Skip to content

[nrf fromtree] zephyr: Fix BOOT_DOWNGRADE_PREVENTION_CHOICE symbol #573

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed

[nrf fromtree] zephyr: Fix BOOT_DOWNGRADE_PREVENTION_CHOICE symbol #573

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 10 additions & 10 deletions boot/zephyr/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1123,6 +1123,16 @@ config MCUBOOT_DOWNGRADE_PREVENTION
only protects against some attacks against version downgrades (for
example, a JTAG could be used to write an older version).

config MCUBOOT_HW_DOWNGRADE_PREVENTION
bool "HW based downgrade prevention"
help
Prevent undesirable/malicious software downgrades. When this option is
set, any upgrade must have greater or equal security counter value.
Because of the acceptance of equal values it allows for software
downgrade to some extent.

endchoice

config MCUBOOT_DOWNGRADE_PREVENTION_SECURITY_COUNTER
bool "Use image security counter instead of version number"
depends on MCUBOOT_DOWNGRADE_PREVENTION
Expand All @@ -1134,14 +1144,6 @@ config MCUBOOT_DOWNGRADE_PREVENTION_SECURITY_COUNTER
Because of the acceptance of equal values it allows for software
downgrades to some extent.

config MCUBOOT_HW_DOWNGRADE_PREVENTION
bool "HW based downgrade prevention"
help
Prevent undesirable/malicious software downgrades. When this option is
set, any upgrade must have greater or equal security counter value.
Because of the acceptance of equal values it allows for software
downgrade to some extent.

config MCUBOOT_HW_DOWNGRADE_PREVENTION_COUNTER_LIMITED
bool "HW based downgrade prevention counter has limited number of updates"
depends on MCUBOOT_HW_DOWNGRADE_PREVENTION
Expand All @@ -1165,8 +1167,6 @@ config MCUBOOT_HW_DOWNGRADE_PREVENTION_LOCK
This prevents the application from accidental updates of the counter,
that may invalidate the currently running image.

endchoice

config MCUBOOT_UUID_VID
bool "Expect vendor unique identifier in image's TLV"
help
Expand Down