Merge pull request #414 from danielinux/ecc521

Added support for SIGN=ECC521

Author: dgarske

.github/workflows/test-renode-fastmath-smallstack.yml

@@ -31,6 +31,9 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 WOLFBOOT_SMALL_STACK=1 SPMATH=0"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 WOLFBOOT_SMALL_STACK=1 SPMATH=0"
 
 # RSA2048 TEST
       - name: Renode Tests RSA2048

.github/workflows/test-renode-fastmath.yml

@@ -30,6 +30,10 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 SPMATH=0"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 SPMATH=0"
+
 
 # RSA2048 TEST
       - name: Renode Tests RSA2048

.github/workflows/test-renode-noasm-smallstack.yml

@@ -31,6 +31,9 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 WOLFBOOT_SMALL_STACK=1 NO_ASM=1"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 WOLFBOOT_SMALL_STACK=1 NO_ASM=1"
 
 # RSA2048 TEST
       - name: Renode Tests RSA2048

.github/workflows/test-renode-noasm.yml

@@ -30,6 +30,9 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 NO_ASM=1"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 NO_ASM=1"
 
 # ED25519 TEST
       - name: Renode Tests ED25519

.github/workflows/test-renode-nrf52.yml

@@ -34,6 +34,10 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521"
+
 # ED25519 TEST
       - name: Renode Tests ED25519
         run: ./tools/renode/docker-test.sh "SIGN=ED25519"

.github/workflows/test-renode-sha3.yml

@@ -34,6 +34,9 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 HASH=SHA3"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 HASH=SHA3"
 
 # ED25519 TEST
       - name: Renode Tests ED25519

.github/workflows/test-renode-sha384.yml

@@ -33,6 +33,9 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 HASH=SHA384"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 HASH=SHA384"
 
 # ED25519 TEST
       - name: Renode Tests ED25519

.github/workflows/test-renode-smallstack.yml

@@ -35,6 +35,10 @@ jobs:
       - name: Renode Tests ECC384
         run: ./tools/renode/docker-test.sh "SIGN=ECC384 WOLFBOOT_SMALL_STACK=1"
 
+# ECC521 TEST
+      - name: Renode Tests ECC521
+        run: ./tools/renode/docker-test.sh "SIGN=ECC521 WOLFBOOT_SMALL_STACK=1"
+
 
 # ED25519 TEST
       - name: Renode Tests ED25519

docs/Signing.md

@@ -92,6 +92,9 @@ file is in this format.
   * `--ecc384` Use ecc384 for signing the firmware. Assume that the given KEY.DER
 file is in this format.
 
+  * `--ecc521` Use ecc521 for signing the firmware. Assume that the given KEY.DER
+file is in this format.
+
   * `--rsa2048` Use rsa2048 for signing the firmware. Assume that the given KEY.DER
 file is in this format.
 

docs/compile.md

@@ -90,21 +90,17 @@ performance and activated features are affected by compile-time flags.
 By default, wolfBoot is compiled to use Ed25519 DSA. The implementation of ed25519 is smaller,
 while giving a good compromise in terms of boot-up time.
 
-Better performance can be achieved using ECDSA with curve p-256. To activate ECC256 support, use
+Better performance can be achieved using ECDSA with curve p-256.
+To activate ECC256, ECC384 or ECC521 support, use:
 
-`SIGN=ECC256`
+`SIGN=ECC256` or `SIGN=ECC384` or `SIGN=ECC521` respectively.
 
 when invoking `make`.
 
-RSA is also supported, with different key length. To activate RSA2048 or RSA4096, use:
+RSA is also supported, with different key length.
+To activate RSA2048, RSA3072 or RSA4096, use:
 
-`SIGN=RSA2048`
-
-or
-
-`SIGN=RSA4096`
-
-respectively.
+`SIGN=RSA2048` or `SIGN=RSA3072` or `SIGN=RSA4096` respectively.
 
 Ed448 is also supported via `SIGN=ED448`.
 
@@ -135,7 +131,7 @@ For more information and examples, see the [firmware update](firmware_update.md)
 
 ### Enable debug symbols
 
-To debug the bootloader, simply compile with `DEBUG=1`. The size of the bootloade will increase
+To debug the bootloader, simply compile with `DEBUG=1`. The size of the bootloader will increase
 consistently, so ensure that you have enough space at the beginning of the flash before
 `WOLFBOOT_PARTITION_BOOT_ADDRESS`.
 
@@ -168,7 +164,7 @@ Some combinations of authentication algorithms, key sizes and math configuration
 a large amount of memory to be allocated in the stack at runtime. By default, if your configuration
 falls in one of these cases, wolfBoot compilation will terminate with an explicit error.
 
-In some cases you might have enough memory available to allow large stack allocations. 
+In some cases you might have enough memory available to allow large stack allocations.
 To circumvent the compile-time checks on the maximum allowed stack size, use `WOLFBOOT_HUGE_STACK=1`.
 
 ### Disable Backup of current running firmware