Skip to content

Commit d550335

Browse files
committed
[nrf noup] bootutil: Provide support for SHA512 with ED25519
Use SHA512 directly calculated over image with the ED25519 signature. Signed-off-by: Dominik Ermel <[email protected]>
1 parent 856d7aa commit d550335

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

boot/zephyr/Kconfig

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ config BOOT_PSA_IMG_HASH_ALG_SHA256_DEPENDENCIES
8181
config BOOT_ED25519_PSA_DEPENDENCIES
8282
bool
8383
default n
84-
select PSA_WANT_ALG_SHA_256
84+
select PSA_WANT_ALG_SHA_256 if BOOT_IMG_HASH_ALG_SHA256
8585
select PSA_WANT_ALG_SHA_512
8686
select PSA_WANT_ALG_PURE_EDDSA
8787
select PSA_WANT_ECC_TWISTED_EDWARDS_255
@@ -228,8 +228,13 @@ endif
228228

229229
config BOOT_SIGNATURE_TYPE_ED25519
230230
bool "Edwards curve digital signatures using ed25519"
231+
help
232+
This is ed25519 signature calculated over SHA512 of SHA256 of application
233+
image; that is not completely correct approach as the SHA512 should be
234+
rather directly calculated over an image.
231235
select BOOT_ENCRYPTION_SUPPORT
232236
select BOOT_IMG_HASH_ALG_SHA256_ALLOW
237+
select BOOT_IMG_HASH_ALG_SHA512_ALLOW
233238

234239
if BOOT_SIGNATURE_TYPE_ED25519
235240
choice BOOT_ED25519_IMPLEMENTATION

0 commit comments

Comments
 (0)