Skip to content

[nrf noup] Sysbuild support for MCUboot crypto backend selection #2056

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed

[nrf noup] Sysbuild support for MCUboot crypto backend selection #2056

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions share/sysbuild/images/bootloader/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,35 @@ config BOOT_SIGNATURE_TYPE_ED25519

endchoice

choice BOOT_CRYPTO_LIBRARY
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this goes in sdk-nrf under sysbuild/Kconfig.sysbuild

prompt "Library used by cryptographic functions of MCUboot"
default BOOT_CRYPTO_LIBRARY_DEFAULT

config BOOT_CRYPTO_LIBRARY_PSA
bool "Enforce use of PSA as cryptographic library"

config BOOT_CRYPTO_LIBRARY_DEFAULT
bool "Use whatever library used, by default, to support selected algorithm"

endchoice

# Dependencies that are required by BOOT_CRYPTO_LIBRARY_PSA in contest of sdk-nrf
if BOOT_CRYPTO_LIBRARY_PSA

config MBEDTLS
bool
default n

config MBEDTLS_PSA_CRYPTO_C
bool
default y

config NRF_SECURITY
bool
default y
Comment on lines +71 to +83
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this does not do anything to the target image, these can go


endif

config BOOT_SIGNATURE_KEY_FILE
string "Signing PEM key file" if !BOOT_SIGNATURE_TYPE_NONE
default "$(ZEPHYR_MCUBOOT_MODULE_DIR)/root-ec-p256.pem" if BOOT_SIGNATURE_TYPE_ECDSA_P256
Expand Down
Loading