| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 1 | CONFIG_CONSOLE_HANDLER=y |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 2 | CONFIG_DEBUG=y |
| Ricardo Salveti | 8e4d44d | 2017-02-27 23:00:31 -0300 | [diff] [blame] | 3 | CONFIG_SYSTEM_CLOCK_DISABLE=y |
| Carles Cufi | df4d9a4 | 2018-06-15 12:42:26 +0200 | [diff] [blame] | 4 | CONFIG_SYS_POWER_MANAGEMENT=n |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 5 | |
| 6 | CONFIG_MAIN_STACK_SIZE=10240 |
| Marti Bolivar | a4818a5 | 2018-04-12 13:02:38 -0400 | [diff] [blame] | 7 | CONFIG_MBEDTLS_CFG_FILE="mcuboot-mbedtls-cfg.h" |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 8 | |
| Fabio Utzig | ca8ead2 | 2019-12-20 07:06:04 -0300 | [diff] [blame^] | 9 | CONFIG_BOOT_SWAP_SAVE_ENCTLV=n |
| Fabio Utzig | 5fe874c | 2018-08-31 07:41:50 -0300 | [diff] [blame] | 10 | CONFIG_BOOT_ENCRYPT_RSA=n |
| Fabio Utzig | 42cc29a | 2019-11-05 07:54:41 -0300 | [diff] [blame] | 11 | CONFIG_BOOT_ENCRYPT_EC256=n |
| Fabio Utzig | 5fe874c | 2018-08-31 07:41:50 -0300 | [diff] [blame] | 12 | |
| Fabio Utzig | c58842e | 2019-11-28 10:30:01 -0300 | [diff] [blame] | 13 | CONFIG_BOOT_UPGRADE_ONLY=n |
| 14 | CONFIG_BOOT_SWAP_USING_MOVE=n |
| Fabio Utzig | d0533ed | 2018-12-19 07:56:33 -0200 | [diff] [blame] | 15 | CONFIG_BOOT_BOOTSTRAP=n |
| 16 | |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 17 | ### Default to RSA |
| 18 | CONFIG_BOOT_SIGNATURE_TYPE_RSA=y |
| Fabio Utzig | 105b59a | 2019-05-13 15:08:12 -0700 | [diff] [blame] | 19 | CONFIG_BOOT_SIGNATURE_TYPE_RSA_LEN=2048 |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 20 | CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=n |
| Fabio Utzig | 1171df9 | 2019-05-10 19:26:38 -0300 | [diff] [blame] | 21 | CONFIG_BOOT_SIGNATURE_TYPE_ED25519=n |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 22 | |
| Carles Cufi | 29af9fe | 2018-06-11 13:31:41 +0200 | [diff] [blame] | 23 | ### The bootloader generates its own signature verification based on a |
| 24 | ### key file which needs to be provided and needs to match the selected signing |
| 25 | ### algorithm (CONFIG_BOOT_SIGNATURE_TYPE_). |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 26 | ### The PEM files below are provided as examples. |
| Carles Cufi | 29af9fe | 2018-06-11 13:31:41 +0200 | [diff] [blame] | 27 | CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-2048.pem" |
| Fabio Utzig | 105b59a | 2019-05-13 15:08:12 -0700 | [diff] [blame] | 28 | #CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-3072.pem" |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 29 | #CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ec-p256.pem" |
| Fabio Utzig | 1171df9 | 2019-05-10 19:26:38 -0300 | [diff] [blame] | 30 | #CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ed25519.pem" |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 31 | |
| David Brown | 0bae965 | 2017-10-19 16:45:09 -0600 | [diff] [blame] | 32 | ### mbedTLS has its own heap |
| 33 | # CONFIG_HEAP_MEM_POOL_SIZE is not set |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 34 | |
| Marti Bolivar | a4818a5 | 2018-04-12 13:02:38 -0400 | [diff] [blame] | 35 | ### We never want Zephyr's copy of tinycrypt. If tinycrypt is needed, |
| 36 | ### MCUboot has its own copy in tree. |
| 37 | # CONFIG_TINYCRYPT is not set |
| 38 | # CONFIG_TINYCRYPT_ECC_DSA is not set |
| 39 | # CONFIG_TINYCRYPT_SHA256 is not set |
| 40 | |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 41 | CONFIG_FLASH=y |
| Ricardo Salveti | 3dbf222 | 2017-01-18 11:34:47 -0200 | [diff] [blame] | 42 | |
| Marti Bolivar | 0e25909 | 2018-09-05 14:54:06 -0400 | [diff] [blame] | 43 | ### Various Zephyr boards enable features that we don't want. |
| Marti Bolivar | f4d0e1a | 2017-08-30 18:39:07 -0400 | [diff] [blame] | 44 | # CONFIG_BT is not set |
| Marti Bolivar | 0e25909 | 2018-09-05 14:54:06 -0400 | [diff] [blame] | 45 | # CONFIG_BT_CTLR is not set |
| Marti Bolivar | f4d0e1a | 2017-08-30 18:39:07 -0400 | [diff] [blame] | 46 | # CONFIG_I2C is not set |
| Michael Scott | f9be7a9 | 2019-02-01 11:19:47 -0800 | [diff] [blame] | 47 | |
| Piotr Mienkowski | 15aa6ef | 2019-04-08 22:48:15 +0200 | [diff] [blame] | 48 | CONFIG_LOG=y |
| 49 | CONFIG_LOG_IMMEDIATE=y |
| Michael Scott | f9be7a9 | 2019-02-01 11:19:47 -0800 | [diff] [blame] | 50 | ### Ensure Zephyr logging changes don't use more resources |
| 51 | CONFIG_LOG_DEFAULT_LEVEL=0 |