[nrf noup] zephyr: Remove dependency on key import when KMU is used #500
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
nvlsianpu
approved these changes
Aug 7, 2025
Contributor
|
congratulation @de-nordic #500 th PR here 🌹 🌷 💮 |
gchwier
approved these changes
Aug 7, 2025
Contributor
Author
Thanks! |
de-nordic
force-pushed
the
not-needed-import-when-kmu
branch
from
e41a3fb to
5be564f
Compare
|
nrf-squash! [nrf noup] bootutil: Add support for KMU stored ED25519 signature key We are not importing keys, from MCUboot, when KMU is in use. Signed-off-by: Dominik Ermel <[email protected]>
de-nordic
force-pushed
the
not-needed-import-when-kmu
branch
from
5be564f to
0a0a511
Compare
|
nvlsianpu
reviewed
Oct 29, 2025
Contributor
nvlsianpu
left a comment
nvlsianpu
left a comment
There was a problem hiding this comment.
I think now this can be some more complicated as: PSA encryption (x25519) imports keys.
| select PSA_WANT_ALG_PURE_EDDSA | ||
| select PSA_WANT_ECC_TWISTED_EDWARDS_255 | ||
| select PSA_WANT_ECC_MONTGOMERY_255 | ||
| select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT if !PSA_CORE_LITE |
Contributor
There was a problem hiding this comment.
Suggested change
| select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT if !PSA_CORE_LITE | |
| select PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT if (!PSA_CORE_LITE || !BOOT_SIGNATURE_USING_KMU) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
nrf-squash! [nrf noup] bootutil: Add support for KMU stored ED25519 signature key
We are not importing keys, from MCUboot, when KMU is in use.