blob: 30af1e450ea6c3b8d476dd884a20ba2003c3a2dc [file] [log] [blame]
David Brown5153bd62017-01-06 11:16:53 -07001CONFIG_CONSOLE_HANDLER=y
David Brown5153bd62017-01-06 11:16:53 -07002CONFIG_DEBUG=y
Ricardo Salveti8e4d44d2017-02-27 23:00:31 -03003CONFIG_SYSTEM_CLOCK_DISABLE=y
Carles Cufidf4d9a42018-06-15 12:42:26 +02004CONFIG_SYS_POWER_MANAGEMENT=n
David Brown5153bd62017-01-06 11:16:53 -07005
6CONFIG_MAIN_STACK_SIZE=10240
Marti Bolivara4818a52018-04-12 13:02:38 -04007CONFIG_MBEDTLS_CFG_FILE="mcuboot-mbedtls-cfg.h"
David Brown5153bd62017-01-06 11:16:53 -07008
Fabio Utzig5fe874c2018-08-31 07:41:50 -03009CONFIG_BOOT_ENCRYPT_RSA=n
Fabio Utzig42cc29a2019-11-05 07:54:41 -030010CONFIG_BOOT_ENCRYPT_EC256=n
Fabio Utzig5fe874c2018-08-31 07:41:50 -030011
Fabio Utzigc58842e2019-11-28 10:30:01 -030012CONFIG_BOOT_UPGRADE_ONLY=n
13CONFIG_BOOT_SWAP_USING_MOVE=n
Fabio Utzigd0533ed2018-12-19 07:56:33 -020014CONFIG_BOOT_BOOTSTRAP=n
15
Fabio Utzigc690c762018-04-26 10:51:09 -030016### Default to RSA
17CONFIG_BOOT_SIGNATURE_TYPE_RSA=y
Fabio Utzig105b59a2019-05-13 15:08:12 -070018CONFIG_BOOT_SIGNATURE_TYPE_RSA_LEN=2048
Fabio Utzigc690c762018-04-26 10:51:09 -030019CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=n
Fabio Utzig1171df92019-05-10 19:26:38 -030020CONFIG_BOOT_SIGNATURE_TYPE_ED25519=n
Fabio Utzigc690c762018-04-26 10:51:09 -030021
Carles Cufi29af9fe2018-06-11 13:31:41 +020022### The bootloader generates its own signature verification based on a
23### key file which needs to be provided and needs to match the selected signing
24### algorithm (CONFIG_BOOT_SIGNATURE_TYPE_).
Fabio Utzigc690c762018-04-26 10:51:09 -030025### The PEM files below are provided as examples.
Carles Cufi29af9fe2018-06-11 13:31:41 +020026CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-2048.pem"
Fabio Utzig105b59a2019-05-13 15:08:12 -070027#CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-3072.pem"
Fabio Utzigc690c762018-04-26 10:51:09 -030028#CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ec-p256.pem"
Fabio Utzig1171df92019-05-10 19:26:38 -030029#CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ed25519.pem"
Fabio Utzigc690c762018-04-26 10:51:09 -030030
David Brown0bae9652017-10-19 16:45:09 -060031### mbedTLS has its own heap
32# CONFIG_HEAP_MEM_POOL_SIZE is not set
David Brown5153bd62017-01-06 11:16:53 -070033
Marti Bolivara4818a52018-04-12 13:02:38 -040034### We never want Zephyr's copy of tinycrypt. If tinycrypt is needed,
35### MCUboot has its own copy in tree.
36# CONFIG_TINYCRYPT is not set
37# CONFIG_TINYCRYPT_ECC_DSA is not set
38# CONFIG_TINYCRYPT_SHA256 is not set
39
David Brown5153bd62017-01-06 11:16:53 -070040CONFIG_FLASH=y
Ricardo Salveti3dbf2222017-01-18 11:34:47 -020041
Marti Bolivar0e259092018-09-05 14:54:06 -040042### Various Zephyr boards enable features that we don't want.
Marti Bolivarf4d0e1a2017-08-30 18:39:07 -040043# CONFIG_BT is not set
Marti Bolivar0e259092018-09-05 14:54:06 -040044# CONFIG_BT_CTLR is not set
Marti Bolivarf4d0e1a2017-08-30 18:39:07 -040045# CONFIG_I2C is not set
Michael Scottf9be7a92019-02-01 11:19:47 -080046
Piotr Mienkowski15aa6ef2019-04-08 22:48:15 +020047CONFIG_LOG=y
48CONFIG_LOG_IMMEDIATE=y
Michael Scottf9be7a92019-02-01 11:19:47 -080049### Ensure Zephyr logging changes don't use more resources
50CONFIG_LOG_DEFAULT_LEVEL=0