Mahavir Jain 8da7627526 change(bootloader): honor SECURE_BOOT_ALLOW_UNUSED_DIGEST_SLOTS during first boot ...

Previously the bootloader unconditionally revoked unused secure boot key
digest slots while permanently enabling secure boot on the first boot,
ignoring CONFIG_SECURE_BOOT_ALLOW_UNUSED_DIGEST_SLOTS. Now the config is
honored on this path too: when set, the unused digest slots are left
un-revoked. This is safe as long as the debug and download interfaces are
disabled.

Update the Kconfig help and the Secure Boot v2 guide (en and zh_CN)
accordingly.

2026-06-10 13:09:10 +05:30

..

secure_boot_ecdsa_signature.c

fix(secure_boot_v2): select correct secure boot algorithm based on key

2026-05-26 12:57:34 +08:00

secure_boot_rsa_signature.c

feat: migrates bootloader_support to PSA APIs

2025-12-30 09:31:49 +05:30

secure_boot_signature_priv.h

feat: enabled secure boot support esp32h21

2025-04-25 17:48:25 +05:30

secure_boot_signatures_app.c

feat(bootloader_support): remove P192 curve support

2026-04-30 18:04:00 +08:00

secure_boot_signatures_bootloader.c

feat(bootloader_support): remove P192 curve support

2026-04-30 18:04:00 +08:00

secure_boot.c

change(bootloader): honor SECURE_BOOT_ALLOW_UNUSED_DIGEST_SLOTS during first boot

2026-06-10 13:09:10 +05:30