Skip to content

Commit 39c6b14

Browse files
de-nordicgithub-actions[bot]
authored andcommitted
[nrf noup] zephyr: Enforce HMAC-SHA512 for NRF54L with X25519
ECIES-X25519 key exchange on NRF54L will be using HMAC-SHA512 for MAC tagging encryption key. Signed-off-by: Dominik Ermel <[email protected]> (cherry picked from commit 8b2d04c)
1 parent 7b07ea7 commit 39c6b14

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

boot/zephyr/Kconfig

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -728,6 +728,7 @@ if BOOT_ENCRYPT_X25519 && BOOT_USE_PSA_CRYPTO
728728

729729
choice BOOT_HMAC_SHA
730730
prompt "SHA used for HMAC and HKDF in encryption key exchange"
731+
default BOOT_HMAC_SHA512 if BOOT_ENCRYPT_X25519 && (SOC_NRF54L15_CPUAPP || SOC_NRF54LM20A_ENGA_CPUAPP)
731732
default BOOT_HMAC_SHA256
732733
help
733734
HMAC/HKDF sha algorithm may be selected to synchronize sha

0 commit comments

Comments
 (0)