Skip to content

Commit 665d7e9

Browse files
de-nordicjukkar
authored andcommitted
[nrf noup] zephyr: Enforce HMAC-SHA512 for NRF54L with X25519
ECIES-X25519 key exchange on NRF54L will be using HMAC-SHA512 for MAC tagging encryption key. Signed-off-by: Dominik Ermel <[email protected]> (cherry picked from commit 8b2d04c)
1 parent 5d86c9b commit 665d7e9

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

boot/zephyr/Kconfig

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -777,6 +777,7 @@ if BOOT_ENCRYPT_X25519 && BOOT_USE_PSA_CRYPTO
777777

778778
choice BOOT_HMAC_SHA
779779
prompt "SHA used for HMAC and HKDF in encryption key exchange"
780+
default BOOT_HMAC_SHA512 if BOOT_ENCRYPT_X25519 && (SOC_NRF54L15_CPUAPP || SOC_NRF54LM20A_ENGA_CPUAPP)
780781
default BOOT_HMAC_SHA256
781782
help
782783
HMAC/HKDF sha algorithm may be selected to synchronize sha

0 commit comments

Comments
 (0)