamic	592	592	0	0.0
			.got	4528	4528	0	0.0
			.init	27	27	0	0.0
			.init_array	880	880	0	0.0
			.rodata	199293	199293	0	0.0
			.text	2236306	2236306	0	0.0
mbed	lock-app	CY8CPROTO_062_4343W+release	(read only)	6224	6224	0	0.0
			(read/write)	2350972	2350908	-64	-0.0
			.bss	187036	187036	0	0.0
			.data	5784	5784	0	0.0
			.text	1313572	1313508	-64	-0.0
nrfconnect	all-clusters-app	nrf52840dk_nrf52840	(read/write)	1039911	1076443	36532	3.5
			bss	125700	127816	2116	1.7
			rodata	135792	141716	5924	4.4
			text	701180	729484	28304	4.0
p6	all-clusters-app	default	(read/write)	2489872	2489888	16	0.0
			.bss	118608	118608	0	0.0
			.data	2696	2696	0	0.0
			.text	1448136	1448152	16	0.0
	light-app	default	(read/write)	2397016	2397016	0	0.0
			.bss	112920	112920	0	0.0
			.data	2544	2544	0	0.0
			.text	1355280	1355280	0	0.0
	lock-app	default	(read/write)	2360528	2360528	0	0.0
			.bss	112664	112664	0	0.0
			.data	2504	2504	0	0.0
			.text	1318792	1318792	0	0.0
qpg	lighting-app	qpg6105+debug	(read only)	601984	601984	0	0.0
			(read/write)	146936	146936	0	0.0
			.bss	91064	91064	0	0.0
			.data	1132	1132	0	0.0
			.text	596664	596664	0	0.0
	lock-app	qpg6105+debug	(read only)	567684	567684	0	0.0
			(read/write)	146936	146936	0	0.0
			.bss	91072	91072	0	0.0
			.data	1084	1084	0	0.0
			.text	562364	562364	0	0.0
	persistent-storage-app	qpg6105+debug	(read only)	99520	99520	0	0.0
			(read/write)	146940	146940	0	0.0
			.bss	24004	24004	0	0.0
			.data	176	176	0	0.0
			.text	94200	94200	0	0.0
telink	lighting-app	tlsr9518adk80d	(read/write)	883982	883982	0	0.0
			bss	86280	86280	0	0.0
			noinit	37160	37160	0	0.0
			text	625098	625100	2	0.0