NISB with ECDSA-P256 for nrf54l15

[Nilesh]

Hi,

I recently checked support of MCUBoot validation and from NSIB for nrf54l15. (sdk 3.0.0 and above)

During this, I enabled Signature algo as ecdsa-p256. 

SB_CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y

And it worked. However, I noticed, this config was applied to mcuboot only and not to NSIB. NSIB used ed25519 algo only.

Later on, reading some documentation come to know for nrf54l15 only ed25519 is supported. 

I assume, this is due to the key provisioning support.

Wanted to clarify my above points here if anyone can help.

Also, wanted to know is there is any plan to support ecdsa-p256 for nrf54l15? If not, then is there any limitations we see and needs to be considered in case need to enable it?

I also noticed, even if we enable 

CONFIG_FPROTECT=y

getting warning and the flag remains disabled. This is for nrf54l15 only.

Can anyone please help?

Thanks,

Nilesh

[Menon]

Hello,

Have you tested whether FPROTECT is working properly? I think you can ignore the warning. Take a look at this PR,  I believe the warning you're seeing is just a leftover from an older Kconfig guard. If it's having any impact on DFU, please let me know the issue. Sharing more details, such as logs, could help.

Kind regards,
Abhijith