blob: 96b5268420ffb5f4abd1f70ab4a8675401fdb550 [file] [log] [blame]
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +02001# Copyright (c) 2017 Linaro Limited
2#
3# SPDX-License-Identifier: Apache-2.0
4#
5
Marti Bolivar0e091c92018-04-12 11:23:16 -04006mainmenu "MCUboot configuration"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +02007
Marti Bolivar0e091c92018-04-12 11:23:16 -04008comment "MCUboot-specific configuration options"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +02009
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040010config BOOT_USE_MBEDTLS
11 bool
12 # Hidden option
13 default n
14 help
15 Use mbedTLS for crypto primitives.
16
17config BOOT_USE_TINYCRYPT
18 bool
19 # Hidden option
20 default n
21 help
22 Use TinyCrypt for crypto primitives.
23
Andrzej Puzdrowski97543282018-04-12 15:16:56 +020024menu "MCUBoot settings"
25
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040026choice
27 prompt "Signature type"
28 default BOOT_SIGNATURE_TYPE_RSA
29
30config BOOT_SIGNATURE_TYPE_RSA
31 bool "RSA signatures"
32 select BOOT_USE_MBEDTLS
Marti Bolivara4818a52018-04-12 13:02:38 -040033 select MBEDTLS
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040034
35config BOOT_SIGNATURE_TYPE_ECDSA_P256
36 bool "Elliptic curve digital signatures with curve P-256"
37 select BOOT_USE_TINYCRYPT
38
39endchoice
40
Fabio Utzigc690c762018-04-26 10:51:09 -030041config BOOT_SIGNATURE_KEY_FILE
42 string "PEM key file"
43 default ""
44 help
45 The key file will be parsed by imgtool's getpub command and a .c source
46 with the public key information will be written in a format expected by
47 MCUboot.
48
Marti Bolivara4818a52018-04-12 13:02:38 -040049config MBEDTLS_CFG_FILE
50 default "mcuboot-mbedtls-cfg.h"
51
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040052config BOOT_VALIDATE_SLOT0
53 bool "Validate image slot 0 on every boot"
54 default y
55 help
56 If y, the bootloader attempts to validate the signature of
57 slot0 every boot. This adds the signature check time to
58 every boot, but can mitigate against some changes that are
59 able to modify the flash image itself.
60
61config BOOT_UPGRADE_ONLY
62 bool "Overwrite image updates instead of swapping"
63 default n
64 help
65 If y, overwrite slot0 with the upgrade image instead of
66 swapping them. This prevents the fallback recovery, but
67 uses a much simpler code path.
68
Marti Bolivar0e091c92018-04-12 11:23:16 -040069config BOOT_MAX_IMG_SECTORS
70 int "Maximum number of sectors per image slot"
71 default 128
72 help
73 This option controls the maximum number of sectors that each of
74 the two image areas can contain. Smaller values reduce MCUboot's
75 memory usage; larger values allow it to support larger images.
76 If unsure, leave at the default value.
77
Marti Bolivarbc2fa4e2018-04-12 12:18:32 -040078config ZEPHYR_TRY_MASS_ERASE
79 bool "Try to mass erase flash when flashing MCUboot image"
80 default y
81 help
82 If y, attempt to configure the Zephyr build system's "flash"
83 target to mass-erase the flash device before flashing the
84 MCUboot image. This ensures the scratch and other partitions
85 are in a consistent state.
86
87 This is not available for all targets.
88
Fabio Utzig9a4b9ba2018-05-07 08:31:27 -030089config BOOT_HAVE_LOGGING
90 bool "MCUboot have logging enabled"
91 default y
92 select SYS_LOG
93 help
94 If y, enables logging on the serial port. The log level can
95 be defined by setting `SYS_LOG_DEFAULT_LEVEL`.
96 If unsure, leave at the default value.
97
Marti Bolivar0e091c92018-04-12 11:23:16 -040098menuconfig MCUBOOT_SERIAL
99 bool "MCUboot serial recovery"
100 default n
101 select REBOOT
102 select UART_INTERRUPT_DRIVEN
103 select SERIAL
104 select BASE64
105 select TINYCBOR
106 help
107 If y, enables a serial-port based update mode. This allows
108 MCUboot itself to load update images into flash over a UART.
109 If unsure, leave at the default value.
110
111if MCUBOOT_SERIAL
112
113config BOOT_MAX_LINE_INPUT_LEN
114 int "Maximum command line length"
115 default 512
116 help
117 Maximum length of commands transported over the serial port.
118
119config BOOT_SERIAL_DETECT_PORT
120 string "GPIO device to trigger serial recovery mode"
121 default GPIO_0 if SOC_FAMILY_NRF
122 help
123 Zephyr GPIO device which contains the pin used to trigger
124 serial recovery mode.
125
126config BOOT_SERIAL_DETECT_PIN
127 int "Pin to trigger serial recovery mode"
128 default 11 if BOARD_NRF52840_PCA10056
129 default 13 if BOARD_NRF52_PCA10040
130 help
131 Pin on the serial detect port which triggers serial recovery mode.
132
133config BOOT_SERIAL_DETECT_PIN_VAL
134 int "Serial detect pin trigger value"
135 default 0
136 range 0 1
137 help
138 Logic value of the detect pin which triggers serial recovery
139 mode.
140
141endif # MCUBOOT_SERIAL
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +0200142
Andrzej Puzdrowski97543282018-04-12 15:16:56 +0200143endmenu
144
Carles Cufi84ede582018-01-29 15:12:00 +0100145config MCUBOOT_DEVICE_SETTINGS
146 # Hidden selector for device-specific settings
147 bool
148 default y
149 # CPU options
150 select MCUBOOT_DEVICE_CPU_CORTEX_M0 if CPU_CORTEX_M0
Carles Cufi67c792e2018-01-29 15:14:31 +0100151 # Enable flash page layout if available
152 select FLASH_PAGE_LAYOUT if FLASH_HAS_PAGE_LAYOUT
Andrzej Puzdrowskib788c712018-04-12 12:42:49 +0200153 # Enable flash_map module as flash I/O back-end
154 select FLASH_MAP
Carles Cufi84ede582018-01-29 15:12:00 +0100155
156config MCUBOOT_DEVICE_CPU_CORTEX_M0
157 # Hidden selector for Cortex-M0 settings
158 bool
159 default n
160 select SW_VECTOR_RELAY if !CPU_CORTEX_M0_HAS_VECTOR_TABLE_REMAP
161
Marti Bolivar0e091c92018-04-12 11:23:16 -0400162comment "Zephyr configuration options"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +0200163
Marti Bolivar0e091c92018-04-12 11:23:16 -0400164config ZEPHYR_BASE
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +0200165 string
Marti Bolivar0e091c92018-04-12 11:23:16 -0400166 option env="ZEPHYR_BASE"
Andrzej Puzdrowski64ad0922017-09-22 11:33:41 +0200167
Marti Bolivar0e091c92018-04-12 11:23:16 -0400168source "$ZEPHYR_BASE/Kconfig.zephyr"