blob: 7107e7eb9576160e12d497c89bc7f8a018f0a8b4 [file] [log] [blame]
Gustavo Henrique Nihei523ef3f2021-11-12 17:53:18 -03001# SPDX-FileCopyrightText: 2021 Espressif Systems (Shanghai) CO LTD
Almir Okatoeb6b7bf2021-09-07 17:06:35 -03002#
3# SPDX-License-Identifier: Apache-2.0
4
Shubham Kulkarni052561d2021-07-20 11:42:44 +05305CONFIG_ESP_BOOTLOADER_SIZE=0xF000
Almir Okatoa1d641d2022-02-21 19:31:46 -03006CONFIG_ESP_IMAGE0_PRIMARY_START_ADDRESS=0x10000
Shubham Kulkarni052561d2021-07-20 11:42:44 +05307CONFIG_ESP_APPLICATION_SIZE=0x100000
Almir Okatoa1d641d2022-02-21 19:31:46 -03008CONFIG_ESP_IMAGE0_SECONDARY_START_ADDRESS=0x110000
Shubham Kulkarni052561d2021-07-20 11:42:44 +05309CONFIG_ESP_MCUBOOT_WDT_ENABLE=y
10CONFIG_ESP_SCRATCH_OFFSET=0x210000
11CONFIG_ESP_SCRATCH_SIZE=0x40000
Almir Okatoeb6b7bf2021-09-07 17:06:35 -030012
Almir Okatoa1d641d2022-02-21 19:31:46 -030013# Enables multi image, if it is not defined, it is assumed
14# only one updatable image
15# CONFIG_ESP_IMAGE_NUMBER=2
16
17# Enables multi image boot on independent processors
18# (main host OS is not responsible for booting the second image)
19# Use only with CONFIG_ESP_IMAGE_NUMBER=2
20# CONFIG_ESP_MULTI_PROCESSOR_BOOT=y
21
22# Example of values to be used when multi image is enabled
23# Notice that the OS layer and update agent must be aware
24# of these regions
25# CONFIG_ESP_APPLICATION_SIZE=0x50000
26# CONFIG_ESP_IMAGE0_PRIMARY_START_ADDRESS=0x10000
27# CONFIG_ESP_IMAGE0_SECONDARY_START_ADDRESS=0x60000
28# CONFIG_ESP_IMAGE1_PRIMARY_START_ADDRESS=0xB0000
29# CONFIG_ESP_IMAGE1_SECONDARY_START_ADDRESS=0x100000
30# CONFIG_ESP_SCRATCH_OFFSET=0x150000
31# CONFIG_ESP_SCRATCH_SIZE=0x40000
32
Almir Okatoeb6b7bf2021-09-07 17:06:35 -030033# CONFIG_ESP_SIGN_EC256=y
34# CONFIG_ESP_SIGN_ED25519=n
35# CONFIG_ESP_SIGN_RSA=n
36# CONFIG_ESP_SIGN_RSA_LEN=2048
37
38# Use Tinycrypt lib for EC256 or ED25519 signing
39# CONFIG_ESP_USE_TINYCRYPT=y
40# Use Mbed TLS lib for RSA image signing
41# CONFIG_ESP_USE_MBEDTLS=n
42
43# It is strongly recommended to generate a new signing key
44# using imgtool instead of use the existent sample
45# CONFIG_ESP_SIGN_KEY_FILE=root-ec-p256.pem
Gustavo Henrique Nihei523ef3f2021-11-12 17:53:18 -030046
47# Hardware Secure Boot related options
48# CONFIG_SECURE_SIGNED_ON_BOOT=1
49# CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME=1
50# CONFIG_SECURE_BOOT=1
51# CONFIG_SECURE_BOOT_V2_ENABLED=1
52# CONFIG_SECURE_BOOT_SUPPORTS_RSA=1
53
Almir Okato14763b12021-11-25 00:45:26 -030054# Hardware Flash Encryption related options
55# CONFIG_SECURE_FLASH_ENC_ENABLED=1
56# CONFIG_SECURE_FLASH_UART_BOOTLOADER_ALLOW_ENC=1
57# CONFIG_SECURE_FLASH_UART_BOOTLOADER_ALLOW_DEC=1
58# CONFIG_SECURE_FLASH_UART_BOOTLOADER_ALLOW_CACHE=1
59# CONFIG_SECURE_FLASH_ENCRYPTION_MODE_DEVELOPMENT=1
60# CONFIG_SECURE_BOOT_ALLOW_JTAG=1
61# CONFIG_SECURE_BOOT_ALLOW_ROM_BASIC=1
62
Gustavo Henrique Nihei523ef3f2021-11-12 17:53:18 -030063# Options for enabling eFuse emulation in Flash
64# CONFIG_EFUSE_VIRTUAL=1
65# CONFIG_EFUSE_VIRTUAL_KEEP_IN_FLASH=1