Skip to content

Commit 2052b4f

Browse files
committed
doc/../dfu/bootloader_keys: mark ed25519 as only supported
Specifies: ed25519 signature type is only supported signature on nRF54l SoC's rest are for evaluation Signed-off-by: Andrzej Puzdrowski <[email protected]>
1 parent 7baf68d commit 2052b4f

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

doc/nrf-bm/app_dev/dfu/bootloader_keys.rst

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,17 @@ For testing and production use cases, unique signing keys must be generated and
1111
Signature type
1212
**************
1313

14-
MCUboot in |BMshort| supports the following signature types:
14+
MCUboot in |BMshort| allow a few signatures types.
15+
The ed25519 signature type is recommended as supported for nRF54L Series devices with cryptographic hardware support (CRACEN and KMU).
16+
It is recommended to use pure version of ed25519 signature (to enabled use :kconfig:option:`SB_CONFIG_BM_BOOT_IMG_HASH_ALG_PURE``).
17+
Rest of the signature types are for evaluation purpose only and are inherited from the MCUboot project.
18+
19+
The available signature types are listed in the table below:
1520

1621
+------------+----------------------------------------------------------------------+-----------------------------------------------------------------------------+
1722
| Type | Description | Sysbuild Kconfig |
1823
+============+======================================================================+=============================================================================+
19-
| None | No signature verification (insecure) | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_NONE` |
24+
| None | No signature verification (insecure, development helper) | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_NONE` |
2025
+------------+----------------------------------------------------------------------+-----------------------------------------------------------------------------+
2126
| RSA | RSA-2048 or RSA-3072 signature | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_RSA` |
2227
+------------+----------------------------------------------------------------------+-----------------------------------------------------------------------------+

0 commit comments

Comments
 (0)