zephyr: add option to disable cryptographic check of the image
- Add Kconfig option `CONFIG_BOOT_SIGNATURE_TYPE_NONE`. When y,
The bootloader will not verify the cryptographic signature of the image
at boot or prior to upgrade. Image integrity check is retained.
Images would still need to be processed using `imgtool` however no key
should be provided to skip cryptographic signature generation.
Signed-off-by: Arvin Farahmand <arvinf@ip-logix.com>
diff --git a/boot/zephyr/Kconfig b/boot/zephyr/Kconfig
index b196952..3b5f91f 100644
--- a/boot/zephyr/Kconfig
+++ b/boot/zephyr/Kconfig
@@ -62,6 +62,10 @@
prompt "Signature type"
default BOOT_SIGNATURE_TYPE_RSA
+config BOOT_SIGNATURE_TYPE_NONE
+ bool "No signature; use only hash check"
+ select BOOT_USE_TINYCRYPT
+
config BOOT_SIGNATURE_TYPE_RSA
bool "RSA signatures"
select BOOT_USE_MBEDTLS