Hello world + BOOT_ENCRYPT_EC256 can not compile with ncs-1.8.0/1.9.1

[Siddharth Kachhia]

Need to create Encrypt Image for nRF5340DK board and used Hello-world sample for beginning.

On Enabling BOOT_ENCRYPT_EC256 Kconfig option, I can not compile Hello-world sample application for ncs-v1.8.0/1.9.1.

How does this Encrypted image build with mcuboot as child image. I want to perform DFU with encrypted images on secondary slot.

Getting this error:

[Amanda Hsieh]

Hi, 

If you want to sing the image with a key, it needs mcuboot_CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y. See Adding a custom signature key file and this thread. 

Regards,
Amanda

[Siddharth Kachhia]

Want to encrypt the image with EC256 keys. Signature is done but Encryption Kconfig option is not working.

For Encryption, I have enabled BOOT_ENCRYPT_EC256 Kconfig option in mcuboot. I could not encrypt the app_update.bin in build/zephyr folder.

How can I enable Encryption with app_update.bin image which is used for FOTA.

Thanks in Advance!

[Amanda Hsieh]

Hi, 

You can set a prj.conf under child_image\mcuboot to include the following configs:

CONFIG_FLASH=y

CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y
CONFIG_BOOT_SIGNATURE_KEY_FILE="enc-ec256-priv.pem"
CONFIG_MAIN_STACK_SIZE=10240
CONFIG_PM_PARTITION_SIZE_MCUBOOT=0x10000
CONFIG_MULTITHREADING=y

CONFIG_LOG=y
CONFIG_LOG_MODE_MINIMAL=y

Here is the example: hello_world_mcuboot_EC256_286681.7z (NCS v1.9.1)

-Amanda