MCUBOOT Hardware Key

[Jasonho]

Hi,

I trying to enable Hardware Key for mcuboot.

I do the following at mcuboot.conf

CONFIG_BOOT_HW_KEY=y

But I got the following error:

C:/nrfconnect/v1.5.0/bootloader/mcuboot/boot/zephyr/keys.c:70:21: error: conflicting types for 'bootutil_keys'        
   70 | struct bootutil_key bootutil_keys[1] = {
      |                     ^~~~~~~~~~~~~
In file included from C:/nrfconnect/v1.5.0/bootloader/mcuboot/boot/zephyr/keys.c:20:
C:/nrfconnect/v1.5.0/bootloader/mcuboot/boot/bootutil/include/bootutil/sign_key.h:38:34: note: previous declaration of 'bootutil_keys' was here
   38 | extern const struct bootutil_key bootutil_keys[];
      |                                  ^~~~~~~~~~~~~

Do I miss something? Thanks,

 

[Amanda Hsieh]

Hi, 

This is a type conflict. One is const struct while the other is struct. Try defining the array as const

const struct bootutil_key bootutil_keys[1] = {...};

-Amanda H.

[Jasonho]

#ifndef MCUBOOT_HW_KEY
struct bootutil_key {
    const uint8_t *key;
    const unsigned int *len;
};

extern const struct bootutil_key bootutil_keys[];
#else
struct bootutil_key {
    uint8_t *key;
    unsigned int *len;
};

extern struct bootutil_key bootutil_keys[];

/**
 * Retrieve the hash of the corresponding public key for image authentication.
 *
 * @param[in]      image_index      Index of the image to be authenticated.
 * @param[out]     public_key_hash  Buffer to store the key-hash in.
 * @param[in,out]  key_hash_size    As input the size of the buffer. As output
 *                                  the actual key-hash length.
 *
 * @return                          0 on success; nonzero on failure.
 */
int boot_retrieve_public_key_hash(uint8_t image_index,
                                  uint8_t *public_key_hash,
                                  size_t *key_hash_size);
#endif /* !MCUBOOT_HW_KEY */

The above is from sign_key.h

You can see that if MCUBOOT_HW_KEY is defined

It will use

extern struct bootutil_key bootutil_keys[];

So the issue is why MCUBOOT_HW_KEY is not define if I enable BOOT_HW_KEY

But in keys.c, MCUBOOT_HW_KEY is defined.

I think this is the main issue.

modify the code in your way is not appropriated 

[Amanda Hsieh]

Hi Jasonho, 

Mcuboot Hardware Key feature is not supported on NCS 1.5.

-Amanda H.