Skip to content

Commit 861679b

Browse files
committed
[nrf noup] boot: zephyr: deprecate non-PSA ECDSA/Ed25519 implementations
These are not implementations that we want to support, so deprecate them for further removal. The current RSA implementation must be deprecated and removed as well but not deprecating it yet because it's the only RSA implementation option at the moment. We can deprecate and remove it once we have a proper PSA alternative. Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
1 parent 01e4a1c commit 861679b

1 file changed

Lines changed: 13 additions & 8 deletions

File tree

boot/zephyr/Kconfig

Lines changed: 13 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -303,23 +303,26 @@ choice BOOT_ECDSA_IMPLEMENTATION
303303
default BOOT_ECDSA_TINYCRYPT
304304

305305
config BOOT_ECDSA_NRF_OBERON
306-
bool "use nrf oberon SW crypto."
307-
select BOOT_USE_NRF_OBERON
306+
bool "use nrf oberon SW crypto. [DEPRECATED]"
307+
select DEPRECATED
308+
select BOOT_USE_NRF_OBERON
308309

309310
config BOOT_ECDSA_TINYCRYPT
310-
bool "Use tinycrypt"
311+
bool "Use tinycrypt [DEPRECATED]"
312+
select DEPRECATED
311313
select BOOT_USE_TINYCRYPT
312314

313315
config BOOT_ECDSA_CC310
314-
bool "Use CC310"
316+
bool "Use CC310 [DEPRECATED]"
315317
depends on HAS_HW_NRF_CC310
318+
select DEPRECATED
316319
select BOOT_USE_NRF_CC310_BL
317320
select NRF_CC310_BL
318321
select NRFXLIB_CRYPTO
319322
select BOOT_USE_CC310
320323

321324
config BOOT_ECDSA_PSA
322-
bool "Use psa cryptoo"
325+
bool "Use PSA Crypto"
323326
depends on PSA_CRYPTO
324327
select BOOT_USE_PSA_CRYPTO
325328
select BOOT_IMG_HASH_ALG_SHA256_ALLOW if !PSA_CORE_LITE
@@ -359,13 +362,15 @@ choice BOOT_ED25519_IMPLEMENTATION
359362
default BOOT_ED25519_TINYCRYPT
360363

361364
config BOOT_ED25519_TINYCRYPT
362-
bool "Use tinycrypt"
365+
bool "Use tinycrypt [DEPRECATED]"
366+
select DEPRECATED
363367
select BOOT_USE_TINYCRYPT
364368
select BOOT_IMG_HASH_ALG_SHA256_ALLOW
365369
select BOOT_IMG_HASH_ALG_SHA512_ALLOW
366370

367371
config BOOT_ED25519_MBEDTLS
368-
bool "Use mbedTLS"
372+
bool "Use mbedTLS [DEPRECATED]"
373+
select DEPRECATED
369374
select BOOT_USE_MBEDTLS
370375
select BOOT_IMG_HASH_ALG_SHA256_ALLOW
371376
select BOOT_IMG_HASH_ALG_SHA512_ALLOW
@@ -375,7 +380,7 @@ config BOOT_ED25519_MBEDTLS
375380
select BOOT_AES_MBEDTLS_DEPENDENCIES if MBEDTLS_BUILTIN && BOOT_ENCRYPT_IMAGE
376381

377382
config BOOT_ED25519_PSA
378-
bool "Use PSA crypto"
383+
bool "Use PSA Crypto"
379384
depends on PSA_CRYPTO
380385
select BOOT_USE_PSA_CRYPTO
381386
select MBEDTLS_ASN1_PARSE_C

0 commit comments

Comments
 (0)