wehub-resource-sync
24 lines
834 B
Plaintext
24 lines
834 B
Plaintext
# NOTE: This sdkconfig is intended solely for CI build purposes - to verify ESP-TEE
|
|
# builds across various configurations - and is not intended for production use.
|
|
|
|
# Reducing TEE IRAM size
|
|
# 30KB
|
|
CONFIG_SECURE_TEE_IRAM_SIZE=0x7800
|
|
|
|
# TEE Secure Storage: Release mode
|
|
CONFIG_SECURE_TEE_SEC_STG_MODE_RELEASE=y
|
|
CONFIG_SECURE_TEE_SEC_STG_EFUSE_HMAC_KEY_ID=5
|
|
|
|
# Disabling flash protection over SPI1
|
|
CONFIG_SECURE_TEE_EXT_FLASH_MEMPROT_SPI1=n
|
|
|
|
# Secure Boot
|
|
CONFIG_PARTITION_TABLE_OFFSET=0xF000
|
|
CONFIG_SECURE_BOOT=y
|
|
# ECDSA Secure Boot V2 is gated behind the insecure option on the affected SoCs
|
|
CONFIG_SECURE_BOOT_INSECURE=y
|
|
CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA=y
|
|
CONFIG_SECURE_SIGNED_APPS_ECDSA_V2_SCHEME=y
|
|
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=y
|
|
CONFIG_SECURE_BOOT_SIGNING_KEY="test_keys/secure_boot_signing_key_ecdsa_p256.pem"
|