blob: 0e9256613c6530d4a63336eb3052216890f9cd70 [file] [log] [blame]
David Vincze03368b82020-04-01 12:53:53 +02001# Copyright (c) 2017-2020 Linaro Limited
David Vinczec3084132020-02-18 14:50:47 +01002# Copyright (c) 2020 Arm Limited
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +02003#
4# SPDX-License-Identifier: Apache-2.0
5#
6
Marti Bolivar0e091c92018-04-12 11:23:16 -04007mainmenu "MCUboot configuration"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +02008
Marti Bolivar0e091c92018-04-12 11:23:16 -04009comment "MCUboot-specific configuration options"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +020010
Emanuele Di Santo865777d2018-11-08 11:28:15 +010011# Hidden option to mark a project as MCUboot
12config MCUBOOT
13 default y
14 bool
Rajavardhan Gundi07ba28f2018-12-10 15:44:48 +053015 select MPU_ALLOW_FLASH_WRITE if ARM_MPU
Marcin Niestrojc6be76a2020-03-22 14:39:35 +010016 select USE_DT_CODE_PARTITION if HAS_FLASH_LOAD_OFFSET
Emanuele Di Santo865777d2018-11-08 11:28:15 +010017
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040018config BOOT_USE_MBEDTLS
19 bool
20 # Hidden option
21 default n
22 help
23 Use mbedTLS for crypto primitives.
24
25config BOOT_USE_TINYCRYPT
26 bool
27 # Hidden option
28 default n
Sebastian Bøe913a3852019-01-22 13:53:12 +010029 # When building for ECDSA, we use our own copy of mbedTLS, so the
30 # Zephyr one must not be enabled or the MBEDTLS_CONFIG_FILE macros
31 # will collide.
32 depends on ! MBEDTLS
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040033 help
34 Use TinyCrypt for crypto primitives.
35
Sigvart Hovlandebd05032019-03-21 10:47:32 +010036config BOOT_USE_CC310
37 bool
38 # Hidden option
39 default n
40 # When building for ECDSA, we use our own copy of mbedTLS, so the
41 # Zephyr one must not be enabled or the MBEDTLS_CONFIG_FILE macros
42 # will collide.
43 depends on ! MBEDTLS
44 help
45 Use cc310 for crypto primitives.
46
47config BOOT_USE_NRF_CC310_BL
48 bool
49 default n
50
51config NRFXLIB_CRYPTO
52 bool
53 default n
54
55config NRF_CC310_BL
56 bool
57 default n
58
Andrzej Puzdrowski97543282018-04-12 15:16:56 +020059menu "MCUBoot settings"
60
Andrzej Puzdrowskifdff3e12020-09-15 08:23:25 +020061config SINGLE_APPLICATION_SLOT
62 bool "Single slot bootloader"
Dominik Ermel4dc3f442020-05-26 08:45:14 +000063 default n
64 help
65 Single image area is used for application which means that
66 uploading a new application overwrites the one that previously
67 occupied the area.
68
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040069choice
70 prompt "Signature type"
71 default BOOT_SIGNATURE_TYPE_RSA
72
Arvin Farahmandfb5ec182020-05-05 11:44:12 -040073config BOOT_SIGNATURE_TYPE_NONE
74 bool "No signature; use only hash check"
75 select BOOT_USE_TINYCRYPT
76
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040077config BOOT_SIGNATURE_TYPE_RSA
78 bool "RSA signatures"
79 select BOOT_USE_MBEDTLS
Marti Bolivara4818a52018-04-12 13:02:38 -040080 select MBEDTLS
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040081
Fabio Utzig105b59a2019-05-13 15:08:12 -070082if BOOT_SIGNATURE_TYPE_RSA
83config BOOT_SIGNATURE_TYPE_RSA_LEN
84 int "RSA signature length"
85 range 2048 3072
86 default 2048
87endif
88
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040089config BOOT_SIGNATURE_TYPE_ECDSA_P256
90 bool "Elliptic curve digital signatures with curve P-256"
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040091
Sigvart Hovlandebd05032019-03-21 10:47:32 +010092if BOOT_SIGNATURE_TYPE_ECDSA_P256
93choice
94 prompt "Ecdsa implementation"
Fabio Utzig34e93a52020-02-03 09:59:53 -030095 default BOOT_ECDSA_TINYCRYPT
Håkon Øye Amundsenee7282d2020-09-28 09:48:29 +000096
Fabio Utzig34e93a52020-02-03 09:59:53 -030097config BOOT_ECDSA_TINYCRYPT
Sigvart Hovlandebd05032019-03-21 10:47:32 +010098 bool "Use tinycrypt"
99 select BOOT_USE_TINYCRYPT
Håkon Øye Amundsenee7282d2020-09-28 09:48:29 +0000100
101config BOOT_ECDSA_CC310
Sigvart Hovlandebd05032019-03-21 10:47:32 +0100102 bool "Use CC310"
Håkon Øye Amundsenee7282d2020-09-28 09:48:29 +0000103 depends on HAS_HW_NRF_CC310
104 select BOOT_USE_NRF_CC310_BL
105 select NRF_CC310_BL
106 select NRFXLIB_CRYPTO
Sigvart Hovlandebd05032019-03-21 10:47:32 +0100107 select BOOT_USE_CC310
Håkon Øye Amundsenee7282d2020-09-28 09:48:29 +0000108endchoice # Ecdsa implementation
Sigvart Hovlandebd05032019-03-21 10:47:32 +0100109endif
Fabio Utzig34e93a52020-02-03 09:59:53 -0300110
111config BOOT_SIGNATURE_TYPE_ED25519
112 bool "Edwards curve digital signatures using ed25519"
113
114if BOOT_SIGNATURE_TYPE_ED25519
115choice
116 prompt "Ecdsa implementation"
117 default BOOT_ED25519_TINYCRYPT
118config BOOT_ED25519_TINYCRYPT
119 bool "Use tinycrypt"
120 select BOOT_USE_TINYCRYPT
121config BOOT_ED25519_MBEDTLS
122 bool "Use mbedTLS"
123 select BOOT_USE_MBEDTLS
124 select MBEDTLS
125endchoice
126endif
127
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400128endchoice
129
Fabio Utzigc690c762018-04-26 10:51:09 -0300130config BOOT_SIGNATURE_KEY_FILE
131 string "PEM key file"
Håkon Øye Amundsen705c6c22020-09-28 09:45:40 +0000132 default "root-ec-p256.pem" if BOOT_SIGNATURE_TYPE_ECDSA_P256
133 default "root-ed25519.pem" if BOOT_SIGNATURE_TYPE_ED25519
134 default "root-rsa-3072.pem" if BOOT_SIGNATURE_TYPE_RSA && BOOT_SIGNATURE_TYPE_RSA_LEN=3072
135 default "root-rsa-2048.pem" if BOOT_SIGNATURE_TYPE_RSA && BOOT_SIGNATURE_TYPE_RSA_LEN=2048
Fabio Utzigc690c762018-04-26 10:51:09 -0300136 default ""
137 help
Marek Pietabdcfc852020-08-04 02:22:55 -0700138 You can use either absolute or relative path.
139 In case relative path is used, the build system assumes that it starts
140 from the directory where the MCUBoot KConfig configuration file is
141 located. If the key file is not there, the build system uses relative
142 path that starts from the MCUBoot repository root directory.
Fabio Utzigc690c762018-04-26 10:51:09 -0300143 The key file will be parsed by imgtool's getpub command and a .c source
144 with the public key information will be written in a format expected by
145 MCUboot.
146
Andrzej Puzdrowski9a605b62020-03-16 13:34:30 +0100147config MCUBOOT_CLEANUP_ARM_CORE
148 bool "Perform core cleanup before chain-load the application"
149 depends on CPU_CORTEX_M
150 default y
151
Marti Bolivara4818a52018-04-12 13:02:38 -0400152config MBEDTLS_CFG_FILE
153 default "mcuboot-mbedtls-cfg.h"
154
David Vincze03368b82020-04-01 12:53:53 +0200155config BOOT_HW_KEY
156 bool "Use HW key for image verification"
157 default n
158 help
159 Use HW key for image verification, otherwise the public key is embedded
160 in MCUBoot. If enabled the public key is appended to the signed image
161 and requires the hash of the public key to be provisioned to the device
162 beforehand.
163
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400164config BOOT_VALIDATE_SLOT0
David Vincze2d736ad2019-02-18 11:50:22 +0100165 bool "Validate image in the primary slot on every boot"
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400166 default y
167 help
David Vincze2d736ad2019-02-18 11:50:22 +0100168 If y, the bootloader attempts to validate the signature of the
169 primary slot every boot. This adds the signature check time to
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400170 every boot, but can mitigate against some changes that are
171 able to modify the flash image itself.
172
Andrzej Puzdrowskifdff3e12020-09-15 08:23:25 +0200173if !SINGLE_APPLICATION_SLOT
David Vincze5a6e1812020-06-29 13:34:42 +0200174choice
175 prompt "Image upgrade modes"
176 default BOOT_SWAP_USING_MOVE if SOC_FAMILY_NRF
177 default BOOT_SWAP_USING_SCRATCH
178
179config BOOT_SWAP_USING_SCRATCH
180 bool "Swap mode that run with the scratch partition"
181 help
182 This is the most conservative swap mode but it can work even on
183 devices with heterogeneous flash page layout.
184
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400185config BOOT_UPGRADE_ONLY
186 bool "Overwrite image updates instead of swapping"
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400187 help
David Vincze2d736ad2019-02-18 11:50:22 +0100188 If y, overwrite the primary slot with the upgrade image instead
189 of swapping them. This prevents the fallback recovery, but
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400190 uses a much simpler code path.
191
Fabio Utzigc58842e2019-11-28 10:30:01 -0300192config BOOT_SWAP_USING_MOVE
Fabio Utzigdd2b6802020-01-06 09:10:45 -0300193 bool "Swap mode that can run without a scratch partition"
Fabio Utzigc58842e2019-11-28 10:30:01 -0300194 help
195 If y, the swap upgrade is done in two steps, where first every
196 sector of the primary slot is moved up one sector, then for
197 each sector X in the secondary slot, it is moved to index X in
198 the primary slot, then the sector at X+1 in the primary is
199 moved to index X in the secondary.
200 This allows a swap upgrade without using a scratch partition,
201 but is currently limited to all sectors in both slots being of
202 the same size.
David Vincze5a6e1812020-06-29 13:34:42 +0200203
204config BOOT_DIRECT_XIP
205 bool "Run the latest image directly from its slot"
206 help
207 If y, mcuboot selects the newest valid image based on the image version
208 numbers, thereafter the selected image can run directly from its slot
209 without having to move/copy it into the primary slot. For this reason the
210 images must be linked to be executed from the given image slot. Using this
211 mode results in a simpler code path and smaller code size.
212
213endchoice
Dominik Ermel4dc3f442020-05-26 08:45:14 +0000214endif
Fabio Utzigc58842e2019-11-28 10:30:01 -0300215
Andrzej Puzdrowskifdff3e12020-09-15 08:23:25 +0200216if !SINGLE_APPLICATION_SLOT
Fabio Utzigd0533ed2018-12-19 07:56:33 -0200217config BOOT_BOOTSTRAP
Sam Bristowd0ca0ff2019-10-30 20:51:35 +1300218 bool "Bootstrap erased the primary slot from the secondary slot"
Fabio Utzigd0533ed2018-12-19 07:56:33 -0200219 default n
220 help
221 If y, enables bootstraping support. Bootstrapping allows an erased
David Vincze2d736ad2019-02-18 11:50:22 +0100222 primary slot to be initialized from a valid image in the secondary slot.
Fabio Utzigd0533ed2018-12-19 07:56:33 -0200223 If unsure, leave at the default value.
224
Fabio Utzigca8ead22019-12-20 07:06:04 -0300225config BOOT_SWAP_SAVE_ENCTLV
226 bool "Save encrypted key TLVs instead of plaintext keys in swap metadata"
227 default n
228 help
229 If y, instead of saving the encrypted image keys in plaintext in the
230 swap resume metadata, save the encrypted image TLVs. This should be used
231 when there is no security mechanism protecting the data in the primary
232 slot from being dumped. If n is selected (default), the keys are written
233 after being decrypted from the image TLVs and could be read by an
234 attacker who has access to the flash contents of the primary slot (eg
235 JTAG/SWD or primary slot in external flash).
236 If unsure, leave at the default value.
237
Fabio Utzig5fe874c2018-08-31 07:41:50 -0300238config BOOT_ENCRYPT_RSA
Fabio Utzig42cc29a2019-11-05 07:54:41 -0300239 bool "Support for encrypted upgrade images using RSA"
Fabio Utzig5fe874c2018-08-31 07:41:50 -0300240 default n
241 help
David Vincze2d736ad2019-02-18 11:50:22 +0100242 If y, images in the secondary slot can be encrypted and are decrypted
243 on the fly when upgrading to the primary slot, as well as encrypted
Fabio Utzig42cc29a2019-11-05 07:54:41 -0300244 back when swapping from the primary slot to the secondary slot. The
245 encryption mechanism used in this case is RSA-OAEP (2048 bits).
246
247config BOOT_ENCRYPT_EC256
248 bool "Support for encrypted upgrade images using ECIES-P256"
249 default n
250 help
251 If y, images in the secondary slot can be encrypted and are decrypted
252 on the fly when upgrading to the primary slot, as well as encrypted
253 back when swapping from the primary slot to the secondary slot. The
254 encryption mechanism used in this case is ECIES using primitives
255 described under "ECIES-P256 encryption" in docs/encrypted_images.md.
Fabio Utzig5fe874c2018-08-31 07:41:50 -0300256
Fabio Utzigb6f014c2020-04-02 13:25:01 -0300257config BOOT_ENCRYPT_X25519
258 bool "Support for encrypted upgrade images using ECIES-X25519"
259 default n
260 help
261 If y, images in the secondary slot can be encrypted and are decrypted
262 on the fly when upgrading to the primary slot, as well as encrypted
263 back when swapping from the primary slot to the secondary slot. The
264 encryption mechanism used in this case is ECIES using primitives
265 described under "ECIES-X25519 encryption" in docs/encrypted_images.md.
Dominik Ermel4dc3f442020-05-26 08:45:14 +0000266endif
Fabio Utzigb6f014c2020-04-02 13:25:01 -0300267
Marti Bolivar0e091c92018-04-12 11:23:16 -0400268config BOOT_MAX_IMG_SECTORS
269 int "Maximum number of sectors per image slot"
270 default 128
271 help
272 This option controls the maximum number of sectors that each of
273 the two image areas can contain. Smaller values reduce MCUboot's
274 memory usage; larger values allow it to support larger images.
275 If unsure, leave at the default value.
276
Emanuele Di Santo205c8c62018-07-20 11:42:31 +0200277config BOOT_ERASE_PROGRESSIVELY
278 bool "Erase flash progressively when receiving new firmware"
279 default y if SOC_NRF52840
280 help
281 If enabled, flash is erased as necessary when receiving new firmware,
282 instead of erasing the whole image slot at once. This is necessary
283 on some hardware that has long erase times, to prevent long wait
284 times at the beginning of the DFU process.
285
David Vincze1cf11b52020-03-24 07:51:09 +0100286config MEASURED_BOOT
287 bool "Store the boot state/measurements in shared memory"
288 default n
289 help
290 If enabled, the bootloader will store certain boot measurements such as
291 the hash of the firmware image in a shared memory area. This data can
292 be used later by runtime services (e.g. by a device attestation service).
293
294config BOOT_SHARE_DATA
295 bool "Save application specific data in shared memory area"
296 default n
297
Tamas Banfce87332020-07-10 12:40:11 +0100298choice
299 prompt "Fault injection hardening profile"
300 default BOOT_FIH_PROFILE_OFF
301
302config BOOT_FIH_PROFILE_OFF
303 bool "No hardening against hardware level fault injection"
304 help
305 No hardening in SW against hardware level fault injection: power or
306 clock glitching, etc.
307
308config BOOT_FIH_PROFILE_LOW
309 bool "Moderate level hardening against hardware level fault injection"
310 help
311 Moderate level hardening: Long global fail loop to avoid break out,
312 control flow integrity check to discover discrepancy in expected code
313 flow.
314
315config BOOT_FIH_PROFILE_MEDIUM
316 bool "Medium level hardening against hardware level fault injection"
317 help
318 Medium level hardening: Long global fail loop to avoid break out,
319 control flow integrity check to discover discrepancy in expected code
320 flow, double variables to discover register or memory corruption.
321
322config BOOT_FIH_PROFILE_HIGH
323 bool "Maximum level hardening against hardware level fault injection"
324 select MBEDTLS
325 help
326 Maximum level hardening: Long global fail loop to avoid break out,
327 control flow integrity check to discover discrepancy in expected code
328 flow, double variables to discover register or memory corruption, random
329 delays to make code execution less predictable. Random delays requires an
330 entropy source.
331
332endchoice
333
Rajavardhan Gundi51c9d702019-02-20 14:08:52 +0530334config BOOT_WAIT_FOR_USB_DFU
335 bool "Wait for a prescribed duration to see if USB DFU is invoked"
336 default n
337 select USB
338 select USB_DFU_CLASS
339 select IMG_MANAGER
340 help
341 If y, MCUboot waits for a prescribed duration of time to allow
342 for USB DFU to be invoked. Please note DFU always updates the
343 slot1 image.
344
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -0400345config ZEPHYR_TRY_MASS_ERASE
346 bool "Try to mass erase flash when flashing MCUboot image"
347 default y
348 help
349 If y, attempt to configure the Zephyr build system's "flash"
350 target to mass-erase the flash device before flashing the
351 MCUboot image. This ensures the scratch and other partitions
352 are in a consistent state.
353
354 This is not available for all targets.
355
David Brownf6d14c22019-12-10 15:36:36 -0700356config BOOT_USE_BENCH
357 bool "Enable benchmark code"
358 default n
359 help
360 If y, adds support for simple benchmarking that can record
361 time intervals between two calls. The time printed depends
362 on the particular Zephyr target, and is generally ticks of a
363 specific board-specific timer.
364
Michael Scott74ceae52019-02-01 14:01:09 -0800365module = MCUBOOT
Piotr Mienkowski15aa6ef2019-04-08 22:48:15 +0200366module-str = MCUBoot bootloader
Michael Scott74ceae52019-02-01 14:01:09 -0800367source "subsys/logging/Kconfig.template.log_config"
Michael Scott74ceae52019-02-01 14:01:09 -0800368
Andrzej Puzdrowskiaf148532020-02-25 12:51:26 +0100369config MCUBOOT_LOG_THREAD_STACK_SIZE
370 int "Stack size for the MCUBoot log processing thread"
371 depends on LOG && !LOG_IMMEDIATE
372 default 2048 if COVERAGE_GCOV
373 default 1024 if NO_OPTIMIZATIONS
374 default 1024 if XTENSA
375 default 4096 if (X86 && X86_64)
376 default 4096 if ARM64
377 default 768
378 help
379 Set the internal stack size for MCUBoot log processing thread.
380
Marti Bolivar0e091c92018-04-12 11:23:16 -0400381menuconfig MCUBOOT_SERIAL
382 bool "MCUboot serial recovery"
383 default n
384 select REBOOT
Emanuele Di Santo30a92652019-01-16 14:01:08 +0100385 select GPIO
Marti Bolivar0e091c92018-04-12 11:23:16 -0400386 select SERIAL
Emanuele Di Santo30a92652019-01-16 14:01:08 +0100387 select UART_INTERRUPT_DRIVEN
Marti Bolivar0e091c92018-04-12 11:23:16 -0400388 select BASE64
389 select TINYCBOR
390 help
391 If y, enables a serial-port based update mode. This allows
392 MCUboot itself to load update images into flash over a UART.
393 If unsure, leave at the default value.
394
395if MCUBOOT_SERIAL
396
Emanuele Di Santoc4bf7802018-07-20 11:39:57 +0200397choice
398 prompt "Serial device"
Andrzej Puzdrowskif4a9a9d2020-04-24 12:31:51 +0200399 default BOOT_SERIAL_UART if !BOARD_NRF52840DONGLE_NRF52840
400 default BOOT_SERIAL_CDC_ACM if BOARD_NRF52840DONGLE_NRF52840
Emanuele Di Santoc4bf7802018-07-20 11:39:57 +0200401
402config BOOT_SERIAL_UART
403 bool "UART"
404 # SERIAL and UART_INTERRUPT_DRIVEN already selected
405
406config BOOT_SERIAL_CDC_ACM
407 bool "CDC ACM"
408 select USB
409 select USB_DEVICE_STACK
410 select USB_CDC_ACM
411
412endchoice
413
Marti Bolivar0e091c92018-04-12 11:23:16 -0400414config BOOT_MAX_LINE_INPUT_LEN
415 int "Maximum command line length"
416 default 512
417 help
418 Maximum length of commands transported over the serial port.
419
420config BOOT_SERIAL_DETECT_PORT
421 string "GPIO device to trigger serial recovery mode"
422 default GPIO_0 if SOC_FAMILY_NRF
423 help
424 Zephyr GPIO device which contains the pin used to trigger
425 serial recovery mode.
426
427config BOOT_SERIAL_DETECT_PIN
428 int "Pin to trigger serial recovery mode"
Andrzej Puzdrowskif4a9a9d2020-04-24 12:31:51 +0200429 default 6 if BOARD_NRF9160DK_NRF9160
Andrzej Puzdrowskifefdea22020-03-27 09:41:14 +0100430 default 11 if BOARD_NRF52840DK_NRF52840
Andrzej Puzdrowskif4a9a9d2020-04-24 12:31:51 +0200431 default 13 if BOARD_NRF52DK_NRF52832
Håkon Øye Amundsen25eabb62020-06-03 14:58:08 +0200432 default 23 if BOARD_NRF5340PDK_NRF5340_CPUAPP || BOARD_NRF5340PDK_NRF5340_CPUAPPNS
Marti Bolivar0e091c92018-04-12 11:23:16 -0400433 help
434 Pin on the serial detect port which triggers serial recovery mode.
435
436config BOOT_SERIAL_DETECT_PIN_VAL
437 int "Serial detect pin trigger value"
438 default 0
439 range 0 1
440 help
441 Logic value of the detect pin which triggers serial recovery
442 mode.
443
Andrzej Puzdrowskif0004802019-10-01 14:13:35 +0200444# Workaround for not being able to have commas in macro arguments
445DT_CHOSEN_Z_CONSOLE := zephyr,console
446
447config RECOVERY_UART_DEV_NAME
448 string "UART Device Name for Recovery UART"
449 default "$(dt_chosen_label,$(DT_CHOSEN_Z_CONSOLE))" if HAS_DTS
450 default "UART_0"
451 depends on BOOT_SERIAL_UART
452 help
453 This option specifies the name of UART device to be used for
454 serial recovery.
455
Marti Bolivar0e091c92018-04-12 11:23:16 -0400456endif # MCUBOOT_SERIAL
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +0200457
Rafał Kuźniad854bb62020-06-17 15:06:47 +0200458config BOOT_INTR_VEC_RELOC
459 bool "Relocate the interrupt vector to the application"
460 default n
461 depends on SW_VECTOR_RELAY || CPU_CORTEX_M_HAS_VTOR
462 help
463 Relocate the interrupt vector to the application before it is started.
464 Select this option if application requires vector relocation,
465 but it doesn't relocate vector in its reset handler.
466
Andrzej Puzdrowski16b6d152020-06-01 14:16:54 +0200467config UPDATEABLE_IMAGE_NUMBER
468 int "Number of updateable images"
469 default 1
Andrzej Puzdrowskifdff3e12020-09-15 08:23:25 +0200470 range 1 1 if SINGLE_APPLICATION_SLOT
Andrzej Puzdrowski16b6d152020-06-01 14:16:54 +0200471 help
472 Enables support of multi image update.
473
474choice
475 prompt "Downgrade prevention"
476 optional
477
478config MCUBOOT_DOWNGRADE_PREVENTION
479 bool "SW based downgrade prevention"
480 depends on BOOT_UPGRADE_ONLY
481 help
482 Prevent downgrades by enforcing incrementing version numbers.
483 When this option is set, any upgrade must have greater major version
484 or greater minor version with equal major version. This mechanism
485 only protects against some attacks against version downgrades (for
486 example, a JTAG could be used to write an older version).
487
488config MCUBOOT_HW_DOWNGRADE_PREVENTION
489 bool "HW based downgrade prevention"
490 help
491 Prevent undesirable/malicious software downgrades. When this option is
492 set, any upgrade must have greater or equal security counter value.
493 Because of the acceptance of equal values it allows for software
494 downgrade to some extent.
495
496endchoice
497
Andrzej Puzdrowskid21442a2020-10-12 16:47:28 +0200498config BOOT_WATCHDOG_FEED
499 bool "Feed the watchdog while doing swap"
500 default y if SOC_FAMILY_NRF
501 imply NRFX_WDT
502 imply NRFX_WDT0
503 imply NRFX_WDT1
504 help
505 Enables implementation of MCUBOOT_WATCHDOG_FEED() macro which is
506 used to feed watchdog while doing time consuming operations.
507
Andrzej Puzdrowski97543282018-04-12 15:16:56 +0200508endmenu
509
Carles Cufi84ede582018-01-29 15:12:00 +0100510config MCUBOOT_DEVICE_SETTINGS
511 # Hidden selector for device-specific settings
512 bool
513 default y
514 # CPU options
515 select MCUBOOT_DEVICE_CPU_CORTEX_M0 if CPU_CORTEX_M0
Carles Cufi67c792e2018-01-29 15:14:31 +0100516 # Enable flash page layout if available
517 select FLASH_PAGE_LAYOUT if FLASH_HAS_PAGE_LAYOUT
Andrzej Puzdrowskib788c712018-04-12 12:42:49 +0200518 # Enable flash_map module as flash I/O back-end
519 select FLASH_MAP
Carles Cufi84ede582018-01-29 15:12:00 +0100520
521config MCUBOOT_DEVICE_CPU_CORTEX_M0
522 # Hidden selector for Cortex-M0 settings
523 bool
524 default n
525 select SW_VECTOR_RELAY if !CPU_CORTEX_M0_HAS_VECTOR_TABLE_REMAP
526
Marti Bolivar0e091c92018-04-12 11:23:16 -0400527comment "Zephyr configuration options"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +0200528
Marti Bolivarf84cc4b2019-08-20 16:06:56 -0700529# Disabling MULTITHREADING provides a code size advantage, but
530# it requires peripheral drivers (particularly a flash driver)
531# that works properly with the option enabled.
532#
533# If you know for sure that your hardware will work, you can default
534# it to n here. Otherwise, having it on by default makes the most
535# hardware work.
536config MULTITHREADING
Andrzej Puzdrowski9a4946c2020-02-20 12:39:12 +0100537 default y if BOOT_SERIAL_CDC_ACM #usb driver requires MULTITHREADING
Marti Bolivarf84cc4b2019-08-20 16:06:56 -0700538 default n if SOC_FAMILY_NRF
539 default y
540
Andrzej Puzdrowski9a4946c2020-02-20 12:39:12 +0100541config LOG_IMMEDIATE
542 default n if MULTITHREADING
Andrzej Puzdrowski3f092bd2020-02-17 13:25:32 +0100543 default y
544
545config LOG_PROCESS_THREAD
546 default n # mcuboot has its own log processing thread
547
548# override USB device name
549config USB_DEVICE_PRODUCT
550 default "MCUBOOT"
Andrzej Puzdrowski9a4946c2020-02-20 12:39:12 +0100551
Robert Lubos1b19d2a2020-01-31 14:05:35 +0100552source "Kconfig.zephyr"