[nrf noup] zephyr: Remove dependency on key import when KMU is used#500

Open

de-nordic wants to merge 156 commits intonrfconnect:mainfrom

de-nordic:not-needed-import-when-kmu

Commits on Aug 1, 2025

[nrf fromlist] bootutil: Move all encryption TLV helper identifiers into one place

de-nordic
authored and
rlubos
committed
[nrf fromlist] bootutil: Remove redundant ALIGN definitions

de-nordic
authored and
rlubos
committed
[nrf fromlist] bootutil: Replace local identifiers with common definitions

de-nordic
authored and
rlubos
committed
[nrf fromlist] bootutil: Fix boot_scramble_region escaping flash area

de-nordic
authored and
rlubos
committed
[nrf fromtree] scripts: imgtool: Compression of no header-padded images

nordic-mik7
authored and
rlubos
committed
[nrf fromlist] zephyr: Fix pinreset trigger

tomchy
authored and
rlubos
committed
[nrf fromtree] bootutil: loader: overwrite-only mode fix for trailer erase

nordic-mik7
authored and
rlubos
committed
[nrf fromtree] boot: zephyr: Refactor DFU entry logic

sayoojkkarun
authored and
rlubos
committed
[nrf fromtree] bootutil: Improve logging coverage

de-nordic
authored and
rlubos
committed
[nrf fromtree] zephyr: Improve logging

de-nordic
authored and
rlubos
committed
[nrf fromtree] bootutil: Small cleanup in image.h

de-nordic
authored and
rlubos
committed
[nrf fromtree] doc: Add information on supporting SHA512 with ECIES-X25519

de-nordic
authored and
rlubos
committed
[nrf fromtree] bootutil: Add support for HAMC-SHA512 with ECIES-X25519

de-nordic
authored and
rlubos
committed
[nrf fromtree] zephyr: Support for HKDF/HMAC with SHA512

de-nordic
authored and
rlubos
committed
[nrf fromtree] imgtool: Add support for HMAC/HKDF-SHA512 with ECIES-X25519

de-nordic
authored and
rlubos
committed
[nrf fromtree] bootutil: Use flash base address for direct hash

tomchy
authored and
rlubos
committed
[nrf fromlist] boot: zephyr: boards: Remove outdated nrf54l15pdk board config

nordicjm
authored and
rlubos
committed
[nrf fromlist] bootutil: Unify app_max_size() implementations

tomchy
authored and
rlubos
committed
[nrf fromlist] zephyr: boards: nrf - remove redundant multithreading configuration

nordic-mik7
authored and
rlubos
committed
[nrf fromtree] boot: zephyr: RAM cleanup debug loop

michalek-no
authored and
rlubos
committed
[nrf fromlist] zephyr: Improve SHA support selectors

de-nordic
authored and
rlubos
committed
[nrf fromtree] loader: Allow to specify slot number in version

tomchy
authored and
rlubos
committed
[nrf fromtree] zephyr: Enable building ECDSA PSA variant

ahasztag
authored and
rlubos
committed
[nrf noup] github: Add a commit tags check workflow

carlescufi
authored and
rlubos
committed
[nrf noup] zephyr: Remove duplication from cmake

sigvartmh
authored and
rlubos
committed
[nrf noup] zephyr: add 'minimal' configuration files

mbolivar-nordic
authored and
rlubos
committed
[nrf noup] boards: add support for Thingy:91

bjda
authored and
rlubos
committed
[nrf noup] zephyr: Restore default RTC user channel count

Damian-Nordic
authored and
rlubos
committed
[nrf noup] boards: thingy91x: add board config

maxd-nordic
authored and
rlubos
committed
[nrf noup] treewide: add NCS partition manager support

SebastianBoe
authored and
rlubos
committed
[nrf noup] boot: nrf53-specific customizations

sigvartmh
authored and
rlubos
committed
[nrf noup] zephyr: clean peripherals state before boot

nvlsianpu
authored and
rlubos
committed
[nrf noup] zephyr: Clean up non-secure RAM if enabled

sigvartmh
authored and
rlubos
committed
[nrf noup] loader: Fix reading reset addr to support ext flash

chrta
authored and
rlubos
committed
[nrf noup] loader: Do not check reset vector for XIP image

de-nordic
authored and
rlubos
committed
[nrf noup] zephyr: Add RAM flash configuration to cache for sysbuild

nordicjm
authored and
rlubos
committed
[nrf noup] zephyr: Boot even if EXT_ABI is not provided

sigvartmh
authored and
rlubos
committed
[nrf noup] loader: Add firmware version check downgrade prevention

sigvartmh
authored and
rlubos
committed
[nrf noup] boards: thingy53: disable GPIO ISR support

nika-nordic
authored and
rlubos
committed
[nrf noup] loader: work-around for multi-image builds

sigvartmh
authored and
rlubos
committed
[nrf noup] loader: Fix missing PCD define check

nordicjm
authored and
rlubos
committed
[nrf noup] boot: Add support for NSIB and multi-image

sigvartmh
authored and
rlubos
committed
[nrf noup] sysflash: Move partition manager definitions to pm_sysflash.h

de-nordic
authored and
rlubos
committed
[nrf noup] sysflash: Add support for three images

de-nordic
authored and
rlubos
committed
[nrf noup] loader: introduced cleanup of unusable secondary slot

nvlsianpu
authored and
rlubos
committed
[nrf noup] loader: remove cleanup for direct xip mode

gchwier
authored and
rlubos
committed
[nrf noup] boards: thingy91x: enable serial recovery

maxd-nordic
authored and
rlubos
committed
[nrf noup] boot: zephyr: Disable boot banner if NCS_BOOT_BANNER is used
rlubos
committed
[nrf noup] boot/zephyr: fix fw_info search

nvlsianpu
authored and
rlubos
committed
[nrf noup] boot: zephyr: Add NCS boot banner

nordicjm
authored and
rlubos
committed
[nrf noup] boot/../loader: skip downgrade prevention for s1/s0

nvlsianpu
authored and
rlubos
committed
[nrf noup] boot/../loader: reboot after updating s0/s1

nvlsianpu
authored and
rlubos
committed
[nrf noup] bootutil: loader: Fix netcore address checking

nordicjm
authored and
rlubos
committed
[nrf noup] boards: nrf54l15dk: Disable FPROTECT

nvlsianpu
authored and
rlubos
committed
[nrf noup] boot: Add shared crypto for ECDSA and SHA

sigvartmh
authored and
rlubos
committed
[nrf noup] boot: zephyr: Do not lock PCD region with TF-M

MarkusLassila
authored and
rlubos
committed
[nrf noup] treewide: Add support for sysbuild assigned images

nordicjm
authored and
rlubos
committed
[nrf noup] boot: bootutil: loader: Add s0/s1 checking of MCUboot image

nordicjm
authored and
rlubos
committed
[nrf noup] boards: Thingy:91 X release config

maxd-nordic
authored and
rlubos
committed
[nrf noup] workflows: Add a backport workflow

carlescufi
authored and
rlubos
committed
[nrf noup] boot/zephyr: add nrf54l15dk ext flash configs

michalek-no
authored and
rlubos
committed
[nrf noup] boot/zephyr/Kconfig: conditionally disable BOOT_MAX_IMG_SECTORS_AUTO

nvlsianpu
authored and
rlubos
committed
[nrf noup] boot: zephyr: serial_recovery: Add nRF5340 Kconfig override

nordicjm
authored and
rlubos
committed
[nrf noup] boot: Remove child/parent references

nordicjm
authored and
rlubos
committed
[nrf noup] sysflash: Add missing _FLASH_0_ID definitions

de-nordic
authored and
rlubos
committed
[nrf noup] boot: zephyr: boards: Disabled NCS boot banner for thingy 53

kkasperczyk-no
authored and
rlubos
committed
[nrf noup] partition_manager: Add support for internal flash netcore DFU

hellesvik-nordic
authored and
rlubos
committed
[nrf noup] zephyr: sdk-nrf specific overrides on PSA Kconfigs

de-nordic
authored and
rlubos
committed
[nrf noup] zephyr: Fix path variables

nordicjm
authored and
rlubos
committed
[nrf noup] zephyr: Use mbedTLS specific C functions with RSA

de-nordic
authored and
rlubos
committed
[nrf noup] boot/zephyr: nrf54h20dk board support

nordic-mik7
authored and
rlubos
committed
[nrf noup] boot/zephyr: nrf54h20dk cleanup adaptations

nordic-mik7
authored and
rlubos
committed
[nrf noup] boot/zephyr/nrf_cleanup: cleanup uarte pins

nvlsianpu
authored and
rlubos
committed
[nrf noup] boot/zephyr/Kconfig: fix MBEDTLS_CFG_FILE value

nvlsianpu
authored and
rlubos
committed
[nrf noup] nrf_cleanup: nRF54l: disable cleanup on UARTE pins

nvlsianpu
authored and
rlubos
committed
[nrf noup] boot: zephyr: boards: nrf54lm20pdk

michalek-no
authored and
rlubos
committed
[nrf noup] nrf_cleanup: nRF54h: fix missing peripheral cleanup

ahasztag
authored and
rlubos
committed
[nrf noup] zephyr: Add support for compressed image updates

nordicjm
authored and
rlubos
committed
[nrf noup] boot: zephyr: Add experimental selection to compression

nordicjm
authored and
rlubos
committed
[nrf noup] decompression: Align to changes in nrfcompress API

nordic-mik7
authored and
rlubos
committed
[nrf noup] boot: zephyr: Add bm firmware loader code

nordicjm
authored and
rlubos
committed
[nrf noup] boot: Provide default configuration for nRF54H20

tomchy
authored and
rlubos
committed
[nrf noup] boot: Add retry for image verification

adsz-nordic
authored and
rlubos
committed
[nrf noup] bootutil: Add support for KMU stored ED25519 signature key

de-nordic
authored and
rlubos
committed
[nrf noup] boot: bootutil: Allow configuring number of KMU keys

nordicjm
authored and
rlubos
committed
[nrf noup] bootutil: key revocation

michalek-no
authored and
rlubos
committed
[nrf noup] boot: zephyr: Kconfig dependencies for PSA LITE

michalek-no
authored and
rlubos
committed
[nrf noup] Added BOOT_SIGNATURE_USING_ITS for ecdsa configuration

ahasztag
authored and
rlubos
committed

Commits on Aug 5, 2025

Commits on Aug 6, 2025

Commits on Aug 7, 2025

[nrf noup] boot/zephyr/nrf_cleanup: fix index error

nordic-auko
authored and
nvlsianpu
committed

Commits on Aug 8, 2025

Commits on Aug 11, 2025

[nrf fromlist] boot/boot_serial: build-time skip of the erasing of img status page
nvlsianpu
committed

Commits on Aug 14, 2025

[nrf fromtree] bootutil: Fix scratch scrambling

nordic-mik7
authored and
rlubos
committed

Commits on Aug 15, 2025

[nrf noup] boot: zephyr: Adjust PSA requirements for PSA_CORE_LITE

Vge0rge
authored and
nordicjm
committed

Commits on Aug 18, 2025

[nrf fromtree] bootutil: Fixed security counter overflow detected to late

ahasztag
authored and
nordicjm
committed
[nrf noup] zephyr: hw security counter limited set by default

ahasztag
authored and
nordicjm
committed

Commits on Aug 19, 2025

Commits on Aug 21, 2025

Commits on Aug 28, 2025

[nrf noup] zephyr: boards: nrf54lm20dk_nrf54lm20a_cpuapp.conf

michalek-no
authored and
nvlsianpu
committed

Commits on Aug 29, 2025

[nrf fromtree] loader: Add boot hook for slot selection

tomchy
authored and
anangl
committed
[nrf fromtree] zephyr: Add support for slot selection boot hook

tomchy
authored and
anangl
committed
[nrf noup] bootloader: Add bootloader requests

tomchy
authored and
anangl
committed

Commits on Sep 4, 2025

[nrf fromtree] bootutil: Fix bootutil_aes_ctr_drop memset usage

de-nordic
authored and
nvlsianpu
committed

Commits on Sep 8, 2025

Revert "[nrf noup] zephyr: add 'minimal' configuration files"

adsz-nordic
authored and
nordicjm
committed

Commits on Sep 9, 2025

[nrf fromtree] boot: Enable Encryption with PSA + ECDSA

ahasztag
authored and
nordicjm
committed
[nrf noup] boot: Improve bootloader request handling

tomchy
authored and
nordicjm
committed
[nrf noup] Support for ed25519 signature verification using ITS

nordic-mik7
authored and
nvlsianpu
committed

Commits on Sep 10, 2025

Revert "[nrf noup] Support for ed25519 signature verification using ITS"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] boot: Use NCS_ prefix for sdk-nrf specific Kconfigs"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] Added BOOT_SIGNATURE_USING_ITS for ecdsa configuration"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] bootutil: key revocation"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] boot: bootutil: Allow configuring number of KMU keys"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] bootutil: Add support for KMU stored ED25519 signature key"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] boot: zephyr: Add experimental selection to compression"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] decompression: Align to changes in nrfcompress API"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] zephyr: Add support for compressed image updates"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] boot: Improve bootloader request handling"

tomchy
authored and
rlubos
committed
Revert "[nrf noup] bootloader: Add bootloader requests"

tomchy
authored and
rlubos
committed
[nrf fromtree] boot: Add VID and CID checks

tomchy
authored and
rlubos
committed
[nrf fromtree] imgtool: Add support for VID and CID

tomchy
authored and
rlubos
committed
[nrf noup] bootloader: Add bootloader requests

tomchy
authored and
rlubos
committed
[nrf noup] boot: Improve bootloader request handling

tomchy
authored and
rlubos
committed
[nrf noup] zephyr: Add support for compressed image updates

nordicjm
authored and
rlubos
committed
[nrf noup] decompression: Align to changes in nrfcompress API

nordic-mik7
authored and
rlubos
committed
[nrf noup] boot: zephyr: Add experimental selection to compression

nordicjm
authored and
rlubos
committed
[nrf noup] bootutil: Add support for KMU stored ED25519 signature key

de-nordic
authored and
rlubos
committed
[nrf noup] boot: bootutil: Allow configuring number of KMU keys

nordicjm
authored and
rlubos
committed
[nrf noup] bootutil: key revocation

michalek-no
authored and
rlubos
committed
[nrf noup] Added BOOT_SIGNATURE_USING_ITS for ecdsa configuration

ahasztag
authored and
rlubos
committed
[nrf noup] boot: Use NCS_ prefix for sdk-nrf specific Kconfigs

de-nordic
authored and
rlubos
committed
[nrf noup] Support for ed25519 signature verification using ITS

nordic-mik7
authored and
rlubos
committed
[nrf noup] zephyr: Add basic UUID checks implementation

tomchy
authored and
rlubos
committed

Commits on Sep 11, 2025

[nrf noup] boot: Fix test failing with bootloader requests

ahasztag
authored and
nvlsianpu
committed

Commits on Sep 12, 2025

[nrf noup] bootloader: Fix logging in bootloader requests module

ahasztag
authored and
nvlsianpu
committed
[nrf noup] bootutil: Locking KMU keys

de-nordic
authored and
nvlsianpu
committed
[nrf noup] zephyr: Remove dependency on key import when KMU is used
de-nordic
committed