Skip to content

Commit 2c25836

Browse files
tomi-fontcarlescufi
authored andcommitted
[nrf noup] boot: zephyr: deprecate non-PSA ECDSA/Ed25519 implementations
These are not implementations that we want to support, so deprecate them for future removal. The current RSA implementation must be deprecated and removed as well but not deprecating it yet because it's the only RSA implementation option at the moment. We can deprecate and remove it once we have a proper PSA alternative. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
1 parent e3f0d99 commit 2c25836

1 file changed

Lines changed: 13 additions & 8 deletions

File tree

boot/zephyr/Kconfig

Lines changed: 13 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -303,23 +303,26 @@ choice BOOT_ECDSA_IMPLEMENTATION
303303
default BOOT_ECDSA_TINYCRYPT
304304

305305
config BOOT_ECDSA_NRF_OBERON
306-
bool "use nrf oberon SW crypto."
307-
select BOOT_USE_NRF_OBERON
306+
bool "use nrf oberon SW crypto. [DEPRECATED]"
307+
select DEPRECATED
308+
select BOOT_USE_NRF_OBERON
308309

309310
config BOOT_ECDSA_TINYCRYPT
310-
bool "Use tinycrypt"
311+
bool "Use tinycrypt [DEPRECATED]"
312+
select DEPRECATED
311313
select BOOT_USE_TINYCRYPT
312314

313315
config BOOT_ECDSA_CC310
314-
bool "Use CC310"
316+
bool "Use CC310 [DEPRECATED]"
315317
depends on HAS_HW_NRF_CC310
318+
select DEPRECATED
316319
select BOOT_USE_NRF_CC310_BL
317320
select NRF_CC310_BL
318321
select NRFXLIB_CRYPTO
319322
select BOOT_USE_CC310
320323

321324
config BOOT_ECDSA_PSA
322-
bool "Use psa cryptoo"
325+
bool "Use PSA Crypto"
323326
depends on PSA_CRYPTO
324327
select BOOT_USE_PSA_CRYPTO
325328
select BOOT_IMG_HASH_ALG_SHA256_ALLOW if !PSA_CORE_LITE
@@ -362,7 +365,8 @@ choice BOOT_ED25519_IMPLEMENTATION
362365
default BOOT_ED25519_TINYCRYPT
363366

364367
config BOOT_ED25519_TINYCRYPT
365-
bool "Use tinycrypt"
368+
bool "Use tinycrypt [DEPRECATED]"
369+
select DEPRECATED
366370
select BOOT_USE_TINYCRYPT
367371
select BOOT_IMG_HASH_ALG_SHA256_ALLOW
368372
select BOOT_IMG_HASH_ALG_SHA512_ALLOW
@@ -376,7 +380,8 @@ if BOOT_ED25519_TINYCRYPT
376380
endif
377381

378382
config BOOT_ED25519_MBEDTLS
379-
bool "Use mbedTLS"
383+
bool "Use mbedTLS [DEPRECATED]"
384+
select DEPRECATED
380385
select BOOT_USE_MBEDTLS
381386
select BOOT_IMG_HASH_ALG_SHA256_ALLOW
382387
select BOOT_IMG_HASH_ALG_SHA512_ALLOW
@@ -386,7 +391,7 @@ config BOOT_ED25519_MBEDTLS
386391
select BOOT_AES_MBEDTLS_DEPENDENCIES if MBEDTLS_BUILTIN && BOOT_ENCRYPT_IMAGE
387392

388393
config BOOT_ED25519_PSA
389-
bool "Use PSA crypto"
394+
bool "Use PSA Crypto"
390395
depends on PSA_CRYPTO
391396
select BOOT_USE_PSA_CRYPTO
392397
select MBEDTLS_ASN1_PARSE_C

0 commit comments

Comments
 (0)