From f411b95ffa02d90321703cf634dae91fec4befbc Mon Sep 17 00:00:00 2001 From: Raphael Dupont Date: Tue, 30 May 2023 16:21:12 +0200 Subject: [PATCH] samples: Add a section on encryption in mcuboot_config.template.h Signed-off-by: Raphael Dupont --- boot/bootutil/src/encrypted_priv.h | 6 +++++ .../mcuboot_config/mcuboot_config.template.h | 27 +++++++++++++++++++ 2 files changed, 33 insertions(+) diff --git a/boot/bootutil/src/encrypted_priv.h b/boot/bootutil/src/encrypted_priv.h index b07abcec31..d6be88079e 100644 --- a/boot/bootutil/src/encrypted_priv.h +++ b/boot/bootutil/src/encrypted_priv.h @@ -1,3 +1,9 @@ +/* + * SPDX-License-Identifier: Apache-2.0 + * + * Copyright (c) 2018-2019 JUUL Labs + * Copyright (c) 2019-2021 Arm Limited + */ #ifndef H_ENCRYPTED_PRIV_ #define H_ENCRYPTED_PRIV_ diff --git a/samples/mcuboot_config/mcuboot_config.template.h b/samples/mcuboot_config/mcuboot_config.template.h index 989ec61838..be8ab38f40 100644 --- a/samples/mcuboot_config/mcuboot_config.template.h +++ b/samples/mcuboot_config/mcuboot_config.template.h @@ -34,6 +34,33 @@ /* #define MCUBOOT_SIGN_EC256 */ +/* + * Encryption types + * + * You must choose one key encryption type and provide a private key + * when image encryption is enable (MCUBOOT_ENC_IMAGES). + * + * For examples, see : + * + * boot/espressif/keys.c + * boot/zephyr/keys.c + */ + +/* Uncomment to enable image encryption. */ +/* #define MCUBOOT_ENC_IMAGES */ + +/* Uncomment for RSA encryption support. */ +/* #define MCUBOOT_ENCRYPT_RSA */ + +/* Uncomment for ECIES-P256 encryption support. */ +/* #define MCUBOOT_ENCRYPT_EC256 */ + +/* Uncomment for ECIES-X25519 encryption support. */ +/* #define MCUBOOT_ENCRYPT_X25519 */ + +/* Uncomment for AES-128 Keywrap encryption support. */ +/* #define MCUBOOT_ENCRYPT_KW */ + /* * Upgrade mode *