-
Couldn't load subscription status.
- Fork 1.4k
[Backport v2.8-branch] sysbuild: MCUboot with ED25519 and KMU via PSA support #18708
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
The commit will enforce building nrf54l15 with PSA enabled ED25519, with CONFIG_NRF_SECURITY=y. The commit adds SB_CONFIG_MCUBOOT_SIGNATURE_USING_KMU that allows to build MCUboot for signature verification via KMU instead of compiled in keys. Signed-off-by: Dominik Ermel <[email protected]> (cherry picked from commit 03fb52e)
Added integration of signing image with the pure signature: - New SB_CONFIG_BOOT_SIGNATURE_TYPE_PURE switch for enabling pure signature. - enforced sha512 for ed25519 on nRF54l target - requests pure signature from imgtool.py Signed-off-by: Andrzej Puzdrowski <[email protected]> Signed-off-by: Dominik Ermel <[email protected]> (cherry picked from commit cfded62)
Select KMU via sysbuild. Signed-off-by: Dominik Ermel <[email protected]> (cherry picked from commit 81c8059)
CI InformationTo view the history of this post, clich the 'edited' button above Inputs:Sources:sdk-nrf: PR head: fcbada192a5326f4709358272b6ae591c71386fe more detailssdk-nrf:
Github labels
List of changed files detected by CI (6)Outputs:ToolchainVersion: 6d50eb01ac Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped;
|
|
You can find the documentation preview for this PR at this link. It will be updated about 10 minutes after the documentation build succeeds. Note: This comment is automatically posted by the Documentation Publishing GitHub Action. |
Memory footprint analysis revealed the following potential issuessample.matter.template.release[nrf7002dk/nrf5340/cpuapp]: High ROM usage: 811946[B] - link (cc: @kkasperczyk-no @ArekBalysNordic @markaj-nordic) Note: This message is automatically posted and updated by the CI (latest/sdk-nrf/PR-18708/1) |
Backport 81c8059~3..81c8059 from #17584.