[nrf noup] boot: zephyr: kconfig: Sort out dependency mess

Fixes a mess created with Kconfig options that did not have proper
dependencies that would then cause a cmake Kconfig error

Signed-off-by: Jamie McCrae <[email protected]>

Author: nordicjm

boot/zephyr/Kconfig

@@ -267,6 +267,7 @@ if BOOT_SIGNATURE_TYPE_ED25519
 config BOOT_SIGNATURE_TYPE_PURE
 	bool "Use Pure signature of image"
 	depends on BOOT_SIGNATURE_TYPE_PURE_ALLOW
+	depends on NRF_SECURITY
 	help
 	  The Pure signature is calculated directly over image rather than
 	  hash of an image.
@@ -293,6 +294,7 @@ config BOOT_ED25519_MBEDTLS
 
 config BOOT_ED25519_PSA
 	bool "Use PSA crypto"
+	depends on NRF_SECURITY
 	select BOOT_USE_PSA_CRYPTO
 	select BOOT_ED25519_PSA_DEPENDENCIES
 	select BOOT_X25519_PSA_DEPENDENCIES if BOOT_ENCRYPT_IMAGE
@@ -304,15 +306,18 @@ endchoice
 
 config BOOT_SIGNATURE_USING_KMU
 	bool "Use KMU stored keys for signature verification"
+	depends on NRF_SECURITY
+	depends on CRACEN_LIB_KMU
 	select PSA_WANT_ALG_GCM
 	select PSA_WANT_KEY_TYPE_AES
 	select PSA_WANT_AES_KEY_SIZE_256
 	select PSA_WANT_ALG_SP800_108_COUNTER_CMAC
 	select PSA_WANT_ALG_CMAC
 	select PSA_WANT_ALG_ECB_NO_PADDING
+	select BOOT_HW_KEY
 	help
-	  The MCUboot will use keys provisioned to board for signature verification
-	  instead of compiling in a key data.
+	  MCUboot will use keys provisioned to the device key management unit for signature
+	  verification instead of compiling in key data from a file.
 
 if !BOOT_SIGNATURE_USING_KMU