Skip to content

Commit e869f8b

Browse files
committed
[nrf noup] bootutil: Fix configuration without key revocation
Remove the usage of validated_with variable in configuration that does not enable key revocation. Ref: NCSDK-NONE Signed-off-by: Tomasz Chyrowicz <tomasz.chyrowicz@nordicsemi.no>
1 parent 5e0f695 commit e869f8b

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

boot/bootutil/src/ed25519_psa_kmu_its.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,9 @@ int ED25519_verify(const uint8_t *message, size_t message_len,
118118
BOOT_LOG_INF("ED25519_verify: trying manufacturing application key ID 0x%" PRIx32,
119119
(uint32_t)manufacturing_app_key_id);
120120
/* Do not revoke application keys - pretend as if the first generation key was used */
121+
#if defined(CONFIG_BOOT_KMU_KEYS_REVOCATION)
121122
validated_with = 0;
123+
#endif
122124
status = psa_verify_message(manufacturing_app_key_id, PSA_ALG_PURE_EDDSA, message,
123125
message_len, signature,
124126
EDDSA_SIGNAGURE_LENGTH);

0 commit comments

Comments
 (0)