David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 1 | CONFIG_CONSOLE_HANDLER=y |
Ricardo Salveti | 7cf3d9e | 2017-01-18 16:38:22 -0200 | [diff] [blame] | 2 | CONFIG_SYS_LOG=y |
David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 3 | CONFIG_DEBUG=y |
Ricardo Salveti | 8e4d44d | 2017-02-27 23:00:31 -0300 | [diff] [blame] | 4 | CONFIG_SYSTEM_CLOCK_DISABLE=y |
Carles Cufi | df4d9a4 | 2018-06-15 12:42:26 +0200 | [diff] [blame] | 5 | CONFIG_SYS_POWER_MANAGEMENT=n |
David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 6 | |
| 7 | CONFIG_MAIN_STACK_SIZE=10240 |
Marti Bolivar | a4818a5 | 2018-04-12 13:02:38 -0400 | [diff] [blame] | 8 | CONFIG_MBEDTLS_CFG_FILE="mcuboot-mbedtls-cfg.h" |
David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 9 | |
Fabio Utzig | 5fe874c | 2018-08-31 07:41:50 -0300 | [diff] [blame^] | 10 | CONFIG_BOOT_ENCRYPT_RSA=n |
| 11 | |
Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 12 | ### Default to RSA |
| 13 | CONFIG_BOOT_SIGNATURE_TYPE_RSA=y |
| 14 | CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=n |
| 15 | |
Carles Cufi | 29af9fe | 2018-06-11 13:31:41 +0200 | [diff] [blame] | 16 | ### The bootloader generates its own signature verification based on a |
| 17 | ### key file which needs to be provided and needs to match the selected signing |
| 18 | ### algorithm (CONFIG_BOOT_SIGNATURE_TYPE_). |
Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 19 | ### The PEM files below are provided as examples. |
Carles Cufi | 29af9fe | 2018-06-11 13:31:41 +0200 | [diff] [blame] | 20 | CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-2048.pem" |
Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 21 | #CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ec-p256.pem" |
| 22 | |
David Brown | 0bae965 | 2017-10-19 16:45:09 -0600 | [diff] [blame] | 23 | ### mbedTLS has its own heap |
| 24 | # CONFIG_HEAP_MEM_POOL_SIZE is not set |
David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 25 | |
Marti Bolivar | a4818a5 | 2018-04-12 13:02:38 -0400 | [diff] [blame] | 26 | ### We never want Zephyr's copy of tinycrypt. If tinycrypt is needed, |
| 27 | ### MCUboot has its own copy in tree. |
| 28 | # CONFIG_TINYCRYPT is not set |
| 29 | # CONFIG_TINYCRYPT_ECC_DSA is not set |
| 30 | # CONFIG_TINYCRYPT_SHA256 is not set |
| 31 | |
David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 32 | CONFIG_FLASH=y |
David Brown | 0d1b0b9 | 2017-07-26 00:34:56 -0600 | [diff] [blame] | 33 | CONFIG_MPU_ALLOW_FLASH_WRITE=y |
Ricardo Salveti | 3dbf222 | 2017-01-18 11:34:47 -0200 | [diff] [blame] | 34 | |
Andrew Boie | 240ac64 | 2017-03-02 13:40:39 -0800 | [diff] [blame] | 35 | CONFIG_MULTITHREADING=n |
Marti Bolivar | f4d0e1a | 2017-08-30 18:39:07 -0400 | [diff] [blame] | 36 | |
Marti Bolivar | 0e25909 | 2018-09-05 14:54:06 -0400 | [diff] [blame] | 37 | ### Various Zephyr boards enable features that we don't want. |
Marti Bolivar | f4d0e1a | 2017-08-30 18:39:07 -0400 | [diff] [blame] | 38 | # CONFIG_BT is not set |
Marti Bolivar | 0e25909 | 2018-09-05 14:54:06 -0400 | [diff] [blame] | 39 | # CONFIG_BT_CTLR is not set |
Marti Bolivar | f4d0e1a | 2017-08-30 18:39:07 -0400 | [diff] [blame] | 40 | # CONFIG_I2C is not set |