manifest: mcuboot: Add RSA support

-This manifest update adds RSA support using PSA core lite for the
 following devices
 -nRF52 series
 -nRF53 series
 -nRF91 series
 -nRF54 series
-Adds sysbuild configurations for RSA usage propagated to
 MCUboot

Signed-off-by: Frank Audun Kvamtrø <frank.kvamtro@nordicsemi.no>

Author: frkv

sysbuild/CMakeLists.txt

@@ -392,6 +392,22 @@ function(${SYSBUILD_CURRENT_MODULE_NAME}_pre_cmake)
       endforeach()
     endif()
 
+    if(SB_CONFIG_BOOT_SIGNATURE_TYPE_NONE)
+      set_config_bool(mcuboot CONFIG_BOOT_SIGNATURE_TYPE_NONE y)
+      set_config_bool(mcuboot CONFIG_PSA_CRYPTO y)
+    endif()
+
+    if(SB_CONFIG_SOC_SERIES_NRF53 OR SB_CONFIG_SOC_SERIES_NRF91 OR SB_CONFIG_SOC_SERIES_NRF52)
+      if(SB_CONFIG_BOOT_SIGNATURE_TYPE_RSA)
+        set_config_bool(mcuboot CONFIG_BOOT_SIGNATURE_TYPE_RSA y)
+        set_config_bool(mcuboot CONFIG_PSA_CRYPTO y)
+        set_config_bool(mcuboot CONFIG_PSA_CORE_LITE y)
+        set_config_bool(mcuboot CONFIG_PSA_CRYPTO_DRIVER_OBERON y)
+        set_config_bool(mcuboot CONFIG_PSA_CRYPTO_DRIVER_CC3XX n)
+        set_config_bool(mcuboot CONFIG_HW_CC3XX n)
+      endif()
+    endif()
+
     # The NRF54LX goes with PSA crypto by default
     if(SB_CONFIG_SOC_SERIES_NRF54L)
       if(SB_CONFIG_BOOT_SIGNATURE_TYPE_NONE)
@@ -433,6 +449,11 @@ function(${SYSBUILD_CURRENT_MODULE_NAME}_pre_cmake)
         else()
           set_config_bool(mcuboot CONFIG_PSA_USE_CRACEN_HASH_DRIVER y)
         endif()
+      elseif(SB_CONFIG_BOOT_SIGNATURE_TYPE_RSA)
+        set_config_bool(mcuboot CONFIG_BOOT_SIGNATURE_TYPE_RSA y)
+        set_config_bool(mcuboot CONFIG_PSA_CRYPTO y)
+        set_config_bool(mcuboot CONFIG_PSA_CORE_LITE y)
+        set_config_bool(mcuboot CONFIG_BOOT_SIGNATURE_USING_KMU n)
       endif()
     endif()
 

west.yml

@@ -130,7 +130,7 @@ manifest:
           compare-by-default: true
     - name: mcuboot
       repo-path: sdk-mcuboot
-      revision: 91521590c381f25d095b8486303c422f52c75bab
+      revision: d2b3671987d1ca54492afe560c2444c3a9dc3000
       path: bootloader/mcuboot
     - name: qcbor
       url: https://github.com/laurencelundblade/QCBOR