| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 1 | CONFIG_CONSOLE_HANDLER=y |
| Ricardo Salveti | 7cf3d9e | 2017-01-18 16:38:22 -0200 | [diff] [blame] | 2 | CONFIG_SYS_LOG=y |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 3 | CONFIG_DEBUG=y |
| Ricardo Salveti | 8e4d44d | 2017-02-27 23:00:31 -0300 | [diff] [blame] | 4 | CONFIG_SYSTEM_CLOCK_DISABLE=y |
| Carles Cufi | df4d9a4 | 2018-06-15 12:42:26 +0200 | [diff] [blame^] | 5 | CONFIG_SYS_POWER_MANAGEMENT=n |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 6 | |
| 7 | CONFIG_MAIN_STACK_SIZE=10240 |
| Marti Bolivar | a4818a5 | 2018-04-12 13:02:38 -0400 | [diff] [blame] | 8 | CONFIG_MBEDTLS_CFG_FILE="mcuboot-mbedtls-cfg.h" |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 9 | |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 10 | ### Default to RSA |
| 11 | CONFIG_BOOT_SIGNATURE_TYPE_RSA=y |
| 12 | CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=n |
| 13 | |
| Carles Cufi | 29af9fe | 2018-06-11 13:31:41 +0200 | [diff] [blame] | 14 | ### The bootloader generates its own signature verification based on a |
| 15 | ### key file which needs to be provided and needs to match the selected signing |
| 16 | ### algorithm (CONFIG_BOOT_SIGNATURE_TYPE_). |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 17 | ### The PEM files below are provided as examples. |
| Carles Cufi | 29af9fe | 2018-06-11 13:31:41 +0200 | [diff] [blame] | 18 | CONFIG_BOOT_SIGNATURE_KEY_FILE="root-rsa-2048.pem" |
| Fabio Utzig | c690c76 | 2018-04-26 10:51:09 -0300 | [diff] [blame] | 19 | #CONFIG_BOOT_SIGNATURE_KEY_FILE="root-ec-p256.pem" |
| 20 | |
| David Brown | 0bae965 | 2017-10-19 16:45:09 -0600 | [diff] [blame] | 21 | ### mbedTLS has its own heap |
| 22 | # CONFIG_HEAP_MEM_POOL_SIZE is not set |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 23 | |
| Marti Bolivar | a4818a5 | 2018-04-12 13:02:38 -0400 | [diff] [blame] | 24 | ### We never want Zephyr's copy of tinycrypt. If tinycrypt is needed, |
| 25 | ### MCUboot has its own copy in tree. |
| 26 | # CONFIG_TINYCRYPT is not set |
| 27 | # CONFIG_TINYCRYPT_ECC_DSA is not set |
| 28 | # CONFIG_TINYCRYPT_SHA256 is not set |
| 29 | |
| David Brown | 5153bd6 | 2017-01-06 11:16:53 -0700 | [diff] [blame] | 30 | CONFIG_FLASH=y |
| David Brown | 0d1b0b9 | 2017-07-26 00:34:56 -0600 | [diff] [blame] | 31 | CONFIG_MPU_ALLOW_FLASH_WRITE=y |
| Ricardo Salveti | 3dbf222 | 2017-01-18 11:34:47 -0200 | [diff] [blame] | 32 | |
| Andrew Boie | 240ac64 | 2017-03-02 13:40:39 -0800 | [diff] [blame] | 33 | CONFIG_MULTITHREADING=n |
| Marti Bolivar | f4d0e1a | 2017-08-30 18:39:07 -0400 | [diff] [blame] | 34 | |
| 35 | ### Zephyr keeps turning on major subsystems by default that we don't want. |
| 36 | # CONFIG_BT is not set |
| 37 | # CONFIG_I2C is not set |