[nrf noup] sysbuild: Support for ED25519 including PureEdDSA

Commit adds sysbuild support for setting ED25519 signature type
for application image and Pure modifier, to the signature, that
allows to indicate that signature will be calculated over an entire
image, rather than hash of the image.

Signed-off-by: Dominik Ermel <[email protected]>

Author: de-nordic

modules/Kconfig.mcuboot

@@ -260,6 +260,16 @@ endmenu # On board MCUboot operation mode
 
 endif # BOOTLOADER_MCUBOOT
 
+menu "Sysbuild passed options"
+
+config MCUBOOT_BOOTLOADER_SIGNATURE_TYPE_ED25519
+	bool "Use ED25519 signature"
+
+config MCUBOOT_BOOTLOADER_SIGNATURE_TYPE_PURE
+	bool "Signature is verified over an image rather than sha of an image"
+
+endmenu # Sysbuild passed options
+
 menuconfig MCUBOOT_BOOTUTIL_LIB
 	bool "MCUboot utility library"
 	help

share/sysbuild/image_configurations/MAIN_image_default.cmake

@@ -37,4 +37,16 @@ if(SB_CONFIG_BOOTLOADER_MCUBOOT)
   elseif(SB_CONFIG_MCUBOOT_MODE_FIRMWARE_UPDATER)
     set_config_bool(${ZCMAKE_APPLICATION} CONFIG_MCUBOOT_BOOTLOADER_MODE_FIRMWARE_UPDATER y)
   endif()
+
+  if(SB_CONFIG_BOOT_SIGNATURE_TYPE_ED25519)
+    set_config_bool(${ZCMAKE_APPLICATION} CONFIG_MCUBOOT_BOOTLOADER_SIGNATURE_TYPE_ED25519 y)
+    if(SB_CONFIG_BOOT_SIGNATURE_TYPE_PURE)
+      set_config_bool(${ZCMAKE_APPLICATION} CONFIG_MCUBOOT_BOOTLOADER_SIGNATURE_TYPE_PURE y)
+    else()
+      set_config_bool(${ZCMAKE_APPLICATION} CONFIG_MCUBOOT_BOOTLOADER_SIGNATURE_TYPE_PURE n)
+    endif()
+  else()
+    set_config_bool(${ZCMAKE_APPLICATION} CONFIG_MCUBOOT_BOOTLOADER_SIGNATURE_TYPE_ED25519 n)
+  endif()
+
 endif()