Skip to content

Commit 5bd42cb

Browse files
ahasztagrlubos
authored andcommitted
suit: Always validate signatures for nordic envelopes
This PR disables The validation skip of SDFW, Nordic Top System Controller manifests based on LCS. This way the signature of these manifests is always checked. Signed-off-by: Artur Hadasz <[email protected]>
1 parent 4d8ca18 commit 5bd42cb

File tree

1 file changed

+1
-10
lines changed

1 file changed

+1
-10
lines changed

subsys/suit/mci/src/suit_mci_nrf54h20.c

Lines changed: 1 addition & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -188,16 +188,7 @@ static bool skip_validation(suit_manifest_role_t role)
188188
case SUIT_MANIFEST_SEC_TOP:
189189
case SUIT_MANIFEST_SEC_SDFW:
190190
case SUIT_MANIFEST_SEC_SYSCTRL:
191-
current_lcs = lcs_get(LCS_DOMAIN_ID_SECURE);
192-
193-
/* TODO:
194-
* NCSDK-26255
195-
* Once keys are provisioned, validation skip for Secure domain should be disabled.
196-
* return false;
197-
*/
198-
199-
LOG_WRN("SUIT: Validation skip is enabled for Secure domain.");
200-
break;
191+
return false;
201192

202193
case SUIT_MANIFEST_APP_ROOT:
203194
case SUIT_MANIFEST_APP_RECOVERY:

0 commit comments

Comments
 (0)