Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

refactor(esp_system): deduplicate ROM fast wake RTC digest reservation

Browse Source 
The digest length and the condition that reserves it at the end of RTC RAM were
duplicated in seven places. Hold the reservation in a hidden Kconfig value that
is zero when the feature does not apply, so every consumer subtracts it
unconditionally, and derive ESP_SECURE_BOOT_DIGEST_LEN from it.
This commit is contained in:
harshal.patil
2026-07-30 02:06:55 +05:30
parent f2b2bac778
commit e1d60fb89f
15 changed files with 57 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
components/bootloader/Kconfig.projbuild
View File

@@ -593,6 +593,27 @@ menu "Security features"
endchoice
config SECURE_BOOT_IMAGE_DIGEST_LEN
int
default 48 if SECURE_BOOT_ECDSA_KEY_LEN_384_BITS
default 32
help
Length in bytes of the application image digest used by Secure Boot V2.
Kept in sync with ESP_SECURE_BOOT_DIGEST_LEN in esp_secure_boot.h, and
usable from linker scripts and from components that cannot depend on
bootloader_support.
config SECURE_BOOT_ROM_FAST_WAKE_RESERVE_SIZE
int
default SECURE_BOOT_IMAGE_DIGEST_LEN if SECURE_BOOT && ESP_ROM_SUPPORT_SECURE_BOOT_FAST_WAKEUP
default 0
help
Number of bytes that must be left untouched at the end of RTC/LP RAM for
the ROM secure boot fast wake up feature, which stores the digest of the
verified application image there and re-checks it on deep sleep wake up.
Zero when the feature is not applicable, so that consumers can subtract
this value unconditionally.
config SECURE_SIGNED_ON_BOOT_NO_SECURE_BOOT
bool "Bootloader verifies app signatures"
default n