Commit e5d8640c authored by Dominik Ermel's avatar Dominik Ermel Committed by Jamie
Browse files

zephyr: Add missing selection for allowed SHA algorithms 



All of ED25519 backends allow SHA512, together with SHA512.
The ED25519 internally requires SHA512 for calculations, but
image may be hashed with any SHA algorithm.

The PSA has also been missing selecting of any SHA as allowed.

Signed-off-by: default avatarDominik Ermel <dominik.ermel@nordicsemi.no>
parent b0c7df9c

boot/zephyr/Kconfig

+7 −2
Original line number Diff line number Diff line
@@ -287,11 +287,13 @@ choice BOOT_ED25519_IMPLEMENTATION 
config BOOT_ED25519_TINYCRYPT

	bool "Use tinycrypt"

	select BOOT_USE_TINYCRYPT

	select BOOT_IMG_HASH_ALG_SHA256_ALLOW

	select BOOT_IMG_HASH_ALG_SHA512_ALLOW



config BOOT_ED25519_MBEDTLS

	bool "Use mbedTLS"

	select BOOT_USE_MBEDTLS

	select BOOT_IMG_HASH_ALG_SHA256_ALLOW

	select BOOT_IMG_HASH_ALG_SHA512_ALLOW

	select MBEDTLS

	select MBEDTLS_SHA512
@@ -302,10 +304,13 @@ config BOOT_ED25519_PSA 
	bool "Use PSA crypto"

	select MBEDTLS

	select BOOT_USE_PSA_CRYPTO

	select MBEDTLS_PSA_CRYPTO_C

	select MBEDTLS_ASN1_PARSE_C if MBEDTLS_BUILTIN

	select PSA_CRYPTO_CLIENT

	select PSA_CRYPTO_C

	select MBEDTLS_PSA_CRYPTO_C

	select MBEDTLS_ASN1_PARSE_C if MBEDTLS_BUILTIN

	select MBEDTLS_ENABLE_HEAP

	select BOOT_IMG_HASH_ALG_SHA256_ALLOW

	select BOOT_IMG_HASH_ALG_SHA512_ALLOW

	select BOOT_ED25519_PSA_DEPENDENCIES

	select BOOT_X25519_PSA_DEPENDENCIES if BOOT_ENCRYPT_IMAGE

CRA Git | Maintained and supported by SUSTech CRA and CCSE