doc/../dfu/bootloader_keys: mark ed25519 as only supported #520
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
nvlsianpu
added
the
doc-required
github-actions
bot
added
the
changelog-entry-required
|
You can find the documentation preview for this PR here. |
maciejpietras
approved these changes
Nov 27, 2025
nvlsianpu
force-pushed
the
doc/boot_key_ed25519
branch
from
cdb1da3 to
2052b4f
Compare
peknis
requested changes
Nov 28, 2025
|
|
||
| MCUboot in |BMshort| supports the following signature types: | ||
| MCUboot in |BMshort| allow a few signatures types. | ||
| The ed25519 signature type is recommended as supported for nRF54L Series devices with cryptographic hardware support (CRACEN and KMU). |
There was a problem hiding this comment.
Suggested change
| The ed25519 signature type is recommended as supported for nRF54L Series devices with cryptographic hardware support (CRACEN and KMU). | |
| The Ed25519 signature type is recommended as supported for nRF54L Series devices with cryptographic hardware support (CRACEN and KMU). |
| MCUboot in |BMshort| supports the following signature types: | ||
| MCUboot in |BMshort| allow a few signatures types. | ||
| The ed25519 signature type is recommended as supported for nRF54L Series devices with cryptographic hardware support (CRACEN and KMU). | ||
| It is recommended to use pure version of ed25519 signature (to enabled use :kconfig:option:`SB_CONFIG_BM_BOOT_IMG_HASH_ALG_PURE``). |
There was a problem hiding this comment.
Suggested change
| It is recommended to use pure version of ed25519 signature (to enabled use :kconfig:option:`SB_CONFIG_BM_BOOT_IMG_HASH_ALG_PURE``). | |
| It is recommended to use the pure version of the Ed25519 signature (:kconfig:option:`SB_CONFIG_BM_BOOT_IMG_HASH_ALG_PURE``). |
| MCUboot in |BMshort| allow a few signatures types. | ||
| The ed25519 signature type is recommended as supported for nRF54L Series devices with cryptographic hardware support (CRACEN and KMU). | ||
| It is recommended to use pure version of ed25519 signature (to enabled use :kconfig:option:`SB_CONFIG_BM_BOOT_IMG_HASH_ALG_PURE``). | ||
| Rest of the signature types are for evaluation purpose only and are inherited from the MCUboot project. |
There was a problem hiding this comment.
Suggested change
| Rest of the signature types are for evaluation purpose only and are inherited from the MCUboot project. | |
| The rest of the signature types are for evaluation purpose only and are inherited from the MCUboot project. |
| It is recommended to use pure version of ed25519 signature (to enabled use :kconfig:option:`SB_CONFIG_BM_BOOT_IMG_HASH_ALG_PURE``). | ||
| Rest of the signature types are for evaluation purpose only and are inherited from the MCUboot project. | ||
|
|
||
| The available signature types are listed in the table below: |
There was a problem hiding this comment.
Suggested change
| The available signature types are listed in the table below: | |
| The available signature types are listed in the following table: |
Contributor
|
nit: Format looks a bit off in the commit title. |
| | Type | Description | Sysbuild Kconfig | | ||
| +============+======================================================================+=============================================================================+ | ||
| | None | No signature verification (insecure) | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_NONE` | | ||
| | None | No signature verification (insecure, development helper) | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_NONE` | |
Contributor
There was a problem hiding this comment.
I find Development helper a bit unclear, is this what you mean?
Suggested change
| | None | No signature verification (insecure, development helper) | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_NONE` | | |
| | None | No signature verification (insecure, for development only) | :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_TYPE_NONE` | |
ED25519 signature type is the only supported signature on nRF54l SoC's. The Rest are for development purposes only. Signed-off-by: Andrzej Puzdrowski <[email protected]>
nvlsianpu
force-pushed
the
doc/boot_key_ed25519
branch
from
2052b4f to
fa6e347
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Specifies:
ed25519 signature type is only supported signature on nRF54l SoC's rest are for eveluation