commit 105b59a9b91dbaeac04ef852a45206a57eed61db
author Fabio Utzig <utzig@apache.org> Mon May 13 15:08:12 2019 -0700
committer Fabio Utzig <utzig@utzig.org> Thu May 16 14:01:19 2019 -0300
tree c5f736cc4f1a4b9e098170847de5942239dd8c43
parent 61f86fd8480f5dce31df05d08c133f1012f32b13

Add Zephyr config for RSA-3072

Signed-off-by: Fabio Utzig <utzig@apache.org>

boot/zephyr/prj.conf

diff --git a/boot/zephyr/prj.conf b/boot/zephyr/prj.conf
index 23c462b..4a179d3 100644
--- a/boot/zephyr/prj.conf
+++ b/boot/zephyr/prj.conf
@@ -12,6 +12,7 @@
 
 ### Default to RSA
 CONFIG_BOOT_SIGNATURE_TYPE_RSA=y
+CONFIG_BOOT_SIGNATURE_TYPE_RSA_LEN=2048
 CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=n
 
 ### The bootloader generates its own signature verification based on a
@@ -19,6 +20,7 @@
 ### algorithm (CONFIG_BOOT_SIGNATURE_TYPE_).
 ### The PEM files below are provided as examples.
 CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-2048.pem"
+#CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-3072.pem"
 #CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ec-p256.pem"
 
 ### mbedTLS has its own heap