ASN.1 Decoding bypass that allows to reduce size of flash when ED25519 is used #347
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
de-nordic
force-pushed
the
ed25519-asn1-bypass
branch
from
efe3c3f to
f5ed228
Compare
de-nordic
force-pushed
the
ed25519-asn1-bypass
branch
2 times, most recently
from
82bd418 to
8c99a50
Compare
nvlsianpu
approved these changes
Oct 10, 2024
nordicjm
approved these changes
Oct 14, 2024
|
@de-nordic Needs rebase |
…ey import The commit adds MCUBOOT_KEY_IMPORT_BYPASS_ASN configuration option that allows bypassing ASN.1 decoding of ED25519 public key, compiled into MCUboot. When the option is enabled the key will be accessed directly and ASN.1 processing is not compiled in, resulting in smaller footprint of MCUboot, at a cost of reduced detection of invalid key, i.e. public key designated for different method than compiled in. Upstream PR: mcu-tools/mcuboot#2089 Signed-off-by: Dominik Ermel <[email protected]>
…SS_ASN The option enables MCUboot configuration option MCUBOOT_KEY_IMPORT_BYPASS_ASN. Upstream PR: mcu-tools/mcuboot#2089 Signed-off-by: Dominik Ermel <[email protected]>
Allow ASN.1 bypass for image verification. Signed-off-by: Dominik Ermel <[email protected]>
de-nordic
force-pushed
the
ed25519-asn1-bypass
branch
from
8c99a50 to
b828c36
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The PR adds options that allow to remove run-time ASN.1 decoding of ED25519 public key embedded in MCUboot build, which in turn reduces flash size used by MCUboot.
When building nrf52840dk Hello world:
We get 41898 bytes of flash for MCUboot without bypass and 41386 when
-Dmcuboot_CONFIG_BOOT_KEY_IMPORT_BYPASS_ASN=yis added to command line.